@kangentic/protocol 0.10.0 → 0.11.1

package/dist/index.cjs

@@ -5607,10 +5607,15 @@ function parseReadBoardResponsePayload(payload) {
       return {
         id: project.id,
         name: project.name,
-        ...project.color !== void 0 ? { color: parseAccentColor(project.color, `read-board project ${index}`) } : {}
+        ...project.color !== void 0 ? { color: parseAccentColor(project.color, `read-board project ${index}`) } : {},
+        ...typeof project.groupId === "string" ? { groupId: project.groupId } : {},
+        ...typeof project.position === "number" ? { position: project.position } : {}
       };
     });
-    return { projects };
+    const groups = Array.isArray(payload.groups) ? payload.groups.flatMap(
+      (group) => isRecord(group) && typeof group.id === "string" && typeof group.name === "string" && typeof group.position === "number" ? [{ id: group.id, name: group.name, position: group.position }] : []
+    ) : void 0;
+    return { projects, ...groups !== void 0 ? { groups } : {} };
   }
   if (typeof payload.projectId !== "string") throw new Error('read-board response is missing "projectId"');
   if (!Array.isArray(payload.columns)) throw new Error('read-board response is missing "columns"');
@@ -5828,14 +5833,34 @@ function parseCapabilityRequestPayload(verb, payload) {
 
 // src/pairing/relay-address.ts
 var MAX_RELAY_ADDRESS_LENGTH = 512;
-var LOOPBACK_WS_PREFIXES = ["ws://localhost", "ws://127.0.0.1", "ws://[::1]"];
+var LOOPBACK_WS_HOSTS = ["localhost", "127.0.0.1", "[::1]"];
+var PLAINTEXT_SCHEME = "ws://";
+function hostWithoutPort(authority) {
+  if (authority.startsWith("[")) {
+    const closingBracket = authority.indexOf("]");
+    if (closingBracket === -1) return null;
+    const afterLiteral = authority.slice(closingBracket + 1);
+    if (afterLiteral !== "" && !/^:[0-9]+$/.test(afterLiteral)) return null;
+    return authority.slice(0, closingBracket + 1);
+  }
+  const portSeparator = authority.lastIndexOf(":");
+  if (portSeparator === -1) return authority;
+  const port = authority.slice(portSeparator + 1);
+  return /^[0-9]+$/.test(port) ? authority.slice(0, portSeparator) : authority;
+}
+function plaintextRelayHost(relayAddress) {
+  if (!relayAddress.startsWith(PLAINTEXT_SCHEME)) return null;
+  const afterScheme = relayAddress.slice(PLAINTEXT_SCHEME.length);
+  const authorityEnd = afterScheme.search(/[/?#]/);
+  const authority = authorityEnd === -1 ? afterScheme : afterScheme.slice(0, authorityEnd);
+  if (authority.includes("@")) return null;
+  const host = hostWithoutPort(authority);
+  return host === null ? null : host.toLowerCase();
+}
 function isSecureRelayAddress(relayAddress) {
   if (relayAddress.startsWith("wss://")) return true;
-  return LOOPBACK_WS_PREFIXES.some((prefix) => {
-    if (!relayAddress.startsWith(prefix)) return false;
-    const boundaryChar = relayAddress.charAt(prefix.length);
-    return boundaryChar === "" || boundaryChar === ":" || boundaryChar === "/" || boundaryChar === "?" || boundaryChar === "#";
-  });
+  const host = plaintextRelayHost(relayAddress);
+  return host !== null && LOOPBACK_WS_HOSTS.includes(host);
 }
 
