[dezren39]

Summary

• add --world-source-only / ID_WORLD_SOURCE_ONLY for world servers
• require the server-side Roc compiler/platform and reject raw --world-module bootstrap
• deny raw artifact API installs and reject streaming uploads before consuming chunks
• preserve the source compile/install/validate/activate path; keep native execution separately gated
• document that compiler provenance and per-world profiles remain follow-ups

Validation

• cargo test --features sandbox source_only_policy --lib
• cargo test --features sandbox source_only_mode_is_opt_in_and_requires_world_mode --lib
• cargo test --features sandbox world_mode_requires_an_admin_token_but_not_web --lib
• cargo check --features web,ssh
• cargo check --no-default-features --features world
• actual Roc compile/install/run WebSocket test with source-only enabled: browser_websocket_can_compile_install_and_run_roc_sources

Stacked on #214 (platform-portable-ui).

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 083e8a28-3caf-45ae-bbfc-e39b18166cee

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[dezren39]

Merged into main through #234 (merge commit 228019a). Every commit of this branch is in main by patch; this branch was the lower layer of that stack. Closing as merged. The branch is left in place.