pennyrouter 0.1.20 → 0.1.21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pennyrouter",
-  "version": "0.1.20",
+  "version": "0.1.21",
   "description": "Install and manage PennyRouter local coding-agent integrations.",
   "homepage": "https://pennyrouter.com",
   "bugs": {
@@ -24,7 +24,7 @@
   ],
   "scripts": {
     "start": "node ./bin/pennyrouter.js",
-    "check": "node --check ./bin/pennyrouter.js && find src -name '*.js' -print0 | xargs -0 -n1 node --check && node src/statusline.test.js && node src/harnesses/claude-code.test.js && node src/harnesses/codex.test.js"
+    "check": "node --check ./bin/pennyrouter.js && find src -name '*.js' -print0 | xargs -0 -n1 node --check && node src/session.test.js && node src/statusline.test.js && node src/harnesses/claude-code.test.js && node src/harnesses/codex.test.js"
   },
   "license": "MIT"
 }

package/src/cli.js

@@ -20,6 +20,7 @@ import {
   forgetAnthropicToken,
   maskKey,
   pollForKey,
+  probeClaudeCodeGateway,
   sleep,
   storeAnthropicToken,
 } from "./session.js";
@@ -98,6 +99,7 @@ function parseArgs(argv) {
     else if (arg === "--yes" || arg === "-y") flags.yes = true;
     else if (arg === "--all") flags.all = true;
     else if (arg === "--dry-run") flags.dryRun = true;
+    else if (arg === "--allow-running-claude") flags.allowRunningClaude = true;
     else if (arg === "--no-browser") flags.noBrowser = true;
     else if (arg === "--existing-account") flags.existingAccount = true;
     else if (arg === "--anthropic-auth") flags.anthropicAuth = true;
@@ -174,6 +176,23 @@ async function authProvider(flags) {
     return;
   }
 
+  // Claude Code's env settings are user-global and may be reloaded by already-open
+  // processes. Switching the base URL underneath an in-flight agent can transplant a
+  // multi-hundred-thousand-token tool loop into PennyRouter without a fresh human action.
+  // Make that blast radius opt-in instead of surprising every new installer.
+  if (selected.some((harness) => harness.id === "claude-code")
+      && !flags.allowRunningClaude) {
+    const running = runningClaudeCodeProcesses();
+    if (running.length > 0) {
+      throw new Error(
+        "Claude Code is currently running. Close all Claude Code sessions, then run install again. "
+        + "PennyRouter changes Claude's user-global API routing, so continuing could redirect "
+        + "an open session's full transcript. If you intentionally accept that risk, pass "
+        + "--allow-running-claude.\nDetected:\n  " + running.slice(0, 5).join("\n  "),
+      );
+    }
+  }
+
   const pennyKey = flags.pennyKey || await readClaudeCodePennyRouterKey();
   if (!pennyKey) {
     throw new Error(
@@ -370,6 +389,8 @@ async function install(flags) {
           apiKey: claim.api_key,
           token: claudeAnthropicAuth.token,
         });
+        console.log("Verifying modern Claude Code compatibility before changing global settings...");
+        await probeClaudeCodeGateway({ gatewayBaseUrl, apiKey: claim.api_key });
         record = await harness.installStoredToken({
           apiKey: claim.api_key, gatewayBaseUrl, plan, existingRecord,
         });
@@ -377,6 +398,10 @@ async function install(flags) {
         record.anthropic_token_stored = true;
         record.token_source = claudeAnthropicAuth.source;
       } else {
+        if (harness.id === "claude-code") {
+          console.log("Verifying modern Claude Code compatibility before changing global settings...");
+          await probeClaudeCodeGateway({ gatewayBaseUrl, apiKey: claim.api_key });
+        }
         record = await harness.install({
           apiKey: claim.api_key,
           // An explicit --local / --gateway-base-url overrides the URL the server hands back
@@ -1058,11 +1083,26 @@ function openBrowser(url) {
   spawnSync(command, args, { stdio: "ignore", detached: true });
 }
 
+function runningClaudeCodeProcesses() {
+  if (process.platform === "win32") {
+    const result = spawnSync("tasklist", ["/FO", "CSV", "/NH"], { encoding: "utf8" });
+    if (result.status !== 0) return [];
+    return String(result.stdout || "").split(/\r?\n/)
+      .filter((line) => /^"claude(?:\.exe)?"/i.test(line.trim()));
+  }
+  const result = spawnSync("ps", ["-ax", "-o", "pid=,command="], { encoding: "utf8" });
+  if (result.status !== 0) return [];
+  return String(result.stdout || "").split(/\r?\n/)
+    .map((line) => line.trim())
+    // Case-sensitive on purpose: match the Claude Code executable, not Claude.app.
+    .filter((line) => /(^|[\/\s])claude(?:\s|$)/.test(line));
+}
+
 function printHelp() {
   console.log(`PennyRouter CLI
 
