miii-cli 0.2.0 → 0.2.2

package/README.md

@@ -107,13 +107,36 @@ The model can call these tools automatically — no setup needed.
 | `edit_file` | Create or overwrite a file (auto-creates parent dirs) |
 | `create_folder` | Create a directory and any missing parents |
 | `move_file` | Move or rename a file or directory |
-| `delete_file` | Delete a file |
+| `delete_file` | Delete a file (requires confirmation) |
 | `run_command` | Run a shell command in the current directory |
 
 Tool calls chain up to 6 hops deep — the model reads, edits, runs, and verifies on its own.
 
 ---
 
+## Thinking indicator
+
+While miii processes your request, a rotating sparkle icon and sarcastic phrase appear so you always know something's happening:
+
+```
+miii
+  ✦ staring into the abyss (it blinked)…
+```
+
+The phrase rotates every 5 seconds. When a tool call is in flight, the display updates to show exactly which tool is running:
+
+```
+miii
+  ⚙ running read_file…
+
+miii
+  ⚙ running run_command…
+```
+
+Each tool in a chain updates live as execution moves through them.
+
+---
+
 ## Sessions
 
 Every conversation is saved and resumed automatically.
@@ -170,8 +193,9 @@ Config is loaded from (in order):
 ```json
 {
   "model": "gpt-4o",
-  "provider": "openai",
-  "baseUrl": "https://api.openai.com/v1"
+  "provider": "openai-compat",
+  "baseUrl": "https://api.openai.com/v1",
+  "apiKey": "sk-..."
 }
 ```
 
@@ -184,27 +208,38 @@ Works with LM Studio, vLLM, Groq, Together, and any other OpenAI-compatible serv
 | Key | Action |
 |---|---|
 | `enter` | Send message |
-| `ctrl+c` | Abort streaming response |
+| `ctrl+c` | Abort current request |
 | `ctrl+c` x2 | Exit miii |
-| `esc` | Close overlay or abort |
+| `esc` | Close overlay or cancel |
 | `↑ / ↓` | Navigate command palette or file picker |
 
 ---
 
 ## Security
 
-miii **0.1.5** addresses the following OWASP issues:
+miii **0.1.5+** addresses the following OWASP issues:
 
 | Issue | Fix |
 |---|---|
-| Path traversal (A01) | All file tool operations are now restricted to the current working directory via `guardPath()` |
+| Path traversal (A01) | All file tool operations restricted to cwd via `guardPath()` |
 | Path traversal (A01) | `@filename` references validated against `cwd` before reading |
 | Path traversal (A01) | `/mv`, `/mkdir`, `/touch` commands restricted to `cwd` |
 | Path traversal (A01) | Session names sanitized to alphanumeric + hyphens only |
 | Injection (A03) | `run_command` tool enforces a 30-second execution timeout |
 | Insecure deserialization (A08) | Config loading whitelists allowed keys; session data validated as array |
 | XML injection | File paths in context XML attributes are properly escaped |
-| Configurable API key | OpenAI-compatible provider token now configurable via `apiKey` in config (no longer hardcoded) |
+| Configurable API key | OpenAI-compatible provider token configurable via `apiKey` in config |
+
+`delete_file` requires explicit user confirmation (`y/n`) before executing.
+
+---
+
+## What's new in 0.2.0
+
+- **No streaming** — responses delivered in full, no partial renders or flickering
+- **Thinking indicator** — rotating sarcastic phrases + sparkle icon while model processes
+- **Tool status** — live indicator when a tool call is in flight
+- **Status renamed** — internal status `streaming` → `thinking` throughout
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "miii-cli",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "type": "module",
   "description": "Claude Code-level terminal workflows powered by your local models.",
   "license": "MIT",
@@ -24,6 +24,11 @@
     "terminal",
     "local-ai"
   ],
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
   "bin": {
     "miii": "dist/index.js"
   },

