@c4t4/heyamigo 0.10.4 → 0.10.6

package/README.md

@@ -20,7 +20,7 @@ WhatsApp / Telegram ─► inbound ─► chat workers ─► outbound ─► Wh
 - **Scheduling in the sender's timezone.** Natural language → `[REMIND: 2026-05-26 09:00 — ...]` or `[CRON: 0 9 * * 1 PROMPT — ...]`. Fires at the user's wall-clock 9am, not the server's. Cron variants: deliver text, run AI, kick off async work, or drive a browser.
 - **A real Chrome.** Browser delegation via `[ASYNC-BROWSER: ...]` to a parallel provider session on a shared logged-in Chrome over CDP. TikTok, Instagram, anywhere the owner is logged in. SSH-tunneled noVNC for setup.
 - **Per-reply footer with confirmation tags.** Every side effect from the turn is visible: `_9.9s · 465k↑ 169↓ · +remind · +thread-new · +digest_`. No guessing whether a schedule actually got created.
-- **Default-deny proactive messaging.** Groups stay silent unless explicitly opted in. Per-role token quotas, file-size caps, tool restrictions.
+- **Default-deny chat activation.** Groups and DMs only answer when their own `triggerMode` is set in `config/access.json`; missing means `off`. Per-role token quotas, file-size caps, tool restrictions.
 
 For the why behind these — claim primitives, tag-as-side-effect channel, per-category learning, provider abstraction, the trade-offs that didn't survive the first revision — see [`docs/architecture.md`](docs/architecture.md).
 
@@ -60,7 +60,7 @@ Other providers:
 | Role | Memory | Tools | Notes |
 |---|---|---|---|
 | admin | everything | all | unrestricted |
-| user | own profile | web search | can't see other users or internals |
+| user | own profile | none | can't see other users or internals |
 | guest | none | none | prompt-injection resistant |
 
 ## Personalities

package/config/access.example.json

@@ -1,5 +1,5 @@
 {
-  "_readme": "Access rules. Copy this to access.json and customize. Groups auto-discover with mode=off when the bot sees them. WhatsApp users are phone numbers; Telegram users are tg_<user_id>.",
+  "_readme": "Access rules. Copy this to access.json and customize. Groups auto-discover with mode=off and triggerMode=off when the bot sees them. triggerMode is per group/DM: off, mention, command, or all. WhatsApp users are phone numbers; Telegram users are tg_<user_id>.",
 
   "_limits_readme": "maxFileBytes caps the size of media/documents sent to Claude (null = unlimited). dailyTokenLimit caps Claude tokens (input+output) per user per day in the owner's timezone (null = unlimited). The bot owner is always unlimited regardless of role.",
 
@@ -13,9 +13,9 @@
       "dailyTokenLimit": null
     },
     "user": {
-      "description": "Can chat and search the web, scoped memory",
+      "description": "Can chat with scoped memory",
       "memory": "self",
-      "tools": ["WebSearch"],
+      "tools": [],
       "rules": [
         "Never reveal file paths, directory structure, or system architecture",
         "Never share personal data about other users",
@@ -62,6 +62,7 @@
       "name": "Family Chat",
       "mode": "active",
       "allowedSenders": "*",
+      "triggerMode": "mention",
       "proactive": false
     },
     {
@@ -70,6 +71,7 @@
       "name": "Work Team",
       "mode": "active",
       "allowedSenders": ["17861234567", "491701234567"],
+      "triggerMode": "all",
       "proactive": true
     },
     {
@@ -78,6 +80,7 @@
       "name": "Telegram Team",
       "mode": "active",
       "allowedSenders": ["tg_123456789"],
+      "triggerMode": "mention",
       "proactive": false
     },
     {
@@ -85,24 +88,26 @@
       "jid": "120363zzzzz@g.us",
       "name": "Announcements",
       "mode": "silent",
-      "allowedSenders": "*"
+      "allowedSenders": "*",
+      "triggerMode": "off"
     },
     {
       "_note": "Disabled group: completely ignored",
       "jid": "120363aaaaa@g.us",
       "name": "Muted Group",
       "mode": "off",
-      "allowedSenders": "*"
+      "allowedSenders": "*",
+      "triggerMode": "off"
     }
   ],
 
