Under the hood
Useful2 Signal4
A remote host can hand Claude Code a pre-minted secret to reattach without an OAuth round trip.
What's wrong with this entry?
Anonymous. No account, no email.
What
When Claude Code starts under a remote host and is given a pre-minted "work secret", it now attaches to an existing session directly using that secret instead of minting credentials through the usual OAuth flow. This only happens when the host supplies one and there is a session to reattach to.
Details
- Active only when a work secret is passed to the remote-bridge REPL init; otherwise the normal credential mint runs unchanged.
- No target session to reattach to, or a secret the server rejects, is a hard failure reported as "work secret rejected" rather than a silent fallback.
Evidence
Attaching ${R} with the host's work secret (worker-credential path)
Strings lifted out of the shipped bundle, so the claim above can be checked against them.