improve documentation

Author: FrederickEngelhardt

README.md

@@ -16,13 +16,41 @@ OSA Scripts provides a modular collection of zsh aliases, functions, and plugins
 - **Version Manager Support**: Integrations for nvm, fnm, rbenv, pyenv, jenv, and direnv
 - **Developer Aliases**: Time-saving shortcuts for npm, yarn, git, and common development tasks
 
+## Setup
+
+These scripts work with the [OSA](https://github.com/VirtualizeLLC/osa) configuration system.
+
+### Quick Start
+
+1. **Use OSA**: Install and run `osa setup` to automatically configure your environment
+2. **Or Manual Setup**: Source `entry.zsh` in your shell profile and generate a `~/.osa-config` file
+
+### Configuration
+
+Scripts are loaded based on boolean flags in `~/.osa-config`. Key configuration values:
+
+```bash
+# Core components
+OSA_CONFIG_COMPONENTS_GIT=true          # Git aliases
+OSA_CONFIG_COMPONENTS_NODE=true         # Node.js tools
+OSA_CONFIG_COMPONENTS_HOMEBREW=true     # Homebrew utilities
+
+# Development tools
+OSA_CONFIG_RUNTIMES_NODE_ENABLED=true   # Node runtime management
+OSA_CONFIG_SNIPPETS_OSASNIPPETS_REACT_NATIVE=true  # React Native tools
+OSA_CONFIG_SNIPPETS_OSASNIPPETS_ANDROID=true       # Android development
+```
+
+See the [OSA repository](https://github.com/VirtualizeLLC/osa) for complete configuration options.
+
 ## Productivity Scripts
 
 Key scripts designed to boost developer productivity:
 
 ### File Management
 
 **`rmAsync` - Asynchronous Bulk File Deletion**
+
 - **Problem Solved**: Unblocks developers instantly when deleting massive directories (node_modules, build artifacts, etc)
 - **How It Works**: Moves files to a staging area and deletes them in the background, returning control immediately
 - **Usage**: `rmAsync node_modules` or `rmAsync src/**/*.tmp build/*`
@@ -32,109 +60,57 @@ Key scripts designed to boost developer productivity:
 ### Xcode & iOS Development
 
 **`xcwo` - Smart Xcode Workspace Opener**
+
 - **Problem Solved**: Quick access to Xcode workspace without remembering directory structure
 - **How It Works**: Automatically finds and opens `.xcworkspace` in current or ios/ subdirectory
 - **Usage**: `xcwo`
 - **Benefits**: Saves time in React Native development workflows
 
 **`purgeallbuilds` - Clear Xcode Cache**
+
 - **Aliases**: Instantly clears all Xcode derived data to fix mysterious build issues
 - **Usage**: `purgeallbuilds`
 
 ### Browser Development
 
 **`chrome-cors` & `chrome-cors-https`** - CORS-Disabled Chrome Instances
+
 - **Problem Solved**: Launch Chrome without CORS restrictions for local development
 - **Usage**: `chrome-cors` or `chrome-cors-https`
 - **Perfect For**: API testing, frontend development, HTTPS localhost testing
 
 ### React Native Development
 
 **`rn-fix`** - Complete React Native Reset
+
 - **Clears**: Node modules, watchman, temp files, cache
 - **Usage**: `rn-fix`
 - **Saves Time**: 5-10 minutes of manual cleanup per fix
 
 **`rnios` / `rnra`** - iOS/Android Launch Shortcuts
+
 - **Usage**: `rnios` (iOS) or `rnra` (Android)
 - **Benefit**: Fewer keystrokes, faster iteration
 
 ### Package Manager Helpers
 
 **`react-native` / `rn`** - Shorthand aliases
+
 - **Auto-detects** lock files (yarn.lock, package-lock.json) for correct package manager
 - **Usage**: `rn run-ios`, `rn run-android`
 
-## Setup
-
-### Installation
-
-These scripts are designed to work with the OSA configuration system. They will be automatically sourced when you set up your OSA profile.
+### CLI Tools
 
