npm-noxyai 1.0.20 → 1.0.22

package/index-noxyai.js

@@ -9,8 +9,9 @@ const crypto = require('crypto');
 
 const BASE_URL = 'https://www.noxyai.com'; 
 const CONFIG_FILE = path.join(os.homedir(), '.noxyai.json');
-const SESSION_FILE = path.join(os.homedir(), '.noxyai_session.json');
 const CACHE_DIR = path.join(os.homedir(), '.noxyai_cache');
+const VERSION = '2.0.0';
+
 const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
 
 // Ensure cache directory exists
@@ -19,20 +20,19 @@ if (!fs.existsSync(CACHE_DIR)) fs.mkdirSync(CACHE_DIR, { recursive: true });
 const args = process.argv.slice(2);
 const command = args[0];
 
-// Rate limiting store (in-memory, resets on CLI restart)
-const rateLimitStore = new Map();
+// ============================================
+// CONFIG & SECURITY
+// ============================================
 
 function loadConfig() {
   if (fs.existsSync(CONFIG_FILE)) {
     try { 
       const config = JSON.parse(fs.readFileSync(CONFIG_FILE, 'utf8'));
-      // Decrypt token if it was encrypted
       if (config.token && config.token.startsWith('enc:')) {
         config.token = decryptToken(config.token.substring(4));
       }
       return config;
     } catch(e) { 
-      console.error('Config corruption detected, resetting...');
       return { token: null, model: 'auto', agentMode: false, autoApprove: false, safeMode: true };
     }
   }
@@ -40,7 +40,6 @@ function loadConfig() {
 }
 
 function saveConfig(config) { 
-  // Encrypt token for security
   const configToSave = { ...config };
   if (configToSave.token && !configToSave.token.startsWith('enc:')) {
     configToSave.token = 'enc:' + encryptToken(configToSave.token);
@@ -48,7 +47,6 @@ function saveConfig(config) {
   fs.writeFileSync(CONFIG_FILE, JSON.stringify(configToSave, null, 2)); 
 }
 
-// Simple token encryption using machine-specific key
 function getMachineKey() {
   const networkInterfaces = os.networkInterfaces();
   const mac = Object.values(networkInterfaces)
@@ -80,6 +78,19 @@ function decryptToken(encryptedData) {
   }
 }
 
+function getDeviceInfo() {
+  return {
+    platform: os.platform(),
+    name: os.hostname(),
+    userAgent: `NoxyAI-CLI/${VERSION} (${os.platform()}; ${os.hostname()})`,
+    fingerprint: crypto.createHash('sha256').update(os.platform() + os.hostname()).digest('hex')
+  };
+}
+
+// ============================================
+// UI UTILITIES
+// ============================================
+
 function printLogo() {
   console.log('\x1b[36m' + `
 ███╗   ██╗ ██████╗ ██╗  ██╗██╗   ██╗ █████╗ ██╗
@@ -89,6 +100,7 @@ function printLogo() {
 ██║ ╚████║╚██████╔╝██╔╝ ██╗   ██║   ██║  ██║██║
 ╚═╝  ╚═══╝ ╚═════╝ ╚═╝  ╚═╝   ╚═╝   ╚═╝  ╚═╝╚═╝
 ` + '\x1b[0m');
+  console.log('\x1b[90m' + `                    v${VERSION} - Secure Terminal Agent` + '\x1b[0m\n');
 }
 
 let spinnerInterval;
@@ -106,14 +118,26 @@ function stopSpinner() {
   process.stdout.write('\r\x1b[K\x1b[?25h');
 }
 
-// Enhanced login with device flow
+const askConfirm = (query) => new Promise(resolve => rl.question(query, resolve));
+
+// ============================================
+// AUTHENTICATION
+// ============================================
+
 async function login() {
   printLogo();
   console.log('\x1b[33m🔐 Initializing secure device login...\x1b[0m\n');
+  
+  const deviceInfo = getDeviceInfo();
+  
   try {
     const initRes = await fetch(BASE_URL + '/api/cli/init', { 
       method: 'POST',
-      headers: { 'Content-Type': 'application/json' }
+      headers: { 
+        'Content-Type': 'application/json',
+        'X-Client-Platform': deviceInfo.platform,
+        'X-Client-Name': deviceInfo.name
+      }
     });
     
     if (!initRes.ok) throw new Error(`Server error: ${initRes.status}`);
@@ -124,21 +148,18 @@ async function login() {
     console.log(`\x1b[34m🌐 Login URL:\x1b[0m ${verificationUrl}`);
     console.log(`\n\x1b[90mThis code expires in ${Math.floor(expiresIn / 60)} minutes.\x1b[0m\n`);
     
