claude-relay 2.2.3 → 2.3.0

package/lib/sdk-bridge.js

@@ -43,10 +43,12 @@ function createMessageQueue() {
 
 function createSDKBridge(opts) {
   var cwd = opts.cwd;
+  var slug = opts.slug || "";
   var sm = opts.sessionManager;   // session manager instance
   var send = opts.send;           // broadcast to all clients
   var pushModule = opts.pushModule;
   var getSDK = opts.getSDK;
+  var dangerouslySkipPermissions = opts.dangerouslySkipPermissions || false;
 
   function sendAndRecord(session, obj) {
     sm.sendAndRecord(session, obj);
@@ -139,6 +141,7 @@ function createSDKBridge(opts) {
             var q = input.questions[0];
             pushModule.sendPush({
               type: "ask_user",
+              slug: slug,
               title: "Claude has a question",
               body: q ? q.question : "Waiting for your response",
               tag: "claude-ask",
@@ -219,6 +222,7 @@ function createSDKBridge(opts) {
         cost: parsed.total_cost_usd,
         duration: parsed.duration_ms,
         usage: parsed.usage || null,
+        modelUsage: parsed.modelUsage || null,
         sessionId: parsed.session_id,
       });
       sendAndRecord(session, { type: "done", code: 0 });
@@ -227,6 +231,7 @@ function createSDKBridge(opts) {
         if (preview.length > 140) preview = preview.substring(0, 140) + "...";
         pushModule.sendPush({
           type: "done",
+          slug: slug,
           title: session.title || "Claude",
           body: preview || "Response ready",
           tag: "claude-done",
@@ -298,6 +303,7 @@ function createSDKBridge(opts) {
       if (pushModule) {
         pushModule.sendPush({
           type: "permission_request",
+          slug: slug,
           requestId: requestId,
           title: permissionPushTitle(toolName, input),
           body: permissionPushBody(toolName, input),
@@ -331,6 +337,7 @@ function createSDKBridge(opts) {
           if (pushModule) {
             pushModule.sendPush({
               type: "error",
+              slug: slug,
               title: "Connection Lost",
               body: "Claude process disconnected: " + (err.message || "unknown error"),
               tag: "claude-error",
@@ -343,6 +350,8 @@ function createSDKBridge(opts) {
       session.queryInstance = null;
       session.messageQueue = null;
       session.abortController = null;
+      session.pendingPermissions = {};
+      session.pendingAskUser = {};
     }
   }
 
@@ -385,7 +394,10 @@ function createSDKBridge(opts) {
     try {
       sdk = await getSDK();
     } catch (e) {
+      session.isProcessing = false;
       send({ type: "error", text: "Failed to load Claude SDK: " + (e.message || e) });
+      sendAndRecord(session, { type: "done", code: 1 });
+      sm.broadcastSessionList();
       return;
     }
 
@@ -428,6 +440,11 @@ function createSDKBridge(opts) {
       },
     };
 
+    if (dangerouslySkipPermissions) {
+      queryOptions.permissionMode = "bypassPermissions";
+      queryOptions.allowDangerouslySkipPermissions = true;
+    }
+
     if (session.cliSessionId) {
       queryOptions.resume = session.cliSessionId;
       if (session.lastRewindUuid) {
@@ -436,10 +453,21 @@ function createSDKBridge(opts) {
       }
     }
 
-    session.queryInstance = sdk.query({
-      prompt: session.messageQueue,
-      options: queryOptions,
-    });
+    try {
+      session.queryInstance = sdk.query({
+        prompt: session.messageQueue,
+        options: queryOptions,
+      });
+    } catch (e) {
+      session.isProcessing = false;
+      session.queryInstance = null;
+      session.messageQueue = null;
+      session.abortController = null;
+      send({ type: "error", text: "Failed to start query: " + (e.message || e) });
+      sendAndRecord(session, { type: "done", code: 1 });
+      sm.broadcastSessionList();
+      return;
+    }
 
