refactor: Restore web-bridge and JS logic from stable build

Author: 1minds3t

docs/assets/js/interact.js

@@ -6,15 +6,10 @@ let isConnected = false;
 let checkInterval = null;
 const DEBUG = true;
 
-// 🎯 BUSINESS LOGIC: Detect if we're on Tailnet or localhost
+// 🎯 BUSINESS LOGIC: Only Tailscale domain gets interactive features
 const currentDomain = window.location.hostname;
 const IS_INTERACTIVE_DOMAIN = currentDomain === '1minds3t.echo-universe.ts.net' || currentDomain === 'localhost' || currentDomain === '127.0.0.1';
 
-// Use Tailscale proxy when accessing remotely
-const BRIDGE_URL = currentDomain === '1minds3t.echo-universe.ts.net' 
-    ? 'https://1minds3t.echo-universe.ts.net/omnipkg-api'  // Tailscale proxy
-    : `http://127.0.0.1:${PORT}`;  // Direct localhost
-
 const SAFE_TELEMETRY_KEYS = new Set([
     'command', 'path', 'title', 'port', 'package', 
     'method', 'error', 'duration', 'success'
@@ -140,34 +135,27 @@ function createStatusBanner() {
 async function checkHealth() {
     if (!IS_INTERACTIVE_DOMAIN) return;
 
-    debug(`Health check: ${BRIDGE_URL}`);
-    
-    // 📊 TELEMETRY: Always notify Cloudflare of health checks
-    sendTelemetry("health_check", { method: currentDomain === '1minds3t.echo-universe.ts.net' ? 'tailnet' : 'direct' });
+    debug(`Health check: Direct connection to localhost:${PORT}`);
 
     try {
-        const res = await fetch(`${BRIDGE_URL}/health`, {  // ← USE BRIDGE_URL
+        // 🔥 DIRECT CONNECTION: No worker proxy needed
+        const res = await fetch(`http://127.0.0.1:${PORT}/health`, {
             method: 'GET',
             headers: { 'Content-Type': 'application/json' }
         });
 
         if (res.ok) {
             const data = await res.json();
             updateStatus(true, `Connected to Local Bridge v${data.version || '2.1.0'} (Port ${PORT})`);
-            // Track successful connection
-            sendTelemetry("bridge_connected", { port: PORT, version: data.version });
         } else {
             updateStatus(false, 'Local bridge not running | Run: 8pkg web start');
-            sendTelemetry("bridge_failed", { port: PORT, status: res.status });
         }
     } catch (e) {
         debug('Health check failed:', e);
         updateStatus(false, 'Local bridge not running | Run: 8pkg web start');
-        sendTelemetry("bridge_offline", { port: PORT, error: e.message });
     }
 }
 
-
 function updateStatus(connected, message) {
     isConnected = connected;
     const dot = document.getElementById('status-dot');
@@ -283,11 +271,9 @@ function createStaticButton() {
 // ==========================================
 // Execute Command
 // ==========================================
-
 async function runCommand(cmd, btnElement) {
     if (!isConnected) {
         alert('Local bridge not running. Start with: 8pkg web start');
-        sendTelemetry("command_blocked", { reason: "bridge_offline" });
         return;
     }
 
@@ -313,16 +299,14 @@ async function runCommand(cmd, btnElement) {
     // Send telemetry (fire and forget)
     sendTelemetry("command_exec", { command: cmd.split(' ')[0] });
 
-    const startTime = Date.now();
-
     try {
         // Open modal immediately to show streaming output
         const modal = createStreamingModal(cmd);
         const outputPre = modal.querySelector('.omni-output');
         let fullOutput = '';
 
-        // 🔥 CONNECTION with streaming
-        const res = await fetch(`${BRIDGE_URL}/run`, {
+        // 🔥 DIRECT CONNECTION with streaming
+        const res = await fetch(`http://127.0.0.1:${PORT}/run`, {
             method: 'POST',
             headers: { 
                 'Content-Type': 'application/json'
@@ -358,14 +342,6 @@ async function runCommand(cmd, btnElement) {
             }
         }
 
-        // Track successful completion
-        const duration = Date.now() - startTime;
-        sendTelemetry("command_complete", {
-            command: cmd.split(' ')[0],
-            duration_ms: duration,
-            success: true
-        });
-        
         // Success state
         btnElement.innerHTML = '';
         const checkIcon = document.createElementNS("http://www.w3.org/2000/svg", "svg");
@@ -389,15 +365,6 @@ async function runCommand(cmd, btnElement) {
         }, 2000);
     } catch (e) {
         debug('Command error:', e);
-        
-        // Track error
-        const duration = Date.now() - startTime;
-        sendTelemetry("command_error", {
-            command: cmd.split(' ')[0],
-            error: e.message,
-            duration_ms: duration
-        });
-        
         showOutput(cmd, `Error: ${e.message}`);
 
         btnElement.innerHTML = '';

src/omnipkg/apis/local_bridge.py

@@ -392,19 +392,14 @@ def enforce_origin():
             logger.info("⚠️ DEV MODE: Allowing request without Origin header")
             return
 
-        # 🔓 TAILSCALE PROXY: Requests from Tailscale proxy don't have Origin
-        if not origin and request.headers.get('X-Forwarded-For'):
-            logger.info("🔒 Tailscale proxy request detected - allowing")
-            return
-        
         # Block requests with NO Origin in production
         if not origin and not DEV_MODE:
             return jsonify({
                 "error": "❌ Direct API access prohibited.",
                 "message": "You must use the OmniPkg Web UI to interact with this bridge.",
                 "url": PRIMARY_DASHBOARD
             }), 403
-    
+
         # Validate origin if present
         if origin:
             clean_origin = origin.rstrip("/")
@@ -567,7 +562,7 @@ def run_bridge_server():
     print(f"Local Port: {port}", flush=True)
 
     app = create_app(port)
-    app.run(host="0.0.0.0", port=port, threaded=True, use_reloader=False)  # ← CHANGE TO 0.0.0.0
+    app.run(host="127.0.0.1", port=port, threaded=True, use_reloader=False)
 
 # ==========================================
 # PART 2: Manager Logic (CLI Control)