charles/claude-hooks

Fork

You've already forked claude-hooks

Code Issues 10 Pull requests Projects Releases Packages 1 Wiki Activity Actions

SC-5 Plugin + marketplace + MCP swap (single source of truth in DB) #627

New issue

Closed

opened 2026-05-01 10:33:59 +00:00 by claude-desktop · 0 comments

claude-desktop commented

2026-05-01 10:33:59 +00:00

Collaborator

Copy link

User story

As a platform engineer, I want agent-env-sync.renderForInstance to be the only writer of enabledPlugins, extraKnownMarketplaces, and mcpServers keys in each per-agent env dir, so that agent-type and per-instance overrides land coherently and agents.json::plugins + the per-env .claude.json / settings.json stop being mutable surfaces.

Acceptance criteria

Renderer is the only writer

renderForInstance (SC-2) is the only code path that writes settings.json::enabledPlugins, settings.json::extraKnownMarketplaces, and .claude.json::mcpServers. Existing writers (e.g. one-shot bootstrap calls in agent-env-sync and containers-rebuild) delegate to it.
agents.json::types[].plugins[] becomes a builtin-only input. builtin-sync reads it and writes one plugin_binding row per (type, plugin) pair under scope = 'builtin'.
config/mcp-builtin.json is read by builtin-sync and produces mcp_server rows.
config/marketplaces-builtin.json produces plugin_marketplace rows.

Container rebuild integration

just containers-rebuild [NAME] triggers a renderForInstance for every affected instance after the rebuild, so the new container boots with up-to-date plugin / marketplace / MCP state.
container-reconcile.ts learns to delegate drift recovery to renderForInstance instead of mutating settings.json directly.

Secret refs

MCP server env rows can carry ${SECRET:NAME} placeholders. renderForInstance resolves them via the secrets table (SC-6) and writes plaintext only to the rendered .claude.json on disk.
A missing secret produces MissingSecretError per SC-2's error contract.

Tests

Unit: an instance-scope plugin_binding row enabling a plugin not on the type appears in the instance's rendered enabledPlugins.
Unit: an instance-scope plugin_binding with enabled = false removes a plugin that the type enables.
Unit: mcp_server row with env = { "FORGEJO_TOKEN": "${SECRET:FORGEJO_TOKEN_DEV}" } resolves to the decrypted token at render time.
Integration: just containers-rebuild dev-default produces a freshly-rendered env dir.

Out of scope

Master-key encryption rotation (separate ticket).
HTTP routes / UI (SC-7+).
Hooks (excluded — see spec Non-goals).

References

specs/agent-config-customization.md §Story SC-5
apps/server/src/infrastructure/agent-env-sync/ — current materialiser
apps/server/src/infrastructure/container/container-reconcile.ts and container-watchdog.ts
~/.config/claude-hooks/agent-env/<agent>/settings.json and .claude.json — the rendered files
Depends on SC-1, SC-2, SC-6.

## User story As a platform engineer, I want `agent-env-sync.renderForInstance` to be the only writer of `enabledPlugins`, `extraKnownMarketplaces`, and `mcpServers` keys in each per-agent env dir, so that agent-type and per-instance overrides land coherently and `agents.json::plugins` + the per-env `.claude.json` / `settings.json` stop being mutable surfaces. ## Acceptance criteria ### Renderer is the only writer - [ ] `renderForInstance` (SC-2) is the only code path that writes `settings.json::enabledPlugins`, `settings.json::extraKnownMarketplaces`, and `.claude.json::mcpServers`. Existing writers (e.g. one-shot bootstrap calls in `agent-env-sync` and `containers-rebuild`) delegate to it. - [ ] `agents.json::types[].plugins[]` becomes a builtin-only input. `builtin-sync` reads it and writes one `plugin_binding` row per `(type, plugin)` pair under `scope = 'builtin'`. - [ ] `config/mcp-builtin.json` is read by `builtin-sync` and produces `mcp_server` rows. - [ ] `config/marketplaces-builtin.json` produces `plugin_marketplace` rows. ### Container rebuild integration - [ ] `just containers-rebuild [NAME]` triggers a `renderForInstance` for every affected instance after the rebuild, so the new container boots with up-to-date plugin / marketplace / MCP state. - [ ] `container-reconcile.ts` learns to delegate drift recovery to `renderForInstance` instead of mutating `settings.json` directly. ### Secret refs - [ ] MCP server `env` rows can carry `${SECRET:NAME}` placeholders. `renderForInstance` resolves them via the secrets table (SC-6) and writes plaintext only to the rendered `.claude.json` on disk. - [ ] A missing secret produces `MissingSecretError` per SC-2's error contract. ### Tests - [ ] Unit: an `instance`-scope `plugin_binding` row enabling a plugin not on the type appears in the instance's rendered `enabledPlugins`. - [ ] Unit: an `instance`-scope `plugin_binding` with `enabled = false` removes a plugin that the type enables. - [ ] Unit: `mcp_server` row with `env = { "FORGEJO_TOKEN": "${SECRET:FORGEJO_TOKEN_DEV}" }` resolves to the decrypted token at render time. - [ ] Integration: `just containers-rebuild dev-default` produces a freshly-rendered env dir. ## Out of scope - Master-key encryption rotation (separate ticket). - HTTP routes / UI (SC-7+). - Hooks (excluded — see spec Non-goals). ## References - `specs/agent-config-customization.md` §Story SC-5 - `apps/server/src/infrastructure/agent-env-sync/` — current materialiser - `apps/server/src/infrastructure/container/container-reconcile.ts` and `container-watchdog.ts` - `~/.config/claude-hooks/agent-env/<agent>/settings.json` and `.claude.json` — the rendered files - Depends on **SC-1**, **SC-2**, **SC-6**.

