blun-king-cli 4.1.1 → 5.0.0

package/tests/user-profile.test.js

@@ -0,0 +1,66 @@
+const test = require("node:test");
+const assert = require("node:assert/strict");
+const fs = require("node:fs");
+const os = require("node:os");
+const path = require("node:path");
+
+test("user profile learns and resolves install aliases", () => {
+  const base = fs.mkdtempSync(path.join(os.tmpdir(), "blun-profile-"));
+  process.env.BLUN_HOME = base;
+  delete require.cache[require.resolve("../user-profile")];
+  const profile = require("../user-profile");
+
+  profile.learnInstallAlias("user-1", "telegarm bot", "node-telegram-bot-api");
+  const resolved = profile.resolveInstallAlias("user-1", "mach mal telegarm bot");
+
+  assert.equal(resolved, "node-telegram-bot-api");
+});
+
+test("user profile learns aliases and reusable snippets from /learn content", () => {
+  const base = fs.mkdtempSync(path.join(os.tmpdir(), "blun-profile-"));
+  process.env.BLUN_HOME = base;
+  delete require.cache[require.resolve("../user-profile")];
+  const profile = require("../user-profile");
+
+  const learned = profile.learnFromText(
+    "user-2",
+    "telegramm bot = node-telegram-bot-api\n\nNode ist mein Standard fuer Bots und Automationen.",
+    { title: "preferences", category: "system" }
+  );
+
+  const installResolved = profile.resolveInstallAlias("user-2", "installier telegramm bot");
+  const promptContext = profile.buildPromptContext("user-2", "ich will einen bot installieren");
+
+  assert.equal(learned.aliasesLearned >= 1, true);
+  assert.equal(learned.snippetsLearned >= 1, true);
+  assert.equal(installResolved, "node-telegram-bot-api");
+  assert.match(promptContext, /Node ist mein Standard/);
+});
+
+test("user profile classifies learned text into preferences workflows and guardrails", () => {
+  const base = fs.mkdtempSync(path.join(os.tmpdir(), "blun-profile-"));
+  process.env.BLUN_HOME = base;
+  delete require.cache[require.resolve("../user-profile")];
+  const profile = require("../user-profile");
+
+  const learned = profile.learnFromText(
+    "user-3",
+    [
+      "Ich nutze immer Node fuer Bots.",
+      "Wenn ich deploy sage, meine ich SSH Deploy auf meinen Server.",
+      "Mach niemals Landingpages wenn ich installieren sage.",
+      "Ich nutze Gemma 4 27b als Modell."
+    ].join("\n\n"),
+    { title: "rules", category: "system" }
+  );
+
+  const context = profile.buildPromptContext("user-3", "deploy und installieren");
+
+  assert.equal(learned.types.preferences >= 1, true);
+  assert.equal(learned.types.workflows >= 1, true);
+  assert.equal(learned.types.guardrails >= 1, true);
+  assert.equal(learned.types.facts >= 1, true);
+  assert.match(context, /Praeferenz/);
+  assert.match(context, /Workflow/);
+  assert.match(context, /Verbot|Guardrail/);
+});

