The bash permission parsing is what sold me. Most agents treat `git diff && rm -rf /` as one blob, using tree-sitter to split that into separate permission requests is smart.