@c4t4/heyamigo 0.8.12 → 0.8.14

package/dist/ai/codex.js

@@ -11,9 +11,12 @@
 //   - prompt passed as positional arg
 //
 // Configurable via config.codex:
-//   - yolo (default true): adds --yolo, which bundles no-approvals +
-//     full sandbox + skip-trust-check. The right default for a headless
-//     owner-bot; set false to honor runTask's mode-driven sandbox.
+//   - model: optional `-m <model>` override. Default = Codex's default.
+//   - yolo (default true): emits --dangerously-bypass-approvals-and-sandbox
+//     (the documented canonical flag; --yolo is an alias in newer builds).
+//     Bundles no-approvals + full sandbox + skip-trust-check. Right
+//     default for a headless owner-bot; set false to honor runTask's
+//     mode-driven sandbox.
 //   - skipGitRepoCheck (default true): adds --skip-git-repo-check when
 //     yolo is off. Codex refuses to run in untrusted cwds without it.
 //   - extraArgs: appended verbatim. Escape hatch for version drift.
@@ -62,13 +65,21 @@ function sandboxFor(mode) {
 function laneTimeoutMs(lane) {
     return TIMEOUT_MS[lane];
 }
+// Returns { args, prompt }. The prompt is the final text that should be
+// piped to stdin (system prompt prepended when applicable). args ends with
+// `-` so codex reads from stdin.
 function buildExecArgs(params) {
     const cfg = config.codex;
     const args = ['exec', '--json'];
+    if (cfg.model) {
+        args.push('-m', cfg.model);
+    }
     if (cfg.yolo) {
-        // --yolo: no approvals, full sandbox, skip trust check. Single switch
-        // that covers the owner-bot case. mode is ignored on this path.
-        args.push('--yolo');
+        // Canonical "no approvals + full sandbox + no trust check" switch.
+        // Some newer Codex builds expose --yolo as an alias for the same
+        // behavior; we use the documented name to stay portable. mode is
+        // ignored on this path.
+        args.push('--dangerously-bypass-approvals-and-sandbox');
     }
     else {
         if (cfg.skipGitRepoCheck)
@@ -95,10 +106,12 @@ function buildExecArgs(params) {
             params.prompt = `${systemPrompt()}\n\n---\n\n${params.prompt}`;
         }
     }
-    // Prompt as positional arg. `codex exec` reads stdin only with `-`, and
-    // passing it positionally avoids ambiguity with the spawn pipe.
-    args.push(params.prompt);
-    return args;
+    // Pass prompt via stdin (positional `-` is the documented way). Large
+    // prompts — system prompt + memory preamble + history — can blow past
+    // Linux's ARG_MAX when shoved into argv, causing the spawn to hang
+    // silently. stdin has no such cap.
+    args.push('-');
+    return { args, prompt: params.prompt };
 }
 function extractReply(ev) {
     // Primary shape: item.completed with item.type === 'agent_message'
@@ -184,19 +197,22 @@ function parseCodexOutput(stdout) {
     };
 }
 async function runCodexTask(params) {
-    const args = buildExecArgs({
+    const { args, prompt } = buildExecArgs({
         mode: params.mode,
         addDirs: params.addDirs,
         sessionId: params.sessionId,
         includeSystemPrompt: params.includeSystemPrompt,
         prompt: params.input,
     });
-    logger.debug({ caller: params.caller, resume: !!params.sessionId }, 'spawning codex exec');
-    // input is empty here — the prompt rides in argv (Codex exec semantics).
-    // Empty stdin end() is harmless.
+    logger.info({
+        caller: params.caller,
+        resume: !!params.sessionId,
+        argv: args,
+        promptChars: prompt.length,
+    }, 'spawning codex exec');
     const { stdout, stderr, durationMs } = await runClaude({
         args,
-        input: '',
+        input: prompt,
         timeoutMs: laneTimeoutMs(params.lane),
         caller: params.caller,
         bin: 'codex',

package/dist/config.js

@@ -38,15 +38,21 @@ const ConfigSchema = z.object({
     }),
     codex: z
         .object({
-        // --yolo on the Codex CLI bundles "no approvals + full sandbox + no
-        // trust prompts". Right default for a headless owner-bot; flip to
-        // false if you want runTask's mode to drive the sandbox tier instead.
+        // Optional model override. If unset, Codex uses its default. Passed
+        // as `-m <model>` to `codex exec`.
+        model: z.string().optional(),
+        // Field name kept catchy, but the actual flag emitted is the
+        // documented one: --dangerously-bypass-approvals-and-sandbox. Some
+        // newer Codex builds also accept --yolo as an alias; we use the
+        // canonical name for portability. Right default for a headless
+        // owner-bot. Set to false to honor runTask's mode-driven sandbox.
         yolo: z.boolean().default(true),
         // When yolo=false, still bypass the trust-directory prompt. Codex
         // refuses to run in an "untrusted" cwd otherwise.
         skipGitRepoCheck: z.boolean().default(true),
         // Appended verbatim to every `codex exec` invocation. Escape hatch
-        // for version-specific flags we haven't first-classed.
+        // for version-specific flags we haven't first-classed (e.g. flip
+        // back to --yolo if the canonical name ever goes away).
         extraArgs: z.array(z.string()).default([]),
     })
         .default({}),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@c4t4/heyamigo",
-  "version": "0.8.12",
+  "version": "0.8.14",
   "description": "WhatsApp AI bot powered by Claude with long-term memory, browser control, and role-based access",
   "type": "module",
   "main": "dist/index.js",