@phnx-labs/agents-cli 1.22.74 → 1.22.76

package/dist/lib/computer/computer-rpc.js

@@ -17,6 +17,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import { fileURLToPath } from 'url';
 import { getHelpersDir, getLogsDir, getUserPermissionsDir, getPermissionsDir } from '../state.js';
+import { RfbClient, parseVncEndpoint } from './rfb-client.js';
 // Resolve the socket path used by the launchd-managed daemon. Internal
 // scratch — lives under getHelpersDir() (~/.agents/.cache/helpers/),
 // matching browser.sock.
@@ -209,11 +210,28 @@ export function resolveTcpEndpoint() {
     const token = process.env.COMPUTER_HELPER_TOKEN;
     return { host: hostPart || '127.0.0.1', port, token: token && token.length > 0 ? token : null };
 }
+// Resolve the VNC/RFB endpoint for driving a remote GUI desktop over the RFB
+// protocol (an x11vnc/Xvnc server — e.g. a headless Linux desktop or an LXD
+// container exposing x11vnc on the host's Tailscale IP). COMPUTER_HELPER_VNC is
+// "host:port" (port defaults to 5901); COMPUTER_HELPER_VNC_PASSWORD is the VNC
+// password. Unlike the native helpers this transport carries a framebuffer, not
+// an accessibility tree, so it is coordinate-based (see rfb-client.ts).
+export function resolveVncEndpoint() {
+    const parsed = parseVncEndpoint(process.env.COMPUTER_HELPER_VNC);
+    if (!parsed)
+        return null;
+    return { ...parsed, password: process.env.COMPUTER_HELPER_VNC_PASSWORD ?? '' };
+}
 // Pick the best transport. Precedence:
-//   1. COMPUTER_HELPER_TCP -> the Windows daemon over a (tunneled) TCP port.
-//   2. the macOS launchd socket if it exists.
-//   3. spawning the helper as a subprocess (legacy/dev fallback).
+//   1. COMPUTER_HELPER_VNC  -> an RFB/VNC desktop (Linux GUI over the wire).
+//   2. COMPUTER_HELPER_TCP  -> the Windows daemon over a (tunneled) TCP port.
+//   3. the macOS launchd socket if it exists.
+//   4. spawning the helper as a subprocess (legacy/dev fallback).
 export function openComputerClient() {
+    const vnc = resolveVncEndpoint();
+    if (vnc) {
+        return new RfbClient(vnc.host, vnc.port, vnc.password);
+    }
     const tcp = resolveTcpEndpoint();
     if (tcp) {
         return new TcpClient(tcp.host, tcp.port, tcp.token);
@@ -415,6 +433,8 @@ class StdioClient extends BaseClient {
 // .app) must not be told "no transport". `path` is null: the endpoint is an
 // env-configured host:port, not an on-disk path.
 export function describeTransport() {
+    if (resolveVncEndpoint())
+        return { kind: 'vnc', path: null };
     if (resolveTcpEndpoint())
         return { kind: 'tcp', path: null };
     const sockPath = resolveSocketPath();

package/dist/lib/computer/des.d.ts

@@ -0,0 +1 @@
+export declare function desEncryptBlock(key8: Buffer, block8: Buffer): Buffer;

