docs(9-ai-sessions): document CLI tools pre-installed in the runner#219
Merged
Conversation
Adds a new "Runner Environment" page that enumerates the cloud, dev, identity, security, binary-analysis, and LimaCharlie/Claude CLIs baked into the session-runner image, plus the Python venv and on-disk reference data layout. Wires it into the section nav and the index documentation list, between Tool Permissions and AI Skills. Authors of agent definitions can now consult one page to decide which Bash(<prefix>:*) entries to add to allowed_tools instead of having to read the Dockerfile. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
maximelb
force-pushed
the
docs/ai-sessions-runner-environment
branch
from
78ad4e7 to
7ad6f66
Compare
maximelb
added
the
to-code-review
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds a new Runner Environment page under AI Sessions that enumerates everything pre-installed in the session-runner image:
gcloud,aws,az,doctl,vultr-cli)git,gh, Node 20, Python 3 + pipx,jq, etc.)op,sdm,tailscale,m365)sublime,chkp_harmony_endpoint_management_cli,mmdblookup)lcre, Ghidra 11.0.3 with OpenJDK 17)/opt/venvThe page also clarifies that pre-installation is not authorization — the agent still needs an
allowed_toolsentry likeBash(gcloud:*)to actually invoke any of these.Wired into the section nav (between Tool Permissions and AI Skills) and into the section index page.
Drafting because:
docker/Dockerfile.session-runneronmaster. Worth a quick second pair of eyes from someone who knows whether anything in the runner is intentionally undocumented (e.g. tools we'd rather not advertise) before publishing.ai-sessions(refractionPOINT/ai-sessions#70) adding the Check Point Harmony Endpoint CLI; this doc lists it on the assumption that PR lands.Test plan
mkdocs buildlocally renders the new page without warnings.🤖 Generated with Claude Code