settings-local-json-wildcard-strategy-for-subagents

Subagents inherit parent session permissions from settings.local.json. Without broad wildcards covering Edit/Write for workspace paths and Bash for common CLI operations, every file modification by a subagent triggers a permission prompt that stalls the orchestrator. Replacing granular per-tool entries with workspace-scoped wildcards (e.g., Edit(/root/aj-workspace/**)) reduced entry count from 225 to 155 while expanding subagent capability — net improvement in both hygiene and functionality.