     processQueryStream(session).catch(function(err) {
     });
@@ -466,7 +494,7 @@ function createSDKBridge(opts) {
 
   function permissionPushTitle(toolName, input) {
     if (!input) return "Claude wants to use " + toolName;
-    var file = input.file_path ? input.file_path.split("/").pop() : "";
+    var file = input.file_path ? input.file_path.split(/[/\\]/).pop() : "";
     switch (toolName) {
       case "Bash": return "Claude wants to run a command";
       case "Edit": return "Claude wants to edit " + (file || "a file");
@@ -487,7 +515,7 @@ function createSDKBridge(opts) {
     if (toolName === "Bash" && input.command) {
       text = input.command;
     } else if (toolName === "Edit" && input.file_path) {
-      text = input.file_path.split("/").pop() + ": " + (input.old_string || "").substring(0, 40) + " \u2192 " + (input.new_string || "").substring(0, 40);
+      text = input.file_path.split(/[/\\]/).pop() + ": " + (input.old_string || "").substring(0, 40) + " \u2192 " + (input.new_string || "").substring(0, 40);
     } else if (toolName === "Write" && input.file_path) {
       text = input.file_path;
     } else if (input.file_path) {
@@ -515,9 +543,14 @@ function createSDKBridge(opts) {
       var mq = createMessageQueue();
       mq.push({ type: "user", message: { role: "user", content: [{ type: "text", text: "hi" }] } });
       mq.end();
+      var warmupOptions = { cwd: cwd, settingSources: ["user", "project", "local"], abortController: ac };
+      if (dangerouslySkipPermissions) {
+        warmupOptions.permissionMode = "bypassPermissions";
+        warmupOptions.allowDangerouslySkipPermissions = true;
+      }
       var stream = sdk.query({
         prompt: mq,
-        options: { cwd: cwd, settingSources: ["user", "project", "local"], abortController: ac },
+        options: warmupOptions,
       });
       for await (var msg of stream) {
         if (msg.type === "system" && msg.subtype === "init") {

package/lib/server.js

@@ -114,7 +114,7 @@ function stripPrefix(urlPath, slug) {
 
 /**
  * Create a multi-project server.
- * opts: { tlsOptions, caPath, pinHash, port, debug }
+ * opts: { tlsOptions, caPath, pinHash, port, debug, dangerouslySkipPermissions }
  */
 function createServer(opts) {
   var tlsOptions = opts.tlsOptions || null;
@@ -122,6 +122,8 @@ function createServer(opts) {
   var pinHash = opts.pinHash || null;
   var portNum = opts.port || 2633;
   var debug = opts.debug || false;
+  var dangerouslySkipPermissions = opts.dangerouslySkipPermissions || false;
+  var lanHost = opts.lanHost || null;
 
   var authToken = pinHash || null;
   var realVersion = require("../package.json").version;
@@ -228,8 +230,9 @@ function createServer(opts) {
       req.on("data", function (chunk) { body += chunk; });
       req.on("end", function () {
         try {
-          var sub = JSON.parse(body);
-          pushModule.addSubscription(sub);
+          var parsed = JSON.parse(body);
+          var sub = parsed.subscription || parsed;
+          pushModule.addSubscription(sub, parsed.replaceEndpoint);
           res.writeHead(200, { "Content-Type": "application/json" });
           res.end('{"ok":true}');
         } catch (e) {
@@ -402,7 +405,19 @@ function createServer(opts) {
     if (origin) {
       try {
         var originUrl = new URL(origin);
-        if (String(originUrl.port || (originUrl.protocol === "https:" ? "443" : "80")) !== String(portNum)) {
+        var originPort = String(originUrl.port || (originUrl.protocol === "https:" ? "443" : "80"));
+        // Extract port from Host header for reverse proxy support.
+        // Use URL parser to correctly handle IPv6 addresses (e.g. [::1])
+        // and infer default port from origin protocol (not backend tlsOptions)
+        // so TLS-terminating proxies on :443 with HTTP backends work.
+        var hostPort;
+        try {
+          var hostUrl = new URL(originUrl.protocol + "//" + (req.headers.host || ""));
+          hostPort = String(hostUrl.port || (originUrl.protocol === "https:" ? "443" : "80"));
+        } catch (e2) {
+          hostPort = String(portNum);
+        }
+        if (originPort !== String(portNum) && originPort !== hostPort) {
           socket.write("HTTP/1.1 403 Forbidden\r\n\r\n");
           socket.destroy();
           return;
@@ -447,7 +462,9 @@ function createServer(opts) {
       title: title || null,
       pushModule: pushModule,
       debug: debug,
+      dangerouslySkipPermissions: dangerouslySkipPermissions,
       currentVersion: currentVersion,
+      lanHost: lanHost,
       getProjectCount: function () { return projects.size; },
       getProjectList: function () {
         var list = [];
@@ -487,6 +504,20 @@ function createServer(opts) {
     authToken = hash;
   }
 
