From 1774640f95a475a4d8f245be1307b451b5493b48 Mon Sep 17 00:00:00 2001
From: Levi Neely <lneely@pascom.net>
Date: Mon, 2 Mar 2026 10:53:16 +0100
Subject: [PATCH] Update default role perms: move .npm/.yarn to read-write, add
 .mcp-auth

---
 cfg/roles/default.yaml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/cfg/roles/default.yaml b/cfg/roles/default.yaml
index 787a98b..612eed2 100644
--- a/cfg/roles/default.yaml
+++ b/cfg/roles/default.yaml
@@ -42,8 +42,6 @@ filesystem:
     - "{HOME}/.gradle"
     - "/var/run/docker.sock"
     - "{HOME}/.docker"
-    - "{HOME}/.npm"
-    - "{HOME}/.yarn"
     - "{HOME}/.pnpm-store"
     - "{XDG_CONFIG_HOME}/yarn"
     - "{HOME}/.yarnrc.yml"
@@ -82,6 +80,9 @@ filesystem:
     - "{HOME}/prj"
     - "{HOME}/.nvm"
     - "{HOME}/.please"
+    - "{HOME}/.npm"
+    - "{HOME}/.mcp-auth"
+    - "{HOME}/.yarn"
 env:
   - AGENT_SKILLS_PATH
   - NAMESPACE