@contro1/claude-code 0.1.0 → 0.1.2

package/README.md

@@ -23,7 +23,7 @@ Set env vars (or use `.centcom.json` in working directory):
 - `CENTCOM_SLA_MINUTES` (optional)
 - `CENTCOM_REQUIRED_ROLE` (optional)
 - `CENTCOM_FALLBACK` (`deny` default; supported: `deny`, `ask`, `allow`)
-- `CENTCOM_CALLBACK_URL` (default internal placeholder, can be overridden)
+- `CENTCOM_CALLBACK_URL` (optional; only set when you also want webhook callbacks)
 
 ## Claude Code Hook Setup
 
@@ -34,7 +34,7 @@ Add this in `.claude/settings.json`:
   "hooks": {
     "PreToolUse": [
       {
-        "matcher": "",
+        "matcher": "Write|Edit|Bash",
         "command": "centcom-claude-code",
         "timeout": 310000
       }
@@ -51,6 +51,18 @@ Add this in `.claude/settings.json`:
 - Timeout -> request cancel attempt + `deny`.
 - API errors -> fallback decision (`CENTCOM_FALLBACK`).
 
+## Quick Verify
+
+```bash
+npm view @contro1/claude-code version
+```
+
+## Related Packages
+
+- [`centcom`](https://github.com/contro1-hq/centcom) for Python integrations
+- [`@contro1/sdk`](https://github.com/contro1-hq/centcom-sdk) for Node/TypeScript SDK usage
+- [`centcom-langgraph`](https://github.com/contro1-hq/centcom-langgraph) for LangGraph integrations
+
 ## Development
 
 ```bash
@@ -58,3 +70,8 @@ npm install
 npm run build
 npm pack
 ```
+
+## Skill
+
+This repo includes an integration skill:
+- `skills/centcom-claude-code.md`

package/dist/config.js

@@ -1,12 +1,11 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
-const DEFAULT_BASE_URL = "https://contro1.com/api/centcom/v1";
+const DEFAULT_BASE_URL = "https://api.contro1.com/api/centcom/v1";
 const DEFAULT_TOOLS = "Write,Edit,Bash";
 const DEFAULT_TIMEOUT_MS = 300_000;
 const DEFAULT_POLL_INTERVAL_MS = 3_000;
 const DEFAULT_PRIORITY = "urgent";
 const DEFAULT_FALLBACK = "deny";
-const DEFAULT_CALLBACK_URL = "https://centcom.local/claude-code";
 function readLocalConfig() {
     const path = join(process.cwd(), ".centcom.json");
     if (!existsSync(path))
@@ -43,7 +42,7 @@ export function loadConfig() {
     const slaValue = env.CENTCOM_SLA_MINUTES ?? file.CENTCOM_SLA_MINUTES;
     const slaMinutes = slaValue !== undefined ? Number(slaValue) : undefined;
     const requiredRole = env.CENTCOM_REQUIRED_ROLE ?? file.CENTCOM_REQUIRED_ROLE;
-    const callbackUrl = env.CENTCOM_CALLBACK_URL ?? file.CENTCOM_CALLBACK_URL ?? DEFAULT_CALLBACK_URL;
+    const callbackUrl = env.CENTCOM_CALLBACK_URL ?? file.CENTCOM_CALLBACK_URL;
     return {
         apiKey,
         baseUrl,
@@ -54,6 +53,6 @@ export function loadConfig() {
         slaMinutes: Number.isFinite(slaMinutes) ? slaMinutes : undefined,
         requiredRole: requiredRole || undefined,
         fallback,
-        callbackUrl,
+        callbackUrl: callbackUrl || undefined,
     };
 }

package/dist/formatter.js

@@ -4,7 +4,9 @@ function redactSecrets(text) {
     return text
         .replace(/(cc_(?:live|test)_[a-zA-Z0-9_-]{8,})/g, "[REDACTED_API_KEY]")
         .replace(/(whsec_[a-zA-Z0-9_-]{8,})/g, "[REDACTED_WEBHOOK_SECRET]")
-        .replace(/(Bearer\s+)[^\s]+/gi, "$1[REDACTED_TOKEN]");
+        .replace(/(Bearer\s+)[^\s]+/gi, "$1[REDACTED_TOKEN]")
+        .replace(/("?(?:api[_-]?key|token|secret|password)"?\s*:\s*)"[^"]*"/gi, '$1"[REDACTED]"')
+        .replace(/((?:api[_-]?key|token|secret|password)\s*=\s*)[^\s]+/gi, "$1[REDACTED]");
 }
 function clip(text, size = MAX_PREVIEW) {
     if (text.length <= size)
@@ -52,6 +54,7 @@ export function formatRequest(input) {
             source: "claude-code",
             session_id: input.session_id,
             tool_name: tool,
+            tool_input_hash: createHash("sha256").update(stableStringify(toolInput)).digest("hex").slice(0, 24),
             cwd: input.cwd ?? "",
         },
     };

