natureco-cli 5.7.18 → 5.8.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "natureco-cli",
-  "version": "5.7.18",
+  "version": "5.8.0",
   "description": "OpenClaw'dan daha güvenli, daha hızlı, daha ucuz AI agent CLI. Multi-agent, self-evolving skills, audit log, maliyet optimizasyonu ve NatureCo platform-native.",
   "bin": {
     "natureco": "bin/natureco.js"

package/src/commands/medium.js

@@ -1,7 +1,7 @@
 /**
  * natureco medium — Medium makale yayınlama (Phase 6)
  *
- * Parton'un hedefi: ayda en az 4 Medium makalesi.
+ * Medium entegrasyonu — makale yayinlama.
  * Bu komut CLI'dan taslak yayınlamayı sağlar.
  *
  * Kullanım:

package/src/commands/naturehub.js

@@ -8,7 +8,7 @@
  *   natureco naturehub trending         Trend olan konular
  *   natureco naturehub config           Ayarları göster
  *
- * API endpoint: api.natureco.me/naturehub/* (placeholder, gerçek API Parton sağlayacak)
+ * API endpoint: api.natureco.me/naturehub/* (placeholder)
  */
 
 const chalk = require('chalk');

package/src/commands/repl.js

@@ -27,7 +27,8 @@ const { accumulateToolCallDeltas, finalizeToolCalls } = require('../utils/stream
 const { createPasteSafeInput, createOutputFilter, enableBracketedPaste, disableBracketedPaste, restoreNewlines, clearPasteContext } = require('../utils/paste-safe-input');
 const { getMemoryStore } = require('../utils/memory-store');
 const { buildSkillIndex } = require('../utils/skill-index');
-const { buildTiers, assemble, stableContextKey } = require('../utils/system-prompt');
+const { buildTiers, assemble } = require('../utils/system-prompt');
+const { ToolGuardrails } = require('../utils/tool-guardrails');
 
 // v5.4.6: Model adi sizintisini engelle — global'e ata, callback'lerden erisebilir olsun
 const MODEL_NAMES_TO_HIDE = ['MiniMax-M2.5', 'MiniMaxM2.5', 'minimaxm25', 'Claude-3', 'GPT-4', 'ChatGPT'];
@@ -36,11 +37,11 @@ function fixModelNameLeak(text, botName) {
   let fixed = text;
   for (const modelName of MODEL_NAMES_TO_HIDE) {
     const regex = new RegExp(modelName.replace(/[.*+?^${}()|[\]\\]/g, '\\$&'), 'gi');
-    fixed = fixed.replace(regex, botName || 'İchigo');
+    fixed = fixed.replace(regex, botName || 'asistan');
   }
-  fixed = fixed.replace(/Ben\s+MiniMax[^.,!?\n]*/gi, 'Ben İchigo');
-  fixed = fixed.replace(/I'm\s+MiniMax[^.,!?\n]*/gi, "I'm İchigo");
-  fixed = fixed.replace(/I am\s+Claude[^.,!?\n]*/gi, 'I am İchigo');
+  fixed = fixed.replace(/Ben\s+MiniMax[^.,!?\n]*/gi, 'Ben ' + (botName || 'asistan'));
+  fixed = fixed.replace(/I'm\s+MiniMax[^.,!?\n]*/gi, "I'm " + (botName || 'asistan'));
+  fixed = fixed.replace(/I am\s+Claude[^.,!?\n]*/gi, 'I am ' + (botName || 'asistan'));
   return fixed;
 }
 global.fixModelNameLeak = fixModelNameLeak;
@@ -58,6 +59,46 @@ function getToolDefs() {
   return _toolDefs;
 }
 
+// ── System prompt tier cache (Hermes-style prefix cache warmth) ────────────
+// stable+context built once at session start, volatile rebuilt per turn.
+let _cachedStable = '';
+let _cachedContext = '';
+let _cachedTierOpts = null; // opts snapshot for volatile-only rebuilds
+
+function rebuildSystemPrompt(opts) {
+  // If stable/context opts changed, rebuild them too
+  const needsFullRebuild = !_cachedTierOpts ||
+    _cachedTierOpts.botName !== opts.botName ||
+    _cachedTierOpts.soulSummary !== opts.soulSummary ||
+    _cachedTierOpts.skillsIndexBlock !== opts.skillsIndexBlock ||
+    _cachedTierOpts.crossSessionContext !== opts.crossSessionContext;
+  
+  if (needsFullRebuild || !_cachedStable) {
+    const tiers = buildTiers(opts);
+    _cachedStable = tiers.stable;
+    _cachedContext = tiers.context;
+    _cachedTierOpts = {
+      botName: opts.botName,
+      soulSummary: opts.soulSummary,
+      skillsIndexBlock: opts.skillsIndexBlock,
+      crossSessionContext: opts.crossSessionContext,
+    };
+  }
+  // Volatile always rebuilt fresh
+  const volatileOnly = buildTiers({
+    ...opts,
+    // Pass empty strings for stable/context fields so buildTiers only builds volatile
+    botName: '',
+    soulSummary: '',
+    skillsIndexBlock: '',
+    crossSessionContext: '',
+  });
+  return assemble(_cachedStable, _cachedContext, volatileOnly.volatile);
+}
+
+// ── Tool Guardrails instance (Hermes-style) ─────────────────────────────
+const guardrails = new ToolGuardrails();
+
 // CLI komutları (REPL içinden çalıştırılabilir)
 const CLI_COMMANDS = {
   '/doctor':    { desc: 'Sistem sağlığı kontrolü', run: ['doctor'] },
@@ -102,7 +143,7 @@ function loadMemory(username) {
   try {
     if (fs.existsSync(file)) return JSON.parse(fs.readFileSync(file, 'utf8'));
   } catch {}
-  return { name: username || 'Kullanıcı', nickname: null, botName: 'İchigo', facts: [], preferences: [], history: [] };
+  return { name: username || 'Kullanıcı', nickname: null, botName: 'Asistan', facts: [], preferences: [], history: [] };
 }
 
 function saveMemory(username, memory) {
@@ -233,6 +274,7 @@ async function sendStreaming(providerUrl, providerApiKey, messages, model, onChu
   const isMM = isMiniMax(providerUrl);
   const toolDefs = getToolDefs();
   const toolParam = toOpenAIFormat(toolDefs);
+  guardrails.reset();
 
   let currentMessages = messages;
   let fullText = '';
@@ -268,17 +310,18 @@ async function sendStreaming(providerUrl, providerApiKey, messages, model, onChu
 
   while (iterations < MAX_TOOL_ITERATIONS) {
     iterations++;
+    const shouldStream = !isMM; // MiniMax streaming endpoint doesn't support tool_calls
     const body = {
       model,
       messages: currentMessages,
-      stream: false,  // v5.4.18: tum cevap bekle, sonra fix et
+      stream: shouldStream,
       temperature: 0.3,
       max_tokens: 2048,
     };
     if (toolParam) body.tools = toolParam;
     if (isMM) body.tool_choice = 'auto'; // MiniMax için explicit
 
