@aigne/aos 0.2.0-beta

package/dist/system-mounts/validate.cjs

@@ -0,0 +1,56 @@
+
+//#region src/system-mounts/validate.ts
+/**
+* Property names that, if present on a descriptor's `options`, could pollute
+* `Object.prototype` when later spread/merged into a provider config. Reject
+* descriptors carrying them outright.
+*/
+const FORBIDDEN_OPTION_KEYS = [
+	"__proto__",
+	"constructor",
+	"prototype"
+];
+/**
+* Validate a single descriptor. Checks:
+*  - `path` is a non-empty string, starts with `/`, has no `..` segment, and
+*    no empty (`//`) segment — closes the leak vector where a `..` could
+*    project a mount outside its namespace.
+*  - either `providerKey` (non-empty string) or `install` (function) is
+*    present — a descriptor with neither is unmountable.
+*  - `order` is a finite number.
+*  - `options`, when an object, carries no prototype-pollution key.
+*
+* Pure: does not mutate `descriptor`. Tolerant of `null`/non-object input
+* (returns `ok: false`) so a malformed list entry can't crash the driver.
+*/
+function validateDescriptor(descriptor) {
+	const errors = [];
+	if (descriptor === null || typeof descriptor !== "object") return {
+		ok: false,
+		errors: ["descriptor must be an object"]
+	};
+	const d = descriptor;
+	if (typeof d.path !== "string" || d.path.length === 0) errors.push("path must be a non-empty string");
+	else {
+		if (!d.path.startsWith("/")) errors.push(`path must start with '/' (got '${d.path}')`);
+		const segments = d.path.split("/");
+		if (segments.some((seg) => seg === "..")) errors.push(`path must not contain '..' segments (got '${d.path}')`);
+		if (segments.slice(1).some((seg) => seg.length === 0) && d.path !== "/") errors.push(`path must not contain empty segments (got '${d.path}')`);
+	}
+	const hasProviderKey = typeof d.providerKey === "string" && d.providerKey.length > 0;
+	const hasInstall = typeof d.install === "function";
+	if (!hasProviderKey && !hasInstall) errors.push("descriptor must have a non-empty 'providerKey' or an 'install' function");
+	if (typeof d.order !== "number" || !Number.isFinite(d.order)) errors.push("order must be a finite number");
+	if (d.options !== void 0 && typeof d.options !== "function") if (d.options === null || typeof d.options !== "object") errors.push("options must be an object or a function");
+	else {
+		const names = Object.getOwnPropertyNames(d.options);
+		for (const forbidden of FORBIDDEN_OPTION_KEYS) if (names.includes(forbidden)) errors.push(`options must not contain forbidden key '${forbidden}'`);
+	}
+	return {
+		ok: errors.length === 0,
+		errors
+	};
+}
+
+//#endregion
+exports.validateDescriptor = validateDescriptor;

package/dist/system-mounts/validate.d.cts

@@ -0,0 +1,34 @@
+//#region src/system-mounts/validate.d.ts
+/**
+ * Pure validation for {@link SystemMountDescriptor}. Lives in Phase 0 so the
+ * security/leak/damage surface is closed before any runtime driver consumes
+ * the descriptors — Phase 1's `installSystemMounts` reuses this exact
+ * function to skip-and-warn on invalid entries.
+ *
+ * `validateDescriptor` is a pure function: it only reads its input and never
+ * mutates it. It returns a result object rather than throwing so the driver
+ * can validate a whole list and skip individual bad entries without aborting
+ * the rest.
+ */
+/** Result of {@link validateDescriptor}. */
+interface ValidateResult {
+  ok: boolean;
+  errors: string[];
+}
+/**
+ * Validate a single descriptor. Checks:
+ *  - `path` is a non-empty string, starts with `/`, has no `..` segment, and
+ *    no empty (`//`) segment — closes the leak vector where a `..` could
+ *    project a mount outside its namespace.
+ *  - either `providerKey` (non-empty string) or `install` (function) is
+ *    present — a descriptor with neither is unmountable.
+ *  - `order` is a finite number.
+ *  - `options`, when an object, carries no prototype-pollution key.
+ *
+ * Pure: does not mutate `descriptor`. Tolerant of `null`/non-object input
+ * (returns `ok: false`) so a malformed list entry can't crash the driver.
+ */
+declare function validateDescriptor(descriptor: unknown): ValidateResult;
+//#endregion
+export { ValidateResult, validateDescriptor };
+//# sourceMappingURL=validate.d.cts.map

package/dist/system-mounts/validate.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.cts","names":[],"sources":["../../src/system-mounts/validate.ts"],"mappings":";;AAeA;;;;;AAyBA;;;;;;UAzBiB,cAAA;EACf,EAAA;EACA,MAAA;AAAA;;;;;;;;;;;;;;iBAuBc,kBAAA,CAAmB,UAAA,YAAsB,cAAA"}

