conductor-remote 1.66.0 → 1.68.0

package/dist-node/src/git.js

@@ -1,7 +1,9 @@
 import { execFile } from 'node:child_process';
 import { promisify } from 'node:util';
+import { isPreviewableSource } from "./shared.js";
 const exec = promisify(execFile);
 const MAX_PATCH_BYTES = 400_000;
+const MAX_LISTED_FILES = 20_000;
 async function git(cwd, args) {
     const { stdout } = await exec('git', ['-C', cwd, ...args], {
         encoding: 'utf8',
@@ -116,3 +118,27 @@ async function localState(worktree) {
     }
     return { dirty, unpushed };
 }
+/**
+ * Every file in the worktree the phone may turn a chat mention into a link for.
+ *
+ * Agents name files in prose all day — "updated `tests/foo.ts`" — and the phone
+ * links a mention only when it matches a real file, so this is the list it matches
+ * against. Tracked plus untracked-not-ignored: an agent that just wrote a file
+ * names it in the same message, long before anything commits it.
+ *
+ * Two things keep the payload small. Only previewable extensions ship, because
+ * `/api/files` refuses everything else anyway, and 20,000 paths is the ceiling — a
+ * repo whose build output isn't ignored would otherwise send its whole `node_modules`
+ * to a phone. `-z`, because a path may legally contain a newline.
+ */
+export async function listSourceFiles(worktree) {
+    let listing = '';
+    try {
+        listing = await git(worktree, ['ls-files', '--cached', '--others', '--exclude-standard', '-z']);
+    }
+    catch {
+        return { files: [], truncated: false };
+    }
+    const files = listing.split('\0').filter(p => p !== '' && isPreviewableSource(p));
+    return { files: files.slice(0, MAX_LISTED_FILES), truncated: files.length > MAX_LISTED_FILES };
+}

package/dist-node/src/mcp-tools.js

@@ -613,7 +613,7 @@ export function createTools(call) {
         },
         {
             name: 'set_workspace_status',
-            description: 'Set a workspace’s status in Conductor’s sidebar (backlog, in-progress, in-review, done, canceled). Drives the real UI through the sidebar row menu, but changes nothing on screen. Fails if the sidebar section holding that row is collapsed, because a collapsed row is invisible to Accessibility and there is no fallback.',
+            description: 'Set a workspace’s status in Conductor’s sidebar (backlog, in-progress, in-review, done, canceled). Drives the real UI through the sidebar row menu, but changes nothing on screen. A collapsed section hides its rows from Accessibility, so folded sections are opened, used, and folded back — which makes this run a few seconds longer.',
             inputSchema: {
                 type: 'object',
                 properties: {

package/dist-node/src/routes.js

@@ -81,6 +81,8 @@ export const routes = {
     sessions: param('GET', '/api/workspaces/:workspaceId/sessions'),
     newChat: param('POST', '/api/workspaces/:workspaceId/sessions'),
     diff: param('GET', '/api/workspaces/:workspaceId/diff'),
+    /** The worktree's own file list, which is what makes a chat's `src/foo.ts` a link. */
+    workspaceFiles: param('GET', '/api/workspaces/:workspaceId/files'),
     merge: param('POST', '/api/workspaces/:workspaceId/merge'),
     workspaceStatus: param('POST', '/api/workspaces/:workspaceId/status'),
     /** Read, start/forward, or stop a local workspace's selected Conductor Run task. */

