diff options
Diffstat (limited to 'AGENTS.md')
| -rw-r--r-- | AGENTS.md | 2 |
1 files changed, 2 insertions, 0 deletions
@@ -20,6 +20,8 @@ plans are working files, kept out of git (`.superpowers/`). answers with JSON. `sb_builder/remote.py` is the only code that runs ssh (and local `virsh`). `sb_builder/upstream.py` runs the local `nvchecker` over the repo's `nvchecker.toml`; the VM never sees the GitHub token. + `sb_builder/repository.py` reads the built package repository from its + local mount (`[repository] path`), never over ssh. - Trust boundary: the helper runs only a fixed table of job kinds and builds argv itself from validated args. Never pass shell strings or paths from the GUI to the helper. |