Permit npm cache and PTY access in pi-local

profiles/nono/pi-local.json

@@ -2,7 +2,7 @@
   "extends": "nolabs-ai/pi",
   "meta": {
     "name": "pi-local",
-    "description": "Restrictive local Pi sandbox with mediated network and Unix sockets"
+    "description": "Restrictive local Pi sandbox with mediated network, Unix sockets, and pseudo-terminal creation"
   },
   "groups": {
     "include": []
@@ -14,7 +14,11 @@
     "allow": [
       "$WORKDIR",
       "$TMPDIR",
-      "$HOME/.pi-lens"
+      "$HOME/.pi-lens",
+      "$HOME/.npm"
+    ],
+    "allow_file": [
+      "/dev/ptmx"
     ],
     "read_file": [
       "$HOME/.local/bin/claude",