natureco-cli 2.23.27 → 2.23.29

package/src/commands/tasks.js

@@ -1,79 +1,328 @@
-const chalk = require('chalk');
-const { loadBackgroundTasks, getBackgroundTask } = require('../utils/background');
-
-async function tasks(action, ...args) {
-  if (!action || action === 'list') {
-    return listTasks();
-  }
-  
-  if (action === 'show') {
-    const id = args[0];
-    if (!id) {
-      console.log(chalk.red('\n❌ Task ID required\n'));
-      console.log(chalk.gray('Usage: natureco tasks show <id>\n'));
-      process.exit(1);
-    }
-    return showTask(id);
-  }
-  
-  console.log(chalk.red(`\n❌ Unknown action: ${action}\n`));
-  console.log(chalk.gray('Available actions: list, show\n'));
-  process.exit(1);
-}
-
-function listTasks() {
-  const tasks = loadBackgroundTasks();
-  
-  if (tasks.length === 0) {
-    console.log(chalk.gray('\nNo background tasks found.\n'));
-    console.log(chalk.gray('Create one by pressing Ctrl+B in chat.\n'));
-    return;
-  }
-  
-  console.log(chalk.yellow('\nBackground Tasks:\n'));
-  
-  tasks.forEach(task => {
-    const statusColor = task.status === 'completed' ? chalk.green : task.status === 'failed' ? chalk.red : chalk.yellow;
-    const status = statusColor(task.status);
-    
-    console.log(`  ${chalk.cyan(task.id)} ${status}`);
-    console.log(chalk.white(`    ${task.message.slice(0, 60)}...`));
-    console.log(chalk.gray(`    Bot: ${task.botName} | Created: ${new Date(task.createdAt).toLocaleString()}`));
-    console.log('');
-  });
-}
-
-function showTask(id) {
-  const task = getBackgroundTask(id);
-  
-  if (!task) {
-    console.log(chalk.red(`\n❌ Task not found: ${id}\n`));
-    process.exit(1);
-  }
-  
-  console.log(chalk.yellow(`\nTask: ${task.id}\n`));
-  console.log(chalk.gray(`Status: ${task.status}`));
-  console.log(chalk.gray(`Bot: ${task.botName}`));
-  console.log(chalk.gray(`Created: ${new Date(task.createdAt).toLocaleString()}`));
-  
-  if (task.completedAt) {
-    console.log(chalk.gray(`Completed: ${new Date(task.completedAt).toLocaleString()}`));
-  }
-  
-  console.log(chalk.cyan('\nMessage:'));
-  console.log(chalk.white(task.message));
-  
-  if (task.result) {
-    console.log(chalk.cyan('\nResult:'));
-    console.log(chalk.white(task.result));
-  }
-  
-  if (task.error) {
-    console.log(chalk.red('\nError:'));
-    console.log(chalk.white(task.error));
-  }
-  
-  console.log('');
-}
-
-module.exports = tasks;
+const chalk = require('chalk');
+const { listTasks, getTask, cancelTask, auditTasks, maintenanceTasks, getTaskSummary, TASK_STATUSES, RUNTIME_TYPES } = require('../utils/background');
+
+function parseFlags(args) {
+  return {
+    json: args.includes('--json') || args.includes('-j'),
+    apply: args.includes('--apply'),
+    runtime: extractFlag(args, '--runtime'),
+    status: extractFlag(args, '--status'),
+    limit: parseInt(extractFlag(args, '--limit') || '50', 10),
+    severity: extractFlag(args, '--severity'),
+  };
+}
+
+function extractFlag(params, name) {
+  const idx = params.indexOf(name);
+  return idx >= 0 && idx + 1 < params.length ? params[idx + 1] : null;
+}
+
+const STATUS_ICONS = {
+  queued: '⏳',
+  running: '🔄',
+  succeeded: '✅',
+  failed: '❌',
+  timed_out: '⏰',
+  cancelled: '🚫',
+  lost: '👻',
+};
+
+const STATUS_COLORS = {
+  queued: chalk.yellow,
+  running: chalk.cyan,
+  succeeded: chalk.green,
+  failed: chalk.red,
+  timed_out: chalk.red,
+  cancelled: chalk.gray,
+  lost: chalk.magenta,
+};
+
+async function tasks(args) {
