jochen b57e6e8144 claude-code: write the agent's home as its own account where it has one ...

On the control node agents are to run as an account that cannot become root
(hq ADR 0266). The runtime keeps running as the operator, so the token, the
identity and the home-scope items go to the agent's home through a helper
started as that account; the licence and the account file follow the move,
what was placed in the operator's home goes once the agent holds the licence,
and the guard refuses every tool of a session running as anyone else,
recording to the journal. An API key is taken only from the agent's home and
only when it is one, here and in the licence manager, so the tool cannot carry
off the runtime's credential. Unchanged where no agent account is named.

2026-10-09 10:14:18 +02:00

..

testdata

claude-code in Go (operator: always Go)

2026-10-04 12:27:36 +02:00

agent_account_test.go

claude-code: write the agent's home as its own account where it has one

2026-10-09 10:14:18 +02:00

agent_account.go

claude-code: write the agent's home as its own account where it has one

2026-10-09 10:14:18 +02:00

claude_code_test.go

claude-code: write the agent's home as its own account where it has one

2026-10-09 10:14:18 +02:00

config_test.go

claude-code: write the home scope only into an agent account's own home

2026-10-09 09:41:52 +02:00

config_tools.go

claude-code: set shared agent text at the controller's terminal, for now

2026-10-09 09:41:52 +02:00

config.go

claude-code: write the agent's home as its own account where it has one

2026-10-09 10:14:18 +02:00

grant.go

claude-code: write the agent's home as its own account where it has one

2026-10-09 10:14:18 +02:00

guard_run.go

claude-code: write the agent's home as its own account where it has one

2026-10-09 10:14:18 +02:00

guard_test.go

claude-code: read where it runs from the controller's JSON answer

2026-10-07 20:28:06 +02:00

guard.go

claude-code: write the agent's home as its own account where it has one

2026-10-09 10:14:18 +02:00

home_test.go

claude-code: remove from or restore to only an agent account's own home

2026-10-09 09:51:18 +02:00

home.go

claude-code: write the agent's home as its own account where it has one

2026-10-09 10:14:18 +02:00

homefs.go

claude-code: write the agent's home as its own account where it has one

2026-10-09 10:14:18 +02:00

identity.go

claude-code: write the agent's home as its own account where it has one

2026-10-09 10:14:18 +02:00

insteadof_test.go

claude-code: read where it runs from the controller's JSON answer

2026-10-07 20:28:06 +02:00

insteadof.go

claude-code: read where it runs from the controller's JSON answer

2026-10-07 20:28:06 +02:00

instructions.go

claude-code in Go (operator: always Go)

2026-10-04 12:27:36 +02:00

main.go

claude-code: write the agent's home as its own account where it has one

2026-10-09 10:14:18 +02:00

mesh.go

claude-code: write the agent's home as its own account where it has one

2026-10-09 10:14:18 +02:00

node.go

claude-code: write the agent's home as its own account where it has one

2026-10-09 10:14:18 +02:00

registrations.go

claude-code: set shared agent text at the controller's terminal, for now

2026-10-09 09:41:52 +02:00

render.go

claude-code: refuse registering what a session runs, so no agent can plant it in the operator's sessions

2026-10-09 02:30:11 +02:00

seal.go

claude-code in Go (operator: always Go)

2026-10-04 12:27:36 +02:00

terminal_only_test.go

claude-code: remove from or restore to only an agent account's own home

2026-10-09 09:51:18 +02:00

terminal_text.go

claude-code: set shared agent text at the controller's terminal, for now

2026-10-09 09:41:52 +02:00