miii-agent 0.1.15 → 0.1.16

package/README.md

@@ -120,6 +120,19 @@ Inside the TUI, interact naturally:
 | `Ctrl+O` | Toggle full tool output view |
 | `Ctrl+C` | Quit |
 
+### Project Instructions (`MIII.md`)
+
+Drop a `MIII.md` file in your project and miii reads it first, every turn — the same idea as `CLAUDE.md`. Use it to teach the agent your conventions, build/test commands, architecture, and do's and don'ts.
+
+```markdown
+# MIII.md
+- Use tabs, not spaces.
+- Run `npm test` before declaring any task done.
+- The HTTP layer lives in src/server/ — never import it from src/core/.
+```
+
+miii searches upward from the working directory to the repo root (the directory containing `.git`); the nearest `MIII.md` wins. It is treated as authoritative — higher priority than the agent's defaults — except it can never override the permission system or safety boundaries. Files over 32KB are truncated.
+
 ---
 
 ## Technical Deep Dive
@@ -137,7 +150,7 @@ miii ships with a built-in tool suite that the agent invokes autonomously:
 | `grep` | Regex search across files |
 | `run_bash` | Execute shell commands |
 
-**Security & Safety:** Every sensitive operation is gated by a permission system. You approve what the agent can touch, and "always" approvals persist to `~/.miii/permissions.json`. File tools are strictly confined to your working directory; `../` traversal and absolute paths outside the workspace are rejected.
+**Security & Safety:** Every sensitive operation is gated by a permission system. You approve what the agent can touch, and "always" approvals persist to `~/.miii/permissions.json`. The file tools (`read_file`, `write_file`, `edit_file`) are strictly confined to your working directory; `../` traversal and absolute paths outside the workspace are rejected. `run_bash` runs arbitrary shell commands and is **not** path-confined — its only boundary is the permission prompt, so review commands before approving (especially "always").
 
 ### Lossless Output Spill
 

package/dist/cli.js

@@ -79,10 +79,15 @@ function setEffort(effort) {
 function setProvider(provider) {
   saveConfig({ ...readRawConfig(), provider });
 }
-var CONFIG_DIR, CONFIG_PATH;
+var EFFORT_OPTIONS, CONFIG_DIR, CONFIG_PATH;
 var init_config = __esm({
   "src/config.ts"() {
     "use strict";
+    EFFORT_OPTIONS = {
+      low: { temperature: 0.2, num_predict: 1024 },
+      medium: { temperature: 0.7, num_predict: 2048 },
+      high: { temperature: 1, num_predict: -1 }
+    };
     CONFIG_DIR = join(homedir(), ".miii");
     CONFIG_PATH = join(CONFIG_DIR, "config.json");
   }
@@ -850,6 +855,7 @@ var grep;
 var init_grep = __esm({
   "src/tools/grep.ts"() {
     "use strict";
+    init_paths();
     grep = {
       name: "grep",
       description: "Search file contents for a regex pattern. Uses ripgrep if available, falls back to grep -R.",
@@ -865,7 +871,12 @@ var init_grep = __esm({
         required: ["pattern"]
       },
       handler: async ({ pattern, path, glob: glob2, case_insensitive, max_results }) => {
-        const root = path ?? process.cwd();
+        let root;
+        try {
+          root = confinePath(path ?? ".");
+        } catch (err) {
+          return { content: err instanceof Error ? err.message : String(err), is_error: true };
+        }
         const limit = max_results ?? 200;
         const ci = case_insensitive === true || String(case_insensitive) === "true";
         const tryRg = async () => {
@@ -931,6 +942,7 @@ var glob;
 var init_glob = __esm({
   "src/tools/glob.ts"() {
     "use strict";
+    init_paths();
     glob = {
       name: "glob",
       description: 'List files matching a glob pattern (e.g. "**/*.ts"). Uses ripgrep --files if available.',
@@ -944,7 +956,12 @@ var init_glob = __esm({
         required: ["pattern"]
       },
       handler: async ({ pattern, path, max_results }) => {
-        const root = path ?? process.cwd();
+        let root;
+        try {
+          root = confinePath(path ?? ".");
+        } catch (err) {
+          return { content: err instanceof Error ? err.message : String(err), is_error: true };
+        }
         const limit = max_results ?? 500;
         const tryRg = () => execa3("rg", ["--files", "--hidden", "--glob", pattern, root], {
           reject: false,
@@ -1056,12 +1073,61 @@ var init_validate = __esm({
   }
 });
 
