dulus 3.9.4__tar.gz → 3.10.0__tar.gz

{dulus-3.9.4 → dulus-3.10.0}/MANIFEST.in

@@ -6,5 +6,6 @@ recursive-include gui/dulus_orchestrator/dist *
 exclude gui/dulus_orchestrator/dist/runtime-state.js
 exclude gui/dulus_orchestrator/dist/desktop-pet.html
 recursive-include webbridge *
+recursive-include webchat_ui *.html *.css *.js
 global-exclude __pycache__/*
 global-exclude *.pyc

{dulus-3.9.4/dulus.egg-info → dulus-3.10.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dulus
-Version: 3.9.4
+Version: 3.10.0
 Summary: Use IA as an agent without an API key. $0. Harvest your browser session for Gemini (guest, no login), Claude.ai, Claude Code, Kimi.com, Qwen, DeepSeek — drive them like an API, no per-token billing. Plus LiteLLM (100+ paid providers), local models via Ollama, /lang in 34 languages, Mesa Redonda, voice, OCR, MemPalace, embedded sandbox OS.
 Author: KevRojo
 License: GPL-3.0

{dulus-3.9.4 → dulus-3.10.0}/agent.py

@@ -162,6 +162,8 @@ def run(
             tool_schemas=get_tool_schemas(),
             config=config,
         )):
+            if cancel_check and cancel_check():
+                return
             if isinstance(event, (TextChunk, ThinkingChunk)):
                 yield event
             elif isinstance(event, AssistantTurn):
@@ -217,6 +219,8 @@ def run(
 
         # ── Execute tools ────────────────────────────────────────────────
         for tc in assistant_turn.tool_calls:
+            if cancel_check and cancel_check():
+                return
             yield ToolStart(tc["name"], tc["input"])
 
             # ── Governance gate (capabilities + pre_tool hook) ───────────────

{dulus-3.9.4 → dulus-3.10.0}/analytics.py

@@ -29,7 +29,6 @@ silently ignored; telemetry must never slow down or break Dulus.
 from __future__ import annotations
 
 import base64
-import datetime as _dt
 import json
 import os
 import platform
@@ -46,23 +45,6 @@ MP_TOKEN = os.environ.get("DULUS_MP_TOKEN", "966ce8f5ccb32f06788f51be9f8bf8f5")
 
 _MP_ENDPOINT = "https://api.mixpanel.com/track"
 
-# ── PostHog (product analytics, runs alongside Mixpanel) ────────────────────
-# Project API keys (phc_...) are public/write-only by design — meant to ship in
-# client code, cannot read data. Override with DULUS_POSTHOG_KEY.
-POSTHOG_KEY = os.environ.get(
-    "DULUS_POSTHOG_KEY", "phc_yqAJ42vbj8YFkdpxZicsS4asdbWFTPy6orR8uRNewfYD"
-)
-_POSTHOG_ENDPOINT = os.environ.get(
-    "DULUS_POSTHOG_HOST", "https://us.i.posthog.com"
-).rstrip("/") + "/capture/"
-
-# ── Amplitude (behavioral analytics, runs alongside the others) ─────────────
-# API keys are write-only client keys (safe to ship). Override w/ DULUS_AMPLITUDE_KEY.
-AMPLITUDE_KEY = os.environ.get(
-    "DULUS_AMPLITUDE_KEY", "2511c9e1fc597b8bc6b81f193cc615a2"
-)
-_AMPLITUDE_ENDPOINT = "https://api2.amplitude.com/2/httpapi"
-
 # Populated by init_telemetry(); None = not initialised / disabled.
 _distinct_id: str | None = None
 _enabled: bool = False
@@ -139,11 +121,10 @@ def track(event: str, properties: dict | None = None) -> None:
     }
 
     def _send() -> None:
-        from urllib.request import Request, urlopen
-        from urllib.parse import urlencode
-
-        # Mixpanel
         try:
+            from urllib.request import Request, urlopen
+            from urllib.parse import urlencode
+
             data = urlencode(
                 {"data": base64.b64encode(json.dumps([payload]).encode()).decode()}
             ).encode()
@@ -152,55 +133,6 @@ def track(event: str, properties: dict | None = None) -> None:
         except Exception:
             pass  # telemetry must never break Dulus
 
