Move an authorized Pocket session off the Relay onto a direct WebRTC channel - #613

Merged

nedtwigg merged 47 commits into

mainfrom

pocket-webrtc-2

Sep 11, 2026

Commits on Sep 10, 2026

docs: stage the direct-path scope (WebRTC after authorization)

nedtwigg
and
claude
committed
2e080f5
feat(remote): the direct path's shared signaling and cutover

nedtwigg
and
claude
committed
b9aea5a
feat(remote): the peer wrapper both direct ends share

nedtwigg
and
claude
committed
1e59d93
feat(remote): both ends offer, answer, and cut over to the direct path

nedtwigg
and
claude
committed
ab479ea
test(remote): drive the direct path end to end, in process

nedtwigg
and
claude
committed
cbd67be
docs: promote the direct path above the fold

nedtwigg
and
claude
committed
2233879
fix(remote): end a session whose peer switched onto an abandoned channel

nedtwigg
and
claude
committed
9b9b68c
test(remote): spell the rejected control character, so the file stays text

nedtwigg
and
claude
committed
7a9103f
feat(remote): the standalone Burrow answers a direct offer

nedtwigg
and
claude
committed
e9c7fdc
test(remote): share the end-to-end loop the ceremonies run in

nedtwigg
and
claude
committed
0c6f8bf
test(remote): run the direct path over the real addon, end to end

nedtwigg
and
claude
committed
f0373a0
chore(website): disclose the WebRTC addon and its per-platform prebuilds

nedtwigg
and
claude
committed
30c98a9
docs: promote the standalone Burrow's direct-path answer

nedtwigg
and
claude
committed
4c8dd56
docs(security): state the direct path's place in the remote trust model

nedtwigg
and
claude
committed
b32f8c8
lint(e2e): refuse an ICE server, and a Relay that names an SDP

nedtwigg
and
claude
committed
19d534f
docs(security): say publicly that a session may leave the Relay

nedtwigg
and
claude
committed
91909c9
fix(remote): copy a held direct frame out of the event's buffer

nedtwigg
and
claude
committed
9f86c30
docs(security): describe the ICE listener as measured

nedtwigg
and
claude
committed
5676865
build(standalone): assert sidecar externals from the metafile

nedtwigg
and
claude
committed
9bbee8e
refactor(remote): put the direct attempt's lifecycle in DirectCutover

nedtwigg
and
claude
committed
3134f06
build(website): describe an absent prebuild from its declared sibling

nedtwigg
and
claude
committed
ccd9af3
refactor(remote): one DirectEndpoint, two ends

nedtwigg
and
claude
committed
b686fe3
refactor(remote): let a closed peer retain nothing, and drop dead exports

nedtwigg
and
claude
committed
45dda53
test(remote): share the fakes the remote suites had each copied

nedtwigg
and
claude
committed
5d5881b
refactor(host): the native peer factory takes no options

nedtwigg
and
claude
committed
613f193
docs(remote): point the direct path's rules at the endpoint that holds them

nedtwigg
and
claude
committed
44ee25d
fix(remote): size the direct path's holding queue for a real terminal stream

nedtwigg
and
claude
committed
0a68f27
fix(remote): one relay-frame path for both ends, and decode inside it

nedtwigg
and
claude
committed
d3254d3
fix(remote): stop a chunked message at the send that ended the session

nedtwigg
and
claude
committed
5bff45d
fix(remote): a replaced Client session takes its peer with it

nedtwigg
and
claude
committed
038237e
fix(remote): give the answerer the setup deadline that fires first

nedtwigg
and
claude
committed
953129f
refactor(remote): copy a channel frame at the hold, and nowhere else

nedtwigg
and
claude
committed
dc0a0f0
fix(remote): a closed peer cancels the gathering deadline it is waiting on

nedtwigg
and
claude
committed
8d0911d
refactor(remote): share the endpoint's post-await guard, and tighten the spec

nedtwigg
and
claude
committed
24de2d8
docs(remote): say where a signal is read out of the receipt

nedtwigg
and
claude
committed
bf1fee7
feat(remote): bound and guard what the direct path rides on

nedtwigg
and
claude
committed
9189d6b
build(standalone): check the signed sidecar can load the WebRTC addon

nedtwigg
and
claude
committed
6252a21
test(remote): negotiate a real browser against the real addon

nedtwigg
and
claude
committed
3fb268c
refactor(remote): hand the phone a cause, not an attempt's failure text

nedtwigg
and
claude
committed
99436f7
fix(remote): close the review's holes, and stop claiming the one that stays

nedtwigg
and
claude
committed
30ab785
docs: keep "cutover" meaning one thing in the remote specs

nedtwigg
and
claude
committed
98a7f79
fix(remote): retire old sessions before replacement handshakes
nedtwigg
committed
ee8394a
fix(remote): retire a session no earlier than the request that races it

nedtwigg
and
claude
committed
15cc5a7
Merge remote-tracking branch 'origin/main' into pocket-webrtc-2
nedtwigg
committed
53e6aa7
fix(remote): say why a session stayed relayed, for the operator too

nedtwigg
and
claude
committed
a4b84c7

Commits on Sep 11, 2026

refactor(remote): one place decides which path a byte takes

nedtwigg
and
claude
committed
f843ff9
fix(standalone): keep the inline check loud when the manifest stops declaring the addon

nedtwigg
and
claude
committed
14327ef