natureco-cli 5.64.0 → 5.64.1

package/CHANGELOG.md

@@ -2,6 +2,22 @@
 
 All notable changes to NatureCo CLI will be documented in this file.
 
+## [5.64.1] - 2026-07-13 — Reliable coding context and token-budgeted follow-ups
+
+### Fixed
+- `natureco code` now passes prior user/assistant turns into each workflow call, so follow-up requests correctly refer to files and work created earlier in the same session.
+- Workflow history excludes system/tool internals, empty messages and stale turns; oversized recent responses are safely truncated instead of being resent in full.
+- The help screen now parses provider URLs correctly (`api.minimax.io` instead of `https:`).
+
+### Token economy
+- Added workflow-history budgets to all profiles: Efficient 1,024 tokens, Balanced 2,048 tokens and Quality 8,192 tokens.
+- Long generated HTML/code no longer dominates every later prompt. A synthetic 32,000-character response is bounded from roughly 8,000 repeated tokens to 2,048 in Balanced mode (approximately 74% less repeated context).
+- Preserved recent-turn continuity while keeping token use bounded by both message count and estimated tokens.
+
+### Documentation and tests
+- Updated README release highlights, tool count, coding-session behavior and token-economy documentation.
+- Added regression coverage for same-session workflow context, role filtering, recency, oversized response truncation and provider hostname rendering.
+
 ## [5.64.0] - 2026-07-13 — Secure unified agent and operations foundation
 
 ### Added

package/README.md

@@ -12,7 +12,7 @@
 
 A terminal-native AI agent CLI — chat, write code, automate workflows, and connect **Telegram / Discord / Slack / WhatsApp / iMessage** and more.
 
