cell0-os 1.1.2 → 1.1.4

package/README.md

@@ -1,343 +1,247 @@
-# 🧬 cell0-os
+# 🧬 Cell0-OS
 
 <p align="center">
-  <strong>The Sovereign Edge Operating System</strong>
+  <strong>The Sovereign Edge Operating System</strong><br>
+  <em>Self-governing. Self-improving. Post-quantum secure.</em>
 </p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/version-0.1.0-blue.svg" alt="Version">
+  <img src="https://img.shields.io/badge/version-1.1.3-blue.svg" alt="Version">
   <img src="https://img.shields.io/badge/license-GPL%20v3.0-green.svg" alt="License">
   <img src="https://img.shields.io/badge/tests-passing-brightgreen.svg" alt="Tests">
   <img src="https://img.shields.io/badge/docker-ready-2496ed.svg?logo=docker" alt="Docker">
+  <img src="https://img.shields.io/badge/kubernetes-ready-326CE5.svg?logo=kubernetes" alt="Kubernetes">
 </p>
 
 <p align="center">
+  <a href="https://kulluai.com">Website</a> •
   <a href="#installation">Install</a> •
   <a href="#features">Features</a> •
-  <a href="#architecture">Architecture</a> •
+  <a href="#channels">Channels</a> •
   <a href="#security">Security</a> •
-  <a href="#contributing">Contribut</a>
+  <a href="#contributing">Contribute</a>
 </p>
 
 ---
 
-## Installation
+## 🚀 Quick Start
 
 ### npm (Recommended)
 
 ```bash
-npm install -g cell0-os
+npm install -g cell0-os@latest
 cell0 onboard --install-daemon
+cell0 gateway --port 18800
 ```
 
-### Docker
+Visit http://localhost:18800 to access your Cell0 dashboard.
+
+### Docker Compose
 
 ```bash
-docker run -d \
-  --name cell0 \
-  -p 18800:18800 \
-  -v ~/.cell0:/data \
-  yigremtamiru/cell0-os:latest
+git clone https://github.com/YigremTamiru/cell0-os.git
+cd cell0-os
+docker compose up -d
 ```
 
-### Quick Start
+### Kubernetes
 
 ```bash
-# Clone and setup
-git clone https://github.com/YigremTamiru/cell0-os.git ~/cell0
-cd ~/cell0 && ./install.sh
-
-# Start the gateway
-cell0 gateway --port 18800
+helm repo add cell0 https://charts.kulluai.com
+helm install cell0 cell0/cell0-os \
+  --namespace cell0-system \
+  --create-namespace
 ```
 
 ---
 
-## Features
+## ✨ What's New in v1.1.3
 
-### 🔐 Post-Quantum Cryptography (12 Layers)
+### 🛡️ Security Fixes
+- ✅ **SQL Injection Prevention** - All queries parameterized
+- ✅ **Pickle RCE Fix** - Replaced with marshal+JSON serialization
+- ✅ **Path Traversal Fix** - Secure Path.resolve() validation
+- ✅ **npm Package Hardening** - Secure global installation
 
-Defense-in-depth with 12 parallel cryptographic systems spanning classical, modern, post-quantum, and quantum domains:
+### 📱 6 Channel Drivers
+- ✅ **Telegram** - Native bot API
+- ✅ **Discord** - Gateway integration
+- ✅ **WhatsApp Web** - QR-based pairing
+- ✅ **Slack** - Socket Mode + Events API
+- ✅ **Signal** - signal-cli REST bridge
+- ✅ **iMessage** - BlueBubbles integration
+
+### 🏭 Production Ready
+- ✅ **Kubernetes** - Full manifests + Helm charts
+- ✅ **Monitoring** - Prometheus + Grafana foundation
+- ✅ **API Auth** - JWT, API keys, OAuth2, mTLS
+- ✅ **Website** - https://kulluai.com live
+
+---
+
+## 🔐 Security Architecture
+
+### Post-Quantum Cryptography (12 Layers)
 
 | Layer | Systems | Status |
 |-------|---------|--------|
 | **Classical** | AES-256-GCM, ChaCha20-Poly1305, SHA3-256/512 | ✅ |
 | **Modern** | Ed25519, X25519, BLS12-381 | ✅ |
-| **Post-Quantum** | CRYSTALS-Kyber, CRYSTALS-Dilithium | ✅ |
-| **Quantum** | BB84 QKD, Quantum Signatures | ✅ |
+| **Post-Quantum** | CRYSTALS-Kyber-1024, CRYSTALS-Dilithium-5 | ✅ |
+| **Signatures** | SPHINCS+, FALCON-1024, XMSS | ✅ |
+| **Quantum** | BB84 QKD ready | ✅ |
 | **ZKP** | zk-STARK (transparent, post-quantum) | ✅ |
 