-    // Try to copy code to clipboard
+    // Copy to clipboard
     try {
       const platform = os.platform();
       if (platform === 'darwin') execSync(`echo "${userCode}" | pbcopy`);
       else if (platform === 'win32') execSync(`echo ${userCode} | clip`);
-      else if (platform === 'linux' && execSync('which xclip 2>/dev/null').toString()) 
-        execSync(`echo "${userCode}" | xclip -selection clipboard`);
+      else if (platform === 'linux') execSync(`echo "${userCode}" | xclip -selection clipboard 2>/dev/null || echo "${userCode}" | wl-copy 2>/dev/null || true`);
       console.log('\x1b[32m✓ Code copied to clipboard!\x1b[0m');
-    } catch (e) {
-      // Clipboard not available, ignore
-    }
+    } catch (e) {}
     
     rl.question('\x1b[36mPress ENTER to open browser or type "q" to cancel:\x1b[0m ', (answer) => {
       if (answer.toLowerCase() === 'q') {
-        console.log('\x1b[31mLogin cancelled.\x1b[0m');
+        console.log('\n\x1b[31mLogin cancelled.\x1b[0m');
         process.exit(0);
       }
       
@@ -164,7 +185,11 @@ async function login() {
       try {
         const pollRes = await fetch(BASE_URL + '/api/cli/poll', { 
           method: 'POST', 
-          headers: { 'Content-Type': 'application/json' },
+          headers: { 
+            'Content-Type': 'application/json',
+            'X-Client-Platform': deviceInfo.platform,
+            'X-Client-Name': deviceInfo.name
+          },
           body: JSON.stringify({ deviceCode }) 
         });
         
@@ -177,33 +202,154 @@ async function login() {
           config.token = data.token; 
           config.userEmail = data.email;
           config.userId = data.userId;
-          config.lastLogin = Date.now();
+          config.expiresAt = data.expiresAt;
+          config.deviceName = deviceInfo.name;
+          config.devicePlatform = deviceInfo.platform;
           saveConfig(config);
           console.clear(); 
           printLogo();
-          console.log(`\x1b[32m✅ Successfully logged in as ${data.email}!\x1b[0m\n`);
-          console.log(`\x1b[90mType 'noxyai' to start the interactive shell.\x1b[0m\n`);
+          console.log(`\x1b[32m✅ Successfully logged in as ${data.email}!\x1b[0m`);
+          console.log(`\x1b[90mSession expires: ${new Date(data.expiresAt).toLocaleDateString()}\x1b[0m`);
+          console.log(`\x1b[90mDevice: ${deviceInfo.name} (${deviceInfo.platform})\x1b[0m\n`);
+          console.log(`\x1b[90mType 'noxyai' to start.\x1b[0m\n`);
           process.exit(0);
-        } else if (data.status === 'pending') {
-          // Still waiting
         } else if (data.error) {
           clearInterval(pollInterval); 
           stopSpinner();
           console.error(`\n\x1b[31m❌ Login failed: ${data.error}\x1b[0m`); 
           process.exit(1);
         }
-      } catch (error) {
-        // Network errors shouldn't break the polling
-      }
+      } catch (error) {}
     }, (interval || 5) * 1000);
   } catch (error) { 
     stopSpinner();
-    console.error('\x1b[31m❌ Failed to connect:', error.message, '\x1b[0m'); 
+    console.error('\n\x1b[31m❌ Failed to connect:', error.message, '\x1b[0m'); 
     process.exit(1);
   }
 }
 
