@cosmicstack/mercury-agent 0.3.0 → 0.3.2

package/dist/index.js

@@ -14,8 +14,12 @@ import { join } from "path";
 import { homedir } from "os";
 import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
 import { config as loadDotenv } from "dotenv";
-loadDotenv();
 var MERCURY_HOME = join(homedir(), ".mercury");
+loadDotenv();
+var mercuryEnvPath = join(MERCURY_HOME, ".env");
+if (existsSync(mercuryEnvPath)) {
+  loadDotenv({ path: mercuryEnvPath });
+}
 function getMercuryHome() {
   return process.env.MERCURY_HOME || MERCURY_HOME;
 }
@@ -75,7 +79,9 @@ function getDefaultConfig() {
     },
     github: {
       username: getEnv("GITHUB_USERNAME", ""),
-      email: getEnv("GITHUB_EMAIL", "")
+      email: getEnv("GITHUB_EMAIL", ""),
+      defaultOwner: getEnv("GITHUB_DEFAULT_OWNER", ""),
+      defaultRepo: getEnv("GITHUB_DEFAULT_REPO", "")
     },
     memory: {
       dir: getEnv("MEMORY_DIR", join(home, "memory")),
@@ -1006,6 +1012,18 @@ You can override this:
     if (this.tokenBudget.getUsagePercentage() > 70) {
       prompt += "\nBe concise to conserve tokens.";
     }
+    const toolNames = this.capabilities.getToolNames();
+    const githubTools = ["create_pr", "review_pr", "list_issues", "create_issue", "github_api"];
+    const hasGitHub = githubTools.some((t) => toolNames.includes(t));
+    if (hasGitHub) {
+      let githubHint = "\n\nGitHub companion is active. You can create pull requests, review PRs, manage issues, and use the GitHub API.";
+      const { defaultOwner, defaultRepo } = this.config.github;
+      if (defaultOwner && defaultRepo) {
+        githubHint += ` Default repo: ${defaultOwner}/${defaultRepo}. Use this when the user doesn't specify a repo.`;
+      }
+      githubHint += ' When the user says "create a PR", use create_pr. When they ask about issues, use list_issues or create_issue. When they ask to review a PR, use review_pr. Always specify owner and repo parameters.';
+      prompt += githubHint;
+    }
     return prompt;
   }
   async processInternalPrompt(prompt, channelId, channelType) {
@@ -1709,16 +1727,16 @@ var CLIChannel = class extends BaseChannel {
     }
   }
   async prompt(question) {
-    return new Promise((resolve10) => {
-      this.rl?.question(question, (answer) => resolve10(answer.trim()));
+    return new Promise((resolve11) => {
+      this.rl?.question(question, (answer) => resolve11(answer.trim()));
     });
   }
   async askPermission(prompt) {
-    return new Promise((resolve10) => {
+    return new Promise((resolve11) => {
       console.log("");
       console.log(chalk2.yellow(`  \u26A0 ${prompt}`));
       this.rl?.question(chalk2.yellow("  > "), (answer) => {
-        resolve10(answer.trim());
+        resolve11(answer.trim());
       });
     });
   }
@@ -1981,15 +1999,15 @@ var TelegramChannel = class extends BaseChannel {
         reply_markup: keyboard
       });
     }
-    return new Promise((resolve10) => {
-      this.pendingApprovals.set(`${id}:yes`, () => resolve10("yes"));
-      this.pendingApprovals.set(`${id}:always`, () => resolve10("always"));
-      this.pendingApprovals.set(`${id}:no`, () => resolve10("no"));
+    return new Promise((resolve11) => {
+      this.pendingApprovals.set(`${id}:yes`, () => resolve11("yes"));
+      this.pendingApprovals.set(`${id}:always`, () => resolve11("always"));
+      this.pendingApprovals.set(`${id}:no`, () => resolve11("no"));
       setTimeout(() => {
         this.pendingApprovals.delete(`${id}:yes`);
         this.pendingApprovals.delete(`${id}:always`);
         this.pendingApprovals.delete(`${id}:no`);
-        resolve10("no");
+        resolve11("no");
       }, 12e4);
     });
   }
@@ -2213,7 +2231,7 @@ var TokenBudget = class {
 
 // src/capabilities/permissions.ts
 import { existsSync as existsSync6, readFileSync as readFileSync6, writeFileSync as writeFileSync6, mkdirSync as mkdirSync6 } from "fs";
-import { join as join6, resolve, sep } from "path";
+import { join as join6, resolve as resolve2, sep } from "path";
 import { homedir as homedir2 } from "os";
 import { parse as parseYaml3, stringify as stringifyYaml3 } from "yaml";
