sliccy 5.32.3 → 5.32.4

package/dist/node-server/_shared/bridge-protocol.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Standalone/Electron thin-bridge launch contract — single source of truth.
+ *
+ * The node-server (and swift-server) appends `?bridge=<ws-url>&bridgeToken=…`
+ * to the hosted leader launch URL; the leader dials the local `/cdp`
+ * WebSocket offering `Sec-WebSocket-Protocol: slicc.bridge.v1.<token>` and
+ * sends the raw token on cross-origin `/api/*` calls as `X-Bridge-Token`.
+ *
+ * Consumers: `packages/node-server/src/bridge-security.ts` (server gate),
+ * `packages/webapp/src/ui/boot/bridge-launch-params.ts` (leader boot),
+ * `packages/chrome-extension/src/bridge-sw.ts` (SW port allowlist),
+ * `packages/webapp/src/ui/llm-proxy-sw.ts` (header pass-through).
+ * Swift mirror: `packages/swift-server/Sources/Server/BridgeSecurity.swift`
+ * — update it when these values change.
+ */
+/** Production hosted-UI origin every bridge allowlist starts from. */
+export declare const SLICC_HOSTED_ORIGIN = "https://www.sliccy.ai";
+/** Staging tray-hub origin (allowlisted by the node-server bridge only). */
+export declare const SLICC_STAGING_HUB_ORIGIN = "https://slicc-tray-hub-staging.minivelos.workers.dev";
+/** Subprotocol prefix the leader sends; servers validate `<prefix><token>`. */
+export declare const BRIDGE_SUBPROTOCOL_PREFIX = "slicc.bridge.v1.";
+/** Query-param name carrying the per-process bridge token. */
+export declare const BRIDGE_TOKEN_QUERY_PARAM = "bridgeToken";
+/** Query-param name carrying the local `/cdp` WebSocket URL. */
+export declare const BRIDGE_WS_QUERY_PARAM = "bridge";
+/** Header carrying the raw bridge token on cross-origin `/api/*` calls. */
+export declare const BRIDGE_TOKEN_HEADER = "X-Bridge-Token";
+//# sourceMappingURL=bridge-protocol.d.ts.map

package/dist/node-server/_shared/bridge-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge-protocol.d.ts","sourceRoot":"","sources":["../src/bridge-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,sEAAsE;AACtE,eAAO,MAAM,mBAAmB,0BAA0B,CAAC;AAE3D,4EAA4E;AAC5E,eAAO,MAAM,wBAAwB,yDAAyD,CAAC;AAE/F,+EAA+E;AAC/E,eAAO,MAAM,yBAAyB,qBAAqB,CAAC;AAE5D,8DAA8D;AAC9D,eAAO,MAAM,wBAAwB,gBAAgB,CAAC;AAEtD,gEAAgE;AAChE,eAAO,MAAM,qBAAqB,WAAW,CAAC;AAE9C,2EAA2E;AAC3E,eAAO,MAAM,mBAAmB,mBAAmB,CAAC"}