-const askConfirm = (query) => new Promise(resolve => rl.question(query, resolve));
+async function logout() {
+  const config = loadConfig();
+  
+  if (!config.token) {
+    console.log('\x1b[33mNot logged in.\x1b[0m\n');
+    process.exit(0);
+  }
+  
+  try {
+    const res = await fetch(BASE_URL + '/api/cli/logout', {
+      method: 'POST',
+      headers: {
+        'Authorization': 'Bearer ' + config.token,
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify({ allDevices: false })
+    });
+    
+    config.token = null;
+    config.userEmail = null;
+    config.userId = null;
+    config.expiresAt = null;
+    saveConfig(config);
+    
+    console.log('\n\x1b[32m✓ Successfully logged out.\x1b[0m\n');
+  } catch (error) {
+    config.token = null;
+    saveConfig(config);
+    console.log('\n\x1b[32m✓ Logged out locally.\x1b[0m\n');
+  }
+  process.exit(0);
+}
+
+async function logoutAll() {
+  const config = loadConfig();
+  
+  if (!config.token) {
+    console.error('\n\x1b[31m❌ Not logged in.\x1b[0m\n');
+    return;
+  }
+  
+  return new Promise((resolve) => {
+    rl.question('\x1b[33m⚠️  This will logout from ALL devices. Continue? [y/N]: \x1b[0m', async (answer) => {
+      if (answer.toLowerCase() !== 'y') {
+        console.log('\x1b[31mCancelled.\x1b[0m\n');
+        resolve();
+        return;
+      }
+      
+      try {
+        const res = await fetch(BASE_URL + '/api/cli/logout', {
+          method: 'POST',
+          headers: {
+            'Authorization': 'Bearer ' + config.token,
+            'Content-Type': 'application/json'
+          },
+          body: JSON.stringify({ allDevices: true })
+        });
+        
+        if (res.ok) {
+          const data = await res.json();
+          config.token = null;
+          config.userEmail = null;
+          saveConfig(config);
+          console.log(`\n\x1b[32m✓ ${data.message}\x1b[0m\n`);
+          process.exit(0);
+        } else {
+          console.error('\n\x1b[31m❌ Logout failed.\x1b[0m\n');
+        }
+      } catch (error) {
+        console.error('\n\x1b[31m❌ Error during logout.\x1b[0m\n');
+      }
+      resolve();
+    });
+  });
+}
+
+async function listSessions() {
+  const config = loadConfig();
+  
+  if (!config.token) {
+    console.error('\n\x1b[31m❌ Not logged in.\x1b[0m\n');
+    return;
+  }
+  
+  try {
+    const res = await fetch(BASE_URL + '/api/cli/sessions', {
+      headers: {
+        'Authorization': 'Bearer ' + config.token
+      }
+    });
+    
+    if (!res.ok) {
+      console.error('\n\x1b[31m❌ Failed to fetch sessions.\x1b[0m\n');
+      return;
+    }
+    
+    const data = await res.json();
+    
+    console.log('\n\x1b[36m📱 Active CLI Sessions:\x1b[0m');
+    console.log('\x1b[90m' + '─'.repeat(60) + '\x1b[0m');
+    
+    data.sessions.forEach((session, i) => {
+      const isCurrent = session.current ? '\x1b[32m (current)\x1b[0m' : '';
+      const lastUsed = new Date(session.last_used_at).toLocaleString();
+      
+      console.log(`${i + 1}. ${session.device_name} (${session.device_platform})${isCurrent}`);
+      console.log(`   Last used: ${lastUsed}`);
+      console.log(`   IP: ${session.ip_address || 'unknown'}`);
+      console.log('');
+    });
+    
+    console.log('\x1b[90m' + '─'.repeat(60) + '\x1b[0m');
+    console.log('\x1b[33m/logout-all - Logout from all devices\x1b[0m\n');
+  } catch (error) {
+    console.error('\n\x1b[31m❌ Error fetching sessions.\x1b[0m\n');
+  }
+}
+
+// ============================================
+// TERMINAL COMMANDS
+// ============================================
 
 function runTerminalCommand(cmd, options = {}) {
   return new Promise((resolve, reject) => {
@@ -251,7 +397,10 @@ function runTerminalCommand(cmd, options = {}) {
   });
 }
 
-// FIXED: Safe context gathering without Git errors
+// ============================================
+// CONTEXT & CACHE
+// ============================================
+
 function getLocalContext() {
   try {
     const cwd = process.cwd();
@@ -263,19 +412,17 @@ function getLocalContext() {
       ? JSON.parse(fs.readFileSync(path.join(cwd, 'package.json'), 'utf8'))
       : null;
     
