{
  "$schema": "https://raw.githubusercontent.com/gotgenes/pi-packages/main/packages/pi-permission-system/schemas/permissions.schema.json",

  "debugLog": false,
  "permissionReviewLog": true,
  "yoloMode": false,
  "doublePressToConfirm": true,

  "forwardingTimeoutMs": 600000,

  "promptMaxRows": 24,
  "promptFieldMaxWidth": 400,

  "reviewLogFieldMaxWidth": 1000,

  "piInfrastructureReadPaths": [],

  "authorizerChain": [],

  "shellTools": {
    "exec_command": { "commandArgument": "cmd", "workdirArgument": "workdir" },
    "ssh_bash": { "commandArgument": "command", "decisionFloor": "ask" }
  },

  "permission": {
    "*": "ask",
    "path": {
      "*": "allow",
      "*.env": "deny",
      "*.env.*": "deny",
      "*.env.example": "allow"
    },
    "read": "allow",
    "write": "deny",
    "edit": "deny",
    "bash": {
      "*": "ask",
      "git *": "ask",
      "git status": "allow",
      "git diff": "allow",
      "npm *": { "action": "deny", "reason": "Use pnpm instead" }
    },
    "mcp": { "*": "ask", "mcp_status": "allow", "mcp_list": "allow" },
    "skill": { "*": "ask" },
    "external_directory": {
      "*": "ask",
      "~/development/*": "allow",
      "~/.cargo/registry/*": "allow"
    }
  }
}