fix: reserve projected load points and stage Claude credentials

coilyco-ops commented

2026-08-08 17:23:53 +00:00

Member

Two commits: the shadow-home half of the user-scope projection work, and the #968 auth gap.

`17d0e095` // reserve the projected load points in the shadow home

The shadow home symlinked each child of .agents and .claude and linked every other host entry whole. That left ~/.claude/CLAUDE.md pointing at the host's all-roles COMPOSED document, so a role session read all eight role cards beside the one it was launched with.

It also made home-scope projection unsafe for the other harnesses: .codex and .config were single symlinks, so writing .codex/AGENTS.md under the session home resolved through to the host file.

.codex and .config (with its goose and opencode children) are now staged the same way .agents and .claude already were, and every projected load point is reserved so no host copy is linked over it. Projection refuses foreign files, so a leftover link there fails the launch rather than being replaced.

Behavior note: .config becomes a real directory of symlinks, so a new file written under ~/.config inside a session lands in the session rather than the host. Existing entries still resolve to the host.

`ceaf441e` // stage Claude credentials instead of starting logged out

Closes #968. --auth accepted --agent claude and staged nothing: discovery looked only for ~/.claude/.credentials.json and returned an empty projection when absent, so a launch composed the role, projected it, started Docker, and only then reported Not logged in.

On macOS that file is normally absent because Claude Code keeps the login in the Keychain, namespaced by a digest of CLAUDE_CONFIG_DIR. Discovery now reads that record the way the harness names it and mounts it through a private temporary file, mirroring the Codex Keychain path. ANTHROPIC_API_KEY, ANTHROPIC_AUTH_TOKEN, and CLAUDE_CODE_OAUTH_TOKEN cross by name for unattended runs.

When none resolve, it fails before Docker starts and names the three ways forward, rather than surfacing after an image pull. That is the fail-closed option the issue called worth doing regardless of which credential path was chosen.

The container already copied claude.json to ~/.claude/.credentials.json, so only host discovery was missing. New docs/aos-claude-auth.md mirrors docs/aos-codex-auth.md.

Notes

The first commit pairs with agent-compose native-home/968-user-scope-projection. They should land together: home-scope projection without this write-through guard would overwrite host files.

Full aos-cli suite green.

Two commits: the shadow-home half of the user-scope projection work, and the #968 auth gap. ## `17d0e095` // reserve the projected load points in the shadow home The shadow home symlinked each child of `.agents` and `.claude` and linked every other host entry whole. That left `~/.claude/CLAUDE.md` pointing at the host's all-roles COMPOSED document, so a role session read all eight role cards beside the one it was launched with. It also made home-scope projection unsafe for the other harnesses: `.codex` and `.config` were single symlinks, so writing `.codex/AGENTS.md` under the session home resolved through to the host file. `.codex` and `.config` (with its goose and opencode children) are now staged the same way `.agents` and `.claude` already were, and every projected load point is reserved so no host copy is linked over it. Projection refuses foreign files, so a leftover link there fails the launch rather than being replaced. Behavior note: `.config` becomes a real directory of symlinks, so a new file written under `~/.config` inside a session lands in the session rather than the host. Existing entries still resolve to the host. ## `ceaf441e` // stage Claude credentials instead of starting logged out Closes #968. `--auth` accepted `--agent claude` and staged nothing: discovery looked only for `~/.claude/.credentials.json` and returned an empty projection when absent, so a launch composed the role, projected it, started Docker, and only then reported `Not logged in`. On macOS that file is normally absent because Claude Code keeps the login in the Keychain, namespaced by a digest of `CLAUDE_CONFIG_DIR`. Discovery now reads that record the way the harness names it and mounts it through a private temporary file, mirroring the Codex Keychain path. `ANTHROPIC_API_KEY`, `ANTHROPIC_AUTH_TOKEN`, and `CLAUDE_CODE_OAUTH_TOKEN` cross by name for unattended runs. When none resolve, it fails before Docker starts and names the three ways forward, rather than surfacing after an image pull. That is the fail-closed option the issue called worth doing regardless of which credential path was chosen. The container already copied `claude.json` to `~/.claude/.credentials.json`, so only host discovery was missing. New `docs/aos-claude-auth.md` mirrors `docs/aos-codex-auth.md`. ## Notes The first commit pairs with agent-compose `native-home/968-user-scope-projection`. They should land together: home-scope projection without this write-through guard would overwrite host files. Full `aos-cli` suite green.

coilyco-ops added 2 commits

2026-08-08 17:23:54 +00:00

fix(native): reserve the projected load points in the shadow home 17d0e095a0

The shadow home symlinked each child of `.agents` and `.claude` and linked every
other host entry whole. That left `~/.claude/CLAUDE.md` pointing at the host's
all-roles COMPOSED document, so a role session read all eight role cards beside
the one it was launched with, and role scoping was never enforced where the
harness reads.

