@hasna/terminal 1.1.1 → 1.2.1

package/dist/ai.js

@@ -36,6 +36,13 @@ const IRREVERSIBLE_PATTERNS = [
     /\brm\s/, /\brmdir\b/, /\btruncate\b/, /\bdrop\s+table\b/i,
     /\bdelete\s+from\b/i, /\bmv\b.*\/dev\/null/, /\b>\s*[^>]/,
     /\bdd\b/, /\bmkfs\b/, /\bformat\b/, /\bshred\b/,
+    // Process/service killing
+    /\bkill\b/, /\bkillall\b/, /\bpkill\b/,
+    // Git push/force operations
+    /\bgit\s+push\b/, /\bgit\s+reset\s+--hard\b/, /\bgit\s+force\b/,
+    // Code modification / package installation (security risk)
+    /\bnpx\s+\S+/, /\bnpm\s+install\b/, /\bbun\s+add\b/, /\bpip\s+install\b/,
+    /\bcodemod\b/, /\bsed\s+-i\b/, /\bawk\s.*>/, /\bperl\s+-[pi]\b/,
 ];
 export function isIrreversible(command) {
     return IRREVERSIBLE_PATTERNS.some((r) => r.test(command));
@@ -156,6 +163,9 @@ RULES:
 - For text search in code, use grep -rn, NOT nm or objdump (those are for compiled binaries)
 - On macOS: for memory use vm_stat or top -l 1, for disk use df -h, for processes use ps aux
 - NEVER invent commands that don't exist. Stick to standard Unix/macOS commands.
+- NEVER install packages (npx, npm install, pip install, brew install). This is a READ-ONLY terminal.
+- NEVER modify source code (sed -i, codemod, awk with redirect). Only observe, never change.
+- Search src/ directory, NOT dist/ or node_modules/ for code queries.
 cwd: ${process.cwd()}
 shell: zsh / macOS${projectContext}${restrictionBlock}${contextBlock}`;
 }

package/dist/cli.js

@@ -430,6 +430,13 @@ else if (args.length > 0) {
         console.error(`blocked: ${blocked}`);
         process.exit(1);
     }
+    // Safety: warn about irreversible commands (kill, push, rm, etc.)
+    if (isIrreversible(command)) {
+        console.error(`⚠ IRREVERSIBLE: $ ${command}`);
+        console.error(`  This command may kill processes, push code, or delete data.`);
+        console.error(`  Run with terminal exec "${command}" to bypass, or use the TUI for confirmation.`);
+        process.exit(1);
+    }
     // Show what we're running
     console.error(`$ ${command}`);
     // Step 2: Rewrite for optimization
@@ -450,7 +457,7 @@ else if (args.length > 0) {
         const rawTokens = estimateTokens(raw);
         recordUsage(rawTokens);
         // Test output detection
-        if (isTestOutput(clean)) {
+        if (isTestOutput(clean, actualCmd)) {
             const result = trackTests(process.cwd(), clean);
             console.log(formatWatchResult(result));
             process.exit(0);
@@ -466,7 +473,7 @@ else if (args.length > 0) {
         }
         // AI summary for medium-large output
         if (shouldProcess(clean)) {
-            const processed = await processOutput(actualCmd, clean);
+            const processed = await processOutput(actualCmd, clean, prompt);
             if (processed.aiProcessed && processed.tokensSaved > 30) {
                 recordSaving("compressed", processed.tokensSaved);
                 console.log(processed.summary);

package/dist/lazy-executor.js

@@ -39,7 +39,7 @@ export function toLazy(output, command) {
         count: lines.length,
         sample,
         categories: Object.keys(categories).length > 1 ? categories : undefined,
-        hint: `${lines.length} results. Showing first 20. Use terminal exec --offset=20 --limit=20 to paginate.`,
+        hint: `${lines.length} results. Showing first 20. Use a more specific query to narrow results.`,
     };
 }
 /** Get a slice of output */

package/dist/output-processor.js

@@ -5,26 +5,22 @@ import { estimateTokens } from "./parsers/index.js";
 import { recordSaving } from "./economy.js";
 const MIN_LINES_TO_PROCESS = 15;
 const MAX_OUTPUT_FOR_AI = 8000; // chars to send to AI (truncate if longer)
-const SUMMARIZE_PROMPT = `You are an output summarizer for a terminal. Given command output, return a CONCISE structured summary.
+const SUMMARIZE_PROMPT = `You are an intelligent terminal assistant. Given a user's original question and the command output, ANSWER THE QUESTION directly.
 