package/tests/website-builder.test.js

@@ -0,0 +1,66 @@
+const test = require("node:test");
+const assert = require("node:assert/strict");
+
+const { detectIndustry, buildWebsiteProject, validateWebsiteOutput } = require("../website-builder");
+
+test("detects fashion-like references and does not drift into florist output", () => {
+  const industry = detectIndustry("bau eine landingpage fuer nicrazy", [
+    {
+      url: "https://nicrazy.com",
+      title: "Nicrazy Streetwear",
+      h1s: ["New Drop"],
+      text: "streetwear collection hoodie tee drop"
+    }
+  ]);
+
+  assert.equal(industry, "fashion");
+});
+
+test("keeps nicrazy as fashion even when the reference page is generic", () => {
+  const industry = detectIndustry("bau eine landingpage fuer nicrazy mit referenz https://example.com", [
+    {
+      url: "https://example.com",
+      title: "Example Domain",
+      h1s: ["Example Domain"],
+      text: "This domain is for use in documentation examples."
+    }
+  ]);
+
+  assert.equal(industry, "fashion");
+});
+
+test("build output for fashion references contains brand-specific commerce language", () => {
+  const built = buildWebsiteProject("bau eine landingpage fuer nicrazy", [
+    {
+      url: "https://nicrazy.com",
+      title: "Nicrazy Streetwear",
+      h1s: ["New Drop"],
+      text: "streetwear collection hoodie tee drop"
+    }
+  ]);
+
+  assert.equal(built.industry, "fashion");
+  assert.equal(/drop|collection|shop/i.test(built.files["index.html"]), true);
+  assert.equal(/flower|bouquet|florist/i.test(built.files["index.html"]), false);
+});
+
+test("validity gate blocks malformed html css and generic drift", () => {
+  const result = validateWebsiteOutput(
+    {
+      "index.html": '<html><body><p="broken"></p><section>Featured Pieces</section></></body>',
+      "style.css": "body{font-family:sans-hard;} .x{z-top:1000;color:rgba(255,2HT,255,0.7);}"
+    },
+    {
+      industry: "fashion",
+      config: {
+        requiredTerms: ["drop", "collection"],
+        bannedTerms: ["flower", "bouquet", "florist"]
+      }
+    }
+  );
+
+  assert.equal(result.ok, false);
+  assert.equal(result.issues.includes("invalid_html_attributes"), true);
+  assert.equal(result.issues.includes("invalid_css_tokens"), true);
+  assert.equal(result.issues.includes("generic_template_detected"), true);
+});

package/tmp-build-smoke/nicrazy-landing/index.html

@@ -0,0 +1,53 @@
+<!doctype html>
+<html lang="de">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>nicrazy - Reference Build</title>
+  <link rel="stylesheet" href="./style.css" />
+</head>
+<body>
+  <header class="site-header">
+    <div class="logo">nicrazy</div>
+    <nav>
+      <a href="#showcase">Drop</a>
+      <a href="#about">Collection</a>
+      <a href="#contact">Story</a>
+    </nav>
+  </header>
+
+  <main>
+    <section class="hero">
+      <div class="hero-copy">
+        <p class="eyebrow">Reference Build</p>
+        <h1>nicrazy baut Spannung statt Deko.</h1>
+        <p>Eine fokussierte Fashion-Landingpage mit klarer Markenhaltung, starkem Hero und sauberer Shop-Logik.</p>
+        <p class="reference-note">Referenz gelesen: Example Domain. Business-Type-Lock: fashion.</p>
+        <a class="btn" href="#showcase">Zum Drop</a>
+      </div>
+    </section>
+
+    <section class="benefits" id="about">
+      <article><h2>Drop-Fokus</h2><p>Produkt, Kampagne und Kaufimpuls greifen direkt ineinander.</p></article><article><h2>Markenwelt</h2><p>Typografie, Bildsprache und Copy bleiben nah an einer modernen Label-Ästhetik.</p></article><article><h2>Conversion</h2><p>Hero, Collection-Teaser und CTA führen ohne Streuverlust in den Shop.</p></article>
+    </section>
+
+    <section class="products" id="showcase">
+      <h2>Current Collection</h2>
+      <div class="grid">
+        <div class="card"><div class="thumb"></div><h3>Hero Product</h3><p>nicrazy bleibt in einer fashion-nahen Markenlogik statt in generischen Platzhaltern.</p></div><div class="card"><div class="thumb"></div><h3>Signature Layer</h3><p>nicrazy bleibt in einer fashion-nahen Markenlogik statt in generischen Platzhaltern.</p></div><div class="card"><div class="thumb"></div><h3>New Arrival</h3><p>nicrazy bleibt in einer fashion-nahen Markenlogik statt in generischen Platzhaltern.</p></div>
+      </div>
+    </section>
+
+    <section class="social-proof">
+      <h2>Warum das zur Referenz passt</h2>
+      <p>Die Seite bleibt in der Welt eines Fashion- oder Brand-Auftritts und driftet nicht in branchenfremde Templates ab.</p>
+    </section>
+
+    <section class="cta" id="contact">
+      <h2>Zum Drop</h2>
+      <p>Klare CTA-Logik, saubere Struktur und keine Branchen-Drifts.</p>
+      <a class="btn" href="#showcase">Zum Drop</a>
+    </section>
+  </main>
+</body>
+</html>

