@instaclaw/dispatch 0.5.1 → 0.6.1

package/dist/connection.js

@@ -16,10 +16,17 @@ export function connect(opts) {
     console.log(`  Connecting to ${opts.vmAddress}:${opts.port}...`);
     ws = new WebSocket(url, {
         rejectUnauthorized: false, // Accept self-signed certs (TOFU model)
+        handshakeTimeout: 10000,
     });
     ws.on("open", () => {
         reconnectDelay = 1000; // Reset backoff
         console.log(`  Connected to agent on ${opts.vmAddress}`);
+        // Enable TCP keepalive to prevent NAT/firewall/router from killing idle connections
+        // Without this, home routers typically drop idle TCP after 2-5 minutes
+        const socket = ws?._socket;
+        if (socket?.setKeepAlive) {
+            socket.setKeepAlive(true, 30000); // Send TCP keepalive every 30s
+        }
         opts.onConnect?.();
     });
     ws.on("message", async (data, isBinary) => {

package/dist/executor.js

@@ -34,6 +34,8 @@ export async function executeCommand(command) {
                 return await listWindows();
             case "batch":
                 return await executeBatch(params);
+            case "exec":
+                return await doExec(params);
             default:
                 return { success: false, error: `Unknown command type: ${type}` };
         }
@@ -210,4 +212,37 @@ async function listWindows() {
     const windows = await usecomputer.windowList();
     return { success: true, data: { windows } };
 }
+/**
+ * Execute a shell command directly on the user's machine.
+ * Bypasses the GUI entirely — no Terminal window needed.
+ * Returns stdout, stderr, and exit code.
+ */
+async function doExec(params) {
+    const command = String(params.command || "");
+    if (!command) {
+        return { success: false, error: "exec requires a 'command' parameter" };
+    }
+    // Timeout: default 30s, max 120s
+    const timeoutMs = Math.min(Number(params.timeout) || 30000, 120000);
+    return new Promise((resolve) => {
+        const { exec } = require("child_process");
+        exec(command, { timeout: timeoutMs, maxBuffer: 1024 * 1024, shell: "/bin/bash" }, (err, stdout, stderr) => {
+            const exitCode = err ? err.code ?? 1 : 0;
+            // Cap output to prevent context flooding (max 4KB each)
+            const cappedStdout = stdout.length > 4096 ? stdout.substring(0, 4096) + "\n[...truncated]" : stdout;
+            const cappedStderr = stderr.length > 4096 ? stderr.substring(0, 4096) + "\n[...truncated]" : stderr;
+            resolve({
+                success: exitCode === 0,
+                data: {
+                    action: "exec",
+                    command,
+                    exitCode,
+                    stdout: cappedStdout,
+                    stderr: cappedStderr,
+                },
+                error: exitCode !== 0 ? `Command exited with code ${exitCode}` : undefined,
+            });
+        });
+    });
+}
 //# sourceMappingURL=executor.js.map

package/dist/supervisor.js

@@ -85,6 +85,23 @@ function isDangerous(cmd) {
         const key = String(p.key || "").toLowerCase();
         return DANGEROUS_KEY_COMBOS.has(key);
     }
+    // Check exec commands for dangerous patterns
+    if (cmd.type === "exec") {
+        const command = String(p.command || "");
+        // Check against text patterns (reuses the same dangerous detection)
+        if (DANGEROUS_TEXT_PATTERNS.some((pat) => pat.test(command)))
+            return true;
+        // Additional exec-specific dangerous patterns
+        if (/\brm\s+-rf\b/.test(command))
+            return true;
+        if (/\bsudo\b/.test(command))
+            return true;
+        if (/\bchmod\s+777\b/.test(command))
+            return true;
+        if (/\bcurl\b.*\|\s*(bash|sh)\b/.test(command))
+            return true;
+        return false;
+    }
     // Check all sub-actions in a batch
     if (cmd.type === "batch") {
         const actions = p.actions;
@@ -107,6 +124,8 @@ function formatCommand(cmd) {
             return `Scroll ${p.direction} by ${p.amount || 3}`;
         case "drag":
             return `Drag from (${p.fromX}, ${p.fromY}) to (${p.toX}, ${p.toY})`;
+        case "exec":
+            return `Run command: ${String(p.command || "").substring(0, 100)}${String(p.command || "").length > 100 ? "..." : ""}`;
         case "batch": {
             const actions = p.actions;
             if (!Array.isArray(actions))

package/dist/types.d.ts

@@ -1,7 +1,7 @@
 /** Command sent from VM agent → dispatch server → local relay */
 export interface DispatchCommand {
     id: string;
-    type: "screenshot" | "click" | "type" | "press" | "scroll" | "drag" | "windows" | "status" | "batch";
+    type: "screenshot" | "click" | "type" | "press" | "scroll" | "drag" | "windows" | "status" | "batch" | "exec";
     params: Record<string, unknown>;
     description?: string;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@instaclaw/dispatch",
-  "version": "0.5.1",
+  "version": "0.6.1",
   "description": "Let your InstaClaw AI agent control your computer — screenshots, clicks, typing, and more via a secure WebSocket relay",
   "bin": {
     "instaclaw-dispatch": "./dist/index.js"