didericis-claude f0d27863c2 feat(claude): add forward_host_credentials support ...

Reads the host's Claude OAuth session key from ~/.claude.json at launch
and forwards it only to the egress sidecar (never to the agent), placing
a placeholder CLAUDE_CODE_OAUTH_TOKEN in the agent env so Claude Code
starts without seeing the real credential.

Mirrors the existing Codex forward_host_credentials flow (PRD 0029).
Adds claude_auth.py to extract and validate the sessionKey, a
CLAUDE_HOST_CREDENTIAL_TOKEN_REF constant in egress.py, and updates
manifest_agent.py to allow the flag for both 'codex' and 'claude'
templates. Also adds a mutual-exclusion check that rejects setting
both auth_token and forward_host_credentials together.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-01 21:14:37 +00:00

..

backend

fix(git-gate): defer dynamic key provisioning

2026-07-01 12:45:46 -04:00

cli

feat(cli): add headless launch mode for orchestrators

2026-06-30 15:08:14 -04:00

contrib

feat(claude): add forward_host_credentials support

2026-07-01 21:14:37 +00:00

orchestrator

feat: fold bot-bottle-orchestrator into bot_bottle/orchestrator subpackage

2026-07-01 17:18:28 +00:00

__init__.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

agent_provider.py

feat(claude): add forward_host_credentials support

2026-07-01 21:14:37 +00:00

bottle_state.py

feat(#269): separate agent and bottle selection at launch time

2026-06-25 16:13:19 -04:00

deploy_key_provisioner.py

fix(deploy-key): raise DeployKeyCollisionError on 422 key conflicts

2026-06-25 02:23:12 +00:00

dlp_detectors.py

perf(dlp): linearize injection proximity check; bound variant cache; dedup supervise schema

2026-06-26 23:22:18 -04:00

egress_addon_core.py

refactor(egress): split DLP detector-config parsing into its own module

2026-06-26 17:31:35 -04:00

egress_addon.py

fix(egress): strip injected Authorization and redact bodies in LOG_FULL path

2026-06-25 00:32:42 -04:00

egress_dlp_config.py

refactor(egress): split DLP detector-config parsing into its own module

2026-06-26 17:31:35 -04:00

egress_entrypoint.sh

chore: remove all pipelock references from tests, docs, and non-pipelock source

2026-06-04 21:54:06 +00:00

egress.py

feat(claude): add forward_host_credentials support

2026-07-01 21:14:37 +00:00

env.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

git_gate_provision.py

fix(git-gate): defer dynamic key provisioning

2026-07-01 12:45:46 -04:00

git_gate_render.py

refactor(git-gate): split git_gate.py into render / provision / control

2026-06-26 21:19:47 -04:00

git_gate.py

fix(git-gate): defer dynamic key provisioning

2026-07-01 12:45:46 -04:00

git_http_backend.py

fix(git-gate): inline GIT_GATE_TIMEOUT_SECS to fix git-http ImportError

2026-07-01 11:53:26 -04:00

log.py

feat(log): add leveled severity and structured context to log wrappers

2026-06-24 15:37:57 -04:00

manifest_agent.py

feat(claude): add forward_host_credentials support

2026-07-01 21:14:37 +00:00

manifest_bottle.py

refactor(manifest): break import cycle by extracting ManifestBottle to a leaf module

2026-06-26 23:42:03 -04:00

manifest_egress.py

Add dlp.outbound_on_match policy (block | redact | supervise)

2026-06-24 16:50:13 -04:00

manifest_extends.py

refactor(manifest): break import cycle by extracting ManifestBottle to a leaf module

2026-06-26 23:42:03 -04:00

manifest_git.py

refactor: make static the default branch in _parse_key_config

2026-06-19 22:25:14 +00:00

manifest_loader.py

refactor(manifest): break import cycle by extracting ManifestBottle to a leaf module

2026-06-26 23:42:03 -04:00

manifest_schema.py

fix(skills): validate skill names and quote provisioning paths

2026-06-27 02:15:30 -04:00

manifest_util.py

refactor: address PR review feedback — de-privatize helpers and rename modules

2026-06-03 00:33:02 -04:00

manifest.py

refactor(manifest): break import cycle by extracting ManifestBottle to a leaf module

2026-06-26 23:42:03 -04:00

sidecar_init.py

fix(macos-container): support git-gate launch

2026-06-10 22:25:00 -04:00

supervise_server.py

perf(dlp): linearize injection proximity check; bound variant cache; dedup supervise schema

2026-06-26 23:22:18 -04:00

supervise.py

feat!: remove capability apply

2026-06-25 08:58:28 +00:00

util.py

refactor: address PR review feedback — de-privatize helpers and rename modules

2026-06-03 00:33:02 -04:00

workspace.py

fix: resolve pyright type errors

2026-06-03 23:25:41 -04:00

yaml_subset.py

chore: Replace die with YamlSubsetError

2026-06-08 23:05:11 -04:00