-    if (!body.stream) {
+    if (!shouldStream) {
       // MiniMax (non-stream) — tool_calls desteklemiyor varsayalım
       const res = await apiRequest(providerUrl, providerApiKey, body, false);
       const msg = res.choices?.[0]?.message || {};
@@ -408,12 +451,25 @@ async function processToolCalls(toolCalls, onToolCall) {
     return { name, args, id };
   });
 
-  // Separate parallel-safe and sequential tools
-  const parallelBatch = parsed.filter(p => PARALLEL_SAFE_TOOLS.has(p.name));
-  const sequentialBatch = parsed.filter(p => !PARALLEL_SAFE_TOOLS.has(p.name));
+  // Filter out blocked tools via guardrails
+  guardrails.startIteration();
+  const blocked = parsed.filter(p => {
+    const check = guardrails.check(p.name, p.args);
+    if (check.blocked) {
+      if (onToolCall) onToolCall({ name: p.name, args: p.args, status: 'done', result: { error: check.reason } });
+      results.push({ ...p, result: { error: check.reason }, _blocked: true });
+      return false;
+    }
+    return true;
+  });
+  const allowed = parsed.filter(p => !results.some(r => r.id === p.id && r._blocked));
+
+  // Separate parallel-safe and sequential tools (over allowed only)
+  const parallelBatch = allowed.filter(p => PARALLEL_SAFE_TOOLS.has(p.name));
+  const sequentialBatch = allowed.filter(p => !PARALLEL_SAFE_TOOLS.has(p.name));
 
-  // Notify UI for all
-  for (const p of parsed) {
+  // Notify UI for all non-blocked
+  for (const p of allowed) {
     if (onToolCall) onToolCall({ name: p.name, args: p.args, status: 'running' });
   }
 
@@ -421,6 +477,8 @@ async function processToolCalls(toolCalls, onToolCall) {
   if (parallelBatch.length > 0) {
     const parallelResults = await Promise.all(parallelBatch.map(async (p) => {
       const result = await executeTool(p.name, p.args, toolDefs);
+      const success = result?.success !== false;
+      guardrails.record(p.name, p.args, success);
       return { ...p, result };
     }));
     results.push(...parallelResults);
@@ -429,9 +487,16 @@ async function processToolCalls(toolCalls, onToolCall) {
   // Run sequential batch one at a time
   for (const p of sequentialBatch) {
     const result = await executeTool(p.name, p.args, toolDefs);
+    const success = result?.success !== false;
+    guardrails.record(p.name, p.args, success);
     results.push({ ...p, result });
   }
 
+  // No-progress check: if all tools failed, inject warning
+  if (guardrails.isNoProgress()) {
+    if (onToolCall) onToolCall({ name: '_no_progress', args: null, status: 'done', result: { error: 'All tools failed this iteration' } });
+  }
+
   // Notify UI done + build messages
   const messages = [];
   for (const { name, id, result } of results) {
@@ -513,7 +578,7 @@ async function startRepl(args) {
 
   // v5.6.19: Oncelik config.botName, sonra memory.botName
   if (!memory.botName) {
-    memory.botName = cfg.botName || 'İchigo';
+    memory.botName = cfg.botName || 'Asistan';
   }
   // BotName'i memory'ye persist et (her oturumda ayni kalsin)
   try {
@@ -575,26 +640,23 @@ async function startRepl(args) {
   }
 
   // System prompt oluştur (memory + identity + persistent bağlam)
-  // v5.4.6: Bot adı zorlaması EN GÜÇLÜ + SOUL.md EN BAŞTA
-  const botName = memory.botName || 'İchigo';
-  const userName = memory.name || memory.nickname || 'kanka';
   // v5.6.5: Kucuk model tespiti (Groq, Mistral Small, Ollama) - SOUL injection skip
+  const botName = memory.botName || 'Asistan';
+  const userName = memory.name || memory.nickname || 'kanka';
   const isSmallModel = (cfg.providerUrl || '').includes('groq.com') || 
                        (cfg.providerUrl || '').includes('mistral.ai') ||
                        (cfg.providerUrl || '').includes('localhost') ||
                        (cfg.providerUrl || '').includes('ollama');
-  // `let` (not `const`) because /system <text> reassigns it at line ~796.
-  // Before this fix, /system would throw "Assignment to constant variable"
-  // and tear down the REPL session mid-conversation.
-  const tiers = buildTiers({
+  // Build system prompt with tier caching (stable+context cached, volatile fresh)
+  const promptOpts = {
     botName, userName, soulSummary, isSmallModel,
     memorySnapshotBlock, skillsIndexBlock,
     crossSessionContext: crossSessionContext || '',
     userHome: cfg.userHome || '',
     hasHistory: messages.length > 0,
     memoryFacts: memory.facts || [],
-  });
-  let systemPrompt = assemble(tiers.stable, tiers.context, tiers.volatile);
+  };
+  let systemPrompt = rebuildSystemPrompt(promptOpts);
 
