@williambeto/ai-workflow 2.9.1 → 2.9.2

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 ## [unreleased]
 
+## [2.9.2] - 2026-07-16
+
+### 🐛 Bug Fixes
+
+- Stop injecting agent-level `deny` and `ask` permissions into consumer
+  `opencode.jsonc` files, preserving the consumer's OpenCode permission defaults
+- Keep agent ownership and routing boundaries in AIWK instructions without
+  causing repeated per-project approval prompts
+
+### 🧪 Testing
+
+- Add regression coverage that rejects generated AIWK agent permission
+  overrides while preserving the managed agent registry
+
 ## [2.9.1] - 2026-07-15
 
 ### 🐛 Bug Fixes

package/bin/ai-workflow.js

@@ -779,36 +779,18 @@ var COMMANDS = {
 };
 function buildManagedConfig() {
   const agent = {};
-  const coreTaskPermissions = Object.fromEntries([
-    ["*", "deny"],
-    ...Object.keys(AGENTS).filter((name) => name !== "Atlas").map((name) => [name, "allow"])
-  ]);
-  const capabilityTaskPermissions = Object.fromEntries([
-    ["*", "deny"],
-    ...Object.keys(SUBAGENTS).map((name) => [name, "allow"])
-  ]);
   for (const [name, def] of Object.entries(AGENTS)) {
     agent[name] = {
       mode: def.mode,
       description: def.description,
-      prompt: `{file:./.ai-workflow/opencode/agents/${name.toLowerCase()}.md}`,
-      permission: {
-        ...name === "Atlas" ? { edit: "deny", bash: "ask" } : {},
-        ...name === "Astra" ? { edit: "allow" } : {},
-        task: name === "Atlas" ? coreTaskPermissions : capabilityTaskPermissions
-      }
+      prompt: `{file:./.ai-workflow/opencode/agents/${name.toLowerCase()}.md}`
     };
   }
   for (const [name, def] of Object.entries(SUBAGENTS)) {
     agent[name] = {
       mode: "subagent",
       description: def.description,
-      prompt: `{file:./.ai-workflow/opencode/skills/${def.skill}/SKILL.md}`,
-      permission: {
-        edit: "deny",
-        bash: "ask",
-        task: { "*": "deny" }
-      }
+      prompt: `{file:./.ai-workflow/opencode/skills/${def.skill}/SKILL.md}`
     };
   }
   const command = {};