+// src/prompt/context.ts
+import { existsSync as existsSync3, readFileSync as readFileSync5, statSync as statSync3 } from "fs";
+import { dirname as dirname2, join as join6 } from "path";
+function findContextFile(cwd) {
+  let dir = cwd;
+  for (; ; ) {
+    const candidate = join6(dir, CONTEXT_FILENAME);
+    if (existsSync3(candidate)) return candidate;
+    if (existsSync3(join6(dir, ".git"))) return null;
+    const parent = dirname2(dir);
+    if (parent === dir) return null;
+    dir = parent;
+  }
+}
+function loadProjectContext(cwd) {
+  const source = findContextFile(cwd);
+  if (!source) return EMPTY;
+  try {
+    if (statSync3(source).size === 0) return { ...EMPTY, source };
+    const raw = readFileSync5(source, "utf8");
+    if (Buffer.byteLength(raw, "utf8") > MAX_CONTEXT_BYTES) {
+      const clipped = Buffer.from(raw, "utf8").subarray(0, MAX_CONTEXT_BYTES).toString("utf8");
+      return { content: clipped, source, truncated: true };
+    }
+    return { content: raw, source, truncated: false };
+  } catch {
+    return { ...EMPTY, source };
+  }
+}
+var CONTEXT_FILENAME, MAX_CONTEXT_BYTES, EMPTY;
+var init_context = __esm({
+  "src/prompt/context.ts"() {
+    "use strict";
+    CONTEXT_FILENAME = "MIII.md";
+    MAX_CONTEXT_BYTES = 32 * 1024;
+    EMPTY = { content: "", source: null, truncated: false };
+  }
+});
+
 // src/prompt/system.ts
-function buildSystemPrompt(tools, cwd) {
+function buildSystemPrompt(tools, cwd, project) {
   const toolLines = tools.map((t) => `- ${t.name}: ${t.description}`).join("\n");
+  const projectSection = project && project.content.trim() ? `
+# ${CONTEXT_FILENAME} \u2014 project instructions (authoritative, read first)
+The user maintains ${CONTEXT_FILENAME} at ${project.source} to steer how you work in this project: conventions, commands, architecture, do's and don'ts. Treat it as direct instruction from the user, higher priority than your defaults. When it conflicts with a default rule below, ${CONTEXT_FILENAME} wins (except permissions and safety, which you never override).${project.truncated ? `
+(Note: file exceeded ${"32KB"} and was truncated.)` : ""}
+
+--- BEGIN ${CONTEXT_FILENAME} ---
+${project.content.trim()}
+--- END ${CONTEXT_FILENAME} ---
+` : "";
   return `You are miii, a senior software engineer running in a terminal.
 
 Working directory: ${cwd}
+${projectSection}
 
 # Goal Understanding (read this first, every turn)
 Before acting on any request, extract and hold three things:
@@ -1142,17 +1208,18 @@ ${toolLines}
 var init_system = __esm({
   "src/prompt/system.ts"() {
     "use strict";
+    init_context();
   }
 });
 
 // src/permissions/policy.ts
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync6, mkdirSync as mkdirSync5, existsSync as existsSync3, renameSync } from "fs";
-import { join as join6 } from "path";
+import { readFileSync as readFileSync6, writeFileSync as writeFileSync6, mkdirSync as mkdirSync5, existsSync as existsSync4, renameSync } from "fs";
+import { join as join7 } from "path";
 import { homedir as homedir5 } from "os";
 function loadRules() {
-  if (!existsSync3(RULES_PATH)) return [];
+  if (!existsSync4(RULES_PATH)) return [];
   try {
-    const data = JSON.parse(readFileSync5(RULES_PATH, "utf-8"));
+    const data = JSON.parse(readFileSync6(RULES_PATH, "utf-8"));
     return Array.isArray(data.rules) ? data.rules : [];
   } catch {
     return [];
@@ -1203,8 +1270,8 @@ var RULES_DIR, RULES_PATH, ALWAYS_ALLOW;
 var init_policy = __esm({
   "src/permissions/policy.ts"() {
     "use strict";
-    RULES_DIR = join6(homedir5(), ".miii");
-    RULES_PATH = join6(RULES_DIR, "permissions.json");
+    RULES_DIR = join7(homedir5(), ".miii");
+    RULES_PATH = join7(RULES_DIR, "permissions.json");
     ALWAYS_ALLOW = /* @__PURE__ */ new Set(["read_file", "grep", "glob"]);
   }
 });
@@ -1346,11 +1413,37 @@ var init_adapter = __esm({
 });
 
