Pi 1.0 and Gondolin: Codemode, Pi Durable, and a Clean 3-Tier Sandbox
How I run Pi 1.0.4 on the host, experiment with Durable sessions, and isolate regular Pi in Gondolin without per-tool wrappers.
Development#pi#gondolin#security
How I run Pi 1.0.4 on the host, experiment with Durable sessions, and isolate regular Pi in Gondolin without per-tool wrappers.
How I got image paste and file drag-and-drop working in pi over SSH from kitty, and stopped pi's regular TUI mode from wiping scrollback, without forking pi.
A two-command setup that runs the pi coding agent with either tool-only filesystem sandboxing or full clean-room isolation, each tier matching a different threat model.
A Gondolin-sandboxed pi session crashed on socket close because mise ships pi as a Bun binary while the Gondolin SDK targets Node; installing pi via npm under mise-managed Node fixed it.