package/dist/lib/computer/des.js

@@ -0,0 +1,114 @@
+// Minimal, dependency-free single-block DES (ECB) — used only for VNC
+// authentication's challenge/response. Node 24 ships OpenSSL 3, whose DES lives
+// in the legacy provider that is off by default, so `createCipheriv('des-ecb')`
+// throws `digital envelope routines::unsupported`. VNC clients have always
+// bundled their own DES for exactly this reason. This is a textbook FIPS-46 DES
+// implementation over bit arrays — verified against the standard test vector in
+// des.test.ts. It encrypts one 8-byte block; VNC auth encrypts the two halves
+// of the 16-byte challenge independently (see rfb-client.ts).
+const IP = [
+    58, 50, 42, 34, 26, 18, 10, 2, 60, 52, 44, 36, 28, 20, 12, 4,
+    62, 54, 46, 38, 30, 22, 14, 6, 64, 56, 48, 40, 32, 24, 16, 8,
+    57, 49, 41, 33, 25, 17, 9, 1, 59, 51, 43, 35, 27, 19, 11, 3,
+    61, 53, 45, 37, 29, 21, 13, 5, 63, 55, 47, 39, 31, 23, 15, 7,
+];
+const FP = [
+    40, 8, 48, 16, 56, 24, 64, 32, 39, 7, 47, 15, 55, 23, 63, 31,
+    38, 6, 46, 14, 54, 22, 62, 30, 37, 5, 45, 13, 53, 21, 61, 29,
+    36, 4, 44, 12, 52, 20, 60, 28, 35, 3, 43, 11, 51, 19, 59, 27,
+    34, 2, 42, 10, 50, 18, 58, 26, 33, 1, 41, 9, 49, 17, 57, 25,
+];
+const E = [
+    32, 1, 2, 3, 4, 5, 4, 5, 6, 7, 8, 9, 8, 9, 10, 11, 12, 13, 12, 13, 14, 15, 16, 17,
+    16, 17, 18, 19, 20, 21, 20, 21, 22, 23, 24, 25, 24, 25, 26, 27, 28, 29, 28, 29, 30, 31, 32, 1,
+];
+const P = [
+    16, 7, 20, 21, 29, 12, 28, 17, 1, 15, 23, 26, 5, 18, 31, 10,
+    2, 8, 24, 14, 32, 27, 3, 9, 19, 13, 30, 6, 22, 11, 4, 25,
+];
+const PC1 = [
+    57, 49, 41, 33, 25, 17, 9, 1, 58, 50, 42, 34, 26, 18, 10, 2, 59, 51, 43, 35, 27, 19, 11, 3, 60, 52, 44, 36,
+    63, 55, 47, 39, 31, 23, 15, 7, 62, 54, 46, 38, 30, 22, 14, 6, 61, 53, 45, 37, 29, 21, 13, 5, 28, 20, 12, 4,
+];
+const PC2 = [
+    14, 17, 11, 24, 1, 5, 3, 28, 15, 6, 21, 10, 23, 19, 12, 4, 26, 8, 16, 7, 27, 20, 13, 2,
+    41, 52, 31, 37, 47, 55, 30, 40, 51, 45, 33, 48, 44, 49, 39, 56, 34, 53, 46, 42, 50, 36, 29, 32,
+];
+const SHIFTS = [1, 1, 2, 2, 2, 2, 2, 2, 1, 2, 2, 2, 2, 2, 2, 1];
+const SBOX = [
+    [14, 4, 13, 1, 2, 15, 11, 8, 3, 10, 6, 12, 5, 9, 0, 7, 0, 15, 7, 4, 14, 2, 13, 1, 10, 6, 12, 11, 9, 5, 3, 8, 4, 1, 14, 8, 13, 6, 2, 11, 15, 12, 9, 7, 3, 10, 5, 0, 15, 12, 8, 2, 4, 9, 1, 7, 5, 11, 3, 14, 10, 0, 6, 13],
+    [15, 1, 8, 14, 6, 11, 3, 4, 9, 7, 2, 13, 12, 0, 5, 10, 3, 13, 4, 7, 15, 2, 8, 14, 12, 0, 1, 10, 6, 9, 11, 5, 0, 14, 7, 11, 10, 4, 13, 1, 5, 8, 12, 6, 9, 3, 2, 15, 13, 8, 10, 1, 3, 15, 4, 2, 11, 6, 7, 12, 0, 5, 14, 9],
+    [10, 0, 9, 14, 6, 3, 15, 5, 1, 13, 12, 7, 11, 4, 2, 8, 13, 7, 0, 9, 3, 4, 6, 10, 2, 8, 5, 14, 12, 11, 15, 1, 13, 6, 4, 9, 8, 15, 3, 0, 11, 1, 2, 12, 5, 10, 14, 7, 1, 10, 13, 0, 6, 9, 8, 7, 4, 15, 14, 3, 11, 5, 2, 12],
+    [7, 13, 14, 3, 0, 6, 9, 10, 1, 2, 8, 5, 11, 12, 4, 15, 13, 8, 11, 5, 6, 15, 0, 3, 4, 7, 2, 12, 1, 10, 14, 9, 10, 6, 9, 0, 12, 11, 7, 13, 15, 1, 3, 14, 5, 2, 8, 4, 3, 15, 0, 6, 10, 1, 13, 8, 9, 4, 5, 11, 12, 7, 2, 14],
+    [2, 12, 4, 1, 7, 10, 11, 6, 8, 5, 3, 15, 13, 0, 14, 9, 14, 11, 2, 12, 4, 7, 13, 1, 5, 0, 15, 10, 3, 9, 8, 6, 4, 2, 1, 11, 10, 13, 7, 8, 15, 9, 12, 5, 6, 3, 0, 14, 11, 8, 12, 7, 1, 14, 2, 13, 6, 15, 0, 9, 10, 4, 5, 3],
+    [12, 1, 10, 15, 9, 2, 6, 8, 0, 13, 3, 4, 14, 7, 5, 11, 10, 15, 4, 2, 7, 12, 9, 5, 6, 1, 13, 14, 0, 11, 3, 8, 9, 14, 15, 5, 2, 8, 12, 3, 7, 0, 4, 10, 1, 13, 11, 6, 4, 3, 2, 12, 9, 5, 15, 10, 11, 14, 1, 7, 6, 0, 8, 13],
+    [4, 11, 2, 14, 15, 0, 8, 13, 3, 12, 9, 7, 5, 10, 6, 1, 13, 0, 11, 7, 4, 9, 1, 10, 14, 3, 5, 12, 2, 15, 8, 6, 1, 4, 11, 13, 12, 3, 7, 14, 10, 15, 6, 8, 0, 5, 9, 2, 6, 11, 13, 8, 1, 4, 10, 7, 9, 5, 0, 15, 14, 2, 3, 12],
+    [13, 2, 8, 4, 6, 15, 11, 1, 10, 9, 3, 14, 5, 0, 12, 7, 1, 15, 13, 8, 10, 3, 7, 4, 12, 5, 6, 11, 0, 14, 9, 2, 7, 11, 4, 1, 9, 12, 14, 2, 0, 6, 10, 13, 15, 3, 5, 8, 2, 1, 14, 7, 4, 10, 8, 13, 15, 12, 9, 0, 3, 5, 6, 11],
+];
+function bytesToBits(buf) {
+    const bits = [];
+    for (let i = 0; i < buf.length; i++) {
+        for (let b = 7; b >= 0; b--)
+            bits.push((buf[i] >> b) & 1);
+    }
+    return bits;
+}
+function bitsToBytes(bits) {
+    const out = Buffer.alloc(bits.length / 8);
+    for (let i = 0; i < out.length; i++) {
+        let byte = 0;
+        for (let b = 0; b < 8; b++)
+            byte = (byte << 1) | bits[i * 8 + b];
+        out[i] = byte;
+    }
+    return out;
+}
+function permute(bits, table) {
+    return table.map((pos) => bits[pos - 1]);
+}
+function keySchedule(key8) {
+    const keyBits = bytesToBits(key8);
+    const pc1 = permute(keyBits, PC1);
+    let c = pc1.slice(0, 28);
+    let d = pc1.slice(28, 56);
+    const subkeys = [];
+    for (let round = 0; round < 16; round++) {
+        const s = SHIFTS[round];
+        c = c.slice(s).concat(c.slice(0, s));
+        d = d.slice(s).concat(d.slice(0, s));
+        subkeys.push(permute(c.concat(d), PC2));
+    }
+    return subkeys;
+}
+function feistel(r, subkey) {
+    const expanded = permute(r, E);
+    const xored = expanded.map((bit, i) => bit ^ subkey[i]);
+    const out = [];
+    for (let box = 0; box < 8; box++) {
+        const chunk = xored.slice(box * 6, box * 6 + 6);
+        const row = (chunk[0] << 1) | chunk[5];
+        const col = (chunk[1] << 3) | (chunk[2] << 2) | (chunk[3] << 1) | chunk[4];
+        const val = SBOX[box][row * 16 + col];
+        for (let b = 3; b >= 0; b--)
+            out.push((val >> b) & 1);
+    }
+    return permute(out, P);
+}
+// Encrypt one 8-byte block with DES-ECB under an 8-byte key.
+export function desEncryptBlock(key8, block8) {
+    if (key8.length !== 8)
+        throw new Error(`des key must be 8 bytes, got ${key8.length}`);
+    if (block8.length !== 8)
+        throw new Error(`des block must be 8 bytes, got ${block8.length}`);
+    const subkeys = keySchedule(key8);
+    const bits = permute(bytesToBits(block8), IP);
+    let l = bits.slice(0, 32);
+    let r = bits.slice(32, 64);
+    for (let round = 0; round < 16; round++) {
+        const f = feistel(r, subkeys[round]);
+        const next = l.map((bit, i) => bit ^ f[i]);
+        l = r;
+        r = next;
+    }
+    return bitsToBytes(permute(r.concat(l), FP));
+}