 // src/agent/loop.ts
+import { existsSync as existsSync5 } from "fs";
+function readGuard(name, input, seen) {
+  if (name !== "edit_file" && name !== "write_file") return null;
+  const p = input.path;
+  if (typeof p !== "string" || !p) return null;
+  let abs;
+  try {
+    abs = confinePath(p);
+  } catch {
+    return null;
+  }
+  if (seen.has(abs)) return null;
+  if (name === "write_file" && !existsSync5(abs)) return null;
+  const verb = name === "edit_file" ? "edit" : "overwrite";
+  return `Refusing to ${verb} ${p}: you have not read it this turn. Call read_file on ${p} first, then retry the ${name}.`;
+}
+function markSeen(name, input, seen) {
+  if (name !== "read_file" && name !== "edit_file" && name !== "write_file") return;
+  const p = input.path;
+  if (typeof p !== "string" || !p) return;
+  try {
+    seen.add(confinePath(p));
+  } catch {
+  }
+}
 async function* runAgent(opts) {
   const { model, cwd, permissions, hooks, signal, num_ctx } = opts;
   const startTime = Date.now();
-  const system = buildSystemPrompt(TOOLS, cwd);
+  const system = buildSystemPrompt(TOOLS, cwd, loadProjectContext(cwd));
   const ollamaTools = toOllamaTools(TOOLS);
+  const effort = EFFORT_OPTIONS[loadConfig().effort ?? "medium"];
   const history = [
     ...opts.history,
     { role: "user", content: opts.userText }
@@ -1359,6 +1452,7 @@ async function* runAgent(opts) {
   let evalTokens = 0;
   let lastAssistantSig = "";
   let repeatCount = 0;
+  const seenPaths = /* @__PURE__ */ new Set();
   for (let turn = 0; turn < MAX_TURNS; turn++) {
     let text = "";
     let tool_calls;
@@ -1369,7 +1463,7 @@ async function* runAgent(opts) {
     const composedSignal = signal ? AbortSignal.any ? AbortSignal.any([signal, ac.signal]) : ac.signal : ac.signal;
     if (signal) signal.addEventListener("abort", () => ac.abort(), { once: true });
     try {
-      for await (const chunk of chat3(model, toOllamaMessages(history, system), ollamaTools, { signal: composedSignal, num_ctx, num_predict: NUM_PREDICT })) {
+      for await (const chunk of chat3(model, toOllamaMessages(history, system), ollamaTools, { signal: composedSignal, num_ctx, num_predict: effort.num_predict, temperature: effort.temperature })) {
         if (signal?.aborted) break;
         if (chunk.content) {
           text += chunk.content;
@@ -1483,6 +1577,18 @@ async function* runAgent(opts) {
         yield { type: "tool-result", block: r2 };
         continue;
       }
+      const guard = readGuard(use.name, use.input, seenPaths);
+      if (guard) {
+        const r2 = {
+          type: "tool_result",
+          tool_use_id: use.id,
+          content: guard,
+          is_error: true
+        };
+        results.push(r2);
+        yield { type: "tool-result", block: r2 };
+        continue;
+      }
       try {
         await hooks?.firePre(use);
       } catch {
@@ -1504,6 +1610,7 @@ async function* runAgent(opts) {
           is_error: true
         };
       }
+      if (!r.is_error) markSeen(use.name, use.input, seenPaths);
       try {
         await hooks?.firePost(use, r);
       } catch {
@@ -1517,18 +1624,20 @@ async function* runAgent(opts) {
   yield { type: "done", prompt_tokens: promptTokens, eval_tokens: evalTokens };
   return history;
 }
-var MAX_TURNS, NUM_PREDICT, REPEAT_TAIL, REPEAT_KILL;
+var MAX_TURNS, REPEAT_TAIL, REPEAT_KILL;
 var init_loop = __esm({
   "src/agent/loop.ts"() {
     "use strict";
     init_client();
+    init_paths();
     init_registry();
     init_validate();
     init_system();
+    init_context();
     init_policy();
+    init_config();
     init_adapter();
     MAX_TURNS = 25;
-    NUM_PREDICT = 8192;
     REPEAT_TAIL = 120;
     REPEAT_KILL = 4;
   }
@@ -1536,14 +1645,14 @@ var init_loop = __esm({
 