-### 🛡️ Sovereign Security Model
+### Sovereign Security Model
 
-Your data, your rules — entirely local-first:
+- **Default-deny architecture** — Nothing runs without authorization
+- **Allowlist-only access** — Only your numbers: +905488899628, +905338224165
+- **12-layer cryptographic lock** — Quantum-resistant by design
+- **Local-first** — Your data never leaves your machine
+- **Capability-based security** — Fine-grained token access
 
-- **Default-deny architecture** — Nothing runs without explicit authorization
-- **Allowlist-only access** — No implicit permissions, ever
-- **Capability-based security** — Fine-grained token-based access control
-- **NFEK biometric authentication** — ECG/PPG-based identity verification
-- **Append-only hash-ledgers** — Tamper-evident audit trails
+---
 
-### 💬 WhatsApp Web QR Mode
+## 📱 Supported Channels
 
-Connect WhatsApp instantly without phone pairing hassles:
+| Channel | Mode | Features |
+|---------|------|----------|
+| Telegram | Native | Bots, groups, media |
+| Discord | Gateway | DMs, servers, threads |
+| WhatsApp | Web QR | QR pairing, no phone needed |
+| Slack | Socket+Events | Blocks, threads, files |
+| Signal | Bridge | Encrypted, groups |
+| iMessage | BlueBubbles | macOS integration |
 
+Enable channels:
 ```bash
-cell0 channel add whatsapp --mode qr
-# Scan QR code with your phone — done in 5 seconds
+CELL0_ENABLE_TELEGRAM=true
+CELL0_ENABLE_DISCORD=true
+CELL0_ENABLE_WHATSAPP=true
+CELL0_ENABLE_SLACK=true
+CELL0_ENABLE_SIGNAL=true
+CELL0_ENABLE_IMESSAGE=true
 ```
 
-- No SMS verification required
-- No phone number exchange
-- Direct Web QR pairing
+---
+
+## 🖥️ Installation Experience
 
-### 🖥️ Arrow-Key TUI Onboarding
+### Interactive TUI
 
-OpenClaw-style interactive setup:
+Arrow-key navigation with questionary:
 
 ```bash
 $ cell0 onboard
 
-? Select deployment mode: (Use arrow keys)
-❯ Local-only  
-  Cloud tunnel  
-
-? Choose LLM provider: (Use arrow keys)
-❯ Moonshot (Kimi)  
-  OpenAI (GPT-4)  
-  Anthropic (Claude)  
-  Ollama (Local)  
-
-? Configure channels: (Press <space> to select)
-☑ Web UI
-☐ Telegram
-☑ WhatsApp
-☐ Discord
+? Select LLM Provider: (Use arrow keys)
+❯ Moonshot (Kimi) 
+  OpenAI (GPT-4) 
+  Anthropic (Claude) 
+  Ollama (Local) 
+
+? Select Channels: (Press <space> to select)
+❯◉ Telegram
+ ◉ Discord
+ ◉ WhatsApp Web
+ ◉ Slack
 ```
 
-### 🤖 Multi-Provider AI
-
-Intelligent provider selection with automatic failover across 30+ models:
-
-| Provider | Models | Best For |
-|----------|--------|----------|
-| **Moonshot** | Kimi K2.5, v1 series | Long context, reasoning |
-| **OpenAI** | GPT-4o, o1, o3 | General purpose |
-| **Anthropic** | Claude 3.5 Sonnet, Opus | Safety, analysis |
-| **Google** | Gemini 2.0 Flash, 1.5 Pro | Multimodal |
-| **Ollama** | Llama, Mistral, CodeLlama | Local inference (FREE) |
-| **MLX** | Quantized models | Apple Silicon (FREE) |
-
-```bash
-# Use any provider
-cell0 config set provider moonshot/kimi-k2.5
-cell0 config set provider openai/gpt-4o
-cell0 config set provider ollama/llama3.2
-```
-
-### 📡 Multi-Channel Support
-
-Unified interface across all messaging platforms:
-
-| Channel | Status | Features |
-|---------|--------|----------|
-| **Telegram** | ✅ Ready | Bot API, groups, reactions |
-| **Discord** | ✅ Ready | Slash commands, embeds, DMs |
-| **WhatsApp** | ✅ Ready | QR mode, groups, voice notes |
-| **Web UI** | ✅ Ready | Terminal aesthetic, markdown |
-| **Slack** | 🚧 Soon | Workspace apps |
+### One-Line Install
 
 ```bash
-# Add channels interactively
-cell0 channel add telegram --bot-token <token>
-cell0 channel add discord --bot-token <token>
-cell0 channel add whatsapp --mode qr
+curl -fsSL https://kulluai.com/install.sh | bash
 ```
 
