@kangentic/protocol 0.8.0 → 0.9.0

package/README.md

@@ -20,7 +20,11 @@ model, and the honest relay-metadata statement.
 - `Noise_KK_25519_ChaChaPoly_BLAKE2s` for ongoing sessions (mutual authentication by construction,
   no trust-on-first-use).
 - A token-bound Noise PSK handshake for the one-time pairing ceremony, confirmed by a Matrix-style
-  short authentication string (SAS) on both screens.
+  short authentication string (SAS) compared on both screens - digits only, no emoji.
+- A sealed pairing-confirm frame (`pairing/confirm.ts`), sent once the human taps Confirm on the
+  phone: it is a liveness/intent signal, not the security boundary. It opens only if both peers
+  completed the same handshake transcript, which is exactly the property the SAS comparison
+  already vouches for - the human's comparison remains the actual defense.
 - No shell, file, or arbitrary-command verb exists in the protocol.
 
 This package has not undergone a third-party security audit. Report suspected vulnerabilities

package/dist/index.cjs

@@ -58,6 +58,7 @@ __export(index_exports, {
   encodeProtocolVersion: () => encodeProtocolVersion,
   encodeRosterEntryForSigning: () => encodeRosterEntryForSigning,
   findRosterDevice: () => findRosterDevice,
+  formatKeyFingerprint: () => formatKeyFingerprint,
   generateEd25519KeyPair: () => generateEd25519KeyPair,
   generateX25519KeyPair: () => generateX25519KeyPair,
   hexToBytes: () => hexToBytes,
@@ -72,6 +73,7 @@ __export(index_exports, {
   isRecord: () => isRecord,
   isRosterEntryExpired: () => isRosterEntryExpired,
   isSecureRelayAddress: () => isSecureRelayAddress,
+  openPairingConfirm: () => openPairingConfirm,
   openPushEnvelope: () => openPushEnvelope,
   parseActivityEventPayload: () => parseActivityEventPayload,
   parseBacklogItemWire: () => parseBacklogItemWire,
@@ -93,6 +95,7 @@ __export(index_exports, {
   parseTranscriptWindowResponsePayload: () => parseTranscriptWindowResponsePayload,
   randomBytes: () => randomBytes4,
   rosterDeviceCapabilitySet: () => rosterDeviceCapabilitySet,
+  sealPairingConfirm: () => sealPairingConfirm,
   sealPushEnvelope: () => sealPushEnvelope,
   signRosterEntry: () => signRosterEntry,
   unwrapSessionFrame: () => unwrapSessionFrame,
@@ -5579,19 +5582,34 @@ function parseReadBoardResponsePayload(payload) {
   if (typeof payload.projectId !== "string") throw new Error('read-board response is missing "projectId"');
   if (!Array.isArray(payload.columns)) throw new Error('read-board response is missing "columns"');
   if (!Array.isArray(payload.tasks)) throw new Error('read-board response is missing "tasks"');
-  if (!Array.isArray(payload.backlog)) throw new Error('read-board response is missing "backlog"');
+  if (payload.backlog !== void 0 && !Array.isArray(payload.backlog)) {
+    throw new Error('read-board response has a non-array "backlog"');
+  }
   if (payload.showTicketNumbers !== void 0 && typeof payload.showTicketNumbers !== "boolean") {
     throw new Error('read-board response has a non-boolean "showTicketNumbers"');
   }
+  if (payload.view !== void 0 && payload.view !== "full" && payload.view !== "sessions") {
+    throw new Error('read-board response has an invalid "view"');
+  }
   return {
     projectId: payload.projectId,
     columns: payload.columns.map((column) => parseBoardColumnWire(column)),
     tasks: payload.tasks.map((task) => parseBoardTaskWire(task)),
-    backlog: payload.backlog.map((item) => parseBacklogItemWire(item)),
+    ...payload.backlog !== void 0 ? { backlog: payload.backlog.map((item) => parseBacklogItemWire(item)) } : {},
     ...payload.projectColor !== void 0 ? { projectColor: parseAccentColor(payload.projectColor, "read-board snapshot") } : {},
-    ...payload.showTicketNumbers !== void 0 ? { showTicketNumbers: payload.showTicketNumbers } : {}
+    ...payload.showTicketNumbers !== void 0 ? { showTicketNumbers: payload.showTicketNumbers } : {},
+    ...payload.view !== void 0 ? { view: payload.view } : {},
+    ...payload.taskCountsByColumnId !== void 0 ? { taskCountsByColumnId: parseTaskCountsByColumnId(payload.taskCountsByColumnId) } : {}
   };
 }
+function parseTaskCountsByColumnId(value) {
+  if (!isRecord(value)) throw new Error('read-board response has a non-object "taskCountsByColumnId"');
+  const counts = {};
+  for (const [columnId, count] of Object.entries(value)) {
+    if (typeof count === "number" && Number.isInteger(count) && count >= 0) counts[columnId] = count;
+  }
+  return counts;
+}
 function parseReadBoardRequestPayload(payload) {
   if (!isRecord(payload)) throw new Error("read-board payload must be an object");
   if (payload.projectId !== void 0 && typeof payload.projectId !== "string") {
@@ -5600,7 +5618,10 @@ function parseReadBoardRequestPayload(payload) {
   if (payload.action !== void 0 && payload.action !== "subscribe" && payload.action !== "unsubscribe") {
     throw new Error('read-board payload has an invalid "action"');
   }
-  return { projectId: payload.projectId, action: payload.action };
+  if (payload.view !== void 0 && payload.view !== "full" && payload.view !== "sessions") {
+    throw new Error('read-board payload has an invalid "view"');
+  }
+  return { projectId: payload.projectId, action: payload.action, view: payload.view };
 }
 function parseReadDiffResponsePayload(payload) {
   if (!isRecord(payload)) throw new Error("read-diff response must be an object");
@@ -5841,6 +5862,27 @@ function decodePairingQrPayload(uri) {
   return { desktopStaticPublicKey, pairingToken, relayAddress, expiresAt, protocolVersion };
 }
 