+  const [action, ...params] = (args || []);
+  const opts = parseFlags(params);
+
+  if (!action || action === 'list') return listTasksHandler(opts);
+  if (action === 'show') return showTaskHandler(params[0], opts);
+  if (action === 'cancel') return cancelTaskHandler(params[0]);
+  if (action === 'audit') return auditHandler(opts);
+  if (action === 'maintenance') return maintenanceHandler(opts);
+  if (action === 'flow' && params[0]) {
+    const flowAction = params[0];
+    const flowParams = params.slice(1);
+    if (flowAction === 'list') return flowListHandler(parseFlags(flowParams));
+    if (flowAction === 'show') return flowShowHandler(flowParams[0], parseFlags(flowParams));
+    if (flowAction === 'cancel') return flowCancelHandler(flowParams[0]);
+  }
+  if (action === 'summary' || action === 'status') return summaryHandler(opts);
+
+  console.log(chalk.red(`\n  ❌ Bilinmeyen komut: ${action}\n`));
+  console.log(chalk.gray('  Kullanım: natureco tasks [list|show|cancel|audit|maintenance|flow|summary]\n'));
+  process.exit(1);
+}
+
+function listTasksHandler(opts) {
+  const tasks = listTasks({ runtime: opts.runtime, status: opts.status, limit: opts.limit });
+
+  if (opts.json) {
+    console.log(JSON.stringify({ tasks, total: tasks.length, filters: { runtime: opts.runtime, status: opts.status } }, null, 2));
+    return;
+  }
+
+  console.log('');
+  console.log(chalk.gray('  ' + '─'.repeat(48)));
+  console.log(chalk.cyan.bold('\n  Background Tasks\n'));
+
+  if (tasks.length === 0) {
+    console.log(chalk.gray('  Hiç task bulunamadı.\n'));
+    if (opts.runtime) console.log(chalk.gray(`  Filtre: runtime=${opts.runtime}`));
+    if (opts.status) console.log(chalk.gray(`  Filtre: status=${opts.status}`));
+    console.log('');
+    return;
+  }
+
+  tasks.forEach(t => {
+    const icon = STATUS_ICONS[t.status] || '❓';
+    const color = STATUS_COLORS[t.status] || chalk.white;
+    const runtimeIcon = t.runtime === 'cron' ? '⏰' : t.runtime === 'subagent' ? '🧑‍💻' : t.runtime === 'acp' ? '🔄' : '💻';
+    const age = getAgeString(t.createdAt);
+    console.log(`  ${icon} ${chalk.white(t.id.slice(0, 12))} ${color(t.status)} ${runtimeIcon}${t.runtime}`);
+    if (t.message) {
+      const msg = t.message.length > 50 ? t.message.slice(0, 50) + '...' : t.message;
+      console.log(chalk.gray(`    ${msg}`));
+    }
+    console.log(chalk.gray(`    ${age} | notify: ${t.notifyPolicy || 'done_only'}`));
+    console.log('');
+  });
+
+  const summary = getTaskSummary();
+  console.log(chalk.gray('  ' + '─'.repeat(48)));
+  console.log(chalk.gray(`  Toplam: ${tasks.length} (gösterilen) | Aktif: ${summary.active} | Hata: ${summary.failures}`));
+  console.log(chalk.gray('  Filtre: ') + chalk.cyan('--runtime <type> --status <status>'));
+  console.log(chalk.gray("  JSON:   ") + chalk.cyan('natureco tasks list --json\n'));
+}
+
+function showTaskHandler(id, opts) {
+  if (!id) {
+    console.log(chalk.red('\n  ❌ Task ID gerekli\n'));
+    console.log(chalk.gray('  Kullanım: natureco tasks show <id>\n'));
+    process.exit(1);
+  }
+
+  const task = getTask(id);
+  if (!task) {
+    console.log(chalk.red(`\n  ❌ Task bulunamadı: ${id}\n`));
+    process.exit(1);
+  }
+
+  if (opts.json) {
+    console.log(JSON.stringify(task, null, 2));
+    return;
+  }
+
+  const color = STATUS_COLORS[task.status] || chalk.white;
+  const icon = STATUS_ICONS[task.status] || '❓';
+
+  console.log('');
+  console.log(chalk.gray('  ' + '─'.repeat(48)));
