sliccy 6.177.1 → 6.178.1

package/README.md

@@ -84,6 +84,7 @@ SLICC is for you if:
 - **Read markdown and HTML, or read their source.** A `.md` or `.html` preview opens as the document — formatted prose, a laid-out page — with a **Source** toggle for the syntax-highlighted markup (and **Diff** when the file has uncommitted changes). HTML renders in a sandboxed frame that cannot run scripts or reach the app.
 - **Preview any file, not just the well-known types.** The previewer identifies files from their CONTENT rather than a list of extensions, so an unrecognized extension (`.jsh`, a `Justfile`) previews as source instead of refusing. Text is syntax-highlighted, PDFs render inline, and images, audio, and video play as before.
 - **Add visual and file context directly in chat.** Drop images or files onto the workspace, or use the paperclip button. Dropped `.skill` archives still install into `/workspace/skills`.
+- **See saved chat while SLICC is still starting.** After a reload, each cone's thread is filled from its saved conversation as soon as that record can be read, before each agent is brought back. Until then the thread says it is restoring the session. Compaction markers in that history still name the `/sessions` snapshot they point at.
 - **Never lose a conversation to compaction.** Whenever a cone's history is summarized to fit the context window, the full transcript is first saved to `/sessions` as a live snapshot (one per cone, extended on every round) and the summary tells the agent where to find it. **New chat** completes that snapshot into a normal frozen session (Save / New chat, fast) or deletes it (Discard). **Compact on idle**: a cone that has sat idle for 30 minutes with a context of at least 200k tokens compacts in the background, so you never wait for a summary at the start of your next turn; if you come back mid-round, or if the summary provider is rate-limited, out of quota, unavailable, or returns no valid summary, the round is thrown away and both the live and saved conversation stay byte-for-byte as they were. A later idle window can retry. Every adopted compaction leaves a small marker in the transcript naming what happened, with a link to the snapshot it replaced; a round that ends up keeping nothing takes its marker back out while retaining the full snapshot for recovery.
 - **Keep terminal failures visible.** If a cone or delegated scoop exhausts its provider retries, the error card is stored outside the model-facing history and survives a reload. Retrying or rebuilding the transcript does not duplicate it.
 - **Keep a gelatiere.** Turn on **Memory v2** under Experimental features and SLICC keeps a resident advisor: a persistent scoop no cone owns and nobody can prompt that reviews your archived sessions every night and after you end a chat, then comes back with a few concrete suggestions — a skill from the catalog that fits what you keep doing by hand, a use case you have not tried, a habit that would have avoided a detour. It always uses the current leading cone's model, including after a model switch or leadership change. Suggestions show up as cards in the suggestions sprinkle (Install / Try it / Dismiss) and every open cone gets a lick. `gelatiere run` asks for a pass now; the instructions, the nightly schedule and the budget live in `/shared/GELATIERE.md`.

package/dist/node-server/bridge-security.d.ts

@@ -130,6 +130,13 @@ export declare function validateBridgeUpgrade(input: {
     subprotocolHeader: string | string[] | undefined;
     expectedToken: string;
 }): BridgeUpgradeGateResult;
+/**
+ * Log detail for a rejected `/cdp` upgrade. The bytes written back to the
+ * socket stay the coarse `reason` (a caller must not learn which check
+ * failed). The log splits an empty subprotocol from a token that does not
+ * match.
+ */
+export declare function describeUpgradeRejection(reason: BridgeUpgradeGateResult['reason'], subprotocolHeader: string | string[] | undefined): string;
 /**
  * Resolve the `Access-Control-Allow-Headers` value for a request. Starts
  * from `CORS_BASE_ALLOW_HEADERS` (the static set covering the documented

package/dist/node-server/bridge-security.js

@@ -268,6 +268,20 @@ export function validateBridgeUpgrade(input) {
     }
     return { ok: true, acceptedSubprotocol: accepted };
 }
+/**
+ * Log detail for a rejected `/cdp` upgrade. The bytes written back to the
+ * socket stay the coarse `reason` (a caller must not learn which check
+ * failed). The log splits an empty subprotocol from a token that does not
+ * match.
+ */
+export function describeUpgradeRejection(reason, subprotocolHeader) {
+    if (reason !== 'subprotocol-missing-or-mismatched')
+        return reason ?? 'rejected';
+    const raw = Array.isArray(subprotocolHeader)
+        ? subprotocolHeader.join(',')
+        : (subprotocolHeader ?? '');
+    return raw.trim() ? 'subprotocol-mismatched' : 'subprotocol-missing';
+}
 /**
  * Resolve the `Access-Control-Allow-Headers` value for a request. Starts
  * from `CORS_BASE_ALLOW_HEADERS` (the static set covering the documented

package/dist/node-server/index.js

@@ -10,7 +10,7 @@ import { homedir } from 'os';
 import { basename, dirname, join, resolve } from 'path';
 import { fileURLToPath } from 'url';
 import { WebSocket, WebSocketServer } from 'ws';
-import { BRIDGE_TOKEN_HEADER, buildCorsHeaders, buildPnaPreflightHeaders, isLoopbackBridgeOrigin, preflightMaxAge, resolveServerBridgeToken, selectBridgeSubprotocol, shouldMountThinBridgeCors, validateBridgeToken, validateBridgeUpgrade, } from './bridge-security.js';
+import { BRIDGE_TOKEN_HEADER, buildCorsHeaders, buildPnaPreflightHeaders, describeUpgradeRejection, isLoopbackBridgeOrigin, preflightMaxAge, resolveServerBridgeToken, selectBridgeSubprotocol, shouldMountThinBridgeCors, validateBridgeToken, validateBridgeUpgrade, } from './bridge-security.js';
 import { closeLaunchedBrowserGracefully } from './browser-shutdown.js';
 import { applyCdpUnmask } from './cdp-proxy/cdp-unmask.js';
 import { ChromeReconnectController, closeClientForUpstreamReset, markChromeLegDown, } from './cdp-proxy/chrome-reconnect.js';
@@ -586,6 +586,7 @@ function rejectUpgradeUnauthorized(socket, reason) {
  * reference server (HTTP poll still works without the upgrade).
  */
 function attachCdpUpgradeRouting(server, wss, lickWss, bridgeToken, computerDemoWss = null) {
+    const upgradeRejectDedup = new CliLogDedup('[cdp-proxy]');
     server.on('upgrade', (request, socket, head) => {
         const { pathname } = new URL(request.url, `http://${request.headers.host}`);
         if (pathname === '/cdp') {
@@ -596,7 +597,12 @@ function attachCdpUpgradeRouting(server, wss, lickWss, bridgeToken, computerDemo
                     expectedToken: bridgeToken,
                 });
                 if (!gate.ok) {
-                    console.warn(`[cdp-proxy] /cdp upgrade rejected: ${gate.reason}`);
+                    const detail = describeUpgradeRejection(gate.reason, request.headers['sec-websocket-protocol']);
+                    const line = `[cdp-proxy] /cdp upgrade rejected: ${detail}`;
+                    if (upgradeRejectDedup.shouldLog(line))
+                        console.warn(line);
+                    // Body stays the coarse reason. The log line is the one that
+                    // distinguishes a missing subprotocol from a mismatched token.
                     rejectUpgradeUnauthorized(socket, gate.reason ?? 'rejected');
                     return;
                 }