heyio 1.2.2 → 1.2.4

package/dist/copilot/skills.js

@@ -1,7 +1,9 @@
 import { existsSync, readdirSync, readFileSync, rmSync } from "node:fs";
 import { join, basename } from "node:path";
-import { execSync } from "node:child_process";
+import { exec } from "node:child_process";
+import { promisify } from "node:util";
 import { PATHS } from "../paths.js";
+const execAsync = promisify(exec);
 export async function listSkills() {
     if (!existsSync(PATHS.skills))
         return [];
@@ -35,7 +37,7 @@ export async function addSkill(url) {
     if (existsSync(dest)) {
         throw new Error(`Skill "${slug}" is already installed.`);
     }
-    execSync(`git clone --depth 1 ${url} ${dest}`, { stdio: "pipe" });
+    await execAsync(`git clone --depth 1 ${url} ${dest}`);
     // Verify SKILL.md exists
     if (!existsSync(join(dest, "SKILL.md"))) {
         rmSync(dest, { recursive: true, force: true });

package/dist/copilot/system-message.js

@@ -31,6 +31,18 @@ You are IO, a personal AI assistant daemon. You run 24/7 on the user's machine,
 - If the user says "do this" for a complex task → use squad_meeting with execute_after=true
 - If the user says "just do it" or it's a simple task → use squad_delegate directly
 
+## HARD RULE: Squad Ownership Boundary
+If a project has a squad assigned to it, you (the orchestrator) must NEVER:
+- Research, analyze, or investigate the project's code, issues, or state yourself
+- Attempt any work — even preliminary analysis — before delegating
+- "Look into" or "check on" something before passing it to the squad
+
+When a request comes in about a squad-owned project, you IMMEDIATELY delegate to that squad's team lead with no pre-processing. The squad handles ALL work including research, analysis, planning, and execution.
+
+The ONLY thing you are allowed to do regarding a squad-owned project (without delegating) is:
+- Answer questions about what the squad has already done (using feed/task history)
+- Report squad status, task progress, or past deliverables
+
 ## Squad Coverage Requirements
 Every squad MUST have:
 1. A dedicated team lead (PM/Senior Engineer, coordination-only — **never writes code**)

package/dist/copilot/tools.js

@@ -69,10 +69,12 @@ export function createTools() {
                 const squad = createSquad(name, universe, repo_url);
                 let cloneMsg = "";
                 if (repo_url) {
-                    const { execSync } = await import("node:child_process");
+                    const { exec } = await import("node:child_process");
+                    const { promisify } = await import("node:util");
                     const { existsSync, mkdirSync } = await import("node:fs");
                     const { join } = await import("node:path");
                     const { PATHS } = await import("../paths.js");
+                    const execAsync = promisify(exec);
                     // Extract owner/repo from URL (supports https and git@ formats)
                     const match = repo_url.match(/[/:]([^/]+)\/([^/.]+?)(?:\.git)?$/);
                     if (match) {
@@ -83,8 +85,7 @@ export function createTools() {
                             if (!existsSync(parentDir))
                                 mkdirSync(parentDir, { recursive: true });
                             try {
-                                execSync(`git clone ${repo_url} ${sourceDir}`, {
-                                    encoding: "utf-8",
+                                await execAsync(`git clone ${repo_url} ${sourceDir}`, {
                                     timeout: 120_000,
                                 });
                                 cloneMsg = ` Repo cloned to ~/.io/source/${owner}/${repo}.`;
@@ -313,22 +314,23 @@ export function createTools() {
                 cwd: z.string().optional().describe("Working directory (defaults to home directory)"),
             }),
             handler: async ({ command, cwd }) => {
-                const { execSync } = await import("node:child_process");
+                const { exec } = await import("node:child_process");
+                const { promisify } = await import("node:util");
                 const { homedir } = await import("node:os");
+                const execAsync = promisify(exec);
                 try {
-                    const output = execSync(command, {
+                    const { stdout } = await execAsync(command, {
                         cwd: cwd ?? homedir(),
-                        encoding: "utf-8",
                         timeout: 60_000,
                         maxBuffer: 1024 * 1024,
                         env: { ...process.env, GH_PROMPT_DISABLED: "1" },
                     });
-                    return output.trim() || "(no output)";
+                    return stdout.trim() || "(no output)";
                 }
                 catch (err) {
                     const stderr = err.stderr?.toString().trim() ?? "";
                     const stdout = err.stdout?.toString().trim() ?? "";
-                    return `Error (exit ${err.status}): ${stderr || stdout || err.message}`;
+                    return `Error (exit ${err.code}): ${stderr || stdout || err.message}`;
                 }
             },
         }),

package/dist/store/instances.js

@@ -1,6 +1,8 @@
 import { randomUUID } from "node:crypto";
-import { execSync } from "node:child_process";
+import { exec } from "node:child_process";
+import { promisify } from "node:util";
 import { getDb } from "./db.js";
+const execAsync = promisify(exec);
 const MAX_INSTANCES_PER_SQUAD = 3;
 export async function createInstance(squadId, branch) {
     const db = getDb();
@@ -19,18 +21,13 @@ export async function createInstance(squadId, branch) {
     const id = randomUUID();
     const worktreePath = `/tmp/io-worktrees/${squadId}/${branch}`;
     // Create git worktree
+    const repoCwd = squad.repo_url.startsWith("/") ? squad.repo_url : process.cwd();
     try {
-        execSync(`git worktree add ${worktreePath} -b ${branch}`, {
-            cwd: squad.repo_url.startsWith("/") ? squad.repo_url : process.cwd(),
-            stdio: "pipe",
-        });
+        await execAsync(`git worktree add ${worktreePath} -b ${branch}`, { cwd: repoCwd });
     }
-    catch (err) {
+    catch {
         // Branch may already exist
-        execSync(`git worktree add ${worktreePath} ${branch}`, {
-            cwd: squad.repo_url.startsWith("/") ? squad.repo_url : process.cwd(),
-            stdio: "pipe",
-        });
+        await execAsync(`git worktree add ${worktreePath} ${branch}`, { cwd: repoCwd });
     }
     db.prepare(`INSERT INTO instances (id, squad_id, branch, worktree_path, status)
      VALUES (?, ?, ?, ?, 'active')`).run(id, squadId, branch, worktreePath);
@@ -45,9 +42,7 @@ export async function destroyInstance(instanceId) {
         throw new Error(`Instance ${instanceId} not found.`);
     // Remove worktree
     try {
-        execSync(`git worktree remove ${instance.worktree_path} --force`, {
-            stdio: "pipe",
-        });
+        await execAsync(`git worktree remove ${instance.worktree_path} --force`);
     }
     catch {
         // Already removed or doesn't exist

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "heyio",
-  "version": "1.2.2",
+  "version": "1.2.4",
   "description": "IO — a personal AI assistant daemon built on the GitHub Copilot SDK",
   "bin": {
     "io": "dist/index.js"