@frockbot/applet-sdk 0.3.30 → 0.3.31

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frockbot/applet-sdk",
-  "version": "0.3.30",
+  "version": "0.3.31",
   "private": false,
   "type": "module",
   "description": "Authoring SDK for FrockBot Applets: schema-first Durable Object server, TanStack DB client, component kit, linter, and the `applet` CLI.",

package/src/client/index.ts

@@ -123,6 +123,9 @@ function decodeHostInit(data: unknown): AppletHostInitV1 | undefined {
       socketUrl: value.socketUrl,
       token: value.token,
       generationId: value.generationId,
+      ...(value.tokenTransport === "subprotocol-v1"
+        ? { tokenTransport: "subprotocol-v1" as const }
+        : {}),
     },
   };
 }
@@ -178,6 +181,14 @@ export function createApplet<TServer extends { tables: TablesShape }>(
       lastInit = init.applet;
       transport.connect(init.applet);
     });
+    window.parent.postMessage(
+      {
+        schemaVersion: 1,
+        type: "applet/ready",
+        tokenTransport: "subprotocol-v1",
+      },
+      "*",
+    );
     // Leave with a close frame rather than a dropped connection: the server
     // then sees a 1000, not a 1006 it has to discover on its next write. A
     // page restored from the back/forward cache reconnects with the same

package/src/client/transport.ts

@@ -22,6 +22,7 @@ export interface AppletInitV1 {
   /** Short-lived viewer token; appended as `?token=`. */
   token: string;
   generationId: string;
+  tokenTransport?: "subprotocol-v1";
 }
 
 export type AppletStatus =
@@ -43,7 +44,10 @@ export interface AppletSocket {
   onerror: ((event: unknown) => void) | null;
 }
 
-export type AppletSocketFactory = (url: string) => AppletSocket;
+export type AppletSocketFactory = (
+  url: string,
+  protocols?: string[],
+) => AppletSocket;
 
 /** What a TanStack DB collection hands the transport for one table. */
 export interface AppletTableSink {
@@ -69,8 +73,8 @@ export interface AppletTransportOptions {
 
 class RejectedMutation extends Error {}
 
-function defaultSocketFactory(url: string): AppletSocket {
-  return new WebSocket(url) as unknown as AppletSocket;
+function defaultSocketFactory(url: string, protocols?: string[]): AppletSocket {
+  return new WebSocket(url, protocols) as unknown as AppletSocket;
 }
 
 export class AppletTransport {
@@ -185,8 +189,12 @@ export class AppletTransport {
       status: this.#attempt === 0 ? "connecting" : "reconnecting",
     });
     const url = new URL(this.#init.socketUrl);
-    url.searchParams.set("token", this.#init.token);
-    const socket = this.#options.socketFactory(url.toString());
+    const protocols =
+      this.#init.tokenTransport === "subprotocol-v1"
+        ? ["frockbot.applet.v1", `frockbot.viewer.${this.#init.token}`]
+        : undefined;
+    if (!protocols) url.searchParams.set("token", this.#init.token);
+    const socket = this.#options.socketFactory(url.toString(), protocols);
     this.#socket = socket;
     socket.onopen = () => {
       if (this.#currentSocketId === id) this.#handshake();