oh, look what you've done...

package.json

@@ -112,10 +112,13 @@
       "vite>sass>@parcel/watcher": false,
       "vitest>@vitest/browser>webdriverio>@wdio/utils>edgedriver": false,
       "vitest>@vitest/browser>webdriverio>@wdio/utils>geckodriver": false,
-      "vitest>@vitest/mocker>msw": false
+      "vitest>@vitest/mocker>msw": false,
+      "vite>tsx>esbuild": false
     }
   },
   "resolutions": {
-    "cookie": "^0.7.0"
+    "cookie": "^0.7.0",
+    "form-data": "4.0.2",
+    "foreground-child": "3.1.1"
   }
 }

packages/kernel/src/Kernel.ts

@@ -47,6 +47,8 @@ import {
 } from './types.ts';
 import { VatHandle } from './VatHandle.ts';
 
+const VERBOSE = false;
+
 /**
  * Obtain the KRef from a simple value represented as a CapData object.
  *
@@ -67,6 +69,10 @@ type MessageRoute = {
   target: KRef;
 } | null;
 
+// eslint-disable-next-line @typescript-eslint/explicit-function-return-type
+const clip = (content: string, length = 10) =>
+  `${content.substring(0, length)}${content.length > length ? '...' : ''}`;
+
 export class Kernel {
   /** Command channel from the controlling console/browser extension/test driver */
   readonly #commandStream: DuplexStream<KernelCommand, KernelCommandReply>;
@@ -506,16 +512,16 @@ export class Kernel {
    * @param item - The message/notification to deliver.
    */
   async #deliver(item: RunQueueItem): Promise<void> {
-    const { log } = console;
+    const log = VERBOSE ? console.log : (_: unknown) => undefined;
+    // eslint-disable-next-line @typescript-eslint/explicit-function-return-type
+    const glimpse = (obj: unknown) => clip(JSON.stringify(obj));
     switch (item.type) {
       case 'send': {
         const route = this.#routeMessage(item);
         if (route) {
           const { vatId, target } = route;
           const { message } = item;
-          log(
-            `@@@@ deliver ${vatId} send ${target}<-${JSON.stringify(message)}`,
-          );
+          log(`@@@@ deliver ${vatId} send ${target}<-${glimpse(message)}`);
           if (vatId) {
             const vat = this.#getVat(vatId);
             if (vat) {
@@ -534,7 +540,7 @@ export class Kernel {
           } else {
             this.#storage.enqueuePromiseMessage(target, message);
           }
-          log(`@@@@ done ${vatId} send ${target}<-${JSON.stringify(message)}`);
+          log(`@@@@ done ${vatId} send ${target}<-${glimpse(message)}`);
         }
         break;
       }

packages/kernel/src/VatHandle.ts

@@ -27,6 +27,8 @@ import type {
   RunQueueItemSend,
 } from './types.ts';
 
+const VERBOSE = false;
+
 type VatConstructorProps = {
   kernel: Kernel;
   vatId: VatId;
@@ -36,6 +38,10 @@ type VatConstructorProps = {
   logger?: Logger | undefined;
 };
 
+// eslint-disable-next-line @typescript-eslint/explicit-function-return-type
+const clip = (content: string, length = 10) =>
+  `${content.substring(0, length)}${content.length > length ? '...' : ''}`;
+
 export class VatHandle {
   /** The ID of the vat this is the VatHandle for */
   readonly vatId: VatId;
@@ -323,12 +329,14 @@ export class VatHandle {
     const kso: VatSyscallObject = this.#translateSyscallVtoK(vso);
     const [op] = kso;
     const { vatId } = this;
-    const { log } = console;
+    const log = VERBOSE ? console.log : (_: unknown) => undefined;
+    // eslint-disable-next-line @typescript-eslint/explicit-function-return-type
+    const glimpse = (obj: unknown) => clip(JSON.stringify(obj));
     switch (op) {
       case 'send': {
         // [KRef, Message];
         const [, target, message] = kso;
-        log(`@@@@ ${vatId} syscall send ${target}<-${JSON.stringify(message)}`);
+        log(`@@@@ ${vatId} syscall send ${target}<-${glimpse(message)}`);
         this.#handleSyscallSend(target, message);
         break;
       }
@@ -342,38 +350,38 @@ export class VatHandle {
       case 'resolve': {
         // [VatOneResolution[]];
         const [, resolutions] = kso;
-        log(`@@@@ ${vatId} syscall resolve ${JSON.stringify(resolutions)}`);
+        log(`@@@@ ${vatId} syscall resolve ${glimpse(resolutions)}`);
         this.#handleSyscallResolve(resolutions as VatOneResolution[]);
         break;
       }
       case 'exit': {
         // [boolean, SwingSetCapData];
         const [, fail, info] = kso;
-        log(`@@@@ ${vatId} syscall exit fail=${fail} ${JSON.stringify(info)}`);
+        log(`@@@@ ${vatId} syscall exit fail=${fail} ${glimpse(info)}`);
         break;
       }
       case 'dropImports': {
         // [KRef[]];
         const [, refs] = kso;
-        log(`@@@@ ${vatId} syscall dropImports ${JSON.stringify(refs)}`);
+        log(`@@@@ ${vatId} syscall dropImports ${glimpse(refs)}`);
         break;
       }
       case 'retireImports': {
         // [KRef[]];
         const [, refs] = kso;
-        log(`@@@@ ${vatId} syscall retireImports ${JSON.stringify(refs)}`);
+        log(`@@@@ ${vatId} syscall retireImports ${glimpse(refs)}`);
         break;
       }
       case 'retireExports': {
         // [KRef[]];
         const [, refs] = kso;
-        log(`@@@@ ${vatId} syscall retireExports ${JSON.stringify(refs)}`);
+        log(`@@@@ ${vatId} syscall retireExports ${glimpse(refs)}`);
         break;
       }
       case 'abandonExports': {
         // [KRef[]];
         const [, refs] = kso;
-        log(`@@@@ ${vatId} syscall abandonExports ${JSON.stringify(refs)}`);
+        log(`@@@@ ${vatId} syscall abandonExports ${glimpse(refs)}`);
         break;
       }
       case 'callNow':

