diff --git a/.claude/settings.json b/.claude/settings.json
new file mode 100644
index 0000000..fe99239
--- /dev/null
+++ b/.claude/settings.json
@@ -0,0 +1,5 @@
+{
+  "permissions": {
+    "additionalDirectories": ["/home/runner/.claude/plugins"]
+  }
+}
diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml
index 7eae945..5d7d0dc 100644
--- a/.github/workflows/claude-review.yml
+++ b/.github/workflows/claude-review.yml
@@ -25,6 +25,7 @@ jobs:
       - uses: anthropics/claude-code-action@v1
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          allowed_bots: claude-agent-ahrzb # agents push feature branches as this App bot
           plugin_marketplaces: https://github.com/anthropics/claude-plugins-official.git
           plugins: superpowers@claude-plugins-official
           claude_args: --model claude-sonnet-5 --max-turns 20
diff --git a/.gitignore b/.gitignore
index 75e546b..1c09cc8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -9,8 +9,9 @@ wheels/
 # Virtual environments
 .venv
 
-# Claude Code settings
-.claude
+# Claude Code settings (track shared project settings; ignore everything else)
+.claude/*
+!.claude/settings.json
 
 .worktrees/