@delt/claude-alarm 0.6.0 → 0.6.2

package/README.md

@@ -19,6 +19,7 @@ Monitor and interact with multiple Claude Code sessions from a web dashboard. Ge
 - **Webhook Support** — Slack, Discord, or custom webhook endpoints
 - **Token Auth** — Auto-generated secure access
 - **Dark / Light Mode** — Theme toggle with persistence
+- **Permission Relay** — Approve/deny tool calls from dashboard or phone
 - **Multi-Machine** — Remote hub access support
 
 ## Quick Start
@@ -167,6 +168,17 @@ Two-way messaging with Claude sessions via Telegram — text and images.
 }
 ```
 
+## Permission Relay
+
+Approve or deny Claude's tool calls remotely — from the dashboard or your phone — without `--dangerously-skip-permissions`.
+
+When Claude wants to run a tool (Bash, Write, Edit, etc.), a permission request appears on the dashboard with **Allow / Deny** buttons. Keyboard shortcuts: **Enter** = Allow, **Esc** = Deny.
+
+- Works with Claude Code **v2.1.81+**
+- No extra setup needed — automatically enabled
+- Local terminal prompt stays open; whichever answer arrives first (local or dashboard) is applied
+- Parsed previews: Bash commands show `$ command`, file operations show file paths
+
 ## Remote Access
 
 <p align="center">

package/dist/cli.js

@@ -314,6 +314,8 @@ var init_telegram = __esm({
       onMessageToSession;
       // Callback: when an image arrives from Telegram for a session
       onImageToSession;
+      // Callback: when a permission verdict arrives from Telegram
+      onPermissionVerdict;
       // Callback: get current sessions list
       getSessions;
       // Pending messages for session selection
@@ -398,7 +400,9 @@ ${message}`;
           if (data.ok && data.result.length > 0) {
             for (const update of data.result) {
               this.offset = update.update_id + 1;
-              if (update.message) {
+              if (update.callback_query) {
+                this.handleCallbackQuery(update.callback_query);
+              } else if (update.message) {
                 this.handleIncomingMessage(update.message);
               }
             }
@@ -524,6 +528,74 @@ ${sessionList}`);
       getLabel(session) {
         return session.cwd?.replace(/^.*[/\\]/, "") || session.name;
       }
+      /** Send a permission request with inline buttons */
+      async sendPermissionRequest(sessionId2, sessionLabel, requestId, toolName, description, inputPreview) {
+        let preview = inputPreview;
+        try {
+          const p = JSON.parse(inputPreview);
+          if (p.command) preview = `$ ${p.command}`;
+          else if (p.file_path) preview = p.file_path + (p.content ? "\n" + p.content.slice(0, 150) : "");
+        } catch {
+          const cmdMatch = inputPreview.match(/"command"\s*:\s*"((?:[^"\\]|\\.)*)"/);
+          if (cmdMatch) preview = `$ ${cmdMatch[1]}`;
+        }
+        const text = `\u26A0\uFE0F <b>Permission Request</b>
+
+\u{1F4C2} <b>${this.escHtml(sessionLabel)}</b>
+\u{1F527} <code>${this.escHtml(toolName)}</code> \u2014 ${this.escHtml(description)}
+
+<pre>${this.escHtml(preview.slice(0, 300))}</pre>`;
+        const replyMarkup = {
+          inline_keyboard: [[
+            { text: "\u2705 Allow", callback_data: `perm:allow:${sessionId2}:${requestId}` },
+            { text: "\u274C Deny", callback_data: `perm:deny:${sessionId2}:${requestId}` }
+          ]]
+        };
+        await this.sendMessage(text, void 0, replyMarkup);
+      }
+      async handleCallbackQuery(query) {
+        if (!query.data?.startsWith("perm:")) return;
+        const parts = query.data.split(":");
+        if (parts.length < 4) return;
+        const [, action, sessionId2, requestId] = parts;
+        const behavior = action === "allow" ? "allow" : "deny";
+        if (this.onPermissionVerdict) {
+          this.onPermissionVerdict(sessionId2, requestId, behavior);
+        }
+        await this.answerCallbackQuery(query.id, behavior === "allow" ? "\u2705 Allowed" : "\u274C Denied");
+        if (query.message) {
+          const label = behavior === "allow" ? "\u2705 <b>Allowed</b>" : "\u274C <b>Denied</b>";
+          const original = query.message.text || "";
+          await this.editMessageText(query.message.chat.id, query.message.message_id, original + `
+
+${label}`);
+        }
+      }
+      async answerCallbackQuery(callbackQueryId, text) {
+        try {
+          await fetch(`${this.apiUrl}/answerCallbackQuery`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ callback_query_id: callbackQueryId, text })
+          });
+        } catch (err) {
+          logger.warn(`Telegram answerCallbackQuery error: ${err.message}`);
+        }
+      }
+      async editMessageText(chatId, messageId, text) {
+        try {
+          await fetch(`${this.apiUrl}/editMessageText`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({ chat_id: chatId, message_id: messageId, text, parse_mode: "HTML" })
+          });
+        } catch (err) {
+          logger.warn(`Telegram editMessageText error: ${err.message}`);
+        }
+      }
+      escHtml(s) {
+        return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+      }
       /** Update config (e.g., from dashboard settings) */
       updateConfig(config2) {
         const wasPolling = this.polling;
@@ -863,6 +935,11 @@ var init_server = __esm({
               inputPreview: msg.inputPreview,
               timestamp: msg.timestamp
             });
+            if (this.telegramBot) {
+              const session = this.sessions.get(msg.sessionId);
+              const label = this.getSessionLabel(session);
+              this.telegramBot.sendPermissionRequest(msg.sessionId, label, msg.requestId, msg.toolName, msg.description, msg.inputPreview);
+            }
             break;
           }
         }
@@ -985,6 +1062,14 @@ var init_server = __esm({
             logger.info(`Telegram photo forwarded to session: ${sessionId2}`);
           }
         };
+        this.telegramBot.onPermissionVerdict = (sessionId2, requestId, behavior) => {
+          const channelWs = this.channelSockets.get(sessionId2);
+          if (channelWs?.readyState === WebSocket.OPEN) {
+            const msg = { type: "permission_response", sessionId: sessionId2, requestId, behavior };
+            channelWs.send(JSON.stringify(msg));
+            logger.info(`Telegram permission verdict [${requestId}]: ${behavior} -> session ${sessionId2}`);
+          }
+        };
         this.notifier.configure({ telegramBot: this.telegramBot });
         this.telegramBot.startPolling();
         logger.info("Telegram bot initialized");