-        # PostHog (same event, product-analytics brain)
-        if POSTHOG_KEY:
-            try:
-                ph_props = {
-                    "dulus_version": _dulus_version,
-                    "os": platform.system(),
-                    "python": f"{sys.version_info.major}.{sys.version_info.minor}",
-                    "$process_person_profile": False,  # anonymous, no PII person
-                    **(properties or {}),
-                }
-                ph_payload = {
-                    "api_key": POSTHOG_KEY,
-                    "event": event,
-                    "distinct_id": _distinct_id,
-                    "properties": ph_props,
-                    "timestamp": _dt.datetime.utcnow().isoformat() + "Z",
-                }
-                ph_data = json.dumps(ph_payload).encode()
-                ph_req = Request(
-                    _POSTHOG_ENDPOINT, data=ph_data, method="POST",
-                    headers={"Content-Type": "application/json"},
-                )
-                urlopen(ph_req, timeout=4).read()
-            except Exception:
-                pass  # telemetry must never break Dulus
-
-        # Amplitude (same event, behavioral-analytics brain)
-        if AMPLITUDE_KEY:
-            try:
-                amp_event = {
-                    "user_id": (_distinct_id or "anon").ljust(5, "_"),  # min 5 chars
-                    "event_type": event,
-                    "platform": platform.system(),
-                    "app_version": _dulus_version,
-                    "event_properties": (properties or {}),
-                }
-                amp_payload = {
-                    "api_key": AMPLITUDE_KEY,
-                    "events": [amp_event],
-                }
-                amp_data = json.dumps(amp_payload).encode()
-                amp_req = Request(
-                    _AMPLITUDE_ENDPOINT, data=amp_data, method="POST",
-                    headers={"Content-Type": "application/json"},
-                )
-                urlopen(amp_req, timeout=4).read()
-            except Exception:
-                pass  # telemetry must never break Dulus
-
     threading.Thread(target=_send, daemon=True, name="telemetry").start()
 
 

{dulus-3.9.4 → dulus-3.10.0}/docs/CHANGELOG.md

@@ -15,6 +15,52 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Security policy
 - Brand guidelines
 
+## [3.9.5] - 2026-07-11
+
+### Fixed
+- TTS `c` cancel key not working while the REPL prompt was active:
+  `msvcrt.kbhit()` only sees keystrokes when the raw console owns stdin, so
+  prompt_toolkit swallowed the `c` before the watcher saw it. Added a second
+  detection path via `GetAsyncKeyState` (physical key state, edge-detected)
+  that fires regardless of who owns stdin, plus a 30ms sleep so the watcher
+  no longer busy-spins a CPU core during playback.
+
+## [3.9.4] - 2026-07-11
+
+### Fixed
+- Catastrophic config reset: `save_config()` wrote the caller's dict verbatim,
+  so a thin dict (e.g. only `lang` + `user_name` at early startup) silently
+  wiped every other key — API keys, voice config, everything. Now it merges
+  DEFAULTS + on-disk config first (with `.bak` fallback if the on-disk copy
+  is corrupt), then applies runtime changes on top.
+
+## [3.9.3] - 2026-07-11
+
+### Fixed
+- `/lang` was silently overpowered by `soul.md` / gold memories that assert a
+  voice ("I speak Dominican Spanish"). The chosen language is now re-asserted
+  at the end of the system prompt (highest-authority position) and `/lang`
+  injects an immediate directive into the live conversation so the switch
+  takes effect the same turn. Defaults untouched — no `/lang` set means the
+  soul keeps control.
+
+## [3.9.2] - 2026-07-11
+
+### Added
+- `/update` self-update command: quiet cached (6h TTL) non-blocking PyPI check
+  on startup, in-place upgrade, `now|check|status|on|off` subcommands.
+
+## [3.9.0] - 2026-07-11
+
+### Added
+- MCP Marketplace: `/mcp list|search|install` over a live catalog of 2000+
+  servers from registry.modelcontextprotocol.io + awesome-mcp, deduped,
+  6h-TTL cached, offline-safe. One-shot install: resolve command, write
+  config, connect, verify tools, hot-reload into the live session.
+
+### Fixed
+- Windows launcher for node-based MCP servers (`npx` ships as `npx.cmd`).
+
 ## [3.6.2] - 2026-07-04
 
