@volter/world-runtime 3.0.162 → 3.0.163

package/dist/src/served-world.js

@@ -1883,20 +1883,23 @@ export class WorldDoors {
         // a browser session is opened by either token: the read token's is how a view-only link opens a vendor's screens
         // the session gate comes first: a page that holds only the cookie (a sibling World's, the same site) can neither
         // re-issue nor end the session through this door
-        // A HOSTED SITE OPENED (`GET sites/go?host=<hostname>&land=<path>`): a person's navigation, handed to the site's own
-        // address with a one-time read pass. A navigation from a sibling address (the site's own page, linking back here) is
-        // taken too: it only opens, in this person's own browser, a read of this World's own site
-        if (kind === 'sites' && name === 'go' && request.method === 'GET') {
+        // A HOSTED SITE OPENED (`sites/go?host=<hostname>&land=<path>`): GET hands a navigation to the site's own address;
+        // POST gives an authenticated console click that same opening URL, with the same scoped one-time pages pass.
+        // A GET navigation from a sibling site may open a read; a POST handoff comes only from the console's own origin.
+        if (kind === 'sites' && name === 'go' && (request.method === 'GET' || request.method === 'POST')) {
             const fetchSite = request.headers.get('sec-fetch-site');
             const dest = request.headers.get('sec-fetch-dest');
+            const handoff = request.method === 'POST';
+            if (handoff && fetchSite !== 'same-origin')
+                return Response.json({ error: "a site opening URL is requested only from the World's own page (Sec-Fetch-Site: same-origin)" }, { status: 403 });
             const browser = url.searchParams.get('browser') ?? undefined;
             if (browser && fetchSite !== 'same-origin' && fetchSite !== 'none')
                 return Response.json({ error: 'a browser site opens only from its World or a typed address (Sec-Fetch-Site: same-origin or none)' }, { status: 403 });
             // a person's navigation (from here, from the site's own page linking back, or typed in), or a frame of this World's
             // own console (its board, its comparison)
-            const navigated = (request.method === 'GET' || request.method === 'HEAD') && dest === 'document' && ['same-origin', 'same-site', 'none'].includes(fetchSite ?? '');
+            const navigated = request.method === 'GET' && dest === 'document' && ['same-origin', 'same-site', 'none'].includes(fetchSite ?? '');
             const framed = fetchSite === 'same-origin' && dest === 'iframe';
-            if (via === 'session' && !navigated && !framed)
+            if (via === 'session' && !handoff && !navigated && !framed)
                 return Response.json({ error: "a hosted site opens on a person's navigation" }, { status: 403 });
             const template = this.host.sitesTemplate?.() ?? null;
             const hostname = (url.searchParams.get('host') ?? '').toLowerCase();
@@ -1924,7 +1927,9 @@ export class WorldDoors {
             const passed = this.mintPagesPass(browser ? scope : 'read', { site: hostname, ...(browser ? { browser } : {}), ...(asked.session ? { session: asked.session } : {}), ...(asked.who ? { who: asked.who } : {}), ...(this.host.browserOrigin?.() ? { framer: this.host.browserOrigin() } : {}) });
             if (!passed)
                 return Response.json({ error: 'too many sites opened at once: try again in a minute' }, { status: 429 });
-            return new Response(null, { status: 303, headers: { location: `${at}/-/${this.served}/pages/open#${new URLSearchParams({ pass: passed, land: land.startsWith('/') ? land : '/' }).toString()}`, 'cache-control': 'no-store', 'referrer-policy': 'no-referrer' } });
+            const to = `${at}/-/${this.served}/pages/open#${new URLSearchParams({ pass: passed, land: land.startsWith('/') ? land : '/' }).toString()}`;
+            const headers = { 'cache-control': 'no-store', 'referrer-policy': 'no-referrer' };
+            return handoff ? Response.json({ url: to }, { headers }) : new Response(null, { status: 303, headers: { ...headers, location: to } });
         }
         const foreign = this.crossOriginSession(request, via);
         if (foreign)