 // src/pairing/qr.ts

package/dist/index.d.ts

@@ -12,7 +12,7 @@ export type { JsonValue, BridgeMessage, HeartbeatMessage, CapabilityRequestMessa
 export { encodeMessage, decodeMessage, MAX_FRAME_LENGTH, MAX_DECODED_LENGTH, COMPRESSION_THRESHOLD } from './wire/framing';
 export { isJsonValue, isRecord } from './wire/json-value';
 export { SessionFrameKind, wrapSessionFrame, unwrapSessionFrame } from './wire/session-frame';
-export { parseCapabilityRequestPayload, parseReadStreamResponsePayload, parseReadBoardResponsePayload, parseReadDiffResponsePayload, parseTranscriptWindowResponsePayload, parseRegisterPushRequestPayload, type CapabilityRequestPayloadMap, type CapabilityResponsePayloadMap, type ReadStreamRequestPayload, type ReadStreamResponsePayload, type ReadStreamSessionStatusWire, type TranscriptWindowResponsePayload, type ReadBoardRequestPayload, type ReadBoardView, type ReadBoardProjectSummary, type ReadBoardProjectListResponsePayload, type ReadBoardSnapshotResponsePayload, type ReadBoardArchivedResponsePayload, type ReadBoardResponsePayload, type ReadDiffScope, type ReadDiffRequestPayload, type ReadDiffResponsePayload, type SendUserMessageRequestPayload, type SendUserMessageResponsePayload, type MoveTaskRequestPayload, type MoveTaskResponsePayload, type AnswerPermissionPromptRequestPayload, type AnswerPermissionPromptResponsePayload, type InteractiveTerminalRequestPayload, type InteractiveTerminalResponsePayload, type BoardToolRequestPayload, type BoardToolResponsePayload, type RegisterPushRequestPayload, type RegisterPushResponsePayload, } from './wire/payloads';
+export { parseCapabilityRequestPayload, parseReadStreamResponsePayload, parseReadBoardResponsePayload, parseReadDiffResponsePayload, parseTranscriptWindowResponsePayload, parseRegisterPushRequestPayload, type CapabilityRequestPayloadMap, type CapabilityResponsePayloadMap, type ReadStreamRequestPayload, type ReadStreamResponsePayload, type ReadStreamSessionStatusWire, type TranscriptWindowResponsePayload, type ReadBoardRequestPayload, type ReadBoardView, type ReadBoardProjectSummary, type ReadBoardProjectGroup, type ReadBoardProjectListResponsePayload, type ReadBoardSnapshotResponsePayload, type ReadBoardArchivedResponsePayload, type ReadBoardResponsePayload, type ReadDiffScope, type ReadDiffRequestPayload, type ReadDiffResponsePayload, type SendUserMessageRequestPayload, type SendUserMessageResponsePayload, type MoveTaskRequestPayload, type MoveTaskResponsePayload, type AnswerPermissionPromptRequestPayload, type AnswerPermissionPromptResponsePayload, type InteractiveTerminalRequestPayload, type InteractiveTerminalResponsePayload, type BoardToolRequestPayload, type BoardToolResponsePayload, type RegisterPushRequestPayload, type RegisterPushResponsePayload, } from './wire/payloads';
 export { PUSH_CATEGORIES, isPushCategory, parsePushEnvelopePlaintext, sealPushEnvelope, openPushEnvelope, PUSH_ENVELOPE_MAX_AGE_MS, PUSH_ENVELOPE_MAX_FUTURE_SKEW_MS, type PushCategory, type PushEnvelopePlaintext, } from './crypto/push-envelope';
 export { PAIRING_URI_SCHEME, encodePairingQrPayload, decodePairingQrPayload, type PairingQrPayload, } from './pairing/qr';
 export { sealPairingConfirm, openPairingConfirm } from './pairing/confirm';

package/dist/index.mjs

@@ -5490,10 +5490,15 @@ function parseReadBoardResponsePayload(payload) {
       return {
         id: project.id,
         name: project.name,
-        ...project.color !== void 0 ? { color: parseAccentColor(project.color, `read-board project ${index}`) } : {}
+        ...project.color !== void 0 ? { color: parseAccentColor(project.color, `read-board project ${index}`) } : {},
+        ...typeof project.groupId === "string" ? { groupId: project.groupId } : {},
+        ...typeof project.position === "number" ? { position: project.position } : {}
       };
     });
-    return { projects };
+    const groups = Array.isArray(payload.groups) ? payload.groups.flatMap(
+      (group) => isRecord(group) && typeof group.id === "string" && typeof group.name === "string" && typeof group.position === "number" ? [{ id: group.id, name: group.name, position: group.position }] : []
+    ) : void 0;
+    return { projects, ...groups !== void 0 ? { groups } : {} };
   }
   if (typeof payload.projectId !== "string") throw new Error('read-board response is missing "projectId"');
   if (!Array.isArray(payload.columns)) throw new Error('read-board response is missing "columns"');
@@ -5711,14 +5716,34 @@ function parseCapabilityRequestPayload(verb, payload) {
 
 // src/pairing/relay-address.ts
 var MAX_RELAY_ADDRESS_LENGTH = 512;
-var LOOPBACK_WS_PREFIXES = ["ws://localhost", "ws://127.0.0.1", "ws://[::1]"];
+var LOOPBACK_WS_HOSTS = ["localhost", "127.0.0.1", "[::1]"];
+var PLAINTEXT_SCHEME = "ws://";
+function hostWithoutPort(authority) {
+  if (authority.startsWith("[")) {
+    const closingBracket = authority.indexOf("]");
+    if (closingBracket === -1) return null;
+    const afterLiteral = authority.slice(closingBracket + 1);
+    if (afterLiteral !== "" && !/^:[0-9]+$/.test(afterLiteral)) return null;
+    return authority.slice(0, closingBracket + 1);
+  }
+  const portSeparator = authority.lastIndexOf(":");
+  if (portSeparator === -1) return authority;
+  const port = authority.slice(portSeparator + 1);
+  return /^[0-9]+$/.test(port) ? authority.slice(0, portSeparator) : authority;
+}
+function plaintextRelayHost(relayAddress) {
+  if (!relayAddress.startsWith(PLAINTEXT_SCHEME)) return null;
+  const afterScheme = relayAddress.slice(PLAINTEXT_SCHEME.length);
+  const authorityEnd = afterScheme.search(/[/?#]/);
+  const authority = authorityEnd === -1 ? afterScheme : afterScheme.slice(0, authorityEnd);
+  if (authority.includes("@")) return null;
+  const host = hostWithoutPort(authority);
+  return host === null ? null : host.toLowerCase();
+}
 function isSecureRelayAddress(relayAddress) {
   if (relayAddress.startsWith("wss://")) return true;
-  return LOOPBACK_WS_PREFIXES.some((prefix) => {
-    if (!relayAddress.startsWith(prefix)) return false;
-    const boundaryChar = relayAddress.charAt(prefix.length);
-    return boundaryChar === "" || boundaryChar === ":" || boundaryChar === "/" || boundaryChar === "?" || boundaryChar === "#";
-  });
+  const host = plaintextRelayHost(relayAddress);
+  return host !== null && LOOPBACK_WS_HOSTS.includes(host);
 }
 
