feat(kernel-browser-runtime): pass full RemoteCommsOptions via worker URL

[sirtimid]

Summary

• Replace relay-only URL helpers (createRelayQueryString/parseRelayQueryString/getRelaysFromCurrentLocation) with typed comms-query-string utilities (createCommsQueryString, parseCommsQueryString, getCommsParamsFromCurrentLocation) that support all serializable RemoteCommsOptions fields (arrays, numeric tuning knobs)
• Validate inputs at the creation boundary via @metamask/superstruct; silently ignore invalid values when parsing
• Exclude mnemonic from query string serialization (secret — must not appear in URLs)
• Exclude directTransports (internal, platform-injected, not URL-serializable)
• Export CommsQueryParams type for consumers (Omit<RemoteCommsOptions, 'directTransports' | 'mnemonic'>)
• Auto-extract hostnames from plain ws:// relay multiaddrs into allowedWsHosts in ConnectionFactory, so callers don't need to redundantly specify both
• Migrate extension and omnium-gatherum offscreen workers and browser kernel-worker to use new APIs
• Update docs/usage.md examples

Test plan

• Unit tests for createCommsQueryString (round-trip, validation errors, empty arrays)
• Unit tests for parseCommsQueryString (valid/invalid JSON, missing params, no leading ?, non-string-array values)
• Unit tests for getCommsParamsFromCurrentLocation (with/without globalThis.location)
• 100% coverage on comms-query-string.ts (statements, branches, functions, lines)
• ConnectionFactory test for auto-allowing ws:// relay hosts
• All existing connection-factory.test.ts tests pass (77+)
• Export snapshot tests updated (index.test.ts, utils/index.test.ts)

---

Note

Medium Risk
Expands how remote comms are configured and parsed from worker URLs and tweaks libp2p WebSocket allowlisting logic, which could affect connectivity and connection gating behavior if misconfigured.

Overview
Updates browser worker remote-comms configuration to pass a full, typed subset of RemoteCommsOptions via URL query params, replacing relay-only helpers with new createCommsQueryString/parseCommsQueryString/getCommsParamsFromCurrentLocation utilities (including runtime validation and support for numeric tuning options and additional address lists).

Migrates the browser kernel-worker plus extension and omnium offscreen worker bootstrapping to use the new comms query params and initializes initRemoteComms with the parsed options object.

Adjusts ConnectionFactory to auto-allow plain ws:// relay hosts by extracting hosts from configured relay multiaddrs into allowedWsHosts, and updates/adds unit tests and docs to reflect the new APIs and initRemoteComms({ relays }) calling convention.

^{Written by Cursor Bugbot for commit 7a580f4. This will update automatically on new commits. Configure here.}

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	77.41% ⬆️ +0.10%	7845 / 10134
🔵	Statements	77.22% ⬆️ +0.10%	7970 / 10321
🔵	Functions	75.35% 🟰 ±0%	1887 / 2504
🔵	Branches	74.95% ⬆️ +0.15%	3212 / 4285

File Coverage

File	Stmts	Branches	Functions	Lines	Uncovered Lines
Changed Files
packages/extension/src/offscreen.ts	0% 🟰 ±0%	0% 🟰 ±0%	0% 🟰 ±0%	0% 🟰 ±0%	19-101
packages/kernel-browser-runtime/src/kernel-worker/kernel-worker.ts	0% 🟰 ±0%	0% 🟰 ±0%	0% 🟰 ±0%	0% 🟰 ±0%	26-111
packages/kernel-browser-runtime/src/utils/comms-query-string.ts	100%	100%	100%	100%
packages/kernel-browser-runtime/src/utils/index.ts	100% 🟰 ±0%	100% 🟰 ±0%	100% 🟰 ±0%	100% 🟰 ±0%
packages/ocap-kernel/src/remotes/platform/connection-factory.ts	92.92% ⬆️ +0.18%	86.45% ⬆️ +0.28%	97.36% 🟰 ±0%	92.82% ⬆️ +0.19%	70, 79, 86, 168-170, 177, 393, 538, 586-587, 592-596, 655, 668
packages/omnium-gatherum/src/offscreen.ts	0% 🟰 ±0%	0% 🟰 ±0%	0% 🟰 ±0%	0% 🟰 ±0%	20-121

Generated in workflow #3967 for commit 7a580f4 by the Vitest Coverage Report Action

[rekmarks]

LGTM!