natureco-cli 5.29.0 → 5.30.0

package/CHANGELOG.md

@@ -2,6 +2,15 @@
 
 All notable changes to NatureCo CLI will be documented in this file.
 
+## [5.30.0] - 2026-07-04 — "TAM KONTROL MODU (sahip opt-in: tüm araç+skill + computer-use)"
+
+### ✨ Yeni
+- **Tam kontrol modu** (`natureco config set agentExec full` veya `NATURECO_AGENT_EXEC=full`): sahibi opt-in yapinca ajan **TUM araclara + skill'lere** erisir ve **her shell komutunu** calistirabilir (yikici komutlar — rm -rf — tam modda bile bloklu kalir). Computer-use araclari: `mac_app_open` (WhatsApp/Chrome/Spotify ac), `browser` (Playwright otomasyonu), `computer_use` (GUI: tikla/yaz/ekran goruntusu), `social_open` (muzik/video), `macos_screenshot`. Full modda sistem prompt'u bu araclari modele tanitir ("yapamam deme, ilgili araci cagir").
+- Safe modda (varsayilan) `open`/`start`/`xdg-open` (uygulama/URL ac) da izinli — asistan temel acma islerini yapar.
+- **Iki kademeli guvenlik**: Safe (varsayilan, milyonlar) = dosya araclari + guvenli shell. Full (sahip opt-in) = her sey. Katmanli: yikici-komut guard her modda aktif.
+
+Doğrulama: full modda `browser` araci E2E (example.com → "Example Domain"); **492 test yeşil**, ESLint temiz.
+
 ## [5.29.0] - 2026-07-04 — "ask KUTU-ÇIKIŞI DÜZELTMESİ + çekirdek komut denetimi"
 
 ### 🐛 Düzeltme

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "natureco-cli",
-  "version": "5.29.0",
+  "version": "5.30.0",
   "description": "OpenClaw'dan daha güvenli, daha hızlı, daha ucuz AI agent CLI. Multi-agent, self-evolving skills, audit log, maliyet optimizasyonu ve NatureCo platform-native.",
   "bin": {
     "natureco": "bin/natureco.js"

package/src/tools/agentic-runner.js

@@ -62,13 +62,18 @@ const AGENT_EXEC_ALLOW = new Set([
   'ls', 'dir', 'cat', 'type', 'head', 'tail', 'pwd', 'echo', 'printf', 'grep', 'findstr',
   'find', 'wc', 'which', 'where', 'whereis', 'tree', 'stat', 'file', 'sort', 'uniq', 'diff',
   'mkdir', 'touch', 'cp', 'copy', 'mv', 'move', 'git', 'jq', 'sed', 'awk', 'date', 'env', 'whoami',
+  'open', 'start', 'xdg-open', 'explorer', // uygulama/URL/dosya ac (dusuk risk, asistan icin gerekli)
 ]);
 const AGENT_EXEC_BLOCK_PATTERNS = [
   /\bnpm\s+publish\b/i, /\byarn\s+publish\b/i, /\bpnpm\s+publish\b/i,
   /\bgit\s+push\b/i, /\bgit\s+remote\s+(add|set-url)\b/i,
   /\bnpm\s+(un)?deprecate\b/i, /\bnpm\s+owner\b/i,
 ];
-function agentExecAllowed(command) {
+// Full modda ("agentExec: full") acilan computer-use araclari: tarayici otomasyonu,
+// uygulama ac/kapat, GUI (tikla/yaz/ekran goruntusu). Safe modda (varsayilan) KAPALI.
+const FULL_TOOLS = ['browser', 'browser_use', 'mac_app_open', 'mac_app_quit', 'social_open', 'computer_use', 'macos_screenshot'];
+function agentExecAllowed(command, opts) {
+  if (opts && opts.full) return true;
   if (String(process.env.NATURECO_AGENT_EXEC || '').toLowerCase() === 'full') return true;
   const cmd = String(command || '').trim();
   if (!cmd) return false;
@@ -262,9 +267,10 @@ async function executeCall(call, opts = {}) {
     return { records, feedback: feedbacks.join('\n') };
   }
 
-  if (!allowed.has(norm)) {
-    records.push({ tool: rawTool, status: 'error', error: 'Bu modda kullanilamayan arac: ' + rawTool });
-    return { records, feedback: `${rawTool}: bu arac bu modda kullanilamaz (izin verilenler: ${[...allowed].join(', ')})` };
+  // Full modda (sahibin opt-in'i) TUM araclar acik; safe modda sadece allowlist.
+  if (!opts.execFull && !allowed.has(norm)) {
+    records.push({ tool: rawTool, status: 'error', error: 'Guvenli modda kapali arac: ' + rawTool });
+    return { records, feedback: `${rawTool}: guvenli modda kapali. Tum arac+skill'ler icin tam mod: "natureco config set agentExec full" (veya NATURECO_AGENT_EXEC=full). Guvenli modda acik: ${[...allowed].join(', ')}` };
   }
 
   const args = { ...(call.args || {}) };
@@ -285,10 +291,10 @@ async function executeCall(call, opts = {}) {
       records.push({ tool: 'bash', status: 'error', args: { command: cmd }, error: 'Yikici/tehlikeli komut ajan modunda engellendi' });
       return { records, feedback: `bash: "${cmd.slice(0, 80)}" yikici/tehlikeli goruldugu icin ajan tarafindan CALISTIRILMADI. Gerekirse kullanici komutu kendisi calistirabilir.` };
     }
-    const execOk = opts.agentExecAllowed || agentExecAllowed;
+    const execOk = opts.agentExecAllowed || ((c) => agentExecAllowed(c, { full: opts.execFull }));
     if (!execOk(cmd)) {
-      records.push({ tool: 'bash', status: 'error', args: { command: cmd }, error: 'Ajan exec politikasi disinda' });
-      return { records, feedback: `bash: "${cmd.slice(0, 80)}" ajan guvenlik politikasi disinda (ag/yayin/sistem komutu olabilir). Otomatik CALISTIRILMADI. Kullanici manuel calistirabilir; tum komutlara izin: NATURECO_AGENT_EXEC=full.` };
+      records.push({ tool: 'bash', status: 'error', args: { command: cmd }, error: 'Guvenli mod exec politikasi disinda' });
+      return { records, feedback: `bash: "${cmd.slice(0, 80)}" guvenli mod politikasi disinda (ag/yayin/sistem). Tam kontrol icin: "natureco config set agentExec full" (veya NATURECO_AGENT_EXEC=full). Yikici komutlar (rm -rf) tam modda bile bloklu.` };
     }
   }
 