package/dist/system-mounts/validate.d.mts

@@ -0,0 +1,34 @@
+//#region src/system-mounts/validate.d.ts
+/**
+ * Pure validation for {@link SystemMountDescriptor}. Lives in Phase 0 so the
+ * security/leak/damage surface is closed before any runtime driver consumes
+ * the descriptors — Phase 1's `installSystemMounts` reuses this exact
+ * function to skip-and-warn on invalid entries.
+ *
+ * `validateDescriptor` is a pure function: it only reads its input and never
+ * mutates it. It returns a result object rather than throwing so the driver
+ * can validate a whole list and skip individual bad entries without aborting
+ * the rest.
+ */
+/** Result of {@link validateDescriptor}. */
+interface ValidateResult {
+  ok: boolean;
+  errors: string[];
+}
+/**
+ * Validate a single descriptor. Checks:
+ *  - `path` is a non-empty string, starts with `/`, has no `..` segment, and
+ *    no empty (`//`) segment — closes the leak vector where a `..` could
+ *    project a mount outside its namespace.
+ *  - either `providerKey` (non-empty string) or `install` (function) is
+ *    present — a descriptor with neither is unmountable.
+ *  - `order` is a finite number.
+ *  - `options`, when an object, carries no prototype-pollution key.
+ *
+ * Pure: does not mutate `descriptor`. Tolerant of `null`/non-object input
+ * (returns `ok: false`) so a malformed list entry can't crash the driver.
+ */
+declare function validateDescriptor(descriptor: unknown): ValidateResult;
+//#endregion
+export { ValidateResult, validateDescriptor };
+//# sourceMappingURL=validate.d.mts.map

package/dist/system-mounts/validate.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.d.mts","names":[],"sources":["../../src/system-mounts/validate.ts"],"mappings":";;AAeA;;;;;AAyBA;;;;;;UAzBiB,cAAA;EACf,EAAA;EACA,MAAA;AAAA;;;;;;;;;;;;;;iBAuBc,kBAAA,CAAmB,UAAA,YAAsB,cAAA"}

package/dist/system-mounts/validate.mjs

@@ -0,0 +1,56 @@
+//#region src/system-mounts/validate.ts
+/**
+* Property names that, if present on a descriptor's `options`, could pollute
+* `Object.prototype` when later spread/merged into a provider config. Reject
+* descriptors carrying them outright.
+*/
+const FORBIDDEN_OPTION_KEYS = [
+	"__proto__",
+	"constructor",
+	"prototype"
+];
+/**
+* Validate a single descriptor. Checks:
+*  - `path` is a non-empty string, starts with `/`, has no `..` segment, and
+*    no empty (`//`) segment — closes the leak vector where a `..` could
+*    project a mount outside its namespace.
+*  - either `providerKey` (non-empty string) or `install` (function) is
+*    present — a descriptor with neither is unmountable.
+*  - `order` is a finite number.
+*  - `options`, when an object, carries no prototype-pollution key.
+*
+* Pure: does not mutate `descriptor`. Tolerant of `null`/non-object input
+* (returns `ok: false`) so a malformed list entry can't crash the driver.
+*/
+function validateDescriptor(descriptor) {
+	const errors = [];
+	if (descriptor === null || typeof descriptor !== "object") return {
+		ok: false,
+		errors: ["descriptor must be an object"]
+	};
+	const d = descriptor;
+	if (typeof d.path !== "string" || d.path.length === 0) errors.push("path must be a non-empty string");
+	else {
+		if (!d.path.startsWith("/")) errors.push(`path must start with '/' (got '${d.path}')`);
+		const segments = d.path.split("/");
+		if (segments.some((seg) => seg === "..")) errors.push(`path must not contain '..' segments (got '${d.path}')`);
+		if (segments.slice(1).some((seg) => seg.length === 0) && d.path !== "/") errors.push(`path must not contain empty segments (got '${d.path}')`);
+	}
+	const hasProviderKey = typeof d.providerKey === "string" && d.providerKey.length > 0;
+	const hasInstall = typeof d.install === "function";
+	if (!hasProviderKey && !hasInstall) errors.push("descriptor must have a non-empty 'providerKey' or an 'install' function");
+	if (typeof d.order !== "number" || !Number.isFinite(d.order)) errors.push("order must be a finite number");
+	if (d.options !== void 0 && typeof d.options !== "function") if (d.options === null || typeof d.options !== "object") errors.push("options must be an object or a function");
+	else {
+		const names = Object.getOwnPropertyNames(d.options);
+		for (const forbidden of FORBIDDEN_OPTION_KEYS) if (names.includes(forbidden)) errors.push(`options must not contain forbidden key '${forbidden}'`);
+	}
+	return {
+		ok: errors.length === 0,
+		errors
+	};
+}
+
+//#endregion
+export { validateDescriptor };
+//# sourceMappingURL=validate.mjs.map

