alpacon work-session update

Update an existing work session.

Use --sudo to add MFA-bypass sudo command patterns to the session. This is the recovery path when an exec sudo command was denied: add the command and re-run. Each --sudo value is a comma-separated pattern list (wildcards allowed) forming one policy. The session’s existing policies are preserved; the additions may require approval before they take effect.

If SESSION_ID is omitted, the effective work session is resolved from the ALPACON_WORK_SESSION environment variable, then the workspace’s active session (set via alpacon work-session use).

alpacon work-session update [SESSION_ID] [flags]

Options

  -h, --help                 help for update
      --sudo stringArray     Sudo command patterns to add as MFA-bypass policies (repeatable; each value is a comma-separated pattern list forming one policy, wildcards allowed)
      --sudo-reason string   Justification applied to the sudo policies added via --sudo

Examples

Add a sudo command pattern to a specific session:

alpacon work-session update 11111111-2222-3333-4444-555555555555 --sudo "systemctl restart nginx"

Add a pattern to the current effective session:

alpacon work-session update --sudo "tail -f /var/log/nginx/*.log"