{
  "extends": "default",
  "meta": {
    "name": "provider-openai",
    "description": "OpenAI route with a Nono-mediated phantom credential"
  },
  "groups": {
    "exclude": [
      "homebrew_linux",
      "homebrew_macos",
      "system_read_linux_core",
      "system_read_macos",
      "system_write_linux",
      "system_write_macos",
      "user_tools"
    ]
  },
  "workdir": {
    "access": "none"
  },
  "network": {
    "block": false,
    "allow_domain": [],
    "credentials": [
      "openai"
    ],
    "custom_credentials": {
      "openai": {
        "upstream": "https://api.openai.com/v1",
        "credential_key": "OPENAI_API_KEY",
        "inject_header": "Authorization",
        "credential_format": "Bearer {}",
        "env_var": "OPENAI_API_KEY"
      }
    }
  },
  "environment": {
    "allow_vars": [
      "HOME",
      "LANG",
      "LC_ALL",
      "PATH",
      "TERM",
      "TMPDIR",
      "XDG_CACHE_HOME",
      "XDG_CONFIG_HOME",
      "XDG_RUNTIME_DIR",
      "XDG_STATE_HOME"
    ],
    "deny_vars": [
      "ANTHROPIC_API_KEY",
      "GH_TOKEN",
      "GITHUB_TOKEN",
      "MORPH_API_KEY",
      "OPENAI_API_KEY",
      "SSH_AUTH_SOCK"
    ]
  },
  "open_urls": {
    "allow_origins": [],
    "allow_localhost": false
  },
  "allow_launch_services": false
}