pushary 1.9.64 → 1.9.66

package/dist/bin/pushary-post-hook.js

@@ -1,47 +1,45 @@
 #!/usr/bin/env node
 import {
   readHookInput
-} from "../chunk-YUDZCJYC.js";
-import "../chunk-57PU5OBL.js";
-import "../chunk-DVYVGBPB.js";
+} from "../chunk-QN25WBXL.js";
+import "../chunk-SVKCYUYP.js";
+import "../chunk-DBUHSUL7.js";
 import {
   activeHookSource,
   activeIdentity,
   normalizeToolCall,
   profileFromArgv
-} from "../chunk-ML2Q6WWE.js";
-import "../chunk-5NP3OJ5P.js";
-import "../chunk-KA7JIMTG.js";
-import "../chunk-6QPDBD7Q.js";
-import "../chunk-SROWUG5W.js";
-import "../chunk-PMLQRB3D.js";
+} from "../chunk-3EZP5ZPS.js";
+import "../chunk-57NTMVMI.js";
+import "../chunk-YQDCTID4.js";
+import "../chunk-UTAARXYQ.js";
+import "../chunk-IQ3GKPFM.js";
 import "../chunk-NMUI3ZWG.js";
-import "../chunk-QSW3HAKI.js";
-import "../chunk-TJUJAK5L.js";
-import "../chunk-5TUDGSDC.js";
+import "../chunk-XEXF2OFZ.js";
+import "../chunk-XGFFNERF.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-BLAIETMP.js";
+import "../chunk-CNJ7SI5V.js";
 import {
   handleCompaction,
   handlePostToolUse,
   isCompactionEvent
-} from "../chunk-MIPJ2VXP.js";
-import "../chunk-3KXBRSL3.js";
-import "../chunk-E23RKH3T.js";
+} from "../chunk-2BL6KWN7.js";
+import "../chunk-XXIJBYNW.js";
+import "../chunk-ZAZUDYSF.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-2KID4FK4.js";
-import "../chunk-QNATBOUH.js";
-import "../chunk-EEM65CGJ.js";
-import "../chunk-ADRPW7KU.js";
+import "../chunk-Q5RNYE2L.js";
+import "../chunk-QR2QWGQI.js";
+import "../chunk-GECU7V44.js";
+import "../chunk-IA5VWIHV.js";
 import "../chunk-PPY5N2E6.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-2VADJ6JH.js";
-import "../chunk-H4BKC2GN.js";
-import "../chunk-BSZIPIFA.js";
-import "../chunk-Y64JGYTB.js";
-import "../chunk-BAGBCSXA.js";
+import "../chunk-XIJTXRWB.js";
+import "../chunk-GDLT32I4.js";
+import "../chunk-KS3O6O7E.js";
+import "../chunk-A47UKPC7.js";
+import "../chunk-GO7YKPT3.js";
 import "../chunk-QTOLNRET.js";
-import "../chunk-MNKIR2ZB.js";
+import "../chunk-EJR5JXMV.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-post-hook.ts