 Usage:
-  pennyrouter install [--harness ${SUPPORTED_HARNESS_IDS}] [--all] [--yes] [--dry-run] [--existing-account] [--anthropic-auth|--no-anthropic-auth] [--local[=URL]]
+  pennyrouter install [--harness ${SUPPORTED_HARNESS_IDS}] [--all] [--yes] [--dry-run] [--existing-account] [--anthropic-auth|--no-anthropic-auth] [--local[=URL]] [--allow-running-claude]
   pennyrouter auth anthropic [--penny-key pr-...] [--token oauth-token] [--token-command CMD] [--gateway-base-url URL] [--forget]
   pennyrouter disable [--harness ${SUPPORTED_HARNESS_IDS}] [--all] [--yes]
   pennyrouter enable [--harness ${SUPPORTED_HARNESS_IDS}] [--all] [--yes]

package/src/session.js

@@ -71,6 +71,59 @@ export async function storeAnthropicToken({ gatewayBaseUrl, apiKey, token }) {
   return response.json();
 }
 
+// Exercise the exact modern Claude Code request feature that has historically broken at
+// proxy boundaries BEFORE changing ~/.claude/settings.json (a user-global redirect). This
+// is intentionally a real, tiny Messages call: a generic /health check cannot prove that
+// Anthropic beta headers survive the gateway's subscription/native relay.
+export async function probeClaudeCodeGateway({ gatewayBaseUrl, apiKey }) {
+  const url = `${gatewayBaseUrl.replace(/\/+$/, "")}/v1/messages?beta=true`;
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), 20_000);
+  let response;
+  try {
+    response = await fetch(url, {
+      method: "POST",
+      signal: controller.signal,
+      headers: {
+        "content-type": "application/json",
+        authorization: `Bearer ${apiKey}`,
+        "anthropic-beta": "compact-2026-01-12",
+      },
+      body: JSON.stringify({
+        model: "Penny Sonnet",
+        max_tokens: 16,
+        stream: false,
+        messages: [{ role: "user", content: "Reply OK." }],
+        tools: [{
+          name: "pennyrouter_install_probe",
+          description: "No-op compatibility probe; do not call it.",
+          input_schema: { type: "object", properties: {} },
+        }],
+        context_management: { edits: [{ type: "compact_20260112" }] },
+      }),
+    });
+  } catch (error) {
+    if (error?.name === "AbortError") {
+      throw new Error("Gateway compatibility check timed out; no Claude Code settings were changed.");
+    }
+    throw new Error(`Gateway compatibility check failed; no Claude Code settings were changed: ${error?.message || error}`);
+  } finally {
+    clearTimeout(timer);
+  }
+  if (!response.ok) {
+    let detail = "";
+    try {
+      detail = (await response.text()).slice(0, 500).replace(/\s+/g, " ").trim();
+    } catch {
+      // Status alone is enough for a safe failure.
+    }
+    throw new Error(
+      `Gateway compatibility check failed: HTTP ${response.status}${detail ? ` — ${detail}` : ""}. No Claude Code settings were changed.`,
+    );
+  }
+  return true;
+}
+
 // Best-effort "forget my Claude token" on uninstall. Never throws — a cleanup that
 // can't reach the network shouldn't block removing the local integration.
 export async function forgetAnthropicToken({ gatewayBaseUrl, apiKey }) {

package/src/session.test.js

@@ -0,0 +1,32 @@
+import assert from "node:assert/strict";
+import { probeClaudeCodeGateway } from "./session.js";
+
+const originalFetch = globalThis.fetch;
+
+try {
+  let seen;
+  globalThis.fetch = async (url, options) => {
+    seen = { url, options };
+    return { ok: true, status: 200 };
+  };
+  assert.equal(await probeClaudeCodeGateway({
+    gatewayBaseUrl: "https://gateway.example/", apiKey: "pr-test",
+  }), true);
+  assert.equal(seen.url, "https://gateway.example/v1/messages?beta=true");
+  assert.equal(seen.options.headers.authorization, "Bearer pr-test");
+  assert.equal(seen.options.headers["anthropic-beta"], "compact-2026-01-12");
+  const body = JSON.parse(seen.options.body);
+  assert.equal(body.context_management.edits[0].type, "compact_20260112");
+  assert.equal(body.tools[0].name, "pennyrouter_install_probe");
+
+  globalThis.fetch = async () => ({
+    ok: false, status: 502, text: async () => "context_management rejected",
+  });
+  await assert.rejects(
+    probeClaudeCodeGateway({ gatewayBaseUrl: "https://gateway.example", apiKey: "pr-test" }),
+    /HTTP 502.*No Claude Code settings were changed/,
+  );
+} finally {
+  globalThis.fetch = originalFetch;
+}
+

package/src/statusline.js

@@ -153,10 +153,9 @@ function authSuffix(mode) {
   return mode === "sub" || mode === "byok" ? " (" + mode + ")" : "";
 }
 
-// Teammate badges (@penny ask). Rendered from the STRUCTURED fields, not the gateway's
-// prebuilt \`label\` — this line is composed here (and may be appended to a wrap_command's
-// output), so the client owns the layout. 📨 = questions waiting on you; 📬 = an answer came
-// back to you. Both absent on an older gateway, which renders nothing.
+// Teammate badges (@penny ask): 📨 questions waiting on you, 📬 answers that came back.
+// Read from the structured fields rather than the gateway's prebuilt \`label\`, since this
+// line is composed here. Absent on an older gateway, which renders nothing.
 function askBadges(c) {
   if (!c) return "";
   let out = "";