[Feature Request] Improve subagent permissions documentation and conditional rule examples for allowing only certain queries from custom scripts

Bug Description
Claude does not know how subagent permissions work, cannot for the life of me figure out how to create conditional rule to only allow read only db queries to pass through my db-wrangler agent. I have the agent use a skill that has forking and contains scripts for querying database, tried adding hooks in both global, in subagent, in skill, everywhere. Asked claude a bunch of times to read documentation, and keeps going back and forth between telling me that something is supported, then not, then suggesting I just delete the agent that its impossible.

Environment Info

• Platform: darwin
• Terminal: zed
• Version: 2.1.1
• Feedback ID: 328463bd-ed71-4b7e-becb-5a6db6ca9621

Errors

[{"error":"Error: NON-FATAL: Lock acquisition failed for /Users//.local/share/claude/versions/2.1.1 (expected in multi-process scenarios)\n    at oXR (/$bunfs/root/claude:2994:2164)\n    at WKA (/$bunfs/root/claude:2994:1884)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-01-08T18:45:40.633Z"},{"error":"AbortError: The operation was aborted.\n    at unknown\n    at abortChildProcess (node:child_process:935:42)\n    at onAbortListener2 (node:child_process:35:24)\n    at abort (unknown)\n    at <anonymous> (/$bunfs/root/claude:4824:2320)","timestamp":"2026-01-08T18:50:54.260Z"},{"error":"Error: Request was aborted.\n    at makeRequest (/$bunfs/root/claude:872:3940)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-01-08T19:15:43.349Z"},{"error":"Error: Request was aborted.\n    at makeRequest (/$bunfs/root/claude:872:3940)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-01-08T19:17:27.330Z"},{"error":"Error\n    at <anonymous> (/$bunfs/root/claude:60:10686)\n    at emit (node:events:92:22)\n    at <anonymous> (/$bunfs/root/claude:59:5641)\n    at request (/$bunfs/root/claude:62:2149)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-01-08T19:22:41.091Z"},{"error":"Error: Request was aborted.\n    at makeRequest (/$bunfs/root/claude:872:3940)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-01-08T19:23:09.744Z"},{"error":"Error: Request was aborted.\n    at makeRequest (/$bunfs/root/claude:872:3940)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-01-08T19:26:07.060Z"}]