@yeaft/webchat-agent 0.1.944 → 0.1.946

package/connection/buffer.js

@@ -41,7 +41,11 @@ export async function sendToServer(msg) {
   }
 
   try {
-    if (ctx.sessionKey) {
+    // feat-ws-plaintext-negotiation: encrypt only when the server has
+    // NOT advertised plaintext acceptance. Defaults to encrypted for
+    // back-compat with old servers; flipped to plaintext when the
+    // `registered` frame includes `acceptPlaintext: true`.
+    if (ctx.serverEncryptionRequired && ctx.sessionKey) {
       const encrypted = await encrypt(msg, ctx.sessionKey);
       ctx.ws.send(JSON.stringify(encrypted));
     } else {

package/connection/index.js

@@ -21,7 +21,17 @@ export function connect() {
     console.log(`Disallowed tools: ${ctx.CONFIG.disallowedTools.join(', ')}`);
   }
 
-  ctx.ws = new WebSocket(url);
+  ctx.ws = new WebSocket(url, {
+    // Match server's permessage-deflate config (bounded memory,
+    // skip compression for small frames). The `ws` library handles
+    // streaming compression so we no longer need the synchronous
+    // gzip-before-encrypt on the hot path.
+    perMessageDeflate: {
+      clientNoContextTakeover: true,
+      serverNoContextTakeover: true,
+      threshold: 1024
+    }
+  });
 
   ctx.ws.on('open', () => {
     console.log('Connected to server, waiting for auth challenge...');

package/connection/message-router.js

@@ -48,6 +48,15 @@ export async function handleMessage(msg) {
         console.log('Encryption enabled');
       }
 
+      // feat-ws-plaintext-negotiation: new server advertises that it
+      // will accept plaintext frames from us. Stop encrypting outbound.
+      // The receive path (parseMessage) stays unconditional so the old
+      // ciphertext that may already be in flight still decrypts.
+      if (msg.acceptPlaintext === true) {
+        ctx.serverEncryptionRequired = false;
+        console.log('[WS] Server accepts plaintext, disabling outbound encryption');
+      }
+
       // 只保存基本配置（不再保存 agentId，因为现在用 agentName 作为 ID）
       ctx.saveConfig({
         serverUrl: ctx.CONFIG.serverUrl,

package/context.js

@@ -4,6 +4,11 @@
 export default {
   ws: null,
   sessionKey: null,
+  // feat-ws-plaintext-negotiation: defaults `true` (= assume old server,
+  // keep encrypting outbound for back-compat). Cleared to `false` when
+  // the agent receives `registered { acceptPlaintext: true }` from a
+  // new server — see message-router.js `case 'registered'`.
+  serverEncryptionRequired: true,
   conversations: new Map(),
   terminals: new Map(),
   proxyPorts: [],

package/index.js

@@ -111,7 +111,11 @@ loadMcpServers();
 
 // Agent capabilities（启动时自动检测）
 async function detectCapabilities() {
-  const capabilities = ['background_tasks', 'file_editor', 'ping_session'];
+  // feat-ws-plaintext-negotiation: `plaintext-ok` advertises that this
+  // agent build can speak plaintext WS frames. New servers see this and
+  // flip `agent.encryptOutbound = false`, stopping outbound encryption
+  // to this peer. Old servers ignore the unknown capability token.
+  const capabilities = ['background_tasks', 'file_editor', 'ping_session', 'plaintext-ok'];
   const pty = await loadNodePty();
   if (pty) capabilities.push('terminal');
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yeaft/webchat-agent",
-  "version": "0.1.944",
+  "version": "0.1.946",
   "description": "Remote agent for Yeaft WebChat — connects worker machines to the central server",
   "main": "index.js",
   "type": "module",