refactor(permission-system): simplify policy and autoreview flow

pi-permission-system/src/extension-config.ts

@@ -24,8 +24,6 @@ export interface PermissionSystemExtensionConfig {
   yoloMode: boolean;
   /** Require a confirming second press of a decision hotkey in the inline TUI dialog. Defaults to true. */
   doublePressToConfirm: boolean;
-  /** Additional directories to auto-allow for reads as Pi infrastructure. */
-  piInfrastructureReadPaths?: string[];
   /** How long a subagent waits for the parent's answer to a forwarded ask, in ms. Defaults to 600000. */
   forwardingTimeoutMs?: number;
   /** Max rows a permission prompt renders before eliding its evidence. Defaults to 24. */
@@ -64,7 +62,6 @@ const PERMISSION_POLICY_KEYS: ReadonlySet<string> = new Set([
   "mcp",
   "skills",
   "special",
-  "external_directory",
 ]);
 
 export function detectMisplacedPermissionKeys(
@@ -88,9 +85,6 @@ export function normalizePermissionSystemConfig(
   if (raw.analysis !== undefined) {
     result.analysis = normalizeAutoReviewAnalysisConfig(raw.analysis);
   }
-  if (raw.piInfrastructureReadPaths !== undefined) {
-    result.piInfrastructureReadPaths = raw.piInfrastructureReadPaths;
-  }
   if (raw.forwardingTimeoutMs !== undefined) {
     result.forwardingTimeoutMs = raw.forwardingTimeoutMs;
   }