package/dist/system-mounts/validate.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.mjs","names":[],"sources":["../../src/system-mounts/validate.ts"],"sourcesContent":["/**\n * Pure validation for {@link SystemMountDescriptor}. Lives in Phase 0 so the\n * security/leak/damage surface is closed before any runtime driver consumes\n * the descriptors — Phase 1's `installSystemMounts` reuses this exact\n * function to skip-and-warn on invalid entries.\n *\n * `validateDescriptor` is a pure function: it only reads its input and never\n * mutates it. It returns a result object rather than throwing so the driver\n * can validate a whole list and skip individual bad entries without aborting\n * the rest.\n */\n\nimport type { SystemMountDescriptor } from \"./types.js\";\n\n/** Result of {@link validateDescriptor}. */\nexport interface ValidateResult {\n  ok: boolean;\n  errors: string[];\n}\n\n/**\n * Property names that, if present on a descriptor's `options`, could pollute\n * `Object.prototype` when later spread/merged into a provider config. Reject\n * descriptors carrying them outright.\n */\nconst FORBIDDEN_OPTION_KEYS = [\"__proto__\", \"constructor\", \"prototype\"] as const;\n\n/**\n * Validate a single descriptor. Checks:\n *  - `path` is a non-empty string, starts with `/`, has no `..` segment, and\n *    no empty (`//`) segment — closes the leak vector where a `..` could\n *    project a mount outside its namespace.\n *  - either `providerKey` (non-empty string) or `install` (function) is\n *    present — a descriptor with neither is unmountable.\n *  - `order` is a finite number.\n *  - `options`, when an object, carries no prototype-pollution key.\n *\n * Pure: does not mutate `descriptor`. Tolerant of `null`/non-object input\n * (returns `ok: false`) so a malformed list entry can't crash the driver.\n */\nexport function validateDescriptor(descriptor: unknown): ValidateResult {\n  const errors: string[] = [];\n\n  if (descriptor === null || typeof descriptor !== \"object\") {\n    return { ok: false, errors: [\"descriptor must be an object\"] };\n  }\n\n  const d = descriptor as Partial<SystemMountDescriptor>;\n\n  // ── path ──\n  if (typeof d.path !== \"string\" || d.path.length === 0) {\n    errors.push(\"path must be a non-empty string\");\n  } else {\n    if (!d.path.startsWith(\"/\")) {\n      errors.push(`path must start with '/' (got '${d.path}')`);\n    }\n    const segments = d.path.split(\"/\");\n    // segments[0] is always \"\" for an absolute path; reject empty segments\n    // anywhere else (covers '//', trailing '/', etc.) and any '..' segment.\n    if (segments.some((seg) => seg === \"..\")) {\n      errors.push(`path must not contain '..' segments (got '${d.path}')`);\n    }\n    if (segments.slice(1).some((seg) => seg.length === 0) && d.path !== \"/\") {\n      errors.push(`path must not contain empty segments (got '${d.path}')`);\n    }\n  }\n\n  // ── providerKey / install ──\n  const hasProviderKey = typeof d.providerKey === \"string\" && d.providerKey.length > 0;\n  const hasInstall = typeof d.install === \"function\";\n  if (!hasProviderKey && !hasInstall) {\n    errors.push(\"descriptor must have a non-empty 'providerKey' or an 'install' function\");\n  }\n\n  // ── order ──\n  if (typeof d.order !== \"number\" || !Number.isFinite(d.order)) {\n    errors.push(\"order must be a finite number\");\n  }\n\n  // ── options prototype-pollution guard ──\n  // Only scan literal objects; function-form options are resolved + scanned\n  // at install time. `Object.getOwnPropertyNames` catches JSON.parse's\n  // own \"__proto__\" property (which Object.keys also surfaces, but be\n  // explicit so a non-enumerable plant is caught too).\n  if (d.options !== undefined && typeof d.options !== \"function\") {\n    if (d.options === null || typeof d.options !== \"object\") {\n      errors.push(\"options must be an object or a function\");\n    } else {\n      const names = Object.getOwnPropertyNames(d.options);\n      for (const forbidden of FORBIDDEN_OPTION_KEYS) {\n        if (names.includes(forbidden)) {\n          errors.push(`options must not contain forbidden key '${forbidden}'`);\n        }\n      }\n    }\n  }\n\n  return { ok: errors.length === 0, errors };\n}\n"],"mappings":";;;;;;AAyBA,MAAM,wBAAwB;CAAC;CAAa;CAAe;CAAY;;;;;;;;;;;;;;AAevE,SAAgB,mBAAmB,YAAqC;CACtE,MAAM,SAAmB,EAAE;AAE3B,KAAI,eAAe,QAAQ,OAAO,eAAe,SAC/C,QAAO;EAAE,IAAI;EAAO,QAAQ,CAAC,+BAA+B;EAAE;CAGhE,MAAM,IAAI;AAGV,KAAI,OAAO,EAAE,SAAS,YAAY,EAAE,KAAK,WAAW,EAClD,QAAO,KAAK,kCAAkC;MACzC;AACL,MAAI,CAAC,EAAE,KAAK,WAAW,IAAI,CACzB,QAAO,KAAK,kCAAkC,EAAE,KAAK,IAAI;EAE3D,MAAM,WAAW,EAAE,KAAK,MAAM,IAAI;AAGlC,MAAI,SAAS,MAAM,QAAQ,QAAQ,KAAK,CACtC,QAAO,KAAK,6CAA6C,EAAE,KAAK,IAAI;AAEtE,MAAI,SAAS,MAAM,EAAE,CAAC,MAAM,QAAQ,IAAI,WAAW,EAAE,IAAI,EAAE,SAAS,IAClE,QAAO,KAAK,8CAA8C,EAAE,KAAK,IAAI;;CAKzE,MAAM,iBAAiB,OAAO,EAAE,gBAAgB,YAAY,EAAE,YAAY,SAAS;CACnF,MAAM,aAAa,OAAO,EAAE,YAAY;AACxC,KAAI,CAAC,kBAAkB,CAAC,WACtB,QAAO,KAAK,0EAA0E;AAIxF,KAAI,OAAO,EAAE,UAAU,YAAY,CAAC,OAAO,SAAS,EAAE,MAAM,CAC1D,QAAO,KAAK,gCAAgC;AAQ9C,KAAI,EAAE,YAAY,UAAa,OAAO,EAAE,YAAY,WAClD,KAAI,EAAE,YAAY,QAAQ,OAAO,EAAE,YAAY,SAC7C,QAAO,KAAK,0CAA0C;MACjD;EACL,MAAM,QAAQ,OAAO,oBAAoB,EAAE,QAAQ;AACnD,OAAK,MAAM,aAAa,sBACtB,KAAI,MAAM,SAAS,UAAU,CAC3B,QAAO,KAAK,2CAA2C,UAAU,GAAG;;AAM5E,QAAO;EAAE,IAAI,OAAO,WAAW;EAAG;EAAQ"}

