Diff
1diff --git a/src/rules.ts b/src/rules.ts
2index 1fdf99f0c4eacd61c66b93562ab27c1878e1eb7c..94544e671ce4ed3163cf46db29ec22fcbc0b0ae2 100644
3--- a/src/rules.ts
4+++ b/src/rules.ts
5@@ -1,5 +1,5 @@
6 // Bump to invalidate all cached decisions when rules change.
7-export const POLICY_VERSION = "3.2.0";
8+export const POLICY_VERSION = "3.3.0";
9
10 // Matched with test() on anchored patterns (equivalent to Python fullmatch).
11 // Purely a performance optimization — these would pass LLM review anyway.
12@@ -57,6 +57,7 @@ export const CONFIG_ALLOW_PATTERNS: RegExp[] = [
13 /^true$/,
14 /^uniq(?:\s|$)/,
15 /^wc(?:\s|$)/,
16+ /^xargs\s+(grep|head|tail|cat|wc|sort|uniq|rg)(?:\s|$)/,
17 /^qmd\s/,
18 /^mkdir\s/,
19