[williamloo-scale]

Website SDK follow-ups, lifted onto main (after #428's final rounds rewrote the SDK and #429 landed).

• Session cookie per site. agentenv_session_<name>, from the name the card gives (a name a cookie name can't hold is spelled safely, with a hash), and named on the card, so two sites a browser reaches under one gateway host (/website/a/, /website/b/) don't overwrite each other's sign-in. The shared agentenv_session is no longer read: a website browser's cookies last one run and every site in a run is built from one image.
• Conformance: required vs recommended. What a website env's server must do fails a run: a card declaring its domains, readiness and routes; any host; readiness; no page at the reserved paths (new); and the data plane the card advertises, round-tripped (a card advertising none fails). X-Universe-Now, the clock, forwarded headers and cookies (now also: the session path sets the card's cookie) are warned, main's existing status; --strict fails on a warning. Each line says (required) or (recommended). A page plus /api/health with no card or data plane fails, as on main.

Left out

• The clock rate (virtual_seconds_per_real_second): main's site clock reads the gateway's clock once per request, so it no longer extrapolates and has no rate to learn.
• models=: it read and wrote through the store main removed (sites keep their own data behind data hooks now), so it waits for a design note. The db/SQLAlchemy extra goes with it.

Test

• Protocol website tests: 212 passed (with a built Notes page, so the prefix test runs too); protocol suite 1,233 passed earlier on this change.
• Framework tst/unit/env/gateway, env/envs, bundle: 2,600 passed, 2 failed; the 2 (test_disk_recipe.py, the disk launcher) fail the same on unchanged main on this Mac.
• Headless Chrome, two Notes sites behind one host at /website/a/ and /website/b/: on main, signing in as ben on a is undone by opening b (one shared cookie, which b can't read and replaces); with this change each keeps its own cookie (agentenv_session_notes-a, agentenv_session_notes-b) and a stays ben.

E2E (agent-environments-admin VM, real gateway, local sandbox)

Two Notes sites (notes-a, notes-b) in one multi env with the run's Playwright website browser, driven through the gateway's MCP as an agent does, both at http://gateway:18765/website/<name>/:

• Cards name agentenv_session_notes-a / -b, and each site sets its own cookie. Signed in as ben on notes-a, then notes-b opened (ann), notes-a is still ben.
• The same flow with the sites built from main's protocol: both set agentenv_session, and notes-a is back to ann after notes-b is opened.
• Conformance through /svc/notes-a: 9 passed, also with --strict (before the card and data plane became required; the Notes image passes 9/9 with them required). Through /website/notes-a the required readiness check fails, as the gateway keeps the card off a site's route.
• Chaos: a site restart keeps the browser's sign-in; a stopped site answers 502 while the other answers 200, and signs in again once started; 40 concurrent clients signing in to both sites as different users all read their own users back.
• Found, not from this PR (same on main), filed as FD-5285: a gateway restart leaves the website browser on about:blank in a new browser context, so its cookies and sign-ins are gone, while the sites still know the sessions (a plain client stays signed in).

🤖 Generated with Claude Code

Confidence Score: 5/5

The reviewed changes appear safe to merge, with legacy-cookie compatibility supplied by PR #445.

Summary

This PR gives each website its own session cookie and separates required checks from recommended checks.

• Each named website keeps its own browser session cookie.
• The checker labels website rules and lets strict mode fail on warnings.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart TD
  A[Run each check] --> B{Required?}
  B -->|Yes, check fails| C[failed]
  B -->|No, check fails| D[warned]
  C --> E[Run fails]
  D --> F{strict?}
  F -->|Yes| E
  F -->|No| G[Warning does not fail run]

Loading

_{Reviews (19) · Last reviewed commit: "refactor(website): each conformance chec..." · Reviewed by Greptile}