Integrations
Claude Code
Wire Tailrace as Claude Code PreToolUse / PostToolUse hooks - block secrets, tokenize PII, audit tool I/O.
Enforce data policy on every Claude Code tool call. PreToolUse denies secrets and rewrites tokenized PII before the tool runs. PostToolUse records audit lines without rewriting results in v0.1.
Quickstart
pnpm add -D @tailrace/cli
npx @tailrace/cli init
npx @tailrace/cli install-hooksEnsure tailrace is on PATH inside Claude Code sessions (workspace bin, global install, or wrap the installed command with npx @tailrace/cli hook if needed).
Boundaries covered
| Claude Code event | Tailrace boundary | Direction | v0.1 behavior |
|---|---|---|---|
PreToolUse tool_input | { kind: "tool", name, direction: "out" } | Outbound | deny / tokenize via updatedInput |
PostToolUse tool_response | { kind: "tool", name, direction: "in" } | Inbound | audit only |
Identity agent defaults to "claude-code". Workflow id is Claude Code session_id.
Settings shape
install-hooks merges (non-destructively):
{
"hooks": {
"PreToolUse": [
{
"matcher": "*",
"hooks": [{ "type": "command", "command": "tailrace hook" }]
}
],
"PostToolUse": [
{
"matcher": "*",
"hooks": [{ "type": "command", "command": "tailrace hook" }]
}
]
}
}Runnable example
git clone <repo>
cd tailrace
pnpm install
pnpm --filter example-claude-code demo:2Scripted stdin fixtures exercise deny + tokenize + audit without a live Claude Code binary. Interactive walkthrough: examples/claude-code.