 var DEFAULT_MANIFEST = {
@@ -2396,7 +2414,7 @@ var PermissionManager = class {
     if (!fs3.enabled) {
       return { allowed: false, reason: "Filesystem capability is disabled" };
     }
-    const resolved = resolve(path3);
+    const resolved = resolve2(path3);
     const scope = this.findScope(resolved);
     const tempScope = this.findTempScope(resolved);
     if (scope) {
@@ -2486,7 +2504,7 @@ var PermissionManager = class {
     return this.manifest.capabilities.git.enabled && this.manifest.capabilities.git.approveWrite;
   }
   addScope(path3, read, write) {
-    const resolved = resolve(path3);
+    const resolved = resolve2(path3);
     const existing = this.findScope(resolved);
     if (existing) {
       existing.read = existing.read || read;
@@ -2504,7 +2522,7 @@ var PermissionManager = class {
   findScope(resolvedPath) {
     const scopes = this.manifest.capabilities.filesystem.scopes;
     for (const scope of scopes) {
-      const scopeResolved = resolve(scope.path.replace(/^~/, homedir2()));
+      const scopeResolved = resolve2(scope.path.replace(/^~/, homedir2()));
       if (resolvedPath === scopeResolved || resolvedPath.startsWith(scopeResolved + sep)) {
         return scope;
       }
@@ -2531,13 +2549,13 @@ Allow access?`;
     return { allowed: false, reason: `Permission denied for ${mode} access to ${path3}` };
   }
   addTempScope(path3, read, write) {
-    const resolved = resolve(path3);
+    const resolved = resolve2(path3);
     this.tempScopes.push({ path: resolved, read, write });
     logger.info({ path: resolved, read, write }, "Temp permission scope added (session only)");
   }
   findTempScope(resolvedPath) {
     for (const scope of this.tempScopes) {
-      const scopeResolved = resolve(scope.path.replace(/^~/, homedir2()));
+      const scopeResolved = resolve2(scope.path.replace(/^~/, homedir2()));
       if (resolvedPath === scopeResolved || resolvedPath.startsWith(scopeResolved + sep)) {
         return scope;
       }
@@ -2563,7 +2581,7 @@ Allow access?`;
     for (const p of pathPatterns) {
       const match = command.match(p);
       if (match) {
-        const candidate = resolve(match[1].replace(/^~/, homedir2()));
+        const candidate = resolve2(match[1].replace(/^~/, homedir2()));
         if (!candidate.startsWith(this.cwd)) {
           return candidate;
         }
@@ -2599,7 +2617,7 @@ Allow access?`;
 import { tool } from "ai";
 import { z } from "zod";
 import { existsSync as existsSync7, readFileSync as readFileSync7 } from "fs";
-import { resolve as resolve2 } from "path";
+import { resolve as resolve3 } from "path";
 function createReadFileTool(permissions) {
   return tool({
     description: "Read the contents of a file. The path must be within an allowed scope.",
@@ -2607,10 +2625,10 @@ function createReadFileTool(permissions) {
       path: z.string().describe("Absolute or relative path to the file")
     }),
     execute: async ({ path: path3 }) => {
-      const resolved = resolve2(path3);
+      const resolved = resolve3(path3);
       const check = await permissions.checkFsAccess(resolved, "read");
       if (!check.allowed) {
-        const parentDir = resolve2(resolved, "..");
+        const parentDir = resolve3(resolved, "..");
         return `Error: Permission denied for read access to ${resolved}. Use the approve_scope tool with path="${parentDir}" and mode="read" to request access from the user.`;
       }
       if (!existsSync7(resolved)) {
@@ -2636,7 +2654,7 @@ function createReadFileTool(permissions) {
 import { tool as tool2 } from "ai";
 import { z as z2 } from "zod";
 import { existsSync as existsSync8, writeFileSync as writeFileSync7 } from "fs";
-import { resolve as resolve3 } from "path";
+import { resolve as resolve4 } from "path";
 function createWriteFileTool(permissions) {
   return tool2({
     description: "Write content to an existing file. The path must be within a writable scope.",
@@ -2645,10 +2663,10 @@ function createWriteFileTool(permissions) {
       content: z2.string().describe("The content to write to the file")
     }),
     execute: async ({ path: path3, content }) => {