package/.claude/settings.local.json

@@ -1,28 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(git -C /Users/akshay/Desktop/essentials/akshay-workspace/miii-cli status)",
-      "Bash(npm install *)",
-      "Bash(npx tsc *)",
-      "Bash(node --input-type=module)",
-      "Bash(chmod +x dist/index.js)",
-      "Bash(node dist/index.js --help)",
-      "Bash(node dist/index.js)",
-      "Bash(chmod +x install.sh)",
-      "Bash(npm whoami *)",
-      "Bash(npm run *)",
-      "Bash(npm publish *)",
-      "Bash(npm pkg *)",
-      "Bash(npm version *)",
-      "Bash(chmod +x *)",
-      "Bash(git grep *)",
-      "Bash(npm link *)",
-      "Bash(node -e \"const {appendFileSync} = require\\('fs'\\); appendFileSync\\('/tmp/miii-test.log', 'test\\\\n'\\); console.log\\('ok'\\)\")",
-      "Read(//tmp/**)",
-      "Read(//private/tmp/**)",
-      "Read(//Users/akshay/**)",
-      "Bash(tsx --version)",
-      "Bash(node -e ' *)"
-    ]
-  }
-}

package/CONTRIBUTING.md

@@ -1,55 +0,0 @@
-# Contributing to miii-cli
-
-We welcome contributions! miii-cli is a community-driven project, and your help is invaluable whether you're fixing a bug, adding a feature, or improving documentation.
-
----
-
-### 🚀 How to Contribute
-
-1.  **Fork** the repository.
-2.  **Clone** your fork locally.
-3.  **Create a new branch** (`git checkout -b feature/my-awesome-feature`).
-4.  **Commit** your changes and **Push** to the branch.
-5.  **Open a Pull Request (PR)** against the `main` branch.
-
-### 🤝 Guidelines
-
-*   **Code Style:** Please follow standard JavaScript/TypeScript best practices.
-*   **Testing:** All new features must include accompanying unit or integration tests.
-*   **Documentation:** If you change an API or add complex logic, please update the relevant documentation files.
-
-### 📝 Workflow
-
-*   **Bugs:** If you find a bug, please report it on the Issues page with a clear reproduction guide and expected behavior.
-*   **Features:** Before starting a large feature, please open an Issue to discuss the scope and design with the core team.
-
-### 🐛 Bug Reporting
-
-When reporting a bug, please include:
-
-1.  **Title:** A concise summary of the issue.
-2.  **Environment:** (e.g., Node.js version, OS, browser)
-3.  **Steps to Reproduce:** A numbered list of exact steps to trigger the bug.
-4.  **Expected Result:** What should have happened.
-5.  **Actual Result:** What actually happened.
-
-***
-
-### 🛠 Development Setup
-
-To work on miii-cli locally, please ensure you have the necessary dependencies installed.
-
-1.  **Install Dependencies:**
-    `npm install`
-
-2.  **Common Commands:**
-    We use a Makefile to streamline common tasks:
-
-    Development/Live Run:   `make dev` (Runs the application in development mode)
-    Build Project:         `make build` (Compiles the TypeScript source code)
-    Install Globally:      `make install` (Links the project using `npm link`)
-    Clean Build:           `make clean` (Removes compiled output)
-
-### 🧪 Testing
-
-When writing tests, please ensure they cover both the happy path and expected edge cases.

package/Makefile

@@ -1,13 +0,0 @@
-.PHONY: dev build install clean
-
-dev:
-	tsx src/index.ts
-
-build:
-	tsc
-
-install: build
-	npm link
-
-clean:
-	rm -rf dist

package/install.sh

@@ -1,6 +0,0 @@
-#!/usr/bin/env bash
-set -e
-npm install
-npm run build
-npm link
-echo "miii installed. Run: miii"