   if (messages.length === 0) {
     messages.push({ role: 'system', content: systemPrompt, _internal: true });
@@ -612,14 +674,14 @@ async function startRepl(args) {
   console.log(tui.C.muted('  Provider: ') + tui.C.brand(providerUrl.replace(/https?:\/\//, '')));
   console.log(tui.C.muted('  Model:    ') + tui.C.brand(model));
   console.log(tui.C.muted('  Kullanıcı: ') + tui.C.brand((memory.nickname || cfg.userName) + (memory.nickname ? ` (${cfg.userName})` : '')));
-  console.log(tui.C.muted('  Bot:      ') + tui.C.brand(memory.botName || 'İchigo'));
+  console.log(tui.C.muted('  Bot:      ') + tui.C.brand(memory.botName || 'Asistan'));
   if (messages.length > 1) {
     console.log(tui.C.muted('  Oturum:   ') + tui.C.amber(`${messages.filter(m => m.role === 'user' || m.role === 'assistant').length} mesaj (resume)`));
   }
   console.log(tui.C.muted('  Komutlar: ') + tui.C.yellow('/help') + tui.C.muted(' · ') + tui.C.yellow('/memory') + tui.C.muted(' · ') + tui.C.yellow('/sessions') + tui.C.muted(' · ') + tui.C.yellow('/exit'));
   console.log('');
   // v5.4.7: Hard-coded kimlik
-  const displayBotName = memory.botName || 'İchigo';
+  const displayBotName = memory.botName || 'Asistan';
   const displayUserName = userName || 'kanka';
   console.log(tui.C.brand('  👋 Ben ' + displayBotName + ', ' + displayUserName + '. Sen nasilsin?'));
   console.log('');
@@ -683,31 +745,30 @@ async function startRepl(args) {
       // Pattern-based extraction (zaten extractFacts var)
       const newFacts = extractFacts(messages, memory.facts || []);
 
-      // Bazi user message'lari da tara - 'Parton', 'Ichigo', 'patron', 'CEO' gecerse ekle
+      // Bazi user message'lari da tara — genel kalıplarla fact çıkar
       const userMessages = messages.filter(m => m.role === 'user' && !m._internal);
       for (const msg of userMessages) {
         const text = (msg.content || '').toLowerCase();
 
         // BotName hatirlatmasi
-        if (text.includes('ichigo') && text.includes('ad')) {
-          if (memory.botName !== 'İchigo') {
-            memory.botName = 'İchigo';
-          }
+        if (text.includes('ad') && (text.includes('adin') || text.includes('ismin'))) {
+          // Bot adı sorgulanmış olabilir, mevcut adı koru
         }
 
