PATH and the Caddy shim

Place the released caddy shim, cadderd, and cadder in one user-owned directory and add that directory to PATH. Cadder does not install or mutate PATH for you.

caddy run is managed by Cadder. The shim starts or attaches to the daemon and never falls back to an unmanaged real Caddy run.

Read-only real-Caddy commands may be delegated through the trusted resolver. Unsupported state-changing commands fail closed. The resolver excludes the shim by file identity, including aliases, symlinks, and hardlinks, so it cannot recursively execute itself.

Configure real Caddy with real_path or a distinct real_command in the trusted cadder.toml. Project files and shim flags cannot replace that selection.