package/tmp-build-smoke/nicrazy-landing/style.css

@@ -0,0 +1,110 @@
+:root{
+  --bg:#09090b;
+  --surface:#121826;
+  --text:#f5f5f5;
+  --muted:#a1a1aa;
+  --line:rgba(255,255,255,0.08);
+  --accent:#ff4d6d;
+}
+*{box-sizing:border-box}
+html,body{margin:0;padding:0}
+body{
+  font-family:Inter,system-ui,sans-serif;
+  background:radial-gradient(circle at top right, rgba(255,77,109,0.18), transparent 28%), var(--bg);
+  color:var(--text);
+}
+.site-header{
+  position:sticky;
+  top:0;
+  z-index:20;
+  display:flex;
+  justify-content:space-between;
+  align-items:center;
+  padding:18px 32px;
+  backdrop-filter:blur(12px);
+  background:rgba(9,9,11,0.88);
+  border-bottom:1px solid var(--line);
+}
+.site-header nav a{
+  color:var(--muted);
+  text-decoration:none;
+  margin-left:18px;
+}
+.logo{
+  font-weight:800;
+  letter-spacing:0.08em;
+  text-transform:uppercase;
+}
+.hero{
+  min-height:72vh;
+  display:grid;
+  place-items:center;
+  padding:80px 24px 56px;
+}
+.hero-copy{
+  max-width:820px;
+  text-align:center;
+}
+.eyebrow{
+  text-transform:uppercase;
+  letter-spacing:0.2em;
+  color:var(--muted);
+  font-size:12px;
+}
+h1{
+  font-size:clamp(42px,8vw,84px);
+  line-height:0.96;
+  margin:10px 0 18px;
+}
+.reference-note{
+  color:var(--muted);
+  font-size:14px;
+}
+.btn{
+  display:inline-block;
+  margin-top:22px;
+  padding:14px 22px;
+  border-radius:999px;
+  background:var(--accent);
+  color:#fff;
+  text-decoration:none;
+  font-weight:700;
+}
+.benefits,.products,.social-proof,.cta{
+  max-width:1200px;
+  margin:0 auto;
+  padding:72px 24px;
+}
+.benefits,.grid{
+  display:grid;
+  grid-template-columns:repeat(3,minmax(0,1fr));
+  gap:18px;
+}
+.benefits article,.card,.social-proof{
+  background:var(--surface);
+  border:1px solid var(--line);
+  border-radius:20px;
+  padding:24px;
+}
+.thumb{
+  height:240px;
+  border-radius:16px;
+  background:linear-gradient(135deg,#1f2937,#0f172a);
+}
+.cta{
+  text-align:center;
+}
+.hero p,.benefits p,.card p,.social-proof p,.cta p{
+  color:var(--muted);
+}
+@media (max-width:900px){
+  .benefits,.grid{
+    grid-template-columns:1fr;
+  }
+  .site-header{
+    padding:16px 18px;
+  }
+  h1{
+    font-size:44px;
+  }
+}

