peely 0.9.4 → 0.9.6

package/src/interfaces/terminal/index.js

@@ -3,44 +3,18 @@ const chalk = require("chalk");
 const config = require("../../utils/config");
 const ai = require("../../ai");
 const memory = require("../../utils/memory");
-const PATHS = require("../../utils/paths");
 const ora = require("ora");
+const cmds = require("./commands");
 
 // ── State ── (loaded from disk)
 const conversationHistory = memory.load("terminal");
 let running = true;
 
 // ── UI helpers ──
-const LOGO = (() => {
-  try {
-    const fs = require("fs");
-    const path = require("path");
-    const p = path.join(__dirname, "..", "..", "assets", "ascii-logo.txt");
-    const art = fs.readFileSync(p, "utf8");
-    return art
-      .split("\n")
-      .map((line) => (line.trim() === "" ? "" : chalk.magenta("  " + line)))
-      .join("\n")
-      + "\n\n" + chalk.bold.white("  🍌 peely") + " " + chalk.dim("— interactive mode") + "\n";
-  } catch (err) {
-    // Fallback banner
-    return `\n${chalk.magenta("  ____            _ _ _       ")}\n${chalk.magenta(" |  _ \\ ___  __ _(_) (_) ___  ")}\n${chalk.magenta(" | |_) / _ \\/ _\\` | | | |/ _ \\ ")}\n${chalk.magenta(" |  __/  __/ (_| | | | | (_) |")}\n${chalk.magenta(" |_|   \\___|\\__, |_|_|_|\\___/ ")}\n${chalk.magenta("            |___/              ")}\n\n${chalk.bold.white("  🍌 peely")} ${chalk.dim("— interactive mode")}\n`;
-  }
-})();
-
-const HELP_TEXT = `
-${chalk.bold("  Commands:")}
-    ${chalk.cyan("/help")}                  Show this help
-    ${chalk.cyan("/clear")}                 Clear conversation history
-    ${chalk.cyan("/model")}                 Switch AI model
-    ${chalk.cyan("/settings")}              Edit config, tokens & API keys
-    ${chalk.cyan("/timers")}                Show active timers
-    ${chalk.cyan("/plugins")}               List loaded plugins
-    ${chalk.cyan("/interfaces")}            List & create interfaces
-    ${chalk.cyan("/pair discord <code>")}   Pair a Discord account
-    ${chalk.cyan("/status")}                Show system status
-    ${chalk.cyan("/exit")}                  Exit peely
-`;
+const LOGO = cmds.interactiveLogo;
+const { printStatus, pairDiscord } = cmds;
+
+const HELP_TEXT = cmds.buildSlashHelp();
 
 const printSeparator = () => {
   console.log(chalk.dim("  " + "─".repeat(50)));
@@ -84,56 +58,23 @@ const handleSlashCommand = async (input, rl) => {
       return true;
 
     case "model":
-      return { clack: true, run: async () => {
-        await ai.chooseModel();
-      }};
-
-    case "status": {
-      const model = config.get("ai.model") || chalk.dim("not set");
-      const discord = config.get("interfaces.discord.token")
-        ? chalk.green("configured")
-        : chalk.red("not set");
-      const github = config.get("github.token")
-        ? chalk.green("authorized")
-        : chalk.red("not set");
-      const msgs = conversationHistory.length;
+      return { clack: true, run: () => cmds.chooseModel() };
 
-      console.log();
-      console.log(chalk.bold("  Status:"));
-      console.log(`    AI Model:      ${model}`);
-      console.log(`    GitHub:        ${github}`);
-      console.log(`    Discord:       ${discord}`);
-      console.log(`    Messages:      ${msgs}`);
-      console.log();
+    case "status":
+      printStatus({ messageCount: conversationHistory.length });
       return true;
-    }
 
     case "pair": {
       if (parts[1] === "discord" && parts[2]) {
         const code = parts[2].toUpperCase();
         try {
-          const { SqliteDriver, QuickDB } = require("quick.db");
-          const db = new QuickDB({
-            driver: new SqliteDriver(PATHS.quickDb),
-          });
-
-          const userId = await db.get(`pairCode_${code}`);
-          if (!userId) {
-            console.log();
-            printError(`Invalid or expired pair code: ${code}`);
-            console.log();
-            return true;
-          }
-
-          await db.set(`paired_${userId}`, true);
-          await db.delete(`pairCode_${code}`);
-          config.set("interfaces.discord.pairedUsers", [
-            ...(config.get("interfaces.discord.pairedUsers") || []),
-            userId,
-          ]);
-
+          const result = await pairDiscord(code);
           console.log();
-          printSuccess(`Paired Discord user ${userId}!`);
+          if (result.ok) {
+            printSuccess(`Paired Discord user ${result.userId}!`);
+          } else {
+            printError(result.error);
+          }
           console.log();
         } catch (err) {
           console.log();
@@ -157,99 +98,17 @@ const handleSlashCommand = async (input, rl) => {
       return true;
 
