@volter/world 3.0.38 → 3.0.40

package/dist/skills/volter-world/AGENTS.md

@@ -54,6 +54,8 @@ refusals are the command's: act on a refusal's reason rather than working around
 
 ## Run through the World
 
+For a recipe's browser walk or sign-in, follow the [cookbook browser password rule](../../cookbook/README.md).
+
 Run apps and tests inside a World, never bare. For a repo with `.volter/world.json`:
 
 ```bash
@@ -147,7 +149,7 @@ An app that answers as its own production hostnames (`app.example.com`) records
 
 Sandbox mode refuses untwinned destinations in cooperating clients, including Node sockets a
 client opens around the injector. It does not constrain binaries or non-Node processes that
-ignore the injector/proxy; network isolation needs an enforced boundary.
+ignore the injector/proxy; network isolation needs an enforced boundary. See [transport coverage](../../docs/contributing/architecture.md#outbound-transport-coverage) for mediated seams and native bypasses.
 Do not disable routing to hide a coverage gap.
 
 Current packages are `@volter/world`, `@volter/world-core`, `@volter/world-runtime`,

package/dist/src/cli.js

@@ -3,7 +3,7 @@
 // verb. `volter world …` acts on the world of the cwd the way git acts on the repository of the
 // cwd; `volter twin <vendor> …` runs one twin on its own; `volter remote …` is the hosted remote.
 // One client of `World`; it adds nothing the SDK does not have.
-import { detectRepoVendors, formatInitReport, resolveCatalog, findInstalledPackage, packCli, serveConsoleFor } from '@volter/world-runtime';
+import { detectRepoVendors, errorMessage, formatInitReport, resolveCatalog, findInstalledPackage, packCli, serveConsoleFor } from '@volter/world-runtime';
 import { readFileSync, realpathSync } from 'node:fs';
 import { fileURLToPath } from 'node:url';
 import { spawn, spawnSync } from 'node:child_process';
@@ -1099,7 +1099,7 @@ const isEntryPoint = import.meta.main ?? (process.argv[1] !== undefined && exist
     && realpathSync(process.argv[1]) === fileURLToPath(import.meta.url));
 if (isEntryPoint) {
     main().catch((error) => {
-        process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+        process.stderr.write(`${errorMessage(error)}\n`);
         process.exit(process.exitCode && process.exitCode !== 0 ? Number(process.exitCode) : 1);
     });
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/world",
-  "version": "3.0.38",
+  "version": "3.0.40",
   "description": "Run your app against a world of twins. `World` and `Repo` — one method per verb: init, up, run, log, diff, reset, branch, checkout, clone, fetch, changeset, push — and the `volter` command, one client of them.",
   "keywords": [
     "volter",
@@ -30,12 +30,12 @@
   ],
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.1",
-    "@volter/world-core": "3.0.38",
-    "@volter/world-runtime": "3.0.38",
+    "@volter/world-core": "3.0.40",
+    "@volter/world-runtime": "3.0.40",
     "zod": "^4.6.5"
   },
   "peerDependencies": {
-    "@volter/world-console": "3.0.33"
+    "@volter/world-console": "3.0.35"
   },
   "peerDependenciesMeta": {
     "@volter/world-console": {
@@ -43,7 +43,7 @@
     }
   },
   "devDependencies": {
-    "@volter/world-console": "3.0.33"
+    "@volter/world-console": "3.0.35"
   },
   "bin": {
     "volter": "dist/src/cli.js"

package/skills/volter-world/AGENTS.md

@@ -54,6 +54,8 @@ refusals are the command's: act on a refusal's reason rather than working around
 
 ## Run through the World
 
+For a recipe's browser walk or sign-in, follow the [cookbook browser password rule](../../cookbook/README.md).
+
 Run apps and tests inside a World, never bare. For a repo with `.volter/world.json`:
 
 ```bash
@@ -147,7 +149,7 @@ An app that answers as its own production hostnames (`app.example.com`) records
 
 Sandbox mode refuses untwinned destinations in cooperating clients, including Node sockets a
 client opens around the injector. It does not constrain binaries or non-Node processes that
-ignore the injector/proxy; network isolation needs an enforced boundary.
+ignore the injector/proxy; network isolation needs an enforced boundary. See [transport coverage](../../docs/contributing/architecture.md#outbound-transport-coverage) for mediated seams and native bypasses.
 Do not disable routing to hide a coverage gap.
 
