didericis-claude f0d27863c2 feat(claude): add forward_host_credentials support ...

Reads the host's Claude OAuth session key from ~/.claude.json at launch
and forwards it only to the egress sidecar (never to the agent), placing
a placeholder CLAUDE_CODE_OAUTH_TOKEN in the agent env so Claude Code
starts without seeing the real credential.

Mirrors the existing Codex forward_host_credentials flow (PRD 0029).
Adds claude_auth.py to extract and validate the sessionKey, a
CLAUDE_HOST_CREDENTIAL_TOKEN_REF constant in egress.py, and updates
manifest_agent.py to allow the flag for both 'codex' and 'claude'
templates. Also adds a mutual-exclusion check that rejects setting
both auth_token and forward_host_credentials together.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-01 21:14:37 +00:00

..

orchestrator

fix: resolve pylint/pyright issues in new test files

2026-07-01 19:47:31 +00:00

__init__.py

test: isolate HOME for the unit suite (hermetic audit/queue/state)

2026-06-26 20:35:47 -04:00

test_agent_provider.py

feat(claude): add forward_host_credentials support

2026-07-01 21:14:37 +00:00

test_backend_freezer.py

fix(smolmachines): commit via exec-tar instead of stop→pack

2026-06-23 16:53:41 -04:00

test_backend_parity.py

fix: resolve all remaining 179 test file type errors with type: ignore

2026-06-04 11:30:51 -04:00

test_backend_prepare.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

test_backend_selection.py

fix(macos-container): make backend the macos default

2026-06-10 22:25:00 -04:00

test_backend_terminal.py

feat: remove cyan and white from color palette

2026-06-22 19:09:22 +00:00

test_backend_workspace.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

test_bottle_state.py

feat!: remove capability apply

2026-06-25 08:58:28 +00:00

test_cli_cleanup_cross_backend.py

fix: achieve zero pyright errors by excluding test files from type checking

2026-06-04 11:27:23 -04:00

test_cli_commit.py

refactor(commit): introduce Freezer class hierarchy across backends

2026-06-23 16:53:41 -04:00

test_cli_dispatch.py

ci(coverage): risk-weighted coverage policy + diff-coverage gate

2026-06-25 21:29:08 -04:00

test_cli_start_backend_flag.py

feat(backend): default to smolmachines

2026-06-09 03:27:31 +00:00

test_cli_start_headless.py

feat(cli): add headless launch mode for orchestrators

2026-06-30 15:08:14 -04:00

test_cli_start_selector.py

fix(start): show bottle lineage root-first with -> arrows

2026-06-25 16:13:19 -04:00

test_cli_start_settle.py

feat!: remove capability apply

2026-06-25 08:58:28 +00:00

test_cli_tui.py

feat(tui,start): space/enter split, bottle lineage, YAML preflight

2026-06-25 16:13:19 -04:00

test_codex_auth.py

refactor: move codex_auth into contrib/codex

2026-06-07 11:35:35 -04:00

test_compose.py

feat!: remove capability apply

2026-06-25 08:58:28 +00:00

test_contrib_claude_auth.py

feat(claude): add forward_host_credentials support

2026-07-01 21:14:37 +00:00

test_contrib_claude_provider.py

feat(cli): add headless launch mode for orchestrators

2026-06-30 15:08:14 -04:00

test_contrib_codex_provider.py

feat(cli): add headless launch mode for orchestrators

2026-06-30 15:08:14 -04:00

test_contrib_gitea_client.py

fix: resolve pylint/pyright issues in new test files

2026-07-01 19:47:31 +00:00

test_contrib_gitea_deploy_key.py

fix: add explicit timeouts to subprocess and HTTP calls in git-gate paths

2026-06-25 04:12:43 -04:00

test_contrib_pi_provider.py

feat(cli): add headless launch mode for orchestrators

2026-06-30 15:08:14 -04:00

test_deploy_key_provisioner.py

refactor: fix unused imports, long lines, and type issues

2026-06-03 23:04:17 -04:00

test_dlp_detectors.py

perf(dlp): linearize injection proximity check; bound variant cache; dedup supervise schema

2026-06-26 23:22:18 -04:00

test_docker_bottle.py

fix: route remote control through provider startup args

2026-06-25 03:08:47 -04:00

test_docker_cleanup.py

feat!: remove capability apply

2026-06-25 08:58:28 +00:00

test_docker_enumerate_active.py

refactor: move bottle_state.py to top-level bot_bottle package

2026-06-08 23:05:14 -04:00

test_docker_launch_committed_image.py

fix: correct Manifest/ManifestIndex usage and add missing type annotations in tests

