Farscry > td-1c8739
td-1c8739

Claude Remote v2: Interactive Sessions

in_progress epic P1
Created Mar 3, 2026 9:52 AM Updated Mar 3, 2026 3:19 PM
Children (5 open, 10 closed)
Open 5
td-dcf24c CTO architecture review of claude-remote-server v2 P1 Mar 12, 2026 10:15 PM
td-ba5d3a Phase 2: Polish + Reliability P2 Mar 12, 2026 10:16 PM
td-01d5d1 Phase 3: Hardening (Pre-multi-user) P2 Mar 12, 2026 10:16 PM
td-ebaa7e Fix processEvents vs endInteractive race condition P3 Mar 19, 2026 8:49 PM
td-32131a UX for interactive session timeout during waiting state P3 Mar 19, 2026 8:49 PM
Done 10
td-734197 Add cookie-based auth for HTML pages + SSE P0 Mar 3, 2026 3:22 PM
td-e42506 Fix Basic Auth bypass in auth.ts P0 Mar 3, 2026 3:22 PM
td-c36cfd P0: Verify --resume compatibility with --no-session-persistence P1 Mar 3, 2026 1:32 PM
td-934e92 P1: Add schema migration system to claude-remote-server P1 Mar 3, 2026 2:03 PM
td-58bf8f P2: Fix SSE auth for browser EventSource P1 Mar 3, 2026 3:22 PM
td-5f97c9 P3: Create MockSessionRunner for testing P1 Mar 3, 2026 3:22 PM
td-1b5d95 Phase 1: Chat UI + Resume Backend P1 Mar 3, 2026 3:22 PM
td-5e589a Provision VM user-level config (CLAUDE.md, td, voice, MCP) P1 Mar 20, 2026 10:46 PM
td-f5dc8a Tighten health endpoint + add token rotation API P1 Mar 3, 2026 3:22 PM
td-d2ee8a Unit tests: parseStreamLine, validateArgs, groupPhases P1 Mar 3, 2026 1:59 PM
Description
Make the farscry.io dashboard the primary way to access Claude Code, including multi-turn interactive conversations. Approach: chat-style with --resume. See plan: ~/.claude/plans/smooth-giggling-starfish.md
Handoff
Session Log (5 entries)
Mar 3, 3:19 PM
lg-610b480a ses_ef5f07
progress
Started work
Mar 3, 3:19 PM
lg-b7c43ad6 ses_ef5f07
progress
Phase 2 complete: markdown rendering (marked.js CDN), session naming (auto+manual), Escape stop, async readEvents, session expiry detection, CLI version check, session cleanup cron. 197 tests. Commit 921b980.
Mar 3, 3:19 PM
lg-b572bba8 ses_ef5f07
progress
Deployed to VM (farscry.io). Removed Caddy basic auth — now single-layer app cookie auth only. Added logout button to nav. Commit 3f8fd25.
Mar 3, 3:19 PM
lg-8cb687ca ses_ef5f07
progress
Decision: dropped Caddy basic auth layer in favor of app-only cookie auth. Reason: double login bad UX, basic auth doesn't add meaningful security over HMAC-signed cookies + TLS, and blocks future multi-user path.
Mar 3, 3:19 PM
lg-d178758f ses_ef5f07
decision
Auth simplification: Chose app-only cookie auth over dual-layer (Caddy basic + app cookie). Caddy basic auth removed from VM Caddyfile. Rationale: same secret protects both layers so no real defense-in-depth; double login is terrible UX; app auth (HMAC-signed cookies, timing-safe comparison, HttpOnly/Secure/SameSite=Strict) is production-grade for single-user. Future: can add OAuth/multi-user without Caddy changes.
Git State
Started 405f2f6 (master) Current 405f2f6 (master)
Sessions Involved