package/dist/src/service-exit.d.ts

@@ -29,8 +29,9 @@ export type ServiceEnd = {
  *  which has no runs to tell apart. A run is bounded by its start record or, for a spawn that failed before starting
  *  or a log from before start records, by the previous run's exit. */
 export declare function readServiceEnd(log: string): ServiceEnd | undefined;
-/** One line for a service that is not live: how it ended, who stopped it, when, and after how long. */
-export declare function describeServiceEnd(end: ServiceEnd): string;
+/** One line for a service that is not live: how it ended, who stopped it, when, and after how long.
+ *  A caller with only an exit event cannot attribute its stop without the run's stop history. */
+export declare function describeServiceEnd(end: ServiceEnd, stopContext?: 'known' | 'unknown'): string;
 export type WorldEvent = {
     event: string;
     service?: string;

package/dist/src/service-exit.js

@@ -139,8 +139,9 @@ const duration = (ms) => {
     const s = Math.round(ms / 1000);
     return s < 60 ? `${s}s` : s < 3600 ? `${Math.floor(s / 60)}m${String(s % 60).padStart(2, '0')}s` : `${Math.floor(s / 3600)}h${String(Math.floor((s % 3600) / 60)).padStart(2, '0')}m`;
 };
-/** One line for a service that is not live: how it ended, who stopped it, when, and after how long. */
-export function describeServiceEnd(end) {
+/** One line for a service that is not live: how it ended, who stopped it, when, and after how long.
+ *  A caller with only an exit event cannot attribute its stop without the run's stop history. */
+export function describeServiceEnd(end, stopContext = 'known') {
     const exit = end.exited;
     // A log from before exit records split code from signal: a status past 128 is 128 + the signal's number.
     if (exit && exit.code === undefined && exit.signal === undefined && exit.status > 128)
@@ -157,8 +158,9 @@ export function describeServiceEnd(end) {
     const ended = exit.signal ? `ended by ${exit.signal}` : `exit code ${exit.code ?? exit.status}`;
     const how = exit.error ? `failed to spawn (${exit.error})`
         : exit.stopRequested && end.stopped ? `was stopped by the World (${end.stopped.by}; ${ended})`
-            : exit.stopRequested ? `was stopped by a ${exit.stopRequested} from outside the World (no World stop was recorded; ${ended})`
-                : exit.signal ? `was killed by ${exit.signal}` : `exited with code ${exit.code ?? exit.status}`;
+            : exit.stopRequested && stopContext === 'unknown' ? `stopped after a ${exit.stopRequested} request (${ended})`
+                : exit.stopRequested ? `was stopped by a ${exit.stopRequested} from outside the World (no World stop was recorded; ${ended})`
+                    : exit.signal ? `was killed by ${exit.signal}` : `exited with code ${exit.code ?? exit.status}`;
     const ran = exit.uptimeMs !== undefined ? ` after running ${duration(exit.uptimeMs)}` : '';
     return `${how}${ran}, at ${exit.at}`;
 }
@@ -181,7 +183,7 @@ export function describeWorldEvent(event) {
     if (event.event === 'world.service.started')
         return `${event.at} ${who} started (pid ${event.pid})`;
     if (event.event === 'world.service.exited')
-        return `${event.at} ${who} ${describeServiceEnd({ exited: event, lastOutput: [] }).replace(/, at [^,]*$/, '')}`;
+        return `${event.at} ${who} ${describeServiceEnd({ exited: event, lastOutput: [] }, 'unknown').replace(/, at [^,]*$/, '')}`;
     if (event.event === 'world.service.stop')
         return `${event.at} ${who} stopped by the World (${event.by}, ${event.signal})`;
     if (event.event === 'world.service.killed')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/world-runtime",
-  "version": "3.0.162",
+  "version": "3.0.163",
   "description": "World configs for twins: boot named local runtimes, allocate ports, generate world.env/instance.json, and run apps against fake-key twin worlds.",
   "keywords": [
     "twin",
@@ -70,8 +70,8 @@
     "node": ">=22.3"
   },
   "peerDependencies": {
-    "@volter/world-core": "3.0.154",
-    "@volter/world-console": "3.0.150"
+    "@volter/world-core": "3.0.155",
+    "@volter/world-console": "3.0.151"
   },
   "dependencies": {
     "@electric-sql/pglite": "0.5.8",
@@ -80,7 +80,7 @@
     "@volter/browser-runtime": "0.1.104",
     "@volter/browser-sandboxes": "0.1.84",
     "@volter/world-access": "3.0.1",
-    "@volter/world-core": "3.0.154",
+    "@volter/world-core": "3.0.155",
     "modern-screenshot": "4.7.0",
     "mongodb": "~6.20.0",
     "pg-gateway": "0.3.0-beta.4",

