Ben Barclay 64a507da44 feat(relay): handle passthrough_forward over the WS (Phase 5 §5.1, gateway half) (#50702) ... The connector half (gateway-gateway) moves the passthrough plane's post-ACK forward off the HTTP gatewayEndpoint onto the gateway's outbound /relay WS via a new passthrough_forward frame. This is the gateway side: the relay adapter now RECEIVES and handles that frame, so a hosted gateway (no public IP) can process forwarded Class-2/3 traffic (Discord interactions, Twilio) over the socket it already holds — closing the "passthrough inbound doesn't work for hosted gateways" gap. - ws_transport.py: decode the passthrough_forward frame; PassthroughForward dataclass + _passthrough_from_wire (base64 body -> exact bytes, byte parity with the connector's toPassthroughForward); set_passthrough_handler mirrors set_interrupt_inbound_handler. - transport.py: PassthroughHandler type + set_passthrough_handler on the RelayTransport protocol. - adapter.py: connect() wires the passthrough handler; _on_passthrough decodes the (already-sanitized, token-free) forward and, for a Discord interaction, converts it to a MessageEvent routed through the normal agent path (handle_message) — the reply egresses over the outbound / token-less follow_up path, so the gateway never holds the interaction credential. Never raises (a bad forward can't kill the read loop). Non-discord forwards (Twilio) are logged + dropped for now. - docs/relay-connector-contract.md: document the passthrough_forward frame + PassthroughForward shape + §3.1. The interaction -> MessageEvent CONVERSION semantics (slash-command vs button UX, option rendering) are the open sub-design flagged in the spec; the TRANSPORT + receive mechanism (this) is settled per Ben's Gate-2 decision: "the relay adapter handles receiving these events over the WS." Tests (tests/gateway/relay/test_relay_passthrough.py): byte-preservation round-trip (+ malformed-body tolerance), connect() wiring, application-command and message-component interactions route through handle_message with correct session source + scope capture, malformed/non-discord forwards dropped cleanly. 100 relay tests green. Pairs with the connector PR (gateway-gateway).		2026-06-22 20:10:57 +10:00
..
__init__.py	fix(relay): trigger self-provision on relay-config + NAS token, not is_managed() (#48724)	2026-06-19 01:01:24 +00:00
adapter.py	feat(relay): handle passthrough_forward over the WS (Phase 5 §5.1, gateway half) (#50702)	2026-06-22 20:10:57 +10:00
auth.py	feat(relay): connector⇄gateway channel auth + signed-HTTP inbound receiver + enroll CLI (#48147)	2026-06-18 12:01:54 +10:00
descriptor.py	feat(relay): derive descriptor from PlatformEntry	2026-06-17 16:37:45 -07:00
transport.py	feat(relay): handle passthrough_forward over the WS (Phase 5 §5.1, gateway half) (#50702)	2026-06-22 20:10:57 +10:00
ws_transport.py	feat(relay): handle passthrough_forward over the WS (Phase 5 §5.1, gateway half) (#50702)	2026-06-22 20:10:57 +10:00