diff --git a/package.json b/package.json
index dd1ff6c..b5289c6 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "opencode-plugin-openspec",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "An OpenCode plugin that integrates OpenSpec, providing a dedicated agent for planning and specifying software architecture.",
   "type": "module",
   "main": "dist/index.js",
diff --git a/src/config.ts b/src/config.ts
index e8eed31..4c66f67 100644
--- a/src/config.ts
+++ b/src/config.ts
@@ -62,6 +62,8 @@ export function createConfigHook(ctx: { directory: string }): Hooks["config"] {
         // --- Bash: deny all by default, allow read-only filesystem + git read ---
         bash: {
           "*": "deny",
+          "openspec": "allow",
+          "openspec *": "allow",
           "grep *": "allow",
           "ls": "allow",
           "ls *": "allow",