refactor: remove bridge protocol

src/gateway/server/tls.ts

@@ -1,14 +1,12 @@
-import type { BridgeTlsConfig } from "../../config/types.gateway.js";
+import type { GatewayTlsConfig } from "../../config/types.gateway.js";
 import {
-  type BridgeTlsRuntime,
-  loadBridgeTlsRuntime,
-} from "../../infra/bridge/server/tls.js";
-
-export type GatewayTlsRuntime = BridgeTlsRuntime;
+  type GatewayTlsRuntime,
+  loadGatewayTlsRuntime as loadGatewayTlsRuntimeConfig,
+} from "../../infra/tls/gateway.js";
 
 export async function loadGatewayTlsRuntime(
-  cfg: BridgeTlsConfig | undefined,
+  cfg: GatewayTlsConfig | undefined,
   log?: { info?: (msg: string) => void; warn?: (msg: string) => void },
 ): Promise<GatewayTlsRuntime> {
-  return await loadBridgeTlsRuntime(cfg, log);
+  return await loadGatewayTlsRuntimeConfig(cfg, log);
 }

src/gateway/server/ws-connection.ts

@@ -22,7 +22,7 @@ export function attachGatewayWsConnectionHandler(params: {
   wss: WebSocketServer;
   clients: Set<GatewayWsClient>;
   port: number;
-  bridgeHost?: string;
+  gatewayHost?: string;
   canvasHostEnabled: boolean;
   canvasHostServerPort?: number;
   resolvedAuth: ResolvedGatewayAuth;
@@ -46,7 +46,7 @@ export function attachGatewayWsConnectionHandler(params: {
     wss,
     clients,
     port,
-    bridgeHost,
+    gatewayHost,
     canvasHostEnabled,
     canvasHostServerPort,
     resolvedAuth,
@@ -76,7 +76,7 @@ export function attachGatewayWsConnectionHandler(params: {
 
     const canvasHostPortForWs = canvasHostServerPort ?? (canvasHostEnabled ? port : undefined);
     const canvasHostOverride =
-      bridgeHost && bridgeHost !== "0.0.0.0" && bridgeHost !== "::" ? bridgeHost : undefined;
+      gatewayHost && gatewayHost !== "0.0.0.0" && gatewayHost !== "::" ? gatewayHost : undefined;
     const canvasHostUrl = resolveCanvasHostUrl({
       canvasPort: canvasHostPortForWs,
       hostOverride: canvasHostServerPort ? canvasHostOverride : undefined,
@@ -182,6 +182,13 @@ export function attachGatewayWsConnectionHandler(params: {
           },
         );
       }
+      if (client?.connect?.role === "node") {
+        const context = buildRequestContext();
+        const nodeId = context.nodeRegistry.unregister(connId);
+        if (nodeId) {
+          context.nodeUnsubscribeAll(nodeId);
+        }
+      }
       logWs("out", "close", {
         connId,
         code,

src/gateway/server/ws-connection/message-handler.ts

@@ -13,12 +13,15 @@ import {
   requestDevicePairing,
   updatePairedDeviceMetadata,
 } from "../../../infra/device-pairing.js";
+import { recordRemoteNodeInfo, refreshRemoteNodeBins } from "../../../infra/skills-remote.js";
+import { loadVoiceWakeConfig } from "../../../infra/voicewake.js";
 import { upsertPresence } from "../../../infra/system-presence.js";
 import { rawDataToString } from "../../../infra/ws.js";
 import type { createSubsystemLogger } from "../../../logging/subsystem.js";
 import { isGatewayCliClient, isWebchatClient } from "../../../utils/message-channel.js";
 import type { ResolvedGatewayAuth } from "../../auth.js";
 import { authorizeGatewayConnect } from "../../auth.js";
+import { loadConfig } from "../../../config/config.js";
 import { buildDeviceAuthPayload } from "../../device-auth.js";
 import { isLoopbackAddress } from "../../net.js";
 import {
@@ -478,6 +481,38 @@ export function attachGatewayWsMessageHandler(params: {
         };
         setClient(nextClient);
         setHandshakeState("connected");
+        if (role === "node") {
+          const context = buildRequestContext();
+          const nodeSession = context.nodeRegistry.register(nextClient, { remoteIp: remoteAddr });
+          recordRemoteNodeInfo({
+            nodeId: nodeSession.nodeId,
+            displayName: nodeSession.displayName,
+            platform: nodeSession.platform,
+            deviceFamily: nodeSession.deviceFamily,
+            commands: nodeSession.commands,
+            remoteIp: nodeSession.remoteIp,
+          });
+          void refreshRemoteNodeBins({
+            nodeId: nodeSession.nodeId,
+            platform: nodeSession.platform,
+            deviceFamily: nodeSession.deviceFamily,
+            commands: nodeSession.commands,
+            cfg: loadConfig(),
+          }).catch((err) =>
+            logGateway.warn(`remote bin probe failed for ${nodeSession.nodeId}: ${formatForLog(err)}`),
+          );
+          void loadVoiceWakeConfig()
+            .then((cfg) => {
+              context.nodeRegistry.sendEvent(nodeSession.nodeId, "voicewake.changed", {
+                triggers: cfg.triggers,
+              });
+            })
+            .catch((err) =>
+              logGateway.warn(
+                `voicewake snapshot failed for ${nodeSession.nodeId}: ${formatForLog(err)}`,
+              ),
+            );
+        }
 
         logWs("out", "hello-ok", {
           connId,