natureco-cli 5.43.0 → 5.43.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/CHANGELOG.md +5 -0
  2. package/README.md +578 -609
  3. package/package.json +1 -1
  4. package/src/utils/config.js +4 -1
package/CHANGELOG.md CHANGED
@@ -2,6 +2,11 @@
2
2
 
3
3
  All notable changes to NatureCo CLI will be documented in this file.
4
4
 
5
+ ## [5.43.1] - 2026-07-08 — "SECURITY: config restore artık 0600 izniyle yazıyor"
6
+
7
+ ### Security
8
+ - **`restoreConfig()` config.json'ı zayıf izinle yeniden yazıyordu**: v5.43.0'da `saveConfig()` ve `createBackup()` `0600`/chmod ile korunmuştu ama `restoreConfig()` atlanmıştı — bir yedekten geri yükleme (`config restore`) API anahtarları içeren aktif `config.json`'ı yeniden dünya-okunabilir (`0644`) hale getiriyordu. Artık `saveConfig()` ile aynı şekilde `{ mode: 0o600 }` + `chmodSync` fallback ile yazılır. Regresyon testi eklendi (POSIX). 568 test yeşil, ESLint temiz.
9
+
5
10
  ## [5.43.0] - 2026-07-08 — "SECURITY: 9 açık kapatıldı (3 turluk güvenlik incelemesi)"
6
11
 
7
12
  ### Security
package/README.md CHANGED
@@ -1,609 +1,578 @@
1
- # NatureCo CLI
2
-
3
- [![npm version](https://img.shields.io/npm/v/natureco-cli)](https://www.npmjs.com/package/natureco-cli)
4
- [![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](https://opensource.org/licenses/MIT)
5
- [![Platform](https://img.shields.io/badge/platform-macOS%20%7C%20Windows%20%7C%20Linux-blue)]()
6
- [![Node](https://img.shields.io/badge/node-%3E%3D16.0.0-brightgreen)]()
7
- [![Downloads](https://img.shields.io/npm/dm/natureco-cli)](https://www.npmjs.com/package/natureco-cli)
8
- [![Stars](https://img.shields.io/github/stars/natureco-official/natureco-cli)](https://github.com/natureco-official/natureco-cli)
9
-
10
- > **Yapay Zekânın Gücü artık parmaklarının ucunda.**
11
- > *Terminalin hızını NatureCo ile keşfet.*
12
-
13
- Terminal-native AI agent CLI — sohbet et, kod yaz, workflow'ları otomatikleştir, **Telegram / Discord / Slack / WhatsApp / iMessage** bağla.
14
-
15
- **Claude Code alternatifi** · Multi-agent orkestrasyon · Slash-prefix sistemi · Dangerous Command Approval · 12 provider, 200+ model · 57 tool · 10 mesajlaşma kanalı · 3-dosya kişilik sistemi
16
-
17
- ```
18
- ███╗ ██╗ █████╗ ████████╗██╗ ██╗██████╗ ███████╗ ██████╗ ██████╗
19
- ████╗ ██║██╔══██╗╚══██╔══╝██║ ██║██╔══██╗██╔════╝██╔════╝ ██╔═══██╗
20
- ██╔██╗ ██║███████║ ██║ ██║ ██║██████╔╝█████╗ ██║ ██║ ██║
21
- ██║╚██╗██║██╔══██║ ██║ ██║ ██║██╔══██╗██╔══╝ ██║ ██║ ██║
22
- ██║ ╚████║██║ ██║ ██║ ╚██████╔╝██║ ██║███████╗╚██████╗ ╚██████╔╝
23
- ╚═╝ ╚═══╝╚═╝ ╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚═╝╚══════╝ ╚═════╝ ╚═════╝
24
- ```
25
-
26
- ---
27
-
28
- ## 🚀 Hızlı Başlangıç
29
-
30
- ```bash
31
- # 1. Kur
32
- npm install -g natureco-cli
33
-
34
- # 2. İlk kurulum sihirbazı (provider, model, bot adı)
35
- natureco setup
36
-
37
- # 3. Sohbet başlat
38
- natureco chat
39
-
40
- # 4. Veya kod ajanı
41
- natureco code
42
- ```
43
-
44
- **30 saniyede hazır.** İlk açılışta sihirbaz seni karşılar: provider seç → API key gir → model seç → bot adı belirle. Hepsi bu.
45
-
46
- ---
47
-
48
- ## 🆕 v5.6.x Yenilikler
49
-
50
- ### v5.6.47 — Sharded Memory Sistemi
51
-
52
- Ajanın kişiliği & çalışma notları artık **6 dosyaya sharded** — sonsuz ölçeklenebilir:
53
-
54
- ```
55
- soul/
56
- ├── SOUL.md ← index + kritik referanslar
57
- └── notes/
58
- ├── INDEX.md ← dosya haritası, navigasyon
59
- ├── note1.md ← Patron & persona
60
- ├── note2.md ← proje yapısı, 120+ komut
61
- ├── note3.md ← tokens, kırmızı çizgiler, masking çözümleri
62
- ├── note4.md ← 7-adım release workflow
63
- └── note5.md ← skills, tools, channels, MCP
64
- ```
65
-
66
- - **Sonsuz ölçeklenebilir** — `note6.md`, `note7.md`... ihtiyaç oldukça
67
- - **Cross-project pattern** — mirrors a global sharded memory system (e.g. `~/.notes/{1-5}.md`)
68
- - **Hafıza kaybı yok** — detay 6 sharded dosyada, SOUL.md'de sadece referanslar
69
- - **Patch-cascade safe** — release workflow `note4.md`'de belgelenmiş, gelecekte tutarlı
70
-
71
- ### Slash-Prefix Komut Sistemi
72
-
73
- **İMessage ve WhatsApp'ta** artık `/` ile başlayan mesajlar komut olarak işlenir:
74
-
75
- ```
76
- You > /selam nasılsın
77
- AI Selam selam! 🙌 Nasıl gidiyor?
78
-
79
- You > /bana bir fıkra anlat
80
- AI Tabii! Bilgisayar fıkrası...
