claude-code: an "instead of" table and a guard on the agent's shell (hq ADR 0245) #110

Merged

mesh-admin merged 2 commits from feat/claude-code-tools-first into main

2026-10-07 19:04:18 +00:00

Author	SHA1	Message	Date
jochen	f72a435487	claude-code: read where it runs from the controller's JSON answer mesh/merge-gate pass: builds claude-code → ace, g14, novox, shanks; no bus step; every machine composes with the change as it did without (4 of 4 compose) Details mesh/repo-check pass: its merge-check.sh passed Details mesh/delivery delivered Details nodesRunningMe looked for printed lines in what is a JSON list, so every register tool's "also on" hint and every nodes: "all" named no machine.	2026-10-07 20:28:06 +02:00
jochen	24a3fac2ba	claude-code: point the agent at the mesh's tools and guard its shell against ssh to the mesh (hq ADR 0245) The agent kept running ssh <machine> journalctl while the journal verb existed. The managed instructions now carry an "instead of" table generated from what each verb says it replaces, and the plugin carries a PreToolUse guard that refuses ssh to a mesh machine and local work-arounds for a mesh name, naming the tool or saying one must be created. The operator's override is read from the session's start environment and recorded.	2026-10-07 20:27:31 +02:00

Author

SHA1

Message

Date

jochen

f72a435487

claude-code: read where it runs from the controller's JSON answer

mesh/merge-gate pass: builds claude-code → ace, g14, novox, shanks; no bus step; every machine composes with the change as it did without (4 of 4 compose)

Details

mesh/repo-check pass: its merge-check.sh passed

Details

mesh/delivery delivered

Details

nodesRunningMe looked for printed lines in what is a JSON list, so every register tool's "also on"
hint and every nodes: "all" named no machine.

2026-10-07 20:28:06 +02:00

jochen

24a3fac2ba

claude-code: point the agent at the mesh's tools and guard its shell against ssh to the mesh (hq ADR 0245)

The agent kept running ssh <machine> journalctl while the journal verb existed. The managed
instructions now carry an "instead of" table generated from what each verb says it replaces, and
the plugin carries a PreToolUse guard that refuses ssh to a mesh machine and local work-arounds for a
mesh name, naming the tool or saying one must be created. The operator's override is read from the
session's start environment and recorded.

2026-10-07 20:27:31 +02:00