package/dist-node/src/server.js

@@ -12,7 +12,7 @@ import { DevServerController } from "./dev-server.js";
 import { isAllowedPreviewPath, parseFileReference } from "./file-preview.js";
 import { FirstPromptQueue } from "./firstprompt.js";
 import { startFunnelWatchdog } from "./funnel-watchdog.js";
-import { workspaceDiff } from "./git.js";
+import { listSourceFiles, workspaceDiff } from "./git.js";
 import { installLogCapture, isManaged, LOG_FILE_NAMES, logFiles, processStartedAt, recentLogs, redactSecrets, tailLogFile } from "./logbuf.js";
 import { createTools, handleRpc, READ_TIMEOUT_MS } from "./mcp-tools.js";
 import { mergePr } from "./merge.js";
@@ -489,6 +489,10 @@ async function serveFilePreview(req, res, reference) {
     const target = parseFileReference(reference);
     if (!target)
         return json(req, res, 404, { error: 'source file not found' });
+    const refused = (filePath) => {
+        const answer = previewRefusal(filePath);
+        return json(req, res, answer.status, { error: answer.error });
+    };
     let filePath;
     let workspaceRoot;
     let homeRoot;
@@ -503,7 +507,7 @@ async function serveFilePreview(req, res, reference) {
             fs.promises.realpath(BUNDLED_SKILLS_ROOT).catch(() => null)
         ]);
         if (!isAllowedPreviewPath(filePath, workspaceRoot, homeRoot, readExposeMode(), bundledSkillsRoot)) {
-            return json(req, res, 404, { error: 'source file not found' });
+            return refused(filePath);
         }
         const info = await fs.promises.stat(filePath);
         if (!info.isFile())
@@ -511,7 +515,9 @@ async function serveFilePreview(req, res, reference) {
         size = info.size;
     }
     catch {
-        return json(req, res, 404, { error: 'source file not found' });
+        // A path this relay would refuse must answer the same whether or not it is there, or
+        // a public client learns which home files exist by watching 404 turn into 403.
+        return refused(target.path);
     }
     if (size > FILE_PREVIEW_MAX_BYTES)
         return json(req, res, 413, { error: 'source file is too large to preview' });
@@ -541,6 +547,28 @@ async function serveFilePreview(req, res, reference) {
         truncated: start > 0 || end < lines.length
     });
 }
+/**
+ * How to answer for a file the preview will not serve, from the path alone.
+ *
+ * Chat mentions made the home-directory case ordinary — agents write "plan written to
+ * `~/.gstack/plan.md`" constantly — and on a public funnel every one of those is refused
+ * by policy. Answering "source file not found" then sends someone hunting for a file that
+ * is sitting right there, so a refusal says it is a refusal. It discloses nothing: the
+ * verdict comes from the path and the funnel's posture, never from the disk, and it is
+ * the answer for an out-of-bounds path whether or not that path exists.
+ */
+function previewRefusal(filePath) {
+    const mode = readExposeMode();
+    if (isAllowedPreviewPath(path.resolve(filePath), cfg.workspacesRoot, os.homedir(), mode, BUNDLED_SKILLS_ROOT)) {
+        return { status: 404, error: 'source file not found' };
+    }
+    return {
+        status: 403,
+        error: mode === 'public'
+            ? 'this relay is reachable from the internet, so it previews files inside Conductor workspaces only'
+            : 'outside the files this relay may read'
+    };
+}
 /** Per-file ceiling for a relay exposed through Tailscale Funnel. Large media belongs in a link. */
 const MAX_ATTACHMENT_BYTES = 25 * 1024 * 1024;
 class PayloadTooLargeError extends Error {
@@ -1140,6 +1168,18 @@ const server = http.createServer(async (req, res) => {
                 const diff = await workspaceDiff(ws.worktree, ws.baseBranch);
                 return json(req, res, 200, diff);
             }
+            // GET /api/workspaces/:id/files — the worktree's own file list, which is what lets the
+            // phone link `tests/foo.ts` in a message: a mention becomes a link only when it names
+            // a file that is really there. A workspace with no worktree simply links nothing.
+            const filesOf = routeParam(routes.workspaceFiles, req.method, pathname);
+            if (filesOf) {
+                const ws = reads.getWorkspace(filesOf);
+                if (!ws)
+                    return json(req, res, 404, { error: 'workspace not found' });
+                if (!ws.worktree)
+                    return json(req, res, 200, { files: [], truncated: false });
+                return json(req, res, 200, await listSourceFiles(ws.worktree));
+            }
             // POST /api/workspaces/:id/merge — merge the workspace's open PR (mirrors Conductor's merge button)
             const mergeOf = routeParam(routes.merge, req.method, pathname);
             if (mergeOf) {

package/dist-node/src/writes.js

@@ -596,9 +596,15 @@ export const WORKSPACE_STATUS_LABELS = {
  *
  * Unlike every other write here this one never changes what's on screen: it
  * right-clicks the workspace's *row* (AXShowMenu) and works the menu, so the
- * workspace you were reading stays open. It does need the row to be rendered,
- * which a collapsed sidebar section prevents — that case is reported in words
- * rather than guessed around, because there is no palette command to fall back to.
+ * workspace you were reading stays open. It does need the row to be rendered, and
+ * a collapsed sidebar section renders none — so the script opens the folded
+ * sections itself, looks again, and folds back exactly the ones it opened. That
+ * costs a second sidebar scan, which is affordable only because that scan reads
+ * every row's name in two Apple events rather than one per row (15s → ~1s on a
+ * 50-workspace sidebar; see findSidebarRow). Measured end to end on 2026-09-01:
+ * 8.2s through a folded section, 5.4s through an open one. The budget is 35s
+ * anyway, because sidebarRowsAndNames falls back to the per-row reads when the
+ * list no longer matches its shape, and that path pays the old 15s twice.
  */
 export async function setWorkspaceStatus(workspace, status) {
     const label = WORKSPACE_STATUS_LABELS[status];
@@ -617,7 +623,7 @@ return "ok"`.trim();
                 ...targetEnvironment,
                 RELAY_SET_STATUS: label
             },
-            timeout: 25000
+            timeout: 35000
         })));
         return { ok: true, strategy: 'applescript' };
     }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "conductor-remote",
-	"version": "1.66.0",
+	"version": "1.68.0",
 	"type": "module",
 	"packageManager": "yarn@4.15.0",
 	"description": "Phone control panel for local Conductor agents. Reads ride SQLite + git; prompts ride Conductor's own dispatch path.",