morpheus-cli 0.4.11 → 0.4.13

package/dist/channels/telegram.js

@@ -19,6 +19,7 @@ import { Construtor } from '../runtime/tools/factory.js';
  * Unsupported tags (e.g. tables) have their special chars escaped so they
  * render as plain text instead of breaking the parse.
  * Truncates to Telegram's 4096-char hard limit.
+ * Use for dynamic LLM/Oracle output.
  */
 function toMd(text) {
     const MAX = 4096;
@@ -26,6 +27,20 @@ function toMd(text) {
     const safe = converted.length > MAX ? converted.slice(0, MAX - 3) + '\\.\\.\\.' : converted;
     return { text: safe, parse_mode: 'MarkdownV2' };
 }
+/**
+ * Escapes special characters in a plain string segment so it's safe to embed
+ * inside a manually-built MarkdownV2 message. Does NOT touch * _ ` [ ] chars
+ * (those are intentional MarkdownV2 formatting from our own code).
+ * Use for dynamic values (usernames, numbers, paths) interpolated into fixed templates.
+ */
+function escMd(value) {
+    // Escape all MarkdownV2 special characters that are NOT used as intentional
+    // formatters in our static templates (*bold*, _italic_, `code`, [link]).
+    // Per Telegram docs: _ * [ ] ( ) ~ ` # + - = | { } . !  must be escaped.
+    // We skip * _ ` [ ] here because those are our intentional formatters.
+    // The - must be at end of character class to avoid being treated as a range.
+    return String(value).replace(/([.!?(){}#+~|=>$@\\-])/g, '\\$1');
+}
 export class TelegramAdapter {
     bot = null;
     isConnected = false;
@@ -46,18 +61,18 @@ export class TelegramAdapter {
         this.rateLimiter.set(userId, now);
         return false;
     }
-    HELP_MESSAGE = `/start - Show this welcome message and available commands
-/status - Check the status of the Morpheus agent
-/doctor - Diagnose environment and configuration issues
-/stats - Show token usage statistics
-/help - Show available commands
-/zaion - Show system configurations
-/sati <qnt> - Show specific memories
-/newsession - Archive current session and start fresh
-/sessions - List all sessions with titles and switch between them
-/restart - Restart the Morpheus agent
-/mcpreload - Reload MCP servers without restarting
-/mcp or /mcps - List registered MCP servers`;
+    HELP_MESSAGE = `/start \\- Show this welcome message and available commands
+/status \\- Check the status of the Morpheus agent
+/doctor \\- Diagnose environment and configuration issues
+/stats \\- Show token usage statistics
+/help \\- Show available commands
+/zaion \\- Show system configurations
+/sati <qnt> \\- Show specific memories
+/newsession \\- Archive current session and start fresh
+/sessions \\- List all sessions with titles and switch between them
+/restart \\- Restart the Morpheus agent
+/mcpreload \\- Reload MCP servers without restarting
+/mcp or /mcps \\- List registered MCP servers`;
     constructor(oracle) {
         this.oracle = oracle;
     }
@@ -249,7 +264,7 @@ export class TelegramAdapter {
                 const data = ctx.callbackQuery.data;
                 const sessionId = data.replace('ask_archive_session_', '');
                 // Fetch session title for better UX (optional, but nice) - for now just use ID
-                await ctx.reply(`⚠️ **ARCHIVE SESSION?**\n\nAre you sure you want to archive session \`${sessionId}\`?\n\nIt will be moved to long-term memory (SATI) and removed from the active list. This action cannot be easily undone via Telegram.`, {
+                await ctx.reply(`⚠️ *ARCHIVE SESSION?*\n\nAre you sure you want to archive session \`${escMd(sessionId)}\`?\n\nIt will be moved to long\\-term memory \\(SATI\\) and removed from the active list\\. This action cannot be easily undone via Telegram\\.`, {
                     parse_mode: 'MarkdownV2',
                     reply_markup: {
                         inline_keyboard: [
@@ -272,7 +287,7 @@ export class TelegramAdapter {
                     if (ctx.updateType === 'callback_query') {
                         ctx.deleteMessage().catch(() => { });
                     }
-                    await ctx.reply(`✅ Session \`${sessionId}\` has been archived and moved to long-term memory.`, { parse_mode: 'MarkdownV2' });