+  function broadcastAll(msg) {
+    projects.forEach(function (ctx) {
+      ctx.send(msg);
+    });
+  }
+
+  function destroyAll() {
+    projects.forEach(function (ctx, slug) {
+      console.log("[server] Destroying project:", slug);
+      ctx.destroy();
+    });
+    projects.clear();
+  }
+
   return {
     server: server,
     onboardingServer: onboardingServer,
@@ -496,6 +527,8 @@ function createServer(opts) {
     getProjects: getProjects,
     setProjectTitle: setProjectTitle,
     setAuthToken: setAuthToken,
+    broadcastAll: broadcastAll,
+    destroyAll: destroyAll,
   };
 }
 

package/lib/sessions.js

@@ -25,13 +25,15 @@ function createSessionManager(opts) {
     if (!session.cliSessionId) return;
     session.lastActivity = Date.now();
     try {
-      var meta = JSON.stringify({
+      var metaObj = {
         type: "meta",
         localId: session.localId,
         cliSessionId: session.cliSessionId,
         title: session.title,
         createdAt: session.createdAt,
-      });
+      };
+      if (session.lastRewindUuid) metaObj.lastRewindUuid = session.lastRewindUuid;
+      var meta = JSON.stringify(metaObj);
       var lines = [meta];
       for (var i = 0; i < session.history.length; i++) {
         lines.push(JSON.stringify(session.history[i]));
@@ -105,6 +107,7 @@ function createSessionManager(opts) {
         lastActivity: loaded[i].mtime || m.createdAt || Date.now(),
         history: loaded[i].history,
         messageUUIDs: messageUUIDs,
+        lastRewindUuid: m.lastRewindUuid || null,
       };
       sessions.set(localId, session);
     }
@@ -278,9 +281,15 @@ function createSessionManager(opts) {
   if (sessions.size === 0) {
     createSession();
   } else {
-    // Activate the most recent session
-    var lastSession = [...sessions.values()].pop();
-    activeSessionId = lastSession.localId;
+    // Activate the most recently used session
+    var allSessions = [...sessions.values()];
+    var mostRecent = allSessions[0];
+    for (var i = 1; i < allSessions.length; i++) {
+      if ((allSessions[i].lastActivity || 0) > (mostRecent.lastActivity || 0)) {
+        mostRecent = allSessions[i];
+      }
+    }
+    activeSessionId = mostRecent.localId;
   }
 
   function searchSessions(query) {

package/lib/terminal.js

@@ -8,7 +8,8 @@ try {
 function createTerminal(cwd, cols, rows) {
   if (!pty) return null;
 
-  var shell = process.env.SHELL || "/bin/bash";
+  var shell = process.env.SHELL
+    || (process.platform === "win32" ? process.env.COMSPEC || "cmd.exe" : "/bin/bash");
   var term = pty.spawn(shell, [], {
     name: "xterm-256color",
     cols: cols || 80,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-relay",
-  "version": "2.2.3",
+  "version": "2.3.0",
   "description": "Web UI for Claude Code. Any device. Push notifications.",
   "bin": {
     "claude-relay": "./bin/cli.js"