package/dist/hook.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { stdin, stdout, stderr } from "node:process";
-import { CentcomClient } from "./centcomClient.js";
+import { CentcomClient } from "@contro1/sdk";
 import { loadConfig } from "./config.js";
 import { buildIdempotencyKey, formatRequest } from "./formatter.js";
 let activeRequestId = null;
@@ -70,23 +70,29 @@ async function main() {
     const client = new CentcomClient({
         apiKey: config.apiKey,
         baseUrl: config.baseUrl,
-        timeoutMs: Math.min(config.timeoutMs, 30_000),
+        timeout: Math.min(config.timeoutMs, 30_000),
     });
     activeClient = client;
     const formatted = formatRequest(input);
     const idempotencyKey = buildIdempotencyKey(input);
     try {
-        const request = await client.createRequest({
+        const requestPayload = {
             type: "approval",
             question: formatted.question,
             context: formatted.context,
-            callback_url: config.callbackUrl,
             priority: config.priority,
             required_role: config.requiredRole,
-            metadata: formatted.metadata,
+            metadata: {
+                ...formatted.metadata,
+                idempotency_key: idempotencyKey,
+            },
             sla_minutes: config.slaMinutes,
             idempotency_key: idempotencyKey,
-        });
+        };
+        if (config.callbackUrl) {
+            requestPayload.callback_url = config.callbackUrl;
+        }
+        const request = await client.createRequest(requestPayload);
         activeRequestId = request.id;
         const result = await client.waitForResponse(request.id, config.pollIntervalMs, config.timeoutMs);
         const approved = responseApproved(result.response ?? null);

package/dist/types.d.ts

@@ -23,5 +23,5 @@ export interface CentcomClaudeConfig {
     slaMinutes?: number;
     requiredRole?: string;
     fallback: PermissionDecision;
-    callbackUrl: string;
+    callbackUrl?: string;
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@contro1/claude-code",
-  "version": "0.1.0",
-  "description": "CENTCOM approval hook for Claude Code PreToolUse",
+  "version": "0.1.2",
+  "description": "CENTCOM approval hook for Claude Code PermissionRequest",
   "type": "module",
   "main": "dist/hook.js",
   "types": "dist/hook.d.ts",
@@ -29,7 +29,9 @@
   "publishConfig": {
     "access": "public"
   },
-  "dependencies": {},
+  "dependencies": {
+    "@contro1/sdk": "^1.0.0"
+  },
   "devDependencies": {
     "@types/node": "^20.0.0",
     "typescript": "^5.4.0"

package/dist/centcomClient.d.ts

@@ -1,33 +0,0 @@
-interface CentcomClientConfig {
-    apiKey: string;
-    baseUrl: string;
-    timeoutMs: number;
-}
-interface CreateRequestParams {
-    type: "approval" | "yes_no" | "free_text";
-    context: string;
-    question: string;
-    callback_url: string;
-    priority: "normal" | "urgent";
-    required_role?: string;
-    metadata?: Record<string, unknown>;
-    sla_minutes?: number;
-    idempotency_key?: string;
-}
-export interface CentcomRequest {
-    id: string;
-    state: string;
-    response?: Record<string, unknown> | null;
-}
-export declare class CentcomClient {
-    private readonly apiKey;
-    private readonly baseUrl;
-    private readonly timeoutMs;
-    constructor(config: CentcomClientConfig);
-    private request;
-    createRequest(params: CreateRequestParams): Promise<CentcomRequest>;
-    getRequest(requestId: string): Promise<CentcomRequest>;
-    cancelRequest(requestId: string): Promise<void>;
-    waitForResponse(requestId: string, intervalMs: number, timeoutMs: number): Promise<CentcomRequest>;
-}
-export {};

package/dist/centcomClient.js

@@ -1,66 +0,0 @@
-export class CentcomClient {
-    apiKey;
-    baseUrl;
-    timeoutMs;
-    constructor(config) {
-        this.apiKey = config.apiKey;
-        this.baseUrl = config.baseUrl.replace(/\/$/, "");
-        this.timeoutMs = config.timeoutMs;
-    }
-    async request(method, path, body, extraHeaders) {
-        const controller = new AbortController();
-        const timeout = setTimeout(() => controller.abort(), this.timeoutMs);
-        try {
-            const res = await fetch(`${this.baseUrl}${path}`, {
-                method,
-                headers: {
-                    Authorization: `Bearer ${this.apiKey}`,
-                    "Content-Type": "application/json",
-                    ...(extraHeaders ?? {}),
-                },
-                body: body ? JSON.stringify(body) : undefined,
-                signal: controller.signal,
-            });
-            const json = (await res.json());
-            if (!res.ok) {
-                throw new Error(json.message || `HTTP ${res.status}`);
-            }
-            return json;
-        }
-        finally {
-            clearTimeout(timeout);
-        }
-    }
-    async createRequest(params) {
-        const { idempotency_key, ...body } = params;
-        const headers = {};
-        if (idempotency_key)
-            headers["Idempotency-Key"] = idempotency_key;
-        return this.request("POST", "/requests", body, headers);
-    }
-    async getRequest(requestId) {
-        return this.request("GET", `/requests/${requestId}`);
-    }
-    async cancelRequest(requestId) {
-        await this.request("DELETE", `/requests/${requestId}`);
-    }
-    async waitForResponse(requestId, intervalMs, timeoutMs) {
-        const deadline = Date.now() + timeoutMs;
-        const terminal = new Set([
-            "answered",
-            "callback_pending",
-            "callback_delivered",
-            "callback_failed",
-            "closed",
-            "expired",
-            "cancelled",
-        ]);
-        while (Date.now() < deadline) {
-            const req = await this.getRequest(requestId);
-            if (terminal.has(req.state))
-                return req;
-            await new Promise((resolve) => setTimeout(resolve, intervalMs));
-        }
-        throw new Error(`Timeout waiting for response on request ${requestId}`);
-    }
-}