- code-modernization: interactive topology map, preflight command, persona flows
Two follow-up commits from an adversarial review pass: Hardening: fixed unbraced ${CLAUDE_PLUGIN_ROOT} in the injection command (would have failed substitution), data coercion at viewer intake (missi…
- code-modernization: never write discovered credential values into findings
Follow-up commit from an adversarial red-team pass over the redaction design: the remediation patch necessarily carries raw secrets on its - lines, so harden now splits credential hunks into a gitign…
- feat(claude-code): add api_key_helper for short-lived credentials; mark anthropic_api_key sensitive
Rebased onto main post-#863.
- feat(claude-code): first-class anthropic_base_url, use_bedrock, use_vertex inputs
Rebased onto main post-#863.
- feat(claude-code): add api_key_helper for short-lived credentials; mark anthropic_api_key sensitive
Will rebase once #863 merges so we're not chasing conflicts twice. Shout if you'd prefer this land first.
- feat(claude-code): first-class anthropic_base_url, use_bedrock, use_vertex inputs
Will rebase once #863 merges so we're not chasing conflicts twice. Shout if you'd prefer this land first.
- feat(claude-code): add transcript_retention_days and Stop-hook idle sentinel
Agreed — once #863 lands, both halves of this become managed_settings entries: { "cleanupPeriodDays": 14, "hooks": { "Stop": [{ "hooks": [{ "type": "command", "command": "touch /tmp/claude-idle" }] }…
- feat(claude-code): add managed_settings input for policy delivery via /etc/claude-code
Short answer: no — those two screens can't be suppressed via managed_settings. The theme picker and the security-notes screen are one first-run onboarding flow, gated by hasCompletedOnboarding in ~/.…
- feat(claude-code): add transcript_retention_days and Stop-hook idle sentinel
Rebased onto post-#861 main. The session-ID derivation half of the original PR fell away with #861's removal of start.sh (which also resolves #726 directly). What remains is the install-time transcri…
- feat(claude-code): first-class anthropic_base_url, use_bedrock, use_vertex inputs
Rebased onto post-#861 main. The existing coder_env.anthropic_base_url resource (AI Gateway only) is extended to also fire when var.anthropic_base_url is set; enable_ai_gateway keeps precedence for t…
- feat(claude-code): add api_key_helper for short-lived credentials; mark anthropic_api_key sensitive
Rebased onto post-#861 main. Var rename claude_api_key -> anthropic_api_key picked up; the primaryApiKey removal from the original PR is no longer needed since #861's install template doesn't write i…
- feat(claude-code): add managed_settings input for policy delivery via /etc/claude-code
Rebased onto post-#861 main. Scope is now smaller: just the managed_settings input writing /etc/claude-code/managed-settings.d/10-coder.json. The deprecation shim and ~/.claude.json key removal from …
- feat(claude-code): add telemetry input for OTEL export with workspace attribution
Rebased onto post-#861 main and bumped to 5.1.0.
- feat(claude-code): add telemetry input for OTEL export with workspace attribution
On the generic env block vs typed telemetry input: a generic env map would cover the passthrough half (CLAUDE_CODE_ENABLE_TELEMETRY, OTEL_EXPORTER_OTLP_*), but the part I think actually earns its pla…
- feat(claude-code): add transcript_retention_days and Stop-hook idle sentinel
Thanks, both addressed in 11925ea: README examples bumped 4.9.2 -> 4.9.3. Test failures were two separate bugs: (1) the deriveTaskSessionId helper tried to grep the workspace ID out of script.sh, but…