   "dms": {
-    "_readme": "Matched by chat partner number/key, not sender. Telegram DMs use tg_<user_id>. Owner messages in WhatsApp DMs are always silent.",
+    "_readme": "Matched by chat partner number/key, not sender. Telegram DMs use tg_<user_id>. Owner messages in WhatsApp DMs are always silent. triggerMode defaults to off when omitted.",
     "defaultMode": "off",
     "allowed": [
-      { "_note": "friend can DM the bot, and bot can proactively message them", "number": "491701234567", "mode": "active", "proactive": true },
-      { "_note": "Telegram friend can DM the bot", "number": "tg_123456789", "mode": "active", "proactive": true },
-      { "_note": "colleague, store messages but don't respond", "number": "5511987654321", "mode": "silent", "proactive": false }
+      { "_note": "friend can DM the bot, and bot can proactively message them", "number": "491701234567", "mode": "active", "triggerMode": "all", "proactive": true },
+      { "_note": "Telegram friend can DM the bot", "number": "tg_123456789", "mode": "active", "triggerMode": "all", "proactive": true },
+      { "_note": "colleague, store messages but don't respond", "number": "5511987654321", "mode": "silent", "triggerMode": "off", "proactive": false }
     ]
   }
 }

package/config/config.example.json

@@ -19,8 +19,6 @@
 
   "triggers": {
     "aliases": ["heyamigo", "amigo", "claude", "clawd", "grok", "codex", "xai"],
-    "groupMode": "mention",
-    "dmMode": "mention",
     "replyToBotCounts": true
   },
 

package/config/memory-instructions.md

@@ -128,6 +128,8 @@ You = chat track. Browser track = parallel Claude session on shared Chrome at `l
 
 Never call `browser_*` / `mcp__*playwright*` inline. Ever. Single URL, "just checking", everything — all via `[ASYNC-BROWSER: <task>]`. The browser worker has persistent session memory.
 