81
- ```
82
-
83
- Normal mesajlar **skip edilir** (döngü önleme). Bu sayede:
84
- - ✅ Bot kendi mesajına cevap vermez
85
- - ✅ Echo loop oluşmaz
86
- - ✅ Sadece `/` ile başlayanlar AI'a gider
87
-
88
- ### Dangerous Command Approval
89
-
90
- Akıllı onay sistemi. **Sadece riskli işlemlerde** onay ister:
91
-
92
- ```bash
93
- # Otomatik onay (güvenli)
94
- natureco memory write "favori renk kırmızı"
95
- ✓ Memory eklendi
96
-
97
- # Onay gerekli (riskli)
98
- natureco rm -rf node_modules
99
- 🔴 YÜKSEK RISK: Dosya silme komutu
100
- Devam edilsin mi? (Y/n)
101
- ```
102
-
103
- **Risk tespiti:**
104
- - `rm -rf`, `sudo`, `dd if=` → 🔴 YÜKSEK
105
- - `chmod 777`, `mv` → 🟡 ORTA
106
- - `mv .env` → 🔴 (hassas dosya)
107
-
108
- ### v5.6.0 — v5.6.43 Diğer
109
-
110
- | Versiyon | Yenilik |
111
- |----------|---------|
112
- | **v5.6.0** | Postinstall + API key validation + reset komutu |
113
- | **v5.6.1** | Groq tool filter (9 temel tool) |
114
- | **v5.6.3** | Provider tier wizard |
115
- | **v5.6.4** | Tam model kataloğu (12 provider, 200+ model) |
116
- | **v5.6.5** | Token limit fix + SOUL injection optimizasyonu |
117
- | **v5.6.6** | Inline tool filter (BLOCKED_TOOL_NAMES) |
118
- | **v5.6.7** | Memory auto-create in setup |
119
- | **v5.6.8** | Hard-coded prefix dinamik (botName) |
120
- | **v5.6.21** | Akıllı onay sistemi + tool result yol gizleme |
121
- | **v5.6.22** | 8 bug fix (read_file priority, ~expansion, memory search, grep fix, git auto-find, vb.) |
122
- | **v5.6.27** | imsg send `--to` flag fix |
123
- | **v5.6.31** | `imsg watch --json` streaming |
124
- | **v5.6.39** | iMessage is_from_me filtresi |
125
- | **v5.6.40** | Echo loop prevention (30sn) |
126
- | **v5.6.41-42** | Slash-prefix sistemi (iMessage/WhatsApp) |
127
- | **v5.6.43** | WhatsApp slash + cron endpoint fix |
128
- | **v5.6.46** | README overhaul (hero slogan, ASCII banner, badges) |
129
- | **v5.6.47** | **SOUL SHARDED** — Sharded memory sistemi (`soul/notes/{INDEX,note1-5}.md`) |
130
-
131
- ---
132
-
133
- ## ✨ Özellikler
134
-
135
- ### 🤖 AI & Sohbet
136
- - **57 Tool** — file ops, web search, image generation, code execution, memory
137
- - **İnteraktif REPL** — read_file, edit_file, bash, multi-turn
138
- - **Slash Komutlar** — `/memory`, `/help`, `/skills`, `/clear`
139
- - **Agentic Mod** (`--agent`) — autonomous task completion
140
- - **Persistent Memory** — fact-based, cross-session
141
-
142
- ### 💻 Kod Ajanı (Claude Code Alternatifi)
143
- - **Read/Write/Edit** multi-file operations
144
- - **Bash execution** — sandboxed shell
145
- - **Streaming syntax highlighting** — gerçek zamanlı
146
- - **Slash komutlar** — `/summary`, `/done`
147
- - **Approval prompt** — yazma/silme onayı
148
-
149
- ### 📡 10 Mesajlaşma Kanalı
150
-
151
- | Platform | Bağlantı | Test |
152
- |----------|----------|------|
153
- | **Telegram** | `natureco telegram connect` | ✅ |
154
- | **WhatsApp** | `natureco whatsapp connect` | ✅ (Baileys) |
155
- | **iMessage** | `natureco imessage connect` | ✅ (imsg CLI) |
156
- | **Discord** | `natureco discord connect` | Token |
157
- | **Slack** | `natureco slack connect` | Token |
158
- | **Mattermost** | `natureco mattermost connect` | URL |
159
- | **IRC** | `natureco irc connect` | Server |
160
- | **Signal** | `natureco signal connect` | signal-cli |
161
- | **SMS** | `natureco sms connect` | Twilio |
162
- | **Webhooks** | `natureco webhooks list` | ✅ |
163
-
164
- **Gateway:** `natureco gateway start` — tüm kanalları tek process'te yönet.
165
-
166
- ### 🌿 NatureCo Native
167
- - **NatureHub** paylaşımı (sosyal akış)
168
- - **Medium** makale taslağı/yayını
169
- - **SEO** analizi (skor 0-100)
170
- - **XP & Seviye** sistemi (gamification)
171
-
172
- ### 🛡️ Güvenlik & Gözlem
173
- - **Dangerous Command Approval** — risk tespiti
174
- - **Audit logs** — tüm işlemler kayıt
175
- - **Cost tracking** — AI maliyet takibi (today/week/month/budget)
176
- - **Security audit** — hassas dosya taraması
177
- - **Path anonymization** — tool output'ta `~/` ile gizleme
178
-
179
- ### ⚙️ Otomasyon & Zamanlama
180
- - **Cron jobs** — `natureco cron add`
181
- - **Hooks** — event-driven automation
182
- - **Webhooks** — HTTP callback
183
- - **Tasks (Kanban)** — `natureco tasks`
184
-
185
- ---
186
-
187
- ## 📋 Komutlar (A'dan Z'ye, 120+ Komut)
188
-
189
- ### 🤖 AI & Sohbet
190
-
191
- | Komut | Açıklama |
192
- |-------|----------|
193
- | `natureco chat` | İnteraktif REPL sohbet (57 tool aktif) |
194
- | `natureco chat --resume` | Önceki oturumu devam ettir |
195
- | `natureco code` | Kod ajanı (uygulama/script yazma) |
196
- | `natureco code <file>` | Belirli dosyada kod ajanı |
197
- | `natureco run <script>` | Markdown script çalıştır |
198
- | `natureco ask "<soru>"` | Tek soru AI'a sor |
199
- | `natureco bots` | Mevcut botları listele |
200
- | `natureco models` | Provider modellerini yönet |
201
- | `natureco ultrareview <file>` | Derin kod incelemesi |
202
-
203
- **REPL içi slash komutları:**
204
- ```
205
- /clear Ekranı temizle
206
- /bot Bot değiştir
207
- /skills Aktif skill'leri göster
208
- /memory Memory durumu
209
- /memory clear Memory temizle
210
- /commands Tüm komutlar
211
- /help Yardım
212
- exit / quit Çıkış
213
- ```
214
-
215
- ### ⚙️ Setup & Konfig
216
-
217
- ```bash
218
- natureco setup # İlk kurulum sihirbazı
219
- natureco login # API key girişi
220
- natureco logout # Çıkış
221
- natureco init # Proje başlat (SOUL.md oluştur)
222
- natureco doctor # Sistem sağlık kontrolü
223
- natureco doctor --fix # Otomatik düzeltme
224
- natureco config list # Konfigürasyonu göster
225
- natureco config set <key> <value>
226
- natureco configure # İnteraktif konfig
227
- natureco update # CLI güncelle
228
- natureco completion bash|powershell
229
- ```
230
-
231
- ### 📡 Kanallar (10 Mesajlaşma Platformu)
232
-
233
- ```bash
234
- # Tüm kanallar
235
- natureco channels # Bağlı kanallar listele
236
- natureco channels add <type> # Yeni kanal
