@booklib/claude-ado-confirm-hook

Azure DevOps Confirmation Hook for Claude Code

Native macOS dialog for reviewing Azure DevOps MCP write operations before they execute. See what's changing, approve or cancel.

Update — word-level diff	Create — field summary	Batch update — table view

Why

The Azure DevOps MCP server lets Claude Code create, update, and link work items directly. But write operations execute immediately — no visual preview of what's about to change.

This hook intercepts MCP write calls and shows a native macOS dialog with:

• Updates: side-by-side diff with word-level highlighting
• Batch updates: table with old → new values per item
• Creates: field summary of the new work item
• Links, comments, PRs: formatted preview

Install

npx @booklib/claude-ado-confirm-hook

This copies the hook files to .claude/hooks/, compiles the native dialog, and prints the settings config to add.

Manual install

If you prefer not to use npm:

mkdir -p .claude/hooks
curl -sL https://raw.githubusercontent.com/ZLStas/claude-code-ado-confirm-hook/main/hooks/ado-confirm.sh -o .claude/hooks/ado-confirm.sh
curl -sL https://raw.githubusercontent.com/ZLStas/claude-code-ado-confirm-hook/main/hooks/ado-confirm-dialog.py -o .claude/hooks/ado-confirm-dialog.py
curl -sL https://raw.githubusercontent.com/ZLStas/claude-code-ado-confirm-hook/main/hooks/ado-webview.swift -o .claude/hooks/ado-webview.swift
chmod +x .claude/hooks/ado-confirm.sh .claude/hooks/ado-confirm-dialog.py
swiftc -framework Cocoa -framework WebKit -O -o .claude/hooks/ado-webview .claude/hooks/ado-webview.swift

Configure

Add to .claude/settings.local.json:

{
  "hooks": {
    "PreToolUse": [
      {
        "matcher": "mcp__azure-devops__wit_create_work_item|mcp__azure-devops__wit_update_work_item|mcp__azure-devops__wit_update_work_items_batch|mcp__azure-devops__wit_add_child_work_items|mcp__azure-devops__wit_add_work_item_comment|mcp__azure-devops__repo_create_pull_request|mcp__azure-devops__wit_work_items_link|mcp__azure-devops__wit_add_artifact_link|mcp__azure-devops__repo_create_branch",
        "hooks": [
          {
            "type": "command",
            "command": ".claude/hooks/ado-confirm.sh",
            "timeout": 30000,
            "statusMessage": "Awaiting confirmation for Azure DevOps action..."
          }
        ]
      }
    ]
  }
}

The hook reads your org name and access token from .mcp.json automatically — no hardcoded config needed.

How It Works

• Claude Code calls an Azure DevOps MCP tool (create, update, link, etc.)
• The hook intercepts the call before execution
• For updates: fetches current values from Azure DevOps API to show the diff
• Renders an HTML view in a native macOS WebView window
• You click Approve (or Enter) to proceed, Cancel (or Escape) to block

The dialog appears on your current screen — no desktop switching.

Requirements

• macOS (Cocoa WebView)
• Xcode Command Line Tools (for swiftc)
• jq, curl (for the shell script)
• Azure DevOps MCP server configured in .mcp.json

Files

File	What it does
ado-confirm.sh	Hook entry point. Enriches payloads with current values for diffs.
ado-confirm-dialog.py	Builds HTML for each operation type. Handles diff, batch fetch, name normalization.
ado-webview.swift	Native macOS window with WKWebView. Renders HTML, handles Approve/Cancel.

License

MIT