@antomanc/aginit 0.1.0 → 0.3.0

package/CHANGELOG.md

@@ -0,0 +1,55 @@
+# Changelog
+
+## 0.3.0 — 2026-10-10
+
+### Fixed
+
+- Web projects no longer ship an agent-browser skill stub without its runtime: `aginit init` now installs the `agent-browser` CLI (`npm i -g agent-browser`) and its browser binaries (`agent-browser install`) when the skill is configured or already on disk, and reports a failed provisioning as an incomplete setup (#4).
+- `aginit init` and `aginit doctor` detect the Linux restriction that blocks Chrome's sandbox (`kernel.apparmor_restrict_unprivileged_userns=1`) and report the persisted sysctl fix plus the narrower `--no-sandbox` alternative instead of failing later with `No usable sandbox!`.
+
+### Added
+
+- The [ponytail](https://github.com/DietrichGebert/ponytail) skill installs by default in every preset, and AGENTS.md points agents to it for the smallest complete change (#5). Existing configs keep their skill sources as written; add `dietrichgebert/ponytail` to `skills.sources` to opt in.
+- `aginit doctor` verifies the agent-browser runtime when the project ships the skill: CLI presence, upstream `agent-browser doctor --quick --offline --json` findings, and Chrome sandbox prerequisites.
+
+## 0.2.0 — 2026-10-09
+
+### Breaking
+
+- Removed `--spec-workflow` from `aginit new` and `aginit init`, and removed the
+  wizard's "Select AI engineering workflow" prompt. The spec and tickets skills
+  are part of the standard set now, so the selector no longer had anything to
+  select.
+- `skills.workflow` is no longer written to `aginit.config.json`. Existing
+  configs that still carry it keep loading unchanged.
+
+### Changed
+
+- All 27 stable Matt Pocock skills install by default instead of the
+  `tdd` / `code-review` / `diagnosing-bugs` trio: the `engineering` and
+  `productivity` categories. The `misc` and `in-progress` categories stay out.
+- Saved configs holding an old default skill selection are upgraded on
+  `aginit init`. A skill list narrowed by hand is preserved as written.
+- AGENTS.md now lists the full standard skill set and the spec workflow.
+- Dependency updates: TypeScript 7, Vitest 5, Commander 15, tsx 4.23,
+  pnpm 12.10. `@types/node` stays on the 22.x line so the types match the
+  `engines.node >= 22.12.0` support floor.
+- Descriptions no longer mention T3 Code.
+
+### Fixed
+
+- Generated AGENTS.md separates its sections with blank lines again; only
+  inapplicable lines are dropped.
+- AGENTS.md no longer claims skills are disabled when a source installs every
+  skill it ships.
+- `aginit init` in the current directory no longer prints `cd .`.
+- `aginit doctor` no longer warns about missing skills when installation is
+  disabled in the configuration, and reports skills installed by hand even when
+  the lockfile records none.
+- `aginit --version` and the smoke test read the version from `package.json`.
+
+### Added
+
+- `pnpm typecheck` now type-checks `tests/` through `tsconfig.test.json`.
+- `pnpm check:skills` and a weekly `Skill drift` CI job that fails when a
+  standard skill disappears upstream or a new stable skill is published.

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 Antonio Mancuso
+Copyright (c) 2026 Antonio Mancini
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -1,245 +1,147 @@
-# Aginit
+# aginit
 
-> **Public Beta (v0.1.0)** — Minimal, modular AI-first project bootstrapper for T3 Code, Antigravity, and Codex.
+**Set up a new or existing project for AI coding agents with one command.**
 