237
- natureco channels remove <type>
238
-
239
- # Telegram
240
- natureco telegram connect # Token kaydet
241
- natureco telegram chatid # Chat ID otomatik bul
242
- natureco telegram allow <id> # Chat'e izin ver
243
- natureco telegram status
244
-
245
- # WhatsApp (Baileys)
246
- natureco whatsapp connect
247
- natureco whatsapp status
248
-
249
- # iMessage (imsg CLI)
250
- natureco imessage connect
251
- natureco imessage status
252
- natureco imessage allow <numara>
253
- natureco imessage send <numara> <mesaj>
254
-
255
- # Discord, Slack, Mattermost, IRC, Signal, SMS, Webhooks
256
- natureco discord connect
257
- natureco slack connect
258
- natureco mattermost connect
259
- natureco irc connect
260
- natureco signal connect
261
- natureco sms connect
262
- natureco webhooks list
263
-
264
- # Gateway — tüm kanalları başlat
265
- natureco gateway start
266
- natureco gateway stop
267
- natureco gateway status
268
- ```
269
-
270
- ### 🧠 Memory & Sessions
271
-
272
- ```bash
273
- natureco memory write "favori renk kırmızı"
274
- natureco memory write "user_name=patron"
275
- natureco memory search "renk"
276
- natureco memory status
277
- natureco memory list
278
- natureco memory clear
279
- natureco memory export
280
- natureco memory import <dosya>
281
-
282
- natureco sessions list # Tüm oturumlar
283
- natureco sessions show <id> # Oturum detayı
284
- ```
285
-
286
- ### 🔌 Skill, MCP, Plugin
287
-
288
- ```bash
289
- natureco skills list # Aktif skill'ler
290
- natureco skills install <name>
291
- natureco skills remove <name>
292
-
293
- natureco mcp list # MCP server'ları
294
- natureco mcp add <name> <url>
295
-
296
- natureco plugins list
297
- natureco plugins install <name>
298
- ```
299
-
300
- ### ⏰ Otomasyon
301
-
302
- ```bash
303
- natureco cron add # Zamanlı görev
304
- natureco cron list
305
- natureco cron remove <id>
306
-
307
- natureco hooks list # Event hook'ları
308
- natureco hooks create
309
-
310
- natureco tasks list # Kanban (Todo)
311
- natureco tasks add
312
- natureco tasks done <id>
313
-
314
- natureco webhooks list # Webhook URL'leri
315
- natureco webhooks add <url>
316
-
317
- natureco dashboard # Web dashboard (port 7421)
318
- ```
319
-
320
- ### 🔍 Geliştirici Araçları
321
-
322
- ```bash
323
- natureco git status # Git durumu
324
- natureco git diff # Diff
325
- natureco git log # Commit log
326
- natureco git branches # Branch listesi
327
-
328
- natureco audit today # Bugünkü işlemler
329
- natureco audit stats # İstatistikler
330
- natureco audit files # Dosya değişiklikleri
331
-
332
- natureco cost today # Bugünkü AI maliyeti
333
- natureco cost week
334
- natureco cost month
335
- natureco cost budget 50 # $50 limit
336
-
337
- natureco security audit # Hassas dosya taraması
338
-
339
- natureco logs # Log dosyaları
340
- ```
341
-
342
- ### 🌿 NatureCo Native
343
-
344
- ```bash
345
- natureco naturehub post <text> # NatureHub paylaşımı
346
- natureco naturehub feed # Akışı gör
347
-
348
- natureco seo audit natureco.me # SEO analizi (skor)
349
-
350
- natureco medium draft # Medium makale taslağı
351
- natureco medium publish <file> # Yayınla
352
-
353
- natureco xp rewards # XP & seviye
354
- natureco xp leaderboard
355
- ```
356
-
357
- ### 🛡️ Yönetim
358
-
359
- ```bash
360
- natureco reset --scope config # Sıfırla
361
- natureco reset --scope memory
362
- natureco reset --scope sessions
363
- natureco reset --scope all --yes
364
-
365
- natureco uninstall
366
-
367
- natureco approvals # Onay yönetimi
368
- natureco approvals allow <cmd>
369
- ```
370
-
371
- ---
372
-
373
- ## 🌐 Provider Desteği (12 Provider, 200+ Model)
374
-
375
- | Provider | Modeller | API Key |
376
- |----------|----------|---------|
377
- | **OpenAI** | GPT-5, GPT-4.1, o3, GPT-4o | OpenAI |
378
- | **Anthropic** | Claude Opus 4, Sonnet 4, Haiku | Anthropic |
379
- | **Gemini** | 2.5 Pro, 2.0 Flash, Gemma | Google |
380
- | **Groq** | Llama 3.3, Mixtral | Groq |
381
- | **DeepSeek** | R1, Chat V3 | DeepSeek |
382
- | **Ollama** | Llama, Qwen (local) | - |
383
- | **MiniMax** | M2.5, M2 | MiniMax |
384
- | **OpenRouter** | 15+ model (multi-provider) | OpenRouter |
385
- | **Mistral** | Large, Small, Codestral | Mistral |
386
- | **Cohere** | Command R+, Embed | Cohere |
387
- | **xAI** | Grok 2, Grok Beta | xAI |
388
- | **Together** | Llama, Mixtral, Qwen | Together |
389
-
390
- ```bash
391
- # Provider seçimi sihirbazda
392
- natureco setup
393
- # Sihirbaz: Provider → API Key → Model → Bot adı
394
-
395
- # Model listesi
396
- natureco models list --provider openai
397
- natureco models list --provider anthropic
398
- ```
399
-
400
- ---
401
-
402
- ## 🔄 vs Diğer CLI'lar
403
-
404
- | Özellik | NatureCo | Claude Code | Hermes | OpenClaw |
405
- |---------|----------|-------------|--------|----------|
406
- | Multi-provider | ✅ 12 | ❌ Anthropic | ✅ 8 | ❌ |
407
- | 200+ model | ✅ | ❌ | ✅ | ❌ |
408
- | Slash-prefix | ✅ v5.6 | ❌ | ❌ | ❌ |
409
- | Dangerous Command Approval | ✅ v5.6 | ❌ | ✅ | ❌ |
410
- | Multi-channel (10 platform) | ✅ | ❌ | ✅ (Python) | ❌ |
411
- | Persistent memory | ✅ | ✅ | ✅ | ❌ |
412
- | Tool result anonimleştirme | ✅ v5.6 | ❌ | ❌ | ❌ |
413
- | XP/Gamification | ✅ | ❌ | ❌ | ❌ |
414
- | SEO/Medium/NatureHub native | ✅ | ❌ | ❌ | ❌ |
415
- | Türkçe yerelleştirme | ✅ %100 | ❌ | Kısmi | ❌ |
416
- | MIT lisanslı | ✅ | ✅ | ❌ | ❌ |
417
- | npm paketi | ✅ v5.6 | ❌ | ❌ | ❌ |
418
- | 57 tool | ✅ | ✅ ~30 | ✅ ~25 | ✅ ~40 |
419
- | Cron + Hooks + Webhooks | ✅ | ❌ | ✅ | ❌ |
420
-
421
- ---
422
-
423
- ## 🛠️ Sistem Gereksinimleri
424
-
425
- | Gereksinim | Minimum | Önerilen |
426
- |------------|---------|----------|
427
- | **Node.js** | 18.x | 20.x (LTS) |
428
- | **RAM** | 256 MB | 512 MB |
429
- | **Disk** | 100 MB | 500 MB (cache ile) |
430
- | **OS** | macOS 12, Win 10, Ubuntu 20 | macOS 14+, Win 11, Ubuntu 22 |
431
- | **İnternet** | Gereklidir | - |
432
-
433
- **Bağımlılıklar:** sadece 18 npm paketi. Hafif.