-      const resolved = resolve3(path3);
+      const resolved = resolve4(path3);
       const check = await permissions.checkFsAccess(resolved, "write");
       if (!check.allowed) {
-        const parentDir = resolve3(resolved, "..");
+        const parentDir = resolve4(resolved, "..");
         return `Error: Permission denied for write access to ${resolved}. Use the approve_scope tool with path="${parentDir}" and mode="write" to request access from the user.`;
       }
       if (!existsSync8(resolved)) {
@@ -2668,7 +2686,7 @@ function createWriteFileTool(permissions) {
 import { tool as tool3 } from "ai";
 import { z as z3 } from "zod";
 import { existsSync as existsSync9, writeFileSync as writeFileSync8, mkdirSync as mkdirSync7 } from "fs";
-import { resolve as resolve4, dirname as dirname2 } from "path";
+import { resolve as resolve5, dirname as dirname2 } from "path";
 function createCreateFileTool(permissions) {
   return tool3({
     description: "Create a new file with the given content. Also creates parent directories if needed. The path must be within a writable scope.",
@@ -2677,10 +2695,10 @@ function createCreateFileTool(permissions) {
       content: z3.string().describe("The content of the new file")
     }),
     execute: async ({ path: path3, content }) => {
-      const resolved = resolve4(path3);
+      const resolved = resolve5(path3);
       const check = await permissions.checkFsAccess(resolved, "write");
       if (!check.allowed) {
-        const parentDir = resolve4(resolved, "..");
+        const parentDir = resolve5(resolved, "..");
         return `Error: Permission denied for write access to ${resolved}. Use the approve_scope tool with path="${parentDir}" and mode="write" to request access from the user.`;
       }
       if (existsSync9(resolved)) {
@@ -2704,7 +2722,7 @@ function createCreateFileTool(permissions) {
 import { tool as tool4 } from "ai";
 import { z as z4 } from "zod";
 import { existsSync as existsSync10, readdirSync as readdirSync2, statSync } from "fs";
-import { resolve as resolve5 } from "path";
+import { resolve as resolve6 } from "path";
 function createListDirTool(permissions) {
   return tool4({
     description: "List the contents of a directory. Shows file names, types, and sizes.",
@@ -2712,7 +2730,7 @@ function createListDirTool(permissions) {
       path: z4.string().describe("Absolute or relative path to the directory")
     }),
     execute: async ({ path: path3 }) => {
-      const resolved = resolve5(path3);
+      const resolved = resolve6(path3);
       const check = await permissions.checkFsAccess(resolved, "read");
       if (!check.allowed) {
         return `Error: Permission denied for read access to ${resolved}. Use the approve_scope tool with path="${resolved}" and mode="read" to request access from the user.`;
@@ -2762,7 +2780,7 @@ function formatSize(bytes) {
 import { tool as tool5 } from "ai";
 import { z as z5 } from "zod";
 import { existsSync as existsSync11, unlinkSync as unlinkSync2 } from "fs";
-import { resolve as resolve6 } from "path";
+import { resolve as resolve7 } from "path";
 function createDeleteFileTool(permissions) {
   return tool5({
     description: "Delete a file. This action cannot be undone. The path must be within a writable scope. Always asks for confirmation.",
@@ -2770,10 +2788,10 @@ function createDeleteFileTool(permissions) {
       path: z5.string().describe("Absolute or relative path to the file to delete")
     }),
     execute: async ({ path: path3 }) => {
-      const resolved = resolve6(path3);
+      const resolved = resolve7(path3);
       const check = await permissions.checkFsAccess(resolved, "write");
       if (!check.allowed) {
-        const parentDir = resolve6(resolved, "..");
+        const parentDir = resolve7(resolved, "..");
         return `Error: Permission denied for write access to ${resolved}. Use the approve_scope tool with path="${parentDir}" and mode="write" to request access from the user.`;
       }
       if (!existsSync11(resolved)) {
@@ -2797,7 +2815,7 @@ function createDeleteFileTool(permissions) {
 import { tool as tool6 } from "ai";
