1mounts:
2  /repo:
3    resource: ram?Plain memory, mounted as a directory with the same POSIX semantics as every other mount.
4    mode: EXEC
5  /secret:
6    resource: ram?Plain memory, mounted as a directory with the same POSIX semantics as every other mount.
7    mode: READ
8  /tmp:
9    resource: opfs?The browser's own storage, mounted at /tmp. Real files in this tab, kept across a reload.
10    root: .mirage/tmp
11    mode: WRITE
12  /bin:
13    resource: ram?Plain memory, mounted as a directory with the same POSIX semantics as every other mount.
14    mode: EXEC
15  /github:
16    resource: github?A GitHub repository, read over the API and mounted as a directory. No clone.
17    token: 
18    owner: strukto-ai
19    repo: mirage
20    mode: READ
21  /redis:
22    resource: redis?An Upstash database over its REST api, since a page cannot open a socket. Keys become paths.
23    url: 
24    mode: WRITE
25 
26runtimes:?The engines a line can run on: monty takes python and python3, quickjs takes node and js. Both are sandboxed, so their file I/O only reaches the mounts above. The builtin command engine is always present, so it is not listed.
27  - { name: monty, captures: [python, python3] }
28  - quickjs
29 
30clis:?A command installed under a name, the way git is. It is not a file on any mount, so the shell cannot change it, and only this workspace has it.
31  simple:
32    script: simple.js?The program, run on the engine named beside it.
33    runtime: quickjs
34 
35profiles:
36  admin:
37    commands:
38      allow: [cd, pwd, ls, cat, echo, touch, mkdir, sed, python3, python, history]
39 
40  user:
41    commands:
42      allow: [cd, pwd, ls, cat, touch, python3, python, simple]
43    policy:?A program the gate runs before every command this profile runs. It sees the command's context and reads the filesystem, and answers allow, ask or deny.
44      script: ask_curl.py?The program, run on the engine named beside it.
45      runtime: monty
46    mounts:
47      /tmp:
48        mode: read
49    paths:
50      hide:?Completely hidden, not merely unreadable. The unix tools neither list nor open these paths, and a program on any runtime cannot reach them either: for this profile the path is not there.
51        - /secret
52        - /github