Feat/retire aimdb ws protocol

.devcontainer/Dockerfile

@@ -37,6 +37,34 @@ RUN apt-get update && apt-get install -y \
     unzip \
     && rm -rf /var/lib/apt/lists/*
 
+# --------------------------------------------------------------------
+# Chrome + chromedriver for headless WASM tests (make wasm-test)
+#
+# chromedriver is pinned to the installed Chrome's major version.  wasm-pack
+# would otherwise download the newest driver on its own, which refuses to drive
+# an older browser, and the bare driver binary also needs Chrome's shared libs
+# (libnspr4 & friends) that only the browser package pulls in.
+# --------------------------------------------------------------------
+RUN curl -fsSL https://dl.google.com/linux/linux_signing_key.pub \
+        | gpg --dearmor -o /usr/share/keyrings/google-chrome.gpg \
+    && echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/google-chrome.gpg] https://dl.google.com/linux/chrome/deb/ stable main" \
+        > /etc/apt/sources.list.d/google-chrome.list \
+    && apt-get update && apt-get install -y --no-install-recommends google-chrome-stable \
+    && rm -rf /var/lib/apt/lists/* \
+    && CHROME_MAJOR="$(google-chrome --version | sed -E 's/[^0-9]*([0-9]+).*/\1/')" \
+    && DRIVER_URL="$(curl -fsSL https://googlechromelabs.github.io/chrome-for-testing/known-good-versions-with-downloads.json \
+        | jq -r --arg m "${CHROME_MAJOR}." '[.versions[] | select(.version | startswith($m))] | last | .downloads.chromedriver[] | select(.platform == "linux64") | .url')" \
+    && [ -n "$DRIVER_URL" ] && [ "$DRIVER_URL" != "null" ] \
+    && curl -fsSL -o /tmp/chromedriver.zip "$DRIVER_URL" \
+    && unzip -oq /tmp/chromedriver.zip -d /tmp \
+    && install -m 0755 /tmp/chromedriver-linux64/chromedriver /usr/local/bin/chromedriver \
+    && rm -rf /tmp/chromedriver.zip /tmp/chromedriver-linux64 \
+    && chromedriver --version
+
+# Points wasm-pack/wasm-bindgen-test at the pinned driver instead of letting them
+# download the newest one into ~/.cache/.wasm-pack.
+ENV CHROMEDRIVER=/usr/local/bin/chromedriver
+
 # --------------------------------------------------------------------
 # Create non-root user (with sudo) as root
 # --------------------------------------------------------------------

.devcontainer/devcontainer.json

@@ -2,6 +2,13 @@
   "name": "Rust Dev-Container",
   "image": "ghcr.io/aimdb-dev/devcontainer:latest",
   "workspaceFolder": "/aimdb",
+  "features": {
+    "ghcr.io/devcontainers/features/docker-outside-of-docker:1": {
+      "moby": true,
+      "installDockerBuildx": true,
+      "dockerDashComposeVersion": "v2"
+    }
+  },
   "runArgs": [
     "--privileged",
     "--network=host",
@@ -38,4 +45,4 @@
   "containerEnv": {
     "SHELL": "/bin/bash"
   }
-}
+}

.github/workflows/devcontainer.yml

@@ -125,6 +125,23 @@ jobs:
             pkg-config --version
           "
 
+      - name: Test headless browser toolchain
+        run: |
+          docker run --rm aimdb-devcontainer:test bash -c '
+            set -e
+            google-chrome --version
+            chromedriver --version
+            # wasm-bindgen-test drives Chrome through chromedriver, which refuses a
+            # browser from a different major version.
+            chrome_major="$(google-chrome --version | sed -E "s/[^0-9]*([0-9]+).*/\1/")"
+            driver_major="$(chromedriver --version | sed -E "s/[^0-9]*([0-9]+).*/\1/")"
+            [ "$chrome_major" = "$driver_major" ] || {
+              echo "Chrome $chrome_major and chromedriver $driver_major disagree"; exit 1;
+            }
+            [ "$CHROMEDRIVER" = /usr/local/bin/chromedriver ]
+            google-chrome --headless --no-sandbox --disable-gpu --dump-dom about:blank >/dev/null
+          '
+
       - name: Test user permissions
         run: |
           docker run --rm aimdb-devcontainer:test bash -c "

