@volter/world-runtime 3.0.129 → 3.0.130

package/dist/src/redirect-proxy.js

@@ -288,6 +288,24 @@ export function twinUnreachableMessage(vendor, origin, err, world) {
     const cause = err.cause;
     return `twin "${vendor}" at ${origin} is unreachable${world ? ` in World "${world}"` : ''}: ${errorMessage(err)}${cause?.code ? ` (${cause.code})` : cause?.message ? ` (${errorMessage(cause)})` : ''}; check \`volter-world doctor${world ? ` ${world}` : ''}\`\n`;
 }
+/** The headers of one connection, not of the request (RFC 9110 §7.6.1), with `expect`: the hop that received them
+ *  answered them (Node's server sends the 100 Continue itself). Node's fetch refuses `transfer-encoding`,
+ *  `keep-alive`, `upgrade`, `expect` and a `connection` other than close/keep-alive outright, so a `git push` whose
+ *  pack came chunked (larger than `http.postBuffer`) failed `fetch failed (UND_ERR_INVALID_ARG)`; the body streams
+ *  on and fetch frames it afresh. */
+const HOP_BY_HOP = ['connection', 'keep-alive', 'proxy-connection', 'transfer-encoding', 'te', 'trailer', 'upgrade', 'expect'];
+const TOKEN = /^[!#$%&'*+.^_`|~0-9a-z-]+$/i;
+function forwardableHeaders(incoming) {
+    const headers = new Headers(incoming);
+    for (const listed of (incoming.get('connection') ?? '').split(',')) {
+        const name = listed.trim();
+        if (TOKEN.test(name))
+            headers.delete(name);
+    }
+    for (const h of HOP_BY_HOP)
+        headers.delete(h);
+    return headers;
+}
 /** Start the ambient redirect proxy. Returns a handle with the listen port + the env to export.
  * - Plain `http://` proxied requests to a vendor host → forwarded to the twin.
  * - `CONNECT host:443` to a vendor host → MITM-terminated with a session-signed leaf, decrypted, and
@@ -489,8 +507,8 @@ export async function startRedirectProxy(options) {
                     return new Response(note(noTwinMessage(hostHeader, u.pathname)) + refusalText(gap).trimStart(), { status: 502, headers: { 'content-type': 'text/plain; charset=utf-8', [REFUSAL_HEADER]: gap.missing } });
                 }
                 const origin = new URL(twin.origin);
-                const headers = new Headers(req.headers);
-                for (const h of ['proxy-connection', 'accept-encoding', 'connection', 'x-volter-world-browser'])
+                const headers = forwardableHeaders(req.headers);
+                for (const h of ['accept-encoding', 'x-volter-world-browser'])
                     headers.delete(h);
                 // the application is not a twin: it gets no World key, keeps its Host and hears it was reached over TLS
                 if (twin.vendor === 'app') {
@@ -521,7 +539,7 @@ export async function startRedirectProxy(options) {
                     return new Response(upRes.body, { status: upRes.status, headers: out });
                 }
                 catch (err) {
-                    return new Response(twinUnreachable(twin.vendor, origin.origin, err), { status: 502 });
+                    return new Response(twinUnreachable(twin.vendor, origin.origin, err), { status: 502, headers: { 'content-type': 'text/plain; charset=utf-8' } });
                 }
             },
             upgrade: websocketRelay(req => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/world-runtime",
-  "version": "3.0.129",
+  "version": "3.0.130",
   "description": "World configs for twins: boot named local runtimes, allocate ports, generate world.env/instance.json, and run apps against fake-key twin worlds.",
   "keywords": [
     "twin",
@@ -70,14 +70,14 @@
     "node": ">=22.3"
   },
   "peerDependencies": {
-    "@volter/world-core": "3.0.129",
-    "@volter/world-console": "3.0.124"
+    "@volter/world-core": "3.0.130",
+    "@volter/world-console": "3.0.125"
   },
   "dependencies": {
     "@electric-sql/pglite": "0.5.8",
     "@electric-sql/pglite-pgvector": "0.0.9",
     "@volter/world-access": "3.0.1",
-    "@volter/world-core": "3.0.129",
+    "@volter/world-core": "3.0.130",
     "mongodb": "~6.20.0",
     "pg-gateway": "0.3.0-beta.4",
     "smol-toml": "^1.8.0",

package/src/redirect-proxy.ts

@@ -336,6 +336,20 @@ export function twinUnreachableMessage(vendor: string, origin: string, err: Erro
   return `twin "${vendor}" at ${origin} is unreachable${world ? ` in World "${world}"` : ''}: ${errorMessage(err)}${cause?.code ? ` (${cause.code})` : cause?.message ? ` (${errorMessage(cause)})` : ''}; check \`volter-world doctor${world ? ` ${world}` : ''}\`\n`;
 }
 
+/** The headers of one connection, not of the request (RFC 9110 §7.6.1), with `expect`: the hop that received them
+ *  answered them (Node's server sends the 100 Continue itself). Node's fetch refuses `transfer-encoding`,
+ *  `keep-alive`, `upgrade`, `expect` and a `connection` other than close/keep-alive outright, so a `git push` whose
+ *  pack came chunked (larger than `http.postBuffer`) failed `fetch failed (UND_ERR_INVALID_ARG)`; the body streams
+ *  on and fetch frames it afresh. */
+const HOP_BY_HOP = ['connection', 'keep-alive', 'proxy-connection', 'transfer-encoding', 'te', 'trailer', 'upgrade', 'expect'];
+const TOKEN = /^[!#$%&'*+.^_`|~0-9a-z-]+$/i;
+function forwardableHeaders(incoming: Headers): Headers {
+  const headers = new Headers(incoming);
+  for (const listed of (incoming.get('connection') ?? '').split(',')) { const name = listed.trim(); if (TOKEN.test(name)) headers.delete(name); }
+  for (const h of HOP_BY_HOP) headers.delete(h);
+  return headers;
+}
+
 /** Start the ambient redirect proxy. Returns a handle with the listen port + the env to export.
  * - Plain `http://` proxied requests to a vendor host → forwarded to the twin.
  * - `CONNECT host:443` to a vendor host → MITM-terminated with a session-signed leaf, decrypted, and
@@ -503,8 +517,8 @@ export async function startRedirectProxy(options: RedirectProxyOptions): Promise
         }
         const origin = new URL(twin.origin);
 
-        const headers = new Headers(req.headers);
-        for (const h of ['proxy-connection', 'accept-encoding', 'connection', 'x-volter-world-browser']) headers.delete(h);
+        const headers = forwardableHeaders(req.headers);
+        for (const h of ['accept-encoding', 'x-volter-world-browser']) headers.delete(h);
         // the application is not a twin: it gets no World key, keeps its Host and hears it was reached over TLS
         if (twin.vendor === 'app') {
           headers.delete('x-twins-key');
@@ -529,7 +543,7 @@ export async function startRedirectProxy(options: RedirectProxyOptions): Promise
           for (const h of ['content-encoding', 'content-length', 'transfer-encoding', 'connection', 'keep-alive']) out.delete(h);
           return new Response(upRes.body, { status: upRes.status, headers: out });
         } catch (err) {
-          return new Response(twinUnreachable(twin.vendor, origin.origin, err as Error), { status: 502 });
+          return new Response(twinUnreachable(twin.vendor, origin.origin, err as Error), { status: 502, headers: { 'content-type': 'text/plain; charset=utf-8' } });
         }
       },
       upgrade: websocketRelay(req => {