package/dist/node-server/_shared/bridge-protocol.js

@@ -0,0 +1,28 @@
+/**
+ * Standalone/Electron thin-bridge launch contract — single source of truth.
+ *
+ * The node-server (and swift-server) appends `?bridge=<ws-url>&bridgeToken=…`
+ * to the hosted leader launch URL; the leader dials the local `/cdp`
+ * WebSocket offering `Sec-WebSocket-Protocol: slicc.bridge.v1.<token>` and
+ * sends the raw token on cross-origin `/api/*` calls as `X-Bridge-Token`.
+ *
+ * Consumers: `packages/node-server/src/bridge-security.ts` (server gate),
+ * `packages/webapp/src/ui/boot/bridge-launch-params.ts` (leader boot),
+ * `packages/chrome-extension/src/bridge-sw.ts` (SW port allowlist),
+ * `packages/webapp/src/ui/llm-proxy-sw.ts` (header pass-through).
+ * Swift mirror: `packages/swift-server/Sources/Server/BridgeSecurity.swift`
+ * — update it when these values change.
+ */
+/** Production hosted-UI origin every bridge allowlist starts from. */
+export const SLICC_HOSTED_ORIGIN = 'https://www.sliccy.ai';
+/** Staging tray-hub origin (allowlisted by the node-server bridge only). */
+export const SLICC_STAGING_HUB_ORIGIN = 'https://slicc-tray-hub-staging.minivelos.workers.dev';
+/** Subprotocol prefix the leader sends; servers validate `<prefix><token>`. */
+export const BRIDGE_SUBPROTOCOL_PREFIX = 'slicc.bridge.v1.';
+/** Query-param name carrying the per-process bridge token. */
+export const BRIDGE_TOKEN_QUERY_PARAM = 'bridgeToken';
+/** Query-param name carrying the local `/cdp` WebSocket URL. */
+export const BRIDGE_WS_QUERY_PARAM = 'bridge';
+/** Header carrying the raw bridge token on cross-origin `/api/*` calls. */
+export const BRIDGE_TOKEN_HEADER = 'X-Bridge-Token';
+//# sourceMappingURL=bridge-protocol.js.map

package/dist/node-server/_shared/bridge-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge-protocol.js","sourceRoot":"","sources":["../src/bridge-protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,sEAAsE;AACtE,MAAM,CAAC,MAAM,mBAAmB,GAAG,uBAAuB,CAAC;AAE3D,4EAA4E;AAC5E,MAAM,CAAC,MAAM,wBAAwB,GAAG,sDAAsD,CAAC;AAE/F,+EAA+E;AAC/E,MAAM,CAAC,MAAM,yBAAyB,GAAG,kBAAkB,CAAC;AAE5D,8DAA8D;AAC9D,MAAM,CAAC,MAAM,wBAAwB,GAAG,aAAa,CAAC;AAEtD,gEAAgE;AAChE,MAAM,CAAC,MAAM,qBAAqB,GAAG,QAAQ,CAAC;AAE9C,2EAA2E;AAC3E,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC"}

package/dist/node-server/_shared/index.d.ts

@@ -1,4 +1,5 @@
 export * from './base64.js';
+export * from './bridge-protocol.js';
 export * from './cdp-frame-unmask.js';
 export * from './electron-overlay-route.js';
 export * from './oauth-extra-domains-storage.js';
@@ -8,4 +9,5 @@ export * from './secrets-pipeline.js';
 export * from './session-secret-store.js';
 export * from './sign-and-forward.js';
 export * from './sigv4.js';
+export * from './tray-signaling.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/node-server/_shared/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC"}

package/dist/node-server/_shared/index.js

@@ -1,5 +1,6 @@
 // Re-exports added in Task 1.2 (secret-masking) and Task 1.3 (secrets-pipeline).
 export * from './base64.js';
+export * from './bridge-protocol.js';
 export * from './cdp-frame-unmask.js';
 export * from './electron-overlay-route.js';
 export * from './oauth-extra-domains-storage.js';
@@ -9,4 +10,5 @@ export * from './secrets-pipeline.js';
 export * from './session-secret-store.js';
 export * from './sign-and-forward.js';
 export * from './sigv4.js';
+export * from './tray-signaling.js';
 //# sourceMappingURL=index.js.map

package/dist/node-server/_shared/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAEjF,cAAc,aAAa,CAAC;AAC5B,cAAc,sBAAsB,CAAC;AACrC,cAAc,uBAAuB,CAAC;AACtC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,kCAAkC,CAAC;AACjD,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC"}

