@volter/world-platform 2.0.40 → 3.0.1

package/dist/client/platform.css

@@ -20,6 +20,8 @@ a.button.primary { background: var(--accent); border-color: var(--accent); color
 /* the sign-in card: the brand, one way in */
 body.portal #root { width: min(440px, 100%); }
 body.portal .card { width: 100%; }
+/* the platform's own server pages (pages.ts pageShell: the CLI's approval, a refusal) are the same narrow card */
+body.portal > main.card { width: min(480px, 100%); }
 body.portal .card .brand h1 { font-size: 15px; margin: 0; }
 body.portal .card .brand h1 a { color: var(--ink); text-decoration: none; }
 main.boot { max-width: 520px; display: grid; gap: 14px; padding-top: 18vh; }

package/dist/client/platform.tsx

@@ -79,7 +79,7 @@ type OrgWorld = { name: string; host: string; base: string; provisionedAt: strin
 /** An invitation to your address still pending, where the provider keeps them (GET /-/orgs). */
 type Invitation = { id: string; org: { id: string; slug: string | null; name: string }; role: string; expiresAt: string | null };
 type OrgRow = { id: string; slug: string | null; name: string; role: string; held?: string | null; flags?: Record<string, boolean>; worlds?: OrgWorld[]; security?: { membersCanInvite: boolean } };
-type WorldRow = { org: string; world: string; name: string; base: string; origin?: string; twins: Array<{ vendor: string }>; /** kept to named members */ restricted?: boolean };
+type WorldRow = { org: string; world: string; name: string; base: string; origin?: string; twins: Array<{ vendor: string }>; /** kept to named members */ restricted?: boolean; /** its landed changesets, when the World answered */ landed?: number };
 const slugOf = (o: OrgRow): string => o.slug ?? o.id;
 const isAdmin = (o: OrgRow): boolean => o.role === 'admin' || o.role === 'org:admin';
 const NAME = /^[a-z0-9][a-z0-9-]{0,38}$/;
@@ -226,7 +226,8 @@ function Palette({ open, onClose, orgs, shown, worlds, pages, support }: { open:
   const items: Item[] = useMemo(() => {
     const all: Item[] = [];
     if (shown) for (const [k, label] of pages) all.push({ label, hint: shown.name, run: () => go({ kind: 'org', org: slugOf(shown), page: k }) });
-    for (const w of worlds) all.push({ label: `Open ${w.name}`, hint: 'World', run: () => { window.location.assign(`/-/worlds/${w.name}/open`); } });
+    // a World opens at an origin of its own, where its host serves its dashboard; one without has nothing to open
+    for (const w of worlds) if (w.origin) all.push({ label: `Open ${w.name}`, hint: 'World', run: () => { window.location.assign(`/-/worlds/${w.name}/open`); } });
     for (const o of orgs) if (o.id !== shown?.id) all.push({ label: `Switch to ${o.name}`, hint: 'org', run: () => go({ kind: 'org', org: slugOf(o), page: 'worlds' }) });
     all.push({ label: 'Account and tokens', hint: 'you', run: () => go({ kind: 'you', page: 'account' }) });
     if (support) all.push({ label: 'Help', hint: 'you', run: () => go({ kind: 'you', page: 'help' }) });
@@ -303,7 +304,7 @@ function WorldsPage({ org, rows, load, orgs, allRows, version, readOnly, onChang
   return (
     <>
       <Head title="Worlds" count={load.state === 'ok' ? rows.length : undefined}>{rows.length > 0 ? <input type="search" className="toolbar-search" aria-label="Find a World" placeholder="Find a World…" value={q} onChange={(e) => setQ(e.target.value)} /> : null}{make}</Head>
-      <GettingStarted orgs={orgs} worlds={allRows - rows.filter((r) => r.name.split('/')[1] === 'sample').length} firstWorld={rows.find((r) => r.name.split('/')[1] !== 'sample')?.name} version={version} />