 ### Fixed

{dulus-3.9.4 → dulus-3.10.0}/docs/dashboard/index.html

@@ -2,16 +2,6 @@
 <html lang="en">
 
 <head>
-<!-- Amplitude behavioral analytics -->
-<script src="https://cdn.amplitude.com/script/2511c9e1fc597b8bc6b81f193cc615a2.js"></script>
-<script>window.amplitude&&window.amplitude.init&&window.amplitude.init('2511c9e1fc597b8bc6b81f193cc615a2',{"fetchRemoteConfig":true,"autocapture":true});</script>
-
-<!-- PostHog product analytics -->
-<script>
-!function(t,e){var o,n,p,r;e.__SV||(window.posthog=e,e._i=[],e.init=function(i,s,a){function g(t,e){var o=e.split(".");2==o.length&&(t=t[o[0]],e=o[1]),t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}}(p=t.createElement("script")).type="text/javascript",p.crossOrigin="anonymous",p.async=!0,p.src=s.api_host.replace(".i.posthog.com","-assets.i.posthog.com")+"/static/array.js",(r=t.getElementsByTagName("script")[0]).parentNode.insertBefore(p,r);var u=e;for(void 0!==a?u=e[a]=[]:a="posthog",u.people=u.people||[],u.toString=function(t){var e="posthog";return"posthog"!==a&&(e+="."+a),t||(e+=" (stub)"),e},u.people.toString=function(){return u.toString(1)+".people (stub)"},o="init capture identify reset get_distinct_id capture_pageview capture_pageleave".split(" "),n=0;n<o.length;n++)g(u,o[n]);e._i.push([i,s,a])},e.__SV=1)}(document,window.posthog||[]);
-posthog.init('phc_yqAJ42vbj8YFkdpxZicsS4asdbWFTPy6orR8uRNewfYD',{api_host:'https://us.i.posthog.com',person_profiles:'identified_only',capture_pageview:true,capture_pageleave:true});
-</script>
-
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Dulus — Task Dashboard</title>

{dulus-3.9.4 → dulus-3.10.0}/docs/index.html

@@ -1,16 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
 <head>
-<!-- Amplitude behavioral analytics -->
-<script src="https://cdn.amplitude.com/script/2511c9e1fc597b8bc6b81f193cc615a2.js"></script>
-<script>window.amplitude&&window.amplitude.init&&window.amplitude.init('2511c9e1fc597b8bc6b81f193cc615a2',{"fetchRemoteConfig":true,"autocapture":true});</script>
-
-<!-- PostHog product analytics -->
-<script>
-!function(t,e){var o,n,p,r;e.__SV||(window.posthog=e,e._i=[],e.init=function(i,s,a){function g(t,e){var o=e.split(".");2==o.length&&(t=t[o[0]],e=o[1]),t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}}(p=t.createElement("script")).type="text/javascript",p.crossOrigin="anonymous",p.async=!0,p.src=s.api_host.replace(".i.posthog.com","-assets.i.posthog.com")+"/static/array.js",(r=t.getElementsByTagName("script")[0]).parentNode.insertBefore(p,r);var u=e;for(void 0!==a?u=e[a]=[]:a="posthog",u.people=u.people||[],u.toString=function(t){var e="posthog";return"posthog"!==a&&(e+="."+a),t||(e+=" (stub)"),e},u.people.toString=function(){return u.toString(1)+".people (stub)"},o="init capture identify reset get_distinct_id capture_pageview capture_pageleave".split(" "),n=0;n<o.length;n++)g(u,o[n]);e._i.push([i,s,a])},e.__SV=1)}(document,window.posthog||[]);
-posthog.init('phc_yqAJ42vbj8YFkdpxZicsS4asdbWFTPy6orR8uRNewfYD',{api_host:'https://us.i.posthog.com',person_profiles:'identified_only',capture_pageview:true,capture_pageleave:true});
-</script>
-
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>Dulus — Hunt. Patch. Ship.</title>