package/dist/node-server/_shared/tray-signaling.d.ts

@@ -0,0 +1,272 @@
+/**
+ * Tray signaling wire contract — single source of truth.
+ *
+ * Spoken on two wires:
+ * 1. The leader's control WebSocket to the tray-hub worker
+ *    (`LeaderToWorkerControlMessage` / `WorkerToLeaderControlMessage`).
+ * 2. The follower's HTTP bootstrap API on the worker
+ *    (`FollowerBootstrapRequest` → `FollowerAttachResponse` /
+ *    `FollowerBootstrapResponse`).
+ *
+ * Consumed by `packages/webapp` (leader + TS follower) and
+ * `packages/cloudflare-worker` (SessionTray Durable Object). The iOS follower
+ * mirrors a subset in `packages/ios-app/SliccFollower/Models/TrayTypes.swift`
+ * — update that mirror when this file changes.
+ *
+ * Worker-internal persisted state (`TrayBootstrapRecord`, `TrayRecord`) is NOT
+ * wire contract and lives in `packages/cloudflare-worker/src/shared.ts`.
+ */
+export declare const TRAY_BOOTSTRAP_TIMEOUT_MS = 20000;
+export declare const TRAY_BOOTSTRAP_MAX_RETRIES = 3;
+export declare const TRAY_BOOTSTRAP_RETRY_AFTER_MS = 1000;
+export type TrayBootstrapState = 'pending' | 'offered' | 'connected' | 'failed';
+export interface TraySessionDescription {
+    type: 'offer' | 'answer';
+    sdp: string;
+}
+export interface TrayIceCandidate {
+    candidate: string;
+    sdpMid?: string | null;
+    sdpMLineIndex?: number | null;
+    usernameFragment?: string | null;
+}
+export interface TrayBootstrapFailure {
+    code: string;
+    message: string;
+    retryable: boolean;
+    retryAfterMs: number | null;
+    failedAt: string;
+}
+export type TrayBootstrapEvent = {
+    sequence: number;
+    sentAt: string;
+    type: 'bootstrap.offer';
+    offer: TraySessionDescription;
+} | {
+    sequence: number;
+    sentAt: string;
+    type: 'bootstrap.ice_candidate';
+    candidate: TrayIceCandidate;
+} | {
+    sequence: number;
+    sentAt: string;
+    type: 'bootstrap.failed';
+    failure: TrayBootstrapFailure;
+};
+export interface TrayBootstrapStatus {
+    controllerId: string;
+    bootstrapId: string;
+    attempt: number;
+    state: TrayBootstrapState;
+    expiresAt: string;
+    cursor: number;
+    maxRetries: number;
+    retriesRemaining: number;
+    retryAfterMs: number | null;
+    failure: TrayBootstrapFailure | null;
+}
+export interface TurnIceServer {
+    urls: string[];
+    username: string;
+    credential: string;
+}
+export interface FollowerJoinRequestedMessage {
+    type: 'follower.join_requested';
+    trayId: string;
+    controllerId: string;
+    runtime?: string;
+    bootstrapId: string;
+    attempt: number;
+    expiresAt: string;
+    iceServers?: TurnIceServer[];
+}
+export interface BootstrapAnswerMessage {
+    type: 'bootstrap.answer';
+    trayId: string;
+    controllerId: string;
+    bootstrapId: string;
+    answer: TraySessionDescription;
+}
+export interface BootstrapIceCandidateMessage {
+    type: 'bootstrap.ice_candidate';
+    trayId: string;
+    controllerId: string;
+    bootstrapId: string;
+    candidate: TrayIceCandidate;
+}
+export interface WebhookEventMessage {
+    type: 'webhook.event';
+    webhookId: string;
+    headers: Record<string, string>;
+    body: unknown;
+    timestamp: string;
+}
+export interface WorkerPreviewRequest {
+    type: 'preview.request';
+    reqId: string;
+    servedRoot: string;
+    vfsPath: string;
+    asText: boolean;
+}
+export interface WorkerPreviewRevoked {
+    type: 'preview.revoked';
+    previewToken: string;
+}
+export interface WorkerBridgeConnected {
+    type: 'bridge.connected';
+    connId: string;
+    previewToken: string;
+    origin: string;
+    userAgent: string;
+    connectedAt: string;
+}
+export interface WorkerBridgeDisconnected {
+    type: 'bridge.disconnected';
+    connId: string;
+    reason?: string;
+}
+export interface WorkerBridgeCdpResponse {
+    type: 'bridge.cdp.response';
+    connId: string;
+    id: number;
+    result?: Record<string, unknown>;
+    error?: {
+        code: number;
+        message: string;
+    };
+}
+export type WorkerToLeaderControlMessage = {
+    type: 'leader.connected';
+    trayId: string;
