@agentorg/computer 0.0.17 → 0.0.18

package/dist/agentcomputer.js

@@ -67031,6 +67031,7 @@ var BrowserLive = class {
       } catch {
         return;
       }
+      if (typeof message !== "object" || message === null) return;
       this.#input(ws, viewer, message);
     });
     this.#begin().then(
@@ -67958,7 +67959,7 @@ var ProcessRuntime = class {
 };
 
 // src/handlers.ts
-var VERSION2 = "0.0.17";
+var VERSION2 = "0.0.18";
 function createHandlers(computers) {
   return {
     getInfo: async () => ({
@@ -68039,9 +68040,9 @@ async function serveInside(options) {
   server.on("upgrade", (request, socket, head) => {
     socket.on("error", () => socket.destroy());
     const given = /^Bearer (\S+)$/.exec(request.headers.authorization ?? "")?.[1];
-    const url3 = new URL(request.url ?? "/", "http://localhost");
-    const surface = /^\/live\/(terminal|files|browser|load)$/.exec(url3.pathname)?.[1];
-    const mode = url3.searchParams.get("mode");
+    const url3 = URL.parse(request.url ?? "/", "http://localhost");
+    const surface = /^\/live\/(terminal|files|browser|load)$/.exec(url3?.pathname ?? "")?.[1];
+    const mode = url3?.searchParams.get("mode");
     if (!given || !sameToken(given, digest) || !surface || mode !== "watch" && mode !== "operate")
       return void socket.end("HTTP/1.1 401 Unauthorized\r\nConnection: close\r\n\r\n");
     running2.then((computer) => computer.openLive(surface, mode, request, socket, head)).catch(() => socket.destroy());
@@ -85396,7 +85397,7 @@ var OPENAPI = {
   "openapi": "3.1.0",
   "info": {
     "title": "AgentComputer",
-    "version": "0.0.17",
+    "version": "0.0.18",
     "description": "Computers for agents. This file is the source of truth: the HTTP API, the MCP control tools and the SDK are all generated from it. An operation with `x-mcp-tool` is also an MCP tool of that name.",
     "license": {
       "name": "Apache-2.0",
@@ -88577,13 +88578,13 @@ Connection: close\r
 ${JSON.stringify({ code: status, message })}
 `
     );
-    const { pathname } = new URL(request.url ?? "/", "http://localhost");
+    const pathname = URL.parse(request.url ?? "/", "http://localhost")?.pathname ?? "";
     const ticket = /^\/v1\/live\/([^/]+)$/.exec(pathname)?.[1];
     if (!ticket) return refuse(404, "Not found.");
     const origin = request.headers.origin;
     if (origin !== void 0 && !allowed.has(origin))
       return refuse(403, `A live session isn't opened from ${origin.slice(0, 200)}.`);
-    computers.openLive(decodeURIComponent(ticket), request, socket, head).catch((error62) => {
+    computers.openLive(ticket, request, socket, head).catch((error62) => {
       if (error62 instanceof ApiError) refuse(error62.status, error62.message);
       else socket.destroy();
     });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentorg/computer",
-  "version": "0.0.17",
+  "version": "0.0.18",
   "description": "Computers for agents, as a service: a terminal, files and a browser over MCP",
   "license": "Apache-2.0",
   "repository": {