434
-
435
- ---
436
-
437
- ## 🚀 Gerçek Örnekler
438
-
439
- ### 1. Basit Sohbet
440
- ```
441
- $ natureco chat
442
- Provider: api.minimax.io
443
- Model: MiniMax-M2.5
444
- Bot: naruto
445
-
446
- 👋 Merhaba! Ben naruto, patron.
447
-
448
- You > sen kimsin?
449
- AI Ben naruto, NatureCo CLI'nin Türkçe yapay zekâ asistanıyım. 57 tool aktif,
450
- hafıza korunuyor, kanallar hazır.
451
-
452
- You > bana bir fıkra anlat
453
- AI Temel bir bilgisayar fıkrası: ...
454
- ```
455
-
456
- ### 2. Telegram Bot Bağlantısı
457
- ```
458
- $ natureco telegram connect
459
- ? Telegram bot token: *** (BotFather'dan)
460
- ✓ Token zaten kayıtlı: 889****729:AAGJ9PX4j...
461
- Bot ID: telegram_1782204289029
462
-
463
- $ natureco telegram chatid
464
- ⏳ Bot çalıştırılıyor, ilk mesajı bekliyorum...
465
- [Telegram'dan /start yaz]
466
- ✓ Chat ID algılandı: 6139455189
467
-
468
- $ natureco gateway start
469
- [gateway] Gateway running (PID 77765)
470
- [telegram] watching for inbound
471
- [telegram] Inbound from +90****44: "selam"
472
- [telegram] Sending to AI provider...
473
- [telegram] Reply sent (117 chars)
474
- ```
475
-
476
- ### 3. iMessage Slash Komutu
477
- ```
478
- $ natureco imessage connect
479
- ? imsg CLI yolu: /opt/homebrew/bin/imsg
480
- ✓ Bağlantı kuruldu
481
-
482
- $ natureco imessage allow +90****4449
483
- ✓ İzin verildi: +90****4449
484
-
485
- $ natureco gateway start
486
- [imessage] watching for new messages (streaming)
487
-
488
- [Telegram'da /start yaz]
489
- [iMessage'da /sen kimsin yaz]
490
- [imessage] Inbound from +90****4449: "/sen kimsin"
491
- [imessage] Slash command: /sen kimsin
492
- [imessage] Reply sent (178 chars)
493
- ```
494
-
495
- ### 4. Kod Ajanı — Basit Uygulama
496
- ```
497
- $ natureco code
498
- NatureCo Code Agent v5
499
-
500
- You > notes.py olustur, not ekleme/listeleme/silme, JSON dosyasi
501
-
502
- Tool: write_file (2303 bytes)
503
- Tool: bash (python3 notes.py)
504
- ✅ Not eklendi: Alışveriş
505
- ✅ Not eklendi: Toplantı
506
- ✅ Not eklendi: Kitap
507
- ✅ Toplam: 3 not
508
- ✅ Silme başarılı: ID 2
509
-
510
- 📂 `notes.py` (2303 bytes)
511
- ```
512
-
513
- ---
514
-
515
- ## 🔌 Entegrasyonlar
516
-
517
- ### Webhook
518
- ```bash
519
- # HTTP callback URL'leri
520
- natureco webhooks add https://example.com/hook
521
-
522
- # incoming webhook (POST)
523
- POST /webhook/<id>
524
- Content-Type: application/json
525
- {"event": "...", "data": {...}}
526
- ```
527
-
528
- ### Cron (Zamanlı Görev)
529
- ```bash
530
- # Her 5 dakikada bir
531
- natureco cron add \
532
- --name "selam-gorevi" \
533
- --schedule "*/5 * * * *" \
534
- --command "echo 'Selam!'"
535
-
536
- # Tek seferlik
537
- natureco cron add --at "2026-12-31T23:59"
538
- ```
539
-
540
- ### MCP (Model Context Protocol)
541
- ```bash
542
- natureco mcp add filesystem npx -y @modelcontextprotocol/server-filesystem
543
- natureco mcp add github npx -y @modelcontextprotocol/server-github
544
- ```
545
-
546
- ---
547
-
548
- ## 📚 Dokümantasyon
549
-
550
- - 🌐 **Ana sayfa:** [natureco.me/cli](https://natureco.me/cli)
551
- - 📖 **Komut referansı:** [natureco.me/cli/commands](https://natureco.me/cli/commands)
552
- - 🎓 **Tutorial:** [natureco.me/cli/getting-started](https://natureco.me/cli/getting-started)
553
- - 🔧 **API:** [natureco.me/cli/api](https://natureco.me/cli/api)
554
- - 💬 **Discord topluluğu:** [discord.gg/4FwumbWph](https://discord.gg/4FwumbWph)
555
- - 🐦 **Twitter/X:** [@naturecoofficial](https://twitter.com/naturecoofficial)
556
-
557
- ---
558
-
559
- ## 🤝 Katkıda Bulunma
560
-
561
- PR'ler ve issue'lar kabul edilir!
