@agentorg/computer 0.0.16 → 0.0.18

package/README.md

@@ -28,10 +28,12 @@ Isolation is chosen for each computer when it is made, and it keeps it until it
 A computer in a container:
 
 - Its image holds AgentExec, Playwright MCP and a headless Chromium. It is `ghcr.io/uniac-ai/agentcomputer/computer` at the service's version; `--image` names another.
-- `--workspace` is mounted at `/workspace`, read-only at `--access read`, and nothing else of the machine is visible. The computer is told that folder's path on the machine and the machine's name, which `about` answers. Docker has to be able to share that folder. Without `--workspace`, the service makes one.
+- `--workspace` is mounted at `/workspace`, read-only at `--access read`, and nothing else of the machine is visible. The computer is told that folder's path on the machine and the machine's name, which `about` answers. Docker has to be able to share that folder, and the data folder, where its home is. Without `--workspace`, the service makes one.
 - The image is fetched the first time it is needed, which can take minutes: when the service starts if its own isolation is `container`, and otherwise when the first computer in a container is made, a call that then waits for it. `docker pull` it beforehand to spare that wait.
 - It runs as the user who started the service, with no capabilities.
-- `stop` stops the container and keeps it, so what was installed in it is there at `start`. `kill` removes it. Starting a stopped computer uses the image it was made from.
+- Its home, `/home/computer`, is a folder of the machine's, in the computer's own folder in the data folder, mounted as the workspace is. What the agent keeps there stays, the browser's profile with its sign-ins among it. `stop` stops the container and keeps it, and `kill` removes it with the computer's folder.
+- **After an update,** a computer in a container is made again at its first start under a new version of the service, or under another `--image`: its container is removed and made again from the service's image. It keeps its workspace, its home, and its id, token, endpoints and settings. It loses its running commands, as at any restart, and everything else in the container: software installed there, and files outside `/workspace` and `/home/computer`, such as `/tmp`. Keep what must last in those two folders, or in an image of your own. Every computer's answer says the `version` of the program it runs.
+- A container made before 0.0.17 keeps its home inside it. At its first remake the home is copied out. If that fails, the container is kept and started as it was, its `logs` say why, and the copy is tried again at its next start. Until it is made again, its `version` is `null`.
 
 ## Access
 
@@ -42,7 +44,7 @@ A computer in a container:
 | `terminal` | Those, and `exec_command`, `write_stdin`, `list_sessions` |
 | `none`     | No `computer` endpoint; needs `--browser`                 |
 
-`read` answers a text file as numbered lines, and a PNG, JPEG, GIF or WebP of up to 3 MiB as the picture itself: an image an MCP client can pass on to a model. The browser's `browser_take_screenshot` answers an image too, but not one of more than 3 MiB, which a `fullPage` screenshot of a long page can be many times over: it answers an error that gives the size and says to take it again without `fullPage`, or of one element. The most counts bytes only: a model may still refuse a smaller picture for its height or width. A container made by an earlier version keeps the program it was made with: it refuses a picture as a binary file, and passes on a screenshot of any size, until it is killed and made again.
+`read` answers a text file as numbered lines, and a PNG, JPEG, GIF or WebP of up to 3 MiB as the picture itself: an image an MCP client can pass on to a model. The browser's `browser_take_screenshot` answers an image too, but not one of more than 3 MiB, which a `fullPage` screenshot of a long page can be many times over: it answers an error that gives the size and says to take it again without `fullPage`, or of one element. The most counts bytes only: a model may still refuse a smaller picture for its height or width.
 
