@contro1/claude-code 0.1.1 → 0.1.2

package/README.md

@@ -23,7 +23,7 @@ Set env vars (or use `.centcom.json` in working directory):
 - `CENTCOM_SLA_MINUTES` (optional)
 - `CENTCOM_REQUIRED_ROLE` (optional)
 - `CENTCOM_FALLBACK` (`deny` default; supported: `deny`, `ask`, `allow`)
-- `CENTCOM_CALLBACK_URL` (default internal placeholder, can be overridden)
+- `CENTCOM_CALLBACK_URL` (optional; only set when you also want webhook callbacks)
 
 ## Claude Code Hook Setup
 
@@ -34,7 +34,7 @@ Add this in `.claude/settings.json`:
   "hooks": {
     "PreToolUse": [
       {
-        "matcher": "",
+        "matcher": "Write|Edit|Bash",
         "command": "centcom-claude-code",
         "timeout": 310000
       }
@@ -51,6 +51,18 @@ Add this in `.claude/settings.json`:
 - Timeout -> request cancel attempt + `deny`.
 - API errors -> fallback decision (`CENTCOM_FALLBACK`).
 
+## Quick Verify
+
+```bash
+npm view @contro1/claude-code version
+```
+
+## Related Packages
+
+- [`centcom`](https://github.com/contro1-hq/centcom) for Python integrations
+- [`@contro1/sdk`](https://github.com/contro1-hq/centcom-sdk) for Node/TypeScript SDK usage
+- [`centcom-langgraph`](https://github.com/contro1-hq/centcom-langgraph) for LangGraph integrations
+
 ## Development
 
 ```bash
@@ -58,3 +70,8 @@ npm install
 npm run build
 npm pack
 ```
+
+## Skill
+
+This repo includes an integration skill:
+- `skills/centcom-claude-code.md`

package/dist/config.js

@@ -1,12 +1,11 @@
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
-const DEFAULT_BASE_URL = "https://contro1.com/api/centcom/v1";
+const DEFAULT_BASE_URL = "https://api.contro1.com/api/centcom/v1";
 const DEFAULT_TOOLS = "Write,Edit,Bash";
 const DEFAULT_TIMEOUT_MS = 300_000;
 const DEFAULT_POLL_INTERVAL_MS = 3_000;
 const DEFAULT_PRIORITY = "urgent";
 const DEFAULT_FALLBACK = "deny";
-const DEFAULT_CALLBACK_URL = "https://centcom.local/claude-code";
 function readLocalConfig() {
     const path = join(process.cwd(), ".centcom.json");
     if (!existsSync(path))
@@ -43,7 +42,7 @@ export function loadConfig() {
     const slaValue = env.CENTCOM_SLA_MINUTES ?? file.CENTCOM_SLA_MINUTES;
     const slaMinutes = slaValue !== undefined ? Number(slaValue) : undefined;
     const requiredRole = env.CENTCOM_REQUIRED_ROLE ?? file.CENTCOM_REQUIRED_ROLE;
-    const callbackUrl = env.CENTCOM_CALLBACK_URL ?? file.CENTCOM_CALLBACK_URL ?? DEFAULT_CALLBACK_URL;
+    const callbackUrl = env.CENTCOM_CALLBACK_URL ?? file.CENTCOM_CALLBACK_URL;
     return {
         apiKey,
         baseUrl,
@@ -54,6 +53,6 @@ export function loadConfig() {
         slaMinutes: Number.isFinite(slaMinutes) ? slaMinutes : undefined,
         requiredRole: requiredRole || undefined,
         fallback,
-        callbackUrl,
+        callbackUrl: callbackUrl || undefined,
     };
 }

package/dist/formatter.js

@@ -4,7 +4,9 @@ function redactSecrets(text) {
     return text
         .replace(/(cc_(?:live|test)_[a-zA-Z0-9_-]{8,})/g, "[REDACTED_API_KEY]")
         .replace(/(whsec_[a-zA-Z0-9_-]{8,})/g, "[REDACTED_WEBHOOK_SECRET]")
-        .replace(/(Bearer\s+)[^\s]+/gi, "$1[REDACTED_TOKEN]");
+        .replace(/(Bearer\s+)[^\s]+/gi, "$1[REDACTED_TOKEN]")
+        .replace(/("?(?:api[_-]?key|token|secret|password)"?\s*:\s*)"[^"]*"/gi, '$1"[REDACTED]"')
+        .replace(/((?:api[_-]?key|token|secret|password)\s*=\s*)[^\s]+/gi, "$1[REDACTED]");
 }
 function clip(text, size = MAX_PREVIEW) {
     if (text.length <= size)
@@ -52,6 +54,7 @@ export function formatRequest(input) {
             source: "claude-code",
             session_id: input.session_id,
             tool_name: tool,
+            tool_input_hash: createHash("sha256").update(stableStringify(toolInput)).digest("hex").slice(0, 24),
             cwd: input.cwd ?? "",
         },
     };

package/dist/hook.js

@@ -76,17 +76,23 @@ async function main() {
     const formatted = formatRequest(input);
     const idempotencyKey = buildIdempotencyKey(input);
     try {
-        const request = await client.createRequest({
+        const requestPayload = {
             type: "approval",
             question: formatted.question,
             context: formatted.context,
-            callback_url: config.callbackUrl,
             priority: config.priority,
             required_role: config.requiredRole,
-            metadata: formatted.metadata,
+            metadata: {
+                ...formatted.metadata,
+                idempotency_key: idempotencyKey,
+            },
             sla_minutes: config.slaMinutes,
             idempotency_key: idempotencyKey,
-        });
+        };
+        if (config.callbackUrl) {
+            requestPayload.callback_url = config.callbackUrl;
+        }
+        const request = await client.createRequest(requestPayload);
         activeRequestId = request.id;
         const result = await client.waitForResponse(request.id, config.pollIntervalMs, config.timeoutMs);
         const approved = responseApproved(result.response ?? null);

package/dist/types.d.ts

@@ -23,5 +23,5 @@ export interface CentcomClaudeConfig {
     slaMinutes?: number;
     requiredRole?: string;
     fallback: PermissionDecision;
-    callbackUrl: string;
+    callbackUrl?: string;
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@contro1/claude-code",
-  "version": "0.1.1",
-  "description": "CENTCOM approval hook for Claude Code PreToolUse",
+  "version": "0.1.2",
+  "description": "CENTCOM approval hook for Claude Code PermissionRequest",
   "type": "module",
   "main": "dist/hook.js",
   "types": "dist/hook.d.ts",