mirror of
https://github.com/alexbelgium/hassio-addons.git
synced 2026-08-21 04:13:32 +02:00
f990177df8
The /usr/local/bin/claude wrapper hardcoded HEADROOM_BIN as /usr/local/bin/headroom, but the binary is installed at /usr/bin/headroom (symlink to /lsiopy/bin/headroom). The -x check therefore always failed and terminal Claude Code sessions never routed through the Headroom proxy at 127.0.0.1:8787. Resolve the binary with "command -v headroom" instead; an empty result still fails the -x check safely and falls back to launching Claude Code directly. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
54 lines
2.0 KiB
Plaintext
54 lines
2.0 KiB
Plaintext
#!/usr/bin/with-contenv bashio
|
|
# shellcheck shell=bash
|
|
set -o pipefail
|
|
|
|
REAL_CLAUDE="/usr/bin/claude"
|
|
HEADROOM_BIN="$(command -v headroom || true)"
|
|
HEADROOM_URL="http://127.0.0.1:8787"
|
|
PERMISSION_MODE="$(bashio::config 'permission_mode')"
|
|
declare -a CLAUDE_PERMISSION_ARGS=()
|
|
|
|
case "$PERMISSION_MODE" in
|
|
bypass)
|
|
CLAUDE_PERMISSION_ARGS+=("--dangerously-skip-permissions")
|
|
;;
|
|
auto)
|
|
CLAUDE_PERMISSION_ARGS+=("--permission-mode" "auto")
|
|
;;
|
|
strict|"")
|
|
;;
|
|
*)
|
|
echo "claude wrapper: unknown permission_mode '${PERMISSION_MODE}', using strict mode" >&2
|
|
;;
|
|
esac
|
|
|
|
if [ ! -x "$REAL_CLAUDE" ]; then
|
|
echo "claude wrapper: ${REAL_CLAUDE} is unavailable" >&2
|
|
exit 127
|
|
fi
|
|
|
|
# Claude Code rejects bypass mode when the effective UID is 0. Normal Desktop sessions run
|
|
# as abc, which startup remaps to a non-root UID when bypass is selected. Also handle a user
|
|
# invoking this wrapper directly from a root container console by dropping to abc here.
|
|
if [ "$PERMISSION_MODE" = "bypass" ] && [ "$(id -u)" -eq 0 ]; then
|
|
if command -v s6-setuidgid > /dev/null 2>&1 && [ "$(id -u abc)" -ne 0 ]; then
|
|
exec s6-setuidgid abc "$0" "$@"
|
|
fi
|
|
echo "claude wrapper: bypass mode requires a non-root runtime user, but abc is still UID 0" >&2
|
|
exit 1
|
|
fi
|
|
|
|
if bashio::config.true 'install_headroom' && bashio::config.true 'headroom_wrap_claude_code'; then
|
|
if [ -x "$HEADROOM_BIN" ] && curl -fsS --max-time 2 "${HEADROOM_URL}/health" > /dev/null 2>&1; then
|
|
# Put /usr/bin before /usr/local/bin while Headroom resolves its upstream `claude`
|
|
# executable; otherwise it would resolve this wrapper recursively.
|
|
export HEADROOM_CONTEXT_TOOL="rtk"
|
|
exec env PATH="/usr/bin:/bin:/usr/local/bin" \
|
|
"$HEADROOM_BIN" wrap claude --no-proxy -- \
|
|
"${CLAUDE_PERMISSION_ARGS[@]}" "$@"
|
|
fi
|
|
echo "claude wrapper: Headroom proxy is unavailable; launching Claude Code directly" >&2
|
|
fi
|
|
|
|
exec "$REAL_CLAUDE" "${CLAUDE_PERMISSION_ARGS[@]}" "$@"
|