 `about` tells the agent what a person looking at the computer reads. It takes nothing and answers JSON text, `{"rows": [...]}`, each row a `label` and a `value`, with `"path": true` on a value that is a path and `"caution": true` on one to be read as a caution; a row that is neither has neither. The rows come in this order:
 
@@ -58,13 +60,13 @@ A computer in a container:
 
 - **In a container** the agent's commands find the folder somewhere else, so `Folder` says both and is not marked as a path: `/home/me/Research on the machine, mounted at /workspace in it`. CPU and Memory there are the computer's own; with no isolation they are the whole machine's.
 - **The last three** are a reading of its load taken over half a second when it is asked, in the same way the `load` surface reads. They come together, or not at all where a reading can't be taken.
-- **Not every computer has it.** One with no `computer` endpoint has no `about`. One in a container made by an earlier version keeps the program it was made with: `about` is listed among its tools and isn't there until it is killed and made again.
+- **Not every computer has it.** One with no `computer` endpoint has no `about`.
 
-A client that calls a computer's tools can put the commands it starts in a group, and stop them together. At `--access terminal` it sends a word as `agentexec/group` in the `_meta` of an `exec_command` call, and the request `agentexec/group/stop` with `{"group": "<word>"}` on the `computer` endpoint, which ends every running command of that group and answers `{"stopped": <how many>}`. Giving up a call does not stop its command; only that request does. A shell a person opened is in no group. This is AgentExec's, described in [its README](https://github.com/uniac-ai/AgentExec#sessions), and the service passes both through, with no isolation and in a container. A container made by an earlier version has neither until it is killed and made again.
+A client that calls a computer's tools can put the commands it starts in a group, and stop them together. At `--access terminal` it sends a word as `agentexec/group` in the `_meta` of an `exec_command` call, and the request `agentexec/group/stop` with `{"group": "<word>"}` on the `computer` endpoint, which ends every running command of that group and answers `{"stopped": <how many>}`. Giving up a call does not stop its command; only that request does. A shell a person opened is in no group. This is AgentExec's, described in [its README](https://github.com/uniac-ai/AgentExec#sessions), and the service passes both through, with no isolation and in a container.
 
 The file tools stay inside the workspace. That's a check, not a boundary. Below `terminal`, the browser's `browser_run_code_unsafe` tool is hidden and refused, because it would otherwise be a terminal. The browser's endpoint takes one JSON-RPC request in each POST, as a JSON object, and refuses anything else with 400, a batch among them: it checks each request before passing it on, and passes on only what it read. The service enforces all of this, whatever the client does.
 
-Before 0.0.14 the browser's endpoint passed on a body it couldn't read as one request, unchecked. So on a computer made with `--access none`, `read` or `files` and `--browser`, a caller holding that computer's token could run code in its browser by sending the call in a batch or behind a byte order mark. It needed the computer's own token and a client that sends such a body, which MCP clients don't. 0.0.14 fixes it; a computer in a container made by an earlier version keeps the fault until it is killed and made again.
+Before 0.0.14 the browser's endpoint passed on a body it couldn't read as one request, unchecked. So on a computer made with `--access none`, `read` or `files` and `--browser`, a caller holding that computer's token could run code in its browser by sending the call in a batch or behind a byte order mark. It needed the computer's own token and a client that sends such a body, which MCP clients don't. 0.0.14 fixes it; a computer in a container made by an earlier version keeps the fault until its container is made again.
 
 `--browser` drives the Google Chrome installed on the machine, in a profile of the computer's own. `serve --browser-name` and `--browser-path` choose another. The browser has no debug port: a small host process starts it and shares it on a Unix socket in a folder only its user can enter, which the agent's tools and the live view both use. Playwright MCP, which serves the tools, listens on a Unix socket in a second such folder, and no port either. Only the service's user can reach them; callers go through the computer's `browser` endpoint and its token. It lives as long as its computer does: a client that ends its session or goes away leaves the browser and its pages as they are, and the agent's `browser_close` is refused. Only an agent with `--access terminal` can stop it, with `browser_run_code_unsafe` or from its terminal.
 

