{
  "$schema": "https://raw.githubusercontent.com/gotgenes/pi-packages/main/packages/pi-permission-system/schemas/permissions.schema.json",
  "debugLog": false,
  "permissionReviewLog": true,
  "yoloMode": false,
  "doublePressToConfirm": true,
  "authorizerChain": [
    "auto-review"
  ],
  "shellTools": {
    "ssh_bash": {
      "commandArgument": "command",
      "decisionFloor": "ask"
    }
  },
  "permission": {
    "*": "allow",
    "grep": "allow",
    "find": "allow",
    "multi_grep": "allow",
    "ssh_connect": "ask",
    "ssh_cd": "ask",
    "ssh_read": "ask",
    "ssh_write": "ask",
    "ssh_edit": "ask",
    "ssh_find": "ask",
    "ssh_grep": "ask",
    "external_directory": {
      "*": "ask"
    },
    "path": {
      "*": "allow",
      ".git/*": "ask",
      "*.env": "deny",
      "*.env.*": "deny",
      "*.env.example": "allow",
      "~/.ssh": "deny",
      "~/.ssh/*": "deny",
      "~/.gnupg": "deny",
      "~/.gnupg/*": "deny",
      "~/.aws": "deny",
      "~/.aws/*": "deny",
      "~/.kube": "deny",
      "~/.kube/*": "deny",
      "~/.docker/config.json": "deny",
      "~/.config/gh/hosts.yml": "deny",
      "~/.netrc": "deny",
      "~/.npmrc": "deny",
      "~/.pypirc": "deny",
      "~/Library/Keychains": "deny",
      "~/Library/Keychains/*": "deny",
      "~/.pi/agent/auth.json": "deny",
      "~/.pi/agent/models.json": "deny",
      "~/.pi/agent/models-store.json": "deny"
    },
    "bash": {
      "*": "allow",
      "rg*": "deny",
      "grep*": "deny",
      "find*": "deny",
      "fd*": "deny",
      "git *": "ask",
      "git status*": "allow",
      "git diff*": "allow",
      "git log*": "allow",
      "git show*": "allow",
      "git rev-parse*": "allow",
      "git ls-files*": "allow",
      "git grep*": "deny",
      "git branch": "allow",
      "git branch --show-current*": "allow",
      "git remote -v": "allow",
      "git remote get-url*": "allow",
      "npm install *": "ask",
      "npm add *": "ask",
      "npm uninstall *": "ask",
      "npm update *": "ask",
      "pnpm install *": "ask",
      "pnpm add *": "ask",
      "pnpm uninstall *": "ask",
      "pnpm update *": "ask",
      "bun install *": "ask",
      "bun add *": "ask",
      "bun uninstall *": "ask",
      "bun update *": "ask",
      "pip install *": "ask",
      "pip3 install *": "ask",
      "brew install *": "ask",
      "brew uninstall *": "ask",
      "rm *": "ask",
      "/bin/rm *": "ask",
      "rmdir *": "ask",
      "/bin/rmdir *": "ask",
      "unlink *": "ask",
      "/usr/bin/unlink *": "ask",
      "mv *": "ask",
      "/bin/mv *": "ask",
      "truncate *": "ask",
      "dd *": "ask",
      "chmod *": "ask",
      "chown *": "ask",
      "sudo *": "ask",
      "su *": "ask",
      "kill *": "ask",
      "pkill *": "ask",
      "diskutil *": "ask",
      "security *": "ask",
      "launchctl *": "ask",
      "osascript *": "ask",
      "open *": "ask",
      "ssh *": "ask",
      "scp *": "ask",
      "sftp *": "ask",
      "rsync *": "ask",
      "curl *": "ask",
      "wget *": "ask",
      "printenv*": "ask"
    },
    "mcp": {
      "*": "ask",
      "mcp_status": "allow",
      "mcp_list": "allow"
    },
    "skill": {
      "*": "allow"
    }
  }
}