diff --git a/.claude-plugin/plugin.json b/.claude-plugin/plugin.json
index 695fdb7..fd26f05 100644
--- a/.claude-plugin/plugin.json
+++ b/.claude-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "herdr-issue",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "description": "透過 Herdr 讓 Claude agent 逐一實作 Gitea 議題（每個議題一個 worktree 與 tab）。",
   "skills": "./skills",
   "author": {
diff --git a/.codex-plugin/plugin.json b/.codex-plugin/plugin.json
index bc0595a..b1a4b01 100644
--- a/.codex-plugin/plugin.json
+++ b/.codex-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "herdr-issue",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "description": "透過 Herdr 讓 Claude agent 逐一實作 Gitea 議題（每個議題一個 worktree 與 tab）。",
   "skills": "./skills"
 }
diff --git a/plugin.json b/plugin.json
index 2eafa56..9e423d6 100644
--- a/plugin.json
+++ b/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "herdr-issue",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "description": "透過 Herdr 讓 Claude agent 逐一實作 Gitea 議題（每個議題一個 worktree 與 tab）。",
   "skills": "./skills/"
 }
diff --git a/skills/herdr-issue/scripts/start.sh b/skills/herdr-issue/scripts/start.sh
index 0c93d49..3e8e60c 100755
--- a/skills/herdr-issue/scripts/start.sh
+++ b/skills/herdr-issue/scripts/start.sh
@@ -39,13 +39,13 @@ rollback() {
   $RESUMED || git -C "$CLONE" branch -D "$BRANCH" >/dev/null 2>&1 || true
 }
 
-TAB_JSON="$(herdr tab create --workspace "${HERDR_WORKSPACE_ID:?}" --cwd "$WT" --label "#$N" --no-focus)"
+TAB_JSON="$(herdr tab create --workspace "${HERDR_WORKSPACE_ID:?}" --cwd "$WT" --env COPILOT_ALLOW_ALL=true --label "#$N" --no-focus)"
 TAB="$(jq_py 'print(find(d,"tab")["tab_id"])' <<<"$TAB_JSON")"
 PANE="$(jq_py 'print(find(d,"root_pane")["pane_id"])' <<<"$TAB_JSON")"
 
 START_ERR="$(mktemp)"
 for _ in 1 2 3 4 5 6; do
-  if herdr agent start "issue-$N" --kind copilot --pane "$PANE" --timeout 90000 -- --model "$MODEL" >/dev/null 2>"$START_ERR"; then
+  if herdr agent start "issue-$N" --kind copilot --pane "$PANE" --timeout 90000 -- --model "$MODEL" --allow-all-tools --allow-all-paths >/dev/null 2>"$START_ERR"; then
     rm -f "$START_ERR"; break
   fi
   sleep 2