Yea I am this exact boat - it's insane how unclear it is. Why have the -p option at all if they don't want it to be called by other processes?

If they only want people using claude code inside their harness, they could... just remove -p?