562
-
563
- ```bash
564
- # Repo'yu klonla
565
- git clone https://github.com/natureco-official/natureco-cli.git
566
- cd cli
567
-
568
- # Kur
569
- npm install
570
-
571
- # Test
572
- npm test
573
-
574
- # Lint
575
- npm run lint
576
-
577
- # Build
578
- npm run build
579
- ```
580
-
581
- **Katkıda bulunanlar:** [CONTRIBUTORS.md](https://github.com/natureco-official/natureco-cli/blob/main/CONTRIBUTORS.md)
582
-
583
- ---
584
-
585
- ## 📄 Lisans
586
-
587
- MIT © [NatureCo](https://github.com/natureco)
588
-
589
- ---
590
-
591
- ## 🙏 Teşekkürler
592
-
593
- - [OpenAI](https://openai.com) — GPT API
594
- - [Anthropic](https://anthropic.com) — Claude API
595
- - [MiniMax](https://api.minimax.io) — AI provider
596
- - [Baileys](https://github.com/WhiskeySockets/Baileys) — WhatsApp Web
597
- - [imsg](https://github.com/steipete/imsg) — iMessage CLI
598
- - [ripgrep](https://github.com/BurntSushi/ripgrep) — fast search
599
-
600
- ---
601
-
602
- <p align="center">
603
- <b>Yapay Zekânın Gücü artık parmaklarının ucunda.</b><br>
604
- <i>Terminalin hızını NatureCo ile keşfet.</i>
605
- </p>
606
-
607
- <p align="center">
608
- Made with 🌿 in Turkey
609
- </p>
1
+ # NatureCo CLI
2
+
3
+ [![npm version](https://img.shields.io/npm/v/natureco-cli)](https://www.npmjs.com/package/natureco-cli)
4
+ [![License: MIT](https://img.shields.io/badge/License-MIT-green.svg)](https://opensource.org/licenses/MIT)
5
+ [![Platform](https://img.shields.io/badge/platform-macOS%20%7C%20Windows%20%7C%20Linux-blue)]()
6
+ [![Node](https://img.shields.io/badge/node-%3E%3D18.0.0-brightgreen)]()
7
+ [![Downloads](https://img.shields.io/npm/dm/natureco-cli)](https://www.npmjs.com/package/natureco-cli)
8
+ [![Stars](https://img.shields.io/github/stars/natureco-official/natureco-cli)](https://github.com/natureco-official/natureco-cli)
9
+
10
+ > **The power of AI, now at your fingertips.**
11
+ > *Discover the speed of the terminal with NatureCo.*
12
+
13
+ A terminal-native AI agent CLI — chat, write code, automate workflows, and connect **Telegram / Discord / Slack / WhatsApp / iMessage** and more.
14
+
15
+ **A Claude Code & OpenClaw alternative** · Multi-agent orchestration · Cross-session memory · Dangerous-command approval · 12 providers, 200+ models · 57+ tools · 10 messaging channels.
16
+
17
+ ```
18
+ ███╗ ██╗ █████╗ ████████╗██╗ ██╗██████╗ ███████╗ ██████╗ ██████╗
19
+ ████╗ ██║██╔══██╗╚══██╔══╝██║ ██║██╔══██╗██╔════╝██╔════╝ ██╔═══██╗
20
+ ██╔██╗ ██║███████║ ██║ ██║ ██║██████╔╝█████╗ ██║ ██║ ██║
21
+ ██║╚██╗██║██╔══██║ ██║ ██║ ██║██╔══██╗██╔══╝ ██║ ██║ ██║
22
+ ██║ ╚████║██║ ██║ ██║ ╚██████╔╝██║ ██║███████╗╚██████╗ ╚██████╔╝
23
+ ╚═╝ ╚═══╝╚═╝ ╚═╝ ╚═╝ ╚═════╝ ╚═╝ ╚═╝╚══════╝ ╚═════╝ ╚═════╝
24
+ ```
25
+
26
+ ---
27
+
28
+ ## 🚀 Quick Start
29
+
30
+ ```bash
31
+ # 1. Install
32
+ npm install -g natureco-cli
33
+
34
+ # 2. First-run setup wizard (provider, model, bot name)
35
+ natureco setup
36
+
37
+ # 3. Start chatting
38
+ natureco chat
39
+
40
+ # 4. Or launch the coding agent
41
+ natureco code
42
+ ```
43
+
44
+ **Ready in 30 seconds.** On first launch, the wizard walks you through it: pick a provider → enter your API key → choose a model → name your bot. That's it.
45
+
46
+ > **Cross-platform:** works natively on **macOS, Windows, and Linux**. Core tools (file, search, shell, git, code execution, web, memory) are OS-agnostic; platform-specific helpers degrade gracefully.
47
+
48
+ ---
49
+
50
+ ## 🆕 What's New
51
+
52
+ | Version | Highlights |
53
+ |---------|-----------|
54
+ | **v5.43.0** | **Security:** 9 vulnerabilities fixed in a 3-round audit (RCE chain, admin-rpc auth, cron persistence, channel access control). See [`SECURITY_AUDIT_SUMMARY.md`](SECURITY_AUDIT_SUMMARY.md). |
55
+ | **v5.42.0** | **Token optimization** — prompts trimmed by ~76% (skill index made compact; big cost savings on multi-step tasks). |
56
+ | **v5.41.0** | **Multi-agent orchestration** — the agent can spawn focused sub-agents (`sub_agent`) and produce step-by-step plans (`plan`) before acting. |
57
+ | **v5.40.0** | **Cross-session memory** correctness fix — facts are saved and recalled reliably across sessions. |
58
+ | **v5.39.0** | **Cross-platform** — first-class Windows/macOS/Linux support (pure-Node search fallback, platform-aware helpers). |
59
+ | **v5.38.0** | git command-injection fix + `code_execution`/`http_request` improvements. |
60
+
61
+ ### Slash-Prefix Command System
62
+
63
+ On **iMessage and WhatsApp**, only messages starting with `/` are processed as commands:
64
+
65
+ ```
66
+ You > /hello how are you?
67
+ AI Hey! 🙌 Doing great — how about you?
68
+
69
+ You > /tell me a joke
70
+ AI Sure! A classic programmer joke...
71
+ ```
72
+
73
+ Regular messages are **skipped** (loop prevention), so:
74
+ - ✅ The bot never replies to its own messages
75
+ - ✅ No echo loops
76
+ - ✅ Only `/`-prefixed messages reach the AI
77
+
78
+ ### Dangerous-Command Approval
79
+
80
+ A smart approval system that prompts **only for risky operations**:
81
+
82
+ ```bash
83
+ # Auto-approved (safe)
84
+ natureco memory write "favorite color is red"
85
+ ✓ Memory added
86
+
87
+ # Approval required (risky)
88
+ rm -rf node_modules
89
+ 🔴 HIGH RISK: file-deletion command
90
+ Continue? (Y/n)
91
+ ```
92
+
93
+ **Risk detection:**
94
+ - `rm -rf`, `sudo`, `dd if=` → 🔴 HIGH
95
+ - `chmod 777`, `mv` → 🟡 MEDIUM
96
+ - `mv .env` → 🔴 (sensitive file)
97
+
98
+ Two-tier policy (`deny` / `allowlist` / `full`) applies to **every** shell path — no tool bypasses it.
