fix: Correct permission issue on /ck:judge and /ck:make

commands/config.md

@@ -2,7 +2,7 @@
 name: ck-config
 description: Show or update Cavekit execution model presets
 argument-hint: "[list | preset <expensive|quality|balanced|fast> [--global]]"
-allowed-tools: ["Bash(${CLAUDE_PLUGIN_ROOT}/scripts/bp-config.sh:*)"]
+allowed-tools: ["Bash(${CLAUDE_PLUGIN_ROOT}/scripts/bp-config.sh*)"]
 ---
 
 > **Note:** `/bp:config` is deprecated and will be removed in a future version. Use `/ck:config` instead.

commands/judge.md

@@ -2,7 +2,7 @@
 name: ck-judge
 description: "Invoke Codex adversarial review on demand — diffs current tier against worktree base and outputs findings"
 argument-hint: "[--base REF]"
-allowed-tools: ["Bash(${CLAUDE_PLUGIN_ROOT}/scripts/codex-review.sh:*)"]
+allowed-tools: ["Bash(${CLAUDE_PLUGIN_ROOT}/scripts/codex-review.sh*)"]
 ---
 
 > **Note:** `/bp:codex-review`, `/ck:codex-review`, `/bp:judge` are deprecated aliases. Use `/ck:judge` instead.
@@ -13,11 +13,7 @@ Run an on-demand adversarial code review using the Codex CLI. This sends the cur
 
 ## Execution
 
-Run the review script, forwarding any arguments the user provided:
-
-```!
-"${CLAUDE_PLUGIN_ROOT}/scripts/codex-review.sh" $ARGUMENTS
-```
+Run the review script, forwarding any arguments the user provided: `"${CLAUDE_PLUGIN_ROOT}/scripts/codex-review.sh" $ARGUMENTS`.
 
 ## Behavior
 

commands/make.md

@@ -2,18 +2,14 @@
 name: ck-make
 description: "Implement a build site or plan — automatically parallelizes independent tasks and progresses through tiers autonomously"
 argument-hint: "[FILE] [--filter PATTERN] [--peer-review] [--max-iterations N] [--completion-promise TEXT]"
-allowed-tools: ["Bash(${CLAUDE_PLUGIN_ROOT}/scripts/setup-build.sh:*)", "Bash(${CLAUDE_PLUGIN_ROOT}/scripts/bp-config.sh:*)", "Bash(git *)"]
+allowed-tools: ["Bash(${CLAUDE_PLUGIN_ROOT}/scripts/setup-build.sh*)", "Bash(${CLAUDE_PLUGIN_ROOT}/scripts/bp-config.sh*)", "Bash(git *)"]
 ---
 
 > **Note:** `/bp:build`, `/ck:build`, `/bp:make` are deprecated aliases. Use `/ck:make` instead.
 
 # Cavekit Build — Autonomous Implementation
 
-This is the third phase of Cavekit. Execute the setup script:
-
-```!
-"${CLAUDE_PLUGIN_ROOT}/scripts/setup-build.sh" $ARGUMENTS
-```
+This is the third phase of Cavekit. Run `"${CLAUDE_PLUGIN_ROOT}/scripts/setup-build.sh" $ARGUMENTS`.
 
 ## Resolve Execution Profile
 

commands/quick.md

@@ -2,7 +2,7 @@
 name: ck-quick
 description: "Quick end-to-end: describe a feature, get it built — draft, architect, build, and inspect without stopping"
 argument-hint: "<feature description> [--skip-inspect] [--peer-review] [--max-iterations N]"
-allowed-tools: ["Bash(${CLAUDE_PLUGIN_ROOT}/scripts/setup-build.sh:*)", "Bash(${CLAUDE_PLUGIN_ROOT}/scripts/bp-config.sh:*)", "Bash(git *)"]
+allowed-tools: ["Bash(${CLAUDE_PLUGIN_ROOT}/scripts/setup-build.sh*)", "Bash(${CLAUDE_PLUGIN_ROOT}/scripts/bp-config.sh*)", "Bash(git *)"]
 ---
 
 > **Note:** `/bp:quick` is deprecated and will be removed in a future version. Use `/ck:quick` instead.

context/kits/kit-command-gate.md

@@ -36,7 +36,7 @@ Send ambiguous commands to Codex (gpt-5.4-mini) for safety classification.
 
 ### R4: Claude Permission Integration
 Integrate with Claude Code's existing allow/block permission system rather than replacing it.
-- [ ] Commands already explicitly allowed in Claude's settings (e.g., `Bash(go test:*)`) bypass the gate entirely
+- [ ] Commands already explicitly allowed in Claude's settings (e.g., `Bash(go test *)`) bypass the gate entirely
 - [ ] Commands already explicitly blocked in Claude's settings are blocked before the gate runs
 - [ ] The gate only evaluates commands that would otherwise prompt the user for permission
 - [ ] Gate verdicts respect the same format Claude's permission system uses