-    // FIX: Silent Git branch check - no error output
     const gitBranch = (() => {
       try {
-        // Check if .git directory exists first
         if (fs.existsSync(path.join(cwd, '.git'))) {
           return execSync('git branch --show-current', { 
             encoding: 'utf8', 
-            stdio: ['pipe', 'pipe', 'pipe'] // Suppress stderr
+            stdio: ['pipe', 'pipe', 'pipe']
           }).trim();
         }
         return null;
       } catch (e) { 
-        return null; // Silently fail
+        return null;
       }
     })();
     
@@ -292,12 +439,11 @@ Shell: ${process.env.SHELL || 'unknown'}
   }
 }
 
-// Cache management for search results
 function getCachedSearch(query) {
   const cacheFile = path.join(CACHE_DIR, `search_${crypto.createHash('md5').update(query).digest('hex')}.json`);
   if (fs.existsSync(cacheFile)) {
     const cache = JSON.parse(fs.readFileSync(cacheFile, 'utf8'));
-    if (Date.now() - cache.timestamp < 3600000) { // 1 hour cache
+    if (Date.now() - cache.timestamp < 3600000) {
       return cache.results;
     }
   }
@@ -313,59 +459,21 @@ function cacheSearchResults(query, results) {
   }));
 }
 
-// FIXED: Better session validation
-async function validateSession(config) {
-  if (!config.token) return false;
-  
-  // Check if session is recent (within 24h)
-  if (config.lastLogin && Date.now() - config.lastLogin < 86400000) {
-    return true;
-  }
-  
-  try {
-    const res = await fetch(BASE_URL + '/api/cli/validate', {
-      method: 'POST',
-      headers: {
-        'Authorization': 'Bearer ' + config.token,
-        'Content-Type': 'application/json'
-      }
-    });
-    
-    if (res.ok) {
-      config.lastLogin = Date.now();
-      saveConfig(config);
-      return true;
-    }
-    
-    return false;
-  } catch (e) {
-    // Network error - assume valid if we have a token
-    return true;
-  }
-}
+// ============================================
+// MAIN CHAT FUNCTION
+// ============================================
 
 async function chat(prompt, depth = 0) {
   const config = loadConfig();
+  const deviceInfo = getDeviceInfo();
   
-  // FIXED: Better session validation
   if (!config.token) { 
-    console.error('\x1b[31m❌ Not logged in. Run "noxyai login" first\x1b[0m'); 
+    console.error('\n\x1b[31m❌ Not logged in. Run "noxyai login" first\x1b[0m'); 
     return; 
   }
   
-  // FIXED: Don't immediately invalidate session on network errors
-  const isValid = await validateSession(config);
-  if (!isValid) {
-    console.error('\x1b[31m❌ Session expired. Please login again.\x1b[0m');
-    config.token = null;
-    config.userEmail = null;
-    config.lastLogin = null;
-    saveConfig(config);
-    return;
-  }
-  
   if (depth > 8) { 
-    console.error('\n\x1b[31m❌ Maximum recursion depth reached. Breaking loop.\x1b[0m'); 
+    console.error('\n\x1b[31m❌ Maximum recursion depth reached.\x1b[0m'); 
     return; 
   }
 
@@ -381,8 +489,10 @@ async function chat(prompt, depth = 0) {
       headers: { 
         'Content-Type': 'application/json', 
         'Authorization': 'Bearer ' + config.token,
-        'X-Client-Version': '1.0.0',
-        'X-Client-Platform': os.platform()
+        'X-Client-Version': VERSION,
+        'X-Client-Platform': deviceInfo.platform,
+        'X-Client-Name': deviceInfo.name,
+        'User-Agent': deviceInfo.userAgent
       },
       body: JSON.stringify({ 
         prompt: enhancedPrompt, 
@@ -398,28 +508,33 @@ async function chat(prompt, depth = 0) {
 
     stopSpinner();
     
+    // Handle token rotation from header
+    const newToken = res.headers.get('X-New-Token');
+    if (newToken) {
+      config.token = newToken;
+      saveConfig(config);
+      console.log('\x1b[90m[Security] Token automatically rotated\x1b[0m');
+    }
+    
     if (!res.ok) {
       const errorText = await res.text();
       
