diff --git a/src/agent/identity.ts b/src/agent/identity.ts
index 584751c..39758c1 100644
--- a/src/agent/identity.ts
+++ b/src/agent/identity.ts
@@ -190,6 +190,8 @@ export function createClaudeConfig(
     allow.push(`Read(${normalized}/**)`);
     allow.push(`Write(${normalized}/**)`);
     allow.push(`Edit(${normalized}/**)`);
+    allow.push(`Glob(${normalized}/**)`);
+    allow.push(`Grep(${normalized}/**)`);
   }
 
   // Deny list — the ../** rules are only added when there are NO path mappings.