60 lines
1.3 KiB
JSON
60 lines
1.3 KiB
JSON
{
|
|
"extends": "nolabs-ai/pi",
|
|
"meta": {
|
|
"name": "pi-local",
|
|
"description": "Restrictive local Pi sandbox with mediated network and Unix sockets"
|
|
},
|
|
"groups": {
|
|
"include": []
|
|
},
|
|
"workdir": {
|
|
"access": "readwrite"
|
|
},
|
|
"filesystem": {
|
|
"allow": [
|
|
"$WORKDIR",
|
|
"$TMPDIR",
|
|
"$HOME/.pi-lens"
|
|
],
|
|
"read_file": [
|
|
"$HOME/.local/bin/claude",
|
|
"$HOME/.local/bin/codex"
|
|
],
|
|
"read": [
|
|
"$HOME/.bun",
|
|
"/srv/data/code/harness-tools/extensions/effort-controls",
|
|
"/srv/data/code/harness-tools/extensions/update"
|
|
],
|
|
"unix_socket": [
|
|
"/run/systemd/resolve/io.systemd.Resolve"
|
|
]
|
|
},
|
|
"linux": {
|
|
"af_unix_mediation": "pathname"
|
|
},
|
|
"network": {
|
|
"block": false,
|
|
"allow_domain": [
|
|
"chatgpt.com",
|
|
"api.openai.com",
|
|
"auth.openai.com",
|
|
"api.anthropic.com",
|
|
"generativelanguage.googleapis.com",
|
|
"git.jb.codes",
|
|
"github.com",
|
|
"api.github.com",
|
|
"codeload.github.com",
|
|
"raw.githubusercontent.com",
|
|
"objects.githubusercontent.com",
|
|
"registry.npmjs.org",
|
|
"pypi.org",
|
|
"files.pythonhosted.org",
|
|
"crates.io",
|
|
"index.crates.io",
|
|
"static.crates.io",
|
|
"static.rust-lang.org",
|
|
"nodejs.org"
|
|
]
|
|
}
|
|
}
|