claude-code over NATS: licence events, a token by request, a login pushed to the manager, MCP servers registered per node or mesh-wide

Events carry what happened and no secret; tokens travel on requests (design 32 §10). The manager's
licence.rotated/switched events make the module ask anthropic-licence-manager.current; at start it
asks once to catch up. A refresh token appearing in the credentials file is a login: it is pushed to
the manager's adopt at once, sealed to the manager's key — the one time a refresh token travels. A
switch replaces the old licence's grant whole, removes the API key and its helper, and rewrites
oauthAccount in ~/.claude.json. New tools register and unregister MCP servers on this node, or with
nodes: all / a list via an mcp.registered event every node consumes; called for one node, the
answer names the other nodes running claude-code. 26 tests.

This commit is contained in:

jochen

2026-10-04 02:23:23 +02:00

parent 03e729d103

commit 6a7e4ebd5e

10 changed files with 548 additions and 167 deletions

									
										modules/claude-code/tsconfig.json
									
		+1
		-1
	
												View File
												
				@@ -8,5 +8,5 @@

				    "skipLibCheck": true,

				    "noEmit": true

				  },

				  "include": ["seal.ts", "grant.ts", "identity.ts", "render.ts", "tools/index.ts"]

				  "include": ["seal.ts", "grant.ts", "identity.ts", "render.ts", "node.ts", "tools/index.ts"]

				}