 import { z as z6 } from "zod";
 import { readFileSync as readFileSync9, writeFileSync as writeFileSync9 } from "fs";
-import { resolve as resolve7 } from "path";
+import { resolve as resolve8 } from "path";
 function createEditFileTool(permissions) {
   return tool6({
     description: "Edit a file by replacing an exact string match with new content. Use this instead of write_file when you only need to change part of a file. The old_string must match exactly (including whitespace and indentation). Fails if old_string is not found or found multiple times.",
@@ -2807,10 +2825,10 @@ function createEditFileTool(permissions) {
       new_string: z6.string().describe("The text to replace it with")
     }),
     execute: async ({ path: path3, old_string, new_string }) => {
-      const resolved = resolve7(path3);
+      const resolved = resolve8(path3);
       const fsCheck = await permissions.checkFsAccess(resolved, "write");
       if (!fsCheck.allowed) {
-        const parentDir = resolve7(resolved, "..");
+        const parentDir = resolve8(resolved, "..");
         return `Error: Permission denied for write access to ${resolved}. Use the approve_scope tool with path="${parentDir}" and mode="write" to request access from the user.`;
       }
       try {
@@ -2841,7 +2859,7 @@ function createEditFileTool(permissions) {
 import { tool as tool7 } from "ai";
 import { z as z7 } from "zod";
 import { existsSync as existsSync12, statSync as statSync2 } from "fs";
-import { resolve as resolve8, basename } from "path";
+import { resolve as resolve9, basename } from "path";
 function createSendFileTool(permissions, sendFile) {
   return tool7({
     description: "Send a file to the user. On Telegram the file is uploaded as an attachment. On CLI the file path and size are displayed. The path must be within an allowed read scope.",
@@ -2849,10 +2867,10 @@ function createSendFileTool(permissions, sendFile) {
       path: z7.string().describe("Absolute or relative path to the file to send")
     }),
     execute: async ({ path: path3 }) => {
-      const resolved = resolve8(path3);
+      const resolved = resolve9(path3);
       const check = await permissions.checkFsAccess(resolved, "read");
       if (!check.allowed) {
-        const parentDir = resolve8(resolved, "..");
+        const parentDir = resolve9(resolved, "..");
         return `Error: Permission denied for read access to ${resolved}. Use the approve_scope tool with path="${parentDir}" and mode="read" to request access from the user.`;
       }
       if (!existsSync12(resolved)) {
@@ -2880,7 +2898,7 @@ function createSendFileTool(permissions, sendFile) {
 // src/capabilities/filesystem/approve-scope.ts
 import { tool as tool8 } from "ai";
 import { z as z8 } from "zod";
-import { resolve as resolve9 } from "path";
+import { resolve as resolve10 } from "path";
 function createApproveScopeTool(permissions) {
   return tool8({
     description: 'Request user approval to access a directory outside current scopes. Use this when a file tool returns a permission denied error. The user gets an approval prompt (Allow/Always/Deny buttons on Telegram, yes/always/no on CLI). "Allow" grants session-only access. "Always" persists to disk. After approval, retry the original file operation.',
@@ -2889,7 +2907,7 @@ function createApproveScopeTool(permissions) {
       mode: z8.enum(["read", "write"]).describe("The access mode needed")
     }),
     execute: async ({ path: path3, mode }) => {
-      const resolved = resolve9(path3);
+      const resolved = resolve10(path3);
       const result = await permissions.requestScopeExternal(resolved, mode);
       if (result.allowed) {
         return `Access approved for ${mode} access to ${resolved}. You can now retry the file operation.`;
@@ -3392,23 +3410,11 @@ async function githubRequest(path3, options = {}) {
     throw new Error(`GitHub API ${response.status}: ${body.slice(0, 500)}`);
   }
   if (response.status === 204) return null;
-  return response.json();
-}
-function parseRepo(remoteUrl) {
-  const sshMatch = remoteUrl.match(/git@github\.com:([^/]+)\/([^.\s]+)(?:\.git)?$/);