package/dist/terminal-llm.cjs

@@ -0,0 +1,90 @@
+
+//#region src/terminal-llm.ts
+const HISTORY_TURNS = 20;
+const R = "\x1B[0m";
+const LLM_PROMPT_COLOR = `\x1b[1;32m›${R} `;
+const LLM_PROMPT_PLAIN = "› ";
+function genSessionId() {
+	const buf = new Uint8Array(8);
+	crypto.getRandomValues(buf);
+	return Array.from(buf, (b) => b.toString(16).padStart(2, "0")).join("");
+}
+/**
+* Create a platform-agnostic LLM terminal session.
+*
+* Requires AFS to have an AI provider mounted at /dev/ai/ (or at the path
+* returned by opts.model). On CF Workers this is CfAnthropicProvider; on
+* Node it is AFSAIDevice.
+*/
+function createLlmTerminalSession(afs, opts) {
+	const sessionId = genSessionId();
+	const color = opts.color !== false;
+	const modelPath = opts.model ?? "/dev/ai/.actions/chat";
+	const chatPath = /\/\.actions\/(chat|embed|image|video)$/.test(modelPath) ? modelPath : `${modelPath}/.actions/chat`;
+	const description = opts.description ?? opts.systemPrompt?.split("\n")[0]?.trim().slice(0, 80) ?? "No tools, no memory beyond this session.";
+	const banner = [
+		"",
+		color ? `\x1b[1;36m● llm-terminal${R} \x1b[2m—${R} ${modelPath}` : `● llm-terminal — ${modelPath}`,
+		color ? `\x1b[2m${description}${R}` : description,
+		""
+	].join("\r\n");
+	const systemMessages = opts.systemPrompt ? [{
+		role: "system",
+		content: opts.systemPrompt
+	}] : [];
+	const history = [];
+	let inflight = false;
+	return {
+		sessionId,
+		getBanner() {
+			return banner;
+		},
+		getPrompt() {
+			return color ? LLM_PROMPT_COLOR : LLM_PROMPT_PLAIN;
+		},
+		async route(line, onToken) {
+			const trimmed = line.trim();
+			if (!trimmed) return {};
+			if (trimmed === "exit" || trimmed === "quit") return { exit: true };
+			if (inflight) return { busy: true };
+			inflight = true;
+			history.push({
+				role: "user",
+				content: trimmed
+			});
+			if (history.length > HISTORY_TURNS * 2) history.splice(0, history.length - HISTORY_TURNS * 2);
+			let streamed = "";
+			try {
+				const execOptions = onToken ? { onChunk: (chunk) => {
+					if (chunk.text) {
+						streamed += chunk.text;
+						onToken(chunk.text);
+					}
+				} } : {};
+				const result = await afs.exec(chatPath, { messages: [...systemMessages, ...history] }, execOptions);
+				const text = streamed || result?.success && result.data?.text || "(no response)";
+				if (!streamed) {
+					history.push({
+						role: "assistant",
+						content: text
+					});
+					return { output: text };
+				}
+				history.push({
+					role: "assistant",
+					content: streamed
+				});
+				return {};
+			} catch (err) {
+				history.pop();
+				const msg = err instanceof Error ? err.message : String(err);
+				return { output: color ? `\x1b[31mError: ${msg}${R}` : `Error: ${msg}` };
+			} finally {
+				inflight = false;
+			}
+		}
+	};
+}
+
+//#endregion
+exports.createLlmTerminalSession = createLlmTerminalSession;

