replica-bridge 0.3.18 → 0.3.20

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replica-bridge",
-  "version": "0.3.18",
+  "version": "0.3.20",
   "description": "Lets the ChatReplica iPhone app use Codex on this computer through a relay, end-to-end encrypted.",
   "type": "module",
   "bin": {

package/src/bridge/board.js

@@ -39,13 +39,17 @@ const REC = "[A-Za-z0-9_.:-]+";
 /**
  * GETs (#367). /session also writes TASK.md in the task's working folder, which is what 开工 asks for; /share and /me
  * only read. From 0.3.16 also one item, a task's source (`?offset=` pages its text), as the backend's own page opens it.
- * Not /assist, /mcp, /search, /context, /changes (the bridge's own poll) or anything under /ui.
+ * From 0.3.20 also the change log, which unlike the task reads marks nothing seen: the phone counts new tasks from it
+ * for the sidebar while 看板 is closed; and the read state every client shares (agens-backend 0.15.0), which the phone
+ * reads and writes so what was looked at on the desktop is not new again on the phone.
+ * Not /assist, /mcp, /search, /context, /changes/stream (the bridge's own) or anything under /ui.
  */
 const READS = [/^\/v1\/status$/, /^\/v1\/today$/, /^\/v1\/recommendations$/, new RegExp(`^/v1/recommendations/${REC}$`),
-  new RegExp(`^/v1/recommendations/${REC}/(share|session)$`), /^\/v1\/me$/, new RegExp(`^/v1/items/${REC}$`)];
+  new RegExp(`^/v1/recommendations/${REC}/(share|session)$`), /^\/v1\/me$/, new RegExp(`^/v1/items/${REC}$`), /^\/v1\/changes$/,
+  /^\/v1\/me\/read-state$/];
 
 /** POSTs (#367): a task's follow-up actions, cancelling its preparation note, and muting a conversation. Nothing else. */
-const WRITES = [new RegExp(`^/v1/recommendations/${REC}/actions$`), new RegExp(`^/v1/recommendations/${REC}/prep/cancel$`), /^\/v1\/me\/muted$/];
+const WRITES = [new RegExp(`^/v1/recommendations/${REC}/actions$`), new RegExp(`^/v1/recommendations/${REC}/prep/cancel$`), /^\/v1\/me\/muted$/, /^\/v1\/me\/read-state$/];
 /** agens-backend src/recs.mjs ACTIONS. */
 export const BOARD_ACTIONS = ["accept", "snooze", "delegate", "dismiss", "done", "reopen"]         ;
 

package/src/bridge/install.js

@@ -216,7 +216,7 @@ WantedBy=default.target
 function serviceEnv()                         {
   const env                         = {};
   for (const [key, value] of Object.entries(process.env)) {
-    if (value !== undefined && (key === "PATH" || key === "Path" || /^(CODEX_|REPLICA_|RELAY_ENV$|AGENS_BACKEND_PORT$)/.test(key)) && key !== "REPLICA_BRIDGE_LOG") env[key] = value;
+    if (value !== undefined && (key === "PATH" || key === "Path" || /^(CODEX_|REPLICA_|RELAY_ENV$|AGENS_BACKEND_PORT$|AGENS_WORKSPACE_ROOT$)/.test(key)) && key !== "REPLICA_BRIDGE_LOG") env[key] = value;
   }
   for (const key of ["PATH", "Path"]) if (env[key]) env[key] = servicePATH(env[key]);
   env.REPLICA_BRIDGE_SERVICE = "1";

package/src/bridge/service.js

@@ -15,6 +15,7 @@ import {
                                                                             
 import { relaySocketURL } from "../http.js";
 import { BoardReader } from "./board.js";
+import { readWork, workDirectories } from "./work.js";
 import { killCommand, spawnCommand } from "./command.js";
 import { hostKeyPair, loadState } from "./state.js";
 import { annotateWriterError } from "./writer.js";
@@ -57,6 +58,8 @@ import { annotateWriterError } from "./writer.js";
                      
                                                                    
                             
+                                                                                              
+                             
  
 
                   
@@ -316,6 +319,9 @@ export class BridgeService {
       void this.board.post(message.path, message.body).then((answer) => this.sendInner(conn, { t: "board/res", id: message.id, ...answer }));
     } else if (message.t === "board/sub") {
       conn.boardUnsubscribe ??= this.board.subscribe((event) => this.sendInner(conn, event), message.after);
+    } else if (message.t === "work/get") {
+      // Read when asked, so a new main conversation started on the desktop is what the next question hears.
+      this.sendInner(conn, { t: "work/res", id: message.id, ...readWork(this.options.workDirectories ?? workDirectories()) });
     } else if (message.t === "board/unsub") {
       conn.boardUnsubscribe?.();
       conn.boardUnsubscribe = null;

