@c4t4/heyamigo 0.8.10 → 0.8.11

package/config/config.example.json

@@ -36,6 +36,12 @@
     "contextWindow": 200000
   },
 
+  "codex": {
+    "yolo": true,
+    "skipGitRepoCheck": true,
+    "extraArgs": []
+  },
+
   "bootstrap": {
     "historyDepth": 50,
     "includeHistory": true,

package/dist/ai/codex.js

@@ -8,13 +8,19 @@
 //   - --add-dir for extra writable roots
 //   - --sandbox for tier (read-only / workspace-write / danger-full-access)
 //   - `resume <id>` subcommand for session continuation (not a flag)
-//   - prompt passed on stdin (matches the spawn plumbing that already
-//     pipes input to child.stdin)
+//   - prompt passed as positional arg
+//
+// Configurable via config.codex:
+//   - yolo (default true): adds --yolo, which bundles no-approvals +
+//     full sandbox + skip-trust-check. The right default for a headless
+//     owner-bot; set false to honor runTask's mode-driven sandbox.
+//   - skipGitRepoCheck (default true): adds --skip-git-repo-check when
+//     yolo is off. Codex refuses to run in untrusted cwds without it.
+//   - extraArgs: appended verbatim. Escape hatch for version drift.
 //
 // What's deliberately coarse:
 //   - allowedTools is ignored on this provider. Codex has no per-tool
-//     allowlist; the sandbox mode is the only knob. The mode argument
-//     covers the practical cases (read vs. write vs. full).
+//     allowlist; the sandbox mode is the only knob.
 import { readFileSync } from 'fs';
 import { resolve } from 'path';
 import { config } from '../config.js';
@@ -57,8 +63,20 @@ function laneTimeoutMs(lane) {
     return TIMEOUT_MS[lane];
 }
 function buildExecArgs(params) {
+    const cfg = config.codex;
     const args = ['exec', '--json'];
-    args.push('--sandbox', sandboxFor(params.mode));
+    if (cfg.yolo) {
+        // --yolo: no approvals, full sandbox, skip trust check. Single switch
+        // that covers the owner-bot case. mode is ignored on this path.
+        args.push('--yolo');
+    }
+    else {
+        if (cfg.skipGitRepoCheck)
+            args.push('--skip-git-repo-check');
+        args.push('--sandbox', sandboxFor(params.mode));
+    }
+    for (const extra of cfg.extraArgs)
+        args.push(extra);
     if (params.sessionId) {
         // Resume is a subcommand of exec, not a flag: `codex exec [opts] resume
         // <SESSION_ID> [prompt]`. System prompt and add-dirs were baked in on

package/dist/config.js

@@ -36,6 +36,20 @@ const ConfigSchema = z.object({
         outputFormat: z.enum(['json', 'text', 'stream-json']),
         contextWindow: z.number(),
     }),
+    codex: z
+        .object({
+        // --yolo on the Codex CLI bundles "no approvals + full sandbox + no
+        // trust prompts". Right default for a headless owner-bot; flip to
+        // false if you want runTask's mode to drive the sandbox tier instead.
+        yolo: z.boolean().default(true),
+        // When yolo=false, still bypass the trust-directory prompt. Codex
+        // refuses to run in an "untrusted" cwd otherwise.
+        skipGitRepoCheck: z.boolean().default(true),
+        // Appended verbatim to every `codex exec` invocation. Escape hatch
+        // for version-specific flags we haven't first-classed.
+        extraArgs: z.array(z.string()).default([]),
+    })
+        .default({}),
     bootstrap: z.object({
         historyDepth: z.number(),
         includeHistory: z.boolean(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@c4t4/heyamigo",
-  "version": "0.8.10",
+  "version": "0.8.11",
   "description": "WhatsApp AI bot powered by Claude with long-term memory, browser control, and role-based access",
   "type": "module",
   "main": "dist/index.js",