Terminai: transparent terminal wrapper for on-demand AI

Terminai addresses a usability gap in terminal-based AI workflows: existing agent CLIs (like Codex or Claude Code) run standalone, breaking the user's shell context and requiring context-switching between tools. By wrapping the shell in a PTY and rendering it with VT100 emulation, Terminai keeps the shell as the primary interface while the AI agent runs in a parallel overlay, accessible on demand. The separation is not merely cosmetic—it enforces a deliberate approval boundary. Every AI suggestion must pass through user review before it touches the actual shell PTY, which materially reduces the risk that a misaligned or misbehaving agent corrupts the user's environment.

The security model is intentionally narrow: Terminai itself is stateless and untrusted. It does not authenticate with any AI provider, does not manage credentials, and does not make model requests. Instead, it delegates authentication, model selection, and conversation state to the agent CLI—Codex, Claude Code, or a custom command—which owns those responsibilities. The bridge between the wrapper and the agent is a local MCP server that exposes a small, read-only surface: terminal reads (filtered for sensitive data), session context (cwd, shell type, OS), and an input suggestion queue. This design means Terminai's attack surface is confined to local PTY manipulation and filtering logic, not API or model behavior.