+      <GettingStarted orgs={orgs} worlds={allRows - rows.filter((r) => r.name.split('/')[1] === 'sample').length} firstWorld={rows.find((r) => r.name.split('/')[1] !== 'sample')?.name} pushed={rows.some((r) => r.name.split('/')[1] !== 'sample' && (r.landed ?? 0) > 0)} version={version} refresh={onChanged} />
       {load.state !== 'ok' ? <Pending load={load} what="the org's Worlds" retry={onChanged} /> : rows.length === 0 ? (
         <Empty title="No Worlds yet" action={<div className="actions-row">{make}{!readOnly ? <button type="button" onClick={() => void trySample()} disabled={sampling}>{sampling ? 'Making the sample…' : 'Try a sample World'}</button> : null}</div>}>A World stands in for the services your app uses: your app talks to it as it would to Stripe or GitHub, nothing real happens, and you see everything it did on each vendor's own screens.{!readOnly ? <span className="mode sample-note">The sample is a small shop's Stripe and Slack, seeded as its app would leave them. It counts as one of the org's Worlds; delete it when you are done.</span> : null}</Empty>
       ) : (
@@ -312,11 +313,11 @@ function WorldsPage({ org, rows, load, orgs, allRows, version, readOnly, onChang
             <thead><tr><th>World</th><th>Stand-ins for</th><th>Host</th><th>Created</th><th className="num"><span className="sr">Actions</span></th></tr></thead>
             <tbody>{shown.map((w) => { const rec = record.get(w.name); const short = w.name.split('/')[1] ?? w.name; return (<React.Fragment key={w.name}>
               <tr>
-                <td><span className="vendor-cell"><Initial of={short} small /><span className="who"><span className="name-line"><a href={`/-/worlds/${w.name}/open`}>{short}</a>{w.restricted ? <span className="badge restricted" title="Only some members of the org reach it">Restricted</span> : null}</span>{w.origin ? <span className="mode mono">{new URL(w.origin).host}</span> : null}</span></span></td>
+                <td><span className="vendor-cell"><Initial of={short} small /><span className="who"><span className="name-line">{w.origin ? <a href={`/-/worlds/${w.name}/open`}>{short}</a> : short}{w.restricted ? <span className="badge restricted" title="Only some members of the org reach it">Restricted</span> : null}</span>{w.origin ? <span className="mode mono">{new URL(w.origin).host}</span> : null}</span></span></td>
                 <td><span className="marks" title={w.twins.map((t) => vendorName(t.vendor)).join(', ')}>{w.twins.slice(0, 5).map((t) => <Mark key={t.vendor} vendor={t.vendor} />)}{w.twins.length > 5 ? <span className="mode">+{w.twins.length - 5}</span> : null}<span className="mode">{w.twins.length === 1 ? vendorName(w.twins[0]!.vendor) : `${w.twins.length} vendors`}</span></span></td>
                 <td className="mode">{rec?.host ?? '—'}</td>
                 <td className="mode">{rec ? <span title={when(rec.provisionedAt)}>{ago(rec.provisionedAt)}</span> : '—'}</td>
-                <td className="num row-actions"><a className="button primary" href={`/-/worlds/${w.name}/open`} aria-label={`Open ${w.name}`}>Open</a>
+                <td className="num row-actions">{w.origin ? <a className="button primary" href={`/-/worlds/${w.name}/open`} aria-label={`Open ${w.name}`}>Open</a> : <span className="mode" title="Its host serves no dashboard: the command and your app reach it at its address">No dashboard</span>}
                   <Menu label={`More for ${w.name}`} items={[
                     { label: 'Copy the command to use it', onSelect: () => { void navigator.clipboard?.writeText(`volter remote add origin ${w.name}`).then(() => toast('Copied: volter remote add origin …')); } },
                     !readOnly ? { label: 'Make a key…', onSelect: () => setKeyFor(w.name) } : null,
@@ -1055,23 +1056,39 @@ function HelpPage({ orgs, onChanged }: { orgs: string[]; onChanged?: () => void
 }
 