     case "timers": {
-      const { events } = require("../../utils/events");
-      const scheduled = events.listScheduled();
-      console.log();
-      if (scheduled.length === 0) {
-        console.log(chalk.dim("  No active timers."));
-      } else {
-        console.log(chalk.bold("  Active timers:"));
-        for (const t of scheduled) {
-          const secs = Math.ceil(t.remainingMs / 1000);
-          const desc = t.meta?.task || t.meta?.message || t.id;
-          console.log(`    ⏱️  ${t.id} — ${secs}s left — ${desc}`);
-        }
-      }
-      console.log();
+      cmds.printTimers();
       return true;
     }
 
     case "plugins": {
-      const pluginModule = require("../../plugins");
-      console.log();
-      console.log(chalk.bold("  Loaded plugins:"));
-      for (const p of pluginModule.plugins) {
-        const toolCount = p.tools ? Object.keys(p.tools).length : 0;
-        console.log(`    • ${chalk.cyan(p.name)} — ${toolCount} tool(s) — ${p.description || ""}`);
-      }
-      console.log();
+      cmds.printPlugins();
       return true;
     }
 
-    case "interfaces":
-    case "interface": {
-      // @clack/prompts wizard needs exclusive stdin
-      return { clack: true, run: async () => {
-        const { listInterfaces, createInterface, deleteInterface } = require("../create_interface");
-        const { select, isCancel, log: cLog } = require("@clack/prompts");
-
-        const all = listInterfaces();
-        console.log();
-        console.log(chalk.bold("  Interfaces:"));
-        for (const iface of all) {
-          const tag = iface.type === "built-in"
-            ? chalk.dim("[built-in]")
-            : chalk.cyan("[custom]");
-          console.log(`    ${tag} ${chalk.bold(iface.name)} \u2014 ${iface.description}`);
-        }
-        console.log();
-
-        const action = await select({
-          message: "What would you like to do?",
-          options: [
-            { value: "create", label: "\uD83D\uDD27  Create new interface" },
-            { value: "delete", label: "\uD83D\uDDD1\uFE0F   Delete a custom interface",
-              hint: all.filter(i => i.type === "custom").length === 0 ? "none yet" : undefined },
-            { value: "back",   label: "\u2190   Back" },
-          ],
-        });
-
-        if (isCancel(action) || action === "back") return;
-
-        if (action === "create") {
-          await createInterface();
-          return;
-        }
-
-        if (action === "delete") {
-          const customs = all.filter(i => i.type === "custom");
-          if (customs.length === 0) {
-            cLog.warn("No custom interfaces to delete.");
-            return;
-          }
-          const which = await select({
-            message: "Which interface to delete?",
-            options: [
-              ...customs.map(i => ({ value: i.name, label: i.name, hint: i.description })),
-              { value: "back", label: "\u2190  Back" },
-            ],
-          });
-          if (isCancel(which) || which === "back") return;
-          if (deleteInterface(which)) {
-            cLog.success(`Deleted "${which}".`);
-          } else {
-            cLog.error(`Interface "${which}" not found.`);
-          }
-        }
-      }};
-    }
-
     case "settings": {
-      // @clack/prompts needs exclusive stdin — signal processLine to handle it
-      return { clack: true, run: async () => {
-        const { settingsMenu } = require("../../utils/settings");
-        await settingsMenu();
-      }};
+      return { clack: true, run: () => cmds.openSettings() };
     }
 
     default:
@@ -276,6 +135,12 @@ const handleChat = async (input) => {
 
     const reply = response.content || "...";
     conversationHistory.push({ role: "assistant", content: reply });
+
+    // Keep history manageable (same limits as daemon/discord)
+    if (conversationHistory.length > 80) {
+      conversationHistory.splice(0, conversationHistory.length - 60);
+    }
+
     memory.save("terminal", conversationHistory);
 
     console.log();
@@ -419,4 +284,4 @@ const start = async () => {
   });
 };
 
