remote-codex 0.11.25 → 0.11.27

package/apps/relay-server/dist/index.js

@@ -403,6 +403,9 @@ var RelayStore = class _RelayStore {
       sharedByMe: sharedByMe.map((share) => this.publicShare(share))
     };
   }
+  sharedThreadsForDevice(userId, deviceId) {
+    return this.getSharesByTarget(userId).filter((share) => share.deviceId === deviceId).map((share) => this.publicShare(share));
+  }
   adminSummary(connectedDevices, options = {}) {
     const conversationWindowDays = normalizeConversationWindowDays(options.conversationWindowDays);
     const users = this.getUsers();
@@ -1847,16 +1850,40 @@ function applyWebViewCorsHeaders(reply, origin) {
 async function forwardRelayHttp(input) {
   const threadId = threadIdFromPath(input.targetPath);
   const workspaceId = workspaceIdFromPath(input.targetPath);
+  const targetUrl = new URL(input.targetPath, "http://relay.local");
+  const sharedThreadListRequest = input.request.method.toUpperCase() === "GET" && targetUrl.pathname === "/api/threads";
+  const sharedRuntimeMetadataRequest = isAllowedSharedRuntimeMetadataRequest(
+    input.request.method,
+    targetUrl.pathname
+  );
   const access = input.store.effectiveAccess(input.user.id, input.deviceId, {
     threadId,
     workspaceId
   });
+  let allowSharedRuntimeMetadata = false;
   if (!access) {
-    input.reply.status(403).send({
-      code: "forbidden",
-      message: "Device access is not allowed."
-    });
-    return;
+    const shares = sharedThreadListRequest || sharedRuntimeMetadataRequest ? input.store.sharedThreadsForDevice(input.user.id, input.deviceId) : [];
+    if (sharedThreadListRequest) {
+      if (shares.length > 0) {
+        await forwardSharedThreadList({
+          reply: input.reply,
+          state: input.state,
+          store: input.store,
+          user: input.user,
+          deviceId: input.deviceId,
+          shares
+        });
+        return;
+      }
+    }
+    allowSharedRuntimeMetadata = sharedRuntimeMetadataRequest && shares.length > 0;
+    if (!allowSharedRuntimeMetadata) {
+      input.reply.status(403).send({
+        code: "forbidden",
+        message: "Device access is not allowed."
+      });
+      return;
+    }
   }
   if (!isAllowedRelayTarget(input.targetPath)) {
     input.reply.status(403).send({
@@ -1865,14 +1892,14 @@ async function forwardRelayHttp(input) {
     });
     return;
   }
-  if (!isAllowedForRelayAccess(access, input.request.method, input.targetPath)) {
+  if (access && !isAllowedForRelayAccess(access, input.request.method, input.targetPath)) {
     input.reply.status(403).send({
       code: "forbidden",
       message: "This shared session does not allow that operation."
     });
     return;
   }
-  if (access.kind === "shared") {
+  if (access?.kind === "shared") {
     input.store.recordShareAccess(access.share, input.user);
   }
   const conversationEvent = conversationEventFromRequest(
@@ -1926,6 +1953,30 @@ async function forwardRelayHttp(input) {
     });
   }
 }
+async function forwardSharedThreadList(input) {
+  const supervisor = input.state.supervisors.get(input.deviceId);
+  if (!supervisor || supervisor.socket.readyState !== WEBSOCKET_OPEN) {
+    input.reply.status(503).send({
+      code: "service_unavailable",
+      message: "No supervisor is connected for this device."
+    });
+    return;
+  }
+  const threads = await Promise.all(
+    input.shares.map(async (share) => {
+      input.store.recordShareAccess(share, input.user);
+      const payload = await forwardSupervisorJson(
+        supervisor,
+        input.deviceId,
+        `/api/threads/${encodeURIComponent(share.threadId)}?limit=1`,
+        { timeoutMs: RELAY_REQUEST_TIMEOUT_MS }
+      );
+      const thread = isObject(payload) && isObject(payload.thread) ? payload.thread : payload;
+      return isObject(thread) ? thread : null;
+    })
+  );
+  input.reply.send(threads.filter((thread) => Boolean(thread)));
+}
 function relayResponseBody(response) {
   if (response.bodyEncoding === "base64") {
     return Buffer.from(response.body, "base64");
@@ -2244,7 +2295,7 @@ async function fetchRelayWorkspaceLabel(supervisor, deviceId, workspaceId) {
   const payload = await forwardSupervisorJson(supervisor, deviceId, `/api/workspaces/${encodeURIComponent(workspaceId)}`);
   return stringField(payload, "label");
 }
-async function forwardSupervisorJson(supervisor, deviceId, targetPath) {
+async function forwardSupervisorJson(supervisor, deviceId, targetPath, options = {}) {
   try {
     const response = await supervisor.requestBroker.forward(
       supervisor.socket,
@@ -2260,7 +2311,7 @@ async function forwardSupervisorJson(supervisor, deviceId, targetPath) {
           body: null
         }
       },
-      { timeoutMs: RELAY_PORTAL_METADATA_TIMEOUT_MS }
+      { timeoutMs: options.timeoutMs ?? RELAY_PORTAL_METADATA_TIMEOUT_MS }
     );
     if (response.statusCode < 200 || response.statusCode >= 300) {
       return null;
@@ -2308,6 +2359,15 @@ function isAllowedRelayTarget(pathValue) {
   const pathname = new URL(pathValue, "http://relay.local").pathname;
   return pathname === "/healthz" || pathname.startsWith("/api/");
 }
+function isAllowedSharedRuntimeMetadataRequest(method, pathname) {
+  if (method.toUpperCase() !== "GET") {
+    return false;
+  }
+  if (pathname === "/api/agent-runtimes") {
+    return true;
+  }
+  return /^\/api\/agent-runtimes\/[^/]+\/(?:status|models)$/.test(pathname);
+}
 function threadIdFromPath(pathValue) {
   const pathname = new URL(pathValue, "http://relay.local").pathname;
   const match = /^\/api\/threads\/([^/?#]+)/.exec(pathname);