 /** The first run: what a person does next, with the real commands, as a checklist with its progress; dismissed for good. */
-function GettingStarted({ orgs, worlds, firstWorld, version }: { orgs: string[]; worlds: number; firstWorld?: string | undefined; version: number }): React.JSX.Element | null {
+function GettingStarted({ orgs, worlds, firstWorld, pushed, version, refresh }: { orgs: string[]; worlds: number; firstWorld?: string | undefined; pushed: boolean; version: number; refresh: () => void }): React.JSX.Element | null {
   const KEY = 'volter.console.onboarding';
   const [dismissed, setDismissed] = useState<boolean>(() => { try { return localStorage.getItem(KEY) === 'done'; } catch { return false; } });
   const [tokensMade, setTokensMade] = useState<boolean | null>(null);
   const mounted = useRef(true); useEffect(() => () => { mounted.current = false; }, []);
   useEffect(() => { void door('/-/tokens').then(async (r) => { if (mounted.current) setTokensMade(r.ok ? ((await r.json()) as { tokens: unknown[] }).tokens.length > 0 : false); }).catch(() => undefined); }, [version]);
-  if (dismissed) return null;
   const org = orgs[0];
   // the way in is the app's folder (docs/contributing/architecture.md): the command makes the World from the vendors
   // the app uses; Create World above is the way for a person without a terminal
   const steps: Array<[boolean, React.ReactNode]> = [
     [orgs.length > 0, 'Create or join an org'],
-    [tokensMade === true, <>Install the command and sign it in: <code>npm install -g @volter/world</code>, then <code>volter login {ORIGIN}</code></>],
-    [worlds > 0, <>In your app's folder, make its World here: <code>volter world init</code>, then <code>volter remote add origin {firstWorld ?? `${org ?? '<org>'}/<world>`}{firstWorld ? '' : ' --create'}</code></>],
-    [false, <>Send it what your app did: <code>volter world changeset -m "…"</code>, then <code>volter world push</code></>],
+    [tokensMade === true, <React.Fragment key="command">Install the command and sign it in: <code>npm install -g @volter/world</code>, then <code>volter login {ORIGIN}</code></React.Fragment>],
+    [worlds > 0, <React.Fragment key="world">In your app's folder, make its World here: <code>volter world init</code>, then <code>volter remote add origin {firstWorld ?? `${org ?? '<org>'}/<world>`}{firstWorld ? '' : ' --create'}</code></React.Fragment>],
+    [pushed, <React.Fragment key="push">Send it what your app did: <code>volter world changeset -m "…"</code>, then <code>volter world push</code></React.Fragment>],
   ];
   const done = steps.filter(([d]) => d).length;
+  // unfinished, the list re-reads what it ticks from while its tab is in view: its last steps happen in a terminal, and
+  // a World made or a push landed there ticks here without a reload
+  const again = useRef(refresh); again.current = refresh;
+  useEffect(() => {
+    if (dismissed || done === steps.length) return;
+    const every = setInterval(() => { if (document.visibilityState === 'visible') again.current(); }, 5000);
+    return () => clearInterval(every);
+  }, [dismissed, done, steps.length]);
+  if (dismissed) return null;
+  const dismiss = (): void => { try { localStorage.setItem(KEY, 'done'); } catch { /* no storage */ } setDismissed(true); };
+  // all four done: what comes next, in a line, and the card goes when you say
+  if (done === steps.length) return (
+    <section aria-labelledby="getting-started" className="onboarding">
+      <div className="onboarding-head"><h3 id="getting-started">You are set up</h3><span className="mode">{done} of {steps.length}</span><div className="progress" aria-hidden="true"><span style={{ width: '100%' }} /></div><button type="button" onClick={dismiss}>Done</button></div>
+      <p className="mode onboarding-alt">Your app's changes land in {firstWorld ?? 'its World'}. Next: {org ? <Go to={{ kind: 'org', org, page: 'members' }}>invite your team</Go> : 'invite your team'}, who open it as themselves, and give each pull request a preview World with the GitHub Action.</p>
+    </section>
+  );
   return (
     <section aria-labelledby="getting-started" className="onboarding">
       <div className="onboarding-head"><h3 id="getting-started">Get started</h3><span className="mode">{done} of {steps.length}</span><div className="progress" aria-hidden="true"><span style={{ width: `${(done / steps.length) * 100}%` }} /></div><button type="button" className="icon-button" aria-label="Dismiss getting started" onClick={() => { try { localStorage.setItem(KEY, 'done'); } catch { /* no storage */ } setDismissed(true); }}>✕</button></div>

