# Default sandbox config for ollie-remote.
# Simpler than local — only needs project execution access.
filesystem:
  ro:
    - "/etc"
    - "/proc"
    - "/sys"
    - "/dev"
    - "{HOME}/.ssh/known_hosts"
    - "{HOME}/.gitconfig"
    - "{HOME}/.netrc"
  rw:
    - "/dev/null"
    - "/dev/zero"
    - "/dev/urandom"
    - "/dev/random"
  rox:
    - "/usr"
    - "/lib"
    - "/lib64"
    - "/bin"
    - "/sbin"
    - "{HOME}/bin"
    - "{HOME}/go/bin"
    - "{HOME}/.cargo/bin"
    - "{HOME}/.local/bin"
    - "{HOME}/.nvm"
    - "{HOME}/.pyenv"
    - "{XDG_CONFIG_HOME}/ollie/tools"
  rwx:
    - "{CWD}"
    - "{TMPDIR}"
    - "/tmp"
    - "{HOME}/.cache"
    - "{HOME}/go"
    - "{HOME}/.cargo"
    - "{HOME}/.npm"
env:
  - PATH
  - HOME
  - TMPDIR
  - GOPATH
  - GOBIN
  - XDG_CONFIG_HOME
  - XDG_DATA_HOME
  - SSH_AUTH_SOCK
network:
  unrestricted: true
general:
  best_effort: true