PromptDustConfig & secrets · Transcripts
Pi
The Pi coding agent auto-saves tree-structured JSONL sessions under ~/.pi/agent/sessions (this is the CLI agent, not the Inflection chatbot).
Exposure
- Stores found
- 2
- Holds
- API keys · personal data · source code
- Confidence
- likely
Where it writes
2 stores in the current signature database. Paths shown for a typical macOS install.
files may hold personal data · source code
- all OSes
~/.pi/agent/sessionsdir
The Pi coding agent auto-saves tree-structured JSONL sessions under ~/.pi/agent/sessions (this is the CLI agent, not the Inflection chatbot).
- Set PI_CODING_AGENT_DIR to relocate the store, or prune ~/.pi/agent/sessions.
Source: github.com
JSON may hold API keys
- all OSes
~/.pi/agent/auth.json
Pi stores OAuth access/refresh tokens and any saved API keys in ~/.pi/agent/auth.json.
- Restrict permissions on ~/.pi and keep it off cloud sync.
Source: github.com
What to do about it
PromptDust flags these stores and leaves them in place; cleanup is your call. If a store holds a live secret, rotate the secret first, since deleting the file won’t un-leak a key that already sat in plain text.
For ongoing work, keep sensitive material out of sessions where you can, and prune old transcripts and caches now and then.
This describes where Pi stores data. Metadata only, never your content. Confidence: likely. Spot a mistake? Tell us.
See if this one’s on your machine.
One pass finds every store, for this tool and the other 51.