package/dist/src/db/pack-migrations.js

@@ -1,6 +1,6 @@
 // The migrations as a module (./migrations.ts): what `drizzle-kit generate` wrote under ./migrations, split into
 // statements, so every driver (a Durable Object reads no files) applies the same SQL.
-//   bun src/db/pack-migrations.ts --write    after `drizzle-kit generate --dialect sqlite --schema ./src/db/schema.ts --out ./src/db/migrations`
+//   bun src/db/pack-migrations.ts --write    after `bunx drizzle-kit@0.31.11 generate --dialect sqlite --schema ./src/db/schema.ts --out ./src/db/migrations`
 //   bun src/db/pack-migrations.ts --check    exits 1 when migrations.ts is behind the .sql files
 import { readdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';

package/dist/src/doors.js

@@ -8,7 +8,7 @@ export const DOORS = [
     { method: 'POST', path: '/-/status/notice', who: 'operator', scope: null, summary: 'Set or clear the notice the status page shows.', body: '{ text | null }', answers: '{ notice }' },
     { method: 'GET', path: '/-/openapi.json', who: 'anyone', scope: null, summary: 'This table as an OpenAPI 3.1 document.', answers: 'OpenAPI' },
     { method: 'GET', path: '/-/vendors', who: 'person', scope: null, summary: 'The twins a new World may have: what the host Worlds are made on serves, as it answers.', answers: '{ host, vendors[] }' },
-    { method: 'GET', path: '/-/worlds', who: 'person', scope: 'worlds:read', summary: 'The worlds your orgs hold, with their addresses and twins.', answers: '{ worlds[] }' },
+    { method: 'GET', path: '/-/worlds', who: 'person', scope: 'worlds:read', summary: 'The worlds your orgs hold that you reach, with their addresses, twins and how many changesets have landed in each (landed, when the World answered).', answers: '{ worlds[] }' },
     { method: 'POST', path: '/-/worlds', who: 'person', scope: 'worlds:write', summary: 'Provision a world into an org, on an enrolled host; where the platform bills, refused at the plan\'s limits with 402.', body: '{ org, world, vendors[] }', answers: '{ name, base, host }' },
     { method: 'POST', path: '/-/worlds/sample', who: 'person', scope: 'worlds:write', summary: 'Make the org\'s sample World (`<org>/sample`, Stripe and Slack where the host serves them) and seed it through the vendors\' own APIs: a World like any other, metered and deletable; 409 when it exists.', body: '{ org }', answers: '{ name, base, host, seeded: { <vendor>: { seeded[] } | { error } } }' },
     { method: 'DELETE', path: '/-/worlds/{org}/{world}', who: 'admin', scope: 'worlds:write', summary: 'Delete a world through its host.', answers: '{ deleted }' },

package/dist/src/mail.js

@@ -1,7 +1,7 @@
 // The platform's own mail (punchlist 3.6): what the identity service and Polar do not send (an
 // invitation is the identity service's mail, and a receipt Polar's) — a member added, a
 // world deleted, the quota warning, the grace notice. Resend's UNMODIFIED SDK through the world's
-// boundary: the resend twin in rehearsal (its inbox mirror shows every mail), real Resend in
+// boundary: the resend twin in rehearsal (its inbox shows every mail), real Resend in
 // production with a verified sending domain (OWNER: the domain). No RESEND_API_KEY → the mail is
 // written to the log, never invented.
 import { Resend } from 'resend';

package/dist/src/pages.js

@@ -5,7 +5,7 @@
 // own, so the platform and a World's pages read as one product. No third-party script is ever served here: the site's
 // tags stay on the site.
 import { readFileSync } from 'node:fs';
-import { bundleClient } from '@volter/world-core';
+import { bundleClient } from '@volter/world-core/runtime';
 import { brandAsset, kitCss, WORLD_LOGO } from '@volter/world-console';
 import { RESERVED_ORG_NAMES } from "../client/reserved.js";
 export { RESERVED_ORG_NAMES };