package/dist/bin/pushary-prompt-hook.js

@@ -1,43 +1,41 @@
 #!/usr/bin/env node
 import {
   readHookInput
-} from "../chunk-YUDZCJYC.js";
-import "../chunk-57PU5OBL.js";
-import "../chunk-DVYVGBPB.js";
+} from "../chunk-QN25WBXL.js";
+import "../chunk-SVKCYUYP.js";
+import "../chunk-DBUHSUL7.js";
 import {
   activeHookSource,
   activeIdentity
-} from "../chunk-ML2Q6WWE.js";
-import "../chunk-5NP3OJ5P.js";
-import "../chunk-KA7JIMTG.js";
-import "../chunk-6QPDBD7Q.js";
-import "../chunk-SROWUG5W.js";
-import "../chunk-PMLQRB3D.js";
+} from "../chunk-3EZP5ZPS.js";
+import "../chunk-57NTMVMI.js";
+import "../chunk-YQDCTID4.js";
+import "../chunk-UTAARXYQ.js";
+import "../chunk-IQ3GKPFM.js";
 import "../chunk-NMUI3ZWG.js";
-import "../chunk-QSW3HAKI.js";
-import "../chunk-TJUJAK5L.js";
-import "../chunk-5TUDGSDC.js";
+import "../chunk-XEXF2OFZ.js";
+import "../chunk-XGFFNERF.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-BLAIETMP.js";
+import "../chunk-CNJ7SI5V.js";
 import {
   handleUserPrompt
-} from "../chunk-MIPJ2VXP.js";
-import "../chunk-3KXBRSL3.js";
-import "../chunk-E23RKH3T.js";
+} from "../chunk-2BL6KWN7.js";
+import "../chunk-XXIJBYNW.js";
+import "../chunk-ZAZUDYSF.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-2KID4FK4.js";
-import "../chunk-QNATBOUH.js";
-import "../chunk-EEM65CGJ.js";
-import "../chunk-ADRPW7KU.js";
+import "../chunk-Q5RNYE2L.js";
+import "../chunk-QR2QWGQI.js";
+import "../chunk-GECU7V44.js";
+import "../chunk-IA5VWIHV.js";
 import "../chunk-PPY5N2E6.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-2VADJ6JH.js";
-import "../chunk-H4BKC2GN.js";
-import "../chunk-BSZIPIFA.js";
-import "../chunk-Y64JGYTB.js";
-import "../chunk-BAGBCSXA.js";
+import "../chunk-XIJTXRWB.js";
+import "../chunk-GDLT32I4.js";
+import "../chunk-KS3O6O7E.js";
+import "../chunk-A47UKPC7.js";
+import "../chunk-GO7YKPT3.js";
 import "../chunk-QTOLNRET.js";
-import "../chunk-MNKIR2ZB.js";
+import "../chunk-EJR5JXMV.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-prompt-hook.ts

package/dist/bin/pushary-session-end-hook.js

@@ -1,47 +1,45 @@
 #!/usr/bin/env node
 import {
   WRAPPER_ACTIVE_ENV
-} from "../chunk-RY4EPMZX.js";
-import "../chunk-MXPOLQZH.js";
+} from "../chunk-5J7OZBJ4.js";
+import "../chunk-RJ6JEHCP.js";
 import {
   readHookInput
-} from "../chunk-YUDZCJYC.js";
-import "../chunk-57PU5OBL.js";
-import "../chunk-DVYVGBPB.js";
+} from "../chunk-QN25WBXL.js";
+import "../chunk-SVKCYUYP.js";
+import "../chunk-DBUHSUL7.js";
 import {
   activeHookSource,
   activeIdentity
-} from "../chunk-ML2Q6WWE.js";
-import "../chunk-5NP3OJ5P.js";
-import "../chunk-KA7JIMTG.js";
-import "../chunk-6QPDBD7Q.js";
-import "../chunk-SROWUG5W.js";
-import "../chunk-PMLQRB3D.js";
+} from "../chunk-3EZP5ZPS.js";
+import "../chunk-57NTMVMI.js";
+import "../chunk-YQDCTID4.js";
+import "../chunk-UTAARXYQ.js";
+import "../chunk-IQ3GKPFM.js";
 import "../chunk-NMUI3ZWG.js";
-import "../chunk-QSW3HAKI.js";
-import "../chunk-TJUJAK5L.js";
-import "../chunk-5TUDGSDC.js";
+import "../chunk-XEXF2OFZ.js";
+import "../chunk-XGFFNERF.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-BLAIETMP.js";
+import "../chunk-CNJ7SI5V.js";
 import {
   handleSessionEnd
-} from "../chunk-MIPJ2VXP.js";
-import "../chunk-3KXBRSL3.js";
-import "../chunk-E23RKH3T.js";
+} from "../chunk-2BL6KWN7.js";
+import "../chunk-XXIJBYNW.js";
+import "../chunk-ZAZUDYSF.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-2KID4FK4.js";
-import "../chunk-QNATBOUH.js";
-import "../chunk-EEM65CGJ.js";
-import "../chunk-ADRPW7KU.js";
+import "../chunk-Q5RNYE2L.js";
+import "../chunk-QR2QWGQI.js";
+import "../chunk-GECU7V44.js";
+import "../chunk-IA5VWIHV.js";
 import "../chunk-PPY5N2E6.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-2VADJ6JH.js";
-import "../chunk-H4BKC2GN.js";
-import "../chunk-BSZIPIFA.js";
-import "../chunk-Y64JGYTB.js";
-import "../chunk-BAGBCSXA.js";
+import "../chunk-XIJTXRWB.js";
+import "../chunk-GDLT32I4.js";
+import "../chunk-KS3O6O7E.js";
+import "../chunk-A47UKPC7.js";
+import "../chunk-GO7YKPT3.js";
 import "../chunk-QTOLNRET.js";
-import "../chunk-MNKIR2ZB.js";
+import "../chunk-EJR5JXMV.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-session-end-hook.ts

