Examples

nono run --allow . -- claude

nono run --allow . --read-file ~/.claude/config.json -- claude

nono run --profile openclaw -- openclaw gateway

nono run --allow ~/.openclaw -- openclaw gateway

nono run --allow ./workspace -- my-ai-agent

# Check a sensitive path
nono why ~/.ssh/id_rsa
# Output: BLOCKED: ~/.ssh/id_rsa is a sensitive path

# Check with suggestions
nono why -s ~/.aws
# Output includes: nono run --read ~/.aws -- <command>

nono why -s ./my-project
# Shows what flags would grant access

# Full build with all access
nono run --allow . -- cargo build

# Read source, write only to target
nono run --read ./src --read ./Cargo.toml --read ./Cargo.lock --allow ./target -- cargo build

# Install dependencies (requires network, allowed by default)
nono run --allow . -- npm install

# Run build (offline)
nono run --allow . --net-block -- npm run build

# Run tests
nono run --allow . -- npm test

nono run --allow . -- make

# Download a file (network allowed by default)
nono run --write ./downloads -- curl -o ./downloads/file.tar.gz https://example.com/file.tar.gz

# API request
nono run --allow . -- curl -X POST https://api.example.com/data

# Clone (network allowed by default)
nono run --allow ./repos -- git clone https://github.com/user/repo.git

# Local operations
nono run --allow . -- git status
nono run --allow . -- git commit -m "message"

# Push/pull (network allowed by default)
nono run --allow . -- git push

nono run --read ./src --allow ./dist -- webpack build

nono run --allow ./project-a --allow ./project-b -- my-tool

nono run --allow . --read ~/.local/share/my-tool -- my-tool

nono run --allow . --read /etc --dry-run -- my-agent

# Maximum verbosity
nono run -vvv --allow . -- command

# Should succeed - writing to allowed path
nono run --allow . -- sh -c "echo test > ./allowed.txt"

# Should fail - writing outside allowed path
nono run --allow . -- sh -c "echo test > /tmp/blocked.txt"

# Should succeed - network allowed by default
nono run --allow . -- curl https://example.com

# Should fail - network blocked with --net-block
nono run --allow . --net-block -- curl https://example.com

nono run --allow . -- ./my-script.sh

nono run --allow . -- sh -c "echo hello && ls -la"

nono run --allow . --read-file ~/.config/myapp/config.toml -- myapp

nono run --allow . \
  --read-file ~/.gitconfig \
  --read-file ~/.npmrc \
  -- my-tool

# Claude Code profile
nono run --profile claude-code -- claude

# OpenClaw profile
nono run --profile openclaw -- openclaw gateway

# Cargo build profile
nono run --profile cargo-build -- cargo build

nono run --profile claude-code --read /tmp/extra -- claude

nono run --profile claude-code --workdir ./my-project -- claude

nono run \
  --read ./src \
  --read ./tests \
  --write ./reviews \
  -- code-review-agent

nono run \
  --read ./src \
  --allow ./docs \
  -- doc-generator

nono run \
  --read ./input \
  --write ./output \
  --read-file ./config.yaml \
  -- data-processor

nono run \
  --allow . \
  --net-block \
  -- make release