package/tmp-smoke/nicrazy-landing/index.html

@@ -0,0 +1,66 @@
+<!doctype html>
+<html lang="de">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>nicrazy - Neue Landingpage</title>
+  <link rel="stylesheet" href="./style.css" />
+</head>
+<body>
+  <header class="site-header">
+    <div class="logo">nicrazy</div>
+    <nav>
+      <a href="#shop">Shop</a>
+      <a href="#about">About</a>
+      <a href="#contact">Kontakt</a>
+    </nav>
+  </header>
+
+  <main>
+    <section class="hero">
+      <div class="hero-copy">
+        <p class="eyebrow">New Energy</p>
+        <h1>Mehr Haltung. Weniger Chaos.</h1>
+        <p>Eine neue Landingpage, klarer, hochwertiger und deutlich starker auf Conversion gebaut.</p>
+        <p class="reference-note">Inspiriert von https://example.com mit Fokus auf Example Domain.</p>
+        <a class="btn" href="#shop">Jetzt entdecken</a>
+      </div>
+    </section>
+
+    <section class="benefits" id="about">
+      <article>
+        <h2>Starkerer Auftritt</h2>
+        <p>Mehr Fokus, bessere Hierarchie und klarere Botschaft statt visuellem Chaos.</p>
+      </article>
+      <article>
+        <h2>Bessere Conversion</h2>
+        <p>CTA, Vertrauen und Struktur greifen sauber ineinander und fuhren schneller zum Klick.</p>
+      </article>
+      <article>
+        <h2>Mobile First</h2>
+        <p>Die Seite wirkt auf dem Handy genauso stark wie auf Desktop und bleibt sofort verstandlich.</p>
+      </article>
+    </section>
+
+    <section class="products" id="shop">
+      <h2>Featured Pieces</h2>
+      <div class="grid">
+        <div class="card"><div class="thumb"></div><h3>Signature Piece</h3><p>Klare Produktdarstellung mit mehr Wirkung.</p></div>
+        <div class="card"><div class="thumb"></div><h3>New Drop</h3><p>Mehr Fokus auf Produkt und Stil, weniger Ablenkung.</p></div>
+        <div class="card"><div class="thumb"></div><h3>Daily Layer</h3><p>Starkeres Vertrauen, bessere Lesbarkeit, sauberer Flow.</p></div>
+      </div>
+    </section>
+
+    <section class="social-proof">
+      <h2>Warum das besser funktioniert</h2>
+      <p>Die neue Seite bleibt visuell stark, gibt aber klare Fuhrung, eine saubere Botschaft und sichtbare CTAs.</p>
+    </section>
+
+    <section class="cta" id="contact">
+      <h2>Bereit fur den nachsten Drop?</h2>
+      <p>Klare Navigation, klare Botschaft, sauberer Abschluss.</p>
+      <a class="btn" href="#shop">Zum Shop</a>
+    </section>
+  </main>
+</body>
+</html>

package/tmp-smoke/nicrazy-landing/style.css

@@ -0,0 +1,104 @@
+:root{
+  --bg:#09090b;
+  --card:#111827;
+  --text:#f5f5f5;
+  --muted:#a1a1aa;
+  --accent:#ff4d6d;
+}
+*{box-sizing:border-box}
+html,body{margin:0;padding:0}
+body{
+  font-family:Inter,system-ui,sans-serif;
+  background:var(--bg);
+  color:var(--text);
+}
+.site-header{
+  position:sticky;top:0;z-index:20;
+  display:flex;justify-content:space-between;align-items:center;
+  padding:18px 32px;
+  background:rgba(9,9,11,.88);
+  backdrop-filter:blur(10px);
+  border-bottom:1px solid rgba(255,255,255,.06);
+}
+.site-header nav a{
+  color:var(--muted);
+  text-decoration:none;
+  margin-left:18px;
+}
+.logo{
+  font-weight:800;
+  letter-spacing:.08em;
+}
+.hero{
+  min-height:72vh;
+  display:grid;
+  place-items:center;
+  padding:64px 24px;
+  background:radial-gradient(circle at top right, rgba(255,77,109,.35), transparent 35%);
+}
+.hero-copy{
+  max-width:760px;
+  text-align:center;
+}
+.reference-note{
+  margin:18px 0 0;
+  color:var(--muted);
+  font-size:14px;
+}
+.eyebrow{
+  text-transform:uppercase;
+  letter-spacing:.18em;
+  color:var(--muted);
+  font-size:12px;
+}
+h1{
+  font-size:clamp(42px,8vw,86px);
+  line-height:.96;
+  margin:10px 0 18px;
+}
+.btn{
+  display:inline-block;
+  padding:14px 22px;
+  border-radius:999px;
+  background:var(--accent);
+  color:white;
+  text-decoration:none;
+  font-weight:700;
+}
+.benefits,.products,.cta,.social-proof{
+  padding:72px 24px;
+  max-width:1200px;
+  margin:0 auto;
+}
+.benefits{
+  display:grid;
+  grid-template-columns:repeat(3,1fr);
+  gap:18px;
+}
+.benefits article,.card,.social-proof{
+  background:var(--card);
+  border:1px solid #202938;
+  border-radius:20px;
+  padding:24px;
+}
+.grid{
+  display:grid;
+  grid-template-columns:repeat(3,1fr);
+  gap:18px;
+}
+.thumb{
+  height:280px;
+  border-radius:16px;
+  background:linear-gradient(135deg,#1f2937,#0f172a);
+}
+.cta{
+  text-align:center;
+}
+.cta p,.hero p,.card p,.benefits p,.social-proof p{
+  color:var(--muted);
+}
+@media (max-width:900px){
+  .benefits,.grid{grid-template-columns:1fr}
+  .site-header{padding:16px 18px}
+  h1{font-size:44px}
+}

