limbo-ai 1.20.4 → 1.22.0

package/README.md

@@ -52,12 +52,12 @@ Headless mode skips Telegram setup. To add Telegram later, run `npx limbo-ai sta
 ### Available commands
 
 ```sh
-npx limbo-ai start        # Install and start (default if no command given)
-npx limbo-ai stop         # Stop the container
-npx limbo-ai update       # Pull latest image and restart
-npx limbo-ai status       # Show container status
-npx limbo-ai logs         # Tail container logs
-npx limbo-ai start --reconfigure   # Change API keys or settings
+npx limbo-ai@latest start        # Install and start (default if no command given)
+npx limbo-ai@latest stop         # Stop the container
+npx limbo-ai@latest update       # Pull latest image and restart
+npx limbo-ai@latest status       # Show container status
+npx limbo-ai@latest logs         # Tail container logs
+npx limbo-ai@latest start --reconfigure   # Change API keys or settings
 ```
 
 ---
@@ -65,7 +65,7 @@ npx limbo-ai start --reconfigure   # Change API keys or settings
 ## Updating
 
 ```sh
-npx limbo-ai update
+npx limbo-ai@latest update
 ```
 
 Pulls the latest Limbo image and restarts the container. Your vault data is persisted in the `limbo-data` Docker volume and is not affected.

package/cli.js

@@ -6,6 +6,7 @@
 const { execSync, spawn, spawnSync } = require('child_process');
 const crypto = require('crypto');
 const fs = require('fs');
+const https = require('https');
 const os = require('os');
 const path = require('path');
 const readline = require('readline');
@@ -162,6 +163,8 @@ function composeContent() {
       - llm_api_key
       - telegram_bot_token
       - gateway_token
+      - groq_api_key
+      - brave_api_key
     env_file:
       - ${LIMBO_DIR}/.env
     environment:
@@ -183,6 +186,10 @@ secrets:
     file: ${SECRETS_DIR}/telegram_bot_token
   gateway_token:
     file: ${SECRETS_DIR}/gateway_token
+  groq_api_key:
+    file: ${SECRETS_DIR}/groq_api_key
+  brave_api_key:
+    file: ${SECRETS_DIR}/brave_api_key
 
 volumes:
   limbo-data:
@@ -218,6 +225,8 @@ function composeContentHardened() {
       - llm_api_key
       - telegram_bot_token
       - gateway_token
+      - groq_api_key
+      - brave_api_key
     env_file:
       - ${LIMBO_DIR}/.env
     environment:
@@ -270,6 +279,10 @@ secrets:
     file: ${SECRETS_DIR}/telegram_bot_token
   gateway_token:
     file: ${SECRETS_DIR}/gateway_token
+  groq_api_key:
+    file: ${SECRETS_DIR}/groq_api_key
+  brave_api_key:
+    file: ${SECRETS_DIR}/brave_api_key
 
 volumes:
   limbo-data:
@@ -699,6 +712,8 @@ function normalizeConfig(cfg, existingEnv = {}) {
     TELEGRAM_BOT_TOKEN: cfg.telegramToken || (cfg.keepExisting ? existingEnv.TELEGRAM_BOT_TOKEN || '' : ''),
     TELEGRAM_AUTO_PAIR_FIRST_DM: cfg.telegramAutoPair || existingEnv.TELEGRAM_AUTO_PAIR_FIRST_DM || 'false',
     GATEWAY_TOKEN: gatewayToken,
+    VOICE_ENABLED: cfg.voiceEnabled || existingEnv.VOICE_ENABLED || 'false',
+    WEB_SEARCH_ENABLED: cfg.webSearchEnabled || existingEnv.WEB_SEARCH_ENABLED || 'false',
   };
 
   return base;
@@ -718,6 +733,8 @@ function writeSecrets(cfg, existingEnv = {}) {
   writeSecretFile('llm_api_key', normalized.LLM_API_KEY);
   writeSecretFile('telegram_bot_token', normalized.TELEGRAM_BOT_TOKEN);
   writeSecretFile('gateway_token', normalized.GATEWAY_TOKEN);
+  writeSecretFile('groq_api_key', cfg.groqApiKey || readSecretFile('groq_api_key'));
+  writeSecretFile('brave_api_key', cfg.braveApiKey || readSecretFile('brave_api_key'));
 }
 