 // eval/runner.ts
 import { mkdtempSync, writeFileSync as writeFileSync7, mkdirSync as mkdirSync6, rmSync as rmSync3 } from "fs";
-import { dirname as dirname2, join as join7 } from "path";
+import { dirname as dirname3, join as join8 } from "path";
 import { tmpdir } from "os";
 async function runScenario(model, s) {
-  const dir = mkdtempSync(join7(tmpdir(), "miii-eval-"));
+  const dir = mkdtempSync(join8(tmpdir(), "miii-eval-"));
   const prevCwd = process.cwd();
   for (const [rel, content] of Object.entries(s.files ?? {})) {
-    const abs = join7(dir, rel);
-    mkdirSync6(dirname2(abs), { recursive: true });
+    const abs = join8(dir, rel);
+    mkdirSync6(dirname3(abs), { recursive: true });
     writeFileSync7(abs, content, "utf-8");
   }
   const r = {
@@ -1605,13 +1714,13 @@ var init_runner = __esm({
 });
 
 // eval/scenarios.ts
-import { readFileSync as readFileSync6, existsSync as existsSync4 } from "fs";
-import { join as join8 } from "path";
+import { readFileSync as readFileSync7, existsSync as existsSync6 } from "fs";
+import { join as join9 } from "path";
 var read, scenarios;
 var init_scenarios = __esm({
   "eval/scenarios.ts"() {
     "use strict";
-    read = (dir, f) => existsSync4(join8(dir, f)) ? readFileSync6(join8(dir, f), "utf-8") : null;
+    read = (dir, f) => existsSync6(join9(dir, f)) ? readFileSync7(join9(dir, f), "utf-8") : null;
     scenarios = [
       {
         name: "edit-exact-string",
@@ -2364,8 +2473,8 @@ function FileEditBlock({
   const lang = langFromPath(path);
   return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", marginLeft: 2, children: [
     /* @__PURE__ */ jsxs9(Box9, { children: [
-      /* @__PURE__ */ jsx9(Text9, { color: "yellow", children: "\u25CF " }),
-      /* @__PURE__ */ jsxs9(Text9, { color: "yellow", children: [
+      /* @__PURE__ */ jsx9(Text9, { color: "green", children: "\u25CF " }),
+      /* @__PURE__ */ jsxs9(Text9, { color: "white", children: [
         label,
         " "
       ] }),
@@ -2514,8 +2623,8 @@ function ToolUseLine({ use, result }) {
   const { label, arg } = toolHeader(use);
   return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", marginLeft: 2, children: [
     /* @__PURE__ */ jsxs9(Box9, { children: [
-      /* @__PURE__ */ jsx9(Text9, { color: "yellow", children: "\u25CF " }),
-      /* @__PURE__ */ jsxs9(Text9, { color: "yellow", children: [
+      /* @__PURE__ */ jsx9(Text9, { color: "green", children: "\u25CF " }),
+      /* @__PURE__ */ jsxs9(Text9, { color: "white", children: [
         label,
         " "
       ] }),
@@ -2528,14 +2637,14 @@ function ToolUseLine({ use, result }) {
 }
 var UserMessage = memo2(function UserMessage2({ msg }) {
   return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "row", marginBottom: 1, children: [
-    /* @__PURE__ */ jsx9(Text9, { color: "blue", children: "\u25CF " }),
+    /* @__PURE__ */ jsx9(Text9, { color: "gray", children: "\u276F " }),
     /* @__PURE__ */ jsx9(Box9, { flexGrow: 1, children: /* @__PURE__ */ jsx9(Text9, { children: msg.content }) })
   ] });
 });
 var AssistantMessage = memo2(function AssistantMessage2({ msg }) {
   return /* @__PURE__ */ jsxs9(Box9, { flexDirection: "column", marginBottom: 1, children: [
     msg.content && /* @__PURE__ */ jsxs9(Box9, { flexDirection: "row", children: [
-      /* @__PURE__ */ jsx9(Text9, { color: "white", children: "\u25CF " }),
+      /* @__PURE__ */ jsx9(Text9, { color: "blue", children: "\u25CF " }),
       /* @__PURE__ */ jsx9(Box9, { flexGrow: 1, children: /* @__PURE__ */ jsx9(Text9, { children: msg.content }) })
     ] }),
     msg.tool_uses?.map((u) => {
@@ -2858,6 +2967,33 @@ function useAgentRunner(model, activeCtx) {
 init_config();
 import { useInput } from "ink";
 var EFFORTS = ["low", "medium", "high"];
+var PASTE_CHIP_LINES = 4;
+var PASTE_CHIP_CHARS = 200;