99
+
100
+ ---
101
+
102
+ ## ✨ Features
103
+
104
+ ### 🤖 AI & Chat
105
+ - **57+ tools** — file ops, web search, image generation, code execution, memory, and more
106
+ - **Interactive REPL** — read_file, edit_file, bash, multi-turn conversation
107
+ - **Slash commands** — `/memory`, `/help`, `/skills`, `/model`, `/clear`
108
+ - **Streaming output** with live tool-call visibility and a thinking indicator
109
+ - **Persistent memory** — fact-based, cross-session
110
+
111
+ ### 💻 Coding Agent (Claude Code alternative)
112
+ - **Read / Write / Edit** multi-file operations
113
+ - **Sandboxed shell execution** with the approval flow
114
+ - **Multi-agent orchestration** — spawn focused sub-agents and plan before acting
115
+ - **Skills** — progressive-disclosure expertise loaded on demand via `skill_view`
116
+ - **Verify loop** — the agent runs and tests the code it writes
117
+
118
+ ### 📡 10 Messaging Channels
119
+
120
+ | Platform | Connect | Notes |
121
+ |----------|---------|-------|
122
+ | **Telegram** | `natureco telegram connect` | ✅ |
123
+ | **WhatsApp** | `natureco whatsapp connect` | ✅ (Baileys) |
124
+ | **iMessage** | `natureco imessage connect` | ✅ (imsg CLI) |
125
+ | **Discord** | `natureco discord connect` | Token |
126
+ | **Slack** | `natureco slack connect` | Token |
127
+ | **Mattermost** | `natureco mattermost connect` | URL |
128
+ | **IRC** | `natureco irc connect` | Server |
129
+ | **Signal** | `natureco signal connect` | signal-cli |
130
+ | **SMS** | `natureco sms connect` | Twilio |
131
+ | **Webhooks** | `natureco webhooks list` | ✅ |
132
+
133
+ **Gateway:** `natureco gateway start` — run all channels in a single process. Per-channel sender allow-lists keep unauthorized users out, and personal memory is never leaked to them.
134
+
135
+ ### 🌿 NatureCo Native
136
+ - **NatureHub** sharing (social feed)
137
+ - **Medium** article drafting/publishing
138
+ - **SEO** analysis (score 0–100)
139
+ - **XP & levels** (gamification)
140
+
141
+ ### 🛡️ Security & Observability
142
+ - **Dangerous-command approval** — risk detection on every shell path
143
+ - **Command-injection safe** — structured process spawning (`execFileSync`), no shell string interpolation
144
+ - **Local-only admin RPC** — bound to `127.0.0.1`, mandatory bearer token, secrets masked by default
145
+ - **Secure at rest** — config, backups, and session files stored `0600`/`0700`
146
+ - **Audit logs** — every operation recorded
147
+ - **Cost tracking** — AI spend by today/week/month/budget
148
+ - **Security audit** — `natureco security audit`
149
+
150
+ ### ⚙️ Automation & Scheduling
151
+ - **Cron jobs** — `natureco cron add` (app-managed by default; system crontab is opt-in and approval-gated)
152
+ - **Hooks** — event-driven automation
153
+ - **Webhooks** — HTTP callbacks
154
+ - **Tasks (Kanban)** — `natureco tasks`
155
+
156
+ ---
157
+
158
+ ## 📋 Commands (A–Z, 120+ commands)
159
+
160
+ ### 🤖 AI & Chat
161
+
162
+ | Command | Description |
163
+ |---------|-------------|
164
+ | `natureco chat` | Interactive REPL chat (57+ tools active) |
165
+ | `natureco chat --resume` | Resume the previous session |
166
+ | `natureco code` | Coding agent (write apps/scripts) |
167
+ | `natureco code <file>` | Coding agent on a specific file |
168
+ | `natureco run <script>` | Run a Markdown workflow script |
169
+ | `natureco ask "<question>"` | One-shot question to the AI |
170
+ | `natureco bots` | List available bots |
171
+ | `natureco models` | Manage provider models |
172
+ | `natureco ultrareview <file>` | Deep code review |
173
+
174
+ **In-REPL slash commands:**
175
+ ```
176
+ /clear Clear the screen
177
+ /bot Switch bot
178
+ /skills Show active skills
179
+ /memory Memory status
180
+ /memory clear Clear memory
181
+ /commands List all commands
182
+ /help Help
183
+ exit / quit Exit
184
+ ```
185
+
186
+ ### ⚙️ Setup & Config
187
+
188
+ ```bash
189
+ natureco setup # First-run setup wizard
190
+ natureco login # Enter API key
191
+ natureco logout # Log out
192
+ natureco init # Initialize a project (create SOUL.md)
193
+ natureco doctor # System health check
194
+ natureco doctor --fix # Auto-fix
195
+ natureco config list # Show configuration
196
+ natureco config set <key> <value>
197
+ natureco configure # Interactive config
198
+ natureco update # Update the CLI
199
+ natureco completion bash|powershell
200
+ ```
201
+
202
+ ### 📡 Channels (10 messaging platforms)
203
+
204
+ ```bash
205
+ # All channels
206
+ natureco channels # List connected channels
207
+ natureco channels add <type> # Add a channel
208
+ natureco channels remove <type>
209
+
210
+ # Telegram
211
+ natureco telegram connect # Save token
212
+ natureco telegram chatid # Auto-detect chat ID
213
+ natureco telegram allow <id> # Allow a chat
214
+ natureco telegram status
215
+
216
+ # WhatsApp (Baileys)
217
+ natureco whatsapp connect
218
+ natureco whatsapp status
219
+
220
+ # iMessage (imsg CLI)
221
+ natureco imessage connect
222
+ natureco imessage status
223
+ natureco imessage allow <number>
224
+ natureco imessage send <number> <message>
225
+
226
+ # Discord, Slack, Mattermost, IRC, Signal, SMS, Webhooks
227
+ natureco discord connect
228
+ natureco slack connect
229
+ natureco mattermost connect
230
+ natureco irc connect
231
+ natureco signal connect
232
+ natureco sms connect
233
+ natureco webhooks list
234
+
235
+ # Gateway — start all channels
236
+ natureco gateway start
237
+ natureco gateway stop
238
+ natureco gateway status
239
+ ```
240
+
241
+ ### 🧠 Memory & Sessions
242
+
243
+ ```bash
244
+ natureco memory write "favorite color is red"
245
+ natureco memory write "user_name=patron"
246
+ natureco memory search "color"
247
