@kortix/agent-tunnel 0.13.56 → 0.13.57

package/dist/agent-cli.js

@@ -19,13 +19,15 @@ var __toESM = (mod, isNodeMode, target) => {
       return cached;
   }
   target = mod != null ? __create(__getProtoOf(mod)) : {};
-  const to = isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
-  for (let key of __getOwnPropNames(mod))
-    if (!__hasOwnProp.call(to, key))
-      __defProp(to, key, {
-        get: __accessProp.bind(mod, key),
-        enumerable: true
-      });
+  const to = isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", { value: mod, enumerable: true }) : target;
+  if (mod && typeof mod === "object" || typeof mod === "function") {
+    for (let key of __getOwnPropNames(mod))
+      if (!__hasOwnProp.call(to, key))
+        __defProp(to, key, {
+          get: __accessProp.bind(mod, key),
+          enumerable: true
+        });
+  }
   if (canCache)
     cache.set(mod, to);
   return to;
@@ -44,11 +46,21 @@ var __export = (target, all) => {
       set: __exportSetter.bind(all, name)
     });
 };
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+var __esm = (fn, res, err) => () => {
+  if (fn)
+    try {
+      res = fn(fn = 0);
+    } catch (e) {
+      err = [e];
+    }
+  if (err)
+    throw err[0];
+  return res;
+};
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // ../../node_modules/.pnpm/ws@8.21.3/node_modules/ws/lib/constants.js
-var require_constants = __commonJS((exports, module) => {
+var require_constants = __commonJS(function(exports, module) {
   var BINARY_TYPES = ["nodebuffer", "arraybuffer", "fragments"];
   var hasBlob = typeof Blob !== "undefined";
   if (hasBlob)
@@ -68,7 +80,7 @@ var require_constants = __commonJS((exports, module) => {
 });
 
 // ../../node_modules/.pnpm/ws@8.21.3/node_modules/ws/lib/buffer-util.js
-var require_buffer_util = __commonJS((exports, module) => {
+var require_buffer_util = __commonJS(function(exports, module) {
   var { EMPTY_BUFFER } = require_constants();
   var FastBuffer = Buffer[Symbol.species];
   function concat(list, totalLength) {
@@ -129,11 +141,11 @@ var require_buffer_util = __commonJS((exports, module) => {
   if (!process.env.WS_NO_BUFFER_UTIL) {
     try {
       const bufferUtil = (()=>{throw new Error("Cannot require module "+"bufferutil");})();
-      module.exports.mask = function(source, mask, output, offset, length) {
+      module.exports.mask = function(source, mask2, output, offset, length) {
         if (length < 48)
-          _mask(source, mask, output, offset, length);
+          _mask(source, mask2, output, offset, length);
         else
-          bufferUtil.mask(source, mask, output, offset, length);
+          bufferUtil.mask(source, mask2, output, offset, length);
       };
       module.exports.unmask = function(buffer, mask) {
         if (buffer.length < 32)
@@ -146,7 +158,7 @@ var require_buffer_util = __commonJS((exports, module) => {
 });
 
 // ../../node_modules/.pnpm/ws@8.21.3/node_modules/ws/lib/limiter.js
-var require_limiter = __commonJS((exports, module) => {
+var require_limiter = __commonJS(function(exports, module) {
   var kDone = Symbol("kDone");
   var kRun = Symbol("kRun");
 
@@ -178,7 +190,7 @@ var require_limiter = __commonJS((exports, module) => {
 });
 
 // ../../node_modules/.pnpm/ws@8.21.3/node_modules/ws/lib/permessage-deflate.js
-var require_permessage_deflate = __commonJS((exports, module) => {
+var require_permessage_deflate = __commonJS(function(exports, module) {
   var zlib = __require("zlib");
   var bufferUtil = require_buffer_util();
   var Limiter = require_limiter();
@@ -366,7 +378,7 @@ var require_permessage_deflate = __commonJS((exports, module) => {
           callback(err);
           return;
         }
-        const data2 = bufferUtil.concat(this._inflate[kBuffers], this._inflate[kTotalLength]);
+        const data = bufferUtil.concat(this._inflate[kBuffers], this._inflate[kTotalLength]);
         if (this._inflate._readableState.endEmitted) {
           this._inflate.close();
           this._inflate = null;
@@ -377,7 +389,7 @@ var require_permessage_deflate = __commonJS((exports, module) => {
             this._inflate.reset();
           }
         }
-        callback(null, data2);
+        callback(null, data);
       });
     }
     _compress(data, fin, callback) {
@@ -399,9 +411,9 @@ var require_permessage_deflate = __commonJS((exports, module) => {
         if (!this._deflate) {
           return;
         }
-        let data2 = bufferUtil.concat(this._deflate[kBuffers], this._deflate[kTotalLength]);
+        let data = bufferUtil.concat(this._deflate[kBuffers], this._deflate[kTotalLength]);
         if (fin) {
-          data2 = new FastBuffer(data2.buffer, data2.byteOffset, data2.length - 4);
+          data = new FastBuffer(data.buffer, data.byteOffset, data.length - 4);
         }
         this._deflate[kCallback] = null;
         this._deflate[kTotalLength] = 0;
@@ -409,7 +421,7 @@ var require_permessage_deflate = __commonJS((exports, module) => {
         if (fin && this.params[`${endpoint}_no_context_takeover`]) {
           this._deflate.reset();
         }
-        callback(null, data2);
+        callback(null, data);
       });
     }
   }
@@ -442,7 +454,7 @@ var require_permessage_deflate = __commonJS((exports, module) => {
 });
 
