agent-office-cli 0.1.3 → 0.1.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-office-cli",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Run and manage AI agent sessions locally, with optional relay to agentoffice.top",
   "license": "MIT",
   "engines": {

package/src/tunnel.js

@@ -3,6 +3,42 @@ const { toSessionSummary } = require("./core");
 
 const RECONNECT_BASE_MS = 1000;
 const RECONNECT_MAX_MS = 30000;
+const LOCAL_PROXY_STRIP_HEADERS = new Set([
+  "accept-encoding",
+  "connection",
+  "content-length",
+  "cookie",
+  "origin",
+  "referer",
+  "te",
+  "trailer",
+  "transfer-encoding",
+  "upgrade"
+]);
+
+function shouldStripLocalProxyHeader(name) {
+  return (
+    LOCAL_PROXY_STRIP_HEADERS.has(name) ||
+    name.startsWith("proxy-") ||
+    name.startsWith("sec-") ||
+    name.startsWith("x-forwarded-")
+  );
+}
+
+function buildLocalRequestHeaders(headers, localServerUrl) {
+  const nextHeaders = {};
+
+  for (const [name, rawValue] of Object.entries(headers || {})) {
+    const key = String(name).toLowerCase();
+    if (shouldStripLocalProxyHeader(key) || rawValue == null) {
+      continue;
+    }
+    nextHeaders[key] = Array.isArray(rawValue) ? rawValue.join(", ") : String(rawValue);
+  }
+
+  nextHeaders.host = new URL(localServerUrl).host;
+  return nextHeaders;
+}
 
 function createTunnelClient({ key, relayUrl, localServerUrl }) {
   let ws = null;
@@ -116,7 +152,7 @@ function createTunnelClient({ key, relayUrl, localServerUrl }) {
       const fetchUrl = `${localServerUrl}${msg.path}`;
       const fetchOptions = {
         method: msg.method || "GET",
-        headers: { ...msg.headers, host: new URL(localServerUrl).host }
+        headers: buildLocalRequestHeaders(msg.headers, localServerUrl)
       };
       if (msg.body && msg.method !== "GET" && msg.method !== "HEAD") {
         fetchOptions.body = msg.body;
@@ -220,5 +256,6 @@ function createTunnelClient({ key, relayUrl, localServerUrl }) {
 }
 
 module.exports = {
+  buildLocalRequestHeaders,
   createTunnelClient
 };

package/src/tunnel.test.js

@@ -0,0 +1,31 @@
+const test = require("node:test");
+const assert = require("node:assert/strict");
+
+const { buildLocalRequestHeaders } = require("./tunnel");
+
+test("buildLocalRequestHeaders strips browser-only proxy headers and rewrites host", () => {
+  const next = buildLocalRequestHeaders(
+    {
+      authorization: "Bearer token",
+      accept: "*/*",
+      "content-type": "application/json",
+      host: "agentoffice.top",
+      connection: "keep-alive",
+      "accept-encoding": "gzip, deflate, br, zstd",
+      "content-length": "123",
+      origin: "https://agentoffice.top",
+      referer: "https://agentoffice.top/office",
+      "sec-ch-ua": "\"Chromium\";v=\"146\"",
+      "sec-fetch-mode": "cors",
+      "x-forwarded-for": "203.0.113.10"
+    },
+    "http://127.0.0.1:8765"
+  );
+
+  assert.deepEqual(next, {
+    authorization: "Bearer token",
+    accept: "*/*",
+    "content-type": "application/json",
+    host: "127.0.0.1:8765"
+  });
+});