From 973005602bb044baf8055a03e2a97d9fcec2aa0f Mon Sep 17 00:00:00 2001
From: CleverThis <hal9000@cleverthis.com>
Date: Thu, 4 Jun 2026 16:26:27 -0400
Subject: [PATCH] fix(lsp): allow PYTHONPATH in LSP subprocess environment

PYTHONPATH is a legitimate configuration variable required by LSP servers
such as Pyright and Pylance to locate project packages. Removing it from
_DISALLOWED_ENV_VARS restores this capability as specified in the issue
security advisory, which explicitly listed PYTHONPATH as an allowed variable.

ISSUES CLOSED: #7184
---
 src/cleveragents/lsp/transport.py | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/cleveragents/lsp/transport.py b/src/cleveragents/lsp/transport.py
index 9f21bc440..3a59e3940 100644
--- a/src/cleveragents/lsp/transport.py
+++ b/src/cleveragents/lsp/transport.py
@@ -55,7 +55,6 @@ _DISALLOWED_ENV_VARS = {
     "PATH",
     "PATHEXT",
     "PYTHONHOME",
-    "PYTHONPATH",
     "PYTHONSTARTUP",
     "PYTHONBREAKPOINT",
     "PYTHONUSERBASE",