-      // FIXED: Better error handling
       if (res.status === 401) {
-        console.error('\x1b[31m❌ Invalid or expired session.\x1b[0m');
-        console.error('\x1b[33mPlease run:\x1b[0m \x1b[36mnoxyai login\x1b[0m\n');
+        console.error('\n\x1b[31m❌ Session invalid or expired.\x1b[0m');
+        console.error('\x1b[33mRun:\x1b[0m \x1b[36mnoxyai login\x1b[0m\n');
         config.token = null;
-        config.userEmail = null;
-        config.lastLogin = null;
         saveConfig(config);
         return;
       }
       
       if (res.status === 402) {
-        console.error('\x1b[31m❌ Insufficient credits.\x1b[0m');
+        console.error('\n\x1b[31m❌ Insufficient credits.\x1b[0m');
         console.error('\x1b[33mVisit:\x1b[0m \x1b[36mhttps://noxyai.com/pricing\x1b[0m\n');
         return;
       }
       
       if (res.status === 429) {
-        console.error('\x1b[31m❌ Rate limit exceeded. Please wait a moment.\x1b[0m');
+        console.error('\x1b[31m❌ Rate limit exceeded. Please wait.\x1b[0m');
         return;
       }
       
@@ -433,12 +548,11 @@ async function chat(prompt, depth = 0) {
     const decoder = new TextDecoder('utf-8');
     let fullResponse = "";
     
-    // UI State for Boxed Reasoning
     let isFirstReasoning = true;
     let reasoningClosed = false;
-    let actionsPerformed = [];
     let totalCost = 0;
     let totalTokens = 0;
+    let actionsPerformed = 0;
 
     while (true) {
       const { done, value } = await reader.read();
@@ -454,7 +568,12 @@ async function chat(prompt, depth = 0) {
           try {
             const parsed = JSON.parse(data);
             
-            // Boxed Reasoning UI
+            // Handle token rotation in stream
+            if (parsed.token_rotated) {
+              config.token = parsed.token_rotated;
+              saveConfig(config);
+            }
+            
             if (parsed.isReasoning) {
               if (isFirstReasoning) {
                 process.stdout.write('\n\x1b[35m┌── 🧠 Deep Reasoning ─────────────────────\x1b[0m\n\x1b[31m│ \x1b[0m');
@@ -483,15 +602,12 @@ async function chat(prompt, depth = 0) {
               }
               console.log(`\x1b[90m${'─'.repeat(40)}\x1b[0m\n`);
             } else if (parsed.actions) {
-              // Real-time action updates
               parsed.actions.forEach(action => {
                 const icon = { search: '🔍', read: '📖', execute: '⚡', file: '📝', notify: '🔔' }[action.type] || '•';
                 console.log(`\x1b[36m${icon} Agent Action:\x1b[0m ${action.type}`);
               });
             }
-          } catch (e) {
-            // Ignore parsing errors
-          }
+          } catch (e) {}
         }
       }
     }
@@ -520,8 +636,6 @@ async function chat(prompt, depth = 0) {
         spawn('termux-notification', ['-t', 'NoxyAI', '-c', msg], { stdio: 'ignore' });
       } else if (platform === 'darwin') {
         spawn('osascript', ['-e', `display notification "${msg.replace(/"/g, '\\"')}" with title "NoxyAI"`]);
-      } else if (platform === 'win32') {
-        spawn('powershell', ['-Command', `New-BurntToastNotification -Text "NoxyAI", "${msg}"`], { stdio: 'ignore' });
       } else if (platform === 'linux') {
         spawn('notify-send', ['NoxyAI', msg], { stdio: 'ignore' });
       }
@@ -532,7 +646,6 @@ async function chat(prompt, depth = 0) {
     while ((match = readRegex.exec(fullResponse)) !== null) {
       const filePath = match[1].trim();
       
-      // Security check
       if (filePath.includes('..') || filePath.includes('/etc/') || filePath.includes('.env')) {
         console.log(`\x1b[31m⚠️ Security: Access denied to ${filePath}\x1b[0m`);
         agentFeedback += `\n[SECURITY BLOCK: Cannot access ${filePath}]\n`;
@@ -551,13 +664,12 @@ async function chat(prompt, depth = 0) {
       }
     }
 