package/dist/agentcomputer.js

@@ -3875,7 +3875,7 @@ async function serveBrowserMcp(options) {
 
 // src/container.ts
 import { execFile as execFile2, spawn as spawn3 } from "node:child_process";
-import { readFileSync as readFileSync3 } from "node:fs";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync3, renameSync as renameSync2, rmSync as rmSync4 } from "node:fs";
 import { connect } from "node:net";
 import { hostname as hostname4 } from "node:os";
 import { join as join8 } from "node:path";
@@ -67031,6 +67031,7 @@ var BrowserLive = class {
       } catch {
         return;
       }
+      if (typeof message !== "object" || message === null) return;
       this.#input(ws, viewer, message);
     });
     this.#begin().then(
@@ -67957,6 +67958,33 @@ var ProcessRuntime = class {
   }
 };
 
+// src/handlers.ts
+var VERSION2 = "0.0.18";
+function createHandlers(computers) {
+  return {
+    getInfo: async () => ({
+      version: VERSION2,
+      isolation: computers.isolation,
+      isolationsAvailable: await computers.available()
+    }),
+    listComputers: async ({ state }) => computers.list(state),
+    createComputer: (input2) => computers.create(input2),
+    getComputer: async ({ computerID }) => computers.get(computerID),
+    killComputer: async ({ computerID }) => {
+      await computers.kill(computerID);
+      return void 0;
+    },
+    setComputerTimeout: async ({ computerID, timeout }) => computers.setTimeout(computerID, timeout),
+    stopComputer: ({ computerID }) => computers.stop(computerID),
+    startComputer: ({ computerID, timeout }) => computers.start(computerID, timeout),
+    getComputerLogs: async ({ computerID }) => ({ logs: computers.logs(computerID) }),
+    createLiveSession: async ({ computerID, surface, mode }) => computers.liveSession(computerID, surface, mode ?? "watch"),
+    openLiveSession: async () => {
+      throw new ApiError(426, "Open it as a WebSocket.");
+    }
+  };
+}
+
 // src/inside.ts
 var INNER_PORT = 8e3;
 var INNER_TOKEN_VARIABLE = "AGENTCOMPUTER_INNER_TOKEN";
@@ -67997,7 +68025,7 @@ async function serveInside(options) {
     if (pathname === "/ready") {
       const { browserTools, surfaces } = await running2;
       response.writeHead(200, { "Content-Type": "application/json" });
-      return void response.end(JSON.stringify({ browserTools, surfaces }));
+      return void response.end(JSON.stringify({ browserTools, surfaces, version: VERSION2 }));
     }
     const endpoint = /^\/mcp\/(computer|browser)$/.exec(pathname)?.[1];
     if (!endpoint) return void response.writeHead(404).end();
@@ -68012,9 +68040,9 @@ async function serveInside(options) {
   server.on("upgrade", (request, socket, head) => {
     socket.on("error", () => socket.destroy());
     const given = /^Bearer (\S+)$/.exec(request.headers.authorization ?? "")?.[1];
-    const url3 = new URL(request.url ?? "/", "http://localhost");
-    const surface = /^\/live\/(terminal|files|browser|load)$/.exec(url3.pathname)?.[1];
-    const mode = url3.searchParams.get("mode");
+    const url3 = URL.parse(request.url ?? "/", "http://localhost");
+    const surface = /^\/live\/(terminal|files|browser|load)$/.exec(url3?.pathname ?? "")?.[1];
+    const mode = url3?.searchParams.get("mode");
     if (!given || !sameToken(given, digest) || !surface || mode !== "watch" && mode !== "operate")
       return void socket.end("HTTP/1.1 401 Unauthorized\r\nConnection: close\r\n\r\n");
     running2.then((computer) => computer.openLive(surface, mode, request, socket, head)).catch(() => socket.destroy());
@@ -68056,10 +68084,15 @@ var UPGRADE_HEADERS = [
   "sec-websocket-extensions",
   "sec-websocket-protocol"
 ];
+var messageOf = (error62) => error62 instanceof Error ? error62.message : String(error62);
 var nameOf = (id) => `agentcomputer-${id}`;
+var HOME = "/home/computer";
+var homeOf = (folder) => join8(folder, "home");
 var sleep5 = (ms) => new Promise((done) => setTimeout(done, ms));
 var ContainerRuntime = class {