 Current packages are `@volter/world`, `@volter/world-core`, `@volter/world-runtime`,

package/src/cli.ts

@@ -3,7 +3,7 @@
 // verb. `volter world …` acts on the world of the cwd the way git acts on the repository of the
 // cwd; `volter twin <vendor> …` runs one twin on its own; `volter remote …` is the hosted remote.
 // One client of `World`; it adds nothing the SDK does not have.
-import { detectRepoVendors, formatInitReport, resolveCatalog, findInstalledPackage, packCli, serveConsoleFor } from '@volter/world-runtime';
+import { detectRepoVendors, errorMessage, formatInitReport, resolveCatalog, findInstalledPackage, packCli, serveConsoleFor } from '@volter/world-runtime';
 import { readFileSync, realpathSync } from 'node:fs';
 import { fileURLToPath } from 'node:url';
 import { spawn, spawnSync } from 'node:child_process';
@@ -792,7 +792,7 @@ const isEntryPoint = import.meta.main ?? (process.argv[1] !== undefined && exist
   && realpathSync(process.argv[1]) === fileURLToPath(import.meta.url));
 if (isEntryPoint) {
   main().catch((error: unknown) => {
-    process.stderr.write(`${error instanceof Error ? error.message : String(error)}\n`);
+    process.stderr.write(`${errorMessage(error)}\n`);
     process.exit(process.exitCode && process.exitCode !== 0 ? Number(process.exitCode) : 1);
   });
 }

package/src/handlers-in-repo.test.ts

@@ -2,8 +2,8 @@
 // #the-config-and-the-running-world): init copies a twin's starter handlers to .volter/handlers/<vendor>.json and
 // names that path relative to the world root, so the committed config reads the same on every
 // machine; `up` resolves it against the root on both the spawn path (--scenario) and the colocated
-// host (scenarioPath). Proven against the real anthropic twin, installed with starter handlers of the test's own (no
-// pack of the catalog ships any): its files linked from the pack repository, its `defaults/handlers.json` written here.
+// host (scenarioPath). Proven against the real anthropic twin, its files linked from the pack repository: its starter
+// handlers are the scripted turns of its own life (journeys/scenario.json).
 import { afterAll, describe, expect, test } from 'bun:test';
 import { copyFileSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, symlinkSync, writeFileSync } from 'node:fs';
 import { tmpdir } from 'node:os';
@@ -23,8 +23,6 @@ function app(): string {
     if (entry === 'package.json') copyFileSync(join(PACKS, 'anthropic', entry), join(installed, entry));
     else symlinkSync(join(PACKS, 'anthropic', entry), join(installed, entry));
   }
-  mkdirSync(join(installed, 'defaults'));
-  writeFileSync(join(installed, 'defaults', 'handlers.json'), `${JSON.stringify({ handlers: [{ id: 'demo-answer', on: {}, respond: { text: 'hi' } }] }, null, 2)}\n`);
   return dir;
 }
 
@@ -46,6 +44,6 @@ describe('handlers in the app repo', () => {
     const instance = await world.up({ seed: false });
     const url = instance.services.anthropic!.url!;
     const scenario = await fetch(`${url}/twin/scenario`).then((r) => r.json()) as { handlers?: Array<{ id: string }> };
-    expect((scenario.handlers ?? []).map((h) => h.id)).toContain('demo-answer');
+    expect((scenario.handlers ?? []).map((h) => h.id)).toContain('draft-result');
   });
 });

package/src/journeys/tutorial.ts

@@ -1,5 +1,5 @@
-// The tutorial runner — a tutorial page IS its journey (owner, 2026-09-05: "the journeys should
-// ONLY be what happens in the tutorials — that way to keep the tutorials up to date and proven").
+// The tutorial runner — a tutorial page IS its journey: the journeys are only what happens in the tutorials, which keeps
+// the tutorials up to date and proven.
 //
 // A page is read for its fences, in order:
 //   ```bash            every non-comment line is one command the reader types, run in ONE bash