From d605f4c388d45369c6f7dc8d8aff74fa7bb1ff5e Mon Sep 17 00:00:00 2001
From: Steve Beaulac <steve@beaulac.me>
Date: Fri, 21 Aug 2026 15:18:09 -0400
Subject: [PATCH] refactor(permission-system): reorganize path permissions and
 add vault access

---
 .../pi-permission-system/config.json          | 46 +++++++++----------
 1 file changed, 23 insertions(+), 23 deletions(-)

diff --git a/config/pi/agent/extensions/pi-permission-system/config.json b/config/pi/agent/extensions/pi-permission-system/config.json
index 7076b2d..50aa043 100644
--- a/config/pi/agent/extensions/pi-permission-system/config.json
+++ b/config/pi/agent/extensions/pi-permission-system/config.json
@@ -1,26 +1,26 @@
 {
-  "permission": {
-    "*": "ask",
-    "path": {
-      "./*": "allow",
-      "./.*": "allow",
-      "~/.ssh/*": "deny",
-      "*.env": "deny",
-      "*.env.*": "deny",
-      "*.env.example": "allow",
-      "/tmp/*": "ask"
+    "permission": {
+        "*": "ask",
+        "path": {
+            "./*": "allow",
+            "./.*": "allow",
+            "~/.ssh/*": "deny",
+            "*.env": "deny",
+            "*.env.*": "deny",
+            "*.env.example": "allow"
+        },
+        "bash": {
+            "*": "ask",
+            "rm -rf *": "deny",
+            "sudo *": "ask"
+        },
+        "external_directory": {
+            "*": "ask",
+            "/tmp/*": "ask",
+            "~/Documents/sjb-brain/*": "allow"
+        }
     },
-    "bash": {
-      "*": "ask",
-      "rm -rf *": "deny",
-      "sudo *": "ask"
-    },
-    "external_directory": {
-      "*": "ask",
-      "~/Documents/sjb-brain/*": "allow"
-    }
-  },
-  "debugLog": false,
-  "permissionReviewLog": true,
-  "yoloMode": true
+    "debugLog": false,
+    "permissionReviewLog": true,
+    "yoloMode": true
 }