package/dist/terminal-llm.d.cts

@@ -0,0 +1,50 @@
+import { AFS } from "@aigne/afs";
+
+//#region src/terminal-llm.d.ts
+interface LlmTerminalOptions {
+  /** AFS path to the model/action node. Defaults to "/dev/ai/.actions/chat". */
+  model?: string;
+  /** System prompt content (read from blocklet by caller). */
+  systemPrompt?: string;
+  /** Override the description line shown in the banner. */
+  description?: string;
+  /** Use ANSI color. Default: true. */
+  color?: boolean;
+}
+interface LlmTerminalResult {
+  /**
+   * Complete response text (populated when onToken was NOT provided).
+   * When onToken is given, tokens are already streamed — output is undefined.
+   */
+  output?: string;
+  /** Session is ending — caller should close the connection. */
+  exit?: boolean;
+  /** A previous request is still in flight — caller should notify the user. */
+  busy?: boolean;
+}
+interface LlmTerminalSession {
+  readonly sessionId: string;
+  /** Banner string to display on connect (CRLF line endings). */
+  getBanner(): string;
+  /** Prompt string (e.g. `\x1b[1;32m›\x1b[0m `). */
+  getPrompt(): string;
+  /**
+   * Route a line of user input.
+   *
+   * If onToken is provided, streamed tokens are forwarded to it as they arrive
+   * and result.output is undefined (tokens were already delivered).
+   * If onToken is omitted, the complete response is in result.output.
+   */
+  route(line: string, onToken?: (token: string) => void): Promise<LlmTerminalResult>;
+}
+/**
+ * Create a platform-agnostic LLM terminal session.
+ *
+ * Requires AFS to have an AI provider mounted at /dev/ai/ (or at the path
+ * returned by opts.model). On CF Workers this is CfAnthropicProvider; on
+ * Node it is AFSAIDevice.
+ */
+declare function createLlmTerminalSession(afs: AFS, opts: LlmTerminalOptions): LlmTerminalSession;
+//#endregion
+export { LlmTerminalOptions, LlmTerminalResult, LlmTerminalSession, createLlmTerminalSession };
+//# sourceMappingURL=terminal-llm.d.cts.map

package/dist/terminal-llm.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-llm.d.cts","names":[],"sources":["../src/terminal-llm.ts"],"mappings":";;;UAkBiB,kBAAA;EAWA;EATf,KAAA;;EAEA,YAAA;EAYA;EAVA,WAAA;EAcA;EAZA,KAAA;AAAA;AAAA,UAGe,iBAAA;EAYkB;;;;EAPjC,MAAA;EAYA;EAVA,IAAA;EAkBM;EAhBN,IAAA;AAAA;AAAA,UAGe,kBAAA;EAAA,SACN,SAAA;EAYwE;EAVjF,SAAA;EA6Cc;EA3Cd,SAAA;;;;;;;;EAQA,KAAA,CAAM,IAAA,UAAc,OAAA,IAAW,KAAA,oBAAyB,OAAA,CAAQ,iBAAA;AAAA;;;;;;;;iBAmClD,wBAAA,CAAyB,GAAA,EAAK,GAAA,EAAK,IAAA,EAAM,kBAAA,GAAqB,kBAAA"}

package/dist/terminal-llm.d.mts

@@ -0,0 +1,50 @@
+import { AFS } from "@aigne/afs";
+
+//#region src/terminal-llm.d.ts
+interface LlmTerminalOptions {
+  /** AFS path to the model/action node. Defaults to "/dev/ai/.actions/chat". */
+  model?: string;
+  /** System prompt content (read from blocklet by caller). */
+  systemPrompt?: string;
+  /** Override the description line shown in the banner. */
+  description?: string;
+  /** Use ANSI color. Default: true. */
+  color?: boolean;
+}
+interface LlmTerminalResult {
+  /**
+   * Complete response text (populated when onToken was NOT provided).
+   * When onToken is given, tokens are already streamed — output is undefined.
+   */
+  output?: string;
+  /** Session is ending — caller should close the connection. */
+  exit?: boolean;
+  /** A previous request is still in flight — caller should notify the user. */
+  busy?: boolean;
+}
+interface LlmTerminalSession {
+  readonly sessionId: string;
+  /** Banner string to display on connect (CRLF line endings). */
+  getBanner(): string;
+  /** Prompt string (e.g. `\x1b[1;32m›\x1b[0m `). */
+  getPrompt(): string;
+  /**
+   * Route a line of user input.
+   *
+   * If onToken is provided, streamed tokens are forwarded to it as they arrive
+   * and result.output is undefined (tokens were already delivered).
+   * If onToken is omitted, the complete response is in result.output.
+   */
+  route(line: string, onToken?: (token: string) => void): Promise<LlmTerminalResult>;
+}
+/**
+ * Create a platform-agnostic LLM terminal session.
+ *
+ * Requires AFS to have an AI provider mounted at /dev/ai/ (or at the path
+ * returned by opts.model). On CF Workers this is CfAnthropicProvider; on
+ * Node it is AFSAIDevice.
+ */
+declare function createLlmTerminalSession(afs: AFS, opts: LlmTerminalOptions): LlmTerminalSession;
+//#endregion
+export { LlmTerminalOptions, LlmTerminalResult, LlmTerminalSession, createLlmTerminalSession };
+//# sourceMappingURL=terminal-llm.d.mts.map

