v5.0.0: protocol v5 and the browser frontend

Protocol v5 replaces newline lines with bounded [u32 len][text] frames and REQ/RES/EVT envelopes. Requests carry correlation ids and the server replays the last 256 replies per connection, so a gateway retry cannot double-debit and a late reply cannot clobber a newer request. HELLO/PONG carry server time; crash rounds announce started_at and push coalesced 10 Hz ticks. Crash now commits sha256(seed) before a round and reveals the seed when it ends, so clients recompute the crash point.

Adds the webd/ gateway: one blocking thread, one ClientCore and one pinned upstream TLS connection per session, an HttpOnly session cookie, takeover, and a 60-second grace window. The browser sends Command JSON and renders View JSON; it never speaks the game protocol or stores credentials.

Adds the vanilla TypeScript browser app at /play/ (login, lobby, all four games, history, notices, crash verification), the nginx /play and /ws routes, and the headless DOM smoke test. webd and the app stay out of the TUI/GUI/server build graph.

The client/server version moves to 5.0.0 in lockstep; v4 peers are refused at HELLO.

1 files changed, 27 insertions, 0 deletions

diff --git a/web/play/src/types.ts b/web/play/src/types.ts
new file mode 100644
index 0000000..e594a0b
--- /dev/null
+++ b/web/play/src/types.ts
@@ -0,0 +1,27 @@
+export type View = {
+  screen: "lobby" | "history" | "slots" | "roulette" | "blackjack" | "crash";
+  [key: string]: any;
+};
+
+export type Hello = {
+  type: "hello";
+  version: string;
+  grace_seconds: number;
+  /** Signed-in user restored after a refresh, if any. */
+  user?: string | null;
+  /** Estimated game-server Unix time in milliseconds. */
+  time: number;
+};
+
+export type Send = (command: unknown) => void;
+
+export type Handlers = {
+  onHello: (hello: Hello) => void;
+  onView: (view: View) => void;
+  onNotice: (text: string) => void;
+  onError: (text: string) => void;
+  onReplaced: () => void;
+  onPong: () => void;
+  onOpen: () => void;
+  onClosed: (willRetry: boolean) => void;
+};