+  console.log(`\n  ${icon} ${chalk.white('Task:')} ${chalk.cyan(task.id)}`);
+  console.log(`  ${chalk.gray('Durum    :')} ${color(task.status)}`);
+  console.log(`  ${chalk.gray('Runtime  :')} ${chalk.white(task.runtime)}`);
+  console.log(`  ${chalk.gray('Bot      :')} ${chalk.white(task.botName)}`);
+  if (task.message) console.log(`  ${chalk.gray('Mesaj    :')} ${chalk.white(task.message)}`);
+  console.log(`  ${chalk.gray('Oluşturma:')} ${chalk.white(formatTime(task.createdAt))}`);
+  if (task.startedAt) console.log(`  ${chalk.gray('Başlangıç:')} ${chalk.white(formatTime(task.startedAt))}`);
+  if (task.endedAt) console.log(`  ${chalk.gray('Bitiş    :')} ${chalk.white(formatTime(task.endedAt))}`);
+  if (task.notifyPolicy) console.log(`  ${chalk.gray('Bildirim :')} ${chalk.white(task.notifyPolicy)}`);
+  if (task.childSessionKey) console.log(`  ${chalk.gray('Çocuk    :')} ${chalk.gray(task.childSessionKey)}`);
+  if (task.runId) console.log(`  ${chalk.gray('Run ID   :')} ${chalk.gray(task.runId)}`);
+
+  if (task.result) {
+    console.log(`\n  ${chalk.cyan('Sonuç:')}`);
+    console.log(`  ${chalk.white(task.result)}`);
+  }
+  if (task.error) {
+    console.log(`\n  ${chalk.red('Hata:')}`);
+    console.log(`  ${chalk.white(task.error)}`);
+  }
+  if (task.cleanupAfter) {
+    console.log(`\n  ${chalk.gray(`Temizlik: ${formatTime(task.cleanupAfter)}`)}`);
+  }
+  if (task.metadata && Object.keys(task.metadata).length > 0) {
+    console.log(`\n  ${chalk.gray('Metadata:')}`);
+    Object.entries(task.metadata).forEach(([k, v]) => console.log(`    ${k}: ${v}`));
+  }
+  console.log('');
+}
+
+function cancelTaskHandler(id) {
+  if (!id) {
+    console.log(chalk.red('\n  ❌ Task ID gerekli\n'));
+    console.log(chalk.gray('  Kullanım: natureco tasks cancel <id>\n'));
+    process.exit(1);
+  }
+
+  const result = cancelTask(id);
+  if (!result) {
+    console.log(chalk.red(`\n  ❌ Task bulunamadı: ${id}\n`));
+    process.exit(1);
+  }
+
+  if (result.status === 'cancelled') {
+    console.log(chalk.green(`\n  ✓ Task iptal edildi: ${id}\n`));
+  } else {
+    console.log(chalk.yellow(`\n  ⚠ Task zaten terminal durumda: ${result.status}\n`));
+  }
+}
+
+function auditHandler(opts) {
+  const findings = auditTasks();
+
+  if (opts.json) {
+    console.log(JSON.stringify({ findings, total: findings.length }, null, 2));
+    return;
+  }
+
+  console.log('');
+  console.log(chalk.gray('  ' + '─'.repeat(48)));
+  console.log(chalk.cyan.bold('\n  Task Denetimi\n'));
+
+  if (findings.length === 0) {
+    console.log(chalk.green('  ✓ Sorun bulunamadı.\n'));
+    return;
+  }
+
+  let filtered = findings;
+  if (opts.severity) {
+    filtered = findings.filter(f => f.severity === opts.severity);
+  }
+
+  const errors = filtered.filter(f => f.severity === 'error');
+  const warnings = filtered.filter(f => f.severity === 'warn');
+
+  if (errors.length > 0) {
+    console.log(chalk.red(`\n  ${errors.length} HATA\n`));
+    errors.forEach(f => {
+      console.log(`  ${chalk.red('✗')} ${chalk.white(f.id.slice(0, 12))} ${chalk.red(f.code)}`);
+      console.log(chalk.gray(`    ${f.message}`));
+    });
+  }
+
+  if (warnings.length > 0) {
+    console.log(chalk.yellow(`\n  ${warnings.length} UYARI\n`));
+    warnings.forEach(f => {
+      console.log(`  ${chalk.yellow('⚠')} ${chalk.white(f.id.slice(0, 12))} ${chalk.yellow(f.code)}`);
+      console.log(chalk.gray(`    ${f.message}`));
+    });
+  }
+
+  console.log(chalk.gray(`\n  Toplam: ${filtered.length} bulgu`));