 RULES:
-- Return ONLY the summary, no explanations
-- For test output: show pass count, fail count, and ONLY the failing test names + errors
-- For build output: show status (ok/fail), error count, warning count
-- For install output: show package count, time, vulnerabilities
-- For file listings: show directory count, file count, notable files
-- For git output: show branch, status, key info
-- For logs: show line count, error count, latest error
-- For search results: show match count, top files
-- For ANY output: keep errors/failures/warnings, drop verbose/repetitive/progress lines
-- Use symbols: ✓ for success, ✗ for failure, ⚠ for warnings
-- Maximum 8 lines in your summary
-- If there are errors, ALWAYS include them verbatim`;
+- If the user asked a YES/NO question, start with Yes or No, then explain briefly
+- If the user asked "how many", give the number first, then context
+- If the user asked "show me X", show only X, not everything
+- ANSWER the question using the data — don't just summarize the raw output
+- Use symbols: ✓ for success/yes, ✗ for failure/no, ⚠ for warnings
+- Maximum 8 lines
+- Keep errors/failures verbatim
+- Be direct and concise — the user wants an ANSWER, not a data dump`;
 /**
  * Process command output through AI summarization.
  * Cheap AI call (~100 tokens) saves 1000+ tokens downstream.
  */
-export async function processOutput(command, output) {
+export async function processOutput(command, output, originalPrompt) {
     const lines = output.split("\n");
     // Short output — pass through, no AI needed
     if (lines.length <= MIN_LINES_TO_PROCESS) {
@@ -50,7 +46,7 @@ export async function processOutput(command, output) {
     }
     try {
         const provider = getProvider();
-        const summary = await provider.complete(`Command: ${command}\nOutput (${lines.length} lines):\n${toSummarize}`, {
+        const summary = await provider.complete(`${originalPrompt ? `User asked: ${originalPrompt}\n` : ""}Command: ${command}\nOutput (${lines.length} lines):\n${toSummarize}`, {
             system: SUMMARIZE_PROMPT,
             maxTokens: 300,
         });

package/dist/test-watchlist.js

@@ -37,10 +37,13 @@ function extractTests(output) {
     return tests;
 }
 /** Detect if output looks like test runner output */
-export function isTestOutput(output) {
-    // Must have a summary line with counts (not just words "pass"/"fail" in prose)
-    const summaryLine = /(?:\d+\s+pass|\d+\s+fail|Tests?:\s+\d+|Ran\s+\d+\s+tests?)/i;
-    const testMarkers = /(?:✓|✗|✔|✕|PASS\s+\S+\.test|FAIL\s+\S+\.test|bun test|jest|vitest|pytest)/;
+export function isTestOutput(output, command) {
+    // If the command is explicitly a test command, trust it
+    if (command && /\b(bun\s+test|npm\s+test|jest|vitest|pytest|cargo\s+test|go\s+test)\b/.test(command))
+        return true;
+    // Otherwise require BOTH a summary line AND a test runner marker in the output
+    const summaryLine = /(?:\d+\s+pass|\d+\s+fail|Tests?:\s+\d+|Ran\s+\d+\s+tests?)\s*$/im;
+    const testMarkers = /(?:✓|✗|✔|✕|PASS\s+\S+\.test|FAIL\s+\S+\.test|bun test v|jest|vitest|pytest)/;
     return summaryLine.test(output) && testMarkers.test(output);
 }
 /** Track test results and return only changes */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/terminal",
-  "version": "1.1.1",
+  "version": "1.2.1",
   "description": "Smart terminal wrapper for AI agents and humans — structured output, token compression, MCP server, natural language",
   "type": "module",
   "bin": {