+    controllerId: string;
+} | {
+    type: 'pong';
+    trayId: string;
+} | FollowerJoinRequestedMessage | BootstrapAnswerMessage | BootstrapIceCandidateMessage | WebhookEventMessage | WorkerPreviewRequest | WorkerPreviewRevoked | WorkerBridgeConnected | WorkerBridgeDisconnected | WorkerBridgeCdpResponse;
+export interface LeaderBootstrapOfferMessage {
+    type: 'bootstrap.offer';
+    controllerId: string;
+    bootstrapId: string;
+    offer: TraySessionDescription;
+}
+export interface LeaderBootstrapIceCandidateMessage {
+    type: 'bootstrap.ice_candidate';
+    controllerId: string;
+    bootstrapId: string;
+    candidate: TrayIceCandidate;
+}
+export interface LeaderBootstrapFailedMessage {
+    type: 'bootstrap.failed';
+    controllerId: string;
+    bootstrapId: string;
+    code: string;
+    message: string;
+    retryable?: boolean;
+    retryAfterMs?: number | null;
+}
+export interface LeaderPreviewResponseOk {
+    type: 'preview.response';
+    reqId: string;
+    ok: true;
+    mime: string;
+    chunkIndex: number;
+    totalChunks: number;
+    /** utf-8 text OR base64-encoded binary, per `encoding`. */
+    content: string;
+    encoding: 'utf-8' | 'base64';
+}
+export interface LeaderPreviewResponseError {
+    type: 'preview.response';
+    reqId: string;
+    ok: false;
+    status: 404 | 403 | 500;
+    reason?: string;
+}
+export interface LeaderPreviewPurge {
+    type: 'preview.purge';
+    previewToken: string;
+}
+export interface LeaderBridgeCdpRequest {
+    type: 'bridge.cdp.request';
+    connId: string;
+    id: number;
+    method: string;
+    params?: Record<string, unknown>;
+    sessionId?: string;
+}
+/** Leader → worker: close a bridged preview visitor tab's connection (from
+ *  `Target.closeTarget` on a `preview:<token>:<connId>` target). */
+export interface LeaderBridgeClose {
+    type: 'bridge.close';
+    connId: string;
+}
+export type LeaderToWorkerControlMessage = {
+    type: 'ping';
+} | LeaderBootstrapOfferMessage | LeaderBootstrapIceCandidateMessage | LeaderBootstrapFailedMessage | LeaderPreviewResponseOk | LeaderPreviewResponseError | LeaderPreviewPurge | LeaderBridgeCdpRequest | LeaderBridgeClose;
+export interface BootstrapPollRequest {
+    action: 'poll';
+    controllerId?: string;
+    bootstrapId?: string;
+    cursor?: number;
+}
+export interface BootstrapAnswerRequest {
+    action: 'answer';
+    controllerId?: string;
+    bootstrapId?: string;
+    answer?: TraySessionDescription;
+}
+export interface BootstrapIceCandidateRequest {
+    action: 'ice-candidate';
+    controllerId?: string;
+    bootstrapId?: string;
+    candidate?: TrayIceCandidate;
+}
+export interface BootstrapRetryRequest {
+    action: 'retry';
+    controllerId?: string;
+    bootstrapId?: string;
+    runtime?: string;
+}
+export type FollowerBootstrapRequest = BootstrapPollRequest | BootstrapAnswerRequest | BootstrapIceCandidateRequest | BootstrapRetryRequest;
+export interface TrayLeaderSummary {
+    controllerId: string;
+    connected: boolean;
+    reconnectDeadline: string | null;
+}
+export interface FollowerJoinRequest {
+    controllerId?: string;
+    runtime?: string;
+}
+export type FollowerAttachResult = {
+    action: 'wait';
+    code: 'LEADER_NOT_ELECTED' | 'LEADER_NOT_CONNECTED';
+    retryAfterMs: number;
+} | {
+    action: 'signal';
+    code: 'LEADER_CONNECTED';
+    bootstrap: TrayBootstrapStatus;
+} | {
+    action: 'fail';
+    code: 'INVALID_JOIN_CAPABILITY' | 'TRAY_EXPIRED';
+    error: string;
+};
+export interface FollowerAttachResponse {
+    trayId: string;
+    controllerId: string;
+    role: 'follower';
+    leader: TrayLeaderSummary | null;
+    participantCount: number;
+    result: FollowerAttachResult;
+    iceServers?: TurnIceServer[];
+}
+export interface FollowerBootstrapResponse {
+    trayId: string;
+    controllerId: string;
+    role: 'follower';
+    leader: TrayLeaderSummary | null;
+    participantCount: number;
+    bootstrap: TrayBootstrapStatus;
+    events: TrayBootstrapEvent[];
+    iceServers?: TurnIceServer[];
+}
+//# sourceMappingURL=tray-signaling.d.ts.map