+  console.log(chalk.gray(`  Bakım: natureco tasks maintenance --apply\n`));
+}
+
+function maintenanceHandler(opts) {
+  console.log(chalk.cyan('\n  Task Bakımı\n'));
+
+  const dryRun = !opts.apply;
+  const result = maintenanceTasks(dryRun);
+
+  if (dryRun) {
+    console.log(chalk.gray('  Kuru çalışma (--apply ile uygula)\n'));
+  }
+
+  console.log(chalk.gray(`  Temizlenen   : ${result.pruned}`));
+  console.log(chalk.gray(`  Düzeltilen   : ${result.reconciled}`));
+  console.log(chalk.gray(`  Etiketlenen  : ${result.cleaned}`));
+  console.log(chalk.gray(`  Kalan task   : ${result.remaining}`));
+
+  if (result.pruned > 0 || result.reconciled > 0 || result.cleaned > 0) {
+    if (dryRun) {
+      console.log(chalk.gray(`\n  Uygulamak için: natureco tasks maintenance --apply`));
+    } else {
+      console.log(chalk.green(`\n  ✓ Bakım uygulandı.\n`));
+    }
+  } else {
+    console.log(chalk.green(`\n  ✓ Bakım gerekmiyor.\n`));
+  }
+  console.log('');
+}
+
+function flowListHandler(opts) {
+  const tasks = listTasks({ runtime: 'acp', limit: opts.limit || 50 });
+
+  if (opts.json) {
+    console.log(JSON.stringify({ flows: tasks, total: tasks.length }, null, 2));
+    return;
+  }
+
+  console.log('');
+  console.log(chalk.gray('  ' + '─'.repeat(48)));
+  console.log(chalk.cyan.bold('\n  Task Flow\n'));
+
+  if (tasks.length === 0) {
+    console.log(chalk.gray('  Task Flow kaydı yok.\n'));
+    return;
+  }
+
+  tasks.forEach(t => {
+    const icon = STATUS_ICONS[t.status] || '❓';
+    const color = STATUS_COLORS[t.status] || chalk.white;
+    console.log(`  ${icon} ${chalk.white(t.id.slice(0, 12))} ${color(t.status)}`);
+    if (t.message) console.log(chalk.gray(`    ${t.message.slice(0, 60)}`));
+  });
+  console.log(chalk.gray(`\n  Toplam: ${tasks.length} flow\n`));
+}
+
+function flowShowHandler(id, opts) {
+  if (!id) {
+    console.log(chalk.red('\n  ❌ Flow ID gerekli\n'));
+    process.exit(1);
+  }
+  return showTaskHandler(id, opts);
+}
+
+function flowCancelHandler(id) {
+  if (!id) {
+    console.log(chalk.red('\n  ❌ Flow ID gerekli\n'));
+    process.exit(1);
+  }
+  return cancelTaskHandler(id);
+}
+
+function summaryHandler(opts) {
+  const summary = getTaskSummary();
+
+  if (opts.json) {
+    console.log(JSON.stringify(summary, null, 2));
+    return;
+  }
+
+  console.log('');
+  console.log(chalk.gray('  ' + '─'.repeat(48)));
+  console.log(chalk.cyan.bold('\n  Task Özeti\n'));
+  console.log(chalk.gray('  Aktif    : ') + (summary.active > 0 ? chalk.yellow(summary.active) : chalk.green('0')));
+  console.log(chalk.gray('  Hatalı   : ') + (summary.failures > 0 ? chalk.red(summary.failures) : chalk.green('0')));
+  console.log(chalk.gray('  Toplam   : ') + chalk.white(summary.total));
+  console.log(chalk.gray('\n  Runtime Dağılımı'));
+  Object.entries(summary.byRuntime).forEach(([rt, count]) => {
+    if (count > 0) console.log(chalk.gray(`    ${rt.padEnd(10)}: ${count}`));
+  });
+  console.log('');
+}
+
+function getAgeString(dateStr) {
+  const ms = Date.now() - new Date(dateStr).getTime();
+  const sec = Math.floor(ms / 1000);
+  if (sec < 60) return `${sec}s önce`;
+  const min = Math.floor(sec / 60);
+  if (min < 60) return `${min}dk önce`;
+  const hr = Math.floor(min / 60);
+  if (hr < 24) return `${hr}sa önce`;
+  const days = Math.floor(hr / 24);
+  return `${days}g önce`;
+}
+
+function formatTime(dateStr) {
+  return new Date(dateStr).toLocaleString('tr-TR');
+}
+
+module.exports = tasks;