   #image;
+  /** The id of that image, as it is now on this machine. */
+  #imageId;
   constructor(image) {
     this.#image = image;
   }
@@ -68083,12 +68116,14 @@ var ContainerRuntime = class {
   }
   async prepare() {
     await this.#docker();
+    const id = () => docker(["image", "inspect", "--format", "{{.Id}}", this.#image]);
     try {
-      await docker(["image", "inspect", "--format", "{{.Id}}", this.#image]);
+      this.#imageId = await id();
     } catch {
       process.stdout.write(`Pulling ${this.#image}
 `);
       await docker(["pull", this.#image]);
+      this.#imageId = await id();
     }
   }
   async #inspect(name) {
@@ -68098,7 +68133,39 @@ var ContainerRuntime = class {
       return void 0;
     }
   }
-  async #create(name, spec, token) {
+  /**
+   * Remove a container made from another image, for it to be made again. What it keeps is outside
+   * it: its workspace, and its home. One made before its home was outside has its home copied out
+   * first, and if that can't be done it is kept as it is, to try again at its next start.
+   */
+  async #remake(name, made, folder, events) {
+    if (!made.Mounts.some((mount) => mount.Destination === HOME)) {
+      const home = homeOf(folder);
+      const copying = `${home}.copying`;
+      rmSync4(copying, { recursive: true, force: true });
+      try {
+        const owners = process.getuid?.() ? [] : ["--archive"];
+        await docker(["cp", ...owners, `${name}:${HOME}`, copying]);
+        rmSync4(home, { recursive: true, force: true });
+        renameSync2(copying, home);
+      } catch (error62) {
+        rmSync4(copying, { recursive: true, force: true });
+        events.log(
+          `Its home couldn't be copied out of its container (${messageOf(error62)}), so the container is kept and started as it was made. The copy is tried again at its next start.`
+        );
+        return;
+      }
+      events.log("Its home was copied out of its container, to keep.");
+    }
+    await docker(["rm", "--force", name]);
+    events.log(
+      `Its container was made from another image, so it is made again from ${this.#image}.`
+    );
+  }
+  async #create(name, spec, token, folder) {
+    const home = homeOf(folder);
+    mkdirSync2(home, { recursive: true });
+    chmodSync3(home, 1023);
     const uid = process.getuid?.();
     const told = {
       [INNER_TOKEN_VARIABLE]: token,
@@ -68122,6 +68189,8 @@ var ContainerRuntime = class {
         ...Object.keys(told).flatMap((name2) => ["--env", name2]),
         // Files it writes in the workspace belong to whoever runs the service.
         ...uid ? ["--user", `${uid}:${process.getgid?.()}`] : [],
+        "--mount",
+        `type=bind,source=${home},target=${HOME}`,
         ...spec.workspace ? [
           "--mount",
           `type=bind,source=${spec.workspace},target=/workspace${spec.access === "read" ? ",readonly" : ""}`
@@ -68149,7 +68218,10 @@ var ContainerRuntime = class {
   async start(spec, folder, events) {
     const name = nameOf(spec.id);
     const token = this.#tokenIn(folder);
-    if (!await this.#inspect(name)) await this.#create(name, spec, token);
+    const made = await this.#inspect(name);
+    if (made && this.#imageId && made.Image !== this.#imageId)
+      await this.#remake(name, made, folder, events);
+    if (!await this.#inspect(name)) await this.#create(name, spec, token, folder);
     await docker(["start", name]);
     const inspected = await this.#inspect(name);
     const port = inspected?.NetworkSettings.Ports[`${INNER_PORT}/tcp`]?.[0]?.HostPort;
@@ -68186,6 +68258,7 @@ var ContainerRuntime = class {
     }
     return {
       browserTools: ready.browserTools,
+      version: ready.version,
       /** As they are now: nothing of a container that has stopped can be opened. */
       get surfaces() {
         return ready.surfaces.map(
@@ -68278,33 +68351,6 @@ async function forward(url3, authorization, request, response) {
   sendAnswer(upstream, response);
 }
 
