{
  "extends": "nolabs-ai/pi",
  "meta": {
    "name": "pi-local",
    "description": "Restrictive local Pi sandbox with mediated network, Unix sockets, and pseudo-terminal creation"
  },
  "groups": {
    "include": []
  },
  "workdir": {
    "access": "readwrite"
  },
  "filesystem": {
    "allow": [
      "$WORKDIR",
      "$TMPDIR",
      "$HOME/.pi-lens",
      "$HOME/.npm"
    ],
    "allow_file": [
      "/dev/ptmx"
    ],
    "deny": [
      "$HOME/.local/share/pi-dictate"
    ],
    "read_file": [
      "$HOME/.local/bin/claude",
      "$HOME/.local/bin/codex"
    ],
    "read": [
      "$HOME/.bun",
      "/srv/data/code/harness-tools/extensions/effort-controls",
      "/srv/data/code/harness-tools/extensions/update"
    ],
    "unix_socket": [
      "/run/systemd/resolve/io.systemd.Resolve",
      "/home/jb/.config/herdr/herdr.sock",
      "/run/user/1000/pi-dictate.sock"
    ]
  },
  "linux": {
    "af_unix_mediation": "pathname"
  },
  "network": {
    "block": false,
    "allow_domain": [
      "chatgpt.com",
      "api.openai.com",
      "auth.openai.com",
      "api.anthropic.com",
      "generativelanguage.googleapis.com",
      "git.jb.codes",
      "github.com",
      "api.github.com",
      "codeload.github.com",
      "raw.githubusercontent.com",
      "objects.githubusercontent.com",
      "registry.npmjs.org",
      "pypi.org",
      "files.pythonhosted.org",
      "crates.io",
      "index.crates.io",
      "static.crates.io",
      "static.rust-lang.org",
      "nodejs.org"
    ]
  }
}