-[![CI](https://github.com/antomanc/aginit/actions/workflows/ci.yml/badge.svg)](https://github.com/antomanc/aginit/actions)
-[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
-[![npm version](https://img.shields.io/npm/v/@antomanc/aginit)](https://www.npmjs.com/package/@antomanc/aginit)
-
----
-
-## Philosophy
-
-> **“We orchestrate the tools. We don’t replace them.”**
-
-Aginit initializes software projects ready for AI-assisted development in seconds. Instead of reinventing custom agent frameworks or vendoring brittle skills, Aginit ties together best-in-class upstream capabilities into a coherent, idempotent developer workflow.
-
-- **Zero vendoring**: Skills and codebase graphs are fetched and configured directly from upstream maintainers via standard package ecosystems (`skills.sh`, `graft`).
-- **Dual-agent parity**: Antigravity and Codex share the exact same `.agents/skills` and `AGENTS.md` conventions without conflicting configurations.
-- **Conservative & idempotent**: Never overwrites existing code destructively; respects your choice of framework, toolchain, and package manager.
-
----
-
-## What Aginit Configures
-
-Every project bootstrapped with Aginit receives:
-
-1. **Upstream Skills Engine (`skills.sh`)**:
-   - Universal engineering trio: `tdd`, `code-review`, `diagnosing-bugs` (by Matt Pocock).
-   - *Optional* spec workflow: `to-spec`, `to-tickets`, `implement-spec` (`--spec-workflow`).
-   - Frontend craft & UI polish: `impeccable` (by Peter Bak-Hansen) for web presets.
-   - Interactive visual inspection: `agent-browser` (by Vercel Labs) for web presets.
-2. **Codebase Understanding (`graft`)**:
-   - Deterministic structural code graph and fast token-efficient semantic map (`graft map`, `graft ask`).
-3. **Agent Invariants (`AGENTS.md`)**:
-   - A short, non-invasive intake contract and invariant guide that agents parse immediately upon opening the repository in T3 Code.
-4. **Deterministic Testing Harness**:
-   - Vitest for instant unit testing.
-   - Playwright for browser testing when a web framework is selected. Its starter test is explicitly skipped until you supply an application URL and real assertions.
-5. **Declarative State (`aginit.config.json`)**:
-   - Versioned project manifest (`schemaVersion: "1.0.0"`) tracking active agents, skills, preset, and package manager.
-
----
-
-## Quickstart
-
-### Prerequisites
-
-- Node.js **22.12 or newer** (use a supported Node LTS release).
-- Git and npm/npx in `PATH`; install your selected package manager before using it.
-- Internet access for official framework scaffolders and upstream skills.
-- Optional Graft CLI: `npm install -g @nanonets/graft`. Use `--no-graft` to omit it.
-
-### Interactive Wizard (Recommended)
-
-Simply run `aginit` or `npx @antomanc/aginit` with no arguments in your terminal to launch the interactive prompt:
+aginit gives a repo what agents need to do good work from the first session: an `AGENTS.md`
+that explains the project, a curated set of engineering skills, a codebase graph so agents
+read less and understand more, and a test harness they can actually run. It wires up
+upstream tools instead of reimplementing them.
 
 ```bash
-# Run directly without installation
 npx @antomanc/aginit
-
-# Or with pnpm dlx
-pnpm dlx @antomanc/aginit
-
-# Or install globally
-npm install -g @antomanc/aginit
-aginit
 ```
 
-The wizard prompts only for meaningful choices:
-1. Action: *Create brand new project* vs *Initialize in current directory*
-2. Project name (when creating a new project)
-3. Preset (`web` | `cli` | `generic`)
-4. Framework (for `web`: `none` | `vite` | `next` | `existing`)
-5. Workflow (`minimal` | `spec`)
-6. Package Manager (`pnpm (Recommended)` | `npm` | `yarn` | `bun`) — *auto-detected and preserved when initializing existing projects*
-
-### Non-Interactive / Scriptable CLI
-
-All commands accept explicit flags for automated environments and CI:
-
-```bash
-# Create a new web project directly with pnpm
-aginit new my-web-app --preset web --framework vite --package-manager pnpm
-
-# Or with npm, yarn, or bun
-aginit new my-app --preset web --package-manager bun
-
-# Or via npx
-npx @antomanc/aginit new my-web-app --preset web
-```
+[![CI](https://github.com/antomanc/aginit/actions/workflows/ci.yml/badge.svg)](https://github.com/antomanc/aginit/actions)
+[![npm version](https://img.shields.io/npm/v/@antomanc/aginit)](https://www.npmjs.com/package/@antomanc/aginit)
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 
-Then open the project in **T3 Code**, and tell Antigravity:
-> *"bootstrap this project"*
+> **Beta.** Expect flags and defaults to change before 1.0.
 
----
+## Why
 
-## Package Managers
+Agents in a fresh repo usually start out blind:
+- no instructions, so they guess at the build, test and package manager commands
+- no shared workflow for specs, TDD, code review or bug hunting
+- grep-and-read-everything to find their way around the code
+- no test runner, so "it works" is never checked
+- a different setup in every repo, done by hand
 
-Aginit provides centralized package manager orchestration:
-- **Supported Managers**: `pnpm` (recommended/default), `npm`, `yarn` (Classic or modern), `bun`.
-- **New Projects**: Prompted as the final wizard step, or configured via `--package-manager <pm>`. Stored in `aginit.config.json`.
-- **Existing Projects**: Automatically detects existing lockfiles (`pnpm-lock.yaml`, `bun.lockb`, `yarn.lock`, `package-lock.json`) and preserves your manager without prompting.
-- **Official Scaffolding**: Passes the selected package manager to upstream toolchains (e.g. `--use-pnpm`, `--use-npm`, `--use-yarn`, `--use-bun` for Next.js, and package manager specific create commands for Vite).
-- **Clean Toolchains**: `pnpm-workspace.yaml` and pnpm-specific lifecycle configs are only generated when `pnpm` is the active manager.
+aginit sets all of this up the same way every time, and you can re-run it whenever you want.
 
