From cff6d0cc3c4cb7aee2ad87216000b9308902b3ea Mon Sep 17 00:00:00 2001
From: Nick Tabeling <nick.tabeling@ohb-ds.de>
Date: Mon, 13 Apr 2026 11:16:30 +0200
Subject: [PATCH] fix(DIS-152): add Glob and Grep permissions for mapped host
 paths
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Glob and Grep are separate tools from Read in Claude Code's permission
model — the agent was triggering permission prompts when trying to use
Glob on the host path even though Read was allowed.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 src/agent/identity.ts | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/agent/identity.ts b/src/agent/identity.ts
index 584751c..39758c1 100644
--- a/src/agent/identity.ts
+++ b/src/agent/identity.ts
@@ -190,6 +190,8 @@ export function createClaudeConfig(
     allow.push(`Read(${normalized}/**)`);
     allow.push(`Write(${normalized}/**)`);
     allow.push(`Edit(${normalized}/**)`);
+    allow.push(`Glob(${normalized}/**)`);
+    allow.push(`Grep(${normalized}/**)`);
   }
 
   // Deny list — the ../** rules are only added when there are NO path mappings.