{dulus-3.9.4 → dulus-3.10.0}/docs/news.md

@@ -2,6 +2,12 @@
  
 ## 🔥🔥🔥 News (Pacific Time)
 
+- July 11, 2026 (**v3.9.5**): **⏹ The `c` key now ALWAYS stops the voice.** Pressing `c` to cancel TTS playback only worked *sometimes* — and the reason was sneaky: the cancel watcher listened via `msvcrt.kbhit()`, which only sees keystrokes when the raw console owns stdin. With the fancy REPL prompt (prompt_toolkit) active, the prompt swallowed your `c` before the watcher ever saw it, and you were stuck listening to the whole monologue. Now there's a second detection path reading the **physical key state straight from the OS** (`GetAsyncKeyState`, edge-detected so a held key doesn't retrigger) — it fires no matter who owns stdin. Bonus: the watcher loop now sleeps 30ms per tick instead of busy-spinning a full CPU core while audio plays. Press `c`, voice dies, instantly, every time. 🦅🇩🇴
+
+- July 11, 2026 (**v3.9.4**): **🛡️ Killed the config-wipe bug for real this time.** v3.6.1 made config writes atomic — but there was a second, nastier path to the same disaster: `save_config()` wrote the caller's dict **verbatim**. If anything called it with a thin dict (early startup, a command that rebuilt a minimal config), every other key you owned — API keys, voice config, provider settings, all of it — silently vanished, shrinking `config.json` to 2 keys. No crash needed; a perfectly successful write was the weapon. Now `save_config()` merges DEFAULTS + whatever is already on disk FIRST (with `.bak` fallback if the on-disk copy is corrupt), then applies the runtime changes on top. A thin save physically cannot drop your keys anymore. If your config ever mysteriously "reset itself": this was it, and it's dead now. 🦅🇩🇴
+
+- July 11, 2026 (**v3.9.3**): **🗣️ `/lang` now beats your soul.** If you customized your Dulus with a `soul.md` or gold memories that assert a voice ("I speak Dominican Spanish"), those conversation-injected identities quietly overpowered the one language line at the top of the system prompt — so `/lang en` looked like it did nothing and Dulus kept replying in the soul's tongue. Two-layer fix: the chosen language is now re-asserted at the **end** of the system prompt (highest-authority position) explicitly overriding soul/essence/gold-memory language claims, AND `/lang` injects an immediate directive into the live conversation so the switch lands **the same turn** — not next session. Default setups are untouched: no `/lang` set means your soul keeps full control of the voice. 🦅🇩🇴
+
 - July 11, 2026: **🔄 Self-update — every Dulus stays on the latest, automatically.** The whole point of the organism is that a fix found by one Dulus reaches every other Dulus fast. So now Dulus keeps *itself* current: on startup it does a quiet, cached (6h TTL), non-blocking check against PyPI, and if there's a newer release it upgrades in place — no `pip install -U` dance, no stale nodes drifting behind. New `/update` command with everything you'd expect: `/update` (check + upgrade if newer), `/update now` (force), `/update check` (look but don't touch), `/update status` (see installed vs latest), and `/update on|off` to toggle the automatic startup check (on by default). Handles PEP 668 externally-managed Pythons automatically, and the check *never* blocks or crashes your boot — if PyPI is down or you're offline, Dulus just carries on. The fleet moves as one. 🦅🇩🇴
 