-  if (sshMatch) return { owner: sshMatch[1], repo: sshMatch[2] };
-  const httpsMatch = remoteUrl.match(/https:\/\/github\.com\/([^/]+)\/([^.\s]+)(?:\.git)?$/);
-  if (httpsMatch) return { owner: httpsMatch[1], repo: httpsMatch[2] };
-  return null;
-}
-async function getCurrentRepo() {
-  try {
-    const { execSync: execSync9 } = await import("child_process");
-    const remoteUrl = execSync9("git remote get-url origin", { encoding: "utf-8", timeout: 5e3 }).trim();
-    return parseRepo(remoteUrl);
-  } catch {
-    return null;
+  const contentType = response.headers.get("content-type") || "";
+  if (contentType.includes("application/json")) {
+    return response.json();
   }
+  return response.text();
 }
 
 // src/capabilities/github/create-pr.ts
@@ -3416,25 +3422,19 @@ function createCreatePrTool() {
   return tool24({
     description: "Create a pull request on GitHub. Requires GITHUB_TOKEN to be configured.",
     parameters: z24.object({
+      owner: z24.string().describe("Repository owner (username or org)"),
+      repo: z24.string().describe("Repository name"),
       title: z24.string().describe("PR title"),
       body: z24.string().describe("PR description (markdown supported)").default(""),
       head: z24.string().describe("The branch containing the changes"),
       base: z24.string().describe("The branch to merge into").default("main"),
       draft: z24.boolean().describe("Create as draft PR").default(false)
     }),
-    execute: async ({ title, body, head, base, draft }) => {
+    execute: async ({ owner, repo, title, body, head, base, draft }) => {
       try {
-        const repo = await getCurrentRepo();
-        if (!repo) return "Error: Could not detect GitHub repository. Make sure you are in a git repo with a GitHub remote.";
-        const result = await githubRequest(`/repos/${repo.owner}/${repo.repo}/pulls`, {
+        const result = await githubRequest(`/repos/${owner}/${repo}/pulls`, {
           method: "POST",
-          body: {
-            title,
-            body,
-            head,
-            base,
-            draft
-          }
+          body: { title, body, head, base, draft }
         });
         return `PR created: ${result.html_url}
 #${result.number}: ${result.title}
@@ -3453,18 +3453,15 @@ function createReviewPrTool() {
   return tool25({
     description: "Get details of a pull request including the diff. Reviews the PR and returns the title, body, changed files, and diff. Optionally post a review comment.",
     parameters: z25.object({
+      owner: z25.string().describe("Repository owner (username or org)"),
+      repo: z25.string().describe("Repository name"),
       number: z25.number().describe("PR number"),
       comment: z25.string().describe("Review comment to post on the PR (optional)").optional()
     }),
-    execute: async ({ number, comment }) => {
+    execute: async ({ owner, repo, number, comment }) => {
       try {
-        const repo = await getCurrentRepo();
-        if (!repo) return "Error: Could not detect GitHub repository.";
-        const pr = await githubRequest(`/repos/${repo.owner}/${repo.repo}/pulls/${number}`);
+        const pr = await githubRequest(`/repos/${owner}/${repo}/pulls/${number}`);
         if (!pr) return `Error: PR #${number} not found.`;
-        const diff = await githubRequest(`/repos/${repo.owner}/${repo.repo}/pulls/${number}`, {
-          headers: { "Accept": "application/vnd.github.v3.diff" }
-        });
         let summary = `PR #${pr.number}: ${pr.title}
 `;
         summary += `Author: ${pr.user?.login}
@@ -3482,28 +3479,30 @@ ${pr.body.slice(0, 2e3)}
 
 `;
         }
-        if (typeof diff === "string") {
-          const diffLines = diff.split("\n");
-          const maxDiffLines = 200;
-          summary += `Diff (first ${Math.min(diffLines.length, maxDiffLines)} of ${diffLines.length} lines):
+        try {
+          const diff = await githubRequest(`/repos/${owner}/${repo}/pulls/${number}`, {
+            headers: { "Accept": "application/vnd.github.v3.diff" }
+          });
+          if (typeof diff === "string") {
+            const diffLines = diff.split("\n");
+            const maxDiffLines = 200;
