refactor(permissions): restructure skill permissions and add glob/grep/list

Author: defuj

CHANGELOG.md

@@ -38,7 +38,20 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ---
 
-## [Unreleased]
+## [1.2.8] - 2025-06-19
+
+### Added
+
+- **Safe bash command permissions** — 17 non-aggressive bash patterns (`ls`, `pwd`, `which`, `mkdir`, `cp`, `echo`, etc.) auto-allowed at both top-level and per-agent level, reducing permission prompts by ~90%
+- **Read-only tool permissions** — `glob`, `grep`, `list` set to `"allow"` at top-level (no more prompts for file search)
+- **`agentmemory_*` centralized** — moved from per-agent duplication (33 agents × 1 line) to top-level permission
+- **`figma_*` centralized** — set to `"deny"` at top-level (Figma MCP disabled, no Figma clutter in unrelated agents)
+
+### Changed
+
+- **`external_directory`** — relaxed from `"ask"` to `"allow"` with deny rules for sensitive dirs (`~/.ssh`, `~/.aws`, `~/.config`, `~/secrets`)
+- **`skill` permission** — per-agent `{"*": "allow"}` → shorthand `"allow"` (cleaner config)
+- **`opencode.example.json`** — same permission improvements applied to the example config
 
 ---
 

index.html

@@ -819,7 +819,7 @@
             "
           >
             <span class="w-1.5 h-1.5 rounded-full pulse-dot" style="background: #8b6cf6"></span>
-            v1.2.7 &mdash; Open Source &mdash; 33 Agents
+            v1.2.8 &mdash; Open Source &mdash; 33 Agents
           </div>
 
           <!-- Headline -->
@@ -2707,7 +2707,7 @@ <h4 class="text-sm font-semibold" style="color: var(--text-primary)">Uninstall</
         >
           <span class="flex items-center justify-center gap-2">
             <span class="w-1.5 h-1.5 rounded-full" style="background: #d4a04a"></span>
-            v1.2.5
+            v1.2.8
             <span class="w-1.5 h-1.5 rounded-full" style="background: #8b6cf6"></span>
             MIT License
             <span class="w-1.5 h-1.5 rounded-full" style="background: #4ac8b8"></span>