 // ../../node_modules/.pnpm/ws@8.21.3/node_modules/ws/lib/validation.js
-var require_validation = __commonJS((exports, module) => {
+var require_validation = __commonJS(function(exports, module) {
   var { isUtf8 } = __require("buffer");
   var { hasBlob } = require_constants();
   var tokenChars = [
@@ -629,7 +641,7 @@ var require_validation = __commonJS((exports, module) => {
 });
 
 // ../../node_modules/.pnpm/ws@8.21.3/node_modules/ws/lib/receiver.js
-var require_receiver = __commonJS((exports, module) => {
+var require_receiver = __commonJS(function(exports, module) {
   var { Writable } = __require("stream");
   var PerMessageDeflate = require_permessage_deflate();
   var {
@@ -1023,7 +1035,7 @@ var require_receiver = __commonJS((exports, module) => {
 });
 
 // ../../node_modules/.pnpm/ws@8.21.3/node_modules/ws/lib/sender.js
-var require_sender = __commonJS((exports, module) => {
+var require_sender = __commonJS(function(exports, module) {
   var { Duplex } = __require("stream");
   var { randomFillSync } = __require("crypto");
   var {
@@ -1382,7 +1394,7 @@ var require_sender = __commonJS((exports, module) => {
 });
 
 // ../../node_modules/.pnpm/ws@8.21.3/node_modules/ws/lib/event-target.js
-var require_event_target = __commonJS((exports, module) => {
+var require_event_target = __commonJS(function(exports, module) {
   var { kForOnEventAttribute, kListener } = require_constants();
   var kCode = Symbol("kCode");
   var kData = Symbol("kData");
@@ -1533,7 +1545,7 @@ var require_event_target = __commonJS((exports, module) => {
 });
 
 // ../../node_modules/.pnpm/ws@8.21.3/node_modules/ws/lib/extension.js
-var require_extension = __commonJS((exports, module) => {
+var require_extension = __commonJS(function(exports, module) {
   var { tokenChars } = require_validation();
   function push(dest, name, elem) {
     if (dest[name] === undefined)
@@ -1698,7 +1710,7 @@ var require_extension = __commonJS((exports, module) => {
 });
 
 // ../../node_modules/.pnpm/ws@8.21.3/node_modules/ws/lib/websocket.js
-var require_websocket = __commonJS((exports, module) => {
+var require_websocket = __commonJS(function(exports, module) {
   var EventEmitter = __require("events");
   var https = __require("https");
   var http = __require("http");
@@ -2121,7 +2133,7 @@ var require_websocket = __commonJS((exports, module) => {
     }
     const defaultPort = isSecure ? 443 : 80;
     const key = randomBytes(16).toString("base64");
-    const request = isSecure ? https.request : http.request;
+    const request3 = isSecure ? https.request : http.request;
     const protocolSet = new Set;
     let perMessageDeflate;
     opts.createConnection = opts.createConnection || (isSecure ? tlsConnect : netConnect);
@@ -2180,8 +2192,8 @@ var require_websocket = __commonJS((exports, module) => {
         const headers = options && options.headers;
         options = { ...options, headers: {} };
         if (headers) {
-          for (const [key2, value] of Object.entries(headers)) {
-            options.headers[key2.toLowerCase()] = value;
+          for (const [key, value] of Object.entries(headers)) {
+            options.headers[key.toLowerCase()] = value;
           }
         }
       } else if (websocket.listenerCount("redirect") === 0) {
@@ -2197,12 +2209,12 @@ var require_websocket = __commonJS((exports, module) => {
       if (opts.auth && !options.headers.authorization) {
         options.headers.authorization = "Basic " + Buffer.from(opts.auth).toString("base64");
       }
-      req = websocket._req = request(opts);
+      req = websocket._req = request3(opts);
       if (websocket._redirects) {
         websocket.emit("redirect", websocket.url, req);
       }
     } else {
-      req = websocket._req = request(opts);
+      req = websocket._req = request3(opts);
     }
     if (opts.timeout) {
       req.on("timeout", () => {
@@ -2470,7 +2482,7 @@ var require_websocket = __commonJS((exports, module) => {
 });
 