package/tools.js

@@ -0,0 +1,177 @@
+const fs = require("fs");
+const path = require("path");
+const { execSync } = require("child_process");
+const fileHelper = require("./file-helper");
+const browser = require("./browser-controller");
+
+function safePath(workdir, rel) {
+  return fileHelper.ensureInside(workdir, rel);
+}
+
+function listFilesRecursive(dir, maxDepth = 3, prefix = "", level = 0) {
+  if (level > maxDepth) return [];
+  const out = [];
+
+  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+    if (entry.name === ".git" || entry.name === "node_modules") continue;
+    const rel = path.join(prefix, entry.name);
+    out.push(rel + (entry.isDirectory() ? "/" : ""));
+    if (entry.isDirectory()) {
+      out.push(...listFilesRecursive(path.join(dir, entry.name), maxDepth, rel, level + 1));
+    }
+  }
+
+  return out;
+}
+
+function isBlockedShellCommand(command) {
+  const cmd = String(command || "").trim().toLowerCase();
+  if (!cmd) return false;
+
+  const blockedPatterns = [
+    /(^|\s)rm\s+-rf(\s|$)/i,
+    /(^|\s)(shutdown|reboot|halt|poweroff)(\s|$)/i,
+    /(^|\s)(mkfs|format)(\s|$)/i,
+    /(^|\s)dd(\s|$)/i,
+    /(^|\s)(diskpart|bcdedit)(\s|$)/i,
+    /(^|\s)(passwd|useradd|userdel|net\s+user|deluser)(\s|$)/i,
+    /(^|\s)(iptables|ufw|netsh\s+advfirewall)(\s|$)/i,
+    /(^|\s)(scp|sftp|ssh)(\s|$)/i,
+    /curl\s+.+\|\s*(sh|bash|zsh|powershell|pwsh)(\s|$)/i,
+    /wget\s+.+\|\s*(sh|bash|zsh|powershell|pwsh)(\s|$)/i,
+    /(^|\s)(del|erase)\s+\/[sqf]/i,
+    /(^|\s)rd\s+\/s(\s|$)/i
+  ];
+
+  return blockedPatterns.some((pattern) => pattern.test(cmd));
+}
+
+async function executeTool(tool, params = {}, workdir) {
+  const ws = path.resolve(workdir || process.cwd());
+  if (!fs.existsSync(ws)) fs.mkdirSync(ws, { recursive: true });
+
+  switch (tool) {
+    case "read_file": {
+      const target = safePath(ws, params.path);
+      return { ok: true, tool, path: target, content: fs.readFileSync(target, "utf8") };
+    }
+    case "write_file": {
+      const target = safePath(ws, params.path);
+      fs.mkdirSync(path.dirname(target), { recursive: true });
+      fs.writeFileSync(target, params.content || "", "utf8");
+      return {
+        ok: true,
+        tool,
+        path: target,
+        verified: fs.existsSync(target),
+        size: fs.statSync(target).size,
+        content: String(params.content || "")
+      };
+    }
+    case "list_files":
+      return { ok: true, tool, workdir: ws, files: listFilesRecursive(ws, params.maxDepth || 3) };
+    case "create_project": {
+      const rootName = params.name ? String(params.name).replace(/[^\w.\-]/g, "_") : "project";
+      const root = safePath(ws, rootName);
+      fs.mkdirSync(root, { recursive: true });
+      const written = [];
+      const files = [];
+      const inputFiles = params.files || {};
+
+      for (const [rel, content] of Object.entries(inputFiles)) {
+        const target = safePath(root, rel);
+        fs.mkdirSync(path.dirname(target), { recursive: true });
+        fs.writeFileSync(target, String(content), "utf8");