 const SECRET_KEYS = new Set([
@@ -922,7 +939,7 @@ function ensureComposeFile(hardened = false) {
   fs.mkdirSync(path.join(VAULT_DIR, 'maps'), { recursive: true });
   fs.mkdirSync(SECRETS_DIR, { recursive: true, mode: 0o700 });
   // Ensure secret files exist (Docker Compose secrets require the files to be present)
-  for (const name of ['llm_api_key', 'telegram_bot_token', 'gateway_token']) {
+  for (const name of ['llm_api_key', 'telegram_bot_token', 'gateway_token', 'groq_api_key', 'brave_api_key']) {
     const fp = path.join(SECRETS_DIR, name);
     if (!fs.existsSync(fp)) fs.writeFileSync(fp, '', { mode: 0o644 });
   }
@@ -1683,6 +1700,98 @@ function cmdStatus() {
   run('docker compose ps');
 }
 
+function cmdConfig() {
+  const args = process.argv.slice(3);
+  const feature = args[0];
+
+  if (!feature || !['voice', 'web-search'].includes(feature)) {
+    console.log(`
+${c.bold}Usage:${c.reset}
+  limbo config voice --enable --api-key <key>
+  limbo config voice --disable
+  limbo config voice --status
+  limbo config web-search --enable --api-key <key>
+  limbo config web-search --disable
+  limbo config web-search --status
+`);
+    return;
+  }
+
+  if (!fs.existsSync(ENV_FILE)) {
+    die('Limbo is not configured. Run "limbo start" first.');
+  }
+
+  const existingEnv = {};
+  const envContent = fs.readFileSync(ENV_FILE, 'utf8');
+  for (const line of envContent.split('\n')) {
+    const match = line.match(/^([A-Z_]+)=(.*)$/);
+    if (match) existingEnv[match[1]] = match[2].replace(/^"|"$/g, '');
+  }
+
+  const isVoice = feature === 'voice';
+  const envKey = isVoice ? 'VOICE_ENABLED' : 'WEB_SEARCH_ENABLED';
+  const secretName = isVoice ? 'groq_api_key' : 'brave_api_key';
+  const featureLabel = isVoice ? 'Voice transcription' : 'Web search';
+
+  const hasEnable = args.includes('--enable');
+  const hasDisable = args.includes('--disable');
+  const hasStatus = args.includes('--status');
+  const apiKeyIdx = args.indexOf('--api-key');
+  const apiKey = apiKeyIdx !== -1 ? args[apiKeyIdx + 1] : null;
+
+  if (hasStatus) {
+    const enabled = existingEnv[envKey] === 'true';
+    const key = readSecretFile(secretName);
+    console.log(`${featureLabel}: ${enabled ? `${c.green}enabled${c.reset}` : `${c.dim}disabled${c.reset}`}`);
+    if (key) {
+      const masked = key.length > 8 ? key.substring(0, 4) + '...' + key.slice(-4) : '***';
+      console.log(`API Key: ${masked}`);
+    }
+    return;
+  }
+
+  if (!hasEnable && !hasDisable) {
+    die('Specify --enable, --disable, or --status');
+  }
+
+  if (hasEnable) {
+    if (apiKey) {
+      if (isVoice && !apiKey.startsWith('gsk_')) {
+        warn('Groq API keys typically start with gsk_');
+      }
+      if (!isVoice && !apiKey.startsWith('BSA')) {
+        warn('Brave API keys typically start with BSA');
+      }
+      writeSecretFile(secretName, apiKey);
+      ok(`${featureLabel} API key saved.`);
+    } else {
+      const existing = readSecretFile(secretName);
+      if (!existing) {
+        die(`No API key found. Use --api-key <key> to set one.`);
+      }
+    }
+    existingEnv[envKey] = 'true';
+  } else {
+    existingEnv[envKey] = 'false';
+  }
+
+  const newContent = Object.entries(existingEnv)
+    .map(([key, value]) => `${key}=${value}`)
+    .join('\n') + '\n';
+  fs.writeFileSync(ENV_FILE, newContent, { mode: 0o600 });
+  ok(`${featureLabel} ${hasEnable ? 'enabled' : 'disabled'}.`);
+
+  if (fs.existsSync(COMPOSE_FILE)) {
+    log('Restarting container...');
+    try {
+      execSync(`docker compose -f "${COMPOSE_FILE}" restart limbo`, { stdio: 'inherit' });
+      ok('Container restarted.');
+    } catch {
+      warn('Could not restart container. Restart manually with: limbo stop && limbo start');
+    }
+  }
+}
+
 function cmdHelp() {
   console.log(`
 ${c.bold}limbo${c.reset} - personal AI memory agent
@@ -1696,6 +1805,7 @@ ${c.bold}Commands:${c.reset}
   logs          Tail container logs
   update        Pull latest image and restart
   status        Show container status
+  config        Configure optional features (voice, web-search)
   help          Show this help
 
