v1.3.0 — default permissions: move deny rules to ask

What changed

Permissions

• The built-in default Claude Code managed-settings.json no longer hard-denies network fetches and secret-file reads. All seven rules move from deny to ask, so they now prompt for explicit approval instead of being blocked outright:
  • Bash(curl:*), Bash(wget:*)
  • Read(**/.env), Read(**/.env.*), Read(**/secrets/**), Read(**/.ssh/**), Read(**/credentials/**)
• deny is now empty; ask carries these plus the existing Bash(git push:*) and Write(**).
• This only affects machines that use the built-in default config. Deployments that supply their own --settings-file template, or that already have a managed-settings.json on disk, are unchanged.

Merged PRs

• Relax default permissions: move all deny rules to ask (#13)

Assets

Four prebuilt binaries, built from source main (commit d07ac10) with -trimpath -ldflags="-s -w", CGO_ENABLED=0:

• tfy-local-ai-setup-darwin-arm64
• tfy-local-ai-setup-darwin-amd64
• tfy-local-ai-setup-linux-amd64
• tfy-local-ai-setup-windows-amd64.exe