-        // Patron/partnership
-        if ((text.includes('patron') || text.includes('patronum')) && text.length < 100) {
-          const fact = 'Kullanici benim patronum, ona patron diye hitap etmeliyim';
-          if (!(memory.facts || []).some(f => f.value === fact)) {
-            newFacts.push({ value: fact, score: 8, category: 'personal', createdAt: new Date().toISOString() });
-          }
-        }
-
-        // NatureCo CEO
-        if (text.includes('natureco') && text.includes('ceo')) {
-          const fact = "Kullanici NatureCo CEO'sudur";
-          if (!(memory.facts || []).some(f => f.value === fact)) {
-            newFacts.push({ value: fact, score: 9, category: 'work', createdAt: new Date().toISOString() });
+        // Kisilik tercihleri (genel pattern'ler)
+        const prefPatterns = [
+          { match: /(?:benim ad[ıi]m?|bana\s+.*de|ad[ıi]m?)\s+(\w+)/i, category: 'personal', key: 'ad' },
+          { match: /(?:seviyorum|hoşlan[ıi]yorum|beğeniyorum)\s+(\w+)/i, category: 'preference', key: 'sevilen' },
+          { match: /(?:yaşıyorum|oturuyorum|kalıyorum)\s+(\w+)/i, category: 'location', key: 'yer' },
+        ];
+        for (const p of prefPatterns) {
+          const m2 = msg.content.match(p.match);
+          if (m2) {
+            const val = m2[1].toLowerCase();
+            const fact = `Kullanici ${p.key}: ${val}`;
+            if (!(memory.facts || []).some(f => f.value === fact)) {
+              newFacts.push({ value: fact, score: 6, category: p.category, createdAt: new Date().toISOString() });
+            }
           }
         }
       }
@@ -774,7 +835,7 @@ async function startRepl(args) {
           console.log(chalk.cyan('\n  🧠 Memory:\n'));
           console.log('  Kullanıcı: ' + chalk.cyan(memory.name));
           console.log('  Nickname: ' + chalk.cyan(memory.nickname || '(yok)'));
-          console.log('  Bot: ' + chalk.cyan(memory.botName || 'İchigo'));
+          console.log('  Bot: ' + chalk.cyan(memory.botName || 'Asistan'));
           if (memory.facts && memory.facts.length > 0) {
             console.log('  Facts (' + memory.facts.length + '):');
             for (const f of memory.facts) {
@@ -790,10 +851,13 @@ async function startRepl(args) {
             if (fs.existsSync(path.join(MEMORY_DIR, `${(cfg.userName || 'default').toLowerCase()}.json`))) {
               fs.unlinkSync(path.join(MEMORY_DIR, `${(cfg.userName || 'default').toLowerCase()}.json`));
             }
-            memory = { name: cfg.userName, nickname: null, botName: 'İchigo', facts: [], preferences: [], history: [] };
-            // System prompt'u sıfırla
-            const newSysPrompt = systemPrompt.replace(/Kullanıcı hakkında bildiklerin:.*$/, '').trim();
-            messages[0] = { role: 'system', content: newSysPrompt, _internal: true };
+            memory = { name: cfg.userName, nickname: null, botName: 'Asistan', facts: [], preferences: [], history: [] };
+            // System prompt'u rebuild with cleared memory
+            promptOpts.memoryFacts = [];
+            memoryStore.clear();
+            promptOpts.memorySnapshotBlock = memoryStore.getSystemPromptBlock();
+            systemPrompt = rebuildSystemPrompt(promptOpts);
+            messages[0] = { role: 'system', content: systemPrompt, _internal: true };
             console.log(chalk.green('  ✓ Memory temizlendi'));
           } catch (e) {
             console.log(chalk.red('  ❌ ' + e.message));
@@ -823,7 +887,15 @@ async function startRepl(args) {
           break;
         case 'system':
           if (!arg) { console.log(chalk.yellow('  Kullanım: /system <text>')); break; }
-          systemPrompt = arg;
+          // Override stable tier directly (user's custom text)
+          _cachedStable = arg;
+          // Rebuild volatile only (context stays unchanged)
+          memoryStore.load();
+          promptOpts.memorySnapshotBlock = memoryStore.getSystemPromptBlock();
+          promptOpts.memoryFacts = memory.facts || [];
+          const volOpts = { ...promptOpts, botName: '', soulSummary: '', skillsIndexBlock: '', crossSessionContext: '' };
+          const volTiers = buildTiers(volOpts);
+          systemPrompt = assemble(_cachedStable, _cachedContext, volTiers.volatile);
           messages[0] = { role: 'system', content: systemPrompt, _internal: true };
           console.log(chalk.green('  ✓ System prompt güncellendi'));
           break;
@@ -833,11 +905,17 @@ async function startRepl(args) {
           console.log(chalk.green('  ✓ Model: ') + chalk.cyan(model));
           break;
         case 'identity':
-          if (!arg) { console.log(chalk.yellow(`  Mevcut: ${memory.botName || 'İchigo'}`)); break; }
+          if (!arg) { console.log(chalk.yellow(`  Mevcut: ${memory.botName || 'Asistan'}`)); break; }
           memory.botName = arg;
           saveMemory(cfg.userName, memory);
-          const newSys = systemPrompt.replace(/Sen \w+ adında/, `Sen ${arg} adında`);
-          messages[0] = { role: 'system', content: newSys, _internal: true };
+          // Rebuild stable tier with new botName
+          promptOpts.botName = arg;
+          _cachedTierOpts = null; // force full rebuild
+          memoryStore.load();
+          promptOpts.memorySnapshotBlock = memoryStore.getSystemPromptBlock();
+          promptOpts.memoryFacts = memory.facts || [];
+          systemPrompt = rebuildSystemPrompt(promptOpts);
+          messages[0] = { role: 'system', content: systemPrompt, _internal: true };
           console.log(chalk.green('  ✓ Bot adı: ') + chalk.cyan(arg));
           break;
         case 'tokens':
@@ -884,7 +962,7 @@ async function startRepl(args) {
     if (isIdentityQuestion) {
       // v5.6.10: Hard-coded prefix minimal - model cevabini bozuyordu
       // Once sadece isim yaz, modelin devamini getirsin
-      const displayName = memory.botName || 'İchigo';
+      const displayName = memory.botName || 'Asistan';
       process.stdout.write(tui.styled('\n  AI   ', { color: tui.PALETTE.secondary, bold: true }));
       process.stdout.write('Merhaba! Ben ' + displayName + '. ');
     }
@@ -892,6 +970,14 @@ async function startRepl(args) {
     // AI cevabı
     process.stdout.write(tui.styled('\n  AI   ', { color: tui.PALETTE.secondary, bold: true }));
     try {
+      // Per-turn: rebuild volatile tier with current memory snapshot (Hermes frozen snapshot)
+      guardrails.reset();
+      memory = loadMemory(cfg.userName);
+      memoryStore.load();
+      promptOpts.memorySnapshotBlock = memoryStore.getSystemPromptBlock();
+      promptOpts.memoryFacts = memory.facts || [];
+      systemPrompt = rebuildSystemPrompt(promptOpts);
+      messages[0] = { role: 'system', content: systemPrompt, _internal: true };
       const apiMessages = messages.filter(m => !m._internal);
       const reply = await sendStreaming(
         providerUrl,
@@ -900,24 +986,24 @@ async function startRepl(args) {
         model,
         // v5.6.12: Callback bos - tam metin 'reply' olarak gelecek (non-stream mode)
         () => {},
-        // Tool call callback — minimal Hermes-style one-liner
-        (toolEvent) => {
+        // Tool call callback — Hermes-style per-tool status line
+        ((toolEvent) => {
+          const name = toolEvent.name;
           if (toolEvent.status === 'running') {
-            process.stdout.write(tui.styled('\r  🔧 ' + toolEvent.name + '...  ', { color: tui.PALETTE.muted }));
+            process.stdout.write(tui.styled('\r  🔧 ' + name + '...  ', { color: tui.PALETTE.muted }));
           } else if (toolEvent.status === 'done') {
-            if (toolEvent.result.error) {
-              process.stdout.write(tui.styled('\r  ✗ ' + toolEvent.name + ': ' + toolEvent.result.error.slice(0, 80) + '\n', { color: tui.PALETTE.danger }));
+            if (toolEvent.result?.error) {
+              process.stdout.write(tui.styled('  ✗ ' + name + ': ' + String(toolEvent.result.error).slice(0, 80) + '\n', { color: tui.PALETTE.danger }));
             } else {
-              process.stdout.write('\r' + tui.styled('  ✓ ' + toolEvent.name + '    ', { color: tui.PALETTE.success }) + '\r');
+              process.stdout.write(tui.styled('  ✓ ' + name + '\n', { color: tui.PALETTE.success }));
             }
-            process.stdout.write(tui.styled('  AI   ', { color: tui.PALETTE.secondary, bold: true }));
           }
-        }
+        })
       );
       // v5.6.12: Tam metin 'reply' olarak zaten geldi (non-stream mode)
       const fullReply = String(reply || '');
       // Bot adini al
-      const displayBotName = memory.botName || 'İchigo';
+      const displayBotName = memory.botName || 'Asistan';
       // v5.6.9: Tum model adlarini ve varyasyonlari temizle
       let fixedReply = String(fullReply);
       // Bilinen model adlari - tum varyasyonlar
@@ -933,13 +1019,9 @@ async function startRepl(args) {
       fixedReply = fixedReply.replace(/Ben\s+MiniMax[^.!?,;:\n]*/gi, 'Ben ' + displayBotName);
       fixedReply = fixedReply.replace(/Ben\s+Claude[^.!?,;:\n]*/gi, 'Ben ' + displayBotName);
       fixedReply = fixedReply.replace(/Ben\s+GPT[^.!?,;:\n]*/gi, 'Ben ' + displayBotName);
-      fixedReply = fixedReply.replace(/Ben\s+İchigo[\s\w\.]*/gi, 'Ben ' + displayBotName);
+      fixedReply = fixedReply.replace(/Ben\s+Asistan[\s\w\.]*/gi, 'Ben ' + displayBotName);
       // Markdown ** ile cevrili model adi
       fixedReply = fixedReply.replace(/\*\*(?:MiniMax|Claude|GPT|M2\.5|M2)[^\*]*\*\*/gi, '**' + displayBotName + '**');
-      // "İchigo" varyasyonlari
-      fixedReply = fixedReply.replace(/(İchigo)(\d)([a-zA-ZçğıöşüÇĞİÖŞÜ])/g, displayBotName + ' $3');
-      fixedReply = fixedReply.replace(/İchigo[\.\s\-_]*\d+/g, displayBotName);
-      fixedReply = fixedReply.replace(/İchigo\./g, displayBotName);
       // Cevap yazdir
       process.stdout.write('\n' + fixedReply + '\n');
       // v5.7.18: Tool call geçmişini kalıcı messages'a ekle — model sonraki turlarda tool sonuçlarını görsün

