amadan
docs: name the restart notice and the empty-secret refusal on the CLI page
Two paragraphs, reviewed and approved unedited. Both describe things a reader will have just seen in their terminal and come to the page to understand: the note naming routes that got the file and are still running the old values, and the refusal of an empty secret. No new command, so the docsite gate was never at risk here. This is about the page being true, not about passing it.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01CpFEzjVAS2unze59dFTLZN
1 file changed,
+11
−0
docs/site/cli.md+11 −0
CI passed — run details
diff --git a/docs/site/cli.md b/docs/site/cli.md| index aef13a492..22561c166 100644 |
| --- a/docs/site/cli.md |
| +++ b/docs/site/cli.md |
| @@ -343,6 +343,12 @@ seconds and refuses such a row by name. `carlos instances create` takes |
| `--environment` too, which is how a route is born on the right bundle rather |
| than moved onto it. |
| +Some routes are ones carlos proxies to without owning the process behind them. |
| +Setting config for one of those writes the file and stops there. The program |
| +carries on with the old values until its own supervisor restarts it. `set` and |
| +`unset` say so, naming the routes it applies to, and say when they could not |
| +work it out rather than staying quiet about it. |
| + |
| ### carlos secrets |
| The same shape as `carlos env`, sealed. `list` prints key names and never |
| @@ -356,6 +362,11 @@ Sealing uses a public key; the private half lives on the box that decrypts |
| them and never leaves it, in either mode. `carlos secrets genkey` mints the |
| pair, and it is always local to your terminal. |
| +An empty value is refused rather than stored. A command substitution that |
| +produced nothing looks exactly like a real value at the point you type it, and |
| +a stored empty secret usually surfaces much later as a feature quietly not |
| +working. Use `carlos env set` for a value that is meant to be empty. |
| + |
| ### carlos instances |
| An app's instances are the places it actually runs. `carlos instances enable` |