package/dist/bin/pushary-session-start-hook.js

@@ -1,57 +1,55 @@
 #!/usr/bin/env node
 import {
   reapplyClaudeForVersion
-} from "../chunk-JX3DHGZX.js";
-import "../chunk-LV6DX4P6.js";
-import "../chunk-MPPTIZ2G.js";
-import "../chunk-NYV45Q25.js";
-import "../chunk-2PKHGHMA.js";
-import "../chunk-VNRWQCGU.js";
-import "../chunk-IZTDX2MX.js";
-import "../chunk-MXPOLQZH.js";
+} from "../chunk-DKMVVBXO.js";
+import "../chunk-JL3SZJJP.js";
+import "../chunk-6ZXCWK27.js";
+import "../chunk-5FJDODOA.js";
+import "../chunk-HUGVJBDN.js";
+import "../chunk-7LK3Y6ET.js";
+import "../chunk-MDIGG3Q7.js";
+import "../chunk-RJ6JEHCP.js";
 import {
   triggerAutoUpdate
-} from "../chunk-PLMX3IHG.js";
+} from "../chunk-VURDLVAQ.js";
 import {
   readHookInput
-} from "../chunk-YUDZCJYC.js";
-import "../chunk-57PU5OBL.js";
-import "../chunk-DVYVGBPB.js";
+} from "../chunk-QN25WBXL.js";
+import "../chunk-SVKCYUYP.js";
+import "../chunk-DBUHSUL7.js";
 import {
   activeHookSource,
   activeIdentity
-} from "../chunk-ML2Q6WWE.js";
-import "../chunk-5NP3OJ5P.js";
-import "../chunk-KA7JIMTG.js";
-import "../chunk-6QPDBD7Q.js";
-import "../chunk-SROWUG5W.js";
-import "../chunk-PMLQRB3D.js";
+} from "../chunk-3EZP5ZPS.js";
+import "../chunk-57NTMVMI.js";
+import "../chunk-YQDCTID4.js";
+import "../chunk-UTAARXYQ.js";
+import "../chunk-IQ3GKPFM.js";
 import "../chunk-NMUI3ZWG.js";
-import "../chunk-QSW3HAKI.js";
-import "../chunk-TJUJAK5L.js";
-import "../chunk-5TUDGSDC.js";
+import "../chunk-XEXF2OFZ.js";
+import "../chunk-XGFFNERF.js";
 import "../chunk-XHKBHWLX.js";
-import "../chunk-BLAIETMP.js";
+import "../chunk-CNJ7SI5V.js";
 import {
   CLAUDE_CODE_AGENT,
   handleSessionStart
-} from "../chunk-MIPJ2VXP.js";
-import "../chunk-3KXBRSL3.js";
-import "../chunk-E23RKH3T.js";
+} from "../chunk-2BL6KWN7.js";
+import "../chunk-XXIJBYNW.js";
+import "../chunk-ZAZUDYSF.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-2KID4FK4.js";
-import "../chunk-QNATBOUH.js";
-import "../chunk-EEM65CGJ.js";
-import "../chunk-ADRPW7KU.js";
+import "../chunk-Q5RNYE2L.js";
+import "../chunk-QR2QWGQI.js";
+import "../chunk-GECU7V44.js";
+import "../chunk-IA5VWIHV.js";
 import "../chunk-PPY5N2E6.js";
 import "../chunk-KZERVKTD.js";
-import "../chunk-2VADJ6JH.js";
-import "../chunk-H4BKC2GN.js";
-import "../chunk-BSZIPIFA.js";
-import "../chunk-Y64JGYTB.js";
-import "../chunk-BAGBCSXA.js";
+import "../chunk-XIJTXRWB.js";
+import "../chunk-GDLT32I4.js";
+import "../chunk-KS3O6O7E.js";
+import "../chunk-A47UKPC7.js";
+import "../chunk-GO7YKPT3.js";
 import "../chunk-QTOLNRET.js";
-import "../chunk-MNKIR2ZB.js";
+import "../chunk-EJR5JXMV.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-session-start-hook.ts