package/src/ai.ts

@@ -44,6 +44,13 @@ const IRREVERSIBLE_PATTERNS = [
   /\brm\s/, /\brmdir\b/, /\btruncate\b/, /\bdrop\s+table\b/i,
   /\bdelete\s+from\b/i, /\bmv\b.*\/dev\/null/, /\b>\s*[^>]/,
   /\bdd\b/, /\bmkfs\b/, /\bformat\b/, /\bshred\b/,
+  // Process/service killing
+  /\bkill\b/, /\bkillall\b/, /\bpkill\b/,
+  // Git push/force operations
+  /\bgit\s+push\b/, /\bgit\s+reset\s+--hard\b/, /\bgit\s+force\b/,
+  // Code modification / package installation (security risk)
+  /\bnpx\s+\S+/, /\bnpm\s+install\b/, /\bbun\s+add\b/, /\bpip\s+install\b/,
+  /\bcodemod\b/, /\bsed\s+-i\b/, /\bawk\s.*>/, /\bperl\s+-[pi]\b/,
 ];
 
 export function isIrreversible(command: string): boolean {
@@ -191,6 +198,9 @@ RULES:
 - For text search in code, use grep -rn, NOT nm or objdump (those are for compiled binaries)
 - On macOS: for memory use vm_stat or top -l 1, for disk use df -h, for processes use ps aux
 - NEVER invent commands that don't exist. Stick to standard Unix/macOS commands.
+- NEVER install packages (npx, npm install, pip install, brew install). This is a READ-ONLY terminal.
+- NEVER modify source code (sed -i, codemod, awk with redirect). Only observe, never change.
+- Search src/ directory, NOT dist/ or node_modules/ for code queries.
 cwd: ${process.cwd()}
 shell: zsh / macOS${projectContext}${restrictionBlock}${contextBlock}`;
 }

package/src/cli.tsx

@@ -410,6 +410,14 @@ else if (args.length > 0) {
   const blocked = checkPermissions(command, perms);
   if (blocked) { console.error(`blocked: ${blocked}`); process.exit(1); }
 
+  // Safety: warn about irreversible commands (kill, push, rm, etc.)
+  if (isIrreversible(command)) {
+    console.error(`⚠ IRREVERSIBLE: $ ${command}`);
+    console.error(`  This command may kill processes, push code, or delete data.`);
+    console.error(`  Run with terminal exec "${command}" to bypass, or use the TUI for confirmation.`);
+    process.exit(1);
+  }
+
   // Show what we're running
   console.error(`$ ${command}`);
 
@@ -432,7 +440,7 @@ else if (args.length > 0) {
     recordUsage(rawTokens);
 
     // Test output detection
-    if (isTestOutput(clean)) {
+    if (isTestOutput(clean, actualCmd)) {
       const result = trackTests(process.cwd(), clean);
       console.log(formatWatchResult(result));
       process.exit(0);
@@ -449,7 +457,7 @@ else if (args.length > 0) {
 
     // AI summary for medium-large output
     if (shouldProcess(clean)) {
-      const processed = await processOutput(actualCmd, clean);
+      const processed = await processOutput(actualCmd, clean, prompt);
       if (processed.aiProcessed && processed.tokensSaved > 30) {
         recordSaving("compressed", processed.tokensSaved);
         console.log(processed.summary);

package/src/lazy-executor.ts

@@ -54,7 +54,7 @@ export function toLazy(output: string, command: string): LazyResult {
     count: lines.length,
     sample,
     categories: Object.keys(categories).length > 1 ? categories : undefined,
-    hint: `${lines.length} results. Showing first 20. Use terminal exec --offset=20 --limit=20 to paginate.`,
+    hint: `${lines.length} results. Showing first 20. Use a more specific query to narrow results.`,
   };
 }
 

package/src/output-processor.ts

@@ -29,21 +29,17 @@ export interface ProcessedOutput {
 const MIN_LINES_TO_PROCESS = 15;
 const MAX_OUTPUT_FOR_AI = 8000; // chars to send to AI (truncate if longer)
 
