What do you want to change?
Add terminal-identity markers to ISOLATED_ENV_ALLOWLIST (src/server.ts:128): TERM_PROGRAM, TERM_PROGRAM_VERSION, GHOSTTY_RESOURCES_DIR — optionally KITTY_WINDOW_ID, ITERM_SESSION_ID, WEZTERM_PANE, TMUX.
Why?
--isolate-env drops these, so TUIs spawned through isolated sessions can't detect terminal capabilities. Concrete case: pi/omp's OSC 8 hyperlink detection keys on TERM_PROGRAM/GHOSTTY_*; without them it falls back to plain-text links (unclickable labels, wrapped URLs truncate on click). These vars are identity markers, not secrets — no leak surface.
Verified with the locked pty 0.12.0 binary: identical spawn with vs without --isolate-env flips hyperlink capability OFF → ON; simulating the patched allowlist on a captured daemon env does the same.
Limitation: this only helps when the daemon itself was started from a real terminal. Headless daemons (e.g. the dev3 systemd relay) have no genuine TERM_PROGRAM to pass through — fixing that class needs client-env forwarding in the relay spawn protocol, which is a larger change.
(Filed with AI assistance, reviewed by me.)
Posted on behalf of @schickling
| field |
value |
agent_identity |
unknown |
agent_persona |
generalist |
agent_supervisor |
unavailable |
agent_tool |
OMP |
agent_tool_version |
18.0.3 |
agent_runtime |
OMP 18.0.3 |
tooling_profile |
dotfiles@02c722e |
What do you want to change?
Add terminal-identity markers to
ISOLATED_ENV_ALLOWLIST(src/server.ts:128):TERM_PROGRAM,TERM_PROGRAM_VERSION,GHOSTTY_RESOURCES_DIR— optionallyKITTY_WINDOW_ID,ITERM_SESSION_ID,WEZTERM_PANE,TMUX.Why?
--isolate-envdrops these, so TUIs spawned through isolated sessions can't detect terminal capabilities. Concrete case: pi/omp's OSC 8 hyperlink detection keys onTERM_PROGRAM/GHOSTTY_*; without them it falls back to plain-text links (unclickable labels, wrapped URLs truncate on click). These vars are identity markers, not secrets — no leak surface.Verified with the locked pty 0.12.0 binary: identical spawn with vs without
--isolate-envflips hyperlink capability OFF → ON; simulating the patched allowlist on a captured daemon env does the same.Limitation: this only helps when the daemon itself was started from a real terminal. Headless daemons (e.g. the dev3 systemd relay) have no genuine
TERM_PROGRAMto pass through — fixing that class needs client-env forwarding in the relay spawn protocol, which is a larger change.(Filed with AI assistance, reviewed by me.)
Posted on behalf of @schickling
agent_identityagent_personaagent_supervisoragent_toolagent_tool_versionagent_runtimetooling_profile