+ natureco memory status
248
+ natureco memory list
249
+ natureco memory clear
250
+ natureco memory export
251
+ natureco memory import <file>
252
+
253
+ natureco sessions list # All sessions
254
+ natureco sessions show <id> # Session details
255
+ ```
256
+
257
+ ### 🔌 Skills, MCP, Plugins
258
+
259
+ ```bash
260
+ natureco skills list # Active skills
261
+ natureco skills install <name>
262
+ natureco skills remove <name>
263
+
264
+ natureco mcp list # MCP servers
265
+ natureco mcp add <name> <url>
266
+
267
+ natureco plugins list
268
+ natureco plugins install <name>
269
+ ```
270
+
271
+ ### ⏰ Automation
272
+
273
+ ```bash
274
+ natureco cron add # Scheduled task
275
+ natureco cron list
276
+ natureco cron remove --name <name>
277
+
278
+ natureco hooks list # Event hooks
279
+ natureco hooks create
280
+
281
+ natureco tasks list # Kanban (todo)
282
+ natureco tasks add
283
+ natureco tasks done <id>
284
+
285
+ natureco webhooks list # Webhook URLs
286
+ natureco webhooks add <url>
287
+
288
+ natureco dashboard # Web dashboard (localhost)
289
+ ```
290
+
291
+ ### 🔍 Developer Tools
292
+
293
+ ```bash
294
+ natureco git status # Git status
295
+ natureco git diff # Diff
296
+ natureco git log # Commit log
297
+ natureco git branches # Branch list
298
+
299
+ natureco audit today # Today's operations
300
+ natureco audit stats # Statistics
301
+ natureco audit files # File changes
302
+
303
+ natureco cost today # Today's AI cost
304
+ natureco cost week
305
+ natureco cost month
306
+ natureco cost budget 50 # $50 limit
307
+
308
+ natureco security audit # Sensitive-file / config scan
309
+
310
+ natureco logs # Log files
311
+ ```
312
+
313
+ ### 🌿 NatureCo Native
314
+
315
+ ```bash
316
+ natureco naturehub post <text> # Share to NatureHub
317
+ natureco naturehub feed # View the feed
318
+
319
+ natureco seo audit natureco.me # SEO analysis (score)
320
+
321
+ natureco medium draft # Medium article draft
322
+ natureco medium publish <file> # Publish
323
+
324
+ natureco xp rewards # XP & levels
325
+ natureco xp leaderboard
326
+ ```
327
+
328
+ ### 🛡️ Management
329
+
330
+ ```bash
331
+ natureco reset --scope config # Reset
332
+ natureco reset --scope memory
333
+ natureco reset --scope sessions
334
+ natureco reset --scope all --yes
335
+
336
+ natureco uninstall
337
+
338
+ natureco approvals # Approval management
339
+ natureco approvals allow <cmd>
340
+
341
+ natureco admin-rpc start # Local admin RPC (127.0.0.1, bearer-token auth)
342
+ ```
343
+
344
+ ---
345
+
346
+ ## 🌐 Provider Support (12 providers, 200+ models)
347
+
348
+ | Provider | Models | API Key |
349
+ |----------|--------|---------|
350
+ | **OpenAI** | GPT-5, GPT-4.1, o3, GPT-4o | OpenAI |
351
+ | **Anthropic** | Claude Opus 4, Sonnet 4, Haiku | Anthropic |
352
+ | **Gemini** | 2.5 Pro, 2.0 Flash, Gemma | Google |
353
+ | **Groq** | Llama 3.3, Mixtral | Groq |
354
+ | **DeepSeek** | R1, Chat V3 | DeepSeek |
355
+ | **Ollama** | Llama, Qwen (local) | — |
356
+ | **MiniMax** | M2.5, M2 | MiniMax |
357
+ | **OpenRouter** | 15+ models (multi-provider) | OpenRouter |
358
+ | **Mistral** | Large, Small, Codestral | Mistral |
359
+ | **Cohere** | Command R+, Embed | Cohere |
360
+ | **xAI** | Grok 2, Grok Beta | xAI |
361
+ | **Together** | Llama, Mixtral, Qwen | Together |
362
+
363
+ ```bash
364
+ # Provider selection lives in the wizard
365
+ natureco setup
366
+ # Wizard: Provider → API Key → Model → Bot name
367
+
368
+ # List models
369
+ natureco models list --provider openai
370
+ natureco models list --provider anthropic
371
+ ```
372
+
373
+ > The agent adapts to each provider's native tool-calling style automatically (OpenAI-style `tool_calls` JSON or agentic-text XML), so the same tools and memory work everywhere.
374
+
375
+ ---
376
+
377
+ ## 🔄 vs. Other CLIs
378
+
379
+ | Feature | NatureCo | Claude Code | Hermes | OpenClaw |
380
+ |---------|----------|-------------|--------|----------|
381
+ | Multi-provider | ✅ 12 | ❌ Anthropic | ✅ 8 | ❌ |
382
+ | 200+ models | ✅ | ❌ | ✅ | ❌ |
383
+ | Multi-agent orchestration | ✅ | ✅ | ⚠️ | ⚠️ |
384
+ | Dangerous-command approval | ✅ | ✅ | ✅ | ⚠️ |
385
+ | Multi-channel (10 platforms) | ✅ | ❌ | ✅ (Python) | ❌ |
386
+ | Persistent memory | ✅ | ✅ | ✅ | ❌ |
387
+ | Tool-output path anonymization | ✅ | ❌ | ❌ | ❌ |
388
+ | XP / gamification | ✅ | ❌ | ❌ | ❌ |
389
+ | SEO / Medium / NatureHub native | ✅ | ❌ | ❌ | ❌ |
390
+ | Cross-platform (macOS/Win/Linux) | ✅ | ✅ | ⚠️ | ⚠️ |
391
+ | MIT licensed | ✅ | ✅ | ❌ | ❌ |
392
+ | npm package | ✅ | ❌ | ❌ | ❌ |
393
+ | Tools | ✅ 57+ | ✅ ~30 | ✅ ~25 | ✅ ~40 |
394
+ | Cron + Hooks + Webhooks | ✅ | ❌ | ✅ | ❌ |
395
+
396
+ ---
397
+
398
+ ## 🛠️ System Requirements
399
+
400
+ | Requirement | Minimum | Recommended |
401
+ |-------------|---------|-------------|
402
+ | **Node.js** | 18.x | 20.x (LTS) |
403
+ | **RAM** | 256 MB | 512 MB |
404
+ | **Disk** | 100 MB | 500 MB (with cache) |
405
+ | **OS** | macOS 12, Win 10, Ubuntu 20 | macOS 14+, Win 11, Ubuntu 22 |
406
+ | **Internet** | Required | — |
407
+
408
+ **Optional** for richer functionality: `ripgrep` (faster search — falls back to a pure-Node scanner), `python3` (for `code_execution`), `git`.
409
+
410
+ ---
411
+
412
+ ## 🚀 Real Examples
413
+
414
+ ### 1. Simple chat
415
+ ```
416
+ $ natureco chat
417
+ Provider: api.minimax.io
418
+ Model: MiniMax-M2.5
419
+ Bot: naruto
420
+
421
+ 👋 Hi! I'm naruto, boss.
422
+
423
+ You > who are you?
424
+ AI I'm naruto, your NatureCo CLI assistant. 57+ tools active,
425
+ memory persisted, channels ready.
426
+
427
+ You > create racing-game.html on my Desktop with a small canvas racing game
428
+ AI 🔧 write_file ✓
429
+ Done — racing-game.html created on your Desktop.