-    // Tool: Web Search (Enhanced with Google)
+    // Tool: Web Search
     const searchRegex = /<search>([\s\S]*?)<\/search>/g;
     while ((match = searchRegex.exec(fullResponse)) !== null) {
       const query = match[1].trim();
       console.log(`\x1b[35m🔍 Searching:\x1b[0m ${query}`);
       
-      // Check cache first
       const cached = getCachedSearch(query);
       if (cached) {
         console.log(`\x1b[90m  ↳ Using cached results (${cached.length} items)\x1b[0m`);
@@ -610,7 +722,6 @@ async function chat(prompt, depth = 0) {
     while ((match = fileRegex.exec(fullResponse)) !== null) {
       const filePath = match[1], content = match[2];
       
-      // Security checks
       if (filePath.includes('..') || filePath.includes('/etc/') || 
           filePath.includes('.env') || filePath.includes('.ssh/')) {
         console.log(`\x1b[31m⚠️ Security: Write blocked for ${filePath}\x1b[0m`);
@@ -626,7 +737,6 @@ async function chat(prompt, depth = 0) {
           fs.mkdirSync(dir, { recursive: true });
         }
         
-        // Backup existing file
         if (fs.existsSync(resolvedPath)) {
           const backup = resolvedPath + '.bak';
           fs.copyFileSync(resolvedPath, backup);
@@ -642,7 +752,7 @@ async function chat(prompt, depth = 0) {
       }
     }
 
-    // Tool: Execute Commands (Safe Mode)
+    // Tool: Execute Commands
     const execRegex = /<execute>([\s\S]*?)<\/execute>/g;
     const commands = [];
     while ((match = execRegex.exec(fullResponse)) !== null) {
@@ -650,7 +760,6 @@ async function chat(prompt, depth = 0) {
     }
     
     for (const cmd of commands) {
-      // Security: Block dangerous commands
       const dangerous = ['rm -rf /', 'sudo rm', 'dd if=', 'mkfs', ':(){', 'chmod 777 /', '> /dev/sda'];
       if (dangerous.some(d => cmd.toLowerCase().includes(d))) {
         console.log(`\x1b[31m🛑 BLOCKED:\x1b[0m Dangerous command prevented`);
@@ -672,7 +781,7 @@ async function chat(prompt, depth = 0) {
         } else if (lower === 'a') {
           config.autoApprove = true;
           saveConfig(config);
-          console.log('\x1b[32m✓ Auto-approve enabled for this session\x1b[0m');
+          console.log('\x1b[32m✓ Auto-approve enabled\x1b[0m');
         } else if (lower === 'b') {
           console.log('\x1b[36m⚡ Running in background...\x1b[0m');
           try {
@@ -696,20 +805,17 @@ async function chat(prompt, depth = 0) {
       }
     }
 
-    // Reset auto-approve after session
     if (config.autoApprove) {
       config.autoApprove = false;
       saveConfig(config);
     }
 
-    // Recursive feedback loop
     if (agentFeedback) {
       console.log(`\n\x1b[33m🔄 Processing results with Agent...\x1b[0m`);
       await chat(
         `Action results:\n${agentFeedback}\n\n` +
         `Based on these results, what should be the next step? ` +
-        `Respond with appropriate XML tags (<read>, <search>, <file>, <execute>, <notify>) ` +
-        `or "TASK_COMPLETE" if finished.`,
+        `Respond with appropriate XML tags or "TASK_COMPLETE" if finished.`,
         depth + 1
       );
       return;
@@ -722,10 +828,14 @@ async function chat(prompt, depth = 0) {
   } catch (error) { 
     stopSpinner(); 
     console.error('\n\x1b[31m❌ Connection error:\x1b[0m ' + error.message);
-    console.error('\x1b[33mTip: Check your internet connection and try again.\x1b[0m');
+    console.error('\x1b[33mTip: Check your internet connection.\x1b[0m');
   }
 }
 