+// src/pairing/confirm.ts
+var PAIRING_CONFIRM_PLAINTEXT = new TextEncoder().encode("kangentic-pairing-confirm-v1");
+var EMPTY_ASSOCIATED_DATA = new Uint8Array(0);
+function sealPairingConfirm(initiatorToResponder) {
+  return initiatorToResponder.encryptWithAd(EMPTY_ASSOCIATED_DATA, PAIRING_CONFIRM_PLAINTEXT);
+}
+function openPairingConfirm(initiatorToResponder, frame) {
+  let plaintext;
+  try {
+    plaintext = initiatorToResponder.decryptWithAd(EMPTY_ASSOCIATED_DATA, frame);
+  } catch {
+    return false;
+  }
+  if (plaintext.length !== PAIRING_CONFIRM_PLAINTEXT.length) return false;
+  let mismatch = 0;
+  for (let index = 0; index < plaintext.length; index += 1) {
+    mismatch |= plaintext[index] ^ PAIRING_CONFIRM_PLAINTEXT[index];
+  }
+  return mismatch === 0;
+}
+
 // src/roster/roster.ts
 function uint32LengthPrefixed(bytes) {
   const prefix = new Uint8Array(4);
@@ -5880,6 +5922,15 @@ function capabilitySetToRosterCapabilities(capabilities) {
   return capabilitySetToArray(capabilities);
 }
 
+// src/roster/fingerprint.ts
+function formatKeyFingerprint(publicKeyHex, groups = 4) {
+  const clusters = [];
+  for (let index = 0; index < groups; index += 1) {
+    clusters.push(publicKeyHex.slice(index * 4, index * 4 + 4));
+  }
+  return clusters.join(" ");
+}
+
 // src/capabilities/board-tools.ts
 var BOARD_TOOL_READ_NAMES = [
   "search_tasks",
@@ -6041,6 +6092,7 @@ function isBridgeEvent(value) {
   encodeProtocolVersion,
   encodeRosterEntryForSigning,
   findRosterDevice,
+  formatKeyFingerprint,
   generateEd25519KeyPair,
   generateX25519KeyPair,
   hexToBytes,
@@ -6055,6 +6107,7 @@ function isBridgeEvent(value) {
   isRecord,
   isRosterEntryExpired,
   isSecureRelayAddress,
+  openPairingConfirm,
   openPushEnvelope,
   parseActivityEventPayload,
   parseBacklogItemWire,
@@ -6076,6 +6129,7 @@ function isBridgeEvent(value) {
   parseTranscriptWindowResponsePayload,
   randomBytes,
   rosterDeviceCapabilitySet,
+  sealPairingConfirm,
   sealPushEnvelope,
   signRosterEntry,
   unwrapSessionFrame,