 // ../../node_modules/.pnpm/ws@8.21.3/node_modules/ws/lib/stream.js
-var require_stream = __commonJS((exports, module) => {
+var require_stream = __commonJS(function(exports, module) {
   var WebSocket2 = require_websocket();
   var { Duplex } = __require("stream");
   function emitClose(stream) {
@@ -2520,9 +2532,9 @@ var require_stream = __commonJS((exports, module) => {
         return;
       }
       let called = false;
-      ws.once("error", function error(err2) {
+      ws.once("error", function error(err) {
         called = true;
-        callback(err2);
+        callback(err);
       });
       ws.once("close", function close() {
         if (!called)
@@ -2573,7 +2585,7 @@ var require_stream = __commonJS((exports, module) => {
 });
 
 // ../../node_modules/.pnpm/ws@8.21.3/node_modules/ws/lib/subprotocol.js
-var require_subprotocol = __commonJS((exports, module) => {
+var require_subprotocol = __commonJS(function(exports, module) {
   var { tokenChars } = require_validation();
   function parse(header) {
     const protocols = new Set;
@@ -2594,11 +2606,11 @@ var require_subprotocol = __commonJS((exports, module) => {
         }
         if (end === -1)
           end = i;
-        const protocol2 = header.slice(start, end);
-        if (protocols.has(protocol2)) {
-          throw new SyntaxError(`The "${protocol2}" subprotocol is duplicated`);
+        const protocol = header.slice(start, end);
+        if (protocols.has(protocol)) {
+          throw new SyntaxError(`The "${protocol}" subprotocol is duplicated`);
         }
-        protocols.add(protocol2);
+        protocols.add(protocol);
         start = end = -1;
       } else {
         throw new SyntaxError(`Unexpected character at index ${i}`);
@@ -2618,7 +2630,7 @@ var require_subprotocol = __commonJS((exports, module) => {
 });
 