package/dist/terminal-llm.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-llm.d.mts","names":[],"sources":["../src/terminal-llm.ts"],"mappings":";;;UAkBiB,kBAAA;EAWA;EATf,KAAA;;EAEA,YAAA;EAYA;EAVA,WAAA;EAcA;EAZA,KAAA;AAAA;AAAA,UAGe,iBAAA;EAYkB;;;;EAPjC,MAAA;EAYA;EAVA,IAAA;EAkBM;EAhBN,IAAA;AAAA;AAAA,UAGe,kBAAA;EAAA,SACN,SAAA;EAYwE;EAVjF,SAAA;EA6Cc;EA3Cd,SAAA;;;;;;;;EAQA,KAAA,CAAM,IAAA,UAAc,OAAA,IAAW,KAAA,oBAAyB,OAAA,CAAQ,iBAAA;AAAA;;;;;;;;iBAmClD,wBAAA,CAAyB,GAAA,EAAK,GAAA,EAAK,IAAA,EAAM,kBAAA,GAAqB,kBAAA"}

package/dist/terminal-llm.mjs

@@ -0,0 +1,90 @@
+//#region src/terminal-llm.ts
+const HISTORY_TURNS = 20;
+const R = "\x1B[0m";
+const LLM_PROMPT_COLOR = `\x1b[1;32m›${R} `;
+const LLM_PROMPT_PLAIN = "› ";
+function genSessionId() {
+	const buf = new Uint8Array(8);
+	crypto.getRandomValues(buf);
+	return Array.from(buf, (b) => b.toString(16).padStart(2, "0")).join("");
+}
+/**
+* Create a platform-agnostic LLM terminal session.
+*
+* Requires AFS to have an AI provider mounted at /dev/ai/ (or at the path
+* returned by opts.model). On CF Workers this is CfAnthropicProvider; on
+* Node it is AFSAIDevice.
+*/
+function createLlmTerminalSession(afs, opts) {
+	const sessionId = genSessionId();
+	const color = opts.color !== false;
+	const modelPath = opts.model ?? "/dev/ai/.actions/chat";
+	const chatPath = /\/\.actions\/(chat|embed|image|video)$/.test(modelPath) ? modelPath : `${modelPath}/.actions/chat`;
+	const description = opts.description ?? opts.systemPrompt?.split("\n")[0]?.trim().slice(0, 80) ?? "No tools, no memory beyond this session.";
+	const banner = [
+		"",
+		color ? `\x1b[1;36m● llm-terminal${R} \x1b[2m—${R} ${modelPath}` : `● llm-terminal — ${modelPath}`,
+		color ? `\x1b[2m${description}${R}` : description,
+		""
+	].join("\r\n");
+	const systemMessages = opts.systemPrompt ? [{
+		role: "system",
+		content: opts.systemPrompt
+	}] : [];
+	const history = [];
+	let inflight = false;
+	return {
+		sessionId,
+		getBanner() {
+			return banner;
+		},
+		getPrompt() {
+			return color ? LLM_PROMPT_COLOR : LLM_PROMPT_PLAIN;
+		},
+		async route(line, onToken) {
+			const trimmed = line.trim();
+			if (!trimmed) return {};
+			if (trimmed === "exit" || trimmed === "quit") return { exit: true };
+			if (inflight) return { busy: true };
+			inflight = true;
+			history.push({
+				role: "user",
+				content: trimmed
+			});
+			if (history.length > HISTORY_TURNS * 2) history.splice(0, history.length - HISTORY_TURNS * 2);
+			let streamed = "";
+			try {
+				const execOptions = onToken ? { onChunk: (chunk) => {
+					if (chunk.text) {
+						streamed += chunk.text;
+						onToken(chunk.text);
+					}
+				} } : {};
+				const result = await afs.exec(chatPath, { messages: [...systemMessages, ...history] }, execOptions);
+				const text = streamed || result?.success && result.data?.text || "(no response)";
+				if (!streamed) {
+					history.push({
+						role: "assistant",
+						content: text
+					});
+					return { output: text };
+				}
+				history.push({
+					role: "assistant",
+					content: streamed
+				});
+				return {};
+			} catch (err) {
+				history.pop();
+				const msg = err instanceof Error ? err.message : String(err);
+				return { output: color ? `\x1b[31mError: ${msg}${R}` : `Error: ${msg}` };
+			} finally {
+				inflight = false;
+			}
+		}
+	};
+}
+
+//#endregion
+export { createLlmTerminalSession };
+//# sourceMappingURL=terminal-llm.mjs.map

