docs(all): expand security guides and add llm prompt

- Add llm-prompt.md safety guard for AI command execution
- Expand security.md with native process hardening and defense-in-depth stack
- Harden examples.md AI Agent Integration with specific allowlist
- Streamline interpreter-usage.md with clearer safe execution patterns
- Update configuration.md with new spawn options documentation
- Update README.md with privilege dropping and Windows hardening features

Author: NeaByteLab

README.md

@@ -22,6 +22,9 @@ Secure command sandbox preventing AI destructive code deletions
 - **Timeout Protection** - Automatic process termination after configurable timeout
 - **Argument Validation** - Limit arguments and block dangerous characters
 - **Real-Time Streaming** - Stream stdout/stderr with callback support
+- **Privilege Dropping** - Run child processes as different user/group via `uid`/`gid`
+- **Native AbortSignal** - Node.js built-in abort for reliable process termination
+- **Windows Hardening** - Hide console windows and disable argument quoting
 
 ## Installation
 
@@ -63,7 +66,10 @@ Terminal.initialize({
     deny: ['rm *', 'sudo *'],
     maxArgs: 10,
     strictArgs: true,
-    noShell: true
+    noShell: true,
+    killSignal: 'SIGTERM',
+    windowsHide: false,
+    windowsVerbatimArguments: false
   },
   env: {
     allow: ['NODE_ENV', 'PATH'],
@@ -97,7 +103,50 @@ Terminal.initialize({
     deny: ['rm -rf *', 'sudo *'], // Blocked patterns
     maxArgs: 10, // Limit argument count
     strictArgs: true, // Block shell metacharacters
-    noShell: true // Direct execution, no shell
+    noShell: true, // Direct execution, no shell
+    killSignal: 'SIGTERM', // Signal sent on timeout/abort
+    windowsHide: false, // Hide console window on Windows
+    windowsVerbatimArguments: false // Disable Windows arg quoting
+  }
+})
+```
+
+### Privilege Dropping
+
+Run child processes as a different user or group via `setuid`/`setgid`:
+
+```typescript
+Terminal.initialize({
+  workspaces: ['/safe/project'],
+  commands: {
+    allow: ['git *', 'npm *'],
+    deny: ['rm *', 'sudo *'],
+    maxArgs: 10,
+    strictArgs: true,
+    noShell: true
+  },
+  uid: 1000, // Run as user ID 1000
+  gid: 1000 // Run as group ID 1000
+})
+```
+
+> **Note**: `uid`/`gid` require the parent process to have permission to change to the target identity. Combine with OS-level unprivileged users for real isolation.
+
+### Windows Hardening
+
+Prevent console window pop-ups and argument injection on Windows:
+
+```typescript
+Terminal.initialize({
+  workspaces: ['C:\\workspace'],
+  commands: {
+    allow: ['echo *', 'dir *'],
+    deny: ['del *', 'format *'],
+    maxArgs: 5,
+    strictArgs: true,
+    noShell: true,
+    windowsHide: true, // Hide console window
+    windowsVerbatimArguments: true // Pass arguments verbatim
   }
 })
 ```
@@ -141,7 +190,7 @@ Terminal.stream(
   data => console.error('stderr:', data)
 )
 
-// Kill process (SIGTERM, then SIGKILL after 2s)
+// Kill process (native AbortSignal, then SIGKILL after 2s)
 Terminal.kill(processId)
 ```
 
@@ -180,6 +229,9 @@ See [full documentation](docs/README.md) for advanced configuration including:
 - Environment variable filtering
 - Process timeout policies
 - Workspace path validation
+- Privilege dropping with `uid`/`gid`
+- Windows hardening options
+- Native `AbortSignal` process termination
 
 ## Contributing
 

docs/README.md

@@ -10,10 +10,11 @@ Secure command execution with Access Control Lists for AI protection.
 2. [Configuration](./configuration.md) - All config options explained
 3. [Patterns Cheatsheet](./patterns-cheatsheet.md) - Quick reference for command patterns
 4. [Security](./security.md) - ACL, threat model, best practices
-5. [Examples](./examples.md) - Real-world integration examples
-6. [Interpreter Usage](./interpreter-usage.md) - Running Deno, Python, Node.js safely
-7. [API Reference](./api-reference.md) - Complete method documentation
-8. [Common Errors](./common-errors.md) - Troubleshooting guide
+5. [LLM Prompt](./llm-prompt.md) - Safety guard for AI agents executing commands
+6. [Examples](./examples.md) - Real-world integration examples
+7. [Interpreter Usage](./interpreter-usage.md) - Running Deno, Python, Node.js safely
+8. [API Reference](./api-reference.md) - Complete method documentation
+9. [Common Errors](./common-errors.md) - Troubleshooting guide
 
 ## Quick Links
 

docs/configuration.md

@@ -1,24 +1,31 @@
 # Configuration
 
-Terminal uses a configuration object to define security policies. All settings are optional and merge with sensible defaults.
+Terminal uses a configuration object to define command filtering policies. All settings are optional and merge with sensible defaults.
+
+> **Important**: Terminal is a **command string filter**, not a sandbox. It validates the command and arguments before spawning. Once a command is allowed, the OS controls what it can access. See [Security](./security.md) for OS-level hardening.
 