+            summary += `Diff (first ${Math.min(diffLines.length, maxDiffLines)} of ${diffLines.length} lines):
 `;
-          summary += diffLines.slice(0, maxDiffLines).join("\n");
-          if (diffLines.length > maxDiffLines) {
-            summary += `
+            summary += diffLines.slice(0, maxDiffLines).join("\n");
+            if (diffLines.length > maxDiffLines) {
+              summary += `
 
 ... (${diffLines.length - maxDiffLines} more lines)`;
+            }
           }
-        } else {
-          summary += `(Diff not available in text format)`;
+        } catch {
+          summary += `(Diff not available)`;
         }
         if (comment) {
           try {
-            await githubRequest(`/repos/${repo.owner}/${repo.repo}/pulls/${number}/reviews`, {
+            await githubRequest(`/repos/${owner}/${repo}/pulls/${number}/reviews`, {
               method: "POST",
-              body: {
-                body: comment,
-                event: "COMMENT"
-              }
+              body: { body: comment, event: "COMMENT" }
             });
             summary += `
 
@@ -3527,31 +3526,31 @@ import { tool as tool26 } from "ai";
 import { z as z26 } from "zod";
 function createListIssuesTool() {
   return tool26({
-    description: "List open GitHub issues for the current repository. Requires GITHUB_TOKEN.",
+    description: "List GitHub issues for a repository. Requires GITHUB_TOKEN.",
     parameters: z26.object({
+      owner: z26.string().describe("Repository owner (username or org)"),
+      repo: z26.string().describe("Repository name"),
       state: z26.enum(["open", "closed", "all"]).describe("Filter by issue state").default("open"),
       labels: z26.string().describe("Comma-separated label names to filter by (optional)").optional(),
       limit: z26.number().describe("Maximum number of issues to return").default(10)
     }),
-    execute: async ({ state, labels, limit }) => {
+    execute: async ({ owner, repo, state, labels, limit }) => {
       try {
-        const repo = await getCurrentRepo();
-        if (!repo) return "Error: Could not detect GitHub repository.";
         const params = new URLSearchParams();
         params.set("state", state);
         params.set("per_page", String(Math.min(limit, 100)));
         params.set("sort", "updated");
         params.set("direction", "desc");
         if (labels) params.set("labels", labels);
-        const issues = await githubRequest(`/repos/${repo.owner}/${repo.repo}/issues?${params}`);
+        const issues = await githubRequest(`/repos/${owner}/${repo}/issues?${params}`);
         if (!Array.isArray(issues) || issues.length === 0) {
-          return `No ${state} issues found.`;
+          return `No ${state} issues found in ${owner}/${repo}.`;
         }
         const lines = issues.map((issue) => {
           const labelStr = issue.labels?.map((l) => `[${l.name}]`).join(" ") || "";
           return `#${issue.number} ${issue.title} ${labelStr} (${issue.state}, by ${issue.user?.login})`;
         });
-        return `Issues in ${repo.owner}/${repo.repo} (${state}):
+        return `Issues in ${owner}/${repo} (${state}):
 ${lines.join("\n")}`;
       } catch (err) {
         return `Error listing issues: ${err.message}`;
@@ -3565,19 +3564,19 @@ import { tool as tool27 } from "ai";
 import { z as z27 } from "zod";
 function createCreateIssueTool() {
   return tool27({
-    description: "Create a new GitHub issue in the current repository. Requires GITHUB_TOKEN.",
+    description: "Create a new GitHub issue in a repository. Requires GITHUB_TOKEN.",
     parameters: z27.object({
+      owner: z27.string().describe("Repository owner (username or org)"),
+      repo: z27.string().describe("Repository name"),
       title: z27.string().describe("Issue title"),
       body: z27.string().describe("Issue description (markdown supported)").default(""),
       labels: z27.array(z27.string()).describe("Label names to apply").optional()
     }),
-    execute: async ({ title, body, labels }) => {
+    execute: async ({ owner, repo, title, body, labels }) => {
       try {
