feat(nono): add droid-local profile

Sandbox the Droid CLI the same way the other harnesses are, as a thin
delta over a base profile.

The Nono registry ships no nolabs-ai/droid pack, so droid.json.tmpl
stands in for one locally, mirroring the structure the official agent
packs use. Delete it and repoint droid-local if a pack ever ships.

Droid-specific grants beyond the shared local delta:

- ~/.factory holds the entire config tree, including the auth keyring
- $TMPDIR needs read as well as write, because the Execute tool creates
  /tmp/droid-terminal-XXXXXX and reads back from it while Nono leaves
  /tmp write-only
- ~/.config/agents/AGENTS.md is granted explicitly, since Landlock
  resolves the ~/.agents/AGENTS.md symlink to its target

Also symlinks ~/.agents/AGENTS.md so Droid picks up the global agent
instructions, which it was the only harness missing.

Author: scottames

home/dot_agents/symlink_AGENTS.md.tmpl

@@ -0,0 +1 @@
+{{ .chezmoi.homeDir }}/.config/agents/AGENTS.md

home/private_dot_config/fish/conf.d/abbrs.fish

@@ -191,6 +191,8 @@ abbr -a nncx "nono-with-local-path wrap --profile codex-local --allow-cwd -- cod
 abbr -a nncxc "nono-with-local-path wrap --profile codex-local --allow-cwd -- codex resume --last"
 abbr -a nnp nono-pi
 abbr -a nnpc "nono-pi --continue"
+abbr -a nnd "nono-with-local-path wrap --profile droid-local --allow-cwd -- droid"
+abbr -a nndc "nono-with-local-path wrap --profile droid-local --allow-cwd -- droid --resume"
 abbr -a o open
 abbr -a oc opencode
 abbr -a occ "opencode --continue"

home/private_dot_config/nono/profiles/droid-local.json.tmpl

@@ -0,0 +1,17 @@
+{{- /* extends "droid" is the local base profile alongside this one, not a
+       registry pack: the Nono registry has no nolabs-ai/droid pack. Droid
+       spawns and signals its own children (droid exec subagents, background
+       processes), so it needs signal_mode allow_same_sandbox via "security".
+       ~/.agents/AGENTS.md is a symlink, so reading it needs its target granted
+       on top of the base profile's ~/.agents read. */ -}}
+{{- includeTemplate "nono-local-profile" (dict
+      "ctx" .
+      "extends" "droid"
+      "name" "droid-local"
+      "version" "0.1.0"
+      "description" "Droid with local mise runtime access and external git include access"
+      "security" true
+      "extraReadFile" (list
+        (joinPath .chezmoi.homeDir ".config/agents/AGENTS.md")
+      )
+) -}}

home/private_dot_config/nono/profiles/droid.json.tmpl

@@ -0,0 +1,76 @@
+{{- /* Local stand-in for a registry-managed base pack: the Nono registry ships
+       no nolabs-ai/droid pack (`nono search droid` finds nothing), so this
+       mirrors the structure of the official agent packs to keep droid-local a
+       thin delta. Delete this file and repoint droid-local at the pack if one
+       ever ships.
+
+       - ~/.factory is droid's entire config tree: settings.json, the auth
+         keyring, sessions, logs, droids, snapshots, specs, bin/rg, certs.
+       - ~/.agents is where droid discovers personal skills and AGENTS.md.
+       - $TMPDIR needs read as well as write: droid's Execute tool creates
+         /tmp/droid-terminal-XXXXXX and reads back from it, while Nono's
+         system_write_linux group leaves /tmp write-only. */ -}}
+{
+  "$schema": "https://raw.githubusercontent.com/nolabs-ai/nono/refs/heads/main/crates/nono-cli/data/nono-profile.schema.json",
+  "extends": "default",
+  "meta": {
+    "name": "droid",
+    "version": "0.1.0",
+    "description": "Factory Droid CLI agent (local base profile)"
+  },
+  "groups": {
+    "include": [
+      "node_runtime",
+      "rust_runtime",
+      "python_runtime",
+      { "name": "user_caches_macos", "when": "macos" },
+      { "name": "user_caches_linux", "when": "linux" },
+      { "name": "linux_sysfs_read", "when": "linux" },
+      "nix_runtime",
+      "git_config",
+      "unlink_protection"
+    ]
+  },
+  "security": {
+    "signal_mode": "isolated",
+    "capability_elevation": false
+  },
+  "filesystem": {
+    "allow": [
+      "{{ joinPath .chezmoi.homeDir ".factory" }}",
+      "{{ joinPath .chezmoi.homeDir ".config/nono/profile-drafts" }}",
+      "$TMPDIR"
+    ],
+    "read": [
+      "{{ joinPath .chezmoi.homeDir ".agents" }}",
+      "{{ joinPath .chezmoi.homeDir ".config/nono/packages" }}",
+      "{{ joinPath .chezmoi.homeDir ".config/nono/profiles" }}"
+    ]
+  },
+  "network": {
+    "block": false
+  },
+  "workdir": {
+    "access": "readwrite"
+  },
+  "open_urls": {
+    "allow_origins": [
+      "https://app.factory.ai",
+      "https://factory.ai",
+      "https://github.com"
+    ],
+    "allow_localhost": true
+  },
+  "allow_launch_services": true,
+  "undo": {
+    "exclude_patterns": [
+      "node_modules",
+      ".next",
+      "__pycache__",
+      "target",
+      ".factory"
+    ],
+    "exclude_globs": ["*.tmp.[0-9]*.[0-9]*"]
+  },
+  "interactive": true
+}