@agentproto/runtime 5.11.0 → 5.11.1

package/dist/index.d.ts

@@ -936,15 +936,14 @@ interface EnableResult {
      * A single link to open on a phone (PHONE-PLAN.md P1.2) — the token rides
      * in a URL *fragment* (`#token=`), never a `?` query string, since
      * fragments never reach a server (no Referer, no access/proxy log, no CDN
-     * cache key). Two shapes, chosen by whether this daemon has the
-     * `@agentik/session-chat` app installed with a UI:
-     *   - installed: `<publicUrl>/apps/@agentik/session-chat/ui#token=<t>` —
-     *     the phone lands directly in Control Center.
-     *   - not installed: `https://cli.agentproto.sh/panel#daemon=<publicUrl>&token=<t>`
-     *     — the hosted panel, which speaks the same fragment shape (see
-     *     agentproto/cli-site's `readFragmentConnection`).
-     * Only emitted when exposing the gateway (same condition as `bearerToken`)
-     * — a passthrough tunnel has no daemon UI to link to.
+     * cache key): `<publicUrl>/apps/@agentik/session-chat/ui#token=<t>`, so
+     * the phone lands directly in Control Center. Only emitted when exposing
+     * the gateway (same condition as `bearerToken`) — a passthrough tunnel has
+     * no daemon UI to link to — AND when this daemon has the
+     * `@agentik/session-chat` app installed with a UI: it is the only daemon
+     * page that reads the `#token=` fragment, and there is no hosted panel to
+     * fall back to (the hosted cli-site panel is retired; phones pair
+     * through rendezvous, `agentproto pair offer`).
      */
     phoneUrl?: string;
     provider: "quick";

package/dist/index.mjs

@@ -27959,7 +27959,8 @@ function createMcpObservationStore(opts = {}) {
     const obs = touch(sessionId);
     const at = obs.lastSeenAt;
     const result = message.result && typeof message.result === "object" ? message.result : void 0;
-    const error = message.error ? `${String(message.error.code ?? "error")}: ${String(message.error.message ?? "")}` : void 0;
+    const isExpectedDiscoverMiss = method === "server/discover" && message.error?.code === -32601;
+    const error = message.error && !isExpectedDiscoverMiss ? `${String(message.error.code ?? "error")}: ${String(message.error.message ?? "")}` : void 0;
     const answeredVersion = typeof result?.["protocolVersion"] === "string" ? result["protocolVersion"] : void 0;
     const protocolVersion = method === "initialize" ? answeredVersion : clientProtocolVersion;
     const base = {
@@ -28149,7 +28150,7 @@ function buildSessionCapabilities(desc, pendingPermissions, mcpObservation) {
 function daemonMountFields(obs, turnsCompleted) {
   const status = daemonMountStatus(obs, turnsCompleted);
   const tl = obs?.toolsList;
-  const failing = tl && !tl.ok ? tl : [obs?.initialize, obs?.discover].find((c) => c && !c.ok);
+  const failing = tl ? tl.ok ? void 0 : tl : [obs?.initialize, obs?.discover].find((c) => c && !c.ok);
   const error = failing?.error ?? (obs?.httpError ? `HTTP ${obs.httpError.status}` : void 0);
   const protocolVersion = tl?.protocolVersion ?? obs?.initialize?.protocolVersion ?? obs?.discover?.protocolVersion;
   return {
@@ -50568,16 +50569,7 @@ function projectSessionForHttp(session, fields) {
 var DEFAULT_ALLOWED_ORIGINS = [
   "http://localhost:*",
   "http://127.0.0.1:*",
-  "https://localhost:*",
-  // The canonical hosted agentproto panel (github.com/agentproto/cli-site,
-  // deployed at cli.agentproto.sh). It drives the user's OWN local daemon
-  // from the browser: read-only GETs (session list, SSE stream) are ungated
-  // and already work, but the /sessions/:id/pty WebSocket upgrade IS gated —
-  // so a PTY terminal in the panel 401s unless this first-party origin is
-  // trusted like localhost. A malicious page can't forge this Origin (the
-  // browser sets it), so the trust is scoped to agentproto's own panel,
-  // matching how guilde.work is trusted. Drop it via `strictOrigins`.
-  "https://cli.agentproto.sh"
+  "https://localhost:*"
 ];
 var DEFAULT_FRAME_ANCESTORS = ["vscode-webview:", "vscode-file:"];
 var EVENTS_KEEPALIVE_MS = 25e3;
@@ -64356,7 +64348,9 @@ var RemoteController = class {
       result.bearerToken = bearerToken;
       result.mcpEndpoint = mcpEndpoint;
       result.mcpConfigSnippet = buildMcpConfigSnippet2(mcpEndpoint, bearerToken);
-      result.phoneUrl = this.opts.isSessionChatInstalled?.() ? `${started.publicUrl}/apps/${SESSION_CHAT_APP_ID}/ui#token=${bearerToken}` : `https://cli.agentproto.sh/panel#daemon=${encodeURIComponent(started.publicUrl)}&token=${bearerToken}`;
+      if (this.opts.isSessionChatInstalled?.()) {
+        result.phoneUrl = `${started.publicUrl}/apps/${SESSION_CHAT_APP_ID}/ui#token=${bearerToken}`;
+      }
     } else {
       const warning = `\u26A0 ${started.publicUrl} forwards to ${target.host}:${target.port} with NO authentication from the daemon \u2014 anyone with the URL can reach it. Ensure the upstream service enforces its own auth, and run remote_disable when done.`;
       result.warning = warning;
@@ -64450,7 +64444,7 @@ function registerRemoteTools(server, opts) {
   const { controller } = opts;
   server.tool(
     "remote_enable",
-    "Publish a local port to the internet via Cloudflare. By default exposes this gateway and gates it with a bearer token (returned ONCE in the response \u2014 store it; only its hash is persisted). Pass `targetPort` to tunnel a different local service (Supabase, dev server, \u2026); in that mode the daemon does not gate the proxied traffic \u2014 the upstream service handles its own auth. Returns the public URL plus a paste-ready `.mcp.json` snippet and a `phoneUrl` \u2014 a single link to open on a phone, with the token in a URL fragment (gateway mode only). Re-running while a tunnel is already up errors; call `remote_disable` first to rotate.",
+    "Publish a local port to the internet via Cloudflare. By default exposes this gateway and gates it with a bearer token (returned ONCE in the response \u2014 store it; only its hash is persisted). Pass `targetPort` to tunnel a different local service (Supabase, dev server, \u2026); in that mode the daemon does not gate the proxied traffic \u2014 the upstream service handles its own auth. Returns the public URL plus a paste-ready `.mcp.json` snippet and a `phoneUrl` \u2014 a single link to open on a phone, with the token in a URL fragment (gateway mode, and only when the @agentik/session-chat app is installed). Re-running while a tunnel is already up errors; call `remote_disable` first to rotate.",
     {
       provider: z.enum(["quick"]).optional().describe(
         "Tunnel backend. `quick` = Cloudflare Quick Tunnel (no API key, ephemeral *.trycloudflare.com URL). Defaults to `quick`. Named-CF / Tailscale providers TBD."