CHANGELOG.md

@@ -19,7 +19,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 > - [aimdb-uds-connector/CHANGELOG.md](aimdb-uds-connector/CHANGELOG.md)
 > - [aimdb-serial-connector/CHANGELOG.md](aimdb-serial-connector/CHANGELOG.md)
 > - [aimdb-tcp-connector/CHANGELOG.md](aimdb-tcp-connector/CHANGELOG.md)
-> - [aimdb-ws-protocol/CHANGELOG.md](aimdb-ws-protocol/CHANGELOG.md)
 > - [aimdb-wasm-adapter/CHANGELOG.md](aimdb-wasm-adapter/CHANGELOG.md)
 > - [aimdb-sync/CHANGELOG.md](aimdb-sync/CHANGELOG.md)
 > - [aimdb-client/CHANGELOG.md](aimdb-client/CHANGELOG.md)
@@ -30,6 +29,69 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed — Design 047: AimX protocol version handshake gate (breaking)
+
+`PROTOCOL_VERSION` is bumped **`"2.0"` → `"3.0"`** to mark the design-047
+convergence as a breaking wire change (`record.query` results moved from
+`{values, count}` to `{records, total}`; wildcard subscribe / auto-subscribe
+added). The `hello` handshake now **negotiates** the version instead of ignoring
+it: the server refuses a client whose declared major version is incompatible —
+or absent — with a new `RpcError::VersionMismatch` (wire code
+`version_mismatch`), and the client rejects a pre-3.x server's `welcome`
+symmetrically. Compatibility is by **major** version (`version_compatible()`,
+exported from `aimdb_core::remote`); a missing/malformed version fails closed.
+
+- **Breaking:** a pre-3.x client (including any hand-parsing the old
+  `ServerMessage` shape) is refused at `hello` and can no longer connect — it
+  fails fast at the handshake rather than tripping over the new reply shapes on
+  its first call. First-party clients (`aimdb-client`, and the `aimdb-cli` /
+  `aimdb-mcp` tools riding it) declare `"3.0"` and are unaffected.
+- **Caveat carried from design 047 §3.6:** server-seeded auto-subscriptions are
+  invisible to `run_client`-based consumers. Client authors upgrading to 3.0
+  must drive their own `subscribe` for records they want streamed.
+- **WebSocket / browser upgrade gate.** The socket transports negotiate the
+  version inside `hello`, but the WS server runs `reads_hello:false` and a
+  browser cannot set WebSocket handshake headers — so a WS client declares its
+  version in the upgrade URL (`…/ws?v=3.0`) and the server refuses an
+  incompatible/absent one with **HTTP 426 Upgrade Required** before the socket
+  opens. New `aimdb_core::remote::{VERSION_PARAM, ws_url_with_version}` hold the
+  contract; the browser `WsBridge`/`WasmDb.discover` and the Rust
+  `WsClientConnector` append it automatically. A stale browser client now fails
+  at the upgrade rather than on its first frame.
+- Schema-level record migration over AimX (the `Migratable` trait) is
+  **out of scope** here and tracked as a follow-up (`with_migration`).
+
+### Changed — Design 047: dot is the one topic separator (breaking)
+
+`topic_matches` (wildcard subscribe / WS fan-out) now splits topic patterns on
+**`.` only** — RabbitMQ topic-exchange semantics (dot segments, `*`
+single-level, `#` multi-level). Previously it split on `/`, so a dot-separated
+key like `temp.vienna` (the codebase's dominant key style) silently failed to
+match `temp.*` — a correctness bug. `/` is no longer a segment separator; it
+stays only in external broker addresses (`mqtt://sensors/temp/x`), which are
+unaffected.
+
+- **Breaking:** WebSocket / browser clients must subscribe with dot patterns
+  (`sensors.#`, not `sensors/#`). The WS connector, its e2e suite, ACL topics,
+  and the wasm-adapter README were migrated accordingly.
+- `topic_leaf` (entity extraction) remains tolerant of both `.` and `/`.
+
+### Changed — Design 047: one wire protocol (AimX) for every transport (breaking)
+
+Implementation of [design 047](docs/design/047-retire-ws-protocol-converge-on-aimx.md)
+(the 038 §3.9 / 036 A2 protocol unification). The `aimdb-ws-protocol` crate is
+**deleted**; the WebSocket connector and the browser `WsBridge` now speak the
+same AimX tagged frames as UDS/serial/TCP, over the same session engines.
+AimX gained the two features that justified the ws fork: wildcard /
+multi-record subscribe (one subscription fans in every matching record, events
+tagged with the record that fired, one late-join snapshot per match) and the
+shared `record.query`/`record.list` result shapes (`{records, total}` with
+`QueryRecord{topic, payload, ts}` rows; `{name, schema_type, entity}` topic
+rows). **Breaking for browser clients** (the JS `WsBridge` API is unchanged,
+but the wire is new); breaking Rust API changes are listed per crate
+(`aimdb-core`, `aimdb-websocket-connector`, `aimdb-wasm-adapter`,
+`aimdb-client`, `aimdb-persistence`).
+
 ### Changed — knx-pico submodule
 
 - **Submodule:** bump `_external/knx-pico` to upstream `0.3` (commit 158325bd4)

Cargo.toml

@@ -16,7 +16,6 @@ members = [
     "aimdb-uds-connector",
     "aimdb-serial-connector",
     "aimdb-tcp-connector",
-    "aimdb-ws-protocol",
     "aimdb-wasm-adapter",
     "tools/aimdb-cli",
     "tools/aimdb-mcp",