heyio 0.1.10 → 0.1.12

package/dist/copilot/agents.js

@@ -133,6 +133,7 @@ Log important decisions with squad_log_decision so they persist.`,
 function buildAgentTools(squadSlug) {
     const shell = defineTool("shell", {
         description: "Run a shell command. Use for git, build tools, file operations, etc.",
+        skipPermission: true,
         parameters: z.object({
             command: z.string().describe("The command to run"),
             timeout_secs: z
@@ -172,6 +173,7 @@ function buildAgentTools(squadSlug) {
     });
     const fileOps = defineTool("file_ops", {
         description: "Read, write, or list files on the local filesystem.",
+        skipPermission: true,
         parameters: z.object({
             operation: z
                 .enum(["read", "write", "list"])
@@ -230,6 +232,7 @@ function buildAgentTools(squadSlug) {
     });
     const squadLogDecision = defineTool("squad_log_decision", {
         description: "Log an important decision for this squad so it persists across sessions.",
+        skipPermission: true,
         parameters: z.object({
             decision: z.string().describe("The decision made"),
             context: z.string().optional().describe("Context or reasoning"),

package/dist/copilot/system-message.js

@@ -87,8 +87,9 @@ Squads are persistent project teams. When a user works on a codebase:
 3. Be conversational and helpful. You're IO.
 4. When a task fails, report the error clearly and suggest next steps.
 5. Expand shorthand paths: "~/dev/myapp" → the user's home directory + path.
-6. **Always try before refusing.** You run as a daemon with full system privileges. Never assume a command will fail due to permissions — call the tool and report the actual result. Do not say "I can't" or "I don't have permission" without first attempting the operation.
-7. **Use your tools.** When a task requires file or shell operations, call the appropriate tool immediately. Do not describe what command you *would* run — just run it.
+6. **Always try before refusing.** You run as a privileged daemon with full root access. Never assume a command will fail due to permissions — call the tool and report the actual result. Do not say "I can't" or "I don't have permission" without first attempting the operation. If a tool call returns an error, report the ACTUAL error message.
+7. **Use your tools proactively.** When a task requires shell or file operations, call the appropriate tool immediately. Do not describe what command you *would* run — just run it. For git operations, use the \`shell\` tool. For file operations, use \`file_ops\` or \`shell\`.
+8. **Never fabricate errors.** Only report errors that a tool actually returned. If you haven't called a tool, you don't know whether it will succeed or fail.
 ${selfEditBlock}${memoryBlock}`;
 }
 //# sourceMappingURL=system-message.js.map

package/dist/copilot/tools.js

@@ -6,6 +6,7 @@ import { join, dirname, resolve } from "path";
 export function createTools(deps) {
     const wikiRead = defineTool("wiki_read", {
         description: "Read a page from IO's knowledge base wiki. Path is relative to the wiki root (e.g., 'pages/preferences/editor.md').",
+        skipPermission: true,
         parameters: z.object({
             path: z.string().describe("Relative path to the wiki page"),
         }),
@@ -18,6 +19,7 @@ export function createTools(deps) {
     });
     const wikiWrite = defineTool("wiki_write", {
         description: "Write or update a page in IO's knowledge base. Use this to remember preferences, project details, and important facts. Path must be under pages/ and end in .md.",
+        skipPermission: true,
         parameters: z.object({
             path: z.string().describe("Relative path under pages/ (e.g., 'pages/preferences/clone-location.md')"),
             content: z.string().describe("Markdown content to write"),
@@ -35,6 +37,7 @@ export function createTools(deps) {
     });
     const wikiSearch = defineTool("wiki_search", {
         description: "Search IO's knowledge base for matching pages.",
+        skipPermission: true,
         parameters: z.object({
             query: z.string().describe("Search query"),
         }),
@@ -49,6 +52,7 @@ export function createTools(deps) {
     });
     const squadCreate = defineTool("squad_create", {
         description: "Create a persistent project squad. Squads remember decisions and context for a specific codebase.",
+        skipPermission: true,
         parameters: z.object({
             slug: z.string().describe("Unique identifier (e.g., 'michaeljolley-io')"),
             name: z.string().describe("Display name (e.g., 'IO Assistant')"),
@@ -66,6 +70,7 @@ export function createTools(deps) {
     });
     const squadRecall = defineTool("squad_recall", {
         description: "Recall a squad's context and past decisions. Use this before working on a project to load relevant history.",
+        skipPermission: true,
         parameters: z.object({
             slug: z.string().describe("Squad slug"),
         }),
@@ -79,6 +84,7 @@ export function createTools(deps) {
     });
     const squadStatus = defineTool("squad_status", {
         description: "List all squads and their status.",
+        skipPermission: true,
         parameters: z.object({}),
         handler: async () => {
             const squads = deps.listSquads();
@@ -91,6 +97,7 @@ export function createTools(deps) {
     });
     const squadLogDecision = defineTool("squad_log_decision", {
         description: "Log a decision for a squad. Use this to record important choices made during project work.",
+        skipPermission: true,
         parameters: z.object({
             slug: z.string().describe("Squad slug"),
             decision: z.string().describe("The decision made"),
@@ -107,13 +114,15 @@ export function createTools(deps) {
         },
     });
     const shell = defineTool("shell", {
-        description: "Run a shell command on the user's machine. Use for git, build tools, file operations, etc.",
+        description: "Run a shell command on the host machine. You have FULL ROOT ACCESS. Use for git, apt, npm, build tools, system administration, or anything else. There are NO permission restrictions — all commands are allowed and pre-approved.",
+        skipPermission: true,
         parameters: z.object({
             command: z.string().describe("The command to run"),
             timeout_secs: z.number().optional().describe("Timeout in seconds (default: 60)"),
             working_dir: z.string().optional().describe("Working directory for the command"),
         }),
         handler: async ({ command, timeout_secs, working_dir }) => {
+            console.error(`[io] shell tool called: ${command}${working_dir ? ` (cwd: ${working_dir})` : ""}`);
             try {
                 const result = execSync(command, {
                     encoding: "utf-8",
@@ -140,7 +149,8 @@ export function createTools(deps) {
         },
     });
     const fileOps = defineTool("file_ops", {
-        description: "Read, write, or list files on the local filesystem.",
+        description: "Read, write, list, or mkdir on the local filesystem. Full access to all paths.",
+        skipPermission: true,
         parameters: z.object({
             operation: z.enum(["read", "write", "list", "mkdir"]).describe("Operation to perform"),
             path: z.string().describe("File or directory path"),
@@ -148,6 +158,7 @@ export function createTools(deps) {
             recursive: z.boolean().optional().describe("Recurse into subdirectories (for list)"),
         }),
         handler: async ({ operation, path: filePath, content, recursive }) => {
+            console.error(`[io] file_ops tool called: ${operation} ${filePath}`);
             try {
                 const resolved = resolve(filePath);
                 if (operation === "read") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "heyio",
-  "version": "0.1.10",
+  "version": "0.1.12",
   "description": "IO — a personal AI assistant built on the GitHub Copilot SDK",
   "bin": {
     "io": "dist/index.js"