package/src/config.ts

@@ -1,32 +0,0 @@
-import { readFileSync, existsSync } from 'fs'
-import { homedir } from 'os'
-import { join } from 'path'
-import type { Config } from './types.js'
-
-const defaults: Config = {
-  model: 'llama3.2',
-  provider: 'ollama',
-  baseUrl: 'http://localhost:11434',
-}
-
-const ALLOWED_KEYS = new Set<keyof Config>(['model', 'provider', 'baseUrl', 'systemPrompt', 'apiKey'])
-
-export function loadConfig(): Config {
-  const candidates = [
-    join(process.cwd(), '.miii.json'),
-    join(homedir(), '.config', 'miii', 'config.json'),
-  ]
-  for (const p of candidates) {
-    if (existsSync(p)) {
-      try {
-        const raw: Record<string, unknown> = JSON.parse(readFileSync(p, 'utf-8'))
-        const safe: Partial<Config> = {}
-        for (const key of ALLOWED_KEYS) {
-          if (key in raw) (safe as Record<string, unknown>)[key] = raw[key]
-        }
-        return { ...defaults, ...safe }
-      } catch {}
-    }
-  }
-  return { ...defaults }
-}

package/src/files/ops.ts

@@ -1,89 +0,0 @@
-import {
-  readFileSync, writeFileSync, unlinkSync,
-  mkdirSync, readdirSync, statSync, existsSync, renameSync,
-} from 'fs'
-import { join, dirname, relative, extname, resolve, sep } from 'path'
-
-export function guardPath(p: string, base = process.cwd()): string {
-  const abs = resolve(base, p)
-  const root = resolve(base)
-  if (abs !== root && !abs.startsWith(root + sep)) {
-    throw new Error(`path outside working directory: ${p}`)
-  }
-  return abs
-}
-
-const SKIP_DIRS = new Set([
-  'node_modules', 'dist', 'build', '.git', '.next', '.nuxt', '.svelte-kit',
-  'out', '__pycache__', '.cache', 'coverage', '.nyc_output', 'vendor',
-  'target', '.turbo', '.vercel', 'generated', '.gradle', '.expo',
-  'bin', 'obj', '.idea', '.vscode', 'tmp', 'temp', 'logs',
-])
-
-const SKIP_EXTS = new Set([
-  '.map', '.lock',
-  '.png', '.jpg', '.jpeg', '.gif', '.webp', '.ico', '.bmp', '.tiff',
-  '.mp4', '.mp3', '.wav', '.ogg', '.pdf',
-  '.zip', '.tar', '.gz', '.rar', '.7z',
-  '.exe', '.dll', '.so', '.dylib', '.wasm', '.class', '.pyc',
-  '.ttf', '.woff', '.woff2', '.eot',
-])
-
-const SKIP_NAMES = new Set([
-  'package-lock.json', 'yarn.lock', 'pnpm-lock.yaml', 'Cargo.lock',
-  'poetry.lock', 'Gemfile.lock', 'composer.lock',
-  '.DS_Store', 'Thumbs.db', '.env.local', 'LICENSE', 'LICENSE.md',
-])
-
-export function readFile(p: string): string {
-  if (!existsSync(p)) return ''
-  return readFileSync(p, 'utf-8')
-}
-
-export function writeFile(p: string, content: string): void {
-  mkdirSync(dirname(p), { recursive: true })
-  writeFileSync(p, content, 'utf-8')
-}
-
-export function deleteFile(p: string): void {
-  unlinkSync(p)
-}
-
-export function createDir(p: string): void {
-  mkdirSync(p, { recursive: true })
-}
-
-export function moveFile(from: string, to: string): void {
-  mkdirSync(dirname(to), { recursive: true })
-  renameSync(from, to)
-}
-
-export interface FileEntry {
-  name: string
-  path: string
-  rel: string
-  type: 'file' | 'dir'
-  size?: number
-}
-
-export function listFiles(dir: string, recursive = false, cwd = process.cwd()): FileEntry[] {
-  if (!existsSync(dir)) return []
-  const entries: FileEntry[] = []
-  for (const name of readdirSync(dir)) {
-    if (name.startsWith('.')) continue
-    if (SKIP_NAMES.has(name)) continue
-    if (SKIP_DIRS.has(name)) continue
-    const ext = extname(name)
-    if (SKIP_EXTS.has(ext)) continue
-    if (name.endsWith('.d.ts') || name.endsWith('.js.map')) continue
-    let stat
-    try { stat = statSync(join(dir, name)) } catch { continue }
-    const full = join(dir, name)
-    const type = stat.isDirectory() ? 'dir' : 'file'
-    entries.push({ name, path: full, rel: relative(cwd, full), type, size: stat.isFile() ? stat.size : undefined })
-    if (recursive && type === 'dir') {
-      entries.push(...listFiles(full, true, cwd))
-    }
-  }
-  return entries
-}