It also made home-scope projection unsafe for the other harnesses: `.codex` and
`.config` were single symlinks, so writing `.codex/AGENTS.md` under the session
home resolved through to the host file.

Stage `.codex` and `.config` (with its goose and opencode children) the same way
`.agents` and `.claude` were already staged, and reserve every projected load
point so no host copy is linked over it. Projection refuses foreign files, so a
leftover link there fails the launch rather than being replaced.

Pairs with agent-compose native-home/968-user-scope-projection.

Refs #968

Co-authored-by: Kai Siren <coilysiren@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>

fix(aos): stage Claude credentials instead of starting logged out

ci / ward-doctor (pull_request) Successful in 14s

Details

ci / aos-cli-tests (pull_request) Successful in 31s

Details

ci / gate (pull_request) Failing after 59s

Details

ceaf441ed7

`--auth` accepted `--agent claude` and staged nothing. Discovery looked only for
`~/.claude/.credentials.json` and returned an empty projection when it was
absent, so a launch composed the role, projected it, started Docker, and only
then reported `Not logged in`.

On macOS that file is normally absent because Claude Code keeps the login in the
Keychain, namespaced by a digest of `CLAUDE_CONFIG_DIR`. Read that record the
way the harness names it and mount it through a private temporary file, mirroring
the Codex Keychain path. Accept `ANTHROPIC_API_KEY`, `ANTHROPIC_AUTH_TOKEN`, and
`CLAUDE_CODE_OAUTH_TOKEN` by name for unattended runs, where OAuth is the wrong
shape.

When none of those resolve, fail before Docker starts and name the three ways
forward rather than surfacing the failure after an image pull.

The container side already copied `claude.json` to `~/.claude/.credentials.json`,
so only host discovery was missing.

Closes #968

Co-authored-by: Kai Siren <coilysiren@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>

coilyco-ops requested review from coilysiren

2026-08-08 17:23:54 +00:00

coilyco-ops added 1 commit

2026-08-08 17:57:14 +00:00

docs(native): note where a session write lands under a staged directory

ci / ward-doctor (pull_request) Successful in 14s

Details

ci / aos-cli-tests (pull_request) Successful in 34s

Details

ci / gate (pull_request) Failing after 58s

Details

9bdbd76b7d

Co-authored-by: Kai Siren <coilysiren@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>

coilysiren added 1 commit

2026-08-09 02:34:16 +00:00

Merge branch 'main' into aos/claude/tu89

ci / ward-doctor (pull_request) Successful in 15s

Details

ci / aos-cli-tests (pull_request) Successful in 35s

Details

ci / gate (pull_request) Successful in 59s

Details

7ffc46d9fe

coilysiren merged commit b077e42441 into main

2026-08-09 02:46:06 +00:00

coilysiren deleted branch aos/claude/tu89

2026-08-09 02:46:06 +00:00

coilysiren referenced this pull request from a commit

2026-08-09 02:46:07 +00:00

fix: reserve projected load points and stage Claude credentials (#974)

coilyco-ops referenced this pull request from a commit

2026-08-12 05:37:30 +00:00

fix(release): keep the director dry-run smoke unauthenticated

coilyco-ops referenced this pull request

2026-08-12 05:37:50 +00:00

fix(release): keep the director dry-run smoke unauthenticated #1000

coilysiren referenced this pull request from a commit

2026-08-12 05:40:05 +00:00

fix(release): keep the director dry-run smoke unauthenticated (#1000)

Rows
Columns

fix: reserve projected load points and stage Claude credentials #974

17d0e095 // reserve the projected load points in the shadow home

ceaf441e // stage Claude credentials instead of starting logged out

Notes

`17d0e095` // reserve the projected load points in the shadow home

`ceaf441e` // stage Claude credentials instead of starting logged out