@agentorg/computer 0.0.13 → 0.0.14

package/README.md

@@ -53,7 +53,7 @@ That prints the computer's `computerID`, its endpoints and its `accessToken`, on
 - **The last three** are a reading of its load taken over half a second when it is asked, in the same way the `load` surface reads. They come together, or not at all where a reading can't be taken.
 - **Not every computer has it.** One with no `computer` endpoint has no `about`. One in a container made by an earlier version keeps the program it was made with: `about` is listed among its tools and isn't there until it is killed and made again.
 
-The file tools stay inside the workspace. That's a check, not a boundary. Below `terminal`, the browser's `browser_run_code_unsafe` tool is hidden and refused, because it would otherwise be a terminal. The service enforces all of this, whatever the client does.
+The file tools stay inside the workspace. That's a check, not a boundary. Below `terminal`, the browser's `browser_run_code_unsafe` tool is hidden and refused, because it would otherwise be a terminal. The browser's endpoint takes one JSON-RPC request in each POST, as a JSON object, and refuses anything else with 400, a batch among them: it checks each request before passing it on, and passes on only what it read. The service enforces all of this, whatever the client does.
 
 `--browser` drives the Google Chrome installed on the machine, in a profile of the computer's own. `serve --browser-name` and `--browser-path` choose another. The browser has no debug port: a small host process starts it and shares it on a Unix socket in a folder only its user can enter, which the agent's tools and the live view both use. It lives as long as its computer does: a client that ends its session or goes away leaves the browser and its pages as they are, and the agent's `browser_close` is refused. Only an agent with `--access terminal` can stop it, with `browser_run_code_unsafe` or from its terminal.
 

package/dist/agentcomputer.js

@@ -27961,6 +27961,7 @@ var RUNS_CODE = "browser_run_code_unsafe";
 var MAX_BODY = 8 * 1024 * 1024;
 var START_MS = 3e4;
 var STOP_MS = 2e3;
+var ONE_REQUEST = "A body is one JSON-RPC request, as a JSON object: send each request in its own POST.";
 var FORWARDED = [
   "accept",
   "content-type",
@@ -28098,18 +28099,29 @@ var Browser = class {
       chunks.push(chunk);
     }
     const body = Buffer.concat(chunks);
-    let message = {};
+    let message;
     try {
-      if (body.length > 0) message = JSON.parse(body.toString("utf8"));
+      const read = body.length > 0 ? JSON.parse(body.toString("utf8")) : void 0;
+      if (typeof read === "object" && read !== null && !Array.isArray(read)) message = read;
     } catch {
     }
-    const tool = message.method === "tools/call" ? String(message.params?.name) : void 0;
+    if (body.length > 0 && !message) {
+      response.writeHead(400, { "Content-Type": "application/json" });
+      return void response.end(
+        JSON.stringify({
+          jsonrpc: "2.0",
+          id: null,
+          error: { code: -32600, message: ONE_REQUEST }
+        })
+      );
+    }
+    const tool = message?.method === "tools/call" ? String(message.params?.name) : void 0;
     if (tool && this.#hidden.has(tool)) {
       response.writeHead(200, { "Content-Type": "application/json" });
       return void response.end(
         JSON.stringify({
           jsonrpc: "2.0",
-          id: message.id ?? null,
+          id: message?.id ?? null,
           error: { code: -32602, message: `Unknown tool: ${tool}` }
         })
       );
@@ -28134,12 +28146,13 @@ var Browser = class {
       }).then((answer) => answer.text()).catch(() => {
       });
     if (tool === "browser_file_upload") this.gate?.agentAnsweredChooser();
+    if (message) headers["content-type"] = "application/json";
     const upstream = await fetch(`${origin}/mcp`, {
       method: request.method,
       headers,
-      ...body.length > 0 ? { body } : {}
+      ...message ? { body: JSON.stringify(message) } : {}
     });
-    if (message.method === "tools/list" && this.#hidden.size > 0) {
+    if (message?.method === "tools/list" && this.#hidden.size > 0) {
       const text3 = withoutHidden(await upstream.text(), this.#hidden);
       return sendAnswer(new Response(text3, upstream), response);
     }
@@ -68132,7 +68145,7 @@ async function forward(url3, authorization, request, response) {
 }
 
 // src/handlers.ts
-var VERSION2 = "0.0.13";
+var VERSION2 = "0.0.14";
 function createHandlers(computers) {
   return {
     getInfo: async () => ({ version: VERSION2, isolation: computers.isolation }),
@@ -85097,7 +85110,7 @@ var OPENAPI = {
   "openapi": "3.1.0",
   "info": {
     "title": "AgentComputer",
-    "version": "0.0.13",
+    "version": "0.0.14",
     "description": "Computers for agents. This file is the source of truth: the HTTP API, the MCP control tools and the SDK are all generated from it. An operation with `x-mcp-tool` is also an MCP tool of that name.",
     "license": {
       "name": "Apache-2.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentorg/computer",
-  "version": "0.0.13",
+  "version": "0.0.14",
   "description": "Computers for agents, as a service: a terminal, files and a browser over MCP",
   "license": "Apache-2.0",
   "repository": {