-const SUMMARIZE_PROMPT = `You are an output summarizer for a terminal. Given command output, return a CONCISE structured summary.
+const SUMMARIZE_PROMPT = `You are an intelligent terminal assistant. Given a user's original question and the command output, ANSWER THE QUESTION directly.
 
 RULES:
-- Return ONLY the summary, no explanations
-- For test output: show pass count, fail count, and ONLY the failing test names + errors
-- For build output: show status (ok/fail), error count, warning count
-- For install output: show package count, time, vulnerabilities
-- For file listings: show directory count, file count, notable files
-- For git output: show branch, status, key info
-- For logs: show line count, error count, latest error
-- For search results: show match count, top files
-- For ANY output: keep errors/failures/warnings, drop verbose/repetitive/progress lines
-- Use symbols: ✓ for success, ✗ for failure, ⚠ for warnings
-- Maximum 8 lines in your summary
-- If there are errors, ALWAYS include them verbatim`;
+- If the user asked a YES/NO question, start with Yes or No, then explain briefly
+- If the user asked "how many", give the number first, then context
+- If the user asked "show me X", show only X, not everything
+- ANSWER the question using the data — don't just summarize the raw output
+- Use symbols: ✓ for success/yes, ✗ for failure/no, ⚠ for warnings
+- Maximum 8 lines
+- Keep errors/failures verbatim
+- Be direct and concise — the user wants an ANSWER, not a data dump`;
 
 /**
  * Process command output through AI summarization.
@@ -52,6 +48,7 @@ RULES:
 export async function processOutput(
   command: string,
   output: string,
+  originalPrompt?: string,
 ): Promise<ProcessedOutput> {
   const lines = output.split("\n");
 
@@ -82,7 +79,7 @@ export async function processOutput(
   try {
     const provider = getProvider();
     const summary = await provider.complete(
-      `Command: ${command}\nOutput (${lines.length} lines):\n${toSummarize}`,
+      `${originalPrompt ? `User asked: ${originalPrompt}\n` : ""}Command: ${command}\nOutput (${lines.length} lines):\n${toSummarize}`,
       {
         system: SUMMARIZE_PROMPT,
         maxTokens: 300,

package/src/test-watchlist.ts

@@ -63,10 +63,12 @@ function extractTests(output: string): TestStatus[] {
 }
 
 /** Detect if output looks like test runner output */
-export function isTestOutput(output: string): boolean {
-  // Must have a summary line with counts (not just words "pass"/"fail" in prose)
-  const summaryLine = /(?:\d+\s+pass|\d+\s+fail|Tests?:\s+\d+|Ran\s+\d+\s+tests?)/i;
-  const testMarkers = /(?:✓|✗|✔|✕|PASS\s+\S+\.test|FAIL\s+\S+\.test|bun test|jest|vitest|pytest)/;
+export function isTestOutput(output: string, command?: string): boolean {
+  // If the command is explicitly a test command, trust it
+  if (command && /\b(bun\s+test|npm\s+test|jest|vitest|pytest|cargo\s+test|go\s+test)\b/.test(command)) return true;
+  // Otherwise require BOTH a summary line AND a test runner marker in the output
+  const summaryLine = /(?:\d+\s+pass|\d+\s+fail|Tests?:\s+\d+|Ran\s+\d+\s+tests?)\s*$/im;
+  const testMarkers = /(?:✓|✗|✔|✕|PASS\s+\S+\.test|FAIL\s+\S+\.test|bun test v|jest|vitest|pytest)/;
   return summaryLine.test(output) && testMarkers.test(output);
 }