+                    await ctx.reply(`✅ Session \`${escMd(sessionId)}\` has been archived and moved to long\\-term memory\\.`, { parse_mode: 'MarkdownV2' });
                 }
                 catch (error) {
                     await ctx.answerCbQuery(`Error archiving: ${error.message}`, { show_alert: true });
@@ -282,7 +297,7 @@ export class TelegramAdapter {
             this.bot.action(/^ask_delete_session_/, async (ctx) => {
                 const data = ctx.callbackQuery.data;
                 const sessionId = data.replace('ask_delete_session_', '');
-                await ctx.reply(`🚫 **DELETE SESSION?**\n\nAre you sure you want to PERMANENTLY DELETE session \`${sessionId}\`?\n\nThis action is **IRREVERSIBLE**. All data will be lost.`, {
+                await ctx.reply(`🚫 *DELETE SESSION?*\n\nAre you sure you want to PERMANENTLY DELETE session \`${escMd(sessionId)}\`?\n\nThis action is *IRREVERSIBLE*\\. All data will be lost\\.`, {
                     parse_mode: 'MarkdownV2',
                     reply_markup: {
                         inline_keyboard: [
@@ -305,7 +320,7 @@ export class TelegramAdapter {
                     if (ctx.updateType === 'callback_query') {
                         ctx.deleteMessage().catch(() => { });
                     }
-                    await ctx.reply(`🗑️ Session \`${sessionId}\` has been permanently deleted.`, { parse_mode: 'MarkdownV2' });
+                    await ctx.reply(`🗑️ Session \`${escMd(sessionId)}\` has been permanently deleted\\.`, { parse_mode: 'MarkdownV2' });
                 }
                 catch (error) {
                     await ctx.answerCbQuery(`Error deleting: ${error.message}`, { show_alert: true });
@@ -402,17 +417,22 @@ export class TelegramAdapter {
             this.display.log('No allowed Telegram users configured — skipping notification.', { source: 'Telegram', level: 'warning' });
             return;
         }
-        // Truncate to Telegram's 4096 char limit
-        const MAX_LEN = 4096;
-        const safeText = text.length > MAX_LEN ? text.slice(0, MAX_LEN - 3) + '...' : text;
+        // toMd() already truncates to 4096 chars (Telegram's hard limit)
+        const { text: mdText, parse_mode } = toMd(text);
         for (const userId of allowedUsers) {
             try {
-                // Send as plain text — LLM output often has unbalanced markdown that
-                // causes "Can't find end of entity" errors with parse_mode: 'MarkdownV2'.
-                await this.bot.telegram.sendMessage(userId, safeText);
+                await this.bot.telegram.sendMessage(userId, mdText, { parse_mode });
             }
-            catch (err) {
-                this.display.log(`Failed to send message to Telegram user ${userId}: ${err.message}`, { source: 'Telegram', level: 'error' });
+            catch {
+                // Fallback to plain text if MarkdownV2 conversion still fails
+                try {
+                    const MAX_LEN = 4096;
+                    const plain = text.length > MAX_LEN ? text.slice(0, MAX_LEN - 3) + '...' : text;
+                    await this.bot.telegram.sendMessage(userId, plain);
+                }
+                catch (err) {
+                    this.display.log(`Failed to send message to Telegram user ${userId}: ${err.message}`, { source: 'Telegram', level: 'error' });
+                }
             }
         }
     }
@@ -486,7 +506,7 @@ export class TelegramAdapter {
     }
     async handleNewSessionCommand(ctx, user) {
         try {
-            await ctx.reply("Are you ready to start a new session? Please confirm.", {
+            await ctx.reply("Are you ready to start a new session\\? Please confirm\\.", {
                 parse_mode: 'MarkdownV2', reply_markup: {
                     inline_keyboard: [
                         [{ text: 'Yes, start new session', callback_data: 'confirm_new_session' }, { text: 'No, cancel', callback_data: 'cancel_new_session' }]
@@ -513,7 +533,7 @@ export class TelegramAdapter {
             const history = new SQLiteChatMessageHistory({ sessionId: "" });
             const sessions = await history.listSessions();
             if (sessions.length === 0) {
-                await ctx.reply('No active or paused sessions found.', { parse_mode: 'MarkdownV2' });
