From 5f2aad593fe988fa910f431aab19a84e41d8baa7 Mon Sep 17 00:00:00 2001 From: Jason Woltje Date: Tue, 20 Oct 2026 16:41:14 -0500 Subject: [PATCH] row 228: trim the README allowlist sentence to one reader point (N1, #1729) (cherry picked from commit c336f8d18ae3f1e9fe826160c825a26e4766b759) --- packages/cli/README.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/packages/cli/README.md b/packages/cli/README.md index 3ee324eb1..0fdac30b5 100644 --- a/packages/cli/README.md +++ b/packages/cli/README.md @@ -435,9 +435,8 @@ set, a Claude Code launch refuses `no-session-credential` before anything starts. A Pi session gets the same variables through the allowlist. A Pi session on provider `zai` logs in with `ZAI_API_KEY`, which the allowlist passes. Like every allowlist variable, it reaches every session the host -starts, Claude Code ones included, and a shell inside any of them can read -it. A shell the harness opens, Claude Code's `Bash` or Pi's `bash`, can read -them. +starts, Claude Code ones included. A shell the harness opens, Claude Code's +`Bash` or Pi's `bash`, can read all of these variables. A Pi session logs in only through the variables `ENV_ALLOW` passes. Its `HOME` is the run's own, so Pi never reads the operator's `~/.pi/agent`