Files
dotfiles/config/sandboxec/pi.yaml
T

44 lines
1.3 KiB
YAML

abi: 6
ignore-if-missing: true
unsafe-host-runtime: true
# Pi stores configuration, extensions, skills, and sessions under ~/.pi/agent.
# The current workspace is writable so agent edits remain confined to the repo
# from which Pi is launched. Network access is limited to model/API HTTPS.
fs:
- rwx:$HOME/.pi/agent/
- rwx:$HOME/.pi-lens/
- rwx:$HOME/.pi/context-mode/
- rw:$HOME/.pi/agent/settings.json
- rw:$HOME/.pi/agent/models.json
- r:$HOME/.pi/agent/AGENTS.md
- r:$HOME/.pi/skills/
- r:$HOME/.agents/skills/
- r:$HOME/.pi/agent/extensions/pi-permission-system/config.json
- rx:$HOME/.local/share/mise/installs/npm-earendil-works-pi-coding-agent/
- rw:$PWD
- rw:/tmp
- r:/dev/random
- r:/dev/urandom
- r:/etc/hosts
- r:/etc/ld.so.cache
- r:/etc/localtime
- r:/etc/nsswitch.conf
- r:/etc/resolv.conf
- r:/etc/ssl/certs
- r:/etc/ssl/certs/ca-certificates.crt
- r:/etc/ssl/openssl.cnf
- r:/home/linuxbrew/.linuxbrew/etc/openssl@3/openssl.cnf
- r:/proc/
- r:/proc/meminfo
- r:/proc/self/cgroup
- r:/proc/self/groups
- r:/proc/self/maps
- r:/proc/stat
- r:/sys/devices/system/cpu/online
- r:/usr/lib/locale/locale-archive
- r:/usr/lib/ssl/openssl.cnf
- r:/usr/share/locale/locale.alias
- rw:/dev/null
net:
- c:443