package/src/served-world.ts

@@ -1630,19 +1630,21 @@ export class WorldDoors {
     // a browser session is opened by either token: the read token's is how a view-only link opens a vendor's screens
     // the session gate comes first: a page that holds only the cookie (a sibling World's, the same site) can neither
     // re-issue nor end the session through this door
-    // A HOSTED SITE OPENED (`GET sites/go?host=<hostname>&land=<path>`): a person's navigation, handed to the site's own
-    // address with a one-time read pass. A navigation from a sibling address (the site's own page, linking back here) is
-    // taken too: it only opens, in this person's own browser, a read of this World's own site
-    if (kind === 'sites' && name === 'go' && request.method === 'GET') {
+    // A HOSTED SITE OPENED (`sites/go?host=<hostname>&land=<path>`): GET hands a navigation to the site's own address;
+    // POST gives an authenticated console click that same opening URL, with the same scoped one-time pages pass.
+    // A GET navigation from a sibling site may open a read; a POST handoff comes only from the console's own origin.
+    if (kind === 'sites' && name === 'go' && (request.method === 'GET' || request.method === 'POST')) {
       const fetchSite = request.headers.get('sec-fetch-site');
       const dest = request.headers.get('sec-fetch-dest');
+      const handoff = request.method === 'POST';
+      if (handoff && fetchSite !== 'same-origin') return Response.json({ error: "a site opening URL is requested only from the World's own page (Sec-Fetch-Site: same-origin)" }, { status: 403 });
       const browser = url.searchParams.get('browser') ?? undefined;
       if (browser && fetchSite !== 'same-origin' && fetchSite !== 'none') return Response.json({ error: 'a browser site opens only from its World or a typed address (Sec-Fetch-Site: same-origin or none)' }, { status: 403 });
       // a person's navigation (from here, from the site's own page linking back, or typed in), or a frame of this World's
       // own console (its board, its comparison)
-      const navigated = (request.method === 'GET' || request.method === 'HEAD') && dest === 'document' && ['same-origin', 'same-site', 'none'].includes(fetchSite ?? '');
+      const navigated = request.method === 'GET' && dest === 'document' && ['same-origin', 'same-site', 'none'].includes(fetchSite ?? '');
       const framed = fetchSite === 'same-origin' && dest === 'iframe';
-      if (via === 'session' && !navigated && !framed) return Response.json({ error: "a hosted site opens on a person's navigation" }, { status: 403 });
+      if (via === 'session' && !handoff && !navigated && !framed) return Response.json({ error: "a hosted site opens on a person's navigation" }, { status: 403 });
       const template = this.host.sitesTemplate?.() ?? null;
       const hostname = (url.searchParams.get('host') ?? '').toLowerCase();
       if (browser) {
@@ -1660,7 +1662,9 @@ export class WorldDoors {
       const land = url.searchParams.get('land') ?? '/';
       const passed = this.mintPagesPass(browser ? scope : 'read', { site: hostname, ...(browser ? { browser } : {}), ...(asked.session ? { session: asked.session } : {}), ...(asked.who ? { who: asked.who } : {}), ...(this.host.browserOrigin?.() ? { framer: this.host.browserOrigin!()! } : {}) });
       if (!passed) return Response.json({ error: 'too many sites opened at once: try again in a minute' }, { status: 429 });
-      return new Response(null, { status: 303, headers: { location: `${at}/-/${this.served}/pages/open#${new URLSearchParams({ pass: passed, land: land.startsWith('/') ? land : '/' }).toString()}`, 'cache-control': 'no-store', 'referrer-policy': 'no-referrer' } });
+      const to = `${at}/-/${this.served}/pages/open#${new URLSearchParams({ pass: passed, land: land.startsWith('/') ? land : '/' }).toString()}`;
+      const headers = { 'cache-control': 'no-store', 'referrer-policy': 'no-referrer' };
+      return handoff ? Response.json({ url: to }, { headers }) : new Response(null, { status: 303, headers: { ...headers, location: to } });
     }
     const foreign = this.crossOriginSession(request, via);
     if (foreign) return foreign;