package/dist/terminal-llm.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminal-llm.mjs","names":[],"sources":["../src/terminal-llm.ts"],"sourcesContent":["/**\n * Shared LLM terminal session — portable, CF-compatible.\n *\n * Business logic for the conversational AI terminal:\n * - Banner (● llm-terminal — <model>) and prompt (›)\n * - History management and inflight guard\n * - Routes user input through afs.exec(\"/dev/ai/.actions/chat\") — AFS-only I/O\n *\n * Transport (WebSocket send/receive, markdown rendering) is left to the caller.\n * The caller receives raw token text via onToken and decides how to render it.\n */\n\nimport type { AFS } from \"@aigne/afs\";\n\n// ---------------------------------------------------------------------------\n// Types\n// ---------------------------------------------------------------------------\n\nexport interface LlmTerminalOptions {\n  /** AFS path to the model/action node. Defaults to \"/dev/ai/.actions/chat\". */\n  model?: string;\n  /** System prompt content (read from blocklet by caller). */\n  systemPrompt?: string;\n  /** Override the description line shown in the banner. */\n  description?: string;\n  /** Use ANSI color. Default: true. */\n  color?: boolean;\n}\n\nexport interface LlmTerminalResult {\n  /**\n   * Complete response text (populated when onToken was NOT provided).\n   * When onToken is given, tokens are already streamed — output is undefined.\n   */\n  output?: string;\n  /** Session is ending — caller should close the connection. */\n  exit?: boolean;\n  /** A previous request is still in flight — caller should notify the user. */\n  busy?: boolean;\n}\n\nexport interface LlmTerminalSession {\n  readonly sessionId: string;\n  /** Banner string to display on connect (CRLF line endings). */\n  getBanner(): string;\n  /** Prompt string (e.g. `\\x1b[1;32m›\\x1b[0m `). */\n  getPrompt(): string;\n  /**\n   * Route a line of user input.\n   *\n   * If onToken is provided, streamed tokens are forwarded to it as they arrive\n   * and result.output is undefined (tokens were already delivered).\n   * If onToken is omitted, the complete response is in result.output.\n   */\n  route(line: string, onToken?: (token: string) => void): Promise<LlmTerminalResult>;\n}\n\n// ---------------------------------------------------------------------------\n// Constants\n// ---------------------------------------------------------------------------\n\nconst HISTORY_TURNS = 20;\nconst R = \"\\x1b[0m\";\n\n// Green › — matches Node daemon's TERM_PROMPT\nconst LLM_PROMPT_COLOR = `\\x1b[1;32m›${R} `;\nconst LLM_PROMPT_PLAIN = \"› \";\n\n// ---------------------------------------------------------------------------\n// Session ID (reuses the same generator pattern as terminal-repl.ts)\n// ---------------------------------------------------------------------------\n\nfunction genSessionId(): string {\n  const buf = new Uint8Array(8);\n  crypto.getRandomValues(buf);\n  return Array.from(buf, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Create a platform-agnostic LLM terminal session.\n *\n * Requires AFS to have an AI provider mounted at /dev/ai/ (or at the path\n * returned by opts.model). On CF Workers this is CfAnthropicProvider; on\n * Node it is AFSAIDevice.\n */\nexport function createLlmTerminalSession(afs: AFS, opts: LlmTerminalOptions): LlmTerminalSession {\n  const sessionId = genSessionId();\n  const color = opts.color !== false;\n\n  const modelPath = opts.model ?? \"/dev/ai/.actions/chat\";\n  // Normalise: append /.actions/chat if the path is a bare model node\n  const chatPath = /\\/\\.actions\\/(chat|embed|image|video)$/.test(modelPath)\n    ? modelPath\n    : `${modelPath}/.actions/chat`;\n\n  const description =\n    opts.description ??\n    opts.systemPrompt?.split(\"\\n\")[0]?.trim().slice(0, 80) ??\n    \"No tools, no memory beyond this session.