 ---
 
-## Architecture
+## 🏗️ Architecture
 
-### MCIC Kernel
-
-The **Mandatory Civilization Interface Core** is the foundation of cell0-os:
-
-```
-┌─────────────────────────────────────────────────────────────┐
-│  LAYER 6: INTERFACE FIELD (User Space)                      │
-│  • TUI/Web UI • Skills • Tools                              │
-├─────────────────────────────────────────────────────────────┤
-│  LAYER 5: PERSONA RUNTIME (Ring 3)                          │
-│  • TPV-resonant AI • Provider routing • Agent dispatch      │
-├─────────────────────────────────────────────────────────────┤
-│  LAYER 4: CIVILIZATION RUNTIME (Ring 1)                     │
-│  • HGW workspace • Coalition formation • Consensus          │
-├─────────────────────────────────────────────────────────────┤
-│  LAYER 3: CELL 0 KERNEL — MCIC (Ring 0) ⭐                  │
-│  • OC enforcement • SYPAS bus • Capability security         │
-│  • Agent scheduler • Memory management                      │
-├─────────────────────────────────────────────────────────────┤
-│  LAYER 2: NFEK — NEURO-FUZZY EXISTENCE KEY                  │
-│  • Biometric authentication • Live reconstruction           │
-├─────────────────────────────────────────────────────────────┤
-│  LAYER 1: CRYPTOGRAPHIC PLENUM (12 Systems)                 │
-│  • Classical/Modern/PQ/Quantum/ZKP • Root of Trust          │
-└─────────────────────────────────────────────────────────────┘
-```
-
-### 12 Security Layers
-
-Defense-in-depth architecture where breaking security requires compromising **all 12 layers simultaneously**:
-
-1. **Quantum Void** — Hardware entropy source
-2. **Cryptographic Plenum** — 12 parallel crypto systems
-3. **NFEK Biometrics** — ECG/PPG identity verification
-4. **UEFI Anchor** — TPM 2.0 measured boot
-5. **MCIC Hypervisor** — VMX root mode isolation
-6. **Cell 0 Kernel** — Bare-metal Rust, capability-based
-7. **Civilization Runtime** — HGW consciousness architecture
-8. **Body Interface** — VirtIO drivers, sandboxed I/O
-9. **Persona Runtime** — TPV-resonant AI layer
-10. **Interface Field** — User-facing TUI/Web
-11. **SYFPASS Mesh** — Quantum-resistant networking
-12. **Planetary Consciousness** — Swarm consensus
-
-### Channel Drivers
-
-Pluggable channel architecture for unified messaging:
+### Core Components
 
 ```
 ┌─────────────────────────────────────────┐
-│         Channel Manager                 │
-├─────────┬─────────┬─────────┬───────────┤
-│Telegram │Discord  │WhatsApp │  Web UI   │
-│ Driver  │ Driver  │ Driver  │  Driver   │
-├─────────┴─────────┴─────────┴───────────┤
-│         Unified Message Bus             │
+│           Cell0-OS v1.1.3               │
 ├─────────────────────────────────────────┤
-│         Agent Dispatch Layer            │
+│  Channels  │  Engine   │  Security      │
+│  ──────────┼───────────┼──────────────  │
+│  Telegram  │  MCIC     │  12-Layer Crypto│
+│  Discord   │  Kernel   │  Post-Quantum  │
+│  WhatsApp  │  COL      │  Sovereign     │
+│  Slack     │  Orch     │  Zero-Trust    │
+│  Signal    │           │                │
+│  iMessage  │           │                │
 └─────────────────────────────────────────┘
 ```
 