-// src/handlers.ts
-var VERSION2 = "0.0.16";
-function createHandlers(computers) {
-  return {
-    getInfo: async () => ({
-      version: VERSION2,
-      isolation: computers.isolation,
-      isolationsAvailable: await computers.available()
-    }),
-    listComputers: async ({ state }) => computers.list(state),
-    createComputer: (input2) => computers.create(input2),
-    getComputer: async ({ computerID }) => computers.get(computerID),
-    killComputer: async ({ computerID }) => {
-      await computers.kill(computerID);
-      return void 0;
-    },
-    setComputerTimeout: async ({ computerID, timeout }) => computers.setTimeout(computerID, timeout),
-    stopComputer: ({ computerID }) => computers.stop(computerID),
-    startComputer: ({ computerID, timeout }) => computers.start(computerID, timeout),
-    getComputerLogs: async ({ computerID }) => ({ logs: computers.logs(computerID) }),
-    createLiveSession: async ({ computerID, surface, mode }) => computers.liveSession(computerID, surface, mode ?? "watch"),
-    openLiveSession: async () => {
-      throw new ApiError(426, "Open it as a WebSocket.");
-    }
-  };
-}
-
 // src/running.ts
 import { spawn as spawn4 } from "node:child_process";
 import { closeSync, openSync, readFileSync as readFileSync4, statSync as statSync3, writeFileSync as writeFileSync2 } from "node:fs";
@@ -69177,7 +69223,7 @@ var Computer = class _Computer {
 };
 
 // src/service.ts
-import { readFileSync as readFileSync6, rmSync as rmSync5 } from "node:fs";
+import { readFileSync as readFileSync6, rmSync as rmSync6 } from "node:fs";
 import {
   createServer as createServer5,
   STATUS_CODES as STATUS_CODES3
@@ -84997,7 +85043,7 @@ var NodeStreamableHTTPServerTransport2 = class {
 