-**A Claude Code & OpenClaw alternative** · Multi-agent orchestration · Cross-session memory · Dangerous-command approval · 12 providers, 200+ models · 57+ tools · 10 messaging channels.
+**A Claude Code & OpenClaw alternative** · Multi-agent orchestration · Cross-session memory · Token-budgeted context · Dangerous-command approval · 12 providers, 200+ models · 106 tools · 10 messaging channels.
 
 ```
 ███╗   ██╗ █████╗ ████████╗██╗   ██╗██████╗ ███████╗ ██████╗  ██████╗
@@ -51,6 +51,8 @@ natureco code
 
 | Version | Highlights |
 |---------|-----------|
+| **v5.64.1** | **Reliable follow-ups + lower token cost:** `natureco code` now preserves same-session context across workflow calls and caps repeated history by token budget (1,024 / 2,048 / 8,192). Provider labels are rendered correctly. |
+| **v5.64.0** | **Unified secure agent foundation:** one execution gateway, hard-stop guardrails, schema-validated tools, rollback/checkpoints, sourced memory, resilient channel delivery, OS keychains and encrypted sync. |
 | **v5.43.0** | **Security:** 9 vulnerabilities fixed in a 3-round audit (RCE chain, admin-rpc auth, cron persistence, channel access control). See [`SECURITY_AUDIT_SUMMARY.md`](SECURITY_AUDIT_SUMMARY.md). |
 | **v5.42.0** | **Token optimization** — prompts trimmed by ~76% (skill index made compact; big cost savings on multi-step tasks). |
 | **v5.41.0** | **Multi-agent orchestration** — the agent can spawn focused sub-agents (`sub_agent`) and produce step-by-step plans (`plan`) before acting. |
@@ -102,11 +104,12 @@ Two-tier policy (`deny` / `allowlist` / `full`) applies to **every** shell path
 ## ✨ Features
 
 ### 🤖 AI & Chat
-- **57+ tools** — file ops, web search, image generation, code execution, memory, and more
+- **106 tools** — file ops, web search, image generation, code execution, memory, automation, channels, and more
 - **Interactive REPL** — read_file, edit_file, bash, multi-turn conversation
 - **Slash commands** — `/memory`, `/help`, `/skills`, `/model`, `/clear`
 - **Streaming output** with live tool-call visibility and a thinking indicator
 - **Persistent memory** — fact-based, cross-session
+- **Token-budgeted context** — recent relevant turns are retained without repeatedly sending oversized code and tool output
 
 ### 💻 Coding Agent (Claude Code alternative)
 - **Read / Write / Edit** multi-file operations
@@ -114,6 +117,20 @@ Two-tier policy (`deny` / `allowlist` / `full`) applies to **every** shell path
 - **Multi-agent orchestration** — spawn focused sub-agents and plan before acting
 - **Skills** — progressive-disclosure expertise loaded on demand via `skill_view`
 - **Verify loop** — the agent runs and tests the code it writes
+- **Reliable follow-ups** — references such as “the game you just created” retain the current coding-session context
+- **Context profiles** — Efficient (1,024), Balanced (2,048), and Quality (8,192) workflow-history token budgets
+
+### ⚡ Token Economy
+
+NatureCo uses progressive disclosure and bounded context instead of sending every skill, tool result, and old response on every request:
+
+- Skills are discovered with `skill_find` and loaded only when needed with `skill_view`.
+- System, internal tool, and empty messages are excluded from workflow history.
+- Recent user/assistant turns are kept within the selected token profile.
+- Oversized generated code is truncated in later prompts while the file path and conversational intent remain available.
+- `natureco ask` stays tool-free by default; use `--tools` only when an action is required.
+
+For a 32,000-character previous response, the Balanced profile bounds repeated history to about 2,048 tokens instead of roughly 8,000—a reduction of approximately 74% for that repeated context.
 
 ### 📡 10 Messaging Channels
 
@@ -161,7 +178,7 @@ Two-tier policy (`deny` / `allowlist` / `full`) applies to **every** shell path
 
 | Command | Description |
 |---------|-------------|
-| `natureco chat` | Interactive REPL chat (57+ tools active) |
+| `natureco chat` | Interactive REPL chat (106 tools available) |
 | `natureco chat --resume` | Resume the previous session |
 | `natureco code` | Coding agent (write apps/scripts) |
 | `natureco code <file>` | Coding agent on a specific file |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "natureco-cli",
-  "version": "5.64.0",
+  "version": "5.64.1",
   "description": "Terminal-native AI agent CLI with bilingual TR/EN UI, multi-agent orchestration, persistent memory, secure tools and messaging integrations.",
   "bin": {
     "natureco": "bin/natureco.js"
@@ -27,6 +27,7 @@
     "lint:fix": "eslint src/ bin/ test/ --fix",
     "lint:errors-only": "eslint src/ bin/ test/ --quiet",
     "smoke": "node --check bin/natureco.js && node bin/natureco.js help",
+    "smoke:context": "node scripts/e2e-context-smoke.js",
     "postinstall": "node scripts/postinstall.js",
     "prepublishOnly": "node --check bin/natureco.js && eslint src/ bin/ test/ --quiet && vitest run"
   },

package/scripts/e2e-context-smoke.js

@@ -0,0 +1,33 @@
+'use strict';
+
+const workflow = require('../src/tools/workflow');
+
+async function main() {
+  const marker = `natureco-context-${Date.now()}.html`;
+  const firstTask = `Bu test oturumundaki dosya adi ${marker}. Arac calistirma; sadece dosya adini iceren kisa bir onay ver.`;
+  const first = await workflow.execute({ action: 'run', task: firstTask });
+  if (!first || first.success === false || !first.reply) {
+    throw new Error(`First turn failed: ${first?.error || 'empty reply'}`);
+  }
+
+  const history = [
+    { role: 'user', content: firstTask },