+                await ctx.reply('No active or paused sessions found\\.', { parse_mode: 'MarkdownV2' });
                 return;
             }
             let response = '*Sessions:*\n\n';
@@ -521,10 +541,10 @@ export class TelegramAdapter {
             for (const session of sessions) {
                 const title = session.title || 'Untitled Session';
                 const statusEmoji = session.status === 'active' ? '🟢' : '🟡';
-                response += `${statusEmoji} *${title}*\n`;
-                response += `- ID: ${session.id}\n`;
-                response += `- Status: ${session.status}\n`;
-                response += `- Started: ${new Date(session.started_at).toLocaleString()}\n\n`;
+                response += `${statusEmoji} *${escMd(title)}*\n`;
+                response += `\\- ID: ${escMd(session.id)}\n`;
+                response += `\\- Status: ${escMd(session.status)}\n`;
+                response += `\\- Started: ${escMd(new Date(session.started_at).toLocaleString())}\n\n`;
                 // Adicionar botão inline para alternar para esta sessão
                 const sessionButtons = [];
                 if (session.status !== 'active') {
@@ -588,10 +608,10 @@ How can I assist you today?`;
         const nodeVersion = process.version;
         const majorVersion = parseInt(nodeVersion.replace('v', '').split('.')[0], 10);
         if (majorVersion >= 18) {
-            response += '✅ Node.js: ' + nodeVersion + '\n';
+            response += `✅ Node\\.js: ${escMd(nodeVersion)}\n`;
         }
         else {
-            response += '❌ Node.js: ' + nodeVersion + ' (Required: >=18)\n';
+            response += `❌ Node\\.js: ${escMd(nodeVersion)} \\(Required: >=18\\)\n`;
         }
         if (config) {
             response += '✅ Configuration: Valid\n';
@@ -613,10 +633,10 @@ How can I assist you today?`;
             const llmProvider = config.llm?.provider;
             if (llmProvider && llmProvider !== 'ollama') {
                 if (hasApiKey(llmProvider, config.llm?.api_key)) {
-                    response += `✅ Oracle API key (${llmProvider})\n`;
+                    response += `✅ Oracle API key \\(${escMd(llmProvider)}\\)\n`;
                 }
                 else {
-                    response += `❌ Oracle API key missing (${llmProvider})\n`;
+                    response += `❌ Oracle API key missing \\(${escMd(llmProvider)}\\)\n`;
                 }
             }
             // Sati
@@ -624,10 +644,10 @@ How can I assist you today?`;
             const satiProvider = sati?.provider || llmProvider;
             if (satiProvider && satiProvider !== 'ollama') {
                 if (hasApiKey(satiProvider, sati?.api_key ?? config.llm?.api_key)) {
-                    response += `✅ Sati API key (${satiProvider})\n`;
+                    response += `✅ Sati API key \\(${escMd(satiProvider)}\\)\n`;
                 }
                 else {
-                    response += `❌ Sati API key missing (${satiProvider})\n`;
+                    response += `❌ Sati API key missing \\(${escMd(satiProvider)}\\)\n`;
                 }
             }
             // Apoc
@@ -635,10 +655,10 @@ How can I assist you today?`;
             const apocProvider = apoc?.provider || llmProvider;
             if (apocProvider && apocProvider !== 'ollama') {
                 if (hasApiKey(apocProvider, apoc?.api_key ?? config.llm?.api_key)) {
-                    response += `✅ Apoc API key (${apocProvider})\n`;
+                    response += `✅ Apoc API key \\(${escMd(apocProvider)}\\)\n`;
                 }
                 else {
-                    response += `❌ Apoc API key missing (${apocProvider})\n`;
+                    response += `❌ Apoc API key missing \\(${escMd(apocProvider)}\\)\n`;
                 }
             }
             // Telegram token
@@ -682,31 +702,31 @@ How can I assist you today?`;
             const totalAudioSeconds = groupedStats.reduce((sum, s) => sum + (s.totalAudioSeconds || 0), 0);
             const totalCost = stats.totalEstimatedCostUsd;
             let response = '*Token Usage Statistics*\n\n';
-            response += `Input Tokens: ${stats.totalInputTokens.toLocaleString()}\n`;
