happy-coder 0.11.2-0 → 0.12.0-0

package/dist/{types-CVOFMcT8.mjs → types-DdwJ6K-A.mjs}

@@ -21,7 +21,7 @@ import { platform } from 'os';
 import { Expo } from 'expo-server-sdk';
 
 var name = "happy-coder";
-var version = "0.11.2-0";
+var version = "0.12.0-0";
 var description = "Mobile and Web client for Claude Code and Codex";
 var author = "Kirill Dubovitskiy";
 var license = "MIT";
@@ -80,7 +80,9 @@ var scripts = {
 	typecheck: "tsc --noEmit",
 	build: "shx rm -rf dist && npx tsc --noEmit && pkgroll",
 	test: "yarn build && tsx --env-file .env.integration-test node_modules/.bin/vitest run",
+	"test:win": "yarn build && npx vitest run",
 	start: "yarn build && ./bin/happy.mjs",
+	"start:win": "yarn build && node ./bin/happy.mjs",
 	dev: "tsx src/index.ts",
 	"dev:local-server": "yarn build && tsx --env-file .env.dev-local-server src/index.ts",
 	"dev:integration-test-env": "yarn build && tsx --env-file .env.integration-test src/index.ts",
@@ -89,32 +91,30 @@ var scripts = {
 	postinstall: "node scripts/unpack-tools.cjs"
 };
 var dependencies = {
-	"@anthropic-ai/claude-code": "^2.0.13",
-	"@anthropic-ai/sdk": "0.65.0",
-	"@modelcontextprotocol/sdk": "^1.15.1",
+	"@modelcontextprotocol/sdk": "^1.22.0",
 	"@stablelib/base64": "^2.0.1",
 	"@stablelib/hex": "^2.0.1",
 	"@types/cross-spawn": "^6.0.6",
-	"@types/http-proxy": "^1.17.16",
+	"@types/http-proxy": "^1.17.17",
 	"@types/ps-list": "^6.2.1",
 	"@types/qrcode-terminal": "^0.12.2",
-	"@types/react": "^19.1.9",
+	"@types/react": "^19.2.7",
 	"@types/tmp": "^0.2.6",
-	axios: "^1.10.0",
-	chalk: "^5.4.1",
+	axios: "^1.13.2",
+	chalk: "^5.6.2",
 	"cross-spawn": "^7.0.6",
 	"expo-server-sdk": "^3.15.0",
-	fastify: "^5.5.0",
+	fastify: "^5.6.2",
 	"fastify-type-provider-zod": "4.0.2",
 	"http-proxy": "^1.18.1",
 	"http-proxy-middleware": "^3.0.5",
-	ink: "^6.1.0",
+	ink: "^6.5.1",
 	open: "^10.2.0",
 	"ps-list": "^8.1.1",
 	"qrcode-terminal": "^0.12.0",
-	react: "^19.1.1",
+	react: "^19.2.0",
 	"socket.io-client": "^4.8.1",
-	tar: "^7.4.3",
+	tar: "^7.5.2",
 	tmp: "^0.2.5",
 	tweetnacl: "^1.0.3",
 	zod: "^3.23.8"
@@ -122,15 +122,15 @@ var dependencies = {
 var devDependencies = {
 	"@eslint/compat": "^1",
 	"@types/node": ">=20",
-	"cross-env": "^10.0.0",
+	"cross-env": "^10.1.0",
 	dotenv: "^16.6.1",
 	eslint: "^9",
 	"eslint-config-prettier": "^10",
 	pkgroll: "^2.14.2",
-	"release-it": "^19.0.4",
+	"release-it": "^19.0.6",
 	shx: "^0.3.3",
 	"ts-node": "^10",
-	tsx: "^4.20.3",
+	tsx: "^4.20.6",
 	typescript: "^5",
 	vitest: "^3.2.4"
 };
@@ -1070,10 +1070,28 @@ function run(args, options) {
   });
 }
 