 // src/computers.ts
 import { randomBytes as randomBytes5 } from "node:crypto";
-import { appendFileSync, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync5, rmSync as rmSync4, statSync as statSync4 } from "node:fs";
+import { appendFileSync, existsSync as existsSync2, mkdirSync as mkdirSync3, readFileSync as readFileSync5, rmSync as rmSync5, statSync as statSync4 } from "node:fs";
 import { isAbsolute, join as join10, resolve as resolve4 } from "node:path";
 var READ = ["about", "read", "list", "search"];
 var FILES = [...READ, "edit"];
@@ -85010,8 +85056,8 @@ var MAX_LOG2 = 256 * 1024;
 var MAX_TIMER_S = 2e6;
 var TICKET_MS = 6e4;
 var expiry = (seconds2) => new Date(Date.now() + seconds2 * 1e3).toISOString();
-var messageOf = (error62) => error62 instanceof Error ? error62.message : String(error62);
-var refusalOf = (error62) => error62 instanceof ApiError ? error62 : new ApiError(500, messageOf(error62));
+var messageOf2 = (error62) => error62 instanceof Error ? error62.message : String(error62);
+var refusalOf = (error62) => error62 instanceof ApiError ? error62 : new ApiError(500, messageOf2(error62));
 var Computers = class {
   #data;
   #base;
@@ -85045,7 +85091,7 @@ var Computers = class {
       if (stored.endAt && Date.parse(stored.endAt) <= Date.now()) {
         stored.state = "stopped";
         await this.#runtimes[stored.isolation].stopLeftover(stored.id).catch(
-          (error62) => this.#log(stored.id, `What it left running wasn't stopped: ${messageOf(error62)}`)
+          (error62) => this.#log(stored.id, `What it left running wasn't stopped: ${messageOf2(error62)}`)
         );
         continue;
       }
@@ -85053,7 +85099,7 @@ var Computers = class {
         const live = this.#live.get(stored.id);
         if (live) live.failed = true;
         this.#arm(stored);
-        this.#log(stored.id, `It didn't start again: ${messageOf(error62)}`);
+        this.#log(stored.id, `It didn't start again: ${messageOf2(error62)}`);
       });
     }
     this.#save();
@@ -85092,7 +85138,7 @@ var Computers = class {
     };
     if (!workspace && access !== "none") {
       stored.workspace = join10(this.#folder(id), "workspace");
-      mkdirSync2(stored.workspace, { recursive: true, mode: 448 });
+      mkdirSync3(stored.workspace, { recursive: true, mode: 448 });
     }
     this.#stored.set(id, stored);
     try {
@@ -85102,7 +85148,7 @@ var Computers = class {
       this.#stored.delete(id);
       await this.#runtimes[stored.isolation].remove(id).catch(() => {
       });
-      rmSync4(this.#folder(id), { recursive: true, force: true });
+      rmSync5(this.#folder(id), { recursive: true, force: true });
       throw refusalOf(error62);
     }
     this.#save();
@@ -85176,7 +85222,7 @@ var Computers = class {
     }
     this.#stored.delete(id);
     this.#save();
-    rmSync4(this.#folder(id), { recursive: true, force: true });
+    rmSync5(this.#folder(id), { recursive: true, force: true });
   }
   logs(id) {
     this.#found(id);
@@ -85277,6 +85323,7 @@ var Computers = class {
       state: stored.state === "running" && down2 ? "failed" : stored.state,
       access: stored.access,
       isolation: stored.isolation,
+      version: stored.version ?? null,
       browser: stored.browser,
       workspace: stored.workspace ?? null,
       startedAt: stored.startedAt,
@@ -85310,6 +85357,9 @@ var Computers = class {
         }
       }
     );
+    const version3 = stored.isolation === "none" ? VERSION2 : live.running.version;
+    if (version3) stored.version = version3;
+    else delete stored.version;
     this.#arm(stored);
   }
   #arm(stored) {
@@ -85347,7 +85397,7 @@ var OPENAPI = {
   "openapi": "3.1.0",
   "info": {
     "title": "AgentComputer",
-    "version": "0.0.16",
+    "version": "0.0.18",
     "description": "Computers for agents. This file is the source of truth: the HTTP API, the MCP control tools and the SDK are all generated from it. An operation with `x-mcp-tool` is also an MCP tool of that name.",
     "license": {
       "name": "Apache-2.0",
@@ -85901,6 +85951,7 @@ var OPENAPI = {
           "state",
           "access",
           "isolation",
+          "version",
           "browser",
           "workspace",
           "startedAt",
@@ -85925,6 +85976,13 @@ var OPENAPI = {
             "$ref": "#/components/schemas/Isolation",
             "description": "The isolation it was made in. It is never run in another."
           },
+          "version": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "description": "The version of the program it ran at its last start. With no isolation it is the service's `version` (see `getInfo`). In a container it is the version inside its image, and null for a container made before 0.0.17, which doesn't say, until it is made again. It is kept from its last start, so a stopped computer's can be older than the service's until it starts. Compare it with the service's to show that a computer runs an older program."
+          },
           "browser": {
             "type": "boolean"
           },
@@ -87196,6 +87254,7 @@ var OPERATIONS = [
           "state",
           "access",
           "isolation",
+          "version",
           "browser",
           "workspace",
           "startedAt",
@@ -87237,6 +87296,13 @@ var OPERATIONS = [
             ],
             "description": "The isolation it was made in. It is never run in another."
           },
+          "version": {
+            "type": [
+              "string",
+              "null"
+            ],
+            "description": "The version of the program it ran at its last start. With no isolation it is the service's `version` (see `getInfo`). In a container it is the version inside its image, and null for a container made before 0.0.17, which doesn't say, until it is made again. It is kept from its last start, so a stopped computer's can be older than the service's until it starts. Compare it with the service's to show that a computer runs an older program."
+          },
           "browser": {
             "type": "boolean"
           },
@@ -87373,6 +87439,7 @@ var OPERATIONS = [
             "state",
             "access",
             "isolation",
+            "version",
             "browser",
             "workspace",
