goose remote access

crates/goose-server/Cargo.toml

@@ -39,7 +39,12 @@ reqwest = { version = "0.12.9", features = ["json", "rustls-tls", "blocking", "m
 tokio-util = "0.7.15"
 uuid = { version = "1.11", features = ["v4"] }
 serde_path_to_error = "0.1.20"
-winreg = { version = "0.55.0", optional = true }
+tokio-tungstenite = { version = "0.28.0", features = ["native-tls"] }
+url = "2.5.7"
+rand = "0.9.2"
+hex = "0.4.3"
+socket2 = "0.6.1"
+sha2 = "0.10.9"
 
 [target.'cfg(windows)'.dependencies]
 winreg = { version = "0.55.0" }

crates/goose-server/src/commands/agent.rs

@@ -49,7 +49,7 @@ pub async fn run() -> Result<()> {
         .allow_methods(Any)
         .allow_headers(Any);
 
-    let app = crate::routes::configure(app_state, secret_key.clone())
+    let app = crate::routes::configure(app_state.clone(), secret_key.clone())
         .layer(middleware::from_fn_with_state(
             secret_key.clone(),
             check_token,
@@ -59,6 +59,11 @@ pub async fn run() -> Result<()> {
     let listener = tokio::net::TcpListener::bind(settings.socket_addr()).await?;
     info!("listening on {}", listener.local_addr()?);
 
+    let tunnel_manager = app_state.tunnel_manager.clone();
+    tokio::spawn(async move {
+        tunnel_manager.check_auto_start().await;
+    });
+
     axum::serve(listener, app)
         .with_graceful_shutdown(shutdown_signal())
         .await?;

crates/goose-server/src/lib.rs

@@ -1,7 +1,10 @@
 pub mod auth;
+pub mod configuration;
+pub mod error;
 pub mod openapi;
 pub mod routes;
 pub mod state;
+pub mod tunnel;
 
 // Re-export commonly used items
 pub use openapi::*;

crates/goose-server/src/main.rs

@@ -5,6 +5,7 @@ mod logging;
 mod openapi;
 mod routes;
 mod state;
+mod tunnel;
 
 use clap::{Parser, Subcommand};
 use goose::config::paths::Paths;

crates/goose-server/src/openapi.rs

@@ -391,6 +391,9 @@ derive_utoipa!(Icon as IconSchema);
         super::routes::recipe::parse_recipe,
         super::routes::setup::start_openrouter_setup,
         super::routes::setup::start_tetrate_setup,
+        super::routes::tunnel::start_tunnel,
+        super::routes::tunnel::stop_tunnel,
+        super::routes::tunnel::get_tunnel_status,
     ),
     components(schemas(
         super::routes::config_management::UpsertConfigQuery,
@@ -513,6 +516,8 @@ derive_utoipa!(Icon as IconSchema);
         super::routes::agent::AddExtensionRequest,
         super::routes::agent::RemoveExtensionRequest,
         super::routes::setup::SetupResponse,
+        super::tunnel::TunnelInfo,
+        super::tunnel::TunnelState,
     ))
 )]
 pub struct ApiDoc;

crates/goose-server/src/routes/mod.rs

@@ -10,6 +10,7 @@ pub mod schedule;
 pub mod session;
 pub mod setup;
 pub mod status;
+pub mod tunnel;
 pub mod utils;
 
 use std::sync::Arc;
@@ -28,5 +29,6 @@ pub fn configure(state: Arc<crate::state::AppState>, secret_key: String) -> Rout
         .merge(session::routes(state.clone()))
         .merge(schedule::routes(state.clone()))
         .merge(setup::routes(state.clone()))
+        .merge(tunnel::routes(state.clone()))
         .merge(mcp_ui_proxy::routes(secret_key))
 }