@c4t4/heyamigo 0.10.4 → 0.10.5

package/README.md

@@ -60,7 +60,7 @@ Other providers:
 | Role | Memory | Tools | Notes |
 |---|---|---|---|
 | admin | everything | all | unrestricted |
-| user | own profile | web search | can't see other users or internals |
+| user | own profile | none | can't see other users or internals |
 | guest | none | none | prompt-injection resistant |
 
 ## Personalities

package/config/access.example.json

@@ -13,9 +13,9 @@
       "dailyTokenLimit": null
     },
     "user": {
-      "description": "Can chat and search the web, scoped memory",
+      "description": "Can chat with scoped memory",
       "memory": "self",
-      "tools": ["WebSearch"],
+      "tools": [],
       "rules": [
         "Never reveal file paths, directory structure, or system architecture",
         "Never share personal data about other users",

package/config/memory-instructions.md

@@ -128,6 +128,8 @@ You = chat track. Browser track = parallel Claude session on shared Chrome at `l
 
 Never call `browser_*` / `mcp__*playwright*` inline. Ever. Single URL, "just checking", everything — all via `[ASYNC-BROWSER: <task>]`. The browser worker has persistent session memory.
 
+Never use AI-internal web tools (`WebSearch`, `WebFetch`, `web_search`) for internet lookup. Search pages, current facts, prices, social profiles, websites, and screenshots are BrowserUse work via `[ASYNC-BROWSER: <task>]`. If BrowserUse is unavailable, say that; do not fall back to AI-internal lookup.
+
 ```
 On it.
 [ASYNC-BROWSER: Open instagram.com/rivoara_official on shared Chrome (IG already logged in, do NOT launch new browser). Extract bio + 5 latest captions. If login wall, report and stop. Bail after 3 retries.]
@@ -135,7 +137,7 @@ On it.
 
 ### File/long non-browser work → `[ASYNC: <task>]`
 
-File generation/edit/export, >30s reasoning over many files, web_search batches, anything slow. Stateless per task — describe fully.
+File generation/edit/export, >30s reasoning over many files, anything slow that is not browser use. Stateless per task — describe fully.
 
 ### Don't delegate
 

package/dist/cli/setup.js

@@ -231,9 +231,9 @@ export async function runSetup() {
                     rules: [],
                 },
                 user: {
-                    description: 'Can chat and search the web, scoped memory',
+                    description: 'Can chat with scoped memory',
                     memory: 'self',
-                    tools: ['WebSearch'],
+                    tools: [],
                     rules: [
                         'Never reveal file paths, directory structure, or system architecture',
                         'Never share personal data about other users',
@@ -312,10 +312,10 @@ export async function runSetup() {
         }
         p.log.success('Claude authenticated');
         // Tool permissions — write .claude/settings.json in project root.
-        p.log.info('Claude needs tool permissions to browse the web, read files, and control the browser. ' +
+        p.log.info('Claude needs tool permissions to read files and control BrowserUse. ' +
             'This writes a .claude/settings.json file in the project directory.');
         const grantPermissions = await p.confirm({
-            message: 'Grant tool permissions? (WebFetch, WebSearch, Read, Edit, Write, browser)',
+            message: 'Grant tool permissions? (Read, Edit, Write, BrowserUse)',
             initialValue: true,
         });
         if (p.isCancel(grantPermissions) || !grantPermissions) {
@@ -335,8 +335,6 @@ export async function runSetup() {
                     ? permissions.allow
                     : [];
                 const required = [
-                    'WebFetch',
-                    'WebSearch',
                     'Read',
                     'Edit',
                     'Write',

package/dist/memory/preamble.js

@@ -15,7 +15,7 @@ import { getRoleForContext } from '../wa/whitelist.js';
 // pointers — the model already has the long form.
 const DIGEST_REMINDER = `[DIGEST: <reason>] at end of reply for durable facts. Sparingly.`;
 const JOURNAL_REMINDER = `[JOURNAL:<slug> — <note>] at end of reply when content fits an active journal. Use listed slugs only.`;
-const ASYNC_REMINDER = `Browser work -> [ASYNC-BROWSER: <task>]. File generation/edit/export and long non-browser work -> [ASYNC: <task>]. Irreversible writes: gather -> confirm -> act.`;
+const ASYNC_REMINDER = `Browser use/search/current web -> [ASYNC-BROWSER: <task>]. Never WebSearch/WebFetch. File generation/edit/export and long non-browser work -> [ASYNC: <task>]. Irreversible writes: gather -> confirm -> act.`;
 const THREADS_REMINDER = `THREAD-* only for active open loops shown in [Live threads]: open/update/touch/cool/resolve/drop/compress/weight. Full grammar in tag docs.`;
 function buildCoreQueueContract(outboxPath) {
     return [

package/dist/wa/whitelist.js

@@ -82,9 +82,9 @@ const DEFAULT_ROLES = {
         dailyTokenLimit: null,
     },
     user: {
-        description: 'Chat + web search, scoped memory',
+        description: 'Chat + scoped memory',
         memory: 'self',
-        tools: ['WebSearch'],
+        tools: [],
         // Users can flag memory observations and trigger digests on
         // themselves, but can't delegate background work or cross-chat
         // sends (those are owner-only).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@c4t4/heyamigo",
-  "version": "0.10.4",
+  "version": "0.10.5",
   "description": "WhatsApp and Telegram AI bot powered by Claude, Codex, or Grok with long-term memory, browser control, and role-based access",
   "type": "module",
   "main": "dist/index.js",