claude-ws 0.3.110 → 0.3.112-beta.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-ws",
-  "version": "0.3.110",
+  "version": "0.3.112-beta.1",
   "private": false,
   "description": "A beautifully crafted workspace interface for Claude Code with real-time streaming and local SQLite database",
   "keywords": [

package/packages/agentic-sdk/src/services/files/operations-path-security-and-compression-helpers.ts

@@ -3,7 +3,6 @@
  * Provides home-directory boundary enforcement and zip/tar/gz decompression utilities.
  */
 import path from 'path';
-import os from 'os';
 import { createReadStream, createWriteStream } from 'fs';
 import { createGunzip } from 'zlib';
 import { pipeline } from 'stream/promises';
@@ -14,14 +13,9 @@ import * as tar from 'tar';
 // Path security helpers
 // ---------------------------------------------------------------------------
 
-/** Resolve rootPath and assert it is within the user's home directory */
+/** Resolve rootPath and return the absolute path */
 export function validateRootPath(rootPath: string): string {
-  const resolved = path.resolve(rootPath);
-  const home = os.homedir();
-  if (!resolved.startsWith(home + path.sep) && resolved !== home) {
-    throw new Error('Root path outside home directory');
-  }
-  return resolved;
+  return path.resolve(rootPath);
 }
 
 /** Resolve targetPath and assert it does not escape allowedRoot */

package/src/app/api/filesystem/route.ts

@@ -14,16 +14,7 @@ export async function GET(request: NextRequest) {
       dirPath = dirPath.replace('~', os.homedir());
     }
 
-    // Security: validate path is within home directory
-    const resolved = path.resolve(dirPath);
-    const home = os.homedir();
-    if (!resolved.startsWith(home)) {
-      return NextResponse.json(
-        { error: 'Access denied: path outside home directory' },
-        { status: 403 }
-      );
-    }
-    dirPath = resolved;
+    dirPath = path.resolve(dirPath);
 
     // Ensure path exists and is a directory
     if (!fs.existsSync(dirPath)) {

package/src/lib/terminal-manager.ts

@@ -15,9 +15,22 @@ import { createLogger } from './logger';
 
 const log = createLogger('TerminalManager');
 
-// Lazy-load node-pty — native module that may not compile on all platforms (e.g. Windows)
-type NodePty = typeof import('@homebridge/node-pty-prebuilt-multiarch');
-type IPty = import('@homebridge/node-pty-prebuilt-multiarch').IPty;
+// Lazy-load node-pty — native module that may not compile on all platforms (e.g. Windows ARM64).
+// Types are defined inline to avoid TypeScript errors when the package is not installed.
+interface IPty {
+  pid: number;
+  cols: number;
+  rows: number;
+  process: string;
+  onData: (callback: (data: string) => void) => void;
+  onExit: (callback: (e: { exitCode: number; signal?: number }) => void) => void;
+  write: (data: string) => void;
+  resize: (cols: number, rows: number) => void;
+  kill: (signal?: string) => void;
+}
+interface NodePty {
+  spawn: (file: string, args: string[], options: Record<string, unknown>) => IPty;
+}
 let pty: NodePty | null = null;
 try {
   pty = require('@homebridge/node-pty-prebuilt-multiarch');