package/dist/lib/computer/rfb-client.d.ts

@@ -0,0 +1,53 @@
+import type { ComputerClient, RPCResponse } from './computer-rpc.js';
+export declare function mirrorByte(b: number): number;
+export declare function vncAuthResponse(challenge: Buffer, password: string): Buffer;
+export declare function buildPixelFormat(): Buffer;
+export declare function encodeSetPixelFormat(pf: Buffer): Buffer;
+export declare function encodeSetEncodings(encodings: number[]): Buffer;
+export declare function encodeFbUpdateRequest(incremental: boolean, x: number, y: number, w: number, h: number): Buffer;
+export declare function encodePointerEvent(buttonMask: number, x: number, y: number): Buffer;
+export declare function encodeKeyEvent(down: boolean, keysym: number): Buffer;
+export declare function keysymForChar(ch: string): number;
+export declare function keysymForKeyName(name: string): number | null;
+export declare function parseKeyCombo(combo: string): {
+    modifiers: number[];
+    key: number;
+};
+export declare function encodePng(rgb: Buffer, width: number, height: number): Buffer;
+export interface ServerInit {
+    width: number;
+    height: number;
+    name: string;
+}
+export declare function scrollButtonsFor(dx: number, dy: number): {
+    vButton: number;
+    hButton: number;
+};
+export declare const MAX_RFB_STRING_LEN: number;
+export declare function parseVncEndpoint(raw: string | undefined): {
+    host: string;
+    port: number;
+} | null;
+export declare class RfbClient implements ComputerClient {
+    private host;
+    private port;
+    private password;
+    private sock;
+    private reader;
+    private ready;
+    private info;
+    private closed;
+    constructor(host: string, port: number, password: string);
+    private write;
+    private readLenString;
+    private handshake;
+    private teardown;
+    private withTimeout;
+    private captureScreen;
+    private sendClick;
+    private sendScroll;
+    private typeText;
+    private pressCombo;
+    call(method: string, params?: Record<string, unknown>): Promise<RPCResponse>;
+    close(): Promise<void>;
+}