-1. Clone or integrate this repository into your OSA setup
-2. Run the OSA installation wizard to configure your profile
-3. 3. Configuration will be saved to `~/.osa-config`
-4. Scripts matching your configuration will be automatically loaded
-
-### Configuration
+**`osa copilot audit-auto-approve`** - Audit GitHub Copilot Auto-Approve Tasks
 
-Scripts are loaded based on boolean flags set in `~/.osa-config`. This file is automatically generated by the OSA setup wizard and contains flags like:
-
-```bash
-# Example ~/.osa-config
-OSA_SETUP_OH_MY_ZSH=true
-OSA_SETUP_HOMEBREW=true
-OSA_SETUP_COCOAPODS=false
-OSA_SETUP_ZSH_PLUGINS=true
-OSA_SETUP_GIT=false
-OSA_SETUP_SYMLINKS=true
-OSA_SETUP_ANDROID=true
-OSA_SETUP_MISE=true
-```
-
-**Common Configuration Flags:**
-- `OSA_SETUP_OH_MY_ZSH` - Oh My Zsh and Powerlevel10k
-- `OSA_SETUP_HOMEBREW` - Homebrew package manager utilities
-- `OSA_SETUP_GIT` - Git aliases and shortcuts
-- `OSA_SETUP_ANDROID` - Android SDK, ADB, and emulator tools
-- `OSA_SETUP_COCOAPODS` - CocoaPods utilities for iOS development
-- `OSA_SETUP_MISE` - Mise universal version manager (Node, Python, Ruby, Java, etc.)
-- `OSA_SETUP_ZSH_PLUGINS` - Additional zsh plugins and themes
-
-**Optional Flags (defaults to false):**
-- `OSA_SETUP_NODE` - Node.js tools (if not using mise)
-- `OSA_SETUP_PYTHON` - Python/pyenv (if not using mise)
-- `OSA_SETUP_RUBY` - Ruby/rbenv (if not using mise)
-- `OSA_SETUP_JAVA` - Java/jenv (if not using mise)
-- `OSA_SETUP_REACT_NATIVE` - React Native development tools
-- `OSA_SETUP_VSCODE` - VS Code integration
-- `OSA_SETUP_XCODE` - Xcode command utilities
-- `OSA_SETUP_MAC_TOOLS` - macOS-specific utilities
-
-## Structure
-
-```
-├── entry.zsh              # Main entry point with profile guards
-├── aliases/               # Command aliases and shortcuts
-│   ├── git.zsh
-│   ├── node.zsh
-│   ├── npm.zsh
-│   ├── yarn.zsh
-│   └── osa.zsh
-└── plugins/               # Feature-specific plugins and utilities
-    ├── brew.zsh
-    ├── direnv.zsh
-    ├── java-version.zsh
-    ├── jenv.zsh
-    ├── pyenv.sh
-    ├── rbenv.zsh
-    ├── react-native.zsh
-    ├── vscode.zsh
-    ├── android/           # Android development tools
-    ├── mac/               # macOS-specific utilities
-    ├── node-managers/     # nvm, fnm configurations
-    └── tar/               # Archive utilities
-```
+- **Problem Solved**: Ensures VSCode Copilot autoApproveTasks only contain safe Gradle patterns
+- **How It Works**: Scans VSCode settings for risky auto-approve patterns in Gradle build files
+- **Usage**: `osa copilot audit-auto-approve [--allow-prefix <prefixes>] [--fail-on-risk] [--json]`
+- **Options**:
+  - `--allow-prefix`: Comma-separated allowed prefixes (default: "tachyon")
+  - `--fail-on-risk`: Exit with error if risky patterns found
+  - `--json`: Output results in JSON format
+- **Perfect For**: Security auditing, CI/CD pipelines, team policy enforcement
 
 ## Productivity Benefits
 
@@ -150,4 +126,4 @@ This is part of the OSA project. For contributions, issues, or feature requests,
 
 ## License
 
-See the main [OSA repository](https://github.com/VirtualizeLLC/osa) for license information.
+See the main [OSA repository](https://github.com/VirtualizeLLC/osa) for license information.