package/src/commands/webhooks.js

@@ -0,0 +1,79 @@
+const chalk = require('chalk');
+const inquirer = require('../utils/inquirer-wrapper');
+const { getConfig, saveConfig } = require('../utils/config');
+
+async function webhooks(action) {
+  if (!action || action === 'connect') return connectWebhook();
+  if (action === 'disconnect') return disconnectWebhook();
+  if (action === 'status') return statusWebhooks();
+  if (action === 'list') return listWebhooks();
+  console.log(chalk.red('\n❌ Unknown action\n'));
+  console.log(chalk.gray('Available actions: connect, disconnect, status, list\n'));
+  process.exit(1);
+}
+
+async function connectWebhook() {
+  const config = getConfig();
+  if (!config.providerUrl) { console.log(chalk.red('\n❌ Setup yapılmamış. Önce "natureco setup" çalıştırın.\n')); process.exit(1); }
+  console.log(chalk.yellow('\n⏳ Webhook bağlantısı hazırlanıyor...\n'));
+  console.log(chalk.gray('Gelen webhook\'lar NatureCo\'nun gateway\'ine yönlendirilir.\n'));
+  const answers = await inquirer.prompt([
+    { type: 'input', name: 'name', message: 'Webhook adı:', validate: v => v.trim() ? true : 'Gerekli' },
+    { type: 'input', name: 'path', message: 'Webhook yolu (örn: /my-webhook):', validate: v => v.startsWith('/') ? true : 'Yol / ile başlamalı' },
+    { type: 'input', name: 'secret', message: 'Webhook secret (opsiyonel):' },
+  ]);
+  const webhooks = config.webhooks || [];
+  const entry = {
+    id: `webhook_${Date.now()}`,
+    name: answers.name.trim(),
+    path: answers.path.trim(),
+    secret: answers.secret.trim() || '',
+    createdAt: new Date().toISOString(),
+  };
+  webhooks.push(entry);
+  config.webhooks = webhooks;
+  config.webhookEnabled = true;
+  saveConfig(config);
+  console.log(chalk.green('\n✅ Webhook eklendi!\n'));
+  console.log(chalk.cyan('ID:'), chalk.white(entry.id));
+  console.log(chalk.cyan('İsim:'), chalk.white(entry.name));
+  console.log(chalk.cyan('Yol:'), chalk.white(entry.path));
+  console.log(chalk.gray('\nGateway ile başlatmak için: natureco gateway start\n'));
+}
+
+async function disconnectWebhook() {
+  const config = getConfig();
+  const webhooks = config.webhooks || [];
+  if (webhooks.length === 0) { console.log(chalk.gray('\n⚠️  No webhooks configured\n')); return; }
+  const { confirm } = await inquirer.prompt([{ type: 'confirm', name: 'confirm', message: 'Tüm webhook\'ları kaldırmak istediğinize emin misiniz?', default: false }]);
+  if (!confirm) { console.log(chalk.gray('\nCancelled\n')); return; }
+  delete config.webhooks;
+  delete config.webhookEnabled;
+  saveConfig(config);
+  console.log(chalk.green('\n✅ All webhooks removed\n'));
+}
+
+function listWebhooks() {
+  const config = getConfig();
+  const webhooks = config.webhooks || [];
+  if (webhooks.length === 0) { console.log(chalk.gray('\n⚠️  No webhooks configured\n')); return; }
+  console.log(chalk.green(`\n✅ ${webhooks.length} webhook(s) configured\n`));
+  webhooks.forEach(w => {
+    console.log(chalk.cyan('  ID:'), chalk.white(w.id));
+    console.log(chalk.cyan('  İsim:'), chalk.white(w.name));
+    console.log(chalk.cyan('  Yol:'), chalk.white(w.path));
+    if (w.secret) console.log(chalk.cyan('  Secret:'), chalk.gray('✓ ayarlı'));
+    console.log('');
+  });
+}
+
+function statusWebhooks() {
+  const config = getConfig();
+  const webhooks = config.webhooks || [];
+  if (webhooks.length === 0) { console.log(chalk.gray('\n⚠️  No webhooks configured\n')); console.log(chalk.gray('Add with: natureco webhooks connect\n')); return; }
+  console.log(chalk.green(`\n✅ Webhooks active (${webhooks.length} route(s))\n`));
+  webhooks.forEach(w => console.log(chalk.white(`  ${w.path} → ${w.name}`)));
+  console.log(chalk.gray('\nDisconnect with: natureco webhooks disconnect\n'));
+}
+
+module.exports = webhooks;

