From c03a75e4c0f9fbd6a1ce8e7aab90440f43dcb1e3 Mon Sep 17 00:00:00 2001
From: Jeroen Schweitzer <jpmschweitzer@gmail.com>
Date: Sat, 6 Jun 2026 13:07:22 +0200
Subject: [PATCH] chore(config): allow Bash(pql) in the permission allowlist
 (phase 4)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Completes the Phase 4 consumer cutover: adds Bash(pql) / Bash(pql *) to
.claude/settings.json so the pql workflow runs without prompts. Added manually by
the lead — the auto-mode classifier blocks an agent from self-widening wildcard Bash
permissions even via /update-config (a deliberate security boundary).

SR_DB_PATH and the Bash(tooling/db/*) allowlist stay until Phase 6 (rollback path).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 .claude/settings.json | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.claude/settings.json b/.claude/settings.json
index 042aeabc2..992684786 100644
--- a/.claude/settings.json
+++ b/.claude/settings.json
@@ -42,6 +42,9 @@
       "Bash(make *)",
       "Bash(make)",
 
+      "Bash(pql)",
+      "Bash(pql *)",
+
       "Bash(tea *)",
       "Bash(tooling/tea-comment *)",