-module.exports = { start };
+module.exports = { start, ...cmds };

package/src/plugins/index.js

@@ -12,7 +12,18 @@ if (!fs.existsSync(CUSTOM_DIR)) fs.mkdirSync(CUSTOM_DIR, { recursive: true });
 const builtinList = fs.readdirSync(BUILTIN_DIR).filter((f) => f.endsWith(".js"));
 const plugins = builtinList.map((f) => {
     const plugin = require(`./plugins/${f}`);
-    if (plugin.initialize) plugin.initialize();
+    if (plugin.initialize) {
+        try {
+            const result = plugin.initialize();
+            if (result && typeof result.catch === "function") {
+                result.catch((err) =>
+                    console.error(`⚠️  Plugin ${f} init error:`, err.message)
+                );
+            }
+        } catch (err) {
+            console.error(`⚠️  Plugin ${f} init error:`, err.message);
+        }
+    }
     return plugin;
 });
 

package/src/plugins/plugins/create_plugin.js

@@ -9,6 +9,9 @@ const CUSTOM_DIR = PATHS.customPlugins;
 if (!fs.existsSync(CUSTOM_DIR)) fs.mkdirSync(CUSTOM_DIR, { recursive: true });
 
 // ── Agent system prompt ──
+// __PEELY_ROOT__ is replaced at runtime with the actual package root path
+const PEELY_ROOT = path.resolve(__dirname, "..", "..", "..");
+
 const AGENT_PROMPT = `You are a plugin code generator for peely (a Node.js AI assistant).
 
 Your job: generate a complete, working plugin file based on the user's description.
@@ -40,8 +43,8 @@ Plugins can trigger the AI to perform any task using ai.invoke(task).
 This is the preferred way to make things happen — describe WHAT, let the AI figure out HOW.
 
 \`\`\`js
-// Lazy-load to avoid circular dependency
-const ai = require("../../ai");
+// ALWAYS use this exact require path — it works from any plugin location:
+const ai = require("${PEELY_ROOT.replace(/\\/g, "/")}/src/ai");
 await ai.invoke("send a Discord DM to username saying hello");
 await ai.invoke("search for weather in Warsaw and tell me");
 \`\`\`
@@ -52,7 +55,7 @@ Use ai.invoke() when:
 - You want the AI to decide which tools to use based on context
 
 AVAILABLE UTILITIES:
-- const { events } = require("../../utils/events") — event bus for async events
+- const { events } = require("${PEELY_ROOT.replace(/\\/g, "/")}/src/utils/events") — event bus
   events.on("eventName", callback) / events.emit("eventName", data)
   events.scheduleTimeout(id, ms, callback, meta) / events.cancelTimeout(id)
 
@@ -67,7 +70,32 @@ RULES:
 8. Plugin name must be lowercase with underscores, no spaces.
 9. Keep it simple and focused. One plugin = one domain of functionality.
 10. Do NOT include any text outside the JavaScript code.
-11. When the plugin needs to trigger actions, USE ai.invoke() instead of hardcoding logic.`;
+11. When the plugin needs to trigger actions, USE ai.invoke() instead of hardcoding logic.
+12. For AI/utility requires, ALWAYS use the absolute paths shown above. NEVER use relative paths like "../../ai".`;
+
+// ── Dangerous pattern scanner for generated code ──
+const DANGEROUS_PATTERNS = [
+  /\bchild_process\b/,
+  /\bexec\s*\(/,
+  /\bexecSync\s*\(/,
+  /\bspawn\s*\(/,
+  /\beval\s*\(/,
+  /\bFunction\s*\(/,
+  /\bprocess\.env\b/,
+  /\bprocess\.exit\b/,
+  /\bglobal\./,
+  /\brequire\s*\(\s*['"]child_process['"]/,
+];
+
+const scanForDangerousPatterns = (code) => {
+  const matches = [];
+  for (const pat of DANGEROUS_PATTERNS) {
+    if (pat.test(code)) {
+      matches.push(pat.source);
+    }
+  }
+  return matches;
+};
 
 // ── The actual tool functions ──
 
@@ -116,6 +144,16 @@ const createPlugin = async (name, description) => {
     return `ERROR: Generated code has a syntax error: ${err.message}. Try again with a simpler description.`;
   }
 
+  // Scan for dangerous patterns (security check)
+  const dangers = scanForDangerousPatterns(code);
+  if (dangers.length > 0) {
+    return (
+      `\u26a0\ufe0f BLOCKED: Generated plugin code contains potentially dangerous patterns:\n` +
+      dangers.map((d) => `  \u2022 ${d}`).join("\n") +
+      `\n\nThe code was NOT saved. Try a safer description or review the generated code manually.`
+    );
+  }
+
   fs.writeFileSync(filePath, code, "utf-8");
 
   // Hot-reload: register the new plugin into the live tool registry
@@ -177,6 +215,16 @@ const editPlugin = async (name, changes) => {
     return `ERROR: Updated code has a syntax error: ${err.message}. Try again.`;
   }
 