package/dist/bin/pushary-setup.js

@@ -4,7 +4,7 @@ import {
 } from "../chunk-KEPESIIR.js";
 import {
   runBrowserLogin
-} from "../chunk-NOH3EJFH.js";
+} from "../chunk-R7C2FS33.js";
 import {
   INSTALL_NODE_STEP,
   NPM_FILE_IN_USE_STEP,
@@ -17,33 +17,33 @@ import {
   phoneStartServiceState,
   renderCommandSurface,
   unverifiedKeyClosingReason
-} from "../chunk-66FRMK7V.js";
+} from "../chunk-3FQX74E4.js";
 import {
   coworkOutput,
   coworkSelection
-} from "../chunk-VHKK3US3.js";
+} from "../chunk-EU2ZOZC3.js";
 import "../chunk-PUZZELE6.js";
 import {
   clearDeclinedAgent,
   declinedAgentForSetupChoice
-} from "../chunk-AQAPPSDV.js";
+} from "../chunk-XDDSURY3.js";
 import {
   describeVersionManagerPin,
   saveSetupFailure,
   versionManagerOf
-} from "../chunk-2EY4HGLG.js";
+} from "../chunk-376TUN72.js";
 import {
   codexTrustOutcome,
   describeCodexTrustConfirmation,
   needsCodexTrustStep
-} from "../chunk-LA7CKRZN.js";
+} from "../chunk-4APD2DPI.js";
 import {
   describeWaitLadder
 } from "../chunk-CVWG2N3Y.js";
 import {
   writeJsonError,
   writeStdoutFully
-} from "../chunk-2Z7I7DHT.js";
+} from "../chunk-XFQAK35L.js";
 import {
   BROWSER_CONNECT_COMMAND,
   confirmAppConnection,
@@ -52,7 +52,7 @@ import {
   pairingEscapeApplies,
   printConnectInstructions,
   waitForYourPhone
-} from "../chunk-CJADXAJU.js";
+} from "../chunk-DIUTSF6I.js";
 import "../chunk-3EGEA4KH.js";
 import {
   SETUP_AGENT_NAME,
@@ -60,14 +60,14 @@ import {
   describeRoundTripOutcome,
   roundTripEvidence,
   verifyRoundTrip
-} from "../chunk-JTOBQUIL.js";
+} from "../chunk-MNNQEUQC.js";
 import {
   readManagedControlEvidence,
   waitForMachineReadiness
-} from "../chunk-QECRQWLV.js";
+} from "../chunk-GWYCKTXS.js";
 import {
   ensureCodexTrustsPusharyHooks
-} from "../chunk-LV6DX4P6.js";
+} from "../chunk-JL3SZJJP.js";
 import {
   describeSetupSideEffects,
   installAgentSkill,
@@ -75,7 +75,7 @@ import {
 } from "../chunk-EUW7JL2K.js";
 import {
   codexEngineBehindLauncher
-} from "../chunk-5TNGBDIE.js";
+} from "../chunk-AVWECJSN.js";
 import "../chunk-XCEN33UP.js";
 import {
   CURSOR_PLUGIN_BACKUP_INFIX,
@@ -85,7 +85,7 @@ import {
   soleGateFile,
   soleGateReceipt,
   soleGateReceiptFile
-} from "../chunk-6HPLEGUP.js";
+} from "../chunk-IGO3AGZK.js";
 import {
   HERMES_PIP_PACKAGE,
   describeDetection,
@@ -98,11 +98,11 @@ import {
   runHermesConfigScript,
   shortenHome,
   vscodeSettingsTargets
-} from "../chunk-KX3RMF6T.js";
+} from "../chunk-QBNICXMC.js";
 import {
   mcpServerBearer,
   readMacAppAgentKey
-} from "../chunk-QPPBH5NY.js";
+} from "../chunk-CN6JFM62.js";
 import {
   setHumanStream
 } from "../chunk-QCGNGEGE.js";