 // src/pairing/qr.ts

package/dist/pairing/relay-address.d.ts

@@ -1,6 +1,7 @@
 /**
- * Relay address rules shared, byte-for-byte, with the mobile app's
- * src/pairing/qr.ts. This module imports nothing on purpose: it is
+ * Relay address rules, mirrored by the mobile app's src/pairing/qr.ts (which
+ * hardened these rules first; this module now matches it). This module
+ * imports nothing on purpose: it is
  * deep-imported by the desktop's src/shared/relay.ts, which the RENDERER
  * bundles, and pulling in the rest of this package (crypto/primitives ->
  * @noble/*) would drag Noise crypto into that bundle for no reason. Keep it
@@ -10,9 +11,14 @@ export declare const MAX_RELAY_ADDRESS_LENGTH = 512;
 /**
  * True if the phone's pairing QR scanner will accept this relay address.
  * wss:// is always secure; ws:// is accepted only for loopback, since the
- * pairing token doubles as the Noise PSK and is dialed verbatim as
- * `?slot=`. Prefix-based (not hostname-based) with an explicit boundary
- * check, so `ws://localhost.evil.com` - a hostname that merely starts with
- * the string "localhost" - is rejected rather than treated as loopback.
+ * pairing token doubles as the Noise PSK and is dialed verbatim as `?slot=`.
+ *
+ * Parses the AUTHORITY rather than prefix-matching. Prefix matching accepted
+ * `ws://127.0.0.1:8080@evil.test`: everything before an '@' is userinfo, so
+ * that address dials evil.test while looking like loopback, putting the PSK
+ * on the wire in cleartext to an attacker-chosen host - and the pairing then
+ * persists that host to the trust anchor for every later session. Authority
+ * parsing also subsumes the old boundary check, since `localhost.evil.com`
+ * is simply a different host.
  */
 export declare function isSecureRelayAddress(relayAddress: string): boolean;

package/dist/wire/payloads.d.ts

@@ -151,9 +151,28 @@ export interface ReadBoardRequestPayload {
      */
     view?: ReadBoardView;
 }
+/**
+ * A desktop project group ("KANGENTIC", "TROY WEB"), for a phone rendering
+ * its project list with the same structure the desktop sidebar shows
+ * (protocol 0.11.0).
+ */
+export interface ReadBoardProjectGroup {
+    id: string;
+    name: string;
+    /** Display order among groups. */
+    position: number;
+}
 export interface ReadBoardProjectSummary {
     id: string;
     name: string;
+    /**
+     * The group this project belongs to, or null/absent for an ungrouped one
+     * (protocol 0.11.0). Absent from an older desktop, which is indistinguishable
+     * from ungrouped and renders the same flat list as before.
+     */
+    groupId?: string | null;
+    /** Display order within the group, mirroring the desktop's own ordering (protocol 0.11.0). */
+    position?: number;
     /**
      * Accent color for this project ("#rrggbb"). Today the desktop derives
      * it deterministically from the project id; a user-set project color
@@ -165,6 +184,12 @@ export interface ReadBoardProjectSummary {
 /** Returned when the request omits projectId - the phone's project-bootstrap listing. */
 export interface ReadBoardProjectListResponsePayload {
     projects: ReadBoardProjectSummary[];
+    /**
+     * The desktop's project groups, in display order (protocol 0.11.0). Absent
+     * from an older desktop; a phone that gets none renders one flat list, which
+     * is exactly the pre-0.11.0 behaviour.
+     */
+    groups?: ReadBoardProjectGroup[];
 }
 /** Returned when the request carries a projectId - a snapshot of that project's board. */
 export interface ReadBoardSnapshotResponsePayload {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kangentic/protocol",
-  "version": "0.10.0",
+  "version": "0.11.1",
   "description": "Kangentic mobile bridge wire protocol: framing, Noise-based pairing and session handshakes, signed device roster, and capability verbs shared between desktop and mobile.",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",