From 5c14b05c16386ea707b9f1afffdc2d73b0aa16ba Mon Sep 17 00:00:00 2001
From: 0xWheatyz <wyatt@leeworks.dev>
Date: Tue, 21 Apr 2026 18:59:14 -0400
Subject: [PATCH] feat(claude): broaden allowed tool permissions in settings

Replace restrictive bash-only permissions with full tool access
including Read, Glob, Grep, WebFetch, WebSearch, Agent, and
NotebookEdit for a more capable Claude Code experience.
---
 home.nix | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/home.nix b/home.nix
index 65c2313..3c2f208 100644
--- a/home.nix
+++ b/home.nix
@@ -276,11 +276,15 @@
         allow = [
           "Edit"
           "Write"
-          "Bash(git:*)"
-          "Bash(nix-shell:*)"
-          "Bash(nix eval:*)"
-          "Bash(nix flake check:*)"
-         ];
+          "Read"
+          "Glob"
+          "Grep"
+          "Bash"
+          "WebFetch"
+          "WebSearch"
+          "Agent"
+          "NotebookEdit"
+        ];
       };
       alwaysThinkingEnabled = true;
       includeCoAuthoredBy = false;