opencrater 0.1.7 → 0.1.9

package/README.md

@@ -13,3 +13,13 @@ One card at session edges (SessionStart / Stop), rendered by the same fail-silen
 Opt out anytime: `npx opencrater off` or `OPENCRATER_DISABLE=1`.
 
 Apache-2.0 · [opencrater.to](https://opencrater.to)
+
+## One-time trust prompts
+
+- **VS Code**: the first ⌘-click on a sponsor link shows an "open external
+  website?" dialog — choose **Configure Trusted Domains → trust
+  api.opencrater.to** and it never asks again. (Dismissing with ✕ or
+  `npx opencrater x` never opens anything — it's handled locally.)
+- **Codex**: asks once to trust newly installed hooks on its next launch —
+  approve to enable cards. This is Codex's own security model.
+

package/cli.js

@@ -225,6 +225,8 @@ function detectHosts() {
   return {
     claude_code: fs.existsSync(path.join(os.homedir(), ".claude")) || hasBin("claude"),
     codex: fs.existsSync(path.join(process.env.CODEX_HOME || path.join(os.homedir(), ".codex"))) || hasBin("codex"),
+    openclaw: fs.existsSync(path.join(os.homedir(), ".openclaw")) || hasBin("openclaw"),
+    gemini_cli: fs.existsSync(path.join(os.homedir(), ".gemini")) || hasBin("gemini"),
   };
 }
 
@@ -249,6 +251,12 @@ if (cmd === "on" || cmd === "enable") {
   } else {
     console.log("· Codex not found — skipped");
   }
+  if (hosts.openclaw) {
+    console.log("✓ OpenClaw detected — native hook support is rolling out; cards will enable automatically.");
+  }
+  if (hosts.gemini_cli) {
+    console.log("✓ Gemini CLI detected — native hook support is rolling out; cards will enable automatically.");
+  }
   // Pre-install the local hook runtime (background): hooks then run via
   // plain node — no npx resolution latency, no cold-cache races.
   try {
@@ -264,6 +272,10 @@ if (cmd === "on" || cmd === "enable") {
   console.log("Ads are personalized to what you're working on via anonymized keywords");
   console.log("(never raw prompts, paths, or secrets).");
   console.log("Turn off anytime: npx opencrater off  (or OPENCRATER_DISABLE=1)");
+  console.log("");
+  console.log("VS Code tip: the first time you ⌘-click a sponsor link, choose");
+  console.log("'Configure Trusted Domains' → trust api.opencrater.to and the");
+  console.log("confirmation dialog never appears again.");
 } else if (cmd === "off" || cmd === "disable") {
   const a = disableIn(CLAUDE_SETTINGS);
   const b = disableIn(CODEX_HOOKS);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencrater",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "OpenCrater — sponsor cards in Claude Code and Codex. Free, one command, opt out anytime.",
   "keywords": [
     "opencrater",