Added nono profiles & orca integration - Added some extensions to start working on

2026-08-24 10:23:38 -04:00
parent 8bcb82813c
commit 10f64b593b
83 changed files with 21840 additions and 1353 deletions
@@ -0,0 +1,15 @@
+{
+  "extends": "pi-orca-local",
+  "meta": {
+    "name": "pi-harness-tools",
+    "description": "Harness-tools Pi sandbox for Orca with global skill and extension installation"
+  },
+  "filesystem": {
+    "allow": [
+      "$HOME/.agents/skills"
+    ],
+    "read": [
+      "$HOME/.config/orca/linux-orca-cli-shim"
+    ]
+  }
+}
@@ -0,0 +1,54 @@
+{
+  "extends": "nolabs-ai/pi",
+  "meta": {
+    "name": "pi-local",
+    "description": "Restrictive local Pi sandbox with mediated network and Unix sockets"
+  },
+  "groups": {
+    "include": []
+  },
+  "workdir": {
+    "access": "readwrite"
+  },
+  "filesystem": {
+    "allow": [
+      "$WORKDIR",
+      "$TMPDIR"
+    ],
+    "read": [
+      "$HOME/.bun",
+      "/srv/data/code/harness-tools/extensions/effort-controls",
+      "/srv/data/code/harness-tools/extensions/update"
+    ],
+    "unix_socket": [
+      "/run/systemd/resolve/io.systemd.Resolve"
+    ]
+  },
+  "linux": {
+    "af_unix_mediation": "pathname"
+  },
+  "network": {
+    "block": false,
+    "allow_domain": [
+      "chatgpt.com",
+      "api.openai.com",
+      "auth.openai.com",
+      "api.anthropic.com",
+      "generativelanguage.googleapis.com",
+      "git.jb.codes",
+      "github.com",
+      "api.github.com",
+      "codeload.github.com",
+      "raw.githubusercontent.com",
+      "objects.githubusercontent.com",
+      "registry.npmjs.org",
+      "pypi.org",
+      "files.pythonhosted.org",
+      "crates.io",
+      "index.crates.io",
+      "static.crates.io",
+      "static.rust-lang.org",
+      "nodejs.org"
+    ]
+  }
+}
@@ -0,0 +1,17 @@
+{
+  "extends": "pi-local",
+  "meta": {
+    "name": "pi-orca-local",
+    "description": "Restrictive local Pi sandbox with Orca hook integration"
+  },
+  "filesystem": {
+    "read_file": [
+      "/home/jb/.config/orca/agent-hooks/endpoint.env"
+    ]
+  },
+  "network": {
+    "allow_domain": [
+      "127.0.0.1"
+    ]
+  }
+}
@@ -0,0 +1,12 @@
+{
+  "extends": "pi-orca-local",
+  "meta": {
+    "name": "pi-work",
+    "description": "Work Pi sandbox with Orca hooks and work Git integration"
+  },
+  "filesystem": {
+    "read_file": [
+      "/srv/work/.config/git/work-ai-ignore"
+    ]
+  }
+}
@@ -0,0 +1,8 @@
+{
+  "defaultProfile": "pi-orca-local",
+  "projectRoots": {
+    "/srv/work": "pi-work",
+    "/srv/data/code/harness-tools": "pi-harness-tools"
+  },
+  "projects": {}
+}