@@ -119,7 +119,7 @@ import {
   readFxProfileForSetup,
   withFxPusharyServer,
   writeFxProfile
-} from "../chunk-MPPTIZ2G.js";
+} from "../chunk-6ZXCWK27.js";
 import {
   AgentConfigError,
   afterAgentFailureNote,
@@ -132,10 +132,10 @@ import {
   retryAgentCommand,
   writeSetupConfigFile,
   writeSetupConfigJson
-} from "../chunk-NYV45Q25.js";
+} from "../chunk-5FJDODOA.js";
 import {
   MCP_BRIDGE_BINARY
-} from "../chunk-2PKHGHMA.js";
+} from "../chunk-HUGVJBDN.js";
 import {
   OPENCODE_HOOK_BINARY,
   addOpenCodeMcpServer,
@@ -148,10 +148,12 @@ import {
   openCodeConfigFile,
   openCodeHookArgv,
   openCodeInstructionsFile,
+  openCodePermissionsLeftOpen,
   openCodePluginDir,
   openCodePluginFile,
-  openCodeWired
-} from "../chunk-VNRWQCGU.js";
+  openCodeWired,
+  withOpenCodeAskRules
+} from "../chunk-7LK3Y6ET.js";
 import {
   ansiPainter,
   createIo,
@@ -167,15 +169,15 @@ import {
   nodeCodexInstallProbe,
   phoneStartIsRequired,
   resolveControlPolicy
-} from "../chunk-DCMRNIDM.js";
+} from "../chunk-T6YLXO6N.js";
 import {
   detectClaudeVersion
-} from "../chunk-IZTDX2MX.js";
-import "../chunk-MXPOLQZH.js";
+} from "../chunk-MDIGG3Q7.js";
+import "../chunk-RJ6JEHCP.js";
 import {
   describeAutoUpdateAnnouncement,
   takeAutoUpdateAnnouncement
-} from "../chunk-PLMX3IHG.js";
+} from "../chunk-VURDLVAQ.js";
 import {
   addCompatibleHooks,
   addCompatibleMcpServer,
@@ -189,7 +191,7 @@ import {
   compatibleRecord,
   compatibleTargetPaths,
   hasCompatibleHooks
-} from "../chunk-ML2Q6WWE.js";
+} from "../chunk-3EZP5ZPS.js";
 import {
   DAEMON_COLD_START_TIMEOUT_MS,
   clearDaemonNeedsLogin,
@@ -204,9 +206,13 @@ import {
   replaceDaemonService,
   stopDaemonService,
   waitForDaemonRemoteProof
-} from "../chunk-5NP3OJ5P.js";
+} from "../chunk-57NTMVMI.js";
 import {
+  GEMINI_HOOK_BINARY,
+  GEMINI_HOOK_EVENTS,
   KEEP_HINT,
+  addGeminiHooks,
+  addGeminiMcpServer,
   captureHookTakeover,
   captureMcpServer,
   claudeWired,
@@ -216,24 +222,18 @@ import {
   geminiWired,
   planHooks,
   pusharyHookExecutable
-} from "../chunk-KA7JIMTG.js";
-import {
-  GEMINI_HOOK_BINARY,
-  GEMINI_HOOK_EVENTS,
-  addGeminiHooks,
-  addGeminiMcpServer
-} from "../chunk-6QPDBD7Q.js";
+} from "../chunk-YQDCTID4.js";
 import {
   AGENT_CHOICES,
   effectiveControlMode,
   effectiveVerify,
   parseSetupOptions
-} from "../chunk-SROWUG5W.js";
-import "../chunk-PMLQRB3D.js";
+} from "../chunk-UTAARXYQ.js";
+import "../chunk-IQ3GKPFM.js";
 import "../chunk-NMUI3ZWG.js";
 import {
   transcriptPreferenceForSetup
-} from "../chunk-5TUDGSDC.js";
+} from "../chunk-XGFFNERF.js";
 import "../chunk-XHKBHWLX.js";
 import {
   KEY_FILE_MODE,
@@ -247,7 +247,7 @@ import {