+function validatePath(targetPath, workingDirectory) {
+  const resolvedTarget = resolve(workingDirectory, targetPath);
+  const resolvedWorkingDir = resolve(workingDirectory);
+  if (!resolvedTarget.startsWith(resolvedWorkingDir + "/") && resolvedTarget !== resolvedWorkingDir) {
+    return {
+      valid: false,
+      error: `Access denied: Path '${targetPath}' is outside the working directory`
+    };
+  }
+  return { valid: true };
+}
+
 const execAsync = promisify(exec);
-function registerCommonHandlers(rpcHandlerManager) {
+function registerCommonHandlers(rpcHandlerManager, workingDirectory) {
   rpcHandlerManager.registerHandler("bash", async (data) => {
     logger.debug("Shell command request:", data.command);
+    if (data.cwd) {
+      const validation = validatePath(data.cwd, workingDirectory);
+      if (!validation.valid) {
+        return { success: false, error: validation.error };
+      }
+    }
     try {
       const options = {
         cwd: data.cwd,
@@ -1109,6 +1127,10 @@ function registerCommonHandlers(rpcHandlerManager) {
   });
   rpcHandlerManager.registerHandler("readFile", async (data) => {
     logger.debug("Read file request:", data.path);
+    const validation = validatePath(data.path, workingDirectory);
+    if (!validation.valid) {
+      return { success: false, error: validation.error };
+    }
     try {
       const buffer = await readFile$1(data.path);
       const content = buffer.toString("base64");
@@ -1120,6 +1142,10 @@ function registerCommonHandlers(rpcHandlerManager) {
   });
   rpcHandlerManager.registerHandler("writeFile", async (data) => {
     logger.debug("Write file request:", data.path);
+    const validation = validatePath(data.path, workingDirectory);
+    if (!validation.valid) {
+      return { success: false, error: validation.error };
+    }
     try {
       if (data.expectedHash !== null && data.expectedHash !== void 0) {
         try {
@@ -1166,6 +1192,10 @@ function registerCommonHandlers(rpcHandlerManager) {
   });
   rpcHandlerManager.registerHandler("listDirectory", async (data) => {
     logger.debug("List directory request:", data.path);
+    const validation = validatePath(data.path, workingDirectory);
+    if (!validation.valid) {
+      return { success: false, error: validation.error };
+    }
     try {
       const entries = await readdir(data.path, { withFileTypes: true });
       const directoryEntries = await Promise.all(
@@ -1207,6 +1237,10 @@ function registerCommonHandlers(rpcHandlerManager) {
   });
   rpcHandlerManager.registerHandler("getDirectoryTree", async (data) => {
     logger.debug("Get directory tree request:", data.path, "maxDepth:", data.maxDepth);
+    const validation = validatePath(data.path, workingDirectory);
+    if (!validation.valid) {
+      return { success: false, error: validation.error };
+    }
     async function buildTree(path, name, currentDepth) {
       try {
         const stats = await stat$1(path);
@@ -1263,6 +1297,12 @@ function registerCommonHandlers(rpcHandlerManager) {
   });
   rpcHandlerManager.registerHandler("ripgrep", async (data) => {
     logger.debug("Ripgrep request with args:", data.args, "cwd:", data.cwd);
+    if (data.cwd) {
+      const validation = validatePath(data.cwd, workingDirectory);
+      if (!validation.valid) {
+        return { success: false, error: validation.error };
+      }
+    }
     try {
       const result = await run$1(data.args, { cwd: data.cwd });
       return {
@@ -1281,6 +1321,12 @@ function registerCommonHandlers(rpcHandlerManager) {
   });
   rpcHandlerManager.registerHandler("difftastic", async (data) => {
     logger.debug("Difftastic request with args:", data.args, "cwd:", data.cwd);
+    if (data.cwd) {
+      const validation = validatePath(data.cwd, workingDirectory);
+      if (!validation.valid) {
+        return { success: false, error: validation.error };
+      }
+    }
     try {
       const result = await run(data.args, { cwd: data.cwd });
       return {
@@ -1330,7 +1376,7 @@ class ApiSessionClient extends EventEmitter {
       encryptionVariant: this.encryptionVariant,
       logger: (msg, data) => logger.debug(msg, data)
     });
-    registerCommonHandlers(this.rpcHandlerManager);
+    registerCommonHandlers(this.rpcHandlerManager, this.metadata.path);
     this.socket = io(configuration.serverUrl, {
       auth: {
         token: this.token,
@@ -1446,7 +1492,7 @@ class ApiSessionClient extends EventEmitter {
       sid: this.sessionId,
       message: encrypted
     });
-    if (body.type === "assistant" && body.message.usage) {
+    if (body.type === "assistant" && body.message?.usage) {
       try {
         this.sendUsageData(body.message.usage);
       } catch (error) {
@@ -1620,7 +1666,7 @@ class ApiMachineClient {
       encryptionVariant: this.machine.encryptionVariant,
       logger: (msg, data) => logger.debug(msg, data)
     });
-    registerCommonHandlers(this.rpcHandlerManager);
+    registerCommonHandlers(this.rpcHandlerManager, process.cwd());