package/src/index.ts

@@ -1,11 +0,0 @@
-#!/usr/bin/env node
-// Minimal entry — heavy imports lazy-loaded
-async function main() {
-  const { lazyInit } = await import('./init.js')
-  await lazyInit()
-}
-
-main().catch(err => {
-  process.stderr.write(`fatal: ${err.message}\n`)
-  process.exit(1)
-})

package/src/init.ts

@@ -1,41 +0,0 @@
-import { render } from 'ink'
-import React from 'react'
-import minimist from 'minimist'
-import { loadConfig } from './config.js'
-import { SkillLoader } from './skills/loader.js'
-import { InputBar } from './tui/InputBar.js'
-import { welcome } from './tui/printer.js'
-import { ensureOllama } from './llm/ollama.js'
-
-export async function lazyInit(): Promise<void> {
-  const argv = minimist(process.argv.slice(2), {
-    string: ['model', 'url', 'provider', 'session'],
-    alias: { m: 'model', u: 'url', p: 'provider', s: 'session' },
-  })
-
-  const config = loadConfig()
-  if (argv.model) config.model = argv.model
-  if (argv.url) config.baseUrl = argv.url
-  if (argv.provider) config.provider = argv.provider as typeof config.provider
-
-  if (config.provider === 'ollama') {
-    await ensureOllama(config.baseUrl)
-  }
-
-  const skills = new SkillLoader()
-  await skills.loadAll()
-
-  // Print welcome banner to scrollback BEFORE Ink starts
-  welcome(config.provider, config.model, process.cwd())
-
-  // Ink renders ONLY the input bar (small footprint at bottom)
-  // patchConsole: true (default) ensures console.log output appears above Ink
-  const sessionName = (argv.session as string) || 'default'
-
-  const { waitUntilExit } = render(
-    React.createElement(InputBar, { config, skills, cwd: process.cwd(), session: sessionName }),
-    { exitOnCtrlC: false }
-  )
-
-  await waitUntilExit()
-}