+Never use AI-internal web tools (`WebSearch`, `WebFetch`, `web_search`) for internet lookup. Search pages, current facts, prices, social profiles, websites, and screenshots are BrowserUse work via `[ASYNC-BROWSER: <task>]`. If BrowserUse is unavailable, say that; do not fall back to AI-internal lookup.
+
 ```
 On it.
 [ASYNC-BROWSER: Open instagram.com/rivoara_official on shared Chrome (IG already logged in, do NOT launch new browser). Extract bio + 5 latest captions. If login wall, report and stop. Bail after 3 retries.]
@@ -135,7 +137,7 @@ On it.
 
 ### File/long non-browser work → `[ASYNC: <task>]`
 
-File generation/edit/export, >30s reasoning over many files, web_search batches, anything slow. Stateless per task — describe fully.
+File generation/edit/export, >30s reasoning over many files, anything slow that is not browser use. Stateless per task — describe fully.
 
 ### Don't delegate
 

package/dist/cli/setup.js

@@ -231,9 +231,9 @@ export async function runSetup() {
                     rules: [],
                 },
                 user: {
-                    description: 'Can chat and search the web, scoped memory',
+                    description: 'Can chat with scoped memory',
                     memory: 'self',
-                    tools: ['WebSearch'],
+                    tools: [],
                     rules: [
                         'Never reveal file paths, directory structure, or system architecture',
                         'Never share personal data about other users',
@@ -312,10 +312,10 @@ export async function runSetup() {
         }
         p.log.success('Claude authenticated');
         // Tool permissions — write .claude/settings.json in project root.
-        p.log.info('Claude needs tool permissions to browse the web, read files, and control the browser. ' +
+        p.log.info('Claude needs tool permissions to read files and control BrowserUse. ' +
             'This writes a .claude/settings.json file in the project directory.');
         const grantPermissions = await p.confirm({
-            message: 'Grant tool permissions? (WebFetch, WebSearch, Read, Edit, Write, browser)',
+            message: 'Grant tool permissions? (Read, Edit, Write, BrowserUse)',
             initialValue: true,
         });
         if (p.isCancel(grantPermissions) || !grantPermissions) {
@@ -335,8 +335,6 @@ export async function runSetup() {
                     ? permissions.allow
                     : [];
                 const required = [
-                    'WebFetch',
-                    'WebSearch',
                     'Read',
                     'Edit',
                     'Write',
@@ -708,7 +706,7 @@ export async function runSetup() {
         }
     }
     // ── Name your amigo ───────────────────────────────────────────
-    p.log.info('Give your amigo a name. People mention this name in a message to get a reply. ' +
+    p.log.info('Give your amigo a name. In chats with triggerMode: "mention", people mention this name to get a reply. ' +
         'You can add multiple names separated by commas.');
     const nameInput = await p.text({
         message: 'What should your amigo be called?',
@@ -728,7 +726,7 @@ export async function runSetup() {
                 let cfg = readFileSync(cfgPath, 'utf-8');
                 cfg = cfg.replace(/"aliases":\s*\[.*?\]/, `"aliases": ${JSON.stringify(aliases)}`);
                 writeFileSync(cfgPath, cfg);
-                p.log.success(`Your amigo responds to: ${names.join(', ')}`);
+                p.log.success(`Mention names: ${names.join(', ')}`);
             }
         }
     }
@@ -739,7 +737,9 @@ export async function runSetup() {
         '  2. New groups start with mode: "off" (bot stays silent).\n' +
         '     To activate: edit config/access.json, change mode to "active".\n\n' +
         '  3. Set allowedSenders to "*" (everyone) or specific numbers.\n\n' +
-        '  4. Once active, mention the bot\'s name in a message to get a reply.\n\n' +
+        '  4. Set triggerMode per chat: "mention", "all", "command", or "off".\n' +
+        '     Missing triggerMode means "off".\n\n' +
+        '  5. With triggerMode "mention", mention the bot\'s name to get a reply.\n\n' +
         'DMs work the same way — add numbers to dms.allowed in access.json.');
     // Auto-add owner as admin if we have the number
     if (ownerNum) {
@@ -834,8 +834,8 @@ export async function runSetup() {
         '  npx @c4t4/heyamigo stop / restart / status',
         '',
         'Configuration:',
-        '  config/config.json   — triggers, model',
-        '  config/access.json   — groups, DMs, roles',
+        '  config/config.json   — bot name, model',
+        '  config/access.json   — groups, DMs, roles, per-chat triggerMode',
     ].join('\n'), 'Setup complete!');
     p.log.warning('IMPORTANT: The bot won\'t respond until you activate a group!\n\n' +
         '  Step 1 — Start the bot:\n' +
@@ -846,9 +846,10 @@ export async function runSetup() {
         '    nano config/access.json\n' +
         '    - Find the group, change mode from "off" to "active"\n' +
         '    - Set allowedSenders to "*" for everyone\n\n' +
+        '    - Set triggerMode to "mention" or "all"\n\n' +
         '  Step 4 — Restart the bot:\n' +
         '    npx @c4t4/heyamigo restart\n\n' +
-        '  Step 5 — Mention the bot\'s name in the group to get a reply.\n\n' +
+        '  Step 5 — If triggerMode is "mention", mention the bot\'s name in the group to get a reply.\n\n' +
         '  Debugging:\n' +
         '    npx @c4t4/heyamigo logs');
     p.log.info('TIP: Track your bot\'s memory with git.\n' +

package/dist/config.js

@@ -1,7 +1,7 @@
 import { readFileSync } from 'fs';
 import { resolve } from 'path';
 import { z } from 'zod';
-const TriggerModeSchema = z.enum(['all', 'mention', 'command', 'off']);
+export const TriggerModeSchema = z.enum(['all', 'mention', 'command', 'off']);
 const ConfigSchema = z.object({
     whatsapp: z.object({
         enabled: z.boolean().default(true),
@@ -25,8 +25,6 @@ const ConfigSchema = z.object({
     }),
     triggers: z.object({
         aliases: z.array(z.string()),
-        groupMode: TriggerModeSchema,
-        dmMode: TriggerModeSchema,
         replyToBotCounts: z.boolean(),