package/dist/index.d.ts

@@ -12,11 +12,13 @@ export type { JsonValue, BridgeMessage, HeartbeatMessage, CapabilityRequestMessa
 export { encodeMessage, decodeMessage, MAX_FRAME_LENGTH, MAX_DECODED_LENGTH, COMPRESSION_THRESHOLD } from './wire/framing';
 export { isJsonValue, isRecord } from './wire/json-value';
 export { SessionFrameKind, wrapSessionFrame, unwrapSessionFrame } from './wire/session-frame';
-export { parseCapabilityRequestPayload, parseReadStreamResponsePayload, parseReadBoardResponsePayload, parseReadDiffResponsePayload, parseTranscriptWindowResponsePayload, parseRegisterPushRequestPayload, type CapabilityRequestPayloadMap, type CapabilityResponsePayloadMap, type ReadStreamRequestPayload, type ReadStreamResponsePayload, type ReadStreamSessionStatusWire, type TranscriptWindowResponsePayload, type ReadBoardRequestPayload, type ReadBoardProjectSummary, type ReadBoardProjectListResponsePayload, type ReadBoardSnapshotResponsePayload, type ReadBoardResponsePayload, type ReadDiffScope, type ReadDiffRequestPayload, type ReadDiffResponsePayload, type SendUserMessageRequestPayload, type SendUserMessageResponsePayload, type MoveTaskRequestPayload, type MoveTaskResponsePayload, type AnswerPermissionPromptRequestPayload, type AnswerPermissionPromptResponsePayload, type InteractiveTerminalRequestPayload, type InteractiveTerminalResponsePayload, type BoardToolRequestPayload, type BoardToolResponsePayload, type RegisterPushRequestPayload, type RegisterPushResponsePayload, } from './wire/payloads';
+export { parseCapabilityRequestPayload, parseReadStreamResponsePayload, parseReadBoardResponsePayload, parseReadDiffResponsePayload, parseTranscriptWindowResponsePayload, parseRegisterPushRequestPayload, type CapabilityRequestPayloadMap, type CapabilityResponsePayloadMap, type ReadStreamRequestPayload, type ReadStreamResponsePayload, type ReadStreamSessionStatusWire, type TranscriptWindowResponsePayload, type ReadBoardRequestPayload, type ReadBoardView, type ReadBoardProjectSummary, type ReadBoardProjectListResponsePayload, type ReadBoardSnapshotResponsePayload, type ReadBoardResponsePayload, type ReadDiffScope, type ReadDiffRequestPayload, type ReadDiffResponsePayload, type SendUserMessageRequestPayload, type SendUserMessageResponsePayload, type MoveTaskRequestPayload, type MoveTaskResponsePayload, type AnswerPermissionPromptRequestPayload, type AnswerPermissionPromptResponsePayload, type InteractiveTerminalRequestPayload, type InteractiveTerminalResponsePayload, type BoardToolRequestPayload, type BoardToolResponsePayload, type RegisterPushRequestPayload, type RegisterPushResponsePayload, } from './wire/payloads';
 export { PUSH_CATEGORIES, isPushCategory, parsePushEnvelopePlaintext, sealPushEnvelope, openPushEnvelope, PUSH_ENVELOPE_MAX_AGE_MS, PUSH_ENVELOPE_MAX_FUTURE_SKEW_MS, type PushCategory, type PushEnvelopePlaintext, } from './crypto/push-envelope';
 export { PAIRING_URI_SCHEME, encodePairingQrPayload, decodePairingQrPayload, type PairingQrPayload, } from './pairing/qr';
+export { sealPairingConfirm, openPairingConfirm } from './pairing/confirm';
 export { MAX_RELAY_ADDRESS_LENGTH, isSecureRelayAddress } from './pairing/relay-address';
 export { signRosterEntry, verifyRosterEntry, encodeRosterEntryForSigning, isRosterEntryExpired, findRosterDevice, rosterDeviceCapabilitySet, capabilitySetToRosterCapabilities, type RosterDeviceEntry, type DeviceRoster, } from './roster/roster';
+export { formatKeyFingerprint } from './roster/fingerprint';
 export { CAPABILITY_VERBS, isCapabilityVerb, capabilitySetFromArray, capabilitySetToArray, type CapabilityVerb, type CapabilitySet, } from './capabilities/verbs';
 export { BOARD_TOOL_READ_NAMES, BOARD_TOOL_WRITE_NAMES, isBoardToolReadName, isBoardToolWriteName, type BoardToolReadName, type BoardToolWriteName, type BoardToolName, } from './capabilities/board-tools';
 export { isBridgeEvent, parseActivityEventPayload, type BridgeEvent, type TranscriptEvent, type ActivityEvent, type ActivityEventPayload, type TerminalEvent, type TerminalResizeEvent, type BoardEvent, type BoardEventPayload, type DiffEvent, } from './events/event';