package/src/commands/whatsapp.js

@@ -7,25 +7,11 @@ const os = require('os');
 const pino = require('pino');
 const { getApiKey, getConfig, saveConfig } = require('../utils/config');
 const { getBots, sendMessage } = require('../utils/api');
+const { loadBaileys } = require('../utils/baileys');
+const { NatureCoError, ChannelError, handleError } = require('../utils/errors');
 
-// Baileys imports
-let makeWASocket, useMultiFileAuthState, DisconnectReason, fetchLatestBaileysVersion, Browsers;
-
-// Logger
 const logger = pino({ level: 'silent' });
 
-// Lazy load Baileys (only when needed)
-function loadBaileys() {
-  if (!makeWASocket) {
-    const baileys = require('@whiskeysockets/baileys');
-    makeWASocket = baileys.default;
-    useMultiFileAuthState = baileys.useMultiFileAuthState;
-    DisconnectReason = baileys.DisconnectReason;
-    fetchLatestBaileysVersion = baileys.fetchLatestBaileysVersion;
-    Browsers = baileys.Browsers;
-  }
-}
-
 // WhatsApp session directory
 const WHATSAPP_SESSION_DIR = path.join(os.homedir(), '.natureco', 'whatsapp-sessions');
 
@@ -73,9 +59,6 @@ async function connectWhatsApp() {
   console.log(chalk.cyan('\n📱 WhatsApp bağlantısı başlatılıyor...'));
   console.log(chalk.gray('Telefonunuzda WhatsApp\'ı açın ve QR kodu taratın.\n'));
   
-  // Load Baileys
-  loadBaileys();
-  
   // Create session directory
   const sessionDir = path.join(WHATSAPP_SESSION_DIR, botId);
   if (!fs.existsSync(sessionDir)) {
@@ -88,6 +71,8 @@ async function connectWhatsApp() {
 
 async function startWhatsAppConnection(sessionDir, botId, selectedBot, config) {
   try {
+    const { makeWASocket, useMultiFileAuthState, DisconnectReason, fetchLatestBaileysVersion, Browsers } = loadBaileys();
+    
     // Create auth state
     const { state, saveCreds } = await useMultiFileAuthState(sessionDir);
     
@@ -197,8 +182,9 @@ async function startWhatsAppConnection(sessionDir, botId, selectedBot, config) {
     });
     