package/dist/node-server/_shared/tray-signaling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tray-signaling.d.ts","sourceRoot":"","sources":["../src/tray-signaling.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAChD,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAC5C,eAAO,MAAM,6BAA6B,OAAQ,CAAC;AAEnD,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAEhF,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,kBAAkB,GAC1B;IACE,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,sBAAsB,CAAC;CAC/B,GACD;IACE,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,yBAAyB,CAAC;IAChC,SAAS,EAAE,gBAAgB,CAAC;CAC7B,GACD;IACE,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,EAAE,oBAAoB,CAAC;CAC/B,CAAC;AAEN,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,kBAAkB,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,oBAAoB,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,yBAAyB,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,aAAa,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,sBAAsB,CAAC;CAChC;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,yBAAyB,CAAC;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,gBAAgB,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,eAAe,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,iBAAiB,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,iBAAiB,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3C;AAED,MAAM,MAAM,4BAA4B,GACpC;IACE,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB,GACD;IACE,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,GACD,4BAA4B,GAC5B,sBAAsB,GACtB,4BAA4B,GAC5B,mBAAmB,GACnB,oBAAoB,GACpB,oBAAoB,GACpB,qBAAqB,GACrB,wBAAwB,GACxB,uBAAuB,CAAC;AAM5B,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,iBAAiB,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,sBAAsB,CAAC;CAC/B;AAED,MAAM,WAAW,kCAAkC;IACjD,IAAI,EAAE,yBAAyB,CAAC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,gBAAgB,CAAC;CAC7B;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,kBAAkB,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,GAAG,QAAQ,CAAC;CAC9B;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,kBAAkB,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAGD,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,eAAe,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;oEACoE;AACpE,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,4BAA4B,GACpC;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB,2BAA2B,GAC3B,kCAAkC,GAClC,4BAA4B,GAC5B,uBAAuB,GACvB,0BAA0B,GAC1B,kBAAkB,GAClB,sBAAsB,GACtB,iBAAiB,CAAC;AAMtB,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,QAAQ,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,sBAAsB,CAAC;CACjC;AAED,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,eAAe,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,wBAAwB,GAChC,oBAAoB,GACpB,sBAAsB,GACtB,4BAA4B,GAC5B,qBAAqB,CAAC;AAM1B,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,oBAAoB,GAC5B;IACE,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,oBAAoB,GAAG,sBAAsB,CAAC;IACpD,YAAY,EAAE,MAAM,CAAC;CACtB,GACD;IACE,MAAM,EAAE,QAAQ,CAAC;IACjB,IAAI,EAAE,kBAAkB,CAAC;IACzB,SAAS,EAAE,mBAAmB,CAAC;CAChC,GACD;IACE,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,yBAAyB,GAAG,cAAc,CAAC;IACjD,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEN,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,UAAU,CAAC,EAAE,aAAa,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,mBAAmB,CAAC;IAC/B,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,UAAU,CAAC,EAAE,aAAa,EAAE,CAAC;CAC9B"}