 // ../../node_modules/.pnpm/ws@8.21.3/node_modules/ws/lib/websocket-server.js
-var require_websocket_server = __commonJS((exports, module) => {
+var require_websocket_server = __commonJS(function(exports, module) {
   var EventEmitter = __require("events");
   var http = __require("http");
   var { Duplex } = __require("stream");
@@ -2930,15 +2942,8 @@ var require_websocket_server = __commonJS((exports, module) => {
 // ../../node_modules/.pnpm/ws@8.21.3/node_modules/ws/wrapper.mjs
 var exports_wrapper = {};
 __export(exports_wrapper, {
-  subprotocol: () => import_subprotocol.default,
-  extension: () => import_extension.default,
-  default: () => wrapper_default,
-  createWebSocketStream: () => import_stream.default,
-  WebSocketServer: () => import_websocket_server.default,
   WebSocket: () => import_websocket.default,
-  Sender: () => import_sender.default,
-  Receiver: () => import_receiver.default,
-  PerMessageDeflate: () => import_permessage_deflate.default
+  default: () => wrapper_default
 });
 var import_stream, import_extension, import_permessage_deflate, import_receiver, import_sender, import_subprotocol, import_websocket, import_websocket_server, wrapper_default;
 var init_wrapper = __esm(() => {
@@ -2957,7 +2962,7 @@ var init_wrapper = __esm(() => {
 if (typeof globalThis.WebSocket === "undefined") {
   try {
     const ws = await Promise.resolve().then(() => (init_wrapper(), exports_wrapper));
-    const WebSocketImpl = ws.WebSocket ?? ws.default;
+    const WebSocketImpl = ws.WebSocket ?? wrapper_default;
     globalThis.WebSocket = WebSocketImpl;
   } catch {
     console.error('[agent-tunnel] WebSocket is not available. Install the "ws" package or use Node.js 22+.');
@@ -3677,10 +3682,10 @@ function wakeDesktopApp(home = agentTunnelHome(), now = Date.now()) {
     return "no-app";
   }
 }
-function keepAwakeCommand(platform2, pid) {
-  if (platform2 === "darwin")
+function keepAwakeCommand(platform, pid) {
+  if (platform === "darwin")
     return { command: "caffeinate", args: ["-s", "-w", String(pid)] };
-  if (platform2 === "linux") {
+  if (platform === "linux") {
     return {
       command: "systemd-inhibit",
       args: ["--what=sleep", "--who=Kortix", "--why=Keep this computer reachable", "--mode=block", "tail", `--pid=${pid}`, "-f", "/dev/null"]
@@ -3947,7 +3952,7 @@ function visibleLength(value) {
 function clearScreen() {
   process.stdout.write("\x1B[2J\x1B[3J\x1B[H");
 }
-var sleep = (ms) => new Promise((resolve2) => setTimeout(resolve2, ms));
+var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 var glyph = {
   on: `${c.green}●${c.reset}`,
   off: `${c.gray}○${c.reset}`,
@@ -4485,7 +4490,7 @@ class TunnelAgent {
     } catch {}
     const deadline = Date.now() + hold;
     while (Date.now() < deadline) {
-      await new Promise((resolve2) => setTimeout(resolve2, Math.min(100, hold / 4)));
+      await new Promise((resolve) => setTimeout(resolve, Math.min(100, hold / 4)));
       const decision = decideAccess(readAccess(this.home));
       if (decision === "ask")
         continue;
@@ -4527,7 +4532,7 @@ class TunnelAgent {
     const hold = this.options.accessHoldMs ?? ACCESS_HOLD_MS;
     const deadline = Date.now() + hold;
     while (Date.now() < deadline) {
-      await new Promise((resolve2) => setTimeout(resolve2, Math.min(100, hold / 4)));
+      await new Promise((resolve) => setTimeout(resolve, Math.min(100, hold / 4)));
       if (!accessWidens(readAccess(this.home), target, this.now())) {
         clearAccessRequest(asked.id, this.home);
         return accessView(this.home, platform3(), this.now());
@@ -4853,7 +4858,7 @@ function hostBundleId() {
   }
 }
 function execFile(cmd, args, timeoutMs = 30000, env = driverEnvironment()) {
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve, reject) => {
     const proc = spawn4(cmd, args, {
       stdio: ["ignore", "pipe", "pipe"],
       env
@@ -4898,7 +4903,7 @@ function execFile(cmd, args, timeoutMs = 30000, env = driverEnvironment()) {
         const detail = stderr.trim() || stdout.trim();
         reject(new Error(`${basename2(cmd)} failed (${code})${detail ? `: ${detail}` : ""}`));
       } else {
-        resolve2({ stdout, stderr });
+        resolve({ stdout, stderr });
       }
     });
     proc.on("error", (err) => {
@@ -4920,7 +4925,7 @@ function isDaemonProxyFallback(message) {
   return message.includes("daemon proxy") && message.includes("Resource temporarily unavailable");
 }
 async function sleep2(ms) {
-  await new Promise((resolve2) => setTimeout(resolve2, ms));
+  await new Promise((resolve) => setTimeout(resolve, ms));
 }
 function sanitizeArgs(args) {
   const sanitized = {};
@@ -5546,7 +5551,7 @@ function createShellCapability(config) {
         safeEnv[key] = process.env[key];
       }
     }
-    return new Promise((resolve3, reject) => {
+    return new Promise((resolve, reject) => {
       const proc = spawn5(executable, args, {
         cwd,
         shell: false,
@@ -5589,7 +5594,7 @@ function createShellCapability(config) {
         reject(new Error(`Command failed to start: ${err.message}`));
       });
       proc.on("close", (code, signal) => {
-        resolve3({
+        resolve({
           exitCode: code,
           signal,
           stdout,
@@ -5678,17 +5683,17 @@ function clearSavedCredentials() {
 // src/agent/credential-probe.ts
 var DEFAULT_PROBE_TIMEOUT_MS = 1e4;
 function probeCredentials(config, options = {}) {
-  return new Promise((resolve3) => {
+  return new Promise((resolve) => {
     let socket;
     try {
       socket = openRelaySocket(new URL(buildTunnelWsUrl(config)).href);
     } catch {
-      resolve3("unreachable");
+      resolve("unreachable");
       return;
     }
     const settle = (result) => {
       clearTimeout(timer);
-      resolve3(result);
+      resolve(result);
       try {
         socket.close(1000, "probe complete");
       } catch {}
@@ -6262,8 +6267,8 @@ import { statSync as statSync3 } from "fs";
 function runtimeFingerprint(files) {
   return files.map((file) => {
     try {
-      const stat2 = statSync3(file);
-      return `${stat2.ino}:${stat2.mtimeMs}:${stat2.size}`;
+      const stat = statSync3(file);
+      return `${stat.ino}:${stat.mtimeMs}:${stat.size}`;
     } catch {
       return "missing";
     }
@@ -6405,7 +6410,6 @@ function startAgent(config, options = {}) {
     persistent: options.service === true,
     reloadConfig: () => loadConfig({ apiUrl: config.apiUrl })
   });
-  agent.connect();
   const shutdown = () => {
     if (!options.service)
       console.log(`
@@ -6415,6 +6419,7 @@ ${c.dim}  Shutting down…${c.reset}`);
   };
   process.on("SIGTERM", shutdown);
   process.on("SIGINT", shutdown);
+  agent.connect();
 }
 function chooseBackgroundMode(flags) {
   if (anyFlag(flags, BACKGROUND_FLAGS))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kortix/agent-tunnel",
-  "version": "0.13.56",
+  "version": "0.13.57",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/kortix-ai/suna.git",

