natureco-cli 5.6.20 → 5.6.21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "natureco-cli",
-  "version": "5.6.20",
+  "version": "5.6.21",
   "description": "OpenClaw'dan daha güvenli, daha hızlı, daha ucuz AI agent CLI. Multi-agent, self-evolving skills, audit log, maliyet optimizasyonu ve NatureCo platform-native.",
   "bin": {
     "natureco": "bin/natureco.js"

package/src/commands/code_v5.js

@@ -81,13 +81,159 @@ async function sendMessageWithTools(providerUrl, providerKey, model, messages, t
 function confirm(prompt) {
   return new Promise(resolve => {
     const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-    rl.question(chalk.yellow("\n  ⚠ " + prompt + "\n  Devam edilsin mi? (Y/n) "), ans => {
+    rl.question(chalk.yellow("\n  ⚠ " + prompt + " "), ans => {
       rl.close();
       resolve(!ans || ans.toLowerCase().startsWith("y"));
     });
   });
 }
 
+/**
+ * v5.6.21: Risk seviyesi tespiti - sadece riskli işlemlerde onay iste
+ * @param {string} tool - tool adı
+ * @param {object} args - tool parametreleri
+ * @returns {{requiresApproval: boolean, reason: string, level: string}}
+ */
+function assessRisk(tool, args) {
+  const argsStr = JSON.stringify(args || {});
+
+  // ============================================================
+  // YÜKSEK RİSK - Mutlaka onay iste
+  // ============================================================
+
+  // bash / shell_command: Tehlikeli komutlar
+  if (tool === "bash" || tool === "shell_command") {
+    const cmd = (args.command || args.cmd || "").toLowerCase();
+
+    // Dosya/klasör silme
+    if (/\brm\s+(-[rf]+\s+)*/.test(cmd) || /rmdir/.test(cmd)) {
+      return { requiresApproval: true, level: "high", reason: `Dosya silme komutu: ${args.command}` };
+    }
+    if (cmd.includes("sudo ") || cmd.includes("doas ")) {
+      return { requiresApproval: true, level: "high", reason: `Yetki yükseltme: ${args.command}` };
+    }
+    if (cmd.includes("dd if=") || cmd.includes("mkfs") || cmd.includes("fdisk")) {
+      return { requiresApproval: true, level: "high", reason: `Disk işlemi: ${args.command}` };
+    }
+    if (cmd.match(/^\s*mv\s+.*\/(?:\.|\.\.)/)) {
+      return { requiresApproval: true, level: "medium", reason: `Üzerine yazma riski: ${args.command}` };
+    }
+    // chmod 777 veya chown -R
+    if (/chmod\s+(-[rR]+\s+)*777/.test(cmd) || /chown\s+-R/.test(cmd)) {
+      return { requiresApproval: true, level: "medium", reason: `İzin değişikliği: ${args.command}` };
+    }
+    // git push --force
+    if (/git\s+push.*--force/.test(cmd) || /git\s+push.*-f\s/.test(cmd)) {
+      return { requiresApproval: true, level: "high", reason: `Zorla push: ${args.command}` };
+    }
+    // git reset --hard
+    if (/git\s+reset\s+--hard/.test(cmd)) {
+      return { requiresApproval: true, level: "high", reason: `Hard reset: ${args.command}` };
+    }
+    // Üretim/kök dizin
+    if (cmd.includes("/etc/") || cmd.includes("/usr/") || cmd.includes("/var/") || cmd.includes("/System/")) {
+      return { requiresApproval: true, level: "high", reason: `Sistem dizinine erişim: ${args.command}` };
+    }
+    // curl/wget internet download
+    if (/curl.*\|\s*(bash|sh)/.test(cmd) || /wget.*\|\s*(bash|sh)/.test(cmd)) {
+      return { requiresApproval: true, level: "high", reason: `İnternet üzerinden script çalıştırma: ${args.command}` };
+    }
+    // mac_app_quit veya killall
+    if (cmd.includes("killall") || cmd.includes("pkill") || cmd.includes("kill -9")) {
+      return { requiresApproval: true, level: "high", reason: `Süreç sonlandırma: ${args.command}` };
+    }
+    // .natureco veya önemli dosyalara dokunma
+    if (cmd.includes(".natureco") && (cmd.includes("rm") || cmd.includes("mv"))) {
+      return { requiresApproval: true, level: "high", reason: `NatureCo dizininde tehlikeli işlem: ${args.command}` };
+    }
+  }
+
+  // ============================================================
+  // ORTA RİSK - Onay iste (bilgilendir)
+  // ============================================================
+
+  // mac_app_quit - uygulama kapatma
+  if (tool === "mac_app_quit") {
+    return { requiresApproval: true, level: "medium", reason: `Uygulama kapatma: ${args.app || args.name || "?"}` };
+  }
+
+  // write_file / edit_file - kritik yollara yazma
+  if (tool === "write_file" || tool === "edit_file") {
+    const path = (args.path || args.file || "").toLowerCase();
+    // Hassas dosyalar
+    if (path.includes(".env") || path.includes("credentials") || path.includes("secret")) {
+      return { requiresApproval: true, level: "high", reason: `Hassas dosya: ${args.path}` };
+    }
+    if (path.includes("/etc/") || path.includes("/usr/") || path.includes("~/.ssh/")) {
+      return { requiresApproval: true, level: "high", reason: `Sistem dosyası: ${args.path}` };
+    }
+    if (path.includes(".natureco/config.json") || path.includes(".natureco/soul/")) {
+      return { requiresApproval: true, level: "medium", reason: `NatureCo config dosyası: ${args.path}` };
+    }
+  }
+
+  // ============================================================
+  // GÜVENLİ - Onay isteme
+  // ============================================================
+
+  // Normal tool'lar (read_file, list_dir, grep_search, vs.)
+  return { requiresApproval: false, level: "low", reason: "" };
+}
+
+
+/**
+ * v5.6.21: Tool call sonucunu güvenli yazdir - yol/size gizle
+ * Sadece status, success/error ve kisaltilmis onizleme gosterir
+ */
+function printToolCallSafe(name, args, result) {
+  console.log("  " + tui.styled("🔧 Tool: " + name, { color: tui.PALETTE.accent, bold: true }));
+  // Args'dan sadece ana bilgiyi goster
+  const argsShort = summarizeArgs(name, args);
+  if (argsShort) {
+    console.log(tui.styled("     Args: " + argsShort, { color: tui.PALETTE.muted }));
+  }
+  // Result'tan sadece status goster, yol/size gizle
+  if (!result) return;
+  if (result.error) {
+    console.log(tui.styled("     ✗ Hata: " + result.error.slice(0, 100), { color: tui.PALETTE.danger }));
+  } else {
+    const success = result.success !== false;
+    const resultStr = typeof result.result === "string"
+      ? result.result.slice(0, 200)
+      : JSON.stringify(result.result || {}).slice(0, 200);
+    // Yol/size gizle
+    const cleanResult = resultStr
+      .replace(/\/?Users\/[^"\\\s]+/g, "~")
+      .replace(/\/?home\/[^"\\\s]+/g, "~")
+      .replace(/"\w:\\\[^"\\\s]*/g, "...")
+      .replace(/"size":\d+/g, "")
+      .replace(/"path":"[^"]*"/g, "")
+      .replace(/"fileCount":\d+/g, "");
+    const statusIcon = success ? "✓" : "✗";
+    const statusColor = success ? tui.PALETTE.success : tui.PALETTE.danger;
+    console.log(tui.styled(`     ${statusIcon} Sonuç: ${cleanResult.trim()}`, { color: statusColor }));
+  }
+}
+
+/**
+ * Tool args'dan ana bilgiyi özetle
+ */
+function summarizeArgs(name, args) {
+  if (!args || Object.keys(args).length === 0) return null;
+  // Path varsa ~ olarak kisalt
+  if (args.path) {
+    const shortPath = (args.path || "")
+      .replace(/\/Users\/[^\/]+/g, "~")
+      .replace(/\/home\/[^\/]+/g, "~")
+      .replace(/^[A-Z]:\\Users\\[^\\]+/, "~");
+    return JSON.stringify({...args, path: shortPath}).slice(0, 120);
+  }
+  if (args.command) {
+    return JSON.stringify({command: args.command.slice(0, 80)}).slice(0, 120);
+  }
+  return JSON.stringify(args).slice(0, 120);
+}
+
 function printToolCall(name, args, result) {
   const argsStr = JSON.stringify(args).slice(0, 100);
   console.log("\n  " + tui.styled("  🔧 Tool: " + name, { color: tui.PALETTE.accent, bold: true }));
@@ -215,13 +361,17 @@ async function codeV5(targetPath) {
           }
 