\";\n\n  const banner = [\n    \"\",\n    color\n      ? `\\x1b[1;36m● llm-terminal${R} \\x1b[2m—${R} ${modelPath}`\n      : `● llm-terminal — ${modelPath}`,\n    color ? `\\x1b[2m${description}${R}` : description,\n    \"\",\n  ].join(\"\\r\\n\");\n\n  const systemMessages: Array<{ role: \"system\"; content: string }> = opts.systemPrompt\n    ? [{ role: \"system\", content: opts.systemPrompt }]\n    : [];\n\n  const history: Array<{ role: \"user\" | \"assistant\"; content: string }> = [];\n  let inflight = false;\n\n  return {\n    sessionId,\n\n    getBanner(): string {\n      return banner;\n    },\n\n    getPrompt(): string {\n      return color ? LLM_PROMPT_COLOR : LLM_PROMPT_PLAIN;\n    },\n\n    async route(line: string, onToken?: (token: string) => void): Promise<LlmTerminalResult> {\n      const trimmed = line.trim();\n      if (!trimmed) return {};\n\n      if (trimmed === \"exit\" || trimmed === \"quit\") {\n        return { exit: true };\n      }\n\n      if (inflight) return { busy: true };\n      inflight = true;\n\n      history.push({ role: \"user\", content: trimmed });\n      // Cap rolling history to keep memory + context bounded for long sessions\n      if (history.length > HISTORY_TURNS * 2) {\n        history.splice(0, history.length - HISTORY_TURNS * 2);\n      }\n\n      let streamed = \"\";\n      try {\n        const execOptions = onToken\n          ? {\n              onChunk: (chunk: { text?: string }) => {\n                if (chunk.text) {\n                  streamed += chunk.text;\n                  onToken(chunk.text);\n                }\n              },\n            }\n          : {};\n\n        const result = await (afs as any).exec(\n          chatPath,\n          { messages: [...systemMessages, ...history] },\n          execOptions,\n        );\n\n        // Fall back to result.data.text when streaming emitted no chunks\n        const text =\n          streamed ||\n          (result?.success && (result.data as { text?: string } | undefined)?.text) ||\n          \"(no response)\";\n\n        if (!streamed) {\n          // Non-streaming path: text came back in the result\n          history.push({ role: \"assistant\", content: text as string });\n          return { output: text as string };\n        }\n\n        history.push({ role: \"assistant\", content: streamed });\n        return {};\n      } catch (err) {\n        // Don't add the failed turn to history\n        history.pop();\n        const msg = err instanceof Error ? err.message : String(err);\n        return { output: color ? `\\x1b[31mError: ${msg}${R}` : `Error: ${msg}` };\n      } finally {\n        inflight = false;\n      }\n    },\n  };\n}\n"],"mappings":";AA6DA,MAAM,gBAAgB;AACtB,MAAM,IAAI;AAGV,MAAM,mBAAmB,cAAc,EAAE;AACzC,MAAM,mBAAmB;AAMzB,SAAS,eAAuB;CAC9B,MAAM,MAAM,IAAI,WAAW,EAAE;AAC7B,QAAO,gBAAgB,IAAI;AAC3B,QAAO,MAAM,KAAK,MAAM,MAAM,EAAE,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,KAAK,GAAG;;;;;;;;;AAczE,SAAgB,yBAAyB,KAAU,MAA8C;CAC/F,MAAM,YAAY,cAAc;CAChC,MAAM,QAAQ,KAAK,UAAU;CAE7B,MAAM,YAAY,KAAK,SAAS;CAEhC,MAAM,WAAW,yCAAyC,KAAK,UAAU,GACrE,YACA,GAAG,UAAU;CAEjB,MAAM,cACJ,KAAK,eACL,KAAK,cAAc,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IACtD;CAEF,MAAM,SAAS;EACb;EACA,QACI,2BAA2B,EAAE,WAAW,EAAE,GAAG,cAC7C,oBAAoB;EACxB,QAAQ,UAAU,cAAc,MAAM;EACtC;EACD,CAAC,KAAK,OAAO;CAEd,MAAM,iBAA6D,KAAK,eACpE,CAAC;EAAE,MAAM;EAAU,SAAS,KAAK;EAAc,CAAC,GAChD,EAAE;CAEN,MAAM,UAAkE,EAAE;CAC1E,IAAI,WAAW;AAEf,QAAO;EACL;EAEA,YAAoB;AAClB,UAAO;;EAGT,YAAoB;AAClB,UAAO,QAAQ,mBAAmB;;EAGpC,MAAM,MAAM,MAAc,SAA+D;GACvF,MAAM,UAAU,KAAK,MAAM;AAC3B,OAAI,CAAC,QAAS,QAAO,EAAE;AAEvB,OAAI,YAAY,UAAU,YAAY,OACpC,QAAO,EAAE,MAAM,MAAM;AAGvB,OAAI,SAAU,QAAO,EAAE,MAAM,MAAM;AACnC,cAAW;AAEX,WAAQ,KAAK;IAAE,MAAM;IAAQ,SAAS;IAAS,CAAC;AAEhD,OAAI,QAAQ,SAAS,gBAAgB,EACnC,SAAQ,OAAO,GAAG,QAAQ,SAAS,gBAAgB,EAAE;GAGvD,IAAI,WAAW;AACf,OAAI;IACF,MAAM,cAAc,UAChB,EACE,UAAU,UAA6B;AACrC,SAAI,MAAM,MAAM;AACd,kBAAY,MAAM;AAClB,cAAQ,MAAM,KAAK;;OAGxB,GACD,EAAE;IAEN,MAAM,SAAS,MAAO,IAAY,KAChC,UACA,EAAE,UAAU,CAAC,GAAG,gBAAgB,GAAG,QAAQ,EAAE,EAC7C,YACD;IAGD,MAAM,OACJ,YACC,QAAQ,WAAY,OAAO,MAAwC,QACpE;AAEF,QAAI,CAAC,UAAU;AAEb,aAAQ,KAAK;MAAE,MAAM;MAAa,SAAS;MAAgB,CAAC;AAC5D,YAAO,EAAE,QAAQ,MAAgB;;AAGnC,YAAQ,KAAK;KAAE,MAAM;KAAa,SAAS;KAAU,CAAC;AACtD,WAAO,EAAE;YACF,KAAK;AAEZ,YAAQ,KAAK;IACb,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,WAAO,EAAE,QAAQ,QAAQ,kBAAkB,MAAM,MAAM,UAAU,OAAO;aAChE;AACR,eAAW;;;EAGhB"}