package/src/agent/cli.ts

@@ -149,8 +149,8 @@ function startAgent(config: TunnelConfig, options: { service?: boolean } = {}):
       reloadConfig: () => loadConfig({ apiUrl: config.apiUrl }),
     },
   );
-  agent.connect();
-
+  // Before connect(): connect() writes state.json, and a SIGTERM that lands
+  // before a handler exists kills the process with the state left `connecting`.
   const shutdown = () => {
     if (!options.service) console.log(`\n${c.dim}  Shutting down…${c.reset}`);
     agent?.disconnect();
@@ -158,6 +158,7 @@ function startAgent(config: TunnelConfig, options: { service?: boolean } = {}):
   };
   process.on('SIGTERM', shutdown);
   process.on('SIGINT', shutdown);
+  agent.connect();
 }
 
 // ── pairing ──────────────────────────────────────────────────────────────────

package/src/server/routes.ts

@@ -9,15 +9,15 @@ export function createTunnelRouter(
 ): Hono {
   const router = new Hono();
 
-  if (onAuthorizeHTTP) {
-    router.use('*', async (c, next) => {
-      const authorized = await onAuthorizeHTTP(c.req.raw);
-      if (!authorized) {
-        return c.json({ error: 'Unauthorized' }, 403);
-      }
-      await next();
-    });
-  }
+  // Fail closed: these routes list agents and relay RPC to them (shell, files,
+  // desktop). With no authorizer, nobody is authorized.
+  router.use('*', async (c, next) => {
+    const authorized = onAuthorizeHTTP ? await onAuthorizeHTTP(c.req.raw) : false;
+    if (!authorized) {
+      return c.json({ error: 'Unauthorized' }, 403);
+    }
+    await next();
+  });
 
   router.get('/connections', (c) => {
     const agents = relay.getConnectedAgents();

package/src/server/server.test.ts

@@ -31,3 +31,20 @@ describe('standalone tunnel WebSocket boundary', () => {
     expect(server.relay.getConnectedCount()).toBe(0);
   });
 });
+
+describe('standalone tunnel HTTP routes', () => {
+  // Pentest: with no onAuthorizeHTTP the routes listed agents and relayed RPC to anyone.
+  test('fail closed when no HTTP authorizer is configured', async () => {
+    server = startTunnelServer({ port: 0 });
+    const base = `http://127.0.0.1:${server.port}`;
+    expect((await fetch(`${base}/connections`)).status).toBe(403);
+    expect((await fetch(`${base}/rpc/00000000-0000-4000-8000-000000000001`, { method: 'POST', body: '{}' })).status).toBe(403);
+  });
+
+  test('serve a caller the authorizer accepts', async () => {
+    server = startTunnelServer({ port: 0, onAuthorizeHTTP: async (req) => req.headers.get('authorization') === 'Bearer ok' });
+    const base = `http://127.0.0.1:${server.port}`;
+    expect((await fetch(`${base}/connections`, { headers: { authorization: 'Bearer ok' } })).status).toBe(200);
+    expect((await fetch(`${base}/connections`)).status).toBe(403);
+  });
+});

package/src/shared/types.ts

@@ -200,7 +200,7 @@ export interface TunnelServerConfig {
   ) => Promise<boolean>;
   /**
    * Called before handling HTTP requests to relay routes (/connections, /rpc).
-   * Return false to deny. If not provided, routes are open.
+   * Return false to deny. If not provided, every request is denied (403).
    */
   onAuthorizeHTTP?: (req: Request) => Promise<boolean>;
 }