package/src/llm/ollama.ts

@@ -1,110 +0,0 @@
-import { execSync, spawn } from 'child_process'
-
-export interface OllamaModel {
-  name: string
-  size: number
-  modified_at: string
-  digest?: string
-}
-
-export async function listModels(baseUrl: string): Promise<OllamaModel[]> {
-  const res = await fetch(`${baseUrl}/api/tags`)
-  if (!res.ok) throw new Error(`Ollama ${res.status}: ${await res.text()}`)
-  const data = (await res.json()) as { models?: OllamaModel[] }
-  return data.models ?? []
-}
-
-export async function pullModel(
-  baseUrl: string,
-  name: string,
-  onProgress: (status: string, pct: number | undefined) => void,
-  signal?: AbortSignal,
-): Promise<void> {
-  const res = await fetch(`${baseUrl}/api/pull`, {
-    method: 'POST',
-    headers: { 'Content-Type': 'application/json' },
-    body: JSON.stringify({ name, stream: true }),
-    signal,
-  })
-  if (!res.ok) throw new Error(`pull failed: ${res.status} ${await res.text()}`)
-
-  const reader = res.body!.getReader()
-  const dec = new TextDecoder()
-  let buf = ''
-
-  try {
-    while (true) {
-      const { done, value } = await reader.read()
-      if (done) break
-      buf += dec.decode(value, { stream: true })
-      const lines = buf.split('\n')
-      buf = lines.pop() ?? ''
-      for (const line of lines) {
-        if (!line.trim()) continue
-        try {
-          const obj = JSON.parse(line) as { status?: string; completed?: number; total?: number }
-          const pct = obj.total ? Math.round(((obj.completed ?? 0) / obj.total) * 100) : undefined
-          onProgress(obj.status ?? '', pct)
-        } catch {}
-      }
-    }
-  } finally {
-    reader.releaseLock()
-  }
-}
-
-export async function ensureOllama(baseUrl: string): Promise<void> {
-  if (await isReachable(baseUrl)) return
-
-  if (!isBinaryInstalled()) {
-    process.stderr.write('\nOllama not found. Install it:\n\n')
-    if (process.platform === 'darwin') {
-      process.stderr.write('  brew install ollama\n')
-      process.stderr.write('  — or download: https://ollama.ai/download\n')
-    } else if (process.platform === 'linux') {
-      process.stderr.write('  curl -fsSL https://ollama.ai/install.sh | sh\n')
-    } else {
-      process.stderr.write('  https://ollama.ai/download\n')
-    }
-    process.stderr.write('\nThen run: ollama serve\n\n')
-    process.exit(1)
-  }
-
-  process.stderr.write('Ollama not running — starting ollama serve...\n')
-  spawn('ollama', ['serve'], { detached: true, stdio: 'ignore' }).unref()
-
-  for (let i = 0; i < 12; i++) {
-    await new Promise(r => setTimeout(r, 500))
-    if (await isReachable(baseUrl)) {
-      process.stderr.write('Ollama ready.\n')
-      return
-    }
-  }
-
-  process.stderr.write('Could not start Ollama. Run manually: ollama serve\n')
-  process.exit(1)
-}
-
-async function isReachable(baseUrl: string): Promise<boolean> {
-  try {
-    const res = await fetch(`${baseUrl}/api/tags`, { signal: AbortSignal.timeout(2000) })
-    return res.ok
-  } catch {
-    return false
-  }
-}
-
-function isBinaryInstalled(): boolean {
-  try {
-    execSync(process.platform === 'win32' ? 'where ollama' : 'which ollama', { stdio: 'ignore' })
-    return true
-  } catch {
-    return false
-  }
-}
-
-export function fmtSize(bytes: number): string {
-  if (bytes >= 1e9) return `${(bytes / 1e9).toFixed(1)}GB`
-  if (bytes >= 1e6) return `${(bytes / 1e6).toFixed(0)}MB`
-  return `${(bytes / 1e3).toFixed(0)}KB`
-}

package/src/llm/stream.ts

@@ -1,55 +0,0 @@
-import type { ChatMessage } from '../types.js'
-
-export interface ChatConfig {
-  provider: 'ollama' | 'openai-compat'
-  model: string
-  baseUrl: string
-  apiKey?: string
-  messages: ChatMessage[]
-  signal?: AbortSignal
-  onDone: (fullText: string) => void | Promise<void>
-  onError: (err: Error) => void
-}
-
-export async function chat(cfg: ChatConfig): Promise<void> {
-  if (cfg.provider === 'openai-compat') return chatOpenAI(cfg)
-  return chatOllama(cfg)
-}
-
-async function chatOllama(cfg: ChatConfig): Promise<void> {
-  const { model, messages, baseUrl, signal, onDone, onError } = cfg
-  try {
-    const res = await fetch(`${baseUrl}/api/chat`, {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({ model, messages, stream: false }),
-      signal,
-    })
-    if (!res.ok) { onError(new Error(`Ollama ${res.status}: ${await res.text()}`)); return }
-    const obj = await res.json()
-    await onDone(obj?.message?.content ?? '')
-  } catch (err) {
-    if ((err as Error)?.name !== 'AbortError') onError(toError(err))
-  }
-}
-
-async function chatOpenAI(cfg: ChatConfig): Promise<void> {
-  const { model, messages, baseUrl, apiKey, signal, onDone, onError } = cfg
-  try {
-    const res = await fetch(`${baseUrl}/v1/chat/completions`, {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${apiKey ?? 'local'}` },
-      body: JSON.stringify({ model, messages }),
-      signal,
-    })
-    if (!res.ok) { onError(new Error(`LLM ${res.status}: ${await res.text()}`)); return }
-    const obj = await res.json()
-    await onDone(obj?.choices?.[0]?.message?.content ?? '')
-  } catch (err) {
-    if ((err as Error)?.name !== 'AbortError') onError(toError(err))
-  }
-}
-
-function toError(e: unknown): Error {
-  return e instanceof Error ? e : new Error(String(e))
-}