   }
   socket;
   keepAliveInterval = null;
@@ -1836,7 +1882,7 @@ class PushNotificationClient {
       );
       logger.debug(`Fetched ${response.data.tokens.length} push tokens`);
       response.data.tokens.forEach((token, index) => {
-        logger.debug(`[PUSH] Token ${index + 1}: id=${token.id}, token=${token.token}, created=${new Date(token.createdAt).toISOString()}, updated=${new Date(token.updatedAt).toISOString()}`);
+        logger.debug(`[PUSH] Token ${index + 1}: id=${token.id}, created=${new Date(token.createdAt).toISOString()}, updated=${new Date(token.updatedAt).toISOString()}`);
       });
       return response.data.tokens;
     } catch (error) {
@@ -1910,14 +1956,14 @@ class PushNotificationClient {
         const tokens = await this.fetchPushTokens();
         logger.debug(`[PUSH] Fetched ${tokens.length} push tokens`);
         tokens.forEach((token, index) => {
-          logger.debug(`[PUSH] Using token ${index + 1}: id=${token.id}, token=${token.token}`);
+          logger.debug(`[PUSH] Using token ${index + 1}: id=${token.id}`);
         });
         if (tokens.length === 0) {
           logger.debug("No push tokens found for user");
           return;
         }
         const messages = tokens.map((token, index) => {
-          logger.debug(`[PUSH] Creating message ${index + 1} for token: ${token.token}`);
+          logger.debug(`[PUSH] Creating message ${index + 1} for token`);
           return {
             to: token.token,
             title,
@@ -2114,17 +2160,16 @@ const RawJSONLinesSchema = z$1.discriminatedUnion("type", [
       // Used in sessionScanner.ts
     }).passthrough()
   }).passthrough(),
-  // Assistant message - validates message object with usage and content
+  // Assistant message - only validates uuid and type
+  // message object is optional to handle synthetic error messages (isApiErrorMessage: true)
+  // which may have different structure than normal assistant messages
   z$1.object({
     uuid: z$1.string(),
     type: z$1.literal("assistant"),
     message: z$1.object({
-      // Entire message used in getMessageKey()
-      usage: UsageSchema.optional(),
+      usage: UsageSchema.optional()
       // Used in apiSession.ts
-      content: z$1.any()
-      // Used in tests
-    }).passthrough()
+    }).passthrough().optional()
   }).passthrough(),
   // Summary message - validates summary and leafUuid
   z$1.object({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "happy-coder",
-  "version": "0.11.2-0",
+  "version": "0.12.0-0",
   "description": "Mobile and Web client for Claude Code and Codex",
   "author": "Kirill Dubovitskiy",
   "license": "MIT",
@@ -59,7 +59,9 @@
     "typecheck": "tsc --noEmit",
     "build": "shx rm -rf dist && npx tsc --noEmit && pkgroll",
     "test": "yarn build && tsx --env-file .env.integration-test node_modules/.bin/vitest run",
+    "test:win": "yarn build && npx vitest run",
     "start": "yarn build && ./bin/happy.mjs",
+    "start:win": "yarn build && node ./bin/happy.mjs",
     "dev": "tsx src/index.ts",
     "dev:local-server": "yarn build && tsx --env-file .env.dev-local-server src/index.ts",
     "dev:integration-test-env": "yarn build && tsx --env-file .env.integration-test src/index.ts",
@@ -68,32 +70,30 @@
     "postinstall": "node scripts/unpack-tools.cjs"
   },
   "dependencies": {
-    "@anthropic-ai/claude-code": "^2.0.13",
-    "@anthropic-ai/sdk": "0.65.0",
-    "@modelcontextprotocol/sdk": "^1.15.1",
+    "@modelcontextprotocol/sdk": "^1.22.0",
     "@stablelib/base64": "^2.0.1",
     "@stablelib/hex": "^2.0.1",
     "@types/cross-spawn": "^6.0.6",
-    "@types/http-proxy": "^1.17.16",
+    "@types/http-proxy": "^1.17.17",
     "@types/ps-list": "^6.2.1",
     "@types/qrcode-terminal": "^0.12.2",
-    "@types/react": "^19.1.9",
+    "@types/react": "^19.2.7",
     "@types/tmp": "^0.2.6",
-    "axios": "^1.10.0",
-    "chalk": "^5.4.1",
+    "axios": "^1.13.2",
+    "chalk": "^5.6.2",
     "cross-spawn": "^7.0.6",
     "expo-server-sdk": "^3.15.0",
-    "fastify": "^5.5.0",
+    "fastify": "^5.6.2",
     "fastify-type-provider-zod": "4.0.2",
     "http-proxy": "^1.18.1",
     "http-proxy-middleware": "^3.0.5",
-    "ink": "^6.1.0",
+    "ink": "^6.5.1",
     "open": "^10.2.0",
     "ps-list": "^8.1.1",
     "qrcode-terminal": "^0.12.0",
-    "react": "^19.1.1",
+    "react": "^19.2.0",
     "socket.io-client": "^4.8.1",
-    "tar": "^7.4.3",
+    "tar": "^7.5.2",
     "tmp": "^0.2.5",
     "tweetnacl": "^1.0.3",
     "zod": "^3.23.8"
@@ -101,15 +101,15 @@
   "devDependencies": {
     "@eslint/compat": "^1",
     "@types/node": ">=20",
-    "cross-env": "^10.0.0",
+    "cross-env": "^10.1.0",
     "dotenv": "^16.6.1",
     "eslint": "^9",
     "eslint-config-prettier": "^10",
     "pkgroll": "^2.14.2",
-    "release-it": "^19.0.4",
+    "release-it": "^19.0.6",
     "shx": "^0.3.3",
     "ts-node": "^10",
-    "tsx": "^4.20.3",
+    "tsx": "^4.20.6",
     "typescript": "^5",
     "vitest": "^3.2.4"
   },

