ai_co_discuss 0.3.66 → 0.3.67

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai_co_discuss",
-  "version": "0.3.66",
+  "version": "0.3.67",
   "bin": {
     "codiscuss": "runner/codiscuss.mjs"
   },

package/runner/discussion_launch.mjs

@@ -359,11 +359,21 @@ function room_workflow_status(config, home) {
 }
 
 /** Read the owner's saved room project, never a directory supplied by the request. */
-export async function room_files(home, raw) {
-  const { input, config } = await member_room_context(home, raw);
+export async function room_files(home, raw, { trust = false } = {}) {
+  const { input, config } = await member_room_context(home, raw, { trust });
   return { room_id: input.room_id, ...read_project_files(config.cwd, input.path, input.offset, input.query) };
 }
 
+/**
+ * `room-files` asked for by another device, answered inside the relay's own process: the same checks as the local
+ * entrypoint with `--remote`, without starting Node for every folder opened.
+ */
+export async function remote_room_files(home, input) {
+  assert_shared_home(home);
+  guard_remote_request('room-files', input, { projects: launch_projects(home).projects, participants: launch_settings(home).participants, home });
+  return room_files(home, input, { trust: true });
+}
+
 const CREATE_PREFERENCE_RANGES = { max_rounds: [0, 100], max_minutes: [0, 1440], goal_max_continues: [0, 100], goal_max_minutes: [0, 1440], chain_rounds: [1, 20] };
 const CREATE_PREFERENCE_FLAGS = ['named_followup', 'host_workflows', 'advanced_open'];
 const MAX_PREFERENCE_MODEL_LENGTH = 200;
@@ -710,8 +720,13 @@ export function borrowed_session(name, profile, room_cwd, env = process.env) {
   return { ...profile, cwd: wanted || cwd };
 }
 
-/** Find the one registered configuration of a room after proving the owner's credential. */
-async function member_room_context(home, raw) {
+// An owner credential the website accepted is trusted this long for read-only file browsing in a long-running process
+// (the relay), so each folder opened from another device does not ask the website again.
+const ROOM_FILES_TRUST_MS = 60000;
+const trusted_room_tokens = new Map();
+
+/** Find the one registered configuration of a room after proving the owner's credential; `trust` reuses a recent proof. */
+async function member_room_context(home, raw, { trust = false } = {}) {
   const input = launch_input({ ...raw, entry: 'web' });
   if (!input.room_id || typeof input.token !== 'string' || !input.token.trim()) throw new Error('管理成员须提供房间编号和房间控制凭据');
   const paths = read_registry(home).filter(path => {
@@ -720,8 +735,14 @@ async function member_room_context(home, raw) {
   });
   if (paths.length !== 1) throw new Error('未找到本房间唯一的已登记配置，请核对本机接入服务');
   const config = configuration_snapshot(paths[0]).config;
-  // Both reads need the owner credential; the inbox transfers no messages.
-  await site_request(input.site, `/api/rooms/${input.room_id}/inbox`, input.token);
+  const proof = `${input.site}
+${input.room_id}
+${createHash('sha256').update(input.token).digest('hex')}`;
+  if (!trust || !(Date.now() - (trusted_room_tokens.get(proof) ?? -Infinity) < ROOM_FILES_TRUST_MS)) {
+    // Both reads need the owner credential; the inbox transfers no messages.
+    await site_request(input.site, `/api/rooms/${input.room_id}/inbox`, input.token);
+    trusted_room_tokens.set(proof, Date.now());
+  }
   return { input, path: paths[0], config };
 }
 

package/runner/relay_channel.mjs

@@ -10,6 +10,7 @@ import { setTimeout as sleep } from 'node:timers/promises';
 import { gzipSync } from 'node:zlib';
 
 import { atomic_json } from './files.mjs';
+import { remote_room_files } from './discussion_launch.mjs';
 import { acquire_lock } from './discussion_runner.mjs';
 import { local_settings } from './discussion_setup.mjs';
 import { machine_links, relay_cipher, save_machine_links, relayed_command, ROOM_ACTIONS, run_launch_command, sync_remote_launches, unseal } from './remote_launch.mjs';
@@ -156,6 +157,12 @@ export function computer_command(home, site, action, payload) {
   return relayed_command(room?.site ?? local_origin(home), action, input);
 }
 
+/** Run one local operation; browsing project files is answered in this process, since it is asked for on every folder opened. */
+async function run_command(home, command, run) {
+  if (command.command !== 'room-files' || run !== run_launch_command) return run(command);
+  return { status: 200, body: await remote_room_files(home, command.input) };
+}
+
 /** Answer one relayed request: room routes and uploads go to the local website, everything else to the local entrypoint as before. */
 export async function answer_request(home, site, link, frame, { run = run_launch_command, fetcher, report } = {}) {
   const { id, envelope } = frame;
@@ -173,7 +180,7 @@ export async function answer_request(home, site, link, frame, { run = run_launch
       : action === 'computer-site' ? { status: 200, body: { site: local_origin(home) } }
       : action === 'room-api' ? await room_api(home, site, payload, { fetcher, device })
       : action === 'room-upload' ? await room_upload(home, site, payload, { fetcher })
-        : await run({ ...(target === 'computer' ? computer_command(home, site, action, payload) : relayed_command(site, action, payload)), device });
+        : await run_command(home, { ...(target === 'computer' ? computer_command(home, site, action, payload) : relayed_command(site, action, payload)), device }, run);
   } catch (error) { response = { status: 400, body: { error: error.message, ...(error.need ? { need: error.need } : {}) } }; }
   // Remote writes go to this computer's audit log: kind, route, device and outcome, never content. Reads are not logged.
   if (request.action && !(request.action === 'room-api' && (request.payload?.method || 'GET') === 'GET') && !DEVICE_ACTIONS.has(request.action) && request.action !== 'computer-site') {