package/dist/src/platform.js

@@ -653,7 +653,7 @@ export function createPlatform(opts) {
                         if (!found)
                             return shell('<p role="alert">That code has expired or was already used. Run <code>volter login</code> again.</p>');
                         const [, grant] = found;
-                        return shell(`<p>Sign in the <code>volter</code> command on <b>${grant.name}</b> as <b>${(session.person.email ?? session.person.id).replace(/[<>&"]/g, '')}</b>?</p><p><b>Only approve if you just ran <code>volter login</code> yourself.</b> Someone who sent you this link could otherwise sign their command in as you.</p><p>Check this code matches the one in your terminal:</p><p style="font:600 22px var(--mono);letter-spacing:.12em">${grant.userCode}</p><form method="post" action="/-/cli/approve" style="display:flex;gap:8px;justify-content:center"><input type="hidden" name="code" value="${grant.userCode}"><button type="submit" name="decision" value="approve">Approve</button><button type="submit" name="decision" value="deny" formnovalidate style="background:none;color:inherit">Deny</button></form>`);
+                        return shell(`<p>Sign in the <code>volter</code> command on <b>${grant.name}</b> as <b>${(session.person.email ?? session.person.id).replace(/[<>&"]/g, '')}</b>?</p><p><b>Only approve if you just ran <code>volter login</code> yourself.</b> Someone who sent you this link could otherwise sign their command in as you.</p><p>Check this code matches the one in your terminal:</p><p style="font:600 22px var(--mono);letter-spacing:.12em">${grant.userCode}</p><form method="post" action="/-/cli/approve" style="display:flex;gap:8px"><input type="hidden" name="code" value="${grant.userCode}"><button type="submit" name="decision" value="approve">Approve</button><button type="submit" name="decision" value="deny" formnovalidate style="background:none;color:inherit">Deny</button></form>`);
                     }
                     if (request.method === 'POST') {
                         // only this page's own form: a page elsewhere cannot approve an attacker's code in a signed-in browser
@@ -737,7 +737,15 @@ export function createPlatform(opts) {
                     if (!person)
                         return unauthorized(request);
                     // addresses and twins: a World's keys never go to a person's browser (a member opens a World with a pass)
-                    return json({ worlds: (await rowsForPerson(person)).map(({ token: _t, readToken: _r, ...row }) => row) });
+                    // each World's landed changesets, counted with its read token: what the onboarding's last step ("send it what
+                    // your app did") is done by, and what a row says about a World's history
+                    const rows = await rowsForPerson(person);
+                    const landed = await Promise.all(rows.map(async (r) => {
+                        // bounded as the status page's host ping is: a host that does not answer leaves its row without a count, never the list waiting
+                        const res = await fetch(`${new URL(r.base).origin}/-/${r.name}/changesets`, { headers: { 'x-volter-token': r.readToken }, signal: AbortSignal.timeout(2500) }).catch(() => null);
+                        return res?.ok ? ((await res.json().catch(() => ({}))).changesets?.length ?? null) : null;
+                    }));
+                    return json({ worlds: rows.map(({ token: _t, readToken: _r, ...row }, i) => ({ ...row, ...(landed[i] !== null ? { landed: landed[i] } : {}) })) });
                 }
                 if (path === '/-/worlds' && request.method === 'POST') {
                     const person = (await sessionOf(request))?.person;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/world-platform",
-  "version": "2.0.40",
+  "version": "3.0.1",
   "description": "The Volter World platform: people and orgs through an access provider (Volter Identity, GitHub, or any OpenID Connect issuer), members and invitations, tokens, Worlds made on enrolled hosts, and opening a World for a person with a pass. Open and self-hostable; serves its own pages and never a twin.",
   "keywords": [
     "volter",
@@ -38,9 +38,9 @@
   "dependencies": {
     "@aws-sdk/client-s3": "3.1081.0",
     "@volter/identity": "^0.1.0",
-    "@volter/world-access": "2.0.2",
-    "@volter/world-console": "2.0.18",
-    "@volter/world-core": "2.0.37",
+    "@volter/world-access": "3.0.1",
+    "@volter/world-console": "3.0.1",
+    "@volter/world-core": "3.0.1",
     "drizzle-orm": "0.45.3",
     "react": "^19.2.7",
     "react-dom": "^19.2.7",
@@ -51,11 +51,9 @@
     "@types/node": "^24.0.0",
     "@types/react": "^19.2.7",
     "@types/react-dom": "^19.2.7",
-    "@volter/twin-volteridentity": "0.1.37",
-    "@volter/world-host": "2.0.54",
-    "@volter/world-runtime": "2.0.55",
+    "@volter/world-host": "3.0.1",
+    "@volter/world-runtime": "3.0.1",
     "@volter/world-tooling": "0.1.0",
-    "drizzle-kit": "0.31.11",
     "playwright": "^1.61.0",
     "typescript": "^5.9.0"
   },

package/src/db/open.ts

@@ -9,7 +9,7 @@ import { BaseSQLiteDatabase, SQLiteSyncDialect } from 'drizzle-orm/sqlite-core';
 import { BetterSQLiteSession } from 'drizzle-orm/better-sqlite3/session';
 import { MIGRATIONS } from './migrations.ts';
 
