fix: run Happy daemon as app user, not root

When init-repo.sh starts the happy daemon as root, HOME=/root so
Happy and Claude Code can't find credentials stored in /home/user.
The mobile app works when the user manually runs happy from a VSCode
terminal (as the user user) because the right home dir is in scope.

Use sudo -u with -E (preserve environment) so the daemon runs as the
correct user while still inheriting the pod's env vars (HAPPY_SERVER_URL,
HAPPY_WEBAPP_URL, ANTHROPIC_API_KEY, etc.).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Dockerfile

@@ -25,19 +25,13 @@ RUN apt-get update && apt-get install -y \
     sudo \
     && rm -rf /var/lib/apt/lists/*
 
-# Install Chrome and xdg-utils (needed for xdg-open to work in VNC)
+# Install Chrome
 RUN wget -q -O - https://dl.google.com/linux/linux_signing_key.pub | gpg --dearmor -o /usr/share/keyrings/google-chrome-keyring.gpg && \
     echo "deb [arch=amd64 signed-by=/usr/share/keyrings/google-chrome-keyring.gpg] http://dl.google.com/linux/chrome/deb/ stable main" > /etc/apt/sources.list.d/google-chrome.list && \
     apt-get update && \
-    apt-get install -y google-chrome-stable xdg-utils && \
+    apt-get install -y google-chrome-stable && \
     rm -rf /var/lib/apt/lists/*
 
-# Chrome wrapper: adds flags required for running inside a Docker container.
-# xdg-open (used by Claude Code on Linux) respects $BROWSER, so pointing it
-# here ensures the OAuth popup works without manual --no-sandbox invocations.
-RUN printf '#!/bin/bash\nexec /usr/bin/google-chrome-stable \\\n  --no-sandbox \\\n  --disable-dev-shm-usage \\\n  --disable-gpu \\\n  "$@"\n' > /usr/local/bin/google-chrome && \
-    chmod +x /usr/local/bin/google-chrome
-
 # Install Node.js (LTS version for Happy Coder)
 RUN curl -fsSL https://deb.nodesource.com/setup_lts.x | bash - && \
     apt-get install -y nodejs && \
@@ -75,8 +69,7 @@ WORKDIR /workspace
 
 # Configure container to run as user user
 ENV HOME=/home/user \
-    USER=user \
-    BROWSER=/usr/local/bin/google-chrome
+    USER=user
 
 # Expose VNC port (baseimage-gui default)
 EXPOSE 5800

scripts/init-repo.sh

@@ -59,11 +59,13 @@ chown -R "$RUN_UID:$RUN_GID" "$WORKSPACE_DIR"
 mkdir -p "$HOME"
 chown "$RUN_UID:$RUN_GID" "$HOME"
 
-# Start Happy Coder daemon
+# Start Happy Coder daemon as the app user so it can access user credentials
+# (running as root means HOME=/root, Claude Code and Happy config would be missing)
 echo "Starting Happy Coder..."
-cd "$WORKSPACE_DIR"
 
-happy daemon start || echo "Happy Coder daemon failed to start, continuing anyway..."
+RUN_USER=$(id -nu "$RUN_UID" 2>/dev/null || echo "user")
+sudo -u "$RUN_USER" -E sh -c "cd '$WORKSPACE_DIR' && happy daemon start" \
+    || echo "Happy Coder daemon failed to start, continuing anyway..."
 
 echo "Happy Coder daemon started"