package/scripts/claude_local_launcher.cjs

@@ -1,4 +1,3 @@
-const crypto = require('crypto');
 const fs = require('fs');
 
 // Disable autoupdater (never works really)
@@ -13,34 +12,7 @@ function writeMessage(message) {
     }
 }
 
-// Intercept crypto.randomUUID
-const originalRandomUUID = crypto.randomUUID;
-Object.defineProperty(global, 'crypto', {
-    configurable: true,
-    enumerable: true,
-    get() {
-        return {
-            randomUUID: () => {
-                const uuid = originalRandomUUID();
-                writeMessage({ type: 'uuid', value: uuid });
-                return uuid;
-            }
-        };
-    }
-});
-Object.defineProperty(crypto, 'randomUUID', {
-    configurable: true,
-    enumerable: true,
-    get() {
-        return () => {
-            const uuid = originalRandomUUID();
-            writeMessage({ type: 'uuid', value: uuid });
-            return uuid;
-        }
-    }
-});
-
-// Intercept fetch to track activity
+// Intercept fetch to track thinking state
 const originalFetch = global.fetch;
 let fetchCounter = 0;
 
@@ -95,4 +67,7 @@ global.fetch = function(...args) {
 Object.defineProperty(global.fetch, 'name', { value: 'fetch' });
 Object.defineProperty(global.fetch, 'length', { value: originalFetch.length });
 
-import('@anthropic-ai/claude-code/cli.js')
+// Import global Claude Code CLI
+const { getClaudeCliPath, runClaudeCli } = require('./claude_version_utils.cjs');
+
+runClaudeCli(getClaudeCliPath());

package/scripts/claude_remote_launcher.cjs

@@ -10,4 +10,7 @@ global.setTimeout = function(callback, delay, ...args) {
 Object.defineProperty(global.setTimeout, 'name', { value: 'setTimeout' });
 Object.defineProperty(global.setTimeout, 'length', { value: originalSetTimeout.length });
 
-import('@anthropic-ai/claude-code/cli.js')
+// Import global Claude Code CLI
+const { getClaudeCliPath, runClaudeCli } = require('./claude_version_utils.cjs');
+
+runClaudeCli(getClaudeCliPath());