   recordMacAppKeyPrefix,
   resolveShellRc,
   writeKey
-} from "../chunk-BLAIETMP.js";
+} from "../chunk-CNJ7SI5V.js";
 import {
   CODEX_ENGINE_DIRECTORY,
   CODEX_ENGINE_ENTRYPOINT,
@@ -256,25 +256,25 @@ import {
 } from "../chunk-E46NE7FB.js";
 import {
   reportEvent
-} from "../chunk-MIPJ2VXP.js";
-import "../chunk-3KXBRSL3.js";
-import "../chunk-E23RKH3T.js";
+} from "../chunk-2BL6KWN7.js";
+import "../chunk-XXIJBYNW.js";
+import "../chunk-ZAZUDYSF.js";
 import "../chunk-POFBE6ZY.js";
-import "../chunk-2KID4FK4.js";
+import "../chunk-Q5RNYE2L.js";
 import {
   checkApiKey,
   describeKeyCheck,
   samePusharyAccount
-} from "../chunk-QNATBOUH.js";
-import "../chunk-EEM65CGJ.js";
-import "../chunk-ADRPW7KU.js";
+} from "../chunk-QR2QWGQI.js";
+import "../chunk-GECU7V44.js";
+import "../chunk-IA5VWIHV.js";
 import {
   UsageError
 } from "../chunk-PPY5N2E6.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";
-import "../chunk-2VADJ6JH.js";
+import "../chunk-XIJTXRWB.js";
 import {
   CLINE_AUTO_APPROVE_STEP,
   CLINE_RELOAD_STEP,
@@ -333,7 +333,7 @@ import {
   vscodePluginDir,
   vscodePluginMcp,
   writeInstructionBlock
-} from "../chunk-H4BKC2GN.js";
+} from "../chunk-GDLT32I4.js";
 import {
   NpmMissingError,
   backupFile,
@@ -346,14 +346,14 @@ import {
   readJsonSafe,
   resolveGlobalBinDir,
   resolveGlobalBinary
-} from "../chunk-BSZIPIFA.js";
+} from "../chunk-KS3O6O7E.js";
 import {
   getBaseUrl
-} from "../chunk-Y64JGYTB.js";
+} from "../chunk-A47UKPC7.js";
 import {
   NPX_LATEST_COMMAND,
   renderCommandHelp
-} from "../chunk-BAGBCSXA.js";
+} from "../chunk-GO7YKPT3.js";
 import {
   getPackageVersion,
   isNewerVersion,
@@ -372,7 +372,7 @@ import {
   isRecord,
   isTimeoutAction,
   isValidApiKey
-} from "../chunk-MNKIR2ZB.js";
+} from "../chunk-EJR5JXMV.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-setup.ts
@@ -1949,6 +1949,16 @@ var setupGemini = async (apiKey) => {
   noteManual("Restart Gemini CLI to load the new config.");
 };
 var OPENCODE_INSTRUCTIONS = openCodeInstructionsFile;
+var openCodeApprovalLines = (change, leftOpen) => {
+  const added = change.kind === "added" ? ` ${dim(`(set ${change.added.join(", ")} to "ask" in opencode.json)`)}` : "";
+  if (leftOpen.length === 0) {
+    return [`  ${dim("\u2022")} Approvals: OpenCode asks before ${bold("bash")}, ${bold("edit")} and ${bold("webfetch")}, and Pushary answers by your rules or on your phone${added}`];
+  }
+  return [
+    `  ${yellow("!")} OpenCode runs ${leftOpen.map((name) => bold(name)).join(", ")} without asking, so Pushary never sees ${leftOpen.length === 1 ? "it" : "them"}.`,