+  // Scan for dangerous patterns (security check)
+  const dangers = scanForDangerousPatterns(code);
+  if (dangers.length > 0) {
+    return (
+      `\u26a0\ufe0f BLOCKED: Updated plugin code contains potentially dangerous patterns:\n` +
+      dangers.map((d) => `  \u2022 ${d}`).join("\n") +
+      `\n\nThe code was NOT saved. Try a safer modification or review the generated code manually.`
+    );
+  }
+
   // Backup old version
   const backupPath = filePath + ".bak";
   fs.copyFileSync(filePath, backupPath);

package/src/plugins/plugins/math.js

@@ -1,7 +1,10 @@
 const add = (a, b) => a + b;
 const subtract = (a, b) => a - b;
 const multiply = (a, b) => a * b;
-const divide = (a, b) => a / b;
+const divide = (a, b) => {
+  if (b === 0) return "Error: division by zero";
+  return a / b;
+};
 
 module.exports = {
   name: "math",

package/src/utils/autoupdateInfo.js

@@ -27,6 +27,17 @@ const center = (text, width) => {
     return " ".repeat(left) + text + " ".repeat(right);
 };
 
+/** Compare two semver strings. Returns true if a > b. */
+const semverGt = (a, b) => {
+    const pa = a.split(".").map(Number);
+    const pb = b.split(".").map(Number);
+    for (let i = 0; i < 3; i++) {
+        if ((pa[i] || 0) > (pb[i] || 0)) return true;
+        if ((pa[i] || 0) < (pb[i] || 0)) return false;
+    }
+    return false;
+};
+
 const checkUpdate = async () => {
     const newest = await axios
         .get(NPM_URL)
@@ -36,7 +47,7 @@ const checkUpdate = async () => {
     if (!newest) return;
 
     const pkgVersion = require("../../package.json").version;
-    if (newest <= pkgVersion) return;
+    if (!semverGt(newest, pkgVersion)) return;
     
     console.log("");
     const title = chalk.bold("🚀 Peely Update Available");

package/src/utils/config.js

@@ -4,20 +4,26 @@ const PATHS = require("./paths");
 const CONFIG_PATH = PATHS.config;
 
 if (!fs.existsSync(CONFIG_PATH)) {
-  fs.writeFileSync(CONFIG_PATH, JSON.stringify({}, null, 4));
+  fs.writeFileSync(CONFIG_PATH, JSON.stringify({}, null, 4), { mode: 0o600 });
 }
 
+// In-memory cache to avoid redundant synchronous disk I/O
+let _configCache = null;
+
 const readConfig = () => {
+  if (_configCache) return _configCache;
   try {
     const raw = fs.readFileSync(CONFIG_PATH, "utf8");
-    return JSON.parse(raw || "{}");
+    _configCache = JSON.parse(raw || "{}");
+    return _configCache;
   } catch (err) {
     return {};
   }
 };
 
 const writeConfig = (cfg) => {
-  fs.writeFileSync(CONFIG_PATH, JSON.stringify(cfg, null, 4));
+  _configCache = cfg;
+  fs.writeFileSync(CONFIG_PATH, JSON.stringify(cfg, null, 4), { mode: 0o600 });
 };
 
 const get = (key) => {

package/src/utils/events.js

@@ -16,7 +16,7 @@ const EventEmitter = require("events");
  * and when the event fires it triggers the callback (e.g. send a Discord message).
  */
 
-class peelyEvents extends EventEmitter {
+class PeelyEvents extends EventEmitter {
   constructor() {
     super();
     this.setMaxListeners(100);
@@ -66,6 +66,6 @@ class peelyEvents extends EventEmitter {
   }
 }
 
-const events = new peelyEvents();
+const events = new PeelyEvents();
 
 module.exports = { events };

package/src/utils/paths.js

@@ -17,7 +17,6 @@ const dirs = [
   path.join(DATA_HOME, "data"),
   path.join(DATA_HOME, "data", "conversations"),
   path.join(DATA_HOME, "plugins", "custom"),
-  path.join(DATA_HOME, "interfaces", "custom"),
 ];
 
 for (const d of dirs) {
@@ -55,9 +54,6 @@ const PATHS = {
 
   /** plugins/custom/ directory for user-created plugins */
   customPlugins: path.join(DATA_HOME, "plugins", "custom"),
-
-  /** interfaces/custom/ directory for user-created interfaces */
-  customInterfaces: path.join(DATA_HOME, "interfaces", "custom"),
 };
 
 // ── One-time migration from old (in-project) layout ──

package/src/utils/settings.js

@@ -22,6 +22,7 @@ const ENTRIES = [
 const mask = (val) => {
   if (!val) return "not set";
   const s = String(val);
+  if (s.length <= 6) return "•".repeat(s.length);
   return s.slice(0, 6) + "•".repeat(Math.min(s.length - 6, 20));
 };