@@ -320,12 +326,12 @@ async function executeCall(call, opts = {}) {
  * callModel(messages) => Promise<{ content, toolCalls }>
  * Donus: { records, reply, iterations }
  */
-async function runAgentic({ callModel, systemPrompt, historyMessages, task, toolsDir, loadTool, allowed, maxIterations = 15 }) {
+async function runAgentic({ callModel, systemPrompt, historyMessages, task, toolsDir, loadTool, allowed, execFull, maxIterations = 15 }) {
   const messages = [{ role: 'system', content: systemPrompt }];
   for (const mm of historyMessages || []) messages.push({ role: mm.role, content: mm.content || '' });
   messages.push({ role: 'user', content: task });
 
-  const allowedSet = allowed ? new Set(allowed) : new Set(DEFAULT_ALLOWED);
+  const allowedSet = allowed ? new Set(allowed) : new Set([...DEFAULT_ALLOWED, ...(execFull ? FULL_TOOLS : [])]);
   const allRecords = [];
   let finalReply = '';
   let iterations = 0;
@@ -343,7 +349,7 @@ async function runAgentic({ callModel, systemPrompt, historyMessages, task, tool
     messages.push({ role: 'assistant', content: content || '' });
     const feedbacks = [];
     for (const call of calls) {
-      const { records, feedback } = await executeCall(call, { toolsDir, loadTool, allowed: allowedSet });
+      const { records, feedback } = await executeCall(call, { toolsDir, loadTool, allowed: allowedSet, execFull });
       allRecords.push(...records);
       feedbacks.push(feedback);
     }

package/src/tools/workflow.js

@@ -222,6 +222,23 @@ async function workflow(params) {
       const { runAgentic } = require('./agentic-runner');
       const memCtx = memoryContext();
       const desktop = path.join(os.homedir(), 'Desktop');
+      // Tam mod (sahibin opt-in'i): tum arac+skill'ler acilir, keyfi shell (yikici haric).
+      const execFull = cfg.agentExec === 'full' || cfg.computerUse === true || String(process.env.NATURECO_AGENT_EXEC || '').toLowerCase() === 'full';
+      let fullToolsBlock = '';
+      if (execFull) {
+        const allNames = tools.filter(t => t !== 'workflow');
+        fullToolsBlock = [
+          '\n\nTAM MOD ACIK — su araclara da ERISIMIN VAR; o an ne gerekiyorsa dogrudan cagir:',
+          '- mac_app_open: macOS uygulamasi ac. parametre: appName (orn. "WhatsApp", "Google Chrome", "Spotify")',
+          '- mac_app_quit: macOS uygulamasi kapat. parametre: appName',
+          '- browser: tarayici otomasyonu (Playwright). parametreler: action ("open"/"screenshot"/"html"/"evaluate"), url, script',
+          '- computer_use: GUI otomasyonu. parametreler: action ("screenshot"/"click"/"type"/"keypress"/"scroll"), x, y, text, key',
+          '- social_open: muzik/video/sosyal ac. parametreler: query, platform (spotify/youtube...)',
+          '- macos_screenshot: ekran goruntusu al',
+          '- bash ile de acabilirsin: "open -a WhatsApp", "open https://...", "start chrome https://..."',
+          '\nTum arac listesi (isimle cagir; parametre yanlissa <tool_results> duzeltir): ' + allNames.join(', '),
+        ].join('\n');
+      }
       const sysMsg = [
         'Sen NatureCo adli, arac kullanabilen bir yapay zeka ajanisin. Kullanicinin istegini SADECE anlatarak degil, ARACLARI cagirarak fiilen gerceklestir.',
         memCtx ? '\nKullanici bilgisi:\n' + memCtx : '',
@@ -244,6 +261,8 @@ async function workflow(params) {
         '- Goreceli yol yerine TAM yol kullan.',
         '- Arac sonuclari <tool_results> icinde geri gelir; gorev bitince ARAC CAGIRMADAN tek cumlelik ozet yaz.',
         '- Basit sohbet/selamlasma ise arac cagirma, dogrudan kisa yanit ver.',
+        execFull ? '- Kullanici uygulama ac / tarayici kontrol / muzik cal / ekran / GUI istediyse yukaridaki computer-use araclarini KULLAN — "yapamam/engellendi" DEME, dogrudan ilgili araci cagir.' : '',
+        fullToolsBlock,
         skillsIndexBlock ? '\n\n' + skillsIndexBlock : '',
       ].filter(Boolean).join('\n');
 
@@ -276,7 +295,7 @@ async function workflow(params) {
       try {
         const { records, reply } = await runAgentic({
           callModel, systemPrompt: sysMsg, historyMessages, task,
-          toolsDir: __dirname, maxIterations: 15,
+          toolsDir: __dirname, execFull, maxIterations: 15,
         });
         const fileWrites = records.filter(r => r.tool === 'write_file' && r.status === 'done');
         let finalReply = reply || '';