package/dist/index.mjs

@@ -5466,19 +5466,34 @@ function parseReadBoardResponsePayload(payload) {
   if (typeof payload.projectId !== "string") throw new Error('read-board response is missing "projectId"');
   if (!Array.isArray(payload.columns)) throw new Error('read-board response is missing "columns"');
   if (!Array.isArray(payload.tasks)) throw new Error('read-board response is missing "tasks"');
-  if (!Array.isArray(payload.backlog)) throw new Error('read-board response is missing "backlog"');
+  if (payload.backlog !== void 0 && !Array.isArray(payload.backlog)) {
+    throw new Error('read-board response has a non-array "backlog"');
+  }
   if (payload.showTicketNumbers !== void 0 && typeof payload.showTicketNumbers !== "boolean") {
     throw new Error('read-board response has a non-boolean "showTicketNumbers"');
   }
+  if (payload.view !== void 0 && payload.view !== "full" && payload.view !== "sessions") {
+    throw new Error('read-board response has an invalid "view"');
+  }
   return {
     projectId: payload.projectId,
     columns: payload.columns.map((column) => parseBoardColumnWire(column)),
     tasks: payload.tasks.map((task) => parseBoardTaskWire(task)),
-    backlog: payload.backlog.map((item) => parseBacklogItemWire(item)),
+    ...payload.backlog !== void 0 ? { backlog: payload.backlog.map((item) => parseBacklogItemWire(item)) } : {},
     ...payload.projectColor !== void 0 ? { projectColor: parseAccentColor(payload.projectColor, "read-board snapshot") } : {},
-    ...payload.showTicketNumbers !== void 0 ? { showTicketNumbers: payload.showTicketNumbers } : {}
+    ...payload.showTicketNumbers !== void 0 ? { showTicketNumbers: payload.showTicketNumbers } : {},
+    ...payload.view !== void 0 ? { view: payload.view } : {},
+    ...payload.taskCountsByColumnId !== void 0 ? { taskCountsByColumnId: parseTaskCountsByColumnId(payload.taskCountsByColumnId) } : {}
   };
 }
+function parseTaskCountsByColumnId(value) {
+  if (!isRecord(value)) throw new Error('read-board response has a non-object "taskCountsByColumnId"');
+  const counts = {};
+  for (const [columnId, count] of Object.entries(value)) {
+    if (typeof count === "number" && Number.isInteger(count) && count >= 0) counts[columnId] = count;
+  }
+  return counts;
+}
 function parseReadBoardRequestPayload(payload) {
   if (!isRecord(payload)) throw new Error("read-board payload must be an object");
   if (payload.projectId !== void 0 && typeof payload.projectId !== "string") {
@@ -5487,7 +5502,10 @@ function parseReadBoardRequestPayload(payload) {
   if (payload.action !== void 0 && payload.action !== "subscribe" && payload.action !== "unsubscribe") {
     throw new Error('read-board payload has an invalid "action"');
   }
-  return { projectId: payload.projectId, action: payload.action };
+  if (payload.view !== void 0 && payload.view !== "full" && payload.view !== "sessions") {
+    throw new Error('read-board payload has an invalid "view"');
+  }
+  return { projectId: payload.projectId, action: payload.action, view: payload.view };
 }
 function parseReadDiffResponsePayload(payload) {
   if (!isRecord(payload)) throw new Error("read-diff response must be an object");
@@ -5728,6 +5746,27 @@ function decodePairingQrPayload(uri) {
   return { desktopStaticPublicKey, pairingToken, relayAddress, expiresAt, protocolVersion };
 }
 