packages/kernel/src/VatSupervisor.ts

@@ -33,6 +33,7 @@ type SupervisorConstructorProps = {
   id: VatId;
   commandStream: DuplexStream<VatCommand, VatCommandReply>;
   makeKVStore: MakeKVStore;
+  makePowers?: () => Promise<Record<string, unknown>>;
   fetchBlob?: FetchBlob;
 };
 
@@ -56,6 +57,9 @@ export class VatSupervisor {
   /** Capability to create the store for this vat. */
   readonly #makeKVStore: MakeKVStore;
 
+  /** An initialization routine for powers bestowed to this vat. */
+  readonly #makePowers: () => Promise<Record<string, unknown>>;
+
   /** Capability to fetch the bundle of code to run in this vat. */
   readonly #fetchBlob: FetchBlob;
 
@@ -69,17 +73,20 @@ export class VatSupervisor {
    * @param params.id - The id of the vat being supervised.
    * @param params.commandStream - Communications channel connected to the kernel.
    * @param params.makeKVStore - Capability to create the store for this vat.
+   * @param params.makePowers - Capability to create powers this vat.
    * @param params.fetchBlob - Function to fetch the user code bundle for this vat.
    */
   constructor({
     id,
     commandStream,
     makeKVStore,
+    makePowers,
     fetchBlob,
   }: SupervisorConstructorProps) {
     this.id = id;
     this.#commandStream = commandStream;
     this.#makeKVStore = makeKVStore;
+    this.#makePowers = makePowers ?? (async () => ({}));
     this.#dispatch = null;
     const defaultFetchBlob: FetchBlob = async (bundleURL: string) =>
       fetch(bundleURL);
@@ -219,7 +226,7 @@ export class VatSupervisor {
       `[vat-${this.id}]`,
     );
     const syscall = makeSupervisorSyscall(this, kvStore);
-    const vatPowers = {}; // XXX should be something more real
+    const vatPowers = await this.#makePowers();
     const liveSlotsOptions = {}; // XXX should be something more real
 
     const gcTools: GCTools = harden({

packages/nodejs/package.json

@@ -23,6 +23,10 @@
     "build:docs": "typedoc",
     "changelog:validate": "../../scripts/validate-changelog.sh @ocap/nodejs",
     "clean": "rimraf --glob './*.tsbuildinfo' ./.eslintcache ./coverage ./dist",
+    "demo:rag": "node ./dist/demo/rag/run.mjs",
+    "demo:rag:ci": "./scripts/demo-rag-ci.sh",
+    "demo:console": "node ./dist/demo/console/run.mjs",
+    "demo:console:ci": "./scripts/demo-console-ci.sh",
     "lint": "yarn lint:eslint && yarn lint:misc --check && yarn constraints && yarn lint:dependencies",
     "lint:dependencies": "depcheck",
     "lint:eslint": "eslint . --cache",
@@ -38,12 +42,25 @@
     "test:watch": "vitest --config vitest.config.ts"
   },
   "dependencies": {
+    "@endo/base64": "^1.0.9",
+    "@endo/eventual-send": "^1.2.6",
+    "@endo/exo": "^1.5.8",
+    "@endo/far": "^1.1.9",
+    "@endo/marshal": "^1.6.2",
+    "@endo/pass-style": "^1.4.7",
+    "@endo/patterns": "^1.4.8",
     "@endo/promise-kit": "^1.1.6",
+    "@endo/stream": "^1.2.6",
+    "@langchain/core": "^0.3.37",
+    "@langchain/ollama": "^0.1.5",
+    "@langchain/textsplitters": "^0.1.0",
     "@ocap/kernel": "workspace:^",
     "@ocap/shims": "workspace:^",
     "@ocap/store": "workspace:^",
     "@ocap/streams": "workspace:^",
     "@ocap/utils": "workspace:^",
+    "langchain": "^0.3.15",
+    "ollama": "^0.5.12",
     "ses": "^1.9.0"
   },
   "devDependencies": {