 ${c.bold}Flags:${c.reset}
@@ -1708,30 +1818,129 @@ ${c.bold}Flags:${c.reset}
   --language <code>    Language: en, es (default: en)
   --tunnel-domain <d>  Admin: use branded subdomain for setup tunnel (e.g. limbo.tomasward.com)
 
+${c.bold}Config:${c.reset}
+  limbo config voice --enable --api-key gsk_xxx     Enable voice transcription
+  limbo config voice --disable                       Disable voice transcription
+  limbo config web-search --enable --api-key BSAxxx  Enable web search
+  limbo config web-search --disable                  Disable web search
+  limbo config voice --status                        Show feature status
+
 ${c.bold}Data directory:${c.reset} ${LIMBO_DIR}
 `);
 }
 
+// ─── Update Notifier ─────────────────────────────────────────────────────────
+
+const UPDATE_CHECK_FILE = path.join(LIMBO_DIR, '.update-check');
+const UPDATE_CHECK_INTERVAL = 24 * 60 * 60 * 1000; // 24 hours
+
+// Spawn a detached background process to check the npm registry.
+// Writes {latest, checkedAt} to UPDATE_CHECK_FILE and exits.
+function checkForUpdateInBackground() {
+  try {
+    let shouldCheck = true;
+    if (fs.existsSync(UPDATE_CHECK_FILE)) {
+      const cached = JSON.parse(fs.readFileSync(UPDATE_CHECK_FILE, 'utf8'));
+      if (Date.now() - cached.checkedAt < UPDATE_CHECK_INTERVAL) shouldCheck = false;
+    }
+    if (!shouldCheck) return;
+
+    // Spawn detached child that hits the registry and writes cache
+    const child = spawn(process.execPath, ['-e', `
+      const https = require('https');
+      const fs = require('fs');
+      const req = https.get('https://registry.npmjs.org/limbo-ai/latest', { timeout: 5000 }, (res) => {
+        let data = '';
+        res.on('data', (chunk) => data += chunk);
+        res.on('end', () => {
+          try {
+            const { version } = JSON.parse(data);
+            fs.mkdirSync('${LIMBO_DIR.replace(/\\/g, '\\\\')}', { recursive: true });
+            fs.writeFileSync('${UPDATE_CHECK_FILE.replace(/\\/g, '\\\\')}', JSON.stringify({ latest: version, checkedAt: Date.now() }));
+          } catch {}
+        });
+      });
+      req.on('error', () => {});
+      req.end();
+    `], { detached: true, stdio: 'ignore' });
+    child.unref();
+  } catch {}
+}
+
+// Read cache and print banner if a newer version is available.
+function notifyUpdate() {
+  try {
+    if (!fs.existsSync(UPDATE_CHECK_FILE)) return;
+    const { latest } = JSON.parse(fs.readFileSync(UPDATE_CHECK_FILE, 'utf8'));
+    const pkg = require('./package.json');
+    if (!latest || latest === pkg.version) return;
+
+    // Simple semver compare: split on dots, compare numerically
+    const cur = pkg.version.split('.').map(Number);
+    const lat = latest.split('.').map(Number);
+    const isNewer = lat[0] > cur[0] || (lat[0] === cur[0] && lat[1] > cur[1]) ||
+      (lat[0] === cur[0] && lat[1] === cur[1] && lat[2] > cur[2]);
+    if (!isNewer) return;
+
+    // Strip ANSI escapes for visible-length padding
+    const strip = (s) => s.replace(/\x1b\[[0-9;]*m/g, '');
+    const pad = (s, w) => s + ' '.repeat(Math.max(0, w - strip(s).length));
+
+    const line = `  Update available: ${c.dim}${pkg.version}${c.reset} → ${c.green}${latest}${c.reset}  `;
+    const instruction = `  Run ${c.cyan}npx limbo-ai@latest update${c.reset} to update  `;
+    const inner = Math.max(strip(line).length, strip(instruction).length);
+    const border = '─'.repeat(inner);
+    console.error(`\n  ${c.dim}╭${border}╮${c.reset}`);
+    console.error(`  ${c.dim}│${c.reset}${pad(line, inner)}${c.dim}│${c.reset}`);
+    console.error(`  ${c.dim}│${c.reset}${pad(instruction, inner)}${c.dim}│${c.reset}`);
+    console.error(`  ${c.dim}╰${border}╯${c.reset}\n`);
+  } catch {}
+}
+
+// ─── Exports (for testing) ────────────────────────────────────────────────────
+
+module.exports = {
+  MODEL_CATALOG,
+  normalizeConfig,
+  parseEnvFile,
+  deriveProviderFamily,
+  getModelCatalog,
+  parseCallbackInput,
+  decodeJwtPayload,
+  parseClaudeSetupToken,
+  buildCodexAuthProfile,
+  buildAnthropicAuthProfile,
+  generatePKCE,
+  buildOAuthUrl,
+};
+
 // ─── Main ────────────────────────────────────────────────────────────────────
 
