clawleash 0.1.0 → 0.1.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clawleash",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Approve or deny Claude Code permission prompts from your phone — so long autonomous runs never stall while you're away from the desk. Self-hosted, token-gated, over Tailscale or LAN.",
   "keywords": [
     "claude-code",

package/src/config.js

@@ -5,6 +5,7 @@ const os = require("os");
 const fs = require("fs");
 const path = require("path");
 const crypto = require("crypto");
+const { sanitizeNtfyTopic } = require("./notify");
 
 const DEFAULT_PORT = 4271;
 
@@ -41,6 +42,8 @@ function ensure() {
   if (!cfg.port) { cfg.port = Number(process.env.CLAWLEASH_PORT) || DEFAULT_PORT; changed = true; }
   if (typeof cfg.approvals !== "boolean") { cfg.approvals = true; changed = true; }
   if (typeof cfg.ntfyTopic !== "string") { cfg.ntfyTopic = ""; changed = true; }
+  const cleanTopic = sanitizeNtfyTopic(cfg.ntfyTopic);
+  if (cleanTopic !== cfg.ntfyTopic) { cfg.ntfyTopic = cleanTopic; changed = true; }
   if (changed) save(cfg);
   return cfg;
 }

package/src/notify.js

@@ -3,8 +3,19 @@
 // The user installs the ntfy app and subscribes to their topic; we POST to it.
 const https = require("https");
 
+// ntfy topics must be URL-safe ([-_A-Za-z0-9]{1,64}). Clean anything else so a
+// topic with spaces/punctuation doesn't silently fail to deliver.
+function sanitizeNtfyTopic(value) {
+  return String(value == null ? "" : value)
+    .replace(/[^A-Za-z0-9_-]+/g, "-")
+    .replace(/-{2,}/g, "-")
+    .replace(/^[-_]+|[-_]+$/g, "")
+    .slice(0, 64);
+}
+
 function pushNtfy(topic, title, message, opts = {}) {
-  if (!topic || typeof topic !== "string") return;
+  const t = sanitizeNtfyTopic(topic);
+  if (!t) return;
   try {
     const body = Buffer.from(String(message == null ? "" : message), "utf8");
     // Title header must be ASCII; keep details in the (UTF-8) body.
@@ -17,7 +28,7 @@ function pushNtfy(topic, title, message, opts = {}) {
     if (opts.tags) headers.Tags = String(opts.tags);
     if (opts.priority) headers.Priority = String(opts.priority);
     const req = https.request(
-      { hostname: "ntfy.sh", path: "/" + encodeURIComponent(topic), method: "POST", headers, timeout: 4000 },
+      { hostname: "ntfy.sh", path: "/" + t, method: "POST", headers, timeout: 4000 },
       (res) => { res.resume(); }
     );
     req.on("error", () => {});
@@ -27,4 +38,4 @@ function pushNtfy(topic, title, message, opts = {}) {
   } catch { /* best-effort */ }
 }
 
-module.exports = { pushNtfy };
+module.exports = { pushNtfy, sanitizeNtfyTopic };