packages/nodejs/scripts/call-ollama.js

@@ -0,0 +1,101 @@
+import { readFile } from 'fs/promises';
+import ollama from 'ollama';
+
+/**
+ * Streams the response from Ollama to the console.
+ *
+ * @param {*} response - The response from Ollama.
+ */
+async function streamResponse(response) {
+  const thinkEndToken = '</think>';
+  const thinkLabel = 'OLLAMA Thought';
+  const thinkingDots = ['.', '..', '...'];
+  const dotInterval = 400;
+  let thinkingDotsIndex = 0;
+  let thinking = true;
+  let accumulatedContent = '';
+  const thinkingInterval = setInterval(() => {
+    process.stdout.clearLine();
+    process.stdout.write(`OLLAMA Thinking${thinkingDots[thinkingDotsIndex]}\r`);
+    thinkingDotsIndex += 1;
+    thinkingDotsIndex %= thinkingDots.length;
+  }, dotInterval);
+  console.time(thinkLabel);
+  for await (const part of response) {
+    accumulatedContent += part.message.content;
+    if (thinking) {
+      if (accumulatedContent.includes(thinkEndToken)) {
+        process.stdout.clearLine();
+        console.timeEnd(thinkLabel);
+        const tail = accumulatedContent.split(thinkEndToken)[1];
+        process.stdout.write(`OLLAMA Response: ${tail}`);
+        clearInterval(thinkingInterval);
+        thinking = false;
+      }
+    } else {
+      process.stdout.write(part.message.content); // Write each part of the response to the console
+    }
+  }
+}
+
+const getFileContent = async (path) => {
+  const resolvedPath = new URL(path, import.meta.url).pathname;
+  return (await readFile(resolvedPath)).toString();
+};
+
+/**
+ * The main function for the script.
+ *
+ * @param {*} param0 - An arguments bag.
+ * @param { string } param0.model - The model to pull and use.
+ * @param { string } param0.prompt - The prompt to give the model.
+ */
+async function main({ model, prompt }) {
+  if (!prompt) {
+    throw new Error('say something');
+  }
+
+  console.log('OLLAMA', 'pull');
+
+  await ollama.pull({ model });
+
+  console.log('USER:', prompt);
+
+  const response = await ollama.chat({
+    model, // Specify the model you want to use
+    messages: [
+      {
+        role: 'admin',
+        content: [
+          `You are an instance of LLM model ${model}.`,
+          `Respond to user requests ${'respectfully'} and ${'informatively'}.`,
+        ].join(' '),
+      },
+      {
+        role: 'admin',
+        content: [
+          'The following is the raw content of the wikipedia page titled "ambient authority".',
+          await getFileContent('./ambient-authority.txt'),
+        ].join('\n\n'),
+      },
+      {
+        role: 'admin',
+        content: [
+          'The following is the raw content of the wikipedia page titled "confused deputy problem".',
+          await getFileContent('./confused-deputy-problem.txt'),
+        ].join('\n\n'),
+      },
+      { role: 'user', content: prompt },
+    ], // The message to send
+    stream: true, // Enable streaming
+  });
+
+  await streamResponse(response).catch(console.error);
+  console.log('\n'); // Add a newline after the streaming response
+}
+
+const model = 'deepseek-r1:1.5b';
+
+const [, , prompt] = process.argv;
+
+main({ model, prompt }).catch(console.error);

packages/nodejs/scripts/demo-console-ci.sh

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+
+set -x
+set -e
+set -o pipefail
+
+# We borrow the vat definition from extension for now
+yarn ocap bundle "src/demo/console/vats"
+
+# Start the server in background and capture its PID
+yarn ocap serve "src/demo/console/vats" & 
+SERVER_PID=$!
+
+function cleanup() {
+  # Kill the server if it's still running
+  if kill -0 $SERVER_PID 2>/dev/null; then
+    kill $SERVER_PID
+  fi
+}
+# Ensure we always close the server
+trap cleanup EXIT
+
+yarn demo:console

packages/nodejs/scripts/demo-rag-ci.sh

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+
+set -x
+set -e
+set -o pipefail
+
+# We borrow the vat definition from extension for now
+yarn ocap bundle "src/demo/rag/vats"
+
+# Start the server in background and capture its PID
+yarn ocap serve "src/demo/rag/vats" & 
+SERVER_PID=$!
+
+function cleanup() {
+  # Kill the server if it's still running
+  if kill -0 $SERVER_PID 2>/dev/null; then
+    kill $SERVER_PID
+  fi
+}
+# Ensure we always close the server
+trap cleanup EXIT
+
+yarn demo:rag