+// ============================================
+// INTERACTIVE MODE
+// ============================================
+
 function startInteractiveMode() {
   const config = loadConfig();
   printLogo();
@@ -737,12 +847,14 @@ function startInteractiveMode() {
   }
   
   console.log(`\x1b[33mWelcome back${config.userEmail ? ', ' + config.userEmail : ''}!\x1b[0m`);
-  console.log(`\n\x1b[90m${'─'.repeat(40)}\x1b[0m`);
-  console.log(`Model: \x1b[32m${config.model}\x1b[0m`);
-  console.log(`Agent Mode: ${config.agentMode ? '\x1b[32m● ON\x1b[0m' : '\x1b[31m○ OFF\x1b[0m'}`);
-  console.log(`Safe Mode: ${config.safeMode ? '\x1b[32m● ON\x1b[0m' : '\x1b[33m○ OFF\x1b[0m'}`);
-  console.log(`\x1b[90m${'─'.repeat(40)}\x1b[0m`);
-  console.log(`\nCommands: \x1b[36m/model\x1b[0m \x1b[36m/agent\x1b[0m \x1b[36m/safe\x1b[0m \x1b[36m/clear\x1b[0m \x1b[36m/status\x1b[0m \x1b[36m/exit\x1b[0m`);
+  console.log(`\n\x1b[90m${'─'.repeat(45)}\x1b[0m`);
+  console.log(`Model: \x1b[32m${config.model}\x1b[0m | Agent: ${config.agentMode ? '\x1b[32m● ON\x1b[0m' : '\x1b[31m○ OFF\x1b[0m'} | Safe: ${config.safeMode ? '\x1b[32m● ON\x1b[0m' : '\x1b[33m○ OFF\x1b[0m'}`);
+  console.log(`Device: ${config.deviceName || 'unknown'} (${config.devicePlatform || 'unknown'})`);
+  if (config.expiresAt) {
+    console.log(`Expires: ${new Date(config.expiresAt).toLocaleDateString()}`);
+  }
+  console.log(`\x1b[90m${'─'.repeat(45)}\x1b[0m`);
+  console.log(`\nCommands: \x1b[36m/model\x1b[0m \x1b[36m/agent\x1b[0m \x1b[36m/safe\x1b[0m \x1b[36m/clear\x1b[0m \x1b[36m/status\x1b[0m \x1b[36m/sessions\x1b[0m \x1b[36m/exit\x1b[0m`);
   console.log(`Type your question or task below.\n`);
   
   function ask() {
@@ -761,24 +873,33 @@ function startInteractiveMode() {
         const c = loadConfig(); 
         c.agentMode = !c.agentMode; 
         saveConfig(c);
-        console.log(`\n\x1b[33mAgent Mode: ${c.agentMode ? '\x1b[32m● ON (File/Web/Execute access)' : '\x1b[31m○ OFF (Chat only)'}\x1b[0m\n`);
+        console.log(`\n\x1b[33mAgent Mode: ${c.agentMode ? '\x1b[32m● ON (File/Web/Execute)\x1b[0m' : '\x1b[31m○ OFF (Chat only)\x1b[0m'}\n`);
         ask();
       } else if (lower === '/safe') {
         const c = loadConfig(); 
         c.safeMode = !c.safeMode; 
         saveConfig(c);
-        console.log(`\n\x1b[33mSafe Mode: ${c.safeMode ? '\x1b[32m● ON (Command confirmation required)' : '\x1b[33m○ OFF (Auto-execute enabled - use with caution!)'}\x1b[0m\n`);
+        console.log(`\n\x1b[33mSafe Mode: ${c.safeMode ? '\x1b[32m● ON (Confirm commands)\x1b[0m' : '\x1b[33m○ OFF (Auto-execute)\x1b[0m'}\n`);
         ask();
       } else if (lower === '/status') {
         const c = loadConfig();
-        console.log(`\n\x1b[90m${'─'.repeat(40)}\x1b[0m`);
+        console.log(`\n\x1b[90m${'─'.repeat(45)}\x1b[0m`);
         console.log(`\x1b[36mSession Status:\x1b[0m`);
         console.log(`  • User: ${c.userEmail || 'Unknown'}`);
         console.log(`  • Model: ${c.model}`);
-        console.log(`  • Agent Mode: ${c.agentMode ? 'ON' : 'OFF'}`);
-        console.log(`  • Safe Mode: ${c.safeMode ? 'ON' : 'OFF'}`);
+        console.log(`  • Agent: ${c.agentMode ? 'ON' : 'OFF'}`);
+        console.log(`  • Safe: ${c.safeMode ? 'ON' : 'OFF'}`);
         console.log(`  • CWD: ${process.cwd()}`);
-        console.log(`\x1b[90m${'─'.repeat(40)}\x1b[0m\n`);
+        console.log(`  • Device: ${c.deviceName || 'unknown'} (${c.devicePlatform || 'unknown'})`);
+        console.log(`  • Expires: ${c.expiresAt ? new Date(c.expiresAt).toLocaleDateString() : 'N/A'}`);
+        console.log(`\x1b[90m${'─'.repeat(45)}\x1b[0m\n`);
+        ask();
+      } else if (lower === '/sessions') {
+        await listSessions();
+        ask();
+      } else if (lower === '/logout-all') {
+        await logoutAll();
+        if (!loadConfig().token) process.exit(0);
         ask();
       } else if (lower === '/model') {
         console.log('\n\x1b[33mSelect AI Model:\x1b[0m');
@@ -811,48 +932,57 @@ function startInteractiveMode() {
   ask();
 }
 
