pinset env access grant
Authorize a collaborator or CI to read a profile using its public request.
View source on GitHub ↗When to use
A maintainer uses this after reviewing the ID and public key. Inspect/revoke with env access list and env access revoke.
Examples
pinset env access grant ./alice-request.json --profile dev
Result: records authorization and re-encrypts dev for effective recipients. Commit configuration and ciphertext for the collaborator.
Behavior
Requires decryption access, valid trust and confirmed owners. Updates configuration and ciphertext transactionally without network access. Repeated grants write nothing; changing a key for an existing ID fails. Effective recipients combine owners and valid grants.
Parameters, exit codes and common errors
| Parameter | Meaning |
|---|---|
<request-file> | Public JSON from the request command. |
--profile <profile> | Required target. |
Success, including unchanged grants, exits 0; failure exits 1. PINSET_PROTOCOL_UNSUPPORTED means a non-Pinset-3 request. Verify request source and owner configuration for invalid IDs, keys or authorization.