neoagent 1.3.0 → 1.4.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neoagent",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "Proactive personal AI agent with no limits",
   "license": "MIT",
   "main": "server/index.js",

package/server/routes/store.js

@@ -1047,6 +1047,67 @@ ruby <file>.rb             # Ruby
   },
 
   // ── MAKER ────────────────────────────────────────────────────────────────────
+  {
+    id: 'psa-car-controller',
+    name: 'PSA Car Controller',
+    description: 'Control and query a local psa_car_controller instance for vehicle status, charging, climate, locks, lights and trips.',
+    category: 'maker',
+    icon: '🚗',
+    content: `---
+name: psa-car-controller
+description: Control and query a local psa_car_controller instance for vehicle status, charging, climate, locks, lights and trips
+trigger: When the user asks about a Peugeot, Citroen, Opel, Vauxhall or DS vehicle connected through psa_car_controller, including status, charging, preconditioning, locks, horn, lights, trips, charging sessions, battery SOH or settings
+category: maker
+icon: 🚗
+enabled: true
+---
+
+# PSA Car Controller
+
+Use the local [flobz/psa_car_controller](https://github.com/flobz/psa_car_controller) HTTP API. Default base URL: \`http://localhost:5005\`. Only use another host if the user explicitly gives one.
+
+## Request rules
+
+- Use \`http_request\` when available; otherwise use \`curl\`.
+- Default to JSON output and show the exact endpoint you called.
+- If the user does not provide a VIN, call \`GET /settings\` first and infer it from the configured vehicle when possible. If there are multiple vehicles or no VIN is present, ask for the VIN.
+- For read-only status requests, prefer cache when freshness is not important: \`GET /get_vehicleinfo/<VIN>?from_cache=1\`.
+- For live status, use \`GET /get_vehicleinfo/<VIN>\`. If the user wants a refresh from the car first, call \`GET /wakeup/<VIN>\`, wait briefly, then fetch status.
+- For state-changing actions that could be safety-sensitive (unlock, horn, lights, climate, charge stop/start), make sure the user intent is explicit before calling them.
+- If changing settings via \`/settings/<section>\`, mention that the app needs a restart afterward.
+
+## Supported endpoints
+
+- Vehicle state: \`GET /get_vehicleinfo/<VIN>\`
+- Cached vehicle state: \`GET /get_vehicleinfo/<VIN>?from_cache=1\`
+- Wake up / refresh state: \`GET /wakeup/<VIN>\`
+- Start or stop preconditioning: \`GET /preconditioning/<VIN>/1\` or \`/0\`
+- Start or stop charge immediately: \`GET /charge_now/<VIN>/1\` or \`/0\`
+- Set charge stop hour: \`GET /charge_control?vin=<VIN>&hour=<H>&minute=<M>\`
+- Set charge threshold percentage: \`GET /charge_control?vin=<VIN>&percentage=<PERCENT>\`
+- Set scheduled charge hour: \`GET /charge_hour?vin=<VIN>&hour=<H>&minute=<M>\`
+- Honk horn: \`GET /horn/<VIN>/<COUNT>\`
+- Flash lights: \`GET /lights/<VIN>/<DURATION>\`
+- Lock or unlock doors: \`GET /lock_door/<VIN>/1\` or \`/0\`
+- Battery SOH: \`GET /battery/soh/<VIN>\`
+- Charging sessions: \`GET /vehicles/chargings\`
+- Trips: \`GET /vehicles/trips\`
+- Dashboard / root UI: \`GET /\`
+- Read settings: \`GET /settings\`
+- Update settings: \`GET /settings/<section>?key=value\`
+
+## Response format
+
+Reply with:
+- action performed
+- endpoint used
+- status/result
+- key fields from the JSON response
+- any follow-up note, such as restart needed for settings changes
+
+If the API returns an error, include the response body and suggest the next useful check, usually \`/settings\` or a VIN validation.`
+  },
+
   {
     id: 'bambu-studio-cli',
     name: 'BambuStudio CLI',

package/server/services/manager.js

@@ -124,28 +124,35 @@ async function startServices(app, io) {
             if (msg.platform !== 'discord' && msg.platform !== 'telegram') {
                 const whitelistRow = db.prepare('SELECT value FROM user_settings WHERE user_id = ? AND key = ?')
                     .get(userId, `platform_whitelist_${msg.platform}`);
+                const normalize = msg.platform === 'whatsapp'
+                    ? normalizeWhatsAppId
+                    : (id) => String(id || '').replace(/[^0-9+]/g, '');
+
+                let whitelist = [];
                 if (whitelistRow) {
                     try {
-                        const whitelist = JSON.parse(whitelistRow.value);
-                        if (Array.isArray(whitelist) && whitelist.length > 0) {
-                            const normalize = msg.platform === 'whatsapp'
-                                ? normalizeWhatsAppId
-                                : (id) => String(id || '').replace(/[^0-9+]/g, '');
-                            const senderNorm = normalize(msg.sender || msg.chatId);
-                            const allowed = whitelist.some((n) => normalize(n) === senderNorm);
-                            if (!allowed) {
-                                console.log(`[Messaging] Blocked ${msg.platform} message from ${msg.sender} (not in whitelist)`);
-                                io.to(`user:${userId}`).emit('messaging:blocked_sender', {
-                                    platform: msg.platform,
-                                    sender: msg.sender,
-                                    chatId: msg.chatId,
-                                    senderName: msg.senderName || null
-                                });
-                                return;
-                            }
-                        }
+                        const parsed = JSON.parse(whitelistRow.value);
+                        if (Array.isArray(parsed)) whitelist = parsed;
                     } catch { }
                 }
+
+                const enforceEmptyWhitelist = msg.platform === 'whatsapp';
+                const shouldCheckWhitelist = whitelist.length > 0 || enforceEmptyWhitelist;
+
+                if (shouldCheckWhitelist) {
+                    const senderNorm = normalize(msg.sender || msg.chatId);
+                    const allowed = whitelist.some((n) => normalize(n) === senderNorm);
+                    if (!allowed) {
+                        console.log(`[Messaging] Blocked ${msg.platform} message from ${msg.sender} (not in whitelist)`);
+                        io.to(`user:${userId}`).emit('messaging:blocked_sender', {
+                            platform: msg.platform,
+                            sender: msg.sender,
+                            chatId: msg.chatId,
+                            senderName: msg.senderName || null
+                        });
+                        return;
+                    }
+                }
             }
 
             const upsertSetting = db.prepare('INSERT OR REPLACE INTO user_settings (user_id, key, value) VALUES (?, ?, ?)');