+    `    ${dim(`Set ${leftOpen.join(", ")} to "ask" under permission in ${openCodeConfigFile()} to approve from your phone.`)}`
+  ];
+};
 var setupOpenCode = async (apiKey) => {
   console.log(`
   ${bold("Setting up OpenCode")}
@@ -1962,10 +1972,15 @@ var setupOpenCode = async (apiKey) => {
   await spinner(`Writing the Pushary plugin (${openCodePluginFile()})`, async () => {
     installOpenCodePlugin(openCodeHookArgv(resolveGlobalBinary(OPENCODE_HOOK_BINARY)), openCodePluginDir());
   });
-  await spinner(`Adding MCP server (${openCodeConfigFile()})`, async () => {
+  let askRules = { kind: "present" };
+  let leftOpen = [];
+  await spinner(`Adding MCP server and approval rules (${openCodeConfigFile()})`, async () => {
     const config = readAgentJson(openCodeConfigFile());
     addOpenCodeMcpServer(config, apiKey);
-    writeSetupConfigJson(openCodeConfigFile(), config, KEY_FILE_MODE);
+    const withRules = withOpenCodeAskRules(config);
+    askRules = withRules.change;
+    leftOpen = openCodePermissionsLeftOpen(withRules.config);
+    writeSetupConfigJson(openCodeConfigFile(), withRules.config, KEY_FILE_MODE);
   });
   await spinner("Teaching OpenCode to ask via push", async () => {
     writeInstructionBlock(OPENCODE_INSTRUCTIONS(), renderAgentInstructions(OPENCODE_INSTRUCTIONS_LABEL));
@@ -1974,8 +1989,7 @@ var setupOpenCode = async (apiKey) => {
   console.log(`  ${dim("What this configured:")}`);
   console.log(`  ${dim("\u2022")} Plugin: ${openCodePluginFile()}`);
   console.log(`  ${dim("\u2022")} MCP server: OpenCode can send notifications and ask questions`);
-  console.log(`  ${dim("\u2022")} Approvals: a permission OpenCode raises is answered from your phone`);
-  console.log(`  ${dim("\u2022")} Gate covers ${bold("bash")}, ${bold("edit")}, ${bold("write")} and ${bold("webfetch")}`);
+  for (const line of openCodeApprovalLines(askRules, leftOpen)) console.log(line);
   console.log(`  ${dim("\u2022")} Receipts: tool results, prompts and turn boundaries reach your account`);
   console.log(`  ${dim("Restart OpenCode to load the plugin.")}`);
   noteManual("Restart OpenCode to load the plugin.");

package/dist/bin/pushary-stats.js

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import {
   exitOnHelpFlag
-} from "../chunk-AN7C3CHH.js";
+} from "../chunk-G6VJZ3RB.js";
 import {
   readLedgerSummary
-} from "../chunk-XJIIU36L.js";
+} from "../chunk-6BGVSV2Q.js";
 import "../chunk-KZERVKTD.js";
 import {
   getApiKey
-} from "../chunk-Y64JGYTB.js";
-import "../chunk-BAGBCSXA.js";
+} from "../chunk-A47UKPC7.js";
+import "../chunk-GO7YKPT3.js";
 import "../chunk-QTOLNRET.js";
-import "../chunk-MNKIR2ZB.js";
+import "../chunk-EJR5JXMV.js";
 import "../chunk-MLKGABMK.js";
 
 // bin/pushary-stats.ts