v5.0.0: protocol v5 and the browser frontend

Protocol v5 replaces newline lines with bounded [u32 len][text] frames and REQ/RES/EVT envelopes. Requests carry correlation ids and the server replays the last 256 replies per connection, so a gateway retry cannot double-debit and a late reply cannot clobber a newer request. HELLO/PONG carry server time; crash rounds announce started_at and push coalesced 10 Hz ticks. Crash now commits sha256(seed) before a round and reveals the seed when it ends, so clients recompute the crash point.

Adds the webd/ gateway: one blocking thread, one ClientCore and one pinned upstream TLS connection per session, an HttpOnly session cookie, takeover, and a 60-second grace window. The browser sends Command JSON and renders View JSON; it never speaks the game protocol or stores credentials.

Adds the vanilla TypeScript browser app at /play/ (login, lobby, all four games, history, notices, crash verification), the nginx /play and /ws routes, and the headless DOM smoke test. webd and the app stay out of the TUI/GUI/server build graph.

The client/server version moves to 5.0.0 in lockstep; v4 peers are refused at HELLO.

1 files changed, 10 insertions, 7 deletions

diff --git a/gui/src/net.rs b/gui/src/net.rs
index 7cba604..7882cd3 100644
--- a/gui/src/net.rs
+++ b/gui/src/net.rs
@@ -14,6 +14,7 @@ use eframe::egui;
 use rusqlite::Connection;
 use zagan_bet::client::transport::{self, TlsStream, TransportError, TrustPrompt};
 use zagan_bet::client::{database, paths};
+use zagan_bet::protocol::Packet;
 
 /// How often the worker checks the socket for pushes when idle.
 const POLL: Duration = Duration::from_millis(8);
@@ -24,7 +25,7 @@ const TRUST_TIMEOUT: Duration = Duration::from_secs(120);
 #[derive(Debug, Clone, PartialEq, Eq)]
 pub enum Command {
     Connect { addr: String },
-    Send(String),
+    Send { id: u64, payload: String },
     Disconnect,
     Stop,
 }
@@ -49,6 +50,7 @@ pub struct Connected {
     pub latest: String,
     pub url: String,
     pub elapsed_ms: f32,
+    pub server_time: u64,
 }
 
 /// What the worker tells the UI.
@@ -65,7 +67,7 @@ pub enum Event {
         failure: Failure,
         message: String,
     },
-    Line(String),
+    Packet(Packet),
     Closed,
 }
 
@@ -164,6 +166,7 @@ fn worker(
                             latest: connected.latest,
                             url: connected.url,
                             elapsed_ms: connected.elapsed.as_secs_f64() as f32 * 1000.0,
+                            server_time: connected.server_time,
                         }));
                         stream = Some(connected.stream);
                     }
@@ -177,9 +180,9 @@ fn worker(
                 }
                 ctx.request_repaint();
             }
-            Ok(Command::Send(line)) => {
+            Ok(Command::Send { id, payload }) => {
                 if let Some(open) = &mut stream {
-                    if open.write_line(&line).is_err() {
+                    if open.write_request(id, None, &payload).is_err() {
                         stream = None;
                         let _ = events.send(Event::Closed);
                     }
@@ -198,9 +201,9 @@ fn worker(
         // Drain pushes and replies without blocking the command channel.
         if let Some(open) = &mut stream {
             loop {
-                match open.read_available_line() {
-                    Ok(Some(line)) => {
-                        if events.send(Event::Line(line)).is_err() {
+                match open.read_available_packet() {
+                    Ok(Some(packet)) => {
+                        if events.send(Event::Packet(packet)).is_err() {
                             return;
                         }
                     }