summaryrefslogtreecommitdiff
path: root/CLAUDE.md
diff options
context:
space:
mode:
Diffstat (limited to 'CLAUDE.md')
-rw-r--r--CLAUDE.md7
1 files changed, 7 insertions, 0 deletions
diff --git a/CLAUDE.md b/CLAUDE.md
index 0c54ecb..a7b60e6 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -51,6 +51,13 @@ what it needs through these, each of them optional and absent by default:
| `~/.claude/rules/*.md` | extra Claude Code user memory, loaded next to `config/claude/CLAUDE.md` |
| `~/.config/pi/settings.d/*.json` | pi settings merged into the generated `~/.pi/agent/settings.json` by `link/pi.sh` |
| `~/.config/pi/models.d/*.json` | pi providers merged into the generated `~/.pi/agent/models.json` by `link/pi.sh` |
+
+A credential in a pi provider -- `apiKey`, or anything under `headers` -- is a
+**reference**, not a name: `"$SILICONFLOW_API_KEY"`, not `"SILICONFLOW_API_KEY"`.
+A bare name is sent verbatim as the credential, and nothing warns: pi reports
+such a provider as configured and `pi auth check` says `ready`, because a
+literal counts as a value. Only a real request fails, with a 401. `!command`
+runs a command and uses its output, and `$$` escapes a literal `$`.
| `~/.config/agent-skills.d/*` | agent skills, linked into every installed agent by `link/skills.sh` |
| `~/.local/share/szecret/{store,id.pub}` | the szecret store; the tool is here, its secrets are not |
| `~/.config/shell/dir-hashes.zsh` | more zsh named directories, sourced by `config/zshrc` |