1{
 2  "meta": {
 3    "name": "pi-nono-local",
 4    "description": "Pi with a writable current worktree and only model-provider network access"
 5  },
 6  "groups": {
 7    "include": ["deny_credentials"]
 8  },
 9  "workdir": {
10    "access": "readwrite"
11  },
12  "filesystem": {
13    "read": ["$XDG_DATA_HOME/nono/pi-agent"],
14    "write": ["$XDG_DATA_HOME/nono/pi-agent"]
15  },
16  "network": {
17    "allow_domain": [
18      "aiplatform.googleapis.com",
19      "generativelanguage.googleapis.com",
20      "api.githubcopilot.com",
21      "api.individual.githubcopilot.com",
22      "github.com"
23    ]
24  }
25}