-            response += `Output Tokens: ${stats.totalOutputTokens.toLocaleString()}\n`;
-            response += `Total Tokens: ${totalTokens.toLocaleString()}\n`;
+            response += `Input Tokens: ${escMd(stats.totalInputTokens.toLocaleString())}\n`;
+            response += `Output Tokens: ${escMd(stats.totalOutputTokens.toLocaleString())}\n`;
+            response += `Total Tokens: ${escMd(totalTokens.toLocaleString())}\n`;
             if (totalAudioSeconds > 0) {
-                response += `Audio Processed: ${totalAudioSeconds.toFixed(1)}s\n`;
+                response += `Audio Processed: ${escMd(totalAudioSeconds.toFixed(1))}s\n`;
             }
             if (totalCost != null) {
-                response += `Estimated Cost: $${totalCost.toFixed(4)}\n`;
+                response += `Estimated Cost: \\$${escMd(totalCost.toFixed(4))}\n`;
             }
             response += '\n';
             if (groupedStats.length > 0) {
                 response += '*By Provider/Model:*\n';
                 for (const stat of groupedStats) {
-                    response += `\n*${stat.provider}/${stat.model}*\n`;
-                    response += `  Tokens: ${stat.totalTokens.toLocaleString()} (${stat.messageCount} msgs)\n`;
+                    response += `\n*${escMd(stat.provider)}/${escMd(stat.model)}*\n`;
+                    response += `  Tokens: ${escMd(stat.totalTokens.toLocaleString())} \\(${escMd(stat.messageCount)} msgs\\)\n`;
                     if (stat.totalAudioSeconds > 0) {
-                        response += `  Audio: ${stat.totalAudioSeconds.toFixed(1)}s\n`;
+                        response += `  Audio: ${escMd(stat.totalAudioSeconds.toFixed(1))}s\n`;
                     }
                     if (stat.estimatedCostUsd != null) {
-                        response += `  Cost: $${stat.estimatedCostUsd.toFixed(4)}\n`;
+                        response += `  Cost: \\$${escMd(stat.estimatedCostUsd.toFixed(4))}\n`;
                     }
                 }
             }
             else {
-                response += 'No detailed usage statistics available.';
+                response += 'No detailed usage statistics available\\.';
             }
             await ctx.reply(response, { parse_mode: 'MarkdownV2' });
             history.close();
@@ -725,7 +745,7 @@ How can I assist you today?`;
         let response = await this.oracle.chat(prompt);
         if (response) {
             try {
-                await ctx.reply(response, { parse_mode: 'MarkdownV2' });
+                await ctx.reply(toMd(response).text, { parse_mode: 'MarkdownV2' });
             }
             catch {
                 await ctx.reply(response);
@@ -734,62 +754,57 @@ How can I assist you today?`;
         // await ctx.reply(`Command not recognized. Type /help to see available commands.`);
     }
     async handleHelpCommand(ctx, user) {
-        const helpMessage = `
-*Available Commands:*
-
-${this.HELP_MESSAGE}
-
-How can I assist you today?`;
+        const helpMessage = `*Available Commands:*\n\n${this.HELP_MESSAGE}\n\nHow can I assist you today\\?`;
         await ctx.reply(helpMessage, { parse_mode: 'MarkdownV2' });
     }
     async handleZaionCommand(ctx, user) {
         const config = this.config.get();
         let response = '*System Configuration*\n\n';
         response += `*Agent:*\n`;
-        response += `- Name: ${config.agent.name}\n`;
-        response += `- Personality: ${config.agent.personality}\n\n`;
-        response += `*Oracle (LLM):*\n`;
-        response += `- Provider: ${config.llm.provider}\n`;
-        response += `- Model: ${config.llm.model}\n`;
-        response += `- Temperature: ${config.llm.temperature}\n`;
-        response += `- Context Window: ${config.llm.context_window || 100}\n\n`;
+        response += `\\- Name: ${escMd(config.agent.name)}\n`;
+        response += `\\- Personality: ${escMd(config.agent.personality)}\n\n`;
+        response += `*Oracle \\(LLM\\):*\n`;
+        response += `\\- Provider: ${escMd(config.llm.provider)}\n`;
+        response += `\\- Model: ${escMd(config.llm.model)}\n`;
+        response += `\\- Temperature: ${escMd(config.llm.temperature)}\n`;
+        response += `\\- Context Window: ${escMd(config.llm.context_window || 100)}\n\n`;