             "startedAt",
@@ -87414,6 +87481,13 @@ var OPERATIONS = [
               ],
               "description": "The isolation it was made in. It is never run in another."
             },
+            "version": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "description": "The version of the program it ran at its last start. With no isolation it is the service's `version` (see `getInfo`). In a container it is the version inside its image, and null for a container made before 0.0.17, which doesn't say, until it is made again. It is kept from its last start, so a stopped computer's can be older than the service's until it starts. Compare it with the service's to show that a computer runs an older program."
+            },
             "browser": {
               "type": "boolean"
             },
@@ -87523,6 +87597,7 @@ var OPERATIONS = [
             "state",
             "access",
             "isolation",
+            "version",
             "browser",
             "workspace",
             "startedAt",
@@ -87564,6 +87639,13 @@ var OPERATIONS = [
               ],
               "description": "The isolation it was made in. It is never run in another."
             },
+            "version": {
+              "type": [
+                "string",
+                "null"
+              ],
+              "description": "The version of the program it ran at its last start. With no isolation it is the service's `version` (see `getInfo`). In a container it is the version inside its image, and null for a container made before 0.0.17, which doesn't say, until it is made again. It is kept from its last start, so a stopped computer's can be older than the service's until it starts. Compare it with the service's to show that a computer runs an older program."
+            },
             "browser": {
               "type": "boolean"
             },
@@ -87764,6 +87846,7 @@ var OPERATIONS = [
         "state",
         "access",
         "isolation",
+        "version",
         "browser",
         "workspace",
         "startedAt",
@@ -87805,6 +87888,13 @@ var OPERATIONS = [
           ],
           "description": "The isolation it was made in. It is never run in another."
         },
+        "version": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "The version of the program it ran at its last start. With no isolation it is the service's `version` (see `getInfo`). In a container it is the version inside its image, and null for a container made before 0.0.17, which doesn't say, until it is made again. It is kept from its last start, so a stopped computer's can be older than the service's until it starts. Compare it with the service's to show that a computer runs an older program."
+        },
         "browser": {
           "type": "boolean"
         },
@@ -87898,6 +87988,7 @@ var OPERATIONS = [
         "state",
         "access",
         "isolation",
+        "version",
         "browser",
         "workspace",
         "startedAt",
@@ -87939,6 +88030,13 @@ var OPERATIONS = [
           ],
           "description": "The isolation it was made in. It is never run in another."
         },
+        "version": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "The version of the program it ran at its last start. With no isolation it is the service's `version` (see `getInfo`). In a container it is the version inside its image, and null for a container made before 0.0.17, which doesn't say, until it is made again. It is kept from its last start, so a stopped computer's can be older than the service's until it starts. Compare it with the service's to show that a computer runs an older program."
+        },
         "browser": {
           "type": "boolean"
         },
@@ -88037,6 +88135,7 @@ var OPERATIONS = [
         "state",
         "access",
         "isolation",
+        "version",
         "browser",
         "workspace",
         "startedAt",
@@ -88078,6 +88177,13 @@ var OPERATIONS = [
           ],
           "description": "The isolation it was made in. It is never run in another."
         },
+        "version": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "description": "The version of the program it ran at its last start. With no isolation it is the service's `version` (see `getInfo`). In a container it is the version inside its image, and null for a container made before 0.0.17, which doesn't say, until it is made again. It is kept from its last start, so a stopped computer's can be older than the service's until it starts. Compare it with the service's to show that a computer runs an older program."
+        },
         "browser": {
           "type": "boolean"
         },
@@ -88472,13 +88578,13 @@ Connection: close\r
 ${JSON.stringify({ code: status, message })}
 `
     );
-    const { pathname } = new URL(request.url ?? "/", "http://localhost");
+    const pathname = URL.parse(request.url ?? "/", "http://localhost")?.pathname ?? "";
     const ticket = /^\/v1\/live\/([^/]+)$/.exec(pathname)?.[1];
     if (!ticket) return refuse(404, "Not found.");
     const origin = request.headers.origin;
     if (origin !== void 0 && !allowed.has(origin))
       return refuse(403, `A live session isn't opened from ${origin.slice(0, 200)}.`);
-    computers.openLive(decodeURIComponent(ticket), request, socket, head).catch((error62) => {
+    computers.openLive(ticket, request, socket, head).catch((error62) => {
       if (error62 instanceof ApiError) refuse(error62.status, error62.message);
       else socket.destroy();
     });
@@ -88491,7 +88597,7 @@ ${JSON.stringify({ code: status, message })}
   const scheme = options.tls ? "https" : "http";
   base = options.publicUrl?.replace(/\/+$/, "") ?? `${scheme}://${bound.family === "IPv6" ? `[${bound.address}]` : bound.address}:${bound.port}`;
   const record3 = recordOf(data);
-  rmSync5(record3, { force: true });
+  rmSync6(record3, { force: true });
   await computers.resume();
   writePrivate(
     record3,
@@ -88507,7 +88613,7 @@ ${JSON.stringify({ code: status, message })}
       process.stderr.write(`${String(error62)}
 `);
     });
-    rmSync5(record3, { force: true });
+    rmSync6(record3, { force: true });
     process.exit(0);
   };
   for (const signal of ["SIGINT", "SIGTERM"]) process.once(signal, () => void stop());