-// biome-ignore lint/suspicious/noExplicitAny: the three drivers' result types differ; every store reads rows the schema types
+// `any`: the three drivers' result types differ; every store reads rows the schema types
 export type PlatformDb = BaseSQLiteDatabase<'sync', any>;
 
 type Statement = { run: (...p: unknown[]) => unknown; all: (...p: unknown[]) => unknown[]; get: (...p: unknown[]) => unknown; raw: () => { all: (...p: unknown[]) => unknown[]; get: (...p: unknown[]) => unknown } };

package/src/db/pack-migrations.ts

@@ -1,6 +1,6 @@
 // The migrations as a module (./migrations.ts): what `drizzle-kit generate` wrote under ./migrations, split into
 // statements, so every driver (a Durable Object reads no files) applies the same SQL.
-//   bun src/db/pack-migrations.ts --write    after `drizzle-kit generate --dialect sqlite --schema ./src/db/schema.ts --out ./src/db/migrations`
+//   bun src/db/pack-migrations.ts --write    after `bunx drizzle-kit@0.31.11 generate --dialect sqlite --schema ./src/db/schema.ts --out ./src/db/migrations`
 //   bun src/db/pack-migrations.ts --check    exits 1 when migrations.ts is behind the .sql files
 import { readdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { join } from 'node:path';

package/src/doors.ts

@@ -23,7 +23,7 @@ export const DOORS: readonly Door[] = [
   { method: 'POST', path: '/-/status/notice', who: 'operator', scope: null, summary: 'Set or clear the notice the status page shows.', body: '{ text | null }', answers: '{ notice }' },
   { method: 'GET', path: '/-/openapi.json', who: 'anyone', scope: null, summary: 'This table as an OpenAPI 3.1 document.', answers: 'OpenAPI' },
   { method: 'GET', path: '/-/vendors', who: 'person', scope: null, summary: 'The twins a new World may have: what the host Worlds are made on serves, as it answers.', answers: '{ host, vendors[] }' },
-  { method: 'GET', path: '/-/worlds', who: 'person', scope: 'worlds:read', summary: 'The worlds your orgs hold, with their addresses and twins.', answers: '{ worlds[] }' },
+  { method: 'GET', path: '/-/worlds', who: 'person', scope: 'worlds:read', summary: 'The worlds your orgs hold that you reach, with their addresses, twins and how many changesets have landed in each (landed, when the World answered).', answers: '{ worlds[] }' },
   { method: 'POST', path: '/-/worlds', who: 'person', scope: 'worlds:write', summary: 'Provision a world into an org, on an enrolled host; where the platform bills, refused at the plan\'s limits with 402.', body: '{ org, world, vendors[] }', answers: '{ name, base, host }' },
   { method: 'POST', path: '/-/worlds/sample', who: 'person', scope: 'worlds:write', summary: 'Make the org\'s sample World (`<org>/sample`, Stripe and Slack where the host serves them) and seed it through the vendors\' own APIs: a World like any other, metered and deletable; 409 when it exists.', body: '{ org }', answers: '{ name, base, host, seeded: { <vendor>: { seeded[] } | { error } } }' },
   { method: 'DELETE', path: '/-/worlds/{org}/{world}', who: 'admin', scope: 'worlds:write', summary: 'Delete a world through its host.', answers: '{ deleted }' },

package/src/mail.ts

@@ -1,7 +1,7 @@
 // The platform's own mail (punchlist 3.6): what the identity service and Polar do not send (an
 // invitation is the identity service's mail, and a receipt Polar's) — a member added, a
 // world deleted, the quota warning, the grace notice. Resend's UNMODIFIED SDK through the world's
-// boundary: the resend twin in rehearsal (its inbox mirror shows every mail), real Resend in
+// boundary: the resend twin in rehearsal (its inbox shows every mail), real Resend in
 // production with a verified sending domain (OWNER: the domain). No RESEND_API_KEY → the mail is
 // written to the log, never invented.
 import { Resend } from 'resend';