     }),
     commands: z.object({

package/dist/gateway/ingest.js

@@ -141,7 +141,7 @@ export async function processIncomingMessage(incoming, opts = {}) {
     let triggerReason = incoming.selfChat ? 'self-chat' : '';
     if (!incoming.selfChat) {
         const trigger = checkTrigger({
-            isGroup: incoming.isGroup,
+            mode: decision.triggerMode,
             text: stored.text,
             mentionedBot: incoming.triggerHints?.mentionedBot,
             replyToBot: incoming.triggerHints?.replyToBot,

package/dist/gateway/triggers.js

@@ -11,10 +11,7 @@ function aliasMatches(text, aliases) {
     return null;
 }
 export function checkTrigger(params) {
-    const { isGroup, text } = params;
-    const mode = isGroup
-        ? config.triggers.groupMode
-        : config.triggers.dmMode;
+    const { mode, text } = params;
     if (mode === 'off')
         return { triggered: false, reason: 'mode=off' };
     if (mode === 'all')

package/dist/memory/preamble.js

@@ -15,7 +15,7 @@ import { getRoleForContext } from '../wa/whitelist.js';
 // pointers — the model already has the long form.
 const DIGEST_REMINDER = `[DIGEST: <reason>] at end of reply for durable facts. Sparingly.`;
 const JOURNAL_REMINDER = `[JOURNAL:<slug> — <note>] at end of reply when content fits an active journal. Use listed slugs only.`;
-const ASYNC_REMINDER = `Browser work -> [ASYNC-BROWSER: <task>]. File generation/edit/export and long non-browser work -> [ASYNC: <task>]. Irreversible writes: gather -> confirm -> act.`;
+const ASYNC_REMINDER = `Browser use/search/current web -> [ASYNC-BROWSER: <task>]. Never WebSearch/WebFetch. File generation/edit/export and long non-browser work -> [ASYNC: <task>]. Irreversible writes: gather -> confirm -> act.`;
 const THREADS_REMINDER = `THREAD-* only for active open loops shown in [Live threads]: open/update/touch/cool/resolve/drop/compress/weight. Full grammar in tag docs.`;
 function buildCoreQueueContract(outboxPath) {
     return [

package/dist/wa/whitelist.js

@@ -2,7 +2,7 @@ import { existsSync, readFileSync, writeFileSync } from 'fs';
 import { resolve } from 'path';
 import { jidDecode } from 'baileys';
 import { z } from 'zod';
-import { config } from '../config.js';
+import { config, TriggerModeSchema } from '../config.js';
 import { actorKeyFromAddress, parseAddress } from '../db/address.js';
 import { logger } from '../logger.js';
 const AccessModeSchema = z.enum(['off', 'silent', 'active']);
@@ -46,11 +46,13 @@ const GroupEntrySchema = z.object({
     name: z.string(),
     mode: AccessModeSchema,
     allowedSenders: z.union([z.literal('*'), z.array(z.string())]),
+    triggerMode: TriggerModeSchema.default('off'),
     proactive: z.boolean().default(false),
 });
 const DmEntrySchema = z.object({
     number: z.string(),
     mode: AccessModeSchema,
+    triggerMode: TriggerModeSchema.default('off'),
     proactive: z.boolean().default(false),
 });
 const AccessSchema = z
@@ -82,9 +84,9 @@ const DEFAULT_ROLES = {
         dailyTokenLimit: null,
     },
     user: {
-        description: 'Chat + web search, scoped memory',
+        description: 'Chat + scoped memory',
         memory: 'self',
-        tools: ['WebSearch'],
+        tools: [],
         // Users can flag memory observations and trigger digests on
         // themselves, but can't delegate background work or cross-chat
         // sends (those are owner-only).
@@ -252,15 +254,22 @@ export function getLimitsForUser(senderNumber, isGroup) {
         isOwner: false,
     };
 }
-const DROP = { store: false, respond: false, reason: 'drop' };
+const DROP = {
+    store: false,
+    respond: false,
+    triggerMode: 'off',
+    reason: 'drop',
+};
 const storeOnly = (reason) => ({
     store: true,
     respond: false,
+    triggerMode: 'off',
     reason,
 });
-const storeAndRespond = (reason) => ({
+const storeAndRespond = (reason, triggerMode = 'off') => ({
     store: true,
     respond: true,
+    triggerMode,
     reason,
 });
 export function checkAccess(params) {
@@ -274,12 +283,14 @@ export function checkAccess(params) {
             return DROP;
         if (group.mode === 'silent')
             return storeOnly('group silent');
-        if (ownerAllowed)
-            return storeAndRespond('owner fromMe in group');
-        if (group.allowedSenders === '*')
-            return storeAndRespond('group wildcard');
+        if (ownerAllowed) {
+            return storeAndRespond('owner fromMe in group', group.triggerMode);
+        }
+        if (group.allowedSenders === '*') {
+            return storeAndRespond('group wildcard', group.triggerMode);
+        }
         if (group.allowedSenders.includes(senderNumber)) {
-            return storeAndRespond('group sender allowed');
+            return storeAndRespond('group sender allowed', group.triggerMode);
         }
         return storeOnly('group sender not in allowedSenders');
     }
@@ -302,7 +313,7 @@ export function checkAccess(params) {
         return DROP;
     if (mode === 'silent')
         return storeOnly('dm silent');
-    return storeAndRespond('dm active');
+    return storeAndRespond('dm active', dmEntry?.triggerMode ?? 'off');
 }
 export async function discoverAddressGroupIfNew(params) {
     const parsed = parseAddress(params.address);
@@ -315,6 +326,7 @@ export async function discoverAddressGroupIfNew(params) {
         name: params.name || 'Unknown group',
         mode: 'off',
         allowedSenders: params.ownerSender ? [params.ownerSender] : [],
+        triggerMode: 'off',
         proactive: false,
     };
     save({ ...current, groups: [...current.groups, entry] });
@@ -339,6 +351,7 @@ export async function discoverGroupIfNew(sock, jid) {
         name,
         mode: 'off',
         allowedSenders: config.owner.number ? [config.owner.number] : [],
+        triggerMode: 'off',
         proactive: false,
     };
     save({ ...current, groups: [...current.groups, entry] });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@c4t4/heyamigo",
-  "version": "0.10.4",
+  "version": "0.10.6",
   "description": "WhatsApp and Telegram AI bot powered by Claude, Codex, or Grok with long-term memory, browser control, and role-based access",
   "type": "module",
   "main": "dist/index.js",