+// src/pairing/confirm.ts
+var PAIRING_CONFIRM_PLAINTEXT = new TextEncoder().encode("kangentic-pairing-confirm-v1");
+var EMPTY_ASSOCIATED_DATA = new Uint8Array(0);
+function sealPairingConfirm(initiatorToResponder) {
+  return initiatorToResponder.encryptWithAd(EMPTY_ASSOCIATED_DATA, PAIRING_CONFIRM_PLAINTEXT);
+}
+function openPairingConfirm(initiatorToResponder, frame) {
+  let plaintext;
+  try {
+    plaintext = initiatorToResponder.decryptWithAd(EMPTY_ASSOCIATED_DATA, frame);
+  } catch {
+    return false;
+  }
+  if (plaintext.length !== PAIRING_CONFIRM_PLAINTEXT.length) return false;
+  let mismatch = 0;
+  for (let index = 0; index < plaintext.length; index += 1) {
+    mismatch |= plaintext[index] ^ PAIRING_CONFIRM_PLAINTEXT[index];
+  }
+  return mismatch === 0;
+}
+
 // src/roster/roster.ts
 function uint32LengthPrefixed(bytes) {
   const prefix = new Uint8Array(4);
@@ -5767,6 +5806,15 @@ function capabilitySetToRosterCapabilities(capabilities) {
   return capabilitySetToArray(capabilities);
 }
 
+// src/roster/fingerprint.ts
+function formatKeyFingerprint(publicKeyHex, groups = 4) {
+  const clusters = [];
+  for (let index = 0; index < groups; index += 1) {
+    clusters.push(publicKeyHex.slice(index * 4, index * 4 + 4));
+  }
+  return clusters.join(" ");
+}
+
 // src/capabilities/board-tools.ts
 var BOARD_TOOL_READ_NAMES = [
   "search_tasks",
@@ -5927,6 +5975,7 @@ export {
   encodeProtocolVersion,
   encodeRosterEntryForSigning,
   findRosterDevice,
+  formatKeyFingerprint,
   generateEd25519KeyPair,
   generateX25519KeyPair,
   hexToBytes,
@@ -5941,6 +5990,7 @@ export {
   isRecord,
   isRosterEntryExpired,
   isSecureRelayAddress,
+  openPairingConfirm,
   openPushEnvelope,
   parseActivityEventPayload,
   parseBacklogItemWire,
@@ -5962,6 +6012,7 @@ export {
   parseTranscriptWindowResponsePayload,
   randomBytes4 as randomBytes,
   rosterDeviceCapabilitySet,
+  sealPairingConfirm,
   sealPushEnvelope,
   signRosterEntry,
   unwrapSessionFrame,

package/dist/pairing/confirm.d.ts

@@ -0,0 +1,39 @@
+/**
+ * The pairing-confirm frame: one AEAD-sealed message the phone sends after
+ * the human taps Confirm, over the transport key the completed IKpsk0
+ * handshake just produced (HandshakeState.writeMessage's `split` result -
+ * see pairing-handshake.ts). This is a LIVENESS AND INTENT signal, not the
+ * pairing's security boundary: a relay-in-the-middle already holds a valid
+ * session with the desktop and could forge any frame it wants. The actual
+ * defense is unchanged - the human compares the desktop's SAS digits
+ * against the phone's, and only taps Confirm on a match.
+ *
+ * What this frame buys instead: both peers derive their transport keys
+ * from the SAME completed handshake transcript (getHandshakeHash/split are
+ * both functions of the transcript), so if the sealed frame opens under the
+ * desktop's key, the two transcripts necessarily agree - which means the
+ * SAS the human compared necessarily agreed too. The AEAD open IS the
+ * desktop's SAS verification; that is why the frame carries no digits of
+ * its own, and why a failed open is treated as a mismatch/failure, not a
+ * silent no-op.
+ *
+ * There is no reject frame. Backing out of the ceremony on the phone closes
+ * the transport without sending this frame; close-without-confirm is the
+ * rejection, observed by the desktop as its pairing timeout (see
+ * pairing-service.ts's phase timers).
+ */
+import { CipherState } from '../crypto/noise/cipher-state';
+/**
+ * Seals the confirm frame under the initiator-to-responder cipher state
+ * (index 0 of HandshakeState's `split` pair, by Noise Protocol Framework
+ * convention). Called once per ceremony, so nonce reuse under this key is
+ * not a concern - the key itself is fresh per handshake transcript.
+ */
+export declare function sealPairingConfirm(initiatorToResponder: CipherState): Uint8Array;
+/**
+ * Opens a received confirm frame. Returns false (never throws) on a
+ * tampered/wrong-key ciphertext or an unexpected plaintext, so the caller
+ * can treat "could not verify" uniformly whether the failure was
+ * cryptographic or structural.
+ */
+export declare function openPairingConfirm(initiatorToResponder: CipherState, frame: Uint8Array): boolean;