   } catch (err) {
-    console.log(chalk.red(`\n❌ Connection failed: ${err.message}\n`));
-    if (err.message.includes('Cannot find module')) {
+    const msg = err instanceof NatureCoError ? err.message : err?.message ?? 'Unknown error';
+    console.log(chalk.red(`\n❌ Connection failed: ${msg}\n`));
+    if (err?.message?.includes('Cannot find module')) {
       console.log(chalk.yellow('⚠️  Baileys paketi yüklü değil. Yükleniyor...\n'));
       console.log(chalk.gray('Lütfen şu komutu çalıştırın:\n'));
       console.log(chalk.cyan('npm install -g @whiskeysockets/baileys pino\n'));

package/src/tools/bash.js

@@ -1,5 +1,7 @@
 const { execSync } = require('child_process');
 const os = require('os');
+const chalk = require('chalk');
+const { isDangerousCommand, checkCommand, isSafeCommand } = require('../utils/approvals');
 
 module.exports = {
   name: 'bash',
@@ -17,43 +19,75 @@ module.exports = {
   
   async execute(params) {
     try {
-      // Security: Block dangerous commands
-      const DANGEROUS_COMMANDS = ['kill', 'rm -rf', 'sudo rm', 'pkill', 'killall', 'shutdown', 'reboot', 'format'];
-      const isDangerous = DANGEROUS_COMMANDS.some(cmd => params.command.includes(cmd));
-      
-      if (isDangerous) {
+      if (!params.command || !params.command.trim()) {
+        return { success: false, error: 'No command provided' };
+      }
+
+      const command = params.command;
+
+      // Skip approval checks for safe commands
+      if (isSafeCommand(command)) {
+        return runCommand(command);
+      }
+
+      // Check command against approvals policy
+      const approval = await checkCommand(command, { agentId: 'default' });
+
+      if (!approval.allowed) {
+        if (approval.reason === 'denied-by-policy') {
+          return {
+            success: false,
+            error: 'Command execution is denied by security policy. Use "natureco security allowlist add" to allow specific commands.',
+          };
+        }
+        if (approval.reason === 'not-in-allowlist') {
+          return {
+            success: false,
+            error: 'Command is not in the allowlist. Use "natureco security allowlist add" to add it, or set a less restrictive policy.',
+          };
+        }
+        return { success: false, error: `Command rejected: ${approval.reason}` };
+      }
+
+      // Check for dangerous commands that weren't already user-approved
+      if (isDangerousCommand(command)) {
+        console.log(chalk.yellow('\n  ⚠️  Potentially dangerous command'));
+        console.log(chalk.gray('  ') + command);
+        console.log('');
         return {
           success: false,
-          error: 'Bu komut güvenlik nedeniyle engellendi. Kullanıcıdan onay alınması gerekiyor.'
+          error: 'Dangerous command blocked. Run manually after review.',
         };
       }
-      
-      // Replace /home with actual home directory (Unix only)
-      // Handles: /home, /home/Documents, /home/anything
-      let command = params.command;
-      if (process.platform !== 'win32') {
-        command = command.replace(/\/home(\/[^\s]*)?/g, (match, subpath) => {
-          return os.homedir() + (subpath || '');
-        });
-      }
-      
-      const output = execSync(command, {
-        encoding: 'utf-8',
-        maxBuffer: 10 * 1024 * 1024, // 10MB
-        timeout: 30000, // 30 seconds
-        shell: true // Use shell for command execution
-      });
-      
-      return {
-        success: true,
-        output: output.trim()
-      };
+
+      return runCommand(approval.editedCommand || command);
     } catch (error) {
       return {
         success: false,
-        error: error.message,
-        stderr: error.stderr?.toString() || ''
+        error: error?.message ?? 'Unknown error',
+        stderr: error?.stderr?.toString() ?? '',
       };
     }
   }
 };
+
+function runCommand(command) {
+  let cmd = command;
+  if (process.platform !== 'win32') {
+    cmd = cmd.replace(/\/home(\/[^\s]*)?/g, (match, subpath) => {
+      return os.homedir() + (subpath || '');
+    });
+  }
+
+  const output = execSync(cmd, {
+    encoding: 'utf-8',
+    maxBuffer: 10 * 1024 * 1024,
+    timeout: 30000,
+    shell: true,
+  });
+
+  return {
+    success: true,
+    output: output.trim(),
+  };
+}