           if (reply.tool_calls && reply.tool_calls.length > 0) {
-            // Approval for dangerous tools
+            // v5.6.21: Akıllı onay - sadece riskli işlemlerde onay iste
             let approved = true;
-            const dangerous = ["bash", "write_file", "edit_file", "mac_app_quit"];
             for (const tc of reply.tool_calls) {
-              if (dangerous.includes(tc.function.name)) {
+              let args = {};
+              try { args = JSON.parse(tc.function.arguments || "{}"); } catch {}
+              const risk = assessRisk(tc.function.name, args);
+              if (risk.requiresApproval) {
                 process.stdout.write("\n");
-                approved = await confirm(tc.function.name + " çalıştırılsın mı?");
+                approved = await confirm(
+                  `⚠ ${tc.function.name}: ${risk.reason}\n  Devam edilsin mi? (Y/n) `
+                );
                 if (!approved) break;
               }
             }
@@ -239,7 +389,8 @@ async function codeV5(targetPath) {
               if (name === "bash" || name === "shell_command") commandsRun++;
               if (name === "write_file" || name === "edit_file") filesChanged++;
               const result = await executeTool(name, args, toolDefs);
-              printToolCall(name, args, result);
+              // v5.6.21: Sonuç gizleme - sadece status goster, yol/size gizle
+              printToolCallSafe(name, args, result);
               const out = result.error
                 ? "ERROR: " + result.error
                 : (typeof result.result === "string" ? result.result : JSON.stringify(result.result));

package/src/commands/repl.js

@@ -886,7 +886,14 @@ async function startRepl(args) {
               const resultStr = typeof toolEvent.result.result === 'string'
                 ? toolEvent.result.result.slice(0, 200)
                 : JSON.stringify(toolEvent.result.result).slice(0, 200);
-              console.log(tui.styled('     ✓ Sonuç: ' + resultStr, { color: tui.PALETTE.success }));
+              // v5.6.21: Yol gizleme
+              const cleanResult = (resultStr || '')
+                .replace(/\/?Users\/[^"\s]+/g, '~')
+                .replace(/\/?home\/[^"\s]+/g, '~')
+                .replace(/"size":\d+/g, '')
+                .replace(/"path":"[^"]*"/g, '')
+                .replace(/"fileCount":\d+/g, '');
+              console.log(tui.styled('     ✓ Sonuç: ' + cleanResult.trim(), { color: tui.PALETTE.success }));
             }
             process.stdout.write(tui.styled('  AI   ', { color: tui.PALETTE.secondary, bold: true }));
           }