@yeaft/webchat-agent 1.0.419 → 1.0.422

package/connection/message-router.js

@@ -12,7 +12,7 @@ import { handleProxyHttpRequest, handleProxyWsOpen, handleProxyWsMessage, handle
 import {
   handleReadFile, handleWriteFile, handleListDirectory,
   handleGitStatus, handleGitDiff, handleGitAdd, handleGitReset, handleGitRestore, handleGitCommit, handleGitPush,
-  handleFileSearch, handleCreateFile, handleDeleteFiles, handleMoveFiles, handleCopyFiles, handleUploadToDir, handleTransferFiles
+  handleFileSearch, handleResolveFileReferences, handleCreateFile, handleDeleteFiles, handleMoveFiles, handleCopyFiles, handleUploadToDir, handleTransferFiles
 } from '../workbench.js';
 import { handleListHistorySessions, handleListFolders, handleListModels } from '../history.js';
 import {
@@ -288,6 +288,10 @@ export async function handleMessage(msg) {
       await handleFileSearch(msg);
       break;
 
+    case 'resolve_file_references':
+      await handleResolveFileReferences(msg);
+      break;
+
     case 'create_file':
       await handleCreateFile(msg);
       break;

package/index.js

@@ -161,7 +161,7 @@ async function detectCapabilities() {
   // agent build can speak plaintext WS frames. New servers see this and
   // flip `agent.encryptOutbound = false`, stopping outbound encryption
   // to this peer. Old servers ignore the unknown capability token.
-  const capabilities = ['background_tasks', 'file_editor', 'ping_session', 'plaintext-ok', 'workbench_session_routes', SAFE_REMOTE_UPGRADE_CAPABILITY, 'work_center', 'work_center_message_v2', 'session_history_search', 'session_history_outline', 'session_history_window_prefetch', 'yeaft_plugins'];
+  const capabilities = ['background_tasks', 'file_editor', 'ping_session', 'plaintext-ok', 'workbench_session_routes', SAFE_REMOTE_UPGRADE_CAPABILITY, 'work_center', 'work_center_message_v2', 'session_history_search', 'session_history_outline', 'session_history_window_prefetch', 'file_reference_resolution', 'yeaft_plugins'];
   if (process.platform === 'linux') capabilities.push('work_item_attachments');
   const pty = await loadNodePty();
   if (pty) capabilities.push('terminal');

package/local-runtime/server/.env.example

@@ -44,9 +44,9 @@ EMAIL_CODE_EXPIRES_IN=300000
 # Agents must provide this secret to connect
 AGENT_SECRET=agent-shared-secret
 
-# Browser Runtime (disabled by default)
+# Browser Runtime routes are enabled by default; set false to disable them globally.
 # Production deployments should configure endpoint-scoped TURN credentials.
-# BROWSER_RUNTIME_ENABLED=false
+# BROWSER_RUNTIME_ENABLED=true
 # BROWSER_STUN_URLS=stun:stun.example.com:3478
 # BROWSER_TURN_URLS=turn:turn.example.com:3478,turns:turn.example.com:443?transport=tcp
 # BROWSER_TURN_SECRET=replace-with-coturn-rest-api-secret

package/local-runtime/server/config.js

@@ -119,11 +119,13 @@ export const CONFIG = {
   // Agent authentication (global fallback — per-user agent_secret is preferred)
   agentSecret: process.env.AGENT_SECRET || DEFAULT_AGENT_SECRET,
 
-  // Browser Runtime stays fail-closed until the Server rollout gate is enabled.
+  // Browser setup/viewer routes are available by default; an administrator can
+  // still disable the entire surface explicitly. Downloads remain opt-in in the
+  // Workbench and all lifecycle/signaling routes stay owner-scoped.
   // TURN credentials use the standard time-limited HMAC username scheme; Web and
   // Agent endpoints receive separately scoped usernames from the route ledger.
   browserRuntime: {
-    enabled: process.env.BROWSER_RUNTIME_ENABLED === 'true',
+    enabled: process.env.BROWSER_RUNTIME_ENABLED !== 'false',
     iceTransportPolicy: process.env.BROWSER_ICE_TRANSPORT_POLICY === 'relay' ? 'relay' : 'all',
     stunUrls: commaList(process.env.BROWSER_STUN_URLS),
     turnUrls: commaList(process.env.BROWSER_TURN_URLS),

package/local-runtime/server/handlers/agent-file-terminal.js

@@ -169,7 +169,7 @@ export async function handleAgentFileTerminal(agentId, agent, rawMsg) {
     'terminal_created', 'terminal_output', 'terminal_closed', 'terminal_error',
   ]);
   const oneShotTypes = new Set([
-    'file_content', 'file_saved', 'directory_listing', 'file_op_result',
+    'file_content', 'file_references_resolved', 'file_saved', 'directory_listing', 'file_op_result',
     'git_status_result', 'git_diff_result', 'git_op_result', 'file_search_result',
   ]);
   if (!terminalTypes.has(msg.type) && !oneShotTypes.has(msg.type)) return false;

package/local-runtime/server/handlers/client-workbench.js

@@ -40,6 +40,7 @@ async function denyWorkbenchRoute(client, msg) {
 const RESPONSE_TYPES = Object.freeze({
   terminal_create: ['terminal_created', 'terminal_error'],
   read_file: ['file_content'],
+  resolve_file_references: ['file_references_resolved'],
   write_file: ['file_saved'],
   list_directory: ['directory_listing'],
   git_status: ['git_status_result'],
@@ -190,6 +191,7 @@ export async function handleClientWorkbench(clientId, client, msg, checkAgentAcc
       break;
     }
 
+    case 'resolve_file_references':
     case 'read_file': {
       const fileAgentId = msg.agentId || client.currentAgent;
       if (!fileAgentId) { console.warn('[Server] read_file: no agentId'); return; }
@@ -200,7 +202,7 @@ export async function handleClientWorkbench(clientId, client, msg, checkAgentAcc
         return;
       }
       const fileConvId = resolved.conversationId || msg.conversationId || client.currentConversation || '_explorer';
-      console.log(`[Server] Forwarding read_file to agent ${fileAgentId}, conv=${fileConvId}, path=${msg.filePath}`);
+      console.log(`[Server] Forwarding ${msg.type} to agent ${fileAgentId}, conv=${fileConvId}${msg.filePath ? `, path=${msg.filePath}` : ''}`);
       await forwardCorrelatedWorkbenchRequest({
         agentId: fileAgentId,
         clientId,

package/local-runtime/server/ws-client.js

@@ -228,7 +228,7 @@ export function handleWebConnection(ws, url, req = {}) {
 const WORKBENCH_TYPES = new Set([
   ...CLIENT_BROWSER_TYPES,
   'terminal_create', 'terminal_input', 'terminal_resize', 'terminal_close',
-  'read_file', 'write_file', 'create_file', 'delete_files', 'move_files', 'copy_files', 'upload_to_dir', 'file_search',
+  'read_file', 'resolve_file_references', 'write_file', 'create_file', 'delete_files', 'move_files', 'copy_files', 'upload_to_dir', 'file_search',
   'git_status', 'git_diff', 'git_add', 'git_reset', 'git_restore', 'git_commit', 'git_push',
   'proxy_update_ports', 'update_file_tabs', 'restore_file_tabs'
 ]);

package/local-runtime/version.json

@@ -1 +1 @@
-{"version":"1.0.419"}
+{"version":"1.0.422"}