package/src/bridge/work.js

@@ -0,0 +1,46 @@
+// Agens Work's main conversation (PROTOCOL.md "Work"), for agens-mobile's Work row. The Agens desktop keeps it in
+// agens-work.json in the Work workspace (AgensWorkDev agens/extensions/work-chat/main.cjs): AGENS_WORKSPACE_ROOT, else
+// ~/.agens-work/workspaces/assistant, and the first of those with a record is the one in use. The bridge only reads
+// that file when a phone asks, so it needs no hook into the desktop, and a computer without Agens Work simply says so.
+// Only whether Work is on and the conversation's id leave this computer, not the paths or anything else in the record.
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+                                                 
+
+export const WORK_RECORD = "agens-work.json";
+/** A Codex thread id (a UUID); anything else in the record is not passed on. */
+const THREAD_ID = /^[A-Za-z0-9-]{1,64}$/;
+
+/**
+ * What the phone hears (WorkAnswer): on with the main conversation, or off and why. `none`: Agens Work was never agreed
+ * to here; `off`: switched off in its settings; `preparing`: agreed, but the main conversation is not made yet.
+ */
+
+/** Where the desktop looks for the record, in its order (main.cjs chooseWorkspace). */
+export function workDirectories(env                    = process.env, home = os.homedir())           {
+  const legacy = path.join(home, ".agens-work", "workspaces", "assistant");
+  return [...new Set([env.AGENS_WORKSPACE_ROOT || legacy, legacy])];
+}
+
+function readRecord(directory        )                                 {
+  try {
+    const record = JSON.parse(fs.readFileSync(path.join(directory, WORK_RECORD), "utf8"));
+    return record && typeof record === "object" && record.schema === 1 ? record : null;
+  } catch {
+    return null;
+  }
+}
+
+/** Reads the record now, as the desktop would see it. */
+export function readWork(directories           = workDirectories())             {
+  for (const directory of directories) {
+    const record = readRecord(directory);
+    if (!record) continue;
+    // A record without `enabled` predates the desktop's switch, and means on (main.cjs enabled()).
+    if (record.enabled === false) return { on: false, reason: "off" };
+    const threadId = record.mainThreadId;
+    return typeof threadId === "string" && THREAD_ID.test(threadId) ? { on: true, threadId } : { on: false, reason: "preparing" };
+  }
+  return { on: false, reason: "none" };
+}

package/src/protocol.js

@@ -1,4 +1,4 @@
-// Shared protocol for replica-relay, replica-bridge and the test phone (Relay/PROTOCOL.md).
+// Shared protocol for replica-relay, replica-bridge and the test phone (PROTOCOL.md).
 // Everything here is plain Node: X25519, HKDF-SHA256, ChaCha20-Poly1305 and HMAC-SHA256 match CryptoKit's
 // Curve25519.KeyAgreement, HKDF<SHA256>, ChaChaPoly and HMAC<SHA256>, so the Swift side can follow the same steps.
 import crypto from "node:crypto";
@@ -243,7 +243,12 @@ export class FrameCipher {
                                                   
                                       
                         
-               
+              
+                                 
+                                                 
+
+/** Agens Work's main conversation on this computer, or why there is none (PROTOCOL.md "Work", 0.3.19). */
+                                                                                                              
 
 /** A read or write of the optional board: the backend's status and body, or why there is none (PROTOCOL.md "看板"). */
                                                                                                                               
@@ -337,6 +342,8 @@ export const CloseCode = {
   replaced: 4409,
   protocolError: 4400,
   streamGone: 4410,
+  /** A desktop's computer used up its daily traffic; it may connect again after midnight UTC. */
+  quota: 4429,
 }         ;
 
 /**

package/src/relay/config.js

@@ -1,4 +1,4 @@
-// Reads ~/.config/replica-relay/relay.env (Relay/deploy/relay.env.example). Real environment variables win over
+// Reads ~/.config/replica-relay/relay.env (deploy/relay.env.example). Real environment variables win over
 // the file, so a systemd Environment= line or a one-off `RELAY_PORT=… node …` still works.
 import fs from "node:fs";
 import os from "node:os";
@@ -33,6 +33,13 @@ export function readEnvFile(file        )                         {
                
                               
                       
+                                                                                                                            
+                                
+                                                                                              
+                                           
+                                                                         
+                                   
+                                           
                   
                                                                           
                     
@@ -77,6 +84,18 @@ export function allowedIdsReader(config
   };
 }
 
+function desktopPairingMode(value        )                           {
+  if (value === "open" || value === "owned" || value === "off") return value;
+  throw new Error(`RELAY_DESKTOP_PAIRING takes open, owned or off, not "${value}"`);
+}
+
+function positiveNumber(name        , value               )                {
+  if (value === null) return null;
+  const number = Number(value);
+  if (!(number > 0)) throw new Error(`${name} takes a positive number, not "${value}"`);
+  return number;
+}
+
 const expandHome = (value        ) => (value.startsWith("~/") ? path.join(os.homedir(), value.slice(2)) : value);
 
 export function loadRelayConfig(envPath = defaultEnvPath())              {
@@ -87,11 +106,16 @@ export function loadRelayConfig(envPath = defaultEnvPath())              {
   };
   const origin = get("RELAY_PUBLIC_ORIGIN");
   if (origin && !/^https?:\/\/[^/]+\/?$/.test(origin)) throw new Error(`RELAY_PUBLIC_ORIGIN must look like https://host[:port], got ${origin}`);
+  const dailyMiB = positiveNumber("RELAY_DESKTOP_DAILY_MIB", get("RELAY_DESKTOP_DAILY_MIB"));
   return {
     listen: get("RELAY_LISTEN") ?? "127.0.0.1",
     port: Number(get("RELAY_PORT") ?? 8790),
     publicOrigin: origin?.replace(/\/$/, "") ?? null,
     trustProxy: get("RELAY_TRUST_PROXY") === "1",
+    clientIPHeader: get("RELAY_CLIENT_IP_HEADER"),
+    desktopPairing: desktopPairingMode(get("RELAY_DESKTOP_PAIRING") ?? "open"),
+    anonymousIdleDays: positiveNumber("RELAY_ANONYMOUS_IDLE_DAYS", get("RELAY_ANONYMOUS_IDLE_DAYS")),
+    desktopBytesPerHostPerDay: dailyMiB === null ? null : dailyMiB * 1024 * 1024,
     dataDir: expandHome(get("RELAY_DATA_DIR") ?? "~/.local/share/replica-relay"),
     devLogin: get("RELAY_DEV_LOGIN") === "1",
     githubClientId: get("GITHUB_CLIENT_ID"),