package/src/service-exit.ts

@@ -129,8 +129,9 @@ const duration = (ms: number): string => {
   return s < 60 ? `${s}s` : s < 3600 ? `${Math.floor(s / 60)}m${String(s % 60).padStart(2, '0')}s` : `${Math.floor(s / 3600)}h${String(Math.floor((s % 3600) / 60)).padStart(2, '0')}m`;
 };
 
-/** One line for a service that is not live: how it ended, who stopped it, when, and after how long. */
-export function describeServiceEnd(end: ServiceEnd): string {
+/** One line for a service that is not live: how it ended, who stopped it, when, and after how long.
+ *  A caller with only an exit event cannot attribute its stop without the run's stop history. */
+export function describeServiceEnd(end: ServiceEnd, stopContext: 'known' | 'unknown' = 'known'): string {
   const exit = end.exited;
   // A log from before exit records split code from signal: a status past 128 is 128 + the signal's number.
   if (exit && exit.code === undefined && exit.signal === undefined && exit.status > 128) exit.signal = `signal ${exit.status - 128}`;
@@ -144,6 +145,7 @@ export function describeServiceEnd(end: ServiceEnd): string {
   const ended = exit.signal ? `ended by ${exit.signal}` : `exit code ${exit.code ?? exit.status}`;
   const how = exit.error ? `failed to spawn (${exit.error})`
     : exit.stopRequested && end.stopped ? `was stopped by the World (${end.stopped.by}; ${ended})`
+      : exit.stopRequested && stopContext === 'unknown' ? `stopped after a ${exit.stopRequested} request (${ended})`
       : exit.stopRequested ? `was stopped by a ${exit.stopRequested} from outside the World (no World stop was recorded; ${ended})`
         : exit.signal ? `was killed by ${exit.signal}` : `exited with code ${exit.code ?? exit.status}`;
   const ran = exit.uptimeMs !== undefined ? ` after running ${duration(exit.uptimeMs)}` : '';
@@ -162,7 +164,7 @@ export function readWorldEvents(path: string): WorldEvent[] {
 export function describeWorldEvent(event: WorldEvent): string {
   const who = event.service ?? '(world)';
   if (event.event === 'world.service.started') return `${event.at} ${who} started (pid ${event.pid})`;
-  if (event.event === 'world.service.exited') return `${event.at} ${who} ${describeServiceEnd({ exited: event as unknown as ServiceExitRecord, lastOutput: [] }).replace(/, at [^,]*$/, '')}`;
+  if (event.event === 'world.service.exited') return `${event.at} ${who} ${describeServiceEnd({ exited: event as unknown as ServiceExitRecord, lastOutput: [] }, 'unknown').replace(/, at [^,]*$/, '')}`;
   if (event.event === 'world.service.stop') return `${event.at} ${who} stopped by the World (${event.by}, ${event.signal})`;
   if (event.event === 'world.service.killed') return `${event.at} ${who} killed by the World (${event.by}, SIGKILL after the grace)`;
   return `${event.at} ${who} ${event.event}`;