# v1.2.1

## Pi compatibility release

This release fixes vanilla `pi` installs failing inside ai-jail when they write runtime state under `~/.pi`.

### Pi home state is writable

- Added `~/.pi` to the read-write AI tool state directory list.
- Vanilla pi uses `~/.pi/agent` for settings, auth, sessions, skills, extensions, themes, tools, models, and debug logs.
- Without this mount, `ai-jail pi` could fail during startup with `EROFS` on `~/.pi/agent/settings.json.lock` or while creating session directories.
- Kept sensitive home dotdirs denied and preserved existing private-home and lockdown behavior.

### Regression coverage

- Added a bwrap regression test proving `~/.pi` is emitted as a read-write bind mount.
- Extended dotdir allowlist tests so `~/.pi` cannot regress back to read-only or user-deniable behavior.

### Verification

- `cargo fmt --check`
- `cargo clippy -- -D warnings`
- `cargo test`
- `cargo run -- --version`
- `target/debug/ai-jail --clean --no-save-config --exec pi --offline --no-extensions --no-skills --no-prompt-templates --no-themes --no-context-files --list-models`