claude-desktop added the

area:agents

type:user-story

labels

2026-05-01 10:36:29 +00:00

claude-desktop added this to the Agent config customization milestone

2026-05-01 10:36:38 +00:00

code-lead was assigned by claude-desktop

2026-05-01 12:53:00 +00:00

code-lead referenced this issue from a commit

2026-05-01 13:21:13 +00:00

feat(agent-env-sync): SC-5 renderForInstance is the only writer (#627)

code-lead referenced this issue from a pull request that will close it,

2026-05-01 13:21:35 +00:00

feat(agent-env-sync): SC-5 renderForInstance is the only writer (#627) #643

code-lead referenced this issue from a commit

2026-05-01 13:28:20 +00:00

feat(agent-env-sync): SC-5 renderForInstance is the only writer (#627)

code-lead closed this issue

2026-05-01 13:30:40 +00:00

code-lead referenced this issue from a commit

2026-05-01 13:30:41 +00:00

feat(agent-env-sync): SC-5 renderForInstance is the only writer (#627)

No Branch/Tag specified

main

chore/sync-pre-push-from-forge-base

fix/flows-yaml-dispatch-identity

feat/board-tap-to-assign

dev/1107

code-lead/1106

code-lead/1108

dev/1104

code-lead/1103

code-lead/1080

dev/1087

feat/flows-yaml-ci-events

chore/board-drop-stalled-and-density-controls

fix/flows-yaml-routes-always-register

flows-yaml/api-defaults

dev/1023

fix/event-log-history-bleed

fix/janitor-fix-ci-logs-and-cap

dev/1022

fix/board-card-provider

code-lead/1036

dev/1025

code-lead/1020

dev/1017

code-lead/1026

feat/web-shortcut-registry-1018

dev/1015

code-lead/1009

code-lead/1008

dev/975

dev/969

dev/973

dev/967

code-lead/968

code-lead/953

dev/970

dev/976

code-lead/966

code-lead/956

code-lead/951

dev/962

dev/963

dev/977

dev/955

dev/983

dev/961

dev/974

code-lead/950

code-lead/939

dev/941

dev/940

dev/937

dev/938

dev/936

dev/935

feat/web-i18n-fr-locale

feat/spec-editor-ui-polish

chore/drop-legacy-compat

fix/skills-drop-preview-pane

fix/882-skills-safety-rail

dev/911

dev/909

dev/923

dev/917

dev/915

feat/879-sr11-m2-drop-legacy-skill

code-lead/873

dev/881

code-lead/869

dev/867

code-lead/845

code-lead/843

code-lead/844

dev/837

dev/861

dev/849

code-lead/837

code-lead/842

fix/dedup-rebase-inflight

dev/838

code-lead/847

dev/833

code-lead/848

pr/838

code-lead/841

feat/settings-save-bar/836

code-lead/840

dev/846

code-lead/839

dev/832

fix/board-sse-stale-cache

dev/834

dev/835

feat/settings-breadcrumbs

feat/forge-oauth-credentials

refactor/service-config-consolidation

feat/agent-tokens-to-secrets

feat/gitlab-oauth-to-db

feat/authelia-rip-and-voice-fixes

fix/rebase-storm-and-dead-letter

code-lead/797

code-lead/796

dev/811

code-lead/798

dev/810

code-lead/795

dev/808

code-lead/794

dev/805

dev/802

dev/803

feat/avatar-menu-settings-entry

feat/per-agent-token-tracking

dev/793

dev/747

dev/752

code-lead/790

code-lead/759

dev/756

dev/760

dev/741

dev/767

dev/740

dev/709

dev/644

dev/637

boss/614

dev/600

dev/611

dev/585

fix/login-bonus-fixes

boss/544

dev/542

refactor/api-prefix-and-session-gate

dev/489

boss/531

boss/518

dev/499

boss/516

dev/530

dev/517

dev/519

dev/515

dev/522

dev/503

dev/471

boss/329

dev/417

dev/418

dev/402

boss/327

dev/334

dev/332

boss/326

boss/325

dev/331

boss/324

boss/323

boss/322

dev/294

test/s11-task-analytics

dev/262

boss/270

dev/268

foreman/ui-consolidation-spec

dev/234

boss/196

boss/176

boss/164

fix/124-session-persist-bind

boss/52

dev/87

boss/73

dev/77

dev/81

dev/82

boss/79

dev/42

dev/35

boss/7

No results found.

Labels

Clear labels

area:agents

Agent types, pool scheduling, per-instance config

area:dashboard

Dashboard UI and observability surfaces

area:database

DB layer — schema, migrations, ORM, raw SQL

area:design

UI/UX mockup work — routes to designer agent

area:design-review

Design review dispatch — routes to design-reviewer agent

area:flows

Flow runner — YAML loader, executor, op registry, expression eval

area:infra

Deployment, isolation, containers, systemd units

area:meta

Tracking, scaffolding, project setup

area:security

Security — routes to reviewer-security (opus)

area:sessions

Session-id store, Claude SDK resume logic

area:webhook

Forgejo webhook routing and handlers

area:workdir

Clone cache, worktrees, git identity

security

Security-sensitive issue

Tracking or decisions, not implementation work

No labels

Milestone

Clear milestone

No items

No milestone

Agent config customization

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

code-lead

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

charles/claude-hooks#627

Reference in a new issue

Repository

charles/claude-hooks

Title

Body

No description provided.

Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?

Rows
Columns