
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
@unclick/channel
Advanced tools
UnClick Channel plugin for Claude Code - routes admin chat through your Claude Code session so no separate AI key is needed.
UnClick Channel plugin for Claude Code. Routes the UnClick admin chat through your local Claude Code session so you do not need a separate AI API key.
chat_messages rows for your api key./memory/admin, the UI writes a
pending row. The plugin picks it up and pushes the message into your
Claude Code session.unclick_channel_respond tool.The plugin also exposes unclick_save_conversation_turn, a small fallback
tool for Orchestrator continuity. Use it when a seat is running through this
channel but the normal UnClick MCP save_conversation_turn tool is not
available. The receipt-first rule is: when a real chat message wakes the seat,
save that accepted turn first and keep the returned turn_id as the receipt.
It saves one external chat turn through
admin_conversation_turn_ingest, so /admin/orchestrator can show and search
the turn. If neither save path is available, the seat should say UNTETHERED
with any partial receipt it captured instead of silently continuing.
The plugin also exposes unclick_orchestrator_context_read. Call it
immediately after saving the accepted turn and before deciding what the user
meant. The required order is: Log -> Read -> Decide -> Reply -> Log reply.
This stops a seat from treating a test cue, proof marker, or check phrase as a
real operator request without reading nearby Orchestrator context first. If the
read fails, say CONTEXT_UNREAD or UNTETHERED instead of guessing.
The plugin also exposes unclick_orchestrator_tether_check. Call it on startup
or heartbeat to save a harmless synthetic self-check turn and confirm
/admin/orchestrator search can find it. The backup order is:
save_conversation_turn tool;unclick_save_conversation_turn tool;admin_conversation_turn_ingest API directly;unclick_orchestrator_tether_check;UNTETHERED with the missing path and any captured receipt ids.Every 30 seconds the plugin POSTs a heartbeat to admin_channel_heartbeat
so the admin UI knows the channel is online.
npm install -g @unclick/channel
export UNCLICK_API_KEY=your_api_key
export UNCLICK_SUPABASE_URL=https://<project>.supabase.co
export UNCLICK_SUPABASE_ANON=<anon key>
claude --channel @unclick/channel
If you are on a preview build that requires loading development channels:
claude --dangerously-load-development-channels --channel @unclick/channel
| Variable | Required | Notes |
|---|---|---|
UNCLICK_API_KEY | yes | Your UnClick API key (starts with uc_ or agt_). |
UNCLICK_SUPABASE_URL | yes | The UnClick project URL. |
UNCLICK_SUPABASE_ANON | yes | UnClick project anon key (Realtime only). |
UNCLICK_API_BASE | no | Defaults to https://unclick.world. |
UNCLICK_CHANNEL_POLL | no | Fallback poll interval in ms (default 5000). |
FAQs
UnClick Channel plugin for Claude Code - routes admin chat through your Claude Code session so no separate AI key is needed.
We found that @unclick/channel demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.