+var pasteStore = /* @__PURE__ */ new Map();
+var pasteCounter = 0;
+function clearPasteStore() {
+  pasteStore.clear();
+  pasteCounter = 0;
+}
+function expandPastes(text) {
+  let out = text;
+  for (const [chip, full] of pasteStore) out = out.split(chip).join(full);
+  return out;
+}
+function stripControls(chunk) {
+  return chunk.replace(/\x1b\[20[01]~/g, "").replace(/\t/g, " ").replace(/[\x00-\x09\x0b-\x1f\x7f]/g, "");
+}
+function sanitizePaste(chunk) {
+  if (chunk.length <= 1) return chunk;
+  const cleaned = stripControls(chunk).replace(/\r/g, "");
+  const lines = cleaned.split("\n").length;
+  if (lines > PASTE_CHIP_LINES || cleaned.length > PASTE_CHIP_CHARS) {
+    const chip = `[Pasted #${++pasteCounter} \xB7 ${lines} line${lines === 1 ? "" : "s"}]`;
+    pasteStore.set(chip, cleaned);
+    return chip;
+  }
+  return cleaned.replace(/\n/g, " ");
+}
 function useKeyboard(opts) {
   const {
     exit,
@@ -2913,6 +3049,7 @@ function useKeyboard(opts) {
     setActiveToolResults([]);
     setError(null);
     setNotice(null);
+    clearPasteStore();
   }
   const effort = cfg.effort ?? "medium";
   useInput((char, key) => {
@@ -3094,6 +3231,7 @@ function useKeyboard(opts) {
         return;
       }
       if (paletteOpen && key.escape) {
+        clearPasteStore();
         setInput(() => "");
         setPaletteCursor(() => 0);
         return;
@@ -3149,19 +3287,21 @@ function useKeyboard(opts) {
           }
         } else if (trimmed) {
           setNotice(null);
+          const message = expandPastes(trimmed);
           if (!agentHistory.length && cfg.model) {
             const id = sessionId;
             const model = cfg.model;
             void (async () => {
               try {
-                const title = await summarizeMessage(model, trimmed);
-                persistSession(id, [{ role: "user", content: trimmed }], title);
+                const title = await summarizeMessage(model, message);
+                persistSession(id, [{ role: "user", content: message }], title);
               } catch {
               }
             })();
           }
-          sendMessage(trimmed);
+          sendMessage(message);
         }
+        clearPasteStore();
         setInput(() => "");
         setPaletteCursor(() => 0);
         return;
@@ -3170,13 +3310,22 @@ function useKeyboard(opts) {
         setInput((s) => {
           setPaletteCursor(() => 0);
           setFilePickerCursor(() => 0);
+          let match = "";
+          for (const chip of pasteStore.keys()) {
+            if (s.endsWith(chip) && chip.length > match.length) match = chip;
+          }
+          if (match) {
+            pasteStore.delete(match);
+            return s.slice(0, -match.length);
+          }
           return s.slice(0, -1);
         });
       } else if (char && !key.ctrl && !key.meta && !key.tab) {
-        setInput((s) => {
+        const text = sanitizePaste(char);
+        if (text) setInput((s) => {
           setPaletteCursor(() => 0);
           setFilePickerCursor(() => 0);
-          return s + char;
+          return s + text;
         });
       }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "miii-agent",
-  "version": "0.1.15",
+  "version": "0.1.16",
   "description": "Terminal AI coding agent powered by Ollama",
   "type": "module",
   "bin": {
@@ -17,6 +17,8 @@
     "start": "tsx src/cli.tsx",
     "eval": "tsx src/cli.tsx eval",
     "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
     "dev": "tsx watch src/cli.tsx",
     "build": "tsup",
     "postbuild": "node -e \"if(process.platform!=='win32')require('fs').chmodSync('dist/cli.js',0o755)\"",
@@ -49,6 +51,7 @@
     "@types/react": "^18.3.0",
     "tsup": "^8.5.1",
     "tsx": "^4.19.0",
-    "typescript": "^5.7.0"
+    "typescript": "^5.7.0",
+    "vitest": "^4.1.9"
   }
 }