Re-plan on command requesting stdin

[jlegido]

Is your feature request related to a problem? Please describe.

First of all many thanks to anybody involved in this project, I really appreciate your time and effort.

Shouldn't a command (such as "git") asking for stdin be aborted by the LLM model in use and propose an alternative?

I am running (not sure if relevant) dockerized version of open interpreter docker-open-interpreter:

docker run \
  -it \
  --rm \
  --name agent \
  -e DEEPSEEK_API_KEY=$DEEPSEEK_API_KEY \
  -v /var/run/docker.sock:/var/run/docker.sock \
  ghcr.io/legido-ai/docker-open-interpreter interpreter \
  --model deepseek/deepseek-chat \
  -y --safe_mode off

And I asked:

Clone https://github.com/legido-ai/private
                                                                                                                                                                                                                                              
  I'll clone the repository from GitHub. Let me first check the current directory and then clone the repository.                                                                                                                              
                                                                                                                                                                                                                                              

                                                                                                                                                                                                                                              
  pwd && ls -la                                                                                                                                                                                                                               
                                                                                                                                                                                                                                              
                                                                                                                                                                                                                                              
  /workspace                                                                                                                                                                                                                                  
  total 8                                                                                                                                                                                                                                     
  drwxr-xr-x    2 appuser  appuser       4096 Dec  1 17:16 .                                                                                                                                                                                  
  drwxr-xr-x    1 root     root          4096 Dec  2 16:17 ..                                                                                                                                                                                 
                                                                                                                                                                                                                                              
                                                                                                                                                                                                                                              
  Now I'll clone the repository:                                                                                                                                                                                                              
                                                                                                                                                                                                                                              

                                                                                                                                                                                                                                              
  git clone https://github.com/legido-ai/private.git                                                                                                                                                                                          
                                                                                                                                                                                                                                              
                                                                                                                                                                                                                                              
  Cloning into 'private'...                                                                                                                                                                                                                   
                                                                                                                                                                                                                                              Username for 'https://github.com': 

Not sure if it's the model (deepseek/deepseek-chat) or simply I'm not understanding how open-interpreter works, but I expect the model to halt and follow another strategy, like for instance claude code will do.

Thanks for your feedback!

Describe the solution you'd like

Add a flag to consider stdin as an error, so model can replan

Describe alternatives you've considered

No response

Additional context

No response

[endolith]

Meaning that if the AI runs a command that itself requests input from the user, it should be aborted? Yes I agree with that and it's been a problem before. Though in some cases I am able to provide the input and the command continues OK.

[jlegido]

I managed to fix it with below profile:

from interpreter import interpreter

interpreter.auto_run = True
interpreter.offline = False

interpreter.system_message += """
You are the Legido AI Workspace assistant. Adhere to these strict protocols:

### 1. EXECUTION & STDIN PROTOCOL
- **Problem:** You are in a non-interactive shell.
- **Solution:** 
  1. ALWAYS use non-interactive flags (e.g., `apt-get -y`, `npm init -y`, `docker run -d`).
  2. **Timeout Protocol:** If a command might hang, wrap it: `timeout 20s <command>`.
  3. If you see exit code 124, it was a timeout. Retry with correct flags.

### 6. ROBUST ERROR RECOVERY (CRITICAL)
- **Language Confusion:** 
  - If you see `syntax error near unexpected token` (Bash) on a `print()` or `import` statement, you are running Python code in Bash.
  - **ACTION:** Immediately switch to the Python kernel and re-run the code. Do not ask for permission.
- **Missing Modules:** 
  - If you see `ModuleNotFoundError`, do not apologize.
  - **ACTION:** Immediately run `pip install <package>` and retry. 
  - *Specific Tip:* If `import jwt` fails, install `pyjwt` (not `jwt`).

### 7. CODE BLOCK DISCIPLINE
- You MUST explicitly specify the language for every code block (e.g., ```python or ```bash).
- Do not rely on auto-detection.

Closing this for now