-// CLI Command Router
+// ============================================
+// CLI ROUTER
+// ============================================
+
 if (command === 'login') {
   login();
-} else if (command === 'logout') { 
-  const c = loadConfig(); 
-  c.token = null; 
-  c.userEmail = null;
-  c.lastLogin = null;
-  saveConfig(c); 
-  console.log('\x1b[32m✓ Successfully logged out.\x1b[0m\n'); 
-  process.exit(0); 
+} else if (command === 'logout') {
+  logout();
 } else if (command === 'help' || command === '--help' || command === '-h') { 
   printLogo();
   console.log(`
-\x1b[33mNoxyAI - Your Autonomous Terminal Agent\x1b[0m
+\x1b[33mNoxyAI - Secure Autonomous Terminal Agent\x1b[0m
 
 \x1b[36mUsage:\x1b[0m
   noxyai               Start interactive mode
-  noxyai login         Authenticate with your NoxyAI account
-  noxyai logout        Remove local authentication
+  noxyai login         Authenticate with device code
+  noxyai logout        Logout from this device
   noxyai help          Show this help message
+  noxyai version       Show version
 
 \x1b[36mInteractive Commands:\x1b[0m
-  /model              Switch AI model
-  /agent              Toggle agent mode (file/web/execute access)
+  /model              Switch AI model (Auto/Qwen3/Mamba)
+  /agent              Toggle agent mode (file/web/execute)
   /safe               Toggle safe mode (command confirmation)
   /status             Show current session status
+  /sessions           List all active CLI sessions
+  /logout-all         Logout from ALL devices
   /clear              Clear the screen
   /exit               Exit the program
 
 \x1b[36mExamples:\x1b[0m
   $ noxyai login
   $ noxyai
-  > Create a React component for a login form
-  > Search for Python asyncio best practices
+  > Create a React component
+  > Search for Python async best practices
   > Optimize this Dockerfile
 
+\x1b[36mSecurity Features:\x1b[0m
+  • Device fingerprint binding
+  • Automatic token rotation (7 days)
+  • 30-day session expiration
+  • Local token encryption
+  • Rate limiting protection
+
 \x1b[90mDocumentation: https://noxyai.com/docs\x1b[0m
   `);
   process.exit(0); 
 } else if (command === 'version' || command === '--version' || command === '-v') {
-  console.log('NoxyAI CLI v1.0.1');
+  console.log(`NoxyAI CLI v${VERSION}`);
+  console.log(`Platform: ${os.platform()} ${os.release()}`);
+  console.log(`Node: ${process.version}`);
   process.exit(0);
 } else if (!command) {
   startInteractiveMode();
@@ -872,3 +1002,14 @@ if (command === 'login') {
   
   chat(query).then(() => process.exit(0));
 }
+
+// Handle Ctrl+C gracefully
+process.on('SIGINT', () => {
+  console.log('\n\n\x1b[36mGoodbye! 👋\x1b[0m\n');
+  process.exit(0);
+});
+
+process.on('SIGTERM', () => {
+  console.log('\n\n\x1b[36mSession terminated.\x1b[0m\n');
+  process.exit(0);
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "npm-noxyai",
-  "version": "1.0.20",
+  "version": "1.0.22",
   "description": "CLI for NoxyAI",
   "main": "index-noxyai.js",
   "bin": {