2026-06-23 16:53:41 -04:00

test_docker_launch_teardown.py

refactor(types): move loaded manifest from BottleSpec to BottlePlan

2026-06-22 23:54:02 -04:00

test_docker_provision_git_user.py

feat(cli): add headless launch mode for orchestrators

2026-06-30 15:08:14 -04:00

test_docker_util_image.py

feat(cli): add commit command to snapshot running bottle state

2026-06-23 16:53:41 -04:00

test_egress_addon_core.py

refactor: remove load_routes, use load_config(...).routes in tests

2026-06-25 06:07:47 +00:00

test_egress_addon_log_redaction.py

fix: satisfy pyright for log redaction tests

2026-06-25 00:32:42 -04:00

test_egress_addon_request_flow.py

test(egress): ratchet egress_addon coverage to >=90%

2026-06-25 21:54:36 -04:00

test_egress_apply.py

fix(egress): validate proposed full config

2026-06-25 05:25:42 +00:00

test_egress_core_parsing.py

test(egress): ratchet egress_addon_core coverage to >=90%

2026-06-25 22:04:27 -04:00

test_egress_entrypoint.py

refactor!: rename project to bot-bottle

2026-05-28 17:56:14 -04:00

test_egress.py

fix: escape quotes/newlines in YAML and gitconfig emitters

2026-06-25 04:23:13 -04:00

test_git_gate_render_provision.py

test(git-gate): ratchet git_gate coverage to >=90%

2026-06-25 22:11:19 -04:00

test_git_gate.py

fix(git-gate): defer dynamic key provisioning

2026-07-01 12:45:46 -04:00

test_git_http_backend.py

refactor: rename GIT_GATE_DAEMON_TIMEOUT_SECS to GIT_GATE_TIMEOUT_SECS

2026-06-25 04:12:43 -04:00

test_log.py

feat(log): add leveled severity and structured context to log wrappers

2026-06-24 15:37:57 -04:00

test_macos_container_bottle.py

fix(macos-container): forward terminal capability env

2026-06-22 22:57:16 -04:00

test_macos_container_cleanup.py

feat(macos-container): launch explicit-proxy bottles

2026-06-10 22:25:00 -04:00

test_macos_container_launch.py

fix(egress): randomize canary secret env name

2026-06-25 03:25:37 +00:00

test_macos_container_pty_forward.py

test(macos-container): satisfy pyright mock typing

2026-06-23 03:02:03 +00:00

test_macos_container_util.py

fix(macos-container): anchor relative Dockerfile path to build context

2026-06-25 03:27:46 -04:00

test_manifest_agent_git_user.py

fix(types): add BottleSpec.loaded_manifest to satisfy pyright on union type

2026-06-22 23:54:02 -04:00

test_manifest_bottle_merge.py

fix(types): resolve pyright errors introduced in #269 changes

2026-06-25 16:13:19 -04:00

test_manifest_egress.py

feat(claude): add forward_host_credentials support

2026-07-01 21:14:37 +00:00

test_manifest_extends.py

feat: support multiple parents in bottle extends:

2026-06-25 05:10:03 -04:00

test_manifest_git_user.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

test_manifest_git.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

test_manifest_lazy_loader.py

test(manifest): cover lazy (on-disk) loader branches

2026-06-26 21:19:27 -04:00

test_manifest_md_load.py

fix(types): add BottleSpec.loaded_manifest to satisfy pyright on union type

2026-06-22 23:54:02 -04:00

test_manifest_runtime.py

refactor(manifest): split Manifest into ManifestIndex + Manifest single-value type

2026-06-22 23:54:02 -04:00

test_manifest_validation.py

feat(claude): add forward_host_credentials support

2026-07-01 21:14:37 +00:00

test_plan_print_parity.py

fix: route remote control through provider startup args

2026-06-25 03:08:47 -04:00

test_print_util.py

feat(manifest): add agent_provider.auth_token for Claude OAuth via egress

2026-06-01 22:24:17 -04:00

test_provision_git.py

fix: escape quotes/newlines in YAML and gitconfig emitters

2026-06-25 04:23:13 -04:00

test_sidecar_init.py

fix(macos-container): support git-gate launch

2026-06-10 22:25:00 -04:00

test_smolmachines_bottle.py

fix(pi): prepare runtime state and agent workdir

2026-06-10 00:02:28 -04:00

test_smolmachines_cleanup.py

fix: resolve all remaining 179 test file type errors with type: ignore

2026-06-04 11:30:51 -04:00

test_smolmachines_launch_image.py

feat: support smolmachines bottle commit

2026-06-23 16:53:41 -04:00

test_smolmachines_local_registry.py

fix: resolve all remaining 179 test file type errors with type: ignore

2026-06-04 11:30:51 -04:00

test_smolmachines_loopback_alias.py

fix: resolve all remaining 179 test file type errors with type: ignore

2026-06-04 11:30:51 -04:00

test_smolmachines_provision.py

feat(cli): add headless launch mode for orchestrators

2026-06-30 15:08:14 -04:00

test_smolmachines_pty_resize.py

fix: resolve all remaining 179 test file type errors with type: ignore

2026-06-04 11:30:51 -04:00

test_smolmachines_sidecar_bundle.py

chore: remove all pipelock references from tests, docs, and non-pipelock source

2026-06-04 21:54:06 +00:00

test_smolmachines_smolvm.py

feat: support smolmachines bottle commit

2026-06-23 16:53:41 -04:00

test_smolmachines_util.py

feat(backend): default to smolmachines

2026-06-09 03:27:31 +00:00

test_supervise_cli_crash_logging.py

test(cli): clean up supervise test naming

2026-06-03 17:26:15 +00:00

test_supervise_cli.py

feat!: remove capability apply

2026-06-25 08:58:28 +00:00

test_supervise_edge.py

test(supervise): ratchet supervise coverage to >=90%

2026-06-25 22:19:37 -04:00

test_supervise_server.py

fix: add type annotations to __exit__ context manager (pyright)

2026-06-25 15:03:06 -04:00

test_supervise.py

feat!: remove capability apply

2026-06-25 08:58:28 +00:00

test_yaml_subset.py

test(yaml): ratchet yaml_subset coverage to >=90%

2026-06-25 22:00:17 -04:00