The Claude agent's tool calls were being silently denied:
- Used Edit (not in allowed-tools) instead of Write to update README
- Chained git commands with && which didn't match individual patterns
- git push (no args) didn't match Bash(git push *)
Fixes:
- Add Edit to allowed-tools alongside Write
- Add Bash(git push) pattern for bare git push
- Instruct agent to run git commands as separate Bash calls
- Only post PR comment after confirming git push succeeded
Co-authored-by: Cursor <cursoragent@cursor.com>