         // Sati config (falls back to llm if not set)
         const sati = config.sati;
-        response += `*Sati (Memory):*\n`;
+        response += `*Sati \\(Memory\\):*\n`;
         if (sati?.provider) {
-            response += `- Provider: ${sati.provider}\n`;
-            response += `- Model: ${sati.model || config.llm.model}\n`;
-            response += `- Temperature: ${sati.temperature ?? config.llm.temperature}\n`;
-            response += `- Memory Limit: ${sati.memory_limit ?? 1000}\n`;
+            response += `\\- Provider: ${escMd(sati.provider)}\n`;
+            response += `\\- Model: ${escMd(sati.model || config.llm.model)}\n`;
+            response += `\\- Temperature: ${escMd(sati.temperature ?? config.llm.temperature)}\n`;
+            response += `\\- Memory Limit: ${escMd(sati.memory_limit ?? 1000)}\n`;
         }
         else {
-            response += `- Inherits Oracle config\n`;
+            response += `\\- Inherits Oracle config\n`;
         }
         response += '\n';
         // Apoc config (falls back to llm if not set)
         const apoc = config.apoc;
-        response += `*Apoc (DevTools):*\n`;
+        response += `*Apoc \\(DevTools\\):*\n`;
         if (apoc?.provider) {
-            response += `- Provider: ${apoc.provider}\n`;
-            response += `- Model: ${apoc.model || config.llm.model}\n`;
-            response += `- Temperature: ${apoc.temperature ?? 0.2}\n`;
+            response += `\\- Provider: ${escMd(apoc.provider)}\n`;
+            response += `\\- Model: ${escMd(apoc.model || config.llm.model)}\n`;
+            response += `\\- Temperature: ${escMd(apoc.temperature ?? 0.2)}\n`;
             if (apoc.working_dir)
-                response += `- Working Dir: ${apoc.working_dir}\n`;
-            response += `- Timeout: ${apoc.timeout_ms ?? 30000}ms\n`;
+                response += `\\- Working Dir: ${escMd(apoc.working_dir)}\n`;
+            response += `\\- Timeout: ${escMd(apoc.timeout_ms ?? 30000)}ms\n`;
         }
         else {
-            response += `- Inherits Oracle config\n`;
+            response += `\\- Inherits Oracle config\n`;
         }
         response += '\n';
         response += `*Channels:*\n`;
-        response += `- Telegram Enabled: ${config.channels.telegram.enabled}\n`;
-        response += `- Discord Enabled: ${config.channels.discord.enabled}\n\n`;
+        response += `\\- Telegram Enabled: ${escMd(config.channels.telegram.enabled)}\n`;
+        response += `\\- Discord Enabled: ${escMd(config.channels.discord.enabled)}\n\n`;
         response += `*UI:*\n`;
-        response += `- Enabled: ${config.ui.enabled}\n`;
-        response += `- Port: ${config.ui.port}\n\n`;
+        response += `\\- Enabled: ${escMd(config.ui.enabled)}\n`;
+        response += `\\- Port: ${escMd(config.ui.port)}\n\n`;
         response += `*Audio:*\n`;
-        response += `- Enabled: ${config.audio.enabled}\n`;
-        response += `- Max Duration: ${config.audio.maxDurationSeconds}s\n`;
+        response += `\\- Enabled: ${escMd(config.audio.enabled)}\n`;
+        response += `\\- Max Duration: ${escMd(config.audio.maxDurationSeconds)}s\n`;
         await ctx.reply(response, { parse_mode: 'MarkdownV2' });
     }
     async handleSatiCommand(ctx, user, args) {
@@ -814,11 +829,14 @@ How can I assist you today?`;
             if (limit !== null) {
                 selectedMemories = memories.slice(0, Math.min(limit, memories.length));
             }
-            let response = `*${selectedMemories.length} SATI Memories${limit !== null ? ` (Showing first ${selectedMemories.length})` : ''}:*\n\n`;
+            const countLabel = limit !== null
+                ? `${escMd(selectedMemories.length)} SATI Memories \\(Showing first ${escMd(selectedMemories.length)}\\)`
+                : `${escMd(selectedMemories.length)} SATI Memories`;
+            let response = `*${countLabel}:*\n\n`;
             for (const memory of selectedMemories) {
                 // Limitar o tamanho do resumo para evitar mensagens muito longas
                 const truncatedSummary = memory.summary.length > 200 ? memory.summary.substring(0, 200) + '...' : memory.summary;
