mosaicstack/stack
25
0 Fork 1
Code Issues 404 Pull Requests 13 Packages Projects Releases 15 Wiki Activity

row 228: trim the README allowlist sentence to one reader point (N1, #1729)

Browse Source 
(cherry picked from commit c336f8d18ae3f1e9fe826160c825a26e4766b759)
This commit is contained in:
jason.woltje committed 2026-10-20 23:52:19 -05:00
1 parent 3a2b547c3f
commit 5f2aad593f
1 file changed
+2 -3
Download Patch File Download Diff File Expand all files Collapse all files
packages/cli/README.md
+2 -3
View File
@@ -435,9 +435,8 @@ set, a Claude Code launch refuses `no-session-credential` before anything
starts. A Pi session gets the same variables through the allowlist. A Pi starts. A Pi session gets the same variables through the allowlist. A Pi
session on provider `zai` logs in with `ZAI_API_KEY`, which the allowlist session on provider `zai` logs in with `ZAI_API_KEY`, which the allowlist
passes. Like every allowlist variable, it reaches every session the host passes. Like every allowlist variable, it reaches every session the host
starts, Claude Code ones included, and a shell inside any of them can read starts, Claude Code ones included. A shell the harness opens, Claude Code's
it. A shell the harness opens, Claude Code's `Bash` or Pi's `bash`, can read `Bash` or Pi's `bash`, can read all of these variables.
them.
A Pi session logs in only through the variables `ENV_ALLOW` passes. Its A Pi session logs in only through the variables `ENV_ALLOW` passes. Its
`HOME` is the run's own, so Pi never reads the operator's `~/.pi/agent` `HOME` is the run's own, so Pi never reads the operator's `~/.pi/agent`