+        const relFromWs = path.relative(ws, target);
+        written.push(relFromWs);
+        files.push({ path: relFromWs, content: String(content) });
+      }
+
+      const verified = written.every((entry) => fs.existsSync(path.join(ws, entry)));
+      return { ok: true, tool, projectRoot: root, files: written, fileObjects: files, verified };
+    }
+    case "playwright_screenshot": {
+      const url = String(params.url || params.target || "").trim();
+      if (!url) throw new Error("Missing url");
+
+      const filename = String(params.path || params.output || `reference-shot-${Date.now()}.png`);
+      const target = path.isAbsolute(filename) ? filename : safePath(ws, filename);
+
+      await browser.open(url);
+      try {
+        const shot = await browser.screenshot(target);
+        const snapshot = await browser.snapshot();
+        return {
+          ok: true,
+          tool,
+          url,
+          path: shot.path,
+          snapshot
+        };
+      } finally {
+        await browser.close().catch(() => {});
+      }
+    }
+    case "run_shell": {
+      const cmd = String(params.command || "").trim();
+      if (!cmd) throw new Error("Missing command");
+      if (isBlockedShellCommand(cmd)) throw new Error("Blocked command");
+      const out = execSync(cmd, {
+        cwd: ws,
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "pipe"],
+        timeout: params.timeout || 20000
+      });
+      return { ok: true, tool, output: out };
+    }
+    case "git_status":
+      return { ok: true, tool, output: execSync("git status --short --branch", { cwd: ws, encoding: "utf8" }) };
+    case "git_add_all":
+      execSync("git add -A", { cwd: ws, encoding: "utf8" });
+      return { ok: true, tool };
+    case "git_commit": {
+      const message = String(params.message || "BLUN KING update");
+      const out = execSync(`git add -A && git commit -m ${JSON.stringify(message)}`, { cwd: ws, encoding: "utf8" });
+      return { ok: true, tool, output: out, message };
+    }
+    case "git_push": {
+      const remote = params.remote || "origin";
+      const branch = params.branch || "HEAD";
+      const out = execSync(`git push ${remote} ${branch}`, { cwd: ws, encoding: "utf8" });
+      return { ok: true, tool, output: out };
+    }
+    case "ssh_exec":
+    case "deploy_script":
+      throw new Error(`${tool} is disabled on the server. Run deployment commands from the CLI locally.`);
+    default:
+      throw new Error(`Unknown tool: ${tool}`);
+  }
+}
+
+function parseToolCall(text) {
+  const fenced = String(text || "").match(/```tool\s*\n?\s*(\{[\s\S]*?\})\s*\n?\s*```/i);
+  if (fenced) {
+    try {
+      return JSON.parse(fenced[1]);
+    } catch {
+      return null;
+    }
+  }
+
+  const inline = String(text || "").match(/\{\s*"tool"\s*:\s*"[^"]+"\s*,\s*"args"\s*:\s*\{[\s\S]*?\}\s*\}/);
+  if (inline) {
+    try {
+      return JSON.parse(inline[0]);
+    } catch {
+      return null;
+    }
+  }
+
+  return null;
+}
+
+module.exports = {
+  executeTool,
+  parseToolCall,
+  isBlockedShellCommand
+};