From 60c3bbcedbb1ddf8eead9e0243320a2740a801cb Mon Sep 17 00:00:00 2001 From: MarcoPad Dev Date: Fri, 17 Jul 2026 18:09:32 -0700 Subject: [PATCH] docs: clarify relay web client is execute-only Remote (relay) devices browse and trigger macros; macro authoring is intentionally kept to the local network so what runs on the machine isn't editable from the public internet. Co-Authored-By: Claude Opus 4.8 (1M context) --- README.md | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 3ec1055..f25fe59 100644 --- a/README.md +++ b/README.md @@ -153,10 +153,13 @@ Access your macros from outside your local network using a relay server: Once connected, a relay URL will appear in the toolbar. Use this URL from any device with internet access. The relay provides: - Secure HTTPS connection -- Full macro execution and management +- Macro browsing and execution - PWA installation support - Wake lock and fullscreen mode +> [!NOTE] +> The relay web client is **execute-only**: remote devices can browse and trigger macros, but macro creation/editing is intentionally limited to the local network (the desktop app and the local web interface). This keeps macro authoring — which defines what runs on your computer — off the public internet. + > [!NOTE] > The relay password is stored in your OS keyring when one is available, falling back to the settings file (written with restricted `0600` permissions) otherwise.