diff --git a/runtimes/claude-code.sh b/runtimes/claude-code.sh
index 98da673..22312ec 100644
--- a/runtimes/claude-code.sh
+++ b/runtimes/claude-code.sh
@@ -216,6 +216,13 @@ runtime_install_hooks() {
       "Edit(\($site)/wp-includes/**)"
     ]')
 
+  local legacy_wordpress_deny_rules
+  legacy_wordpress_deny_rules=$(jq -n '[
+    "Edit(/wp-content/plugins/**)",
+    "Edit(/wp-content/themes/**)",
+    "Edit(/wp-includes/**)"
+  ]')
+
   local settings='{}'
   if [ -f "$settings_file" ]; then
     settings=$(cat "$settings_file")
@@ -227,6 +234,7 @@ runtime_install_hooks() {
     --arg cmd "$hook_cmd" \
     --argjson allow_rules "$workspace_allow_rules" \
     --argjson deny_rules "$wordpress_deny_rules" \
+    --argjson legacy_deny_rules "$legacy_wordpress_deny_rules" \
     '
     .autoMemoryEnabled = false
 
@@ -240,7 +248,7 @@ runtime_install_hooks() {
       )
 
     | .permissions.deny = (
-        ((.permissions.deny // []) + $deny_rules) | unique
+        (((.permissions.deny // []) - $legacy_deny_rules + $deny_rules) | unique)
       )
 
     | .hooks.SessionStart = (
diff --git a/tests/claude-code-permissions.sh b/tests/claude-code-permissions.sh
index cd96146..0d51303 100755
--- a/tests/claude-code-permissions.sh
+++ b/tests/claude-code-permissions.sh
@@ -15,7 +15,12 @@ mkdir -p "$SITE_PATH/.claude" "$DM_WORKSPACE_DIR"
 cat > "$SITE_PATH/.claude/settings.json" <<'JSON'
 {
   "permissions": {
-    "deny": ["Read(./private/**)"]
+    "deny": [
+      "Read(./private/**)",
+      "Edit(/wp-content/plugins/**)",
+      "Edit(/wp-content/themes/**)",
+      "Edit(/wp-includes/**)"
+    ]
   }
 }
 JSON