From bfb07282d681e4c6732dd7c486c5abc3c9073d90 Mon Sep 17 00:00:00 2001
From: JB <jb@jb.codes>
Date: Tue, 25 Aug 2026 15:38:56 -0400
Subject: [PATCH] Permit npm cache and PTY access in pi-local

---
 profiles/nono/pi-local.json | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/profiles/nono/pi-local.json b/profiles/nono/pi-local.json
index fd9b938..baebe8c 100644
--- a/profiles/nono/pi-local.json
+++ b/profiles/nono/pi-local.json
@@ -2,7 +2,7 @@
   "extends": "nolabs-ai/pi",
   "meta": {
     "name": "pi-local",
-    "description": "Restrictive local Pi sandbox with mediated network and Unix sockets"
+    "description": "Restrictive local Pi sandbox with mediated network, Unix sockets, and pseudo-terminal creation"
   },
   "groups": {
     "include": []
@@ -14,7 +14,11 @@
     "allow": [
       "$WORKDIR",
       "$TMPDIR",
-      "$HOME/.pi-lens"
+      "$HOME/.pi-lens",
+      "$HOME/.npm"
+    ],
+    "allow_file": [
+      "/dev/ptmx"
     ],
     "read_file": [
       "$HOME/.local/bin/claude",