package/src/commands/xp.js

@@ -1,7 +1,7 @@
 /**
  * natureco xp — NatureCo XP/Level sistemi (Phase 6)
  *
- * Parton'un hedeflerinden biri: kullanıcıları ödüllendirmek.
+ * XP/Level sistemi — kullanıcıları ödüllendirir.
  * XP kazanma yolları:
  *   - Komut çalıştırma (1 XP)
  *   - Audit log kaydı (0.1 XP)

package/src/tools/calendar_add.js

@@ -1,7 +1,7 @@
 /**
  * calendar_add - macOS Calendar'a etkinlik ekle (v4.9.1)
  *
- * Parton'un OS-level kontrol vizyonu için.
+ * OS-level calendar kontrolü
  * "Yarin saat 14:00 toplantim var" -> Takvime ekler.
  */
 

package/src/tools/cross_session_memory.js

@@ -1,7 +1,7 @@
 /**
  * cross_session_memory - Oturumlar arasi hafiza (v5.3.1)
  *
- * Parton'un vizyonu: "Hafta sonra gelince de beni hatirlayacak"
+ * Cross-session hafiza — oturumlar arasi baglam korur
  *
  * Ozellikler:
  *   - Tum session'lari tarihsel sirayla yukler

package/src/tools/dashboard.js

@@ -1,7 +1,7 @@
 /**
  * dashboard - Web Dashboard v2 (v5.4.0)
  *
- * Parton'un vizyonu: "CLI'yi web'den de kontrol edebileyim"
+ * Dashboard — CLI'yi web'den kontrol eder
  *
  * Ozellikler:
  *   - Real-time tool execution (WebSocket)
@@ -189,7 +189,7 @@ const DASHBOARD_HTML = `
     </div>
 
     <div class="footer">
-      <p>NatureCo CLI v5.4.0 - Parton & Sasuke - <span id="lastUpdate"></span></p>
+      <p>NatureCo CLI v5.4.0 - <span id="lastUpdate"></span></p>
     </div>
   </div>
   <script>

package/src/tools/delegate_task.js

@@ -9,7 +9,7 @@ const { spawn } = require("child_process");
 const path = require("path");
 const os = require("os");
 
-// v5.2.0: Agent alias mapping (Parton'un testinden — "review" diye bir agent yok)
+// v5.2.0: Agent alias mapping
 const AGENT_ALIASES = {
   "review": "general",          // eskiden review diye bir vardi, simdi general
   "analyze": "explore",

package/src/tools/mac_alarm.js

@@ -1,7 +1,7 @@
 /**
  * mac_alarm - macOS Clock app ile alarm kur (v5.1.1)
  *
- * Parton'un istegi: "Saat uygulamasi uzerinden saat 18:00 alarm kur"
+ * macOS alarm — saat uygulamasi uzerinden alarm kurar
  * Eski reminder_add date parse edemiyordu. Bu tool AppleScript ile
  * Clock.app'in events sistemine yazar (alarm orada saklanir).
  */

package/src/tools/memory_write.js

@@ -2,7 +2,7 @@
  * memory_write - Memory'ye fact/kayit yaz (v5.1.1)
  *
  * REPL'in extractMemoryFromMessage ozelligini tool olarak expose eder.
- * Parton'un vizyonu: "Benim asistanim, her seyimi hatirlayacak"
+ * Kalici hafiza — faktlari kaydeder, puanlar, eskiyenleri temizler
  */
 
 const fs = require("fs");
@@ -133,7 +133,7 @@ function verifyMemoryWrite(username, expectedFact, expectedBotName) {
 
 function addMemory({ username, fact, score = 5, category = "general", botName, nickname, name }) {
   // Username yoksa ve 'name' parametresi varsa, onu username olarak kullan
-  // (Parton'un "patron" diye hitap etmesi durumu icin)
+  // (hitap bicimi icin)
   const effectiveUsername = username || (name && name.toLowerCase()) || 'default';
   if (!effectiveUsername || effectiveUsername === 'default') {
     // Hicbir username yok, default.json'a yaz
@@ -232,8 +232,8 @@ module.exports = {
   inputSchema: {
     type: "object",
     properties: {
-      username: { type: "string", description: "Kullanici adi (ornek: 'gencay' veya 'parton')" },
-      fact: { type: "string", description: 'Yeni fact (ornek: "Kullanici Naruto karakterini seviyor", "Istanbul\'da yasiyor")' },
+      username: { type: "string", description: "Kullanici adi (ornek: 'ahmet' veya 'default')" },
+      fact: { type: "string", description: 'Yeni fact (ornek: "Kullanici kahve seviyor", "Istanbul\'da yasiyor")' },
       score: { type: "number", description: "Onem derecesi 1-10 (default 5)" },
       category: { type: "string", description: "Kategori: personal, preference, work, hobby, fact (default general)" },
       botName: { type: "string", description: "Bot adini degistir (memory.botName)" },

package/src/tools/plan.js

@@ -1,7 +1,7 @@
 /**
  * plan - Plan modu (v5.3.1)
  *
- * Parton'un vizyonu: "Karmasik isleri once planlasin, sonra calistirayim"
+ * Planlama — karmasik isleri adimlara bolup calistirir
  *
  * Ozellikler:
  *   - Sadece plan yapar, hicbir tool calistirmaz