-const [,, cmd = 'start'] = process.argv;
-
-(async () => {
-  switch (cmd) {
-    case 'start':
-    case 'install': await cmdStart(); break;
-    case 'stop':    cmdStop(); break;
-    case 'logs':    cmdLogs(); break;
-    case 'update':  cmdUpdate(); break;
-    case 'status':  cmdStatus(); break;
-    case 'help':
-    case '--help':
-    case '-h':      cmdHelp(); break;
-    default:
-      warn(t('en', 'unknownCommand', cmd));
-      cmdHelp();
-      process.exit(1);
-  }
-})().catch((err) => {
-  die(err.message || String(err));
-});
+if (require.main === module) {
+  const [,, cmd = 'start'] = process.argv;
+
+  (async () => {
+    checkForUpdateInBackground();
+
+    switch (cmd) {
+      case 'start':
+      case 'install': await cmdStart(); break;
+      case 'stop':    cmdStop(); break;
+      case 'logs':    cmdLogs(); break;
+      case 'update':  cmdUpdate(); break;
+      case 'status':  cmdStatus(); break;
+      case 'config':  cmdConfig(); break;
+      case 'help':
+      case '--help':
+      case '-h':      cmdHelp(); break;
+      default:
+        warn(t('en', 'unknownCommand', cmd));
+        cmdHelp();
+        process.exit(1);
+    }
+
+    notifyUpdate();
+  })().catch((err) => {
+    die(err.message || String(err));
+  });
+}

package/mcp-server/index.js

@@ -5,6 +5,7 @@ import {
   ListToolsRequestSchema,
 } from "@modelcontextprotocol/sdk/types.js";
 
+import { buildIndex } from "./vault-index.js";
 import { vaultSearch } from "./tools/search.js";
 import { vaultRead } from "./tools/read.js";
 import { vaultWriteNote } from "./tools/write.js";
@@ -13,7 +14,7 @@ import { vaultUpdateMap } from "./tools/update-map.js";
 const server = new Server(
   {
     name: "limbo-vault",
-    version: "1.1.0",
+    version: "1.2.0",
   },
   {
     capabilities: {
@@ -172,5 +173,9 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
 
 // ── Start ───────────────────────────────────────────────────────────────────
 
+// Build in-memory index before accepting connections
+const noteCount = await buildIndex();
+process.stderr.write(`[limbo-vault] Index built: ${noteCount} notes indexed\n`);
+
 const transport = new StdioServerTransport();
 await server.connect(transport);