+    { role: 'assistant', content: String(first.reply) },
+  ];
+  const second = await workflow.execute({
+    action: 'run',
+    task: 'Az once konustugumuz dosyanin tam adi neydi? Yalnizca dosya adini soyle.',
+    conversationHistory: history,
+  });
+  const reply = String(second?.reply || '');
+  if (!second || second.success === false || !reply.includes(marker)) {
+    throw new Error(`Context recall failed. Expected ${marker}; received: ${reply.slice(0, 240)}`);
+  }
+
+  console.log(JSON.stringify({ ok: true, marker, reply: reply.trim() }));
+}
+
+main().catch(error => {
+  console.error(error.message);
+  process.exitCode = 1;
+});

package/src/commands/code_v5.js

@@ -34,6 +34,8 @@ const { getTaskManager } = require("../utils/tasks");
 const { buildTiers, assemble, discoverProjectRules } = require("../utils/system-prompt");
 const { buildSkillIndex } = require("../utils/skill-index");
 const { AgentCore } = require("../utils/agent-core");
+const { prepareConversationHistory } = require("../utils/conversation-context");
+const tokenBudget = require("../utils/token-budget");
 
 const agentCore = new AgentCore({ maxIterations: 10 });
 
@@ -522,7 +524,14 @@ async function codeV5(targetPath) {
 
       // Workflow step — run before every request
       process.stdout.write(tui.styled('\r  🔧 workflow...  ', { color: tui.PALETTE.muted }));
-      const wfResult = await executeTool('workflow', { action: 'run', task: input }, toolDefs);
+      const wfResult = await executeTool('workflow', {
+        action: 'run',
+        task: input,
+        conversationHistory: prepareConversationHistory(messages, {
+          maxMessages: tokenBudget.load().conversationInContext,
+          maxTokens: tokenBudget.load().workflowHistoryMaxTokens,
+        }),
+      }, toolDefs);
       const wf = wfResult?.result || {};
       if (wf.success !== false) {
         const loaded = wf.skillsLoaded && wf.skillsLoaded.length > 0 ? ` [skill: ${wf.skillsLoaded.join(', ')}]` : '';

package/src/commands/help.js

@@ -12,6 +12,15 @@ const { getLang } = require('../utils/i18n');
 
 const L = (tr, en) => (getLang() === 'en' ? en : tr);
 
+function providerHostname(providerUrl) {
+  if (!providerUrl) return '';
+  try {
+    return new URL(providerUrl).hostname;
+  } catch {
+    return String(providerUrl).replace(/^https?:\/\//i, '').split('/')[0];
+  }
+}
+
 function help() {
   const config = getConfig() || {};
   const version = require('../../package.json').version;
@@ -203,7 +212,7 @@ function help() {
       tui.styled('  ╭' + '─'.repeat(cardW) + '╮', { color: tui.PALETTE.border }),
     ];
     if (config.providerUrl) {
-      const provider = config.providerUrl.replace('https?:\/\/', '').split('/')[0];
+      const provider = providerHostname(config.providerUrl);
       cardLines.push(tui.styled('  │ ', { color: tui.PALETTE.border }) + tui.C.muted('Provider   ') + tui.styled(provider.padEnd(38), { color: tui.PALETTE.text, bold: true }) + tui.styled(' │', { color: tui.PALETTE.border }));
     }
     if (config.providerModel) {
@@ -228,3 +237,4 @@ function help() {
 }
 
 module.exports = help;
+module.exports.providerHostname = providerHostname;

package/src/utils/conversation-context.js

@@ -0,0 +1,52 @@
+'use strict';
+
+function estimateTokens(content) {
+  if (!content) return 0;
+  return Math.ceil(String(content).length / 4);
+}
+
+function prepareConversationHistory(messages, options = {}) {
+  if (!Array.isArray(messages)) return [];
+
+  if (typeof options === 'number') options = { maxMessages: options };
+  const maxMessages = Math.max(1, options.maxMessages || 20);
+  const maxTokens = Math.max(1, options.maxTokens || 2048);
+
+  const candidates = messages
+    .filter(message =>
+      message &&
+      (message.role === 'user' || message.role === 'assistant') &&
+      typeof message.content === 'string' &&
+      message.content.trim()
+    )
+    .slice(-maxMessages);
+
+  const selected = [];
+  let remainingTokens = maxTokens;
+
+  for (let i = candidates.length - 1; i >= 0 && remainingTokens > 0; i--) {
+    const message = candidates[i];
+    const content = message.content.trim();
+    const contentTokens = estimateTokens(content);
+    if (contentTokens <= remainingTokens) {
+      selected.unshift({ role: message.role, content });
+      remainingTokens -= contentTokens;
+      continue;
+    }
+
+    // Preserve the newest oversized turn, but never let a generated file or
+    // verbose tool summary consume the entire next request's context budget.
+    if (selected.length === 0) {
+      const maxChars = Math.max(4, remainingTokens * 4);
+      selected.unshift({
+        role: message.role,
+        content: content.slice(0, Math.max(0, maxChars - 36)) + '\n[... context truncated ...]',
+      });
+    }
+    break;
+  }
+
+  return selected;
+}
+
+module.exports = { estimateTokens, prepareConversationHistory };

package/src/utils/token-budget.js

@@ -22,6 +22,7 @@ const PRESETS = {
     fileContentMaxChars: 1000,
     conversationOnDisk: 6,
     conversationInContext: 8,
+    workflowHistoryMaxTokens: 1024,
     autoCompact: true,
     compactModel: null,
     reservedTokens: 1024
@@ -42,6 +43,7 @@ const PRESETS = {
     fileContentMaxChars: 2000,
     conversationOnDisk: 10,
     conversationInContext: 12,
+    workflowHistoryMaxTokens: 2048,
     autoCompact: true,
     compactModel: null,
     reservedTokens: 2048
@@ -62,6 +64,7 @@ const PRESETS = {
     fileContentMaxChars: 5000,
     conversationOnDisk: 20,
     conversationInContext: 25,
+    workflowHistoryMaxTokens: 8192,
     autoCompact: false,
     compactModel: null,
     reservedTokens: 4096