package/dist/node-server/_shared/tray-signaling.js

@@ -0,0 +1,22 @@
+/**
+ * Tray signaling wire contract — single source of truth.
+ *
+ * Spoken on two wires:
+ * 1. The leader's control WebSocket to the tray-hub worker
+ *    (`LeaderToWorkerControlMessage` / `WorkerToLeaderControlMessage`).
+ * 2. The follower's HTTP bootstrap API on the worker
+ *    (`FollowerBootstrapRequest` → `FollowerAttachResponse` /
+ *    `FollowerBootstrapResponse`).
+ *
+ * Consumed by `packages/webapp` (leader + TS follower) and
+ * `packages/cloudflare-worker` (SessionTray Durable Object). The iOS follower
+ * mirrors a subset in `packages/ios-app/SliccFollower/Models/TrayTypes.swift`
+ * — update that mirror when this file changes.
+ *
+ * Worker-internal persisted state (`TrayBootstrapRecord`, `TrayRecord`) is NOT
+ * wire contract and lives in `packages/cloudflare-worker/src/shared.ts`.
+ */
+export const TRAY_BOOTSTRAP_TIMEOUT_MS = 20_000;
+export const TRAY_BOOTSTRAP_MAX_RETRIES = 3;
+export const TRAY_BOOTSTRAP_RETRY_AFTER_MS = 1_000;
+//# sourceMappingURL=tray-signaling.js.map

package/dist/node-server/_shared/tray-signaling.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tray-signaling.js","sourceRoot":"","sources":["../src/tray-signaling.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAChD,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAC5C,MAAM,CAAC,MAAM,6BAA6B,GAAG,KAAK,CAAC"}

package/dist/node-server/bridge-security.d.ts

@@ -18,11 +18,12 @@
  * Pure module (no node-only imports) so the WS gate is trivially unit
  * testable from `tests/bridge-security.test.ts`.
  */
+import { BRIDGE_SUBPROTOCOL_PREFIX, BRIDGE_TOKEN_HEADER, BRIDGE_TOKEN_QUERY_PARAM, BRIDGE_WS_QUERY_PARAM } from './_shared/index.js';
+export { BRIDGE_SUBPROTOCOL_PREFIX, BRIDGE_TOKEN_HEADER, BRIDGE_TOKEN_QUERY_PARAM, BRIDGE_WS_QUERY_PARAM, };
 /**
- * Origin allowlist. Production + staging worker plus the dev-mode loopback
- * origins (parallel to chrome-extension's `BRIDGE_DEV_ORIGINS`). Add a new
- * origin here and in the extension allowlist together — they MUST stay in
- * sync, otherwise extension and standalone disagree on what's a leader.
+ * Origin allowlist. The hosted origins come from `@slicc/shared-ts`
+ * (`bridge-protocol.ts`) — the same constants the extension allowlist
+ * composes from — plus this server's own dev-mode loopback origins.
  *
  * Dev-only extra origins can be added at process start via the
  * `BRIDGE_DEV_ALLOWED_ORIGINS` env var (comma-separated). Used by the
@@ -31,21 +32,6 @@
  * allowlist is byte-identical to this frozen base — prod is unaffected.
  */
 export declare const BRIDGE_ALLOWED_ORIGINS: readonly string[];
-/** Subprotocol prefix advertised by the leader; the per-process token is appended. */
-export declare const BRIDGE_SUBPROTOCOL_PREFIX = "slicc.bridge.v1.";
-/** Query-param name the launch URL uses to forward the subprotocol token to the leader. */
-export declare const BRIDGE_TOKEN_QUERY_PARAM = "bridgeToken";
-/** Query-param name the launch URL uses to forward the local /cdp WebSocket URL. */
-export declare const BRIDGE_WS_QUERY_PARAM = "bridge";
-/**
- * Request header carrying the per-process bridge token on cross-origin
- * /api/* calls from a remote allowlisted leader (e.g. sliccy.ai). The
- * webapp's `proxied-fetch.ts` attaches it whenever a local API base
- * origin is set; the thin-bridge CORS middleware validates it. Header
- * is included in `CORS_BASE_ALLOW_HEADERS` so browsers don't strip it
- * on the preflight.
- */
-export declare const BRIDGE_TOKEN_HEADER = "X-Bridge-Token";
 /**
  * True iff `origin` is in the bridge allowlist. The frozen prod base
  * (`BRIDGE_ALLOWED_ORIGINS`) is matched case-sensitively against the