-                response += `*${memory.category} (${memory.importance}):* ${truncatedSummary}\n\n`;
+                response += `*${escMd(memory.category)} \\(${escMd(memory.importance)}\\):* ${escMd(truncatedSummary)}\n\n`;
             }
             await ctx.reply(response, { parse_mode: 'MarkdownV2' });
         }
@@ -914,11 +932,11 @@ How can I assist you today?`;
                 Construtor.probe(),
             ]);
             if (servers.length === 0) {
-                await ctx.reply('*No MCP Servers Configured*\n\nThere are currently no MCP servers configured in the system.', { parse_mode: 'MarkdownV2' });
+                await ctx.reply('*No MCP Servers Configured*\n\nThere are currently no MCP servers configured in the system\\.', { parse_mode: 'MarkdownV2' });
                 return;
             }
             const probeMap = new Map(probeResults.map(r => [r.name, r]));
-            let response = `*MCP Servers (${servers.length})*\n\n`;
+            let response = `*MCP Servers \\(${escMd(servers.length)}\\)*\n\n`;
             const keyboard = [];
             servers.forEach((server, index) => {
                 const enabledStatus = server.enabled ? '✅ Enabled' : '❌ Disabled';
@@ -926,25 +944,25 @@ How can I assist you today?`;
                 const probe = probeMap.get(server.name);
                 const connectionStatus = probe
                     ? probe.ok
-                        ? `🟢 Connected (${probe.toolCount} tools)`
+                        ? `🟢 Connected \\(${escMd(probe.toolCount)} tools\\)`
                         : `🔴 Failed`
                     : '⚪ Unknown';
-                response += `*${index + 1}. ${server.name}*\n`;
+                response += `*${escMd(index + 1)}\\. ${escMd(server.name)}*\n`;
                 response += `Status: ${enabledStatus}\n`;
                 response += `Connection: ${connectionStatus}\n`;
-                response += `Transport: ${transport}\n`;
+                response += `Transport: ${escMd(transport)}\n`;
                 if (server.config.transport === 'stdio') {
-                    response += `Command: \`${server.config.command}\`\n`;
+                    response += `Command: \`${escMd(server.config.command)}\`\n`;
                     if (server.config.args && server.config.args.length > 0) {
-                        response += `Args: \`${server.config.args.join(' ')}\`\n`;
+                        response += `Args: \`${escMd(server.config.args.join(' '))}\`\n`;
                     }
                 }
                 else if (server.config.transport === 'http') {
-                    response += `URL: \`${server.config.url}\`\n`;
+                    response += `URL: \`${escMd(server.config.url)}\`\n`;
                 }
                 if (probe && !probe.ok && probe.error) {
                     const shortError = probe.error.length > 80 ? probe.error.slice(0, 80) + '…' : probe.error;
-                    response += `Error: \`${shortError}\`\n`;
+                    response += `Error: \`${escMd(shortError)}\`\n`;
                 }
                 response += '\n';
                 if (server.enabled) {
@@ -961,7 +979,7 @@ How can I assist you today?`;
         }
         catch (error) {
             this.display.log('Error listing MCP servers: ' + (error instanceof Error ? error.message : String(error)), { source: 'Telegram', level: 'error' });
-            await ctx.reply('An error occurred while retrieving the list of MCP servers. Please check the logs for more details.', { parse_mode: 'MarkdownV2' });
+            await ctx.reply('An error occurred while retrieving the list of MCP servers\\. Please check the logs for more details\\.', { parse_mode: 'MarkdownV2' });
         }
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "morpheus-cli",
-  "version": "0.4.11",
+  "version": "0.4.13",
   "description": "Morpheus is a local AI agent for developers, running as a CLI daemon that connects to LLMs, local tools, and MCPs, enabling interaction via Terminal, Telegram, and Discord. Inspired by the character Morpheus from *The Matrix*, the project acts as an intelligent orchestrator, bridging the gap between the developer and complex systems.",
   "bin": {
     "morpheus": "./bin/morpheus.js"