From 1ec70054d8da5e43736fa65c4151f0314662c337 Mon Sep 17 00:00:00 2001
From: stevef <stevef@example.com>
Date: Sun, 19 Apr 2026 15:04:44 +0200
Subject: [PATCH] fix(k3s): correctly move memory path exceptions to agent
 defaults

---
 k3s/config.json    | 22 +++++++++-------------
 k3s/configmap.yaml | 17 ++++++++---------
 2 files changed, 17 insertions(+), 22 deletions(-)

diff --git a/k3s/config.json b/k3s/config.json
index dd74db94f..f8fa25de2 100644
--- a/k3s/config.json
+++ b/k3s/config.json
@@ -7,7 +7,12 @@
     "defaults": {
       "workspace": "/home/picoclaw/.picoclaw",
       "restrict_to_workspace": true,
-      "allow_read_outside_workspace": false,
+      "allow_read_paths": [
+        "/home/picoclaw/.picoclaw/memory"
+      ],
+      "allow_write_paths": [
+        "/home/picoclaw/.picoclaw/memory"
+      ],
       "provider": "",
       "model_name": "nemotron-3-super-120b-a12b",
       "max_tokens": 32768,
@@ -640,22 +645,13 @@
     "read_file": {
       "enabled": true,
       "mode": "plaintext",
-      "max_read_file_size": 1048576,
-      "allow_read_paths": [
-        "/home/picoclaw/.picoclaw/memory"
-      ]
+      "max_read_file_size": 1048576
     },
     "write_file": {
-      "enabled": true,
-      "allow_write_paths": [
-        "/home/picoclaw/.picoclaw/memory"
-      ]
+      "enabled": true
     },
     "append_file": {
-      "enabled": true,
-      "allow_append_paths": [
-        "/home/picoclaw/.picoclaw/memory"
-      ]
+      "enabled": true
     },
     "send_file": {
       "enabled": true
diff --git a/k3s/configmap.yaml b/k3s/configmap.yaml
index b2ecba654..d2b87a5e0 100644
--- a/k3s/configmap.yaml
+++ b/k3s/configmap.yaml
@@ -14,7 +14,12 @@ data:
         "defaults": {
           "workspace": "/home/picoclaw/.picoclaw",
           "restrict_to_workspace": true,
-          "allow_read_outside_workspace": false,
+          "allow_read_paths": [
+            "/home/picoclaw/.picoclaw/memory"
+          ],
+          "allow_write_paths": [
+            "/home/picoclaw/.picoclaw/memory"
+          ],
           "provider": "",
           "model_name": "nemotron-3-super-120b-a12b",
           "max_tokens": 32768,
@@ -624,10 +629,7 @@ data:
           }
         },
         "append_file": {
-          "enabled": true,
-          "allow_append_paths": [
-            "/home/picoclaw/.picoclaw/memory"
-          ]
+          "enabled": true
         },
         "edit_file": {
           "enabled": true
@@ -650,10 +652,7 @@ data:
         "read_file": {
           "enabled": true,
           "mode": "plaintext",
-          "max_read_file_size": 1048576,
-          "allow_read_paths": [
-            "/home/picoclaw/.picoclaw/memory"
-          ]
+          "max_read_file_size": 1048576
         },
         "write_file": {
           "enabled": true