direnv

How do you keep coding agents from accessing unrelated environment variables?

When I run a coding agent locally, it can inherit the environment variables from the shell that launched it. That could expose API keys or credentials belonging to…