samarthya-bot 2.2.0 → 2.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +25 -0
- package/README.md +340 -353
- package/backend/bin/samarthya.js +29 -10
- package/backend/config/constants.js +4 -4
- package/backend/controllers/chatController.js +72 -0
- package/backend/controllers/telegramController.js +8 -0
- package/backend/package-lock.json +2 -2
- package/backend/package.json +2 -2
- package/backend/public/assets/index-DiMx9ERJ.css +1 -0
- package/backend/public/assets/index-Dn5WYZTH.js +32 -0
- package/backend/public/index.html +186 -16
- package/backend/public/robots.txt +32 -0
- package/backend/public/sitemap.xml +39 -0
- package/backend/services/agent/commandService.js +168 -0
- package/backend/services/llm/llmService.js +8 -0
- package/backend/services/planner/plannerService.js +17 -0
- package/backend/services/security/sandboxService.js +11 -4
- package/backend/services/system/platform.js +150 -0
- package/backend/services/tools/toolRegistry.js +523 -37
- package/backend/services/worker/workerClient.js +141 -29
- package/package.json +2 -2
- package/backend/public/assets/index-6PCzI3K2.js +0 -40
- package/backend/public/assets/index-6TF5jVRQ.js +0 -149
- package/backend/public/assets/index-B0U7rt6f.js +0 -46
- package/backend/public/assets/index-BF0RZh9i.js +0 -149
- package/backend/public/assets/index-BFRAq8Y1.js +0 -149
- package/backend/public/assets/index-CGw8cc8z.js +0 -149
- package/backend/public/assets/index-Ckf0GO1B.css +0 -1
- package/backend/public/assets/index-Cx0Ei-z7.js +0 -149
- package/backend/public/assets/index-DIPdcLv-.js +0 -25
- package/backend/public/assets/index-Da1E-MYB.js +0 -53
- package/backend/public/assets/index-DdCKkq38.js +0 -149
- package/backend/public/assets/index-Do4jNsZS.js +0 -19
- package/backend/public/assets/index-DyjpBYmS.js +0 -51
- package/backend/public/assets/index-DzlXcaXT.js +0 -149
- package/backend/public/assets/index-J7XSVHCz.css +0 -1
- package/backend/public/assets/index-Ui-pyZvK.js +0 -25
- package/backend/public/assets/index-kzffNwzo.js +0 -149
package/CHANGELOG.md
CHANGED
|
@@ -6,6 +6,31 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
|
|
|
6
6
|
|
|
7
7
|
---
|
|
8
8
|
|
|
9
|
+
## [2.3.0] - 2026-06-01
|
|
10
|
+
|
|
11
|
+
### Added — Cross-Platform
|
|
12
|
+
- **Runtime OS detection** — new `backend/services/system/platform.js` is the single source of truth for OS-specific shell, open command, browser discovery, clipboard and port management across Windows / macOS / Linux
|
|
13
|
+
- **Native Node fallback for the Go worker** — `devops_execute_stream` now works on every OS even when the Go binary isn't built for the host (auto-falls back, no more restart loops)
|
|
14
|
+
- **Host OS in the system prompt** — the LLM is told the exact OS so it only emits valid commands
|
|
15
|
+
|
|
16
|
+
### Added — New Skills (10)
|
|
17
|
+
- `open_path` (cross-platform start/open/xdg-open), `http_request` (any REST API), `password_generate` (crypto-secure), `qr_generate`, `currency_convert`, `crypto_price`, `url_shorten`, `ip_geolocate`, `translate_text` (Hindi & more), `clipboard_copy`, `hash_text`, `base64_tool`, `timezone_now` — **34 built-in skills total**
|
|
18
|
+
|
|
19
|
+
### Added — Chat Slash-Commands
|
|
20
|
+
- `/help`, `/status`, `/tools`, `/pack`, `/model`, `/whoami`, `/memory`, `/new`, `/version` — work on Web, Telegram & Discord, instantly, with no LLM call
|
|
21
|
+
|
|
22
|
+
### Security
|
|
23
|
+
- **Workspace sandbox now enforced** in `file_read` / `file_write` / `file_list` (was previously bypassed)
|
|
24
|
+
- **Chained-command blacklist** — every segment of `&&`, `||`, `;`, `|`, `$()` and backticks is validated, closing the `echo x && rm -rf /` bypass; added Windows-destructive patterns and `sudo` prefix coverage
|
|
25
|
+
- `http_request` blocks non-`http(s)` schemes (e.g. `file://`)
|
|
26
|
+
|
|
27
|
+
### Fixed
|
|
28
|
+
- CLI: removed Unix-only `2>/dev/null` from the onboard install step (broke Windows `cmd`); use `--omit=dev`
|
|
29
|
+
- CLI: spawn the server via `process.execPath` and run `npm` through the platform-correct shim
|
|
30
|
+
- Browser automation: broader Chrome/Edge/Brave/Chromium discovery + `--no-sandbox` on Linux
|
|
31
|
+
|
|
32
|
+
---
|
|
33
|
+
|
|
9
34
|
## [2.2.0] - 2026-03-05
|
|
10
35
|
|
|
11
36
|
### Added
|