package/dist/node-server/bridge-security.js

@@ -19,11 +19,15 @@
  * testable from `tests/bridge-security.test.ts`.
  */
 import { randomUUID, timingSafeEqual } from 'node:crypto';
+import { BRIDGE_SUBPROTOCOL_PREFIX, BRIDGE_TOKEN_HEADER, BRIDGE_TOKEN_QUERY_PARAM, BRIDGE_WS_QUERY_PARAM, SLICC_HOSTED_ORIGIN, SLICC_STAGING_HUB_ORIGIN, } from './_shared/index.js';
+// Re-exported so the many existing bridge-security importers (index.ts,
+// launch-url.ts, electron-controller.ts, tests) keep their import surface.
+// Canonical definitions: packages/shared-ts/src/bridge-protocol.ts.
+export { BRIDGE_SUBPROTOCOL_PREFIX, BRIDGE_TOKEN_HEADER, BRIDGE_TOKEN_QUERY_PARAM, BRIDGE_WS_QUERY_PARAM, };
 /**
- * Origin allowlist. Production + staging worker plus the dev-mode loopback
- * origins (parallel to chrome-extension's `BRIDGE_DEV_ORIGINS`). Add a new
- * origin here and in the extension allowlist together — they MUST stay in
- * sync, otherwise extension and standalone disagree on what's a leader.
+ * Origin allowlist. The hosted origins come from `@slicc/shared-ts`
+ * (`bridge-protocol.ts`) — the same constants the extension allowlist
+ * composes from — plus this server's own dev-mode loopback origins.
  *
  * Dev-only extra origins can be added at process start via the
  * `BRIDGE_DEV_ALLOWED_ORIGINS` env var (comma-separated). Used by the
@@ -32,8 +36,8 @@ import { randomUUID, timingSafeEqual } from 'node:crypto';
  * allowlist is byte-identical to this frozen base — prod is unaffected.
  */
 export const BRIDGE_ALLOWED_ORIGINS = Object.freeze([
-    'https://www.sliccy.ai',
-    'https://slicc-tray-hub-staging.minivelos.workers.dev',
+    SLICC_HOSTED_ORIGIN,
+    SLICC_STAGING_HUB_ORIGIN,
     'http://localhost:5710',
     'http://127.0.0.1:5710',
 ]);
@@ -81,21 +85,6 @@ const BRIDGE_DEV_ALLOWED_ORIGINS = (() => {
     }
     return set;
 })();
-/** Subprotocol prefix advertised by the leader; the per-process token is appended. */
-export const BRIDGE_SUBPROTOCOL_PREFIX = 'slicc.bridge.v1.';
-/** Query-param name the launch URL uses to forward the subprotocol token to the leader. */
-export const BRIDGE_TOKEN_QUERY_PARAM = 'bridgeToken';
-/** Query-param name the launch URL uses to forward the local /cdp WebSocket URL. */
-export const BRIDGE_WS_QUERY_PARAM = 'bridge';
-/**
- * Request header carrying the per-process bridge token on cross-origin
- * /api/* calls from a remote allowlisted leader (e.g. sliccy.ai). The
- * webapp's `proxied-fetch.ts` attaches it whenever a local API base
- * origin is set; the thin-bridge CORS middleware validates it. Header
- * is included in `CORS_BASE_ALLOW_HEADERS` so browsers don't strip it
- * on the preflight.
- */
-export const BRIDGE_TOKEN_HEADER = 'X-Bridge-Token';
 /**
  * Headers we allow on cross-origin /api requests from the hosted leader.
  * Includes the `/api/fetch-proxy` transport headers (`X-Target-URL`, the