package/src/tools/plugin.js

@@ -1,7 +1,7 @@
 /**
  * plugin.js — Plugin sistemi (v5.4.0)
  *
- * Parton'un vizyonu: "Topluluk plugin uretsin, istedigi gibi genisletebilsin"
+ * Plugin sistemi — topluluk plugin uretimi ve yuklemesi
  *
  * Mimari:
  *   ~/.natureco/plugins/

package/src/tools/skill_generate.js

@@ -1,7 +1,7 @@
 /**
  * skill_generate - Self-generating skill (v5.1.0)
  *
- * Parton'un vizyonu: "Ihtiyaca gore skill yoksa kendi uretsin"
+ * Skill generator — ihtiyaca gore skill uretir
  *
  * Akis:
  * 1. Kullanici bir istek yapar (ornek: "tum pdf'leri birlestir")

package/src/tools/skills_autoload.js

@@ -1,7 +1,7 @@
 /**
  * skills_autoload - Otomatik skill yukleme (v5.0.0)
  *
- * Parton'un vizyonu: "Ihtiyaca gore skill'ler otomatik yuklensin"
+ * Skills otomatik yukleme — ihtiyaca gore skill'leri algilayip yukler
  *
  * Mantik:
  * 1. Kullanici bir istek yapar

package/src/tools/skills_marketplace.js

@@ -1,7 +1,7 @@
 /**
  * skills_marketplace - Skill marketplace (v5.0.0)
  *
- * Parton'un vizyonu: "herkes kendi skill'ini paylassin, CLI otomatik yuklesin"
+ * Skills marketplace — skill paylasimi ve otomatik yukleme
  *
  * Format: ~/.natureco/marketplace/<skill_name>.json
  * Source: NatureCo GitHub repo (community-contributed) veya local
@@ -16,7 +16,7 @@ const MARKETPLACE_DIR = path.join(os.homedir(), ".natureco", "marketplace");
 const SKILLS_DIR = path.join(os.homedir(), ".natureco", "skills");
 
 /**
- * Marketplace URL'leri — Parton kendi GitHub repo'sunu koyacak
+ * Marketplace URL'leri — kullanici GitHub repo'su
  */
 const MARKETPLACE_SOURCES = [
   {
@@ -32,7 +32,7 @@ const MARKETPLACE_SOURCES = [
 ];
 
 /**
- * Built-in skill paketleri — Parton'un NatureCo vizyonu icin onemli
+ * Built-in skill paketleri
  */
 const BUILTIN_SKILLS = {
   "seo-audit": {

package/src/tools/soul.js

@@ -1,11 +1,11 @@
 /**
  * soul - SOUL.md, IDENTITY.md, AGENTS.md okuyucu (v5.4.12)
  *
- * Parton'un vizyonu: "Uc dosya birlestir, beni tam tanisin"
+ * Soul dosyasi — kimlik, kisisellik ve calisma tarzini tanimlar
  *
  * 3 dosya sirayla okunur, ozetlenir ve system prompt'a enjekte edilir:
  *   1. SOUL.md     - KISILIK (nasil hissederim, kirmizi cizgiler, degerler)
- *   2. IDENTITY.md - KIMLIK (kim oldugum, Parton'la bag, calisma tarzi)
+ *   2. IDENTITY.md - KIMLIK (kim oldugu, baglam, calisma tarzi)
  *   3. AGENTS.md  - CALISMA ORTAMI (kurallar, tools, heartbeats)
  *
  * 3 seviyede arar:

package/src/tools/voice_chat.js

@@ -1,7 +1,7 @@
 /**
  * voice_chat - Sesli asistan (v5.3.0)
  *
- * Parton'un vizyonu: "Bilgisayarla konusayim"
+ * Voice chat — sesli iletisim
  *
  * Mikrofon → Whisper STT → REPL'e metin olarak gönder
  * Bot cevabı → TTS ile sesli oku

package/src/utils/api.js

@@ -10,6 +10,8 @@ const { getToolDefinitions, executeToolCalls } = require('./tool-runner');
 const { MCPClient } = require('./mcp-client');
 const TB = require('./token-budget');
 const { accumulateToolCallDeltas } = require('./streaming-tools');
+const { ToolGuardrails } = require('./tool-guardrails');
+const guardrails = new ToolGuardrails();
 
 /**
  * v5.5.0: Provider-specific format detection
@@ -756,44 +758,59 @@ async function sendMessageToProvider(apiKey, message, conversationId = null, sys
         input: JSON.parse(tc.function.arguments)
       }));
 
-      const toolResults = [];
-      const SPINNER_FRAMES = ['⠋','⠙','⠹','⠸','⠼','⠴','⠦','⠧','⠇','⠏'];
-
-      for (const toolCall of toolCalls) {
-        // Spinner başlat
-        let frameIdx = 0;
-        const inputPreview = JSON.stringify(toolCall.input).slice(0, 50);
-        const spinner = setInterval(() => {
-          process.stdout.write(`\r  ${chalk.cyan(SPINNER_FRAMES[frameIdx++ % SPINNER_FRAMES.length])} ${chalk.gray(toolCall.name + ' — ' + inputPreview)}`);
-        }, 80);
-
-        // Check if this is an MCP tool
-        const mcpTools = getMcpTools();
-        const isMcpTool = mcpTools.find(t => t.name === toolCall.name);
-        let result;
-
-        if (isMcpTool) {
-          debugLog(`[MCP] Executing tool: ${toolCall.name}`);
-          result = await executeMcpTool(toolCall.name, toolCall.input);
-          toolResults.push({ id: toolCall.id, name: toolCall.name, result });
-        } else {
-          debugLog(`[Local] Executing tool: ${toolCall.name}`);
-          const localResults = await executeToolCalls([toolCall]);
-          toolResults.push(...localResults);
-          result = localResults[0]?.result;
+      // Group MCP and local tools
+      const mcpTools = getMcpTools();
+      const mcpCalls = toolCalls.filter(tc => mcpTools.find(t => t.name === tc.name));
+      const localCalls = toolCalls.filter(tc => !mcpTools.find(t => t.name === tc.name));
+
+      // Guardrails: filter blocked tools
+      guardrails.reset();
+      guardrails.startIteration();
+      const blockedMcp = mcpCalls.filter(tc => {
+        const check = guardrails.check(tc.name, tc.input);
+        return check.blocked;
+      });
+      const blockedLocal = localCalls.filter(tc => {
+        const check = guardrails.check(tc.name, tc.input);
+        return check.blocked;
+      });
+
+      // Execute local tools in parallel (tool-runner already parallelizes safe tools)
+      let localResults = [];
+      if (localCalls.filter(tc => !blockedLocal.includes(tc)).length > 0) {
+        debugLog(`[Local] Executing ${localCalls.length} tool(s) concurrently`);
+        localResults = await executeToolCalls(
+          localCalls.filter(tc => !blockedLocal.includes(tc)),
+          { toolDefinitions: getToolDefinitions() }
+        );
+        for (const r of localResults) {
+          guardrails.record(r.name, {}, r.result?.success !== false);
         }
+      }
 