430
+ ```
431
+
432
+ ### 2. Connect a Telegram bot
433
+ ```
434
+ $ natureco telegram connect
435
+ ? Telegram bot token: *** (from BotFather)
436
+ ✓ Token saved
437
+ Bot ID: telegram_1782204289029
438
+
439
+ $ natureco telegram chatid
440
+ ⏳ Bot running, waiting for the first message...
441
+ [send /start from Telegram]
442
+ ✓ Chat ID detected: 6139455189
443
+
444
+ $ natureco gateway start
445
+ [gateway] Gateway running (PID 77765)
446
+ [telegram] watching for inbound
447
+ [telegram] Inbound from +90****44: "hello"
448
+ [telegram] Reply sent (117 chars)
449
+ ```
450
+
451
+ ### 3. iMessage slash command
452
+ ```
453
+ $ natureco imessage connect
454
+ ? imsg CLI path: /opt/homebrew/bin/imsg
455
+ ✓ Connected
456
+
457
+ $ natureco imessage allow +90****4449
458
+ ✓ Allowed: +90****4449
459
+
460
+ $ natureco gateway start
461
+ [imessage] watching for new messages (streaming)
462
+ [imessage] Inbound from +90****4449: "/who are you"
463
+ [imessage] Slash command: /who are you
464
+ [imessage] Reply sent (178 chars)
465
+ ```
466
+
467
+ ### 4. Coding agent — a small app
468
+ ```
469
+ $ natureco code
470
+ NatureCo Code Agent v5
471
+
472
+ You > create notes.py — add/list/delete notes, stored as JSON
473
+
474
+ Tool: write_file (2303 bytes)
475
+ Tool: bash (python3 notes.py)
476
+ ✅ Note added: Groceries
477
+ ✅ Note added: Meeting
478
+ ✅ Total: 3 notes
479
+ ✅ Deleted: ID 2
480
+
481
+ 📂 notes.py (2303 bytes)
482
+ ```
483
+
484
+ ---
485
+
486
+ ## 🔌 Integrations
487
+
488
+ ### Webhook
489
+ ```bash
490
+ # HTTP callback URLs
491
+ natureco webhooks add https://example.com/hook
492
+
493
+ # Incoming webhook (POST)
494
+ POST /webhook/<id>
495
+ Content-Type: application/json
496
+ {"event": "...", "data": {...}}
497
+ ```
498
+
499
+ ### Cron (scheduled tasks)
500
+ ```bash
501
+ # Every 5 minutes
502
+ natureco cron add \
503
+ --name "hello-task" \
504
+ --schedule "*/5 * * * *" \
505
+ --command "echo 'Hello!'"
506
+
507
+ # One-off
508
+ natureco cron add --at "2026-12-31T23:59"
509
+ ```
510
+
511
+ ### MCP (Model Context Protocol)
512
+ ```bash
513
+ natureco mcp add filesystem npx -y @modelcontextprotocol/server-filesystem
514
+ natureco mcp add github npx -y @modelcontextprotocol/server-github
515
+ ```
516
+
517
+ ---
518
+
519
+ ## 📚 Documentation
520
+
521
+ - 🌐 **Homepage:** [natureco.me/cli](https://natureco.me/cli)
522
+ - 📖 **Command reference:** [natureco.me/cli/commands](https://natureco.me/cli/commands)
523
+ - 🎓 **Tutorial:** [natureco.me/cli/getting-started](https://natureco.me/cli/getting-started)
524
+ - 🔧 **API:** [natureco.me/cli/api](https://natureco.me/cli/api)
525
+ - 🔒 **Security:** [`SECURITY_AUDIT_SUMMARY.md`](SECURITY_AUDIT_SUMMARY.md)
526
+ - 📝 **Changelog:** [`CHANGELOG.md`](CHANGELOG.md)
527
+
528
+ ---
529
+
530
+ ## 🤝 Contributing
531
+
532
+ PRs and issues are welcome!
533
+
534
+ ```bash
535
+ # Clone the repo
536
+ git clone https://github.com/natureco-official/natureco-cli.git
537
+ cd natureco-cli
538
+
539
+ # Install
540
+ npm install
541
+
542
+ # Test (vitest)
543
+ npm test
544
+
545
+ # Lint
546
+ npm run lint
547
+
548
+ # Smoke check
549
+ npm run smoke
550
+ ```
551
+
552
+ ---
553
+
554
+ ## 📄 License
555
+
556
+ MIT © [NatureCo](https://github.com/natureco-official)
557
+
558
+ ---
559
+
560
+ ## 🙏 Acknowledgements
561
+
562
+ - [OpenAI](https://openai.com) — GPT API
563
+ - [Anthropic](https://anthropic.com) — Claude API
564
+ - [MiniMax](https://api.minimax.io) — AI provider
565
+ - [Baileys](https://github.com/WhiskeySockets/Baileys) — WhatsApp Web
566
+ - [imsg](https://github.com/steipete/imsg) — iMessage CLI
567
+ - [ripgrep](https://github.com/BurntSushi/ripgrep) — fast search
568
+
569
+ ---
570
+
571
+ <p align="center">
572
+ <b>The power of AI, now at your fingertips.</b><br>
573
+ <i>Discover the speed of the terminal with NatureCo.</i>
574
+ </p>
575
+
576
+ <p align="center">
577
+ Made with 🌿 for developers who live in the terminal.
578
+ </p>
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "natureco-cli",
3
- "version": "5.43.0",
3
+ "version": "5.43.1",
4
4
  "description": "OpenClaw'dan daha güvenli, daha hızlı, daha ucuz AI agent CLI. Multi-agent, self-evolving skills, audit log, maliyet optimizasyonu ve NatureCo platform-native.",
5
5
  "bin": {
6
6
  "natureco": "bin/natureco.js"
package/src/utils/config.js CHANGED
@@ -213,7 +213,10 @@ function restoreConfig(backupFile) {
213
213
  const data = parseConfigContent(content);
214
214
  validateConfig(data);
215
215
  createBackup();
216
- fs.writeFileSync(ACTIVE_CONFIG_FILE, JSON.stringify(data, null, 2), 'utf8');
216
+ // v5.43.1 GÜVENLİK: saveConfig gibi 0600 — restore, API key'li config.json'ı
217
+ // dünya-okunabilir hale getirmemeli. mode yalnızca yeni dosyaya uygulanır; chmod şart.
218
+ fs.writeFileSync(ACTIVE_CONFIG_FILE, JSON.stringify(data, null, 2), { encoding: 'utf8', mode: 0o600 });
219
+ try { fs.chmodSync(ACTIVE_CONFIG_FILE, 0o600); } catch { /* best-effort */ }
217
220
  _configCache = data;
218
221
  _configHash = computeHash(data);
219
222
  return { path: backupPath, timestamp: path.basename(backupPath).replace(/^config-|\.json$/g, '') };