Authenticate sockets by header or one-time ticket instead of ?token=

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013GAeg4Jo6xjZzjwy9QDWMQ

frontend/src/client/schemas.gen.ts

@@ -3692,6 +3692,22 @@ export const ShareRequestSchema = {
     title: 'ShareRequest'
 } as const;
 
+export const SocketTicketSchema = {
+    properties: {
+        ticket: {
+            type: 'string',
+            title: 'Ticket'
+        },
+        expires_in: {
+            type: 'number',
+            title: 'Expires In'
+        }
+    },
+    type: 'object',
+    required: ['ticket', 'expires_in'],
+    title: 'SocketTicket'
+} as const;
+
 export const StoredKeySchema = {
     properties: {
         key: {

frontend/src/client/types.gen.ts

@@ -1241,6 +1241,11 @@ export type ShareRequest = {
     lib_name: string;
 };
 
+export type SocketTicket = {
+    ticket: string;
+    expires_in: number;
+};
+
 export type StoredKey = {
     key: string;
     size: number;
@@ -1835,6 +1840,8 @@ export type FlowsReadMessageHistoryData = {
 
 export type FlowsReadMessageHistoryResponse = (MessageHistory);
 
+export type FlowsIssueSocketTicketResponse = (SocketTicket);
+
 export type LoginLoginAccessTokenData = {
     formData: Body_login_login_access_token;
 };