-        const repo = await getCurrentRepo();
-        if (!repo) return "Error: Could not detect GitHub repository.";
         const payload = { title, body };
         if (labels && labels.length > 0) payload.labels = labels;
-        const result = await githubRequest(`/repos/${repo.owner}/${repo.repo}/issues`, {
+        const result = await githubRequest(`/repos/${owner}/${repo}/issues`, {
           method: "POST",
           body: payload
         });
@@ -3593,27 +3592,15 @@ function createCreateIssueTool() {
 // src/capabilities/github/github-api.ts
 import { tool as tool28 } from "ai";
 import { z as z28 } from "zod";
-function createGithubApiTool(permissions) {
+function createGithubApiTool() {
   return tool28({
-    description: "Make a raw request to the GitHub API. Use this for any GitHub operation not covered by other tools. GET requests are auto-approved; write operations (POST, PUT, PATCH, DELETE) require approval.",
+    description: "Make a raw request to the GitHub API. Use this for any GitHub operation not covered by other tools. GET requests (read-only) are always allowed. Write operations (POST, PUT, PATCH, DELETE) will ask the user for approval via the permission system.",
     parameters: z28.object({
-      path: z28.string().describe("API path (e.g., /repos/owner/repo/releases)"),
+      path: z28.string().describe("Full API path (e.g., /repos/owner/repo/issues or /user)"),
       method: z28.enum(["GET", "POST", "PUT", "PATCH", "DELETE"]).describe("HTTP method").default("GET"),
       body: z28.string().describe("JSON body for write requests (as a JSON string)").optional()
     }),
     execute: async ({ path: path3, method, body }) => {
-      const isWrite = ["POST", "PUT", "PATCH", "DELETE"].includes(method);
-      if (isWrite) {
-        const check = await permissions.checkShellCommand(`github-api ${method} ${path3}`);
-        if (!check.allowed) {
-          if (check.needsApproval) {
-            return `This GitHub API write operation requires approval: ${method} ${path3}
-
-Tell the user what this does and ask for confirmation. If approved, try again.`;
-          }
-          return `Error: ${check.reason}`;
-        }
-      }
       try {
         let parsedBody;
         if (body) {
@@ -3803,7 +3790,7 @@ var CapabilityRegistry = class {
       this.tools.review_pr = createReviewPrTool();
       this.tools.list_issues = createListIssuesTool();
       this.tools.create_issue = createCreateIssueTool();
-      this.tools.github_api = createGithubApiTool(this.permissions);
+      this.tools.github_api = createGithubApiTool();
       logger.info("GitHub tools registered");
     }
     this.tools.fetch_url = createFetchUrlTool();
@@ -4618,7 +4605,7 @@ async function runWithWatchdog(agentFn) {
   await attempt();
 }
 function sleep(ms) {
-  return new Promise((resolve10) => setTimeout(resolve10, ms));
+  return new Promise((resolve11) => setTimeout(resolve11, ms));
 }
 
 // src/index.ts
@@ -4657,10 +4644,10 @@ function splashScreen() {
 }
 async function ask(prompt) {
   const rl = readline2.createInterface({ input: process.stdin, output: process.stdout });
-  return new Promise((resolve10) => {
+  return new Promise((resolve11) => {
     rl.question(prompt, (answer) => {
       rl.close();
-      resolve10(answer.trim());
+      resolve11(answer.trim());
     });
   });
 }
@@ -4793,6 +4780,14 @@ async function configure(existingConfig) {
   if (ghToken) {
     appendToEnv("GITHUB_TOKEN", ghToken);
   }
+  if (config.github.username || process.env.GITHUB_TOKEN) {
+    const ghOwnerCurrent = isReconfig && config.github.defaultOwner ? ` [${config.github.defaultOwner}]` : "";
+    const ghOwner = await ask(chalk6.white(`  Default GitHub owner/org${ghOwnerCurrent}: `));
+    if (ghOwner) config.github.defaultOwner = ghOwner;
+    const ghRepoCurrent = isReconfig && config.github.defaultRepo ? ` [${config.github.defaultRepo}]` : "";
+    const ghRepo = await ask(chalk6.white(`  Default repo name${ghRepoCurrent}: `));
+    if (ghRepo) config.github.defaultRepo = ghRepo;
+  }
   hr();
   console.log("");
   console.log(chalk6.bold.white("  Token Budget"));