@clastres/groundcontrol 0.1.5 → 0.1.7

package/hook.mjs

@@ -0,0 +1,109 @@
+// Ground Control PermissionRequest hook — runs inside Claude Code, not the daemon.
+//
+// Claude Code invokes this whenever a tool call needs a permission decision. It
+// hands the request to the local daemon over a unix socket; the daemon decides
+// whether to hold it for the phone or let it fall straight through.
+//
+// The one rule that matters here: when anything at all goes wrong (no daemon,
+// no answer, malformed reply, broken pipe) this exits 0 printing nothing, which
+// Claude Code reads as "no decision" and shows its normal terminal prompt. A
+// user who has never opened the app must not be able to tell this is installed.
+
+import fs from 'node:fs';
+import net from 'node:net';
+import os from 'node:os';
+import path from 'node:path';
+
+const SOCKET = path.join(os.homedir(), '.groundcontrol', 'approvals.sock');
+// Backstop only. The daemon settles every request itself, either with a
+// decision or with an explicit pass, so reaching this means the daemon wedged.
+const HARD_CAP_MS = 12 * 60 * 60 * 1000;
+const STDIN_MS = 5000;
+
+/// Exit without a decision. Claude Code prompts in the terminal as usual.
+function pass() {
+  process.exit(0);
+}
+
+function decide(decision) {
+  // An unrecognised behaviour would be a silent deny in some Claude versions,
+  // so anything that is not a clean allow/deny falls back to the prompt.
+  if (!decision || (decision.behavior !== 'allow' && decision.behavior !== 'deny')) pass();
+  const out = JSON.stringify({
+    hookSpecificOutput: { hookEventName: 'PermissionRequest', decision },
+  });
+  // writeSync, not process.stdout.write: stdout is a pipe here, so an async
+  // write followed by process.exit can truncate. Half a JSON object would be
+  // unparseable, which is safe (Claude prompts) but silently loses the answer.
+  try { fs.writeSync(1, out); } catch { /* nothing left to do but pass */ }
+  process.exit(0);
+}
+
+function readStdin() {
+  return new Promise((resolve) => {
+    let buf = '';
+    const done = (v) => { clearTimeout(timer); resolve(v); };
+    const timer = setTimeout(() => done(buf), STDIN_MS);
+    process.stdin.setEncoding('utf8');
+    process.stdin.on('data', (d) => { buf += d; });
+    process.stdin.on('end', () => done(buf));
+    process.stdin.on('error', () => done(''));
+  });
+}
+
+const raw = await readStdin();
+let payload;
+try { payload = JSON.parse(raw); } catch { pass(); }
+if (!payload || typeof payload !== 'object') pass();
+
+// Only session_id is genuinely required: it is what ties the request to a
+// session on the island. Claude Code 2.1.220 sends no tool_use_id on this
+// event (verified against a live session), and the daemon mints its own
+// request id anyway, so requiring one here would drop every real request.
+if (!payload.session_id) pass();
+
+const sock = net.connect(SOCKET);
+sock.setEncoding('utf8');
+
+let settled = false;
+const finish = (fn, arg) => {
+  if (settled) return;
+  settled = true;
+  try { sock.destroy(); } catch {}
+  fn(arg);
+};
+
+const cap = setTimeout(() => finish(pass), HARD_CAP_MS);
+cap.unref?.();
+
+// No daemon, stale socket file, wrong permissions: all of these land here and
+// all of them mean "behave exactly like Ground Control is not installed".
+sock.on('error', () => finish(pass));
+// A close before any reply means the daemon died mid-decision.
+sock.on('close', () => finish(pass));
+
+sock.on('connect', () => {
+  sock.write(JSON.stringify({
+    v: 1,
+    sessionId: payload.session_id,
+    toolUseId: payload.tool_use_id || '',
+    toolName: payload.tool_name || 'tool',
+    toolInput: payload.tool_input || {},
+    cwd: payload.cwd || '',
+    permissionMode: payload.permission_mode || '',
+    permissionContext: payload.permission_context || null,
+  }) + '\n');
+});
+
+let inbox = '';
+sock.on('data', (chunk) => {
+  inbox += chunk;
+  const nl = inbox.indexOf('\n');
+  if (nl === -1) return;
+  let reply;
+  try { reply = JSON.parse(inbox.slice(0, nl)); } catch { return finish(pass); }
+  // decision null is the daemon explicitly passing (you are at the Mac, the
+  // hold expired, or the phone never answered).
+  if (!reply || !reply.decision) return finish(pass);
+  finish(decide, reply.decision);
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clastres/groundcontrol",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "See and command your Claude Code sessions from your iPhone. Pairs the Ground Control app with the agents running on this Mac, end to end encrypted.",
   "bin": {
     "groundcontrol": "bin/groundcontrol.mjs"