package/dist/types/generated/schema.d.ts

@@ -231,6 +231,8 @@ export interface components {
             access: components["schemas"]["Access"];
             /** @description The isolation it was made in. It is never run in another. */
             isolation: components["schemas"]["Isolation"];
+            /** @description The version of the program it ran at its last start. With no isolation it is the service's `version` (see `getInfo`). In a container it is the version inside its image, and null for a container made before 0.0.17, which doesn't say, until it is made again. It is kept from its last start, so a stopped computer's can be older than the service's until it starts. Compare it with the service's to show that a computer runs an older program. */
+            version: string | null;
             browser: boolean;
             workspace: string | null;
             /**

package/dist/types/sdk.d.ts

@@ -174,6 +174,7 @@ export declare class Computer {
         state: components["schemas"]["ComputerState"];
         access: components["schemas"]["Access"];
         isolation: components["schemas"]["Isolation"];
+        version: string | null;
         browser: boolean;
         workspace: string | null;
         startedAt: string;
@@ -195,6 +196,7 @@ export declare class Computer {
         state: components["schemas"]["ComputerState"];
         access: components["schemas"]["Access"];
         isolation: components["schemas"]["Isolation"];
+        version: string | null;
         browser: boolean;
         workspace: string | null;
         startedAt: string;
@@ -208,6 +210,7 @@ export declare class Computer {
         state: components["schemas"]["ComputerState"];
         access: components["schemas"]["Access"];
         isolation: components["schemas"]["Isolation"];
+        version: string | null;
         browser: boolean;
         workspace: string | null;
         startedAt: string;
@@ -223,6 +226,7 @@ export declare class Computer {
         state: components["schemas"]["ComputerState"];
         access: components["schemas"]["Access"];
         isolation: components["schemas"]["Isolation"];
+        version: string | null;
         browser: boolean;
         workspace: string | null;
         startedAt: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentorg/computer",
-  "version": "0.0.16",
+  "version": "0.0.18",
   "description": "Computers for agents, as a service: a terminal, files and a browser over MCP",
   "license": "Apache-2.0",
   "repository": {