@c4t4/heyamigo 0.8.14 → 0.8.15

package/dist/ai/codex.js

@@ -12,11 +12,11 @@
 //
 // Configurable via config.codex:
 //   - model: optional `-m <model>` override. Default = Codex's default.
-//   - yolo (default true): emits --dangerously-bypass-approvals-and-sandbox
-//     (the documented canonical flag; --yolo is an alias in newer builds).
-//     Bundles no-approvals + full sandbox + skip-trust-check. Right
-//     default for a headless owner-bot; set false to honor runTask's
-//     mode-driven sandbox.
+//   - yolo (default true): emits --yolo, which bundles no-approvals +
+//     full sandbox + skip-trust-check. The narrower verbose flag
+//     (--dangerously-bypass-approvals-and-sandbox) does NOT skip the
+//     trust check on all versions and can hang the process — use --yolo.
+//     Set false to honor runTask's mode-driven sandbox.
 //   - skipGitRepoCheck (default true): adds --skip-git-repo-check when
 //     yolo is off. Codex refuses to run in untrusted cwds without it.
 //   - extraArgs: appended verbatim. Escape hatch for version drift.
@@ -75,11 +75,12 @@ function buildExecArgs(params) {
         args.push('-m', cfg.model);
     }
     if (cfg.yolo) {
-        // Canonical "no approvals + full sandbox + no trust check" switch.
-        // Some newer Codex builds expose --yolo as an alias for the same
-        // behavior; we use the documented name to stay portable. mode is
-        // ignored on this path.
-        args.push('--dangerously-bypass-approvals-and-sandbox');
+        // --yolo bundles all three bypasses: no approvals, full sandbox,
+        // and skip-trust-check. Empirically the right switch — the more
+        // narrowly-scoped --dangerously-bypass-approvals-and-sandbox does
+        // NOT subsume the trust-directory gate on some Codex versions and
+        // causes the process to hang waiting for stdin.
+        args.push('--yolo');
     }
     else {
         if (cfg.skipGitRepoCheck)

package/dist/config.js

@@ -41,11 +41,11 @@ const ConfigSchema = z.object({
         // Optional model override. If unset, Codex uses its default. Passed
         // as `-m <model>` to `codex exec`.
         model: z.string().optional(),
-        // Field name kept catchy, but the actual flag emitted is the
-        // documented one: --dangerously-bypass-approvals-and-sandbox. Some
-        // newer Codex builds also accept --yolo as an alias; we use the
-        // canonical name for portability. Right default for a headless
-        // owner-bot. Set to false to honor runTask's mode-driven sandbox.
+        // Emits --yolo, which bundles no-approvals + full sandbox + skip-
+        // trust-check. The narrower verbose flag does not subsume the trust
+        // gate on all versions and hangs the process, so --yolo is the safe
+        // default. Right setting for a headless owner-bot. Set to false to
+        // honor runTask's mode-driven sandbox.
         yolo: z.boolean().default(true),
         // When yolo=false, still bypass the trust-directory prompt. Codex
         // refuses to run in an "untrusted" cwd otherwise.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@c4t4/heyamigo",
-  "version": "0.8.14",
+  "version": "0.8.15",
   "description": "WhatsApp AI bot powered by Claude with long-term memory, browser control, and role-based access",
   "type": "module",
   "main": "dist/index.js",