Give claude-code's runtime its forge credential file, and say a credential it cannot place as a condition (issue 774)

The file gitea-read.secret was declared with no owner, so it was root's at 0600; claude-code's tools run in the
node's runtime as the operator's account and could not read it ("permission denied", ~870 times a machine), said
only in the journal. A file a bundle reads is the runtime account's only when a word of the bundle names it
(catalogue givenTo); this one was found through MESH_CLAUDE_CODE_STATE alone.

Quick fix: name the file with the bundle word MESH_CLAUDE_CODE_FORGE, which the reader now uses. Thorough fix: the
same, plus a failure to place the credential raises a warning condition of the module on the operator-channel seat,
once per reason, cleared when it places again. Chose thorough: the fault ran unseen for days. A change of the
credential now restarts the node's runtime, as for every file a bundle word names.
claude-code's mesh-sdk pin moves to 2da0de75 (main's), the first with asks.Condition.

This commit is contained in:

jschoubben

2026-10-30 18:13:44 +01:00

parent aec2ed3c24

commit 7531c3257d

7 changed files with 162 additions and 15 deletions

									
										modules/claude-code/go.mod
									
		+2
		-2
	
												View File
												
				@@ -1,7 +1,7 @@

				module claude-code

				go 1.25.0

				go 1.26.0

				require git.novox.be/novox/mesh-sdk/go v0.1.14-0.20261013182924-5933eb757d44

				require git.novox.be/novox/mesh-sdk/go v0.1.14-0.20261030001116-2da0de75c3f0

				require gopkg.in/yaml.v3 v3.0.1