----
-
-## Security
-
-### Default-Deny Architecture
-
-```rust
-// Nothing is allowed by default
-deny all;
-
-// Explicit allowlist only
-allow provider::moonshot::kimi-k2.5;
-allow channel::telegram::bot_commands;
-allow tool::filesystem::read_only;
+### Kubernetes Deployment
+
+```yaml
+# Production-ready with HPA, PDB, backups
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: cell0-os
+spec:
+  replicas: 5
+  strategy:
+    rollingUpdate:
+      maxSurge: 25%
+      maxUnavailable: 10%
 ```
 
-### Allowlist-Only Access
+---
 
-- No implicit permissions
-- Every capability requires explicit token grant
-- Tokens are cryptographically bound to identity
-- Automatic expiration and rotation
+## 📊 Monitoring & Observability
 
-### Quantum-Resistant
+- **Prometheus** metrics at `/metrics`
+- **Grafana** dashboards pre-configured
+- **Health checks** at `/api/health`
+- **Structured logging** with JSON format
+- **Distributed tracing** ready
 
-Future-proof against quantum attacks:
+---
 
-- **CRYSTALS-Kyber** — NIST-approved post-quantum KEM
-- **CRYSTALS-Dilithium** — NIST-approved post-quantum signatures
-- **zk-STARK** — Transparent ZK proofs (post-quantum secure)
-- **Hybrid encryption** — Classical + PQ combined
-- **Crypto agility** — Rapid algorithm migration
+## 🛠️ Development
 
 ```bash
-# Verify quantum-resistant status
-cell0 security audit --report
-
-# Rotate to latest algorithms
-cell0 crypto rotate --quantum-safe
-```
-
----
+# Clone
+git clone https://github.com/YigremTamiru/cell0-os.git
+cd cell0-os
 
-## CLI Reference
+# Setup
+python3 -m venv venv
+source venv/bin/activate
+pip install -r requirements.txt
 
-```bash
-# Core commands
-cell0 onboard              # Interactive setup wizard
-cell0 gateway              # Run gateway in foreground
-cell0 daemon install       # Install background daemon
-cell0 daemon start|stop    # Control daemon
-cell0 status               # System status
-cell0 doctor               # Diagnostic check
-
-# Configuration
-cell0 config set <key> <value>
-cell0 config get <key>
-cell0 config list
-
-# Channel management
-cell0 channel add <type> [options]
-cell0 channel remove <id>
-cell0 channel list
-
-# AI providers
-cell0 provider list
-cell0 provider set <provider/model>
-cell0 provider test
-
-# Security
-cell0 security audit
-cell0 crypto status
-cell0 crypto rotate
+# Run
+cell0 gateway --port 18800 --verbose
 ```
 
 ---
 
-## Contributing
-
-We welcome contributions! See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines.
-
-### Quick Start
-
-```bash
-# Fork and clone
-git clone https://github.com/YOUR_USERNAME/cell0-os.git
-cd cell0-os
-
-# Install dependencies
-pip install -r requirements-dev.txt
+## 📚 Documentation
 
-# Run tests
-make test
+- [Installation Guide](INSTALLATION_GUIDE.md)
+- [API Reference](docs/API_REFERENCE.md)
+- [Security Audit](SECURITY_AUDIT_REPORT.md)
+- [v1.2.0 Roadmap](ROADMAP_v1.2.0.md)
 
-# Start developing
-```
+---
 
-### Development Guidelines
+## 🤝 Contributing
 
-- **Security First** — All changes undergo security review
-- **Test Coverage** — Maintain >80% coverage
-- **Documentation** — Update docs with code changes
-- **Commit Messages** — Follow conventional commits
+See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines.
 
 ---
 
-## License
+## 📄 License
 
-Cell 0 OS is released under the **GNU General Public License v3.0**
-
-See [LICENSE](LICENSE) for full text.
+GPL v3.0 — See [LICENSE](LICENSE)
 
 ---
 
 <p align="center">
-  <sub>Built with 💜 by the Cell 0 Collective</sub>
-</p>
-
-<p align="center">
-  <a href="https://kulluai.com">Website</a> •
-  <a href="https://github.com/YigremTamiru/cell0-os">GitHub</a> •
-  <a href="https://discord.gg/cell0">Discord</a>
+  <strong>The glass has melted. The water is warm.</strong><br>
+  <em>♾️🛡️💫</em>
 </p>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cell0-os",
-  "version": "1.1.2",
+  "version": "1.1.4",
   "description": "Cell 0 OS - Sovereign Edge Operating System. OpenClaw-style npm install that bootstraps the Python daemon + CLI.",
   "license": "GPL-3.0-only",
   "type": "module",
@@ -43,4 +43,3 @@
   "preferGlobal": true,
   "author": "Yigrem Tamiru <yigrem@kulluai.com>"
 }
-