Hacker News Reader

I think the toolcalling should be system prompts then the agent is the userspace

That's a whole other kettle of trout. Maybe still worth a go mind.

On thin that would be useful is an entirely new permission system for files to allow for users and agents acting for users.