 ## Basic Configuration
 
 ```typescript
 Terminal.initialize({
   workspaces: ['/safe/project'],
   commands: {
-    allow: ['cd *', 'node *', 'deno *'],
+    allow: ['cd *', 'git *', 'npm *'],
     deny: ['rm *', 'sudo *'],
     maxArgs: 10,
     strictArgs: true,
-    noShell: true
+    noShell: true,
+    killSignal: 'SIGTERM',
+    windowsHide: false,
+    windowsVerbatimArguments: false
   },
   env: {
     allow: ['NODE_ENV', 'PATH'],
-    deny: ['HOME', 'SSH_*']
+    deny: ['HOME', 'SSH_*', 'LD_PRELOAD', 'LD_LIBRARY_PATH']
   },
-  timeout: 30000
+  timeout: 30000,
+  uid: undefined,
+  gid: undefined
 })
 ```
 
@@ -30,7 +37,7 @@ Restrict command execution to specific directories:
 workspaces: ['/home/user/projects', '/tmp/builds']
 ```
 
-Commands outside these paths will be rejected.
+Commands outside these paths will be rejected. **Note**: This only validates `cwd`. The spawned process can still access any path the OS allows.
 
 ## Commands
 
@@ -39,9 +46,11 @@ Commands outside these paths will be rejected.
 Pattern-based allowlist. Empty array allows all (unless denied).
 
 ```typescript
-allow: ['git *', 'npm *', 'node *.js', 'deno run *']
+allow: ['git *', 'npm *', 'echo *']
 ```
 
+> **Warning**: `allow: ['node *']` or `allow: ['python3 *']` effectively allows arbitrary code execution via script files. Terminal does not inspect file contents.
+
 ### deny - Command Blacklist
 
 Pattern-based denylist. Always checked first.
@@ -60,10 +69,10 @@ maxArgs: 10 // Rejects commands with more than 10 arguments
 
 ### strictArgs - Strict Validation
 
-Block shell metacharacters in arguments:
+Block shell metacharacters and path traversal in arguments:
 
 ```typescript
-strictArgs: true // Blocks ; | & ` $ ( ) { } [ ] < >
+strictArgs: true // Blocks ; | & ` $ ( ) { } [ ] < > and ../
 ```
 
 ### noShell - Shell Control
@@ -72,20 +81,46 @@ strictArgs: true // Blocks ; | & ` $ ( ) { } [ ] < >
 noShell: true // Always use direct execution (recommended)
 ```
 
+### killSignal - Default Kill Signal
+
+Signal sent when a process is aborted or times out. Defaults to `SIGTERM`.
+
+```typescript
+killSignal: 'SIGKILL' // Use SIGKILL instead of SIGTERM
+```
+
+Valid signals: `SIGTERM`, `SIGKILL`, `SIGINT`, `SIGHUP`, and all POSIX signal names.
+
+### windowsHide - Hide Console Window
+
+Hides the subprocess console window on Windows. Prevents UI hijacking.
+
+```typescript
+windowsHide: true // Hide console window on Windows
+```
+
+### windowsVerbatimArguments - Disable Argument Quoting
+
+Disables Node.js quoting and escaping of arguments on Windows. Prevents command-line injection via Windows shell parsing.
+
+```typescript
+windowsVerbatimArguments: true // Pass arguments verbatim on Windows
+```
+
 ## Environment Variables
 
 ### allow - Variable Whitelist
 
 ```typescript
-allow: ['NODE_ENV', 'PATH', 'HOME']
+allow: ['NODE_ENV', 'PATH']
 ```
 
 ### deny - Variable Blacklist
 
-Supports wildcards:
+Supports wildcards. Always deny `LD_PRELOAD` and `LD_LIBRARY_PATH`:
 
 ```typescript
-deny: ['SSH_*', 'AWS_*', 'TOKEN*']
+deny: ['SSH_*', 'AWS_*', 'TOKEN*', 'LD_PRELOAD', 'LD_LIBRARY_PATH']
 ```
 
 ## Timeout
@@ -98,6 +133,17 @@ timeout: 30000 // 30 seconds
 
 Set to `0` to disable timeouts.
 
+## Privilege Dropping
+
+Run spawned processes as a different user or group via `setuid`/`setgid`. Requires the parent process to have sufficient privileges.
+
+```typescript
+uid: 1000  // Run as user ID 1000
+gid: 1000  // Run as group ID 1000
+```
+
+> **Note**: `uid`/`gid` are applied at the OS level via Node.js `spawn()`. The parent process must have permission to change to the target user/group. This is a defense-in-depth layer — combine with OS-level unprivileged users for real isolation.
+
 ## Pattern Syntax
 
 Patterns use token matching with optional wildcards:
@@ -108,5 +154,5 @@ Patterns use token matching with optional wildcards:
 
 ## See Also
 
-- [Security](./security.md) - Deep dive into security concepts
+- [Security](./security.md) - OS-level hardening guide
 - [API Reference](./api-reference.md) - Programmatic config updates