@wipcomputer/wip-ldm-os 0.4.85-alpha.14 → 0.4.85-alpha.15

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wipcomputer/wip-ldm-os",
-  "version": "0.4.85-alpha.14",
+  "version": "0.4.85-alpha.15",
   "type": "module",
   "description": "LDM OS: identity, memory, and sovereignty infrastructure for AI agents",
   "engines": {

package/scripts/test-crc-e2ee-session-route.mjs

@@ -30,11 +30,18 @@ assertContains("return openCodexWebClientsForKey(codexRelayKey(agentId, routeId)
 assertContains("const targets = resolveCodexWebClientsForDaemonFrame(identity.agentId, sessionId);", "daemon frames use route resolver");
 assertContains("for (const target of targets) {", "daemon frames send to every resolved target");
 assertContains("if (isCodexE2eeEnvelope(envelope) && envelope.session) {", "web e2ee messages are detected");
+assertContains("envelope.route_thread_id = threadId;", "relay injects ticket-bound thread into e2ee hello");
+assertContains("text = JSON.stringify(envelope);", "relay forwards the route-bound e2ee hello");
 assertContains("registerCodexE2eeSessionRoute(identity.agentId, envelope.session, threadId, ws);", "web e2ee session is registered");
 assertContains("const clientCount = addCodexWebClient(key, ws);", "new web connections are added without replacing existing clients");
 assertContains("removeCodexWebClient(key, ws);", "close cleanup removes only the closing socket");
 assertContains("removeCodexE2eeRoutesForWeb(identity.agentId, threadId, ws);", "close cleanup");
 assertContains("if (route.webKey === webKey && (!ws || route.ws === ws)) {", "cleanup only removes routes owned by the closing socket");
+assertBefore(
+  "envelope.route_thread_id = threadId;",
+  "daemonWs.send(text);",
+  "web route thread is injected before forwarding to daemon",
+);
 assertBefore(
   "registerCodexE2eeSessionRoute(identity.agentId, envelope.session, threadId, ws);",
   "daemonWs.send(text);",

package/src/hosted-mcp/server.mjs

@@ -3129,10 +3129,16 @@ httpServer.on("upgrade", (req, socket, head) => {
     const clientCount = addCodexWebClient(key, ws);
     console.log("codex-relay: web online " + key + " clients=" + clientCount);
     ws.on("message", (data) => {
-      const text = data.toString();
+      let text = data.toString();
       let envelope = null;
       try { envelope = JSON.parse(text); } catch {}
       if (isCodexE2eeEnvelope(envelope) && envelope.session) {
+        // The browser cannot be allowed to choose this value. The relay
+        // owns the route because it consumed the ticket for this URL
+        // thread. The daemon uses this metadata to bind the encrypted
+        // session before it decrypts any session.* command.
+        envelope.route_thread_id = threadId;
+        text = JSON.stringify(envelope);
         registerCodexE2eeSessionRoute(identity.agentId, envelope.session, threadId, ws);
       }
       const daemonWs = codexDaemons.get(identity.agentId);