@ory/claude-code 0.1.0

package/dist/settings.js

@@ -0,0 +1,67 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateSettings = generateSettings;
+exports.generateInstalledSettings = generateInstalledSettings;
+exports.generateDevSettings = generateDevSettings;
+const path = __importStar(require("node:path"));
+const argus_1 = require("@ory/argus");
+/**
+ * Generate the .claude/settings.local.json that configures Ory hooks.
+ */
+function generateSettings(hookScriptPath) {
+    const cmd = `node ${hookScriptPath}`;
+    return {
+        hooks: {
+            SessionStart: (0, argus_1.matcherHookEntry)(cmd),
+            PreToolUse: (0, argus_1.matcherHookEntry)(cmd),
+            PostToolUse: (0, argus_1.matcherHookEntry)(cmd),
+            PermissionRequest: (0, argus_1.matcherHookEntry)(cmd),
+        },
+    };
+}
+/**
+ * Generate settings assuming the plugin is installed via npm/pnpm.
+ */
+function generateInstalledSettings() {
+    return generateSettings("ory-claude-hook");
+}
+/**
+ * Generate settings pointing to a local dev build.
+ */
+function generateDevSettings(packageDir) {
+    const hookPath = path.resolve(packageDir, "dist", "hook.js");
+    return generateSettings(hookPath);
+}

package/dist/types.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Claude Code hook event payload delivered on stdin.
+ * See: https://code.claude.com/docs/en/hooks
+ */
+export interface ClaudeCodeHookInput {
+    session_id: string;
+    transcript_path: string;
+    cwd: string;
+    permission_mode?: "default" | "plan" | "acceptEdits" | "auto" | "dontAsk" | "bypassPermissions" | string;
+    hook_event_name: string;
+    tool_name?: string;
+    tool_input?: Record<string, unknown>;
+    tool_response?: Record<string, unknown>;
+    tool_use_id?: string;
+    /** PostToolUseFailure — tool error payload. */
+    tool_error?: unknown;
+    model?: string;
+    /** SessionStart matcher: startup | resume | clear | … */
+    source?: string;
+    prompt?: string;
+    subagent_type?: string;
+    subagent_prompt?: string;
+    subagent_response?: string;
+    agent_id?: string;
+    agent_type?: string;
+    /** Matcher: clear | resume | logout | prompt_input_exit | … */
+    reason?: string;
+    stop_hook_active?: boolean;
+    last_assistant_message?: string;
+}
+/**
+ * Claude Code hook output written to stdout.
+ *
+ * Top-level `decision: "block"` is honored on blocking-capable events
+ * (PreToolUse, UserPromptSubmit, PostToolUse, Stop, …). PermissionRequest
+ * uses the structured `hookSpecificOutput.decision.{behavior}` shape below
+ * instead — the top-level `decision` is ignored there.
+ */
+export interface ClaudeCodeHookOutput {
+    continue?: boolean;
+    decision?: "block";
+    reason?: string;
+    stopReason?: string;
+    suppressOutput?: boolean;
+    systemMessage?: string;
+    updatedInput?: Record<string, unknown>;
+    hookSpecificOutput?: ClaudeCodeHookSpecificOutput;
+}
+/**
+ * Per-event structured output. Field shape depends on `hookEventName`:
+ *   - PreToolUse: `permissionDecision` + `permissionDecisionReason`,
+ *     plus optional `permissionRules` to persist a rule for future calls.
+ *   - PermissionRequest: nested `decision: { behavior, updatedInput?, permissionRules? }`.
+ *     Omit `decision` entirely to fall through to Claude's normal user prompt.
+ *   - SessionStart / UserPromptSubmit: `additionalContext` for context injection.
+ */
+export interface ClaudeCodeHookSpecificOutput {
+    hookEventName?: string;
+    permissionDecision?: "allow" | "deny" | "ask" | "defer";
+    permissionDecisionReason?: string;
+    decision?: {
+        behavior: "allow" | "deny";
+        updatedInput?: Record<string, unknown>;
+        permissionRules?: string[];
+    };
+    permissionRules?: string[];
+    additionalContext?: string;
+    /** Set when the plugin needs the agent to prompt the user for config. */
+    oryConfigRequired?: boolean;
+    message?: string;
+    [key: string]: unknown;
+}

package/dist/types.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/hooks/hooks.json

@@ -0,0 +1,104 @@
+{
+  "description": "Ory Claude Code Hooks",
+  "hooks": {
+    "SessionStart": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "npx ory-claude-hook"
+          }
+        ]
+      }
+    ],
+    "SessionEnd": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "npx ory-claude-hook"
+          }
+        ]
+      }
+    ],
+    "UserPromptSubmit": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "npx ory-claude-hook"
+          }
+        ]
+      }
+    ],
+    "PreToolUse": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "npx ory-claude-hook"
+          }
+        ]
+      }
+    ],
+    "PostToolUse": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "npx ory-claude-hook"
+          }
+        ]
+      }
+    ],
+    "PostToolUseFailure": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "npx ory-claude-hook"
+          }
+        ]
+      }
+    ],
+    "SubagentStart": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "npx ory-claude-hook"
+          }
+        ]
+      }
+    ],
+    "SubagentStop": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "npx ory-claude-hook"
+          }
+        ]
+      }
+    ],
+    "PermissionRequest": [
+      {
+        "matcher": "",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "npx ory-claude-hook"
+          }
+        ]
+      }
+    ]
+  }
+}

package/package.json

@@ -0,0 +1,86 @@
+{
+  "name": "@ory/claude-code",
+  "version": "0.1.0",
+  "description": "Ory plugin for Claude Code: scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call",
+  "license": "Apache-2.0",
+  "homepage": "https://ory.com",
+  "keywords": [
+    "ory",
+    "claude",
+    "claude-code",
+    "anthropic",
+    "hooks",
+    "plugin",
+    "identity",
+    "identity-management",
+    "iam",
+    "authentication",
+    "authorization",
+    "access-control",
+    "permissions",
+    "rbac",
+    "zanzibar",
+    "oauth",
+    "oauth2",
+    "openid-connect",
+    "oidc",
+    "session",
+    "mfa",
+    "sso",
+    "audit",
+    "audit-log",
+    "compliance",
+    "agent",
+    "ai-agent",
+    "agent-security",
+    "guardrails",
+    "llm",
+    "mcp",
+    "mcp-server",
+    "tracing",
+    "distributed-tracing",
+    "observability",
+    "kratos",
+    "keto",
+    "hydra"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "bin": {
+    "claude-code": "dist/cli/main.js",
+    "ory-claude": "dist/cli/main.js",
+    "ory-claude-hook": "dist/hook.js",
+    "ory-claude-setup": "dist/cli/setup.js"
+  },
+  "files": [
+    ".claude-plugin",
+    "dist",
+    "hooks",
+    ".mcp.json",
+    "!dist/dev",
+    "!dist/**/*.tsbuildinfo"
+  ],
+  "dependencies": {
+    "@ory/argus": "0.1.0"
+  },
+  "engines": {
+    "node": ">=24"
+  },
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist *.tsbuildinfo",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "typecheck": "tsc --noEmit",
+    "dev": "node dist/dev/launcher.js"
+  }
+}