agent-first-http 0.9.0

Give your AI agent its own private browser — so it reads the real page, past logins and bot walls, without ever touching yours.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100

//! `afhttp panel` subcommand. Prints a short-lived takeover URL for an endpoint.

use clap::Args as ClapArgs;
use serde::Serialize;

use crate::cli::output;
use crate::sdk::Client;
use crate::shared::error::Error;

#[derive(ClapArgs, Debug)]
pub struct Args {
    /// CDP endpoint of the running host (e.g. ws://127.0.0.1:9222). Falls back
    /// to `AFHTTP_ENDPOINT_URL`.
    #[arg(long = "endpoint-url", env = "AFHTTP_ENDPOINT_URL")]
    pub endpoint: String,
    /// Bearer token, if the host requires one. Falls back to
    /// `AFHTTP_TOKEN_SECRET`.
    #[arg(long = "token-secret", env = "AFHTTP_TOKEN_SECRET")]
    pub token: Option<String>,
}

#[derive(Serialize)]
struct PanelResult {
    takeover_url_secret: String,
    takeover_url_expires_at_rfc3339: String,
    takeover_url_ttl_s: u64,
    takeover_url_scope: String,
    provider: Option<String>,
    #[serde(skip_serializing_if = "Vec::is_empty")]
    warnings: Vec<String>,
}

pub async fn run(args: Args) -> Result<(), Error> {
    let result = build_result(&args.endpoint, args.token.as_deref()).await?;
    output::emit_revealing_takeover("panel", &result)
}

async fn build_result(endpoint: &str, token: Option<&str>) -> Result<PanelResult, Error> {
    let mut client = Client::connect(endpoint)?;
    if let Some(token) = token {
        client = client.with_token(token);
    }
    let handoff = client.takeover_handoff(None, None).await?;
    let mut warnings = Vec::new();
    let mut provider = None;
    match client.capabilities().await {
        Ok(caps) => {
            if caps.takeover.supported {
                provider = caps.takeover.provider;
            } else {
                warnings.push(
                    "this host has no takeover panel; build a takeover-ready host with `afhttp container install` and reconnect. This is not a captcha bypass.".into(),
                );
            }
        }
        Err(e) => {
            warnings.push(format!(
                "could not read host capabilities; returning the takeover_url_secret anyway: {}",
                e.detail
            ));
        }
    }
    Ok(PanelResult {
        takeover_url_secret: handoff.takeover_url_secret,
        takeover_url_expires_at_rfc3339: handoff.takeover_url_expires_at_rfc3339,
        takeover_url_ttl_s: handoff.takeover_url_ttl_s,
        takeover_url_scope: handoff.takeover_url_scope,
        provider,
        warnings,
    })
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn panel_result_exposes_takeover_url_secret_only() {
        let value = serde_json::to_value(PanelResult {
            takeover_url_secret: "http://localhost:9222/takeover/panel?handoff_secret=h".into(),
            takeover_url_expires_at_rfc3339: "2026-06-11T00:00:00Z".into(),
            takeover_url_ttl_s: 900,
            takeover_url_scope: "takeover".into(),
            provider: Some("kasmvnc".into()),
            warnings: Vec::new(),
        })
        .unwrap();
        assert!(value.get("url").is_none());
        assert!(value.get("display_url").is_none());
        assert!(value.get("panel_url").is_none());
        assert!(value.get("token_secret").is_none());
        assert!(
            value["takeover_url_secret"]
                .as_str()
                .unwrap()
                .contains("handoff_secret=")
        );
        assert!(value.get("provider").is_some());
    }
}