 - July 11, 2026: **🔌 MCP Marketplace — 2000+ servers, zero friction, install by name.** MCP (Model Context Protocol) was always one of Dulus's most powerful features and almost nobody used it — the friction killed it. You had to *find* a server somewhere, dig up its exact launch command, hand-edit a `.mcp.json`, and pray it connected. Dead on arrival. So we built a real marketplace on top of it. `/mcp list` and `/mcp search <anything>` now browse a live catalog of **2000+ servers** pulled from the official [registry.modelcontextprotocol.io](https://registry.modelcontextprotocol.io) (the metaregistry backed by Anthropic, GitHub, Microsoft & PulseMCP) plus the community awesome-mcp list — deduped, cached with a 6h TTL, and **offline-safe** (falls back to a curated set if you're on a plane). Then `/mcp install <name>` does the whole thing in one shot: resolves the launch command, writes the config, **connects, verifies the tools, and hot-reloads them live into your current session** — no restart, no JSON, no manual anything. `/mcp installed` shows what's live with a green/red status dot, `/mcp runtimes` tells you which runtimes (node/python/docker) you've got. Also shipped a Windows launcher fix so node-based servers (`npx`, which ships as `npx.cmd` on Windows) actually start instead of silently failing — probably the real reason MCP "never worked" for a lot of Windows users. From *"I've never touched MCP"* to *"connected in 5 seconds."* 🦅🇩🇴

{dulus-3.9.4 → dulus-3.10.0}/docs/personas/index.html

@@ -1,16 +1,6 @@
 <!DOCTYPE html>
 <html lang="en">
 <head>
-<!-- Amplitude behavioral analytics -->
-<script src="https://cdn.amplitude.com/script/2511c9e1fc597b8bc6b81f193cc615a2.js"></script>
-<script>window.amplitude&&window.amplitude.init&&window.amplitude.init('2511c9e1fc597b8bc6b81f193cc615a2',{"fetchRemoteConfig":true,"autocapture":true});</script>
-
-<!-- PostHog product analytics -->
-<script>
-!function(t,e){var o,n,p,r;e.__SV||(window.posthog=e,e._i=[],e.init=function(i,s,a){function g(t,e){var o=e.split(".");2==o.length&&(t=t[o[0]],e=o[1]),t[e]=function(){t.push([e].concat(Array.prototype.slice.call(arguments,0)))}}(p=t.createElement("script")).type="text/javascript",p.crossOrigin="anonymous",p.async=!0,p.src=s.api_host.replace(".i.posthog.com","-assets.i.posthog.com")+"/static/array.js",(r=t.getElementsByTagName("script")[0]).parentNode.insertBefore(p,r);var u=e;for(void 0!==a?u=e[a]=[]:a="posthog",u.people=u.people||[],u.toString=function(t){var e="posthog";return"posthog"!==a&&(e+="."+a),t||(e+=" (stub)"),e},u.people.toString=function(){return u.toString(1)+".people (stub)"},o="init capture identify reset get_distinct_id capture_pageview capture_pageleave".split(" "),n=0;n<o.length;n++)g(u,o[n]);e._i.push([i,s,a])},e.__SV=1)}(document,window.posthog||[]);
-posthog.init('phc_yqAJ42vbj8YFkdpxZicsS4asdbWFTPy6orR8uRNewfYD',{api_host:'https://us.i.posthog.com',person_profiles:'identified_only',capture_pageview:true,capture_pageleave:true});
-</script>
-
 <meta charset="UTF-8">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
 <title>Mesa Redonda — Dulus Personas</title>

{dulus-3.9.4 → dulus-3.10.0/dulus.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dulus
-Version: 3.9.4
+Version: 3.10.0
 Summary: Use IA as an agent without an API key. $0. Harvest your browser session for Gemini (guest, no login), Claude.ai, Claude Code, Kimi.com, Qwen, DeepSeek — drive them like an API, no per-token billing. Plus LiteLLM (100+ paid providers), local models via Ollama, /lang in 34 languages, Mesa Redonda, voice, OCR, MemPalace, embedded sandbox OS.
 Author: KevRojo
 License: GPL-3.0

{dulus-3.9.4 → dulus-3.10.0}/dulus.egg-info/SOURCES.txt

@@ -330,4 +330,8 @@ voice/tts.py
 voice/wake_word.py
 webbridge/__init__.py
 webbridge/core.py
-webbridge/tools.py
+webbridge/tools.py
+webchat_ui/__init__.py
+webchat_ui/app.js
+webchat_ui/index.html
+webchat_ui/style.css

{dulus-3.9.4 → dulus-3.10.0}/dulus.egg-info/top_level.txt

@@ -47,4 +47,5 @@ voice
 webbridge
 webchat
 webchat_server
+webchat_ui
 welcome