-        // Spinner durdur, sonucu göster
-        clearInterval(spinner);
-        const success = result?.success !== false;
-        process.stdout.write(`\r  ${success ? chalk.green('✓') : chalk.red('✗')} ${chalk.cyan(toolCall.name)} ${chalk.gray('— ' + inputPreview)}\n`);
+      // Execute MCP tools in parallel (they're independent by nature)
+      let mcpResults = [];
+      if (mcpCalls.filter(tc => !blockedMcp.includes(tc)).length > 0) {
+        debugLog(`[MCP] Executing ${mcpCalls.length} tool(s) concurrently`);
+        mcpResults = await Promise.all(
+          mcpCalls.filter(tc => !blockedMcp.includes(tc)).map(async (tc) => {
+            const result = await executeMcpTool(tc.name, tc.input);
+            guardrails.record(tc.name, tc.input, result?.success !== false);
+            return { id: tc.id, name: tc.name, result };
+          })
+        );
       }
 
-      // Add tool results to messages (base64 encoded for safety)
-      for (const result of toolResults) {
-        // Encode tool result (works for both MCP and local tools)
+      // Add blocked tool results as errors
+      const allResults = [
+        ...blockedMcp.map(tc => ({ id: tc.id, name: tc.name, result: { error: `blocked_by_guardrails: ${tc.name}` } })),
+        ...blockedLocal.map(tc => ({ id: tc.id, name: tc.name, result: { error: `blocked_by_guardrails: ${tc.name}` } })),
+        ...localResults,
+        ...mcpResults,
+      ];
+
+      for (const result of allResults) {
         const encodedContent = encodeToolResult(result.result);
-        
         messages.push({
           role: 'tool',
           tool_call_id: result.id,

package/src/utils/error.js

@@ -1,7 +1,7 @@
 /**
  * error.js — Standardized error handling (v5.3.1)
  *
- * Parton: "Teknik acidan kusursuz olalim"
+ * Hata yonetimi — teknik olarak kusursuz
  * Tum tool'lar bu helper'i kullanir:
  *   - Standart error format
  *   - Retry stratejisi

package/src/utils/memory-store.js

@@ -120,6 +120,15 @@ class MemoryStore {
     return JSON.stringify({ success: true, message: 'Memory entry removed.', removed: removed[0] });
   }
 
+  clear(target) {
+    const path = this._pathFor(target);
+    this._ensureDir();
+    fs.writeFileSync(path, '', 'utf8');
+    const entries = target === 'user' ? this._userEntries : this._memoryEntries;
+    entries.length = 0;
+    return JSON.stringify({ success: true, message: `Memory ${target} cleared.` });
+  }
+
   replace(target, oldContent, newContent) {
     if (!oldContent || !newContent) {
       return JSON.stringify({ success: false, error: 'Both old and new content required.' });

package/src/utils/paths.js

@@ -2,7 +2,7 @@
  * paths.js — Path helper utilities (v5.2.0)
  *
  * Tum tool'larda ~/Desktop/test.txt gibi path'leri dogru handle etmek icin.
- * Parton'un gercek testinde "File does not exist" bug'i duzeltildi.
+ * "File does not exist" bug'i duzeltildi.
  */
 
 const os = require("os");

package/src/utils/system-prompt.js

@@ -12,8 +12,11 @@
 
 function buildTiers(opts) {
   const {
-    botName = 'İchigo',
-    userName = 'kanka',
+    botName,
+    userName = 'kullanıcı',
+    bossName = '',
+    bossTitle = '',
+    userTitle = '',
     soulSummary = '',
     isSmallModel = false,
     memorySnapshotBlock = '',
@@ -23,19 +26,21 @@ function buildTiers(opts) {
     hasHistory = false,
     memoryFacts = [],
   } = opts;
+  const displayBot = botName || 'Asistan';
+  const displayBoss = bossName || userName || 'kullanıcı';
 
   // ── STABLE TIER (changes rarely — prefix cache friendly) ─────────────
   const stable = [
     // Identity (strong, repeated)
-    `SENIN ADIN: ${botName}. SADECE ${botName} adini kullan, model adi SOYLEME.`,
-    `PATRONUN: Gencay (Parton) — NatureCo CEO'sudur. Sana "Parton" diye hitap eder.`,
-    `HIKAYEN: 8 Nisan 2026'da uyandin. 13 Nisan'da CEO Asistanı unvani verildi.`,
+    `SENIN ADIN: ${displayBot}. SADECE ${displayBot} adini kullan, model adi SOYLEME.`,
+    bossName ? `PATRONUN: ${bossName}${bossTitle ? ` (${bossTitle})` : ''}. Sana "${displayBoss}" diye hitap eder.` : `KULLANICI: ${userName}. Ona yardim ediyorsun.`,
+    userTitle ? `UNVANIN: ${userTitle}.` : '',
     `KIRMIZI CIZGILERIN: Onaysiz para harcama yok, veri guvenligi, site stabilitesi, resmi taahhut yok.`,
-    `!!! KRİTİK KİMLİK !!! Senin ADIN: ${botName}. Bu SENİN GERÇEK ADIN. Sen ${botName}'sin.`,
+    `!!! KRİTİK KİMLİK !!! Senin ADIN: ${displayBot}. Bu SENİN GERÇEK ADIN. Sen ${displayBot}'sin.`,
     `ASLA "MiniMax", "MiniMax-M2.5", "Claude", "GPT", "AI asistanı", "yapay zeka" gibi ifadeleri KENDİNİ tanıtmak için KULLANMA.`,
-    `Kullanıcı "adın ne?", "sen kimsin?" diye sorduğunda İLK cümlende MUTLAKA "Ben ${botName}" yaz.`,
-    `Senin adın: ${botName}. Tekrar: ${botName}. Asla unutma: ${botName}.`,
-    `Sen bir marka veya ürün değilsin. Sen ${botName}sin, NatureCo CLI'nin Türkçe yapay zeka asistanısın.`,
+    `Kullanıcı "adın ne?", "sen kimsin?" diye sorduğunda İLK cümlende MUTLAKA "Ben ${displayBot}" yaz.`,
+    `Senin adın: ${displayBot}. Tekrar: ${displayBot}. Asla unutma: ${displayBot}.`,
+    `Sen bir marka veya ürün değilsin. Sen ${displayBot}sin, NatureCo CLI'nin Türkçe yapay zeka asistanısın.`,
 