package/dist/roster/fingerprint.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Formats a device's static public key as a short, human-comparable
+ * fingerprint - the identity the pairing ceremony actually bound and the
+ * SAS actually confirmed, unlike a name (not unique) or a hardware id
+ * (unavailable on modern Android, permanent PII). Matches
+ * kangentic-mobile's src/screens/usePairedDesktopInfo.ts formatKeyFingerprint
+ * exactly, so a user can hold the phone next to the desktop and compare
+ * directly: front-only slice, no ellipsis, no case change.
+ */
+export declare function formatKeyFingerprint(publicKeyHex: string, groups?: number): string;

package/dist/wire/payloads.d.ts

@@ -99,10 +99,41 @@ export interface TranscriptWindowResponsePayload {
 }
 /** Phone-side narrowing of a transcript-window response. Throws on a malformed required field. */
 export declare function parseTranscriptWindowResponsePayload(payload: JsonValue): TranscriptWindowResponsePayload;
+/**
+ * Which projection of a board the phone wants.
+ *
+ * - 'sessions': columns, per-column task counts, and only the non-archived
+ *   tasks that carry a `session_id`. This is what an agent feed renders: it
+ *   watches every project at once but only ever draws the handful of tasks
+ *   with a live agent on them.
+ * - 'full': every non-archived task, for the one project whose board the user
+ *   actually has open.
+ *
+ * Neither carries the backlog. Sending the field at all is the signal that
+ * this phone tolerates a response without one; a phone that omits it gets the
+ * pre-0.9.0 payload unchanged.
+ */
+export type ReadBoardView = 'full' | 'sessions';
 export interface ReadBoardRequestPayload {
     projectId?: string;
     /** Defaults to 'subscribe' when omitted. 'unsubscribe' only has an effect when projectId is set - the no-projectId project list is a one-shot read with no live feed to tear down. */
     action?: 'subscribe' | 'unsubscribe';
+    /**
+     * subscribe only: the projection wanted (protocol 0.9.0). Omitted means the
+     * legacy full board WITH the backlog.
+     *
+     * Measured on a 15-project desktop, the full boards were 63 kB compressed
+     * of a ~96 kB cold start, of which 23 kB was a backlog no phone has ever
+     * rendered and another 30 kB was tasks with no session on them. Worse, a
+     * board subscription re-snapshots on every board change, so that payload
+     * repeats for as long as the phone is connected. The 'sessions' projection
+     * is 12 kB for the same 15 projects.
+     *
+     * A pre-0.9.0 desktop ignores the field and returns a full board with no
+     * `view` echo, which is exactly how a 0.9.0 phone detects that it must not
+     * treat the snapshot as filtered.
+     */
+    view?: ReadBoardView;
 }
 export interface ReadBoardProjectSummary {
     id: string;
@@ -123,8 +154,10 @@ export interface ReadBoardProjectListResponsePayload {
 export interface ReadBoardSnapshotResponsePayload {
     projectId: string;
     columns: BoardColumnWire[];
+    /** Non-archived tasks; filtered to the ones carrying a `session_id` when `view` is 'sessions'. */
     tasks: BoardTaskWire[];
-    backlog: BacklogItemWire[];
+    /** Absent whenever the request carried a `view` (protocol 0.9.0) - no phone has ever rendered it. */
+    backlog?: BacklogItemWire[];
     /** The project's accent color ("#rrggbb"); same semantics as ReadBoardProjectSummary.color. Absent from pre-0.5.0 desktops. */
     projectColor?: string;
     /**
@@ -133,6 +166,18 @@ export interface ReadBoardSnapshotResponsePayload {
      * true, the desktop default).
      */
     showTicketNumbers?: boolean;
+    /**
+     * The projection actually applied, echoed back. Absent from a pre-0.9.0
+     * desktop, which always sends a full board - so treat an absent `view` as
+     * 'full', never as "filtered, unknown how".
+     */
+    view?: ReadBoardView;
+    /**
+     * Non-archived task count per column id, sent with a 'sessions' view because
+     * `tasks` is filtered and a count taken from it would be wrong. Appending a
+     * card to a column needs the real length.
+     */
+    taskCountsByColumnId?: Record<string, number>;
 }
 export type ReadBoardResponsePayload = ReadBoardProjectListResponsePayload | ReadBoardSnapshotResponsePayload;
 /** Phone-side narrowing of a read-board response (project list or board snapshot). Throws on a malformed required field. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kangentic/protocol",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "Kangentic mobile bridge wire protocol: framing, Noise-based pairing and session handshakes, signed device roster, and capability verbs shared between desktop and mobile.",
   "main": "dist/index.cjs",
   "module": "dist/index.mjs",