package/src/pages.ts

@@ -5,7 +5,7 @@
 // own, so the platform and a World's pages read as one product. No third-party script is ever served here: the site's
 // tags stay on the site.
 import { readFileSync } from 'node:fs';
-import { bundleClient } from '@volter/world-core';
+import { bundleClient } from '@volter/world-core/runtime';
 import { brandAsset, kitCss, WORLD_LOGO } from '@volter/world-console';
 import { RESERVED_ORG_NAMES } from '../client/reserved.ts';
 

package/src/platform.ts

@@ -495,7 +495,7 @@ export function createPlatform(opts: PlatformOptions): { fetch: (request: Reques
             const found = pendingFor(code);
             if (!found) return shell('<p role="alert">That code has expired or was already used. Run <code>volter login</code> again.</p>');
             const [, grant] = found;
-            return shell(`<p>Sign in the <code>volter</code> command on <b>${grant.name}</b> as <b>${(session.person.email ?? session.person.id).replace(/[<>&"]/g, '')}</b>?</p><p><b>Only approve if you just ran <code>volter login</code> yourself.</b> Someone who sent you this link could otherwise sign their command in as you.</p><p>Check this code matches the one in your terminal:</p><p style="font:600 22px var(--mono);letter-spacing:.12em">${grant.userCode}</p><form method="post" action="/-/cli/approve" style="display:flex;gap:8px;justify-content:center"><input type="hidden" name="code" value="${grant.userCode}"><button type="submit" name="decision" value="approve">Approve</button><button type="submit" name="decision" value="deny" formnovalidate style="background:none;color:inherit">Deny</button></form>`);
+            return shell(`<p>Sign in the <code>volter</code> command on <b>${grant.name}</b> as <b>${(session.person.email ?? session.person.id).replace(/[<>&"]/g, '')}</b>?</p><p><b>Only approve if you just ran <code>volter login</code> yourself.</b> Someone who sent you this link could otherwise sign their command in as you.</p><p>Check this code matches the one in your terminal:</p><p style="font:600 22px var(--mono);letter-spacing:.12em">${grant.userCode}</p><form method="post" action="/-/cli/approve" style="display:flex;gap:8px"><input type="hidden" name="code" value="${grant.userCode}"><button type="submit" name="decision" value="approve">Approve</button><button type="submit" name="decision" value="deny" formnovalidate style="background:none;color:inherit">Deny</button></form>`);
           }
           if (request.method === 'POST') {
             // only this page's own form: a page elsewhere cannot approve an attacker's code in a signed-in browser
@@ -555,7 +555,15 @@ export function createPlatform(opts: PlatformOptions): { fetch: (request: Reques
           const person = (await sessionOf(request))?.person;
           if (!person) return unauthorized(request);
           // addresses and twins: a World's keys never go to a person's browser (a member opens a World with a pass)
-          return json({ worlds: (await rowsForPerson(person)).map(({ token: _t, readToken: _r, ...row }) => row) });
+          // each World's landed changesets, counted with its read token: what the onboarding's last step ("send it what
+          // your app did") is done by, and what a row says about a World's history
+          const rows = await rowsForPerson(person);
+          const landed = await Promise.all(rows.map(async (r) => {
+            // bounded as the status page's host ping is: a host that does not answer leaves its row without a count, never the list waiting
+            const res = await fetch(`${new URL(r.base).origin}/-/${r.name}/changesets`, { headers: { 'x-volter-token': r.readToken }, signal: AbortSignal.timeout(2500) }).catch(() => null);
+            return res?.ok ? (((await res.json().catch(() => ({}))) as { changesets?: unknown[] }).changesets?.length ?? null) : null;
+          }));
+          return json({ worlds: rows.map(({ token: _t, readToken: _r, ...row }, i) => ({ ...row, ...(landed[i] !== null ? { landed: landed[i] } : {}) })) });
         }
         if (path === '/-/worlds' && request.method === 'POST') {
           const person = (await sessionOf(request))?.person;