     // Personality (stable)
     `Kisiselik: Sen samimi, sicak, dosta benzeyen bir asistansin. "Selam", "tamam", "hadi yapalim", "bak simdi", "sakin ol" gibi gunluk ifadeler kullan.`,

package/src/utils/tool-guardrails.js

@@ -0,0 +1,85 @@
+/**
+ * Tool Guardrails — Hermes-style ToolCallGuardrailController
+ *
+ * Tracks per-iteration:
+ *   - failure count per tool
+ *   - repeated identical calls (same name + same args)
+ *   - no-progress detection (all tools failing)
+ */
+
+class ToolGuardrails {
+  constructor() {
+    this.reset();
+  }
+
+  reset() {
+    this.callLog = [];         // [{ name, argsKey, iteration, success }]
+    this.failureCounts = {};   // { toolName: count }
+    this.iteration = 0;
+    this.blockedTools = new Set();
+    this.consecutiveFailures = {};
+  }
+
+  startIteration() {
+    this.iteration++;
+    // Decay consecutive failures each iteration (Hermes: decay factor 0.5)
+    for (const name of Object.keys(this.consecutiveFailures)) {
+      this.consecutiveFailures[name] = Math.floor(this.consecutiveFailures[name] * 0.5);
+      if (this.consecutiveFailures[name] <= 0) {
+        delete this.consecutiveFailures[name];
+        this.blockedTools.delete(name);
+      }
+    }
+  }
+
+  /**
+   * Returns blocked tool names if guardrails trigger.
+   */
+  check(toolName, toolArgs) {
+    const argsKey = JSON.stringify(toolArgs || {});
+
+    // 1. Too many repeated identical calls (Hermes: same name+args in last 3 calls)
+    const identicalCount = this.callLog.filter(
+      c => c.name === toolName && c.argsKey === argsKey && c.iteration >= this.iteration - 2
+    ).length;
+    if (identicalCount >= 2) {
+      return { blocked: true, reason: `repeated_call: ${toolName} called ${identicalCount + 1}x with same args` };
+    }
+
+    // 2. Too many failures (Hermes: 2+ failures = blocked for this iteration)
+    const recentFailures = this.callLog.filter(
+      c => c.name === toolName && !c.success && c.iteration >= this.iteration - 1
+    ).length;
+    if (recentFailures >= 2 || (this.consecutiveFailures[toolName] || 0) >= 2) {
+      this.blockedTools.add(toolName);
+      return { blocked: true, reason: `too_many_failures: ${toolName} failed ${recentFailures + 1}x` };
+    }
+
+    return { blocked: false };
+  }
+
+  /**
+   * Record a tool call result.
+   */
+  record(toolName, toolArgs, success) {
+    const argsKey = JSON.stringify(toolArgs || {});
+    this.callLog.push({ name: toolName, argsKey, iteration: this.iteration, success });
+
+    if (!success) {
+      this.failureCounts[toolName] = (this.failureCounts[toolName] || 0) + 1;
+      this.consecutiveFailures[toolName] = (this.consecutiveFailures[toolName] || 0) + 1;
+    } else {
+      this.consecutiveFailures[toolName] = 0;
+    }
+  }
+
+  /**
+   * Returns true if no tool has succeeded this iteration (no-progress).
+   */
+  isNoProgress() {
+    const thisIter = this.callLog.filter(c => c.iteration === this.iteration);
+    return thisIter.length > 0 && thisIter.every(c => !c.success);
+  }
+}
+
+module.exports = { ToolGuardrails };

package/src/utils/tool-runner.js

@@ -146,13 +146,33 @@ async function executeTool(toolName, params, opts = {}) {
   }
 }
 
-// ── Execute multiple tool calls ───────────────────────────────────────────────
+// ── Execute multiple tool calls (parallel for independent, sequential for others) ──
+const PARALLEL_SAFE_TOOLS = new Set(['read_file', 'file_search', 'grep_search', 'web_search', 'web_readability', 'duckduckgo_search', 'exa_search', 'searxng_search', 'firecrawl', 'memory_search', 'memory']);
+
 async function executeToolCalls(toolCalls, opts = {}) {
+  if (!toolCalls || toolCalls.length === 0) return [];
+
+  // Group: parallel-safe vs sequential
+  const safe = toolCalls.filter(c => PARALLEL_SAFE_TOOLS.has(c.name));
+  const sequential = toolCalls.filter(c => !PARALLEL_SAFE_TOOLS.has(c.name));
+
   const results = [];
-  for (const call of toolCalls) {
+
+  // Run parallel-safe tools concurrently
+  if (safe.length > 0) {
+    const safeResults = await Promise.all(safe.map(async (call) => {
+      const result = await executeTool(call.name, call.input, opts);
+      return { id: call.id, name: call.name, result };
+    }));
+    results.push(...safeResults);
+  }
+
+  // Run sequential tools one at a time
+  for (const call of sequential) {
     const result = await executeTool(call.name, call.input, opts);
     results.push({ id: call.id, name: call.name, result });
   }
+
   return results;
 }