feat: file system access, behind a path policy and an approval (#25)

package.json

@@ -173,7 +173,31 @@
         { "title": "Unlimited (no cap)", "value": "unlimited" }
       ]
     }
-  ],
+  ,
+    {
+      "name": "fileAccess",
+      "title": "File Access",
+      "label": "Let Lam read and change files",
+      "description": "Off by default. When this is on, Lam can list, search and read files under your home directory, and can create, change, move and delete files in Downloads, Documents/Lam Agent and its own folder. Every change is shown to you for approval first, credential stores are never readable, and anything Lam reads is sent to the model provider with the conversation.",
+      "type": "checkbox",
+      "required": false,
+      "default": false
+    },
+    {
+      "name": "readRoots",
+      "title": "Extra Readable Folders",
+      "description": "Additional folders Lam may read, one absolute path per line. Your home directory is always readable, except for credential stores. Useful for a project folder or an external drive.",
+      "type": "textfield",
+      "required": false
+    },
+    {
+      "name": "writeRoots",
+      "title": "Extra Writable Folders",
+      "description": "Additional folders Lam may change, one absolute path per line. Downloads and Documents/Lam Agent are always writable when File Access is on, and everything here is still approved change by change.",
+      "type": "textfield",
+      "required": false
+    }
+],
   "dependencies": {
     "@vicinae/api": "^0.29.0",
     "zod": "^4.4.3"