----
+## What you get
 
-## Presets & Frameworks
+| | |
+|---|---|
+| **Instructions** | `AGENTS.md` with the project's real commands, invariants and a first-session playbook, shared by Antigravity, Codex and any agent that reads `AGENTS.md` |
+| **Skills** | All 27 stable [Matt Pocock skills](https://github.com/mattpocock/skills) (`tdd`, `code-review`, `diagnosing-bugs`, `to-spec`, `to-tickets`, `implement-spec`, `pr`...) plus [humanizer](https://github.com/blader/humanizer) and [ponytail](https://github.com/DietrichGebert/ponytail), installed in `.agents/skills/` via the [Skills CLI](https://github.com/vercel-labs/skills) |
+| **Codebase graph** | [Graft](https://www.npmjs.com/package/@nanonets/graft): `graft map` and `graft ask` give agents the relevant code spans before they grep |
+| **Test tooling** | Vitest for TypeScript projects, plus Playwright when a web framework is selected |
+| **Web extras** | [Impeccable](https://github.com/pbakaus/impeccable) for UI design and [agent-browser](https://github.com/vercel-labs/agent-browser) for visual QA, with its CLI and browser binaries installed so it works out of the box |
+| **Scaffolding** | Official Vite and Next.js scaffolders, or a Commander-based TypeScript CLI |
+| **Maintenance** | `aginit doctor` checks readiness; `aginit update` refreshes skills and the graph |
 
-### 1. `web` Preset
+## Quick start
 
-Framework-agnostic by default:
+Requires Node.js 22.12+, Git and internet access.
 
 ```bash
-# Agnostic baseline: clean TypeScript + Vitest, zero bundler lock-in
-aginit new my-app --preset web --framework none
-
-# Official Vite scaffolding
-aginit new my-vite-app --preset web --framework vite
-
-# Official Next.js scaffolding
-aginit new my-next-app --preset web --framework next
+npx @antomanc/aginit          # interactive wizard
+pnpm dlx @antomanc/aginit     # same, with pnpm
+npm install -g @antomanc/aginit   # or install globally and run `aginit`
 ```
 
-*Note: With `--framework none`, Aginit does not generate dummy or failing E2E configs until an actual web target is introduced.*
+The wizard creates a new project or initializes the current directory, then asks for a
+preset, framework and package manager. Existing projects keep the package manager they
+already use.
 
-### 2. `cli` Preset
+Graft is installed separately (or skip it with `--no-graft`):
 
 ```bash
-aginit new my-cli --preset cli
+npm install -g @nanonets/graft
 ```
-Configures an executable Node.js/TypeScript CLI with Commander, Picocolors, and Vitest.
 
-### 3. `generic` Preset
+## Commands
 
-```bash
-aginit new my-repo --preset generic
 ```
-Minimal AI readiness for any codebase: Git, `.agents/skills`, Graft context graph, and `AGENTS.md`.
-
----
-
-## Adding Aginit to an Existing Project
-
-Run `aginit init` inside an existing repository:
-
-```bash
-cd my-existing-project
-aginit init --preset web
+aginit new [name]   Create a new project
+aginit init         Add or update agent setup in the current directory
+aginit doctor       Check Node.js, package manager, Git, Graft, Codex, Skills CLI, agent-browser and config
+aginit update       Update installed skills and rebuild the Graft index
 ```
 
-Aginit preserves application source, custom scripts, dependency versions, and existing test configurations. The web and CLI presets add missing test tooling to `package.json`; custom test runners get a separate `test:unit` script. The generic preset leaves an existing project manifest untouched.
-
-Repeat `aginit init` preserves the saved preset, framework, agents, workflow, skill sources, and extension fields. Explicit options override the requested setting. Invalid JSON or configuration is reported before initialization changes files. `--no-skills` skips installation without erasing an existing configuration's sources.
-
----
-
-## Diagnostics (`aginit doctor`)
-
-Run the health check at any time to inspect system tooling and repository agent readiness (it may download the upstream Skills CLI through npx):
+Useful flags: `--preset web|cli|generic`, `--framework none|vite|next|existing`,
+`--package-manager pnpm|npm|yarn|bun`, `--dry-run`, `--no-skills`, `--no-graft`, `--no-git`.
 
 ```bash
-aginit doctor
+aginit new my-app --preset web --framework vite
+aginit new my-app --preset web --framework next --package-manager npm
+aginit new my-cli --preset cli
+aginit init --preset generic --dry-run
 ```
 
-Checks:
-- Node.js runtime and active project package manager (`pnpm`, `npm`, `yarn`, or `bun`)
-- Git repository state
-- Global Graft CLI availability
-- Codex CLI availability (secondary reviewer)
-- Skills CLI engine functionality
-- `aginit.config.json` schema validation and package manager setting
-- `AGENTS.md` context and intake section
-- Installed `.agents/skills/` health
-
----
+## Presets
 
-## Updating Upstream Capabilities (`aginit update`)
+| Preset | Setup |
+| --- | --- |
+| `web` | TypeScript and Vitest, with optional Vite or Next.js scaffolding. Playwright is added when a web framework is selected. |
+| `cli` | Node.js/TypeScript CLI with Commander, Picocolors and Vitest. |
+| `generic` | Git, `AGENTS.md`, skills and Graft. Leaves an existing `package.json` untouched. |
 
-Keep your project's skills and codebase graph up to date:
+The web preset's `--framework none` (default) creates a TypeScript baseline without a bundler
+or browser tests. `existing` keeps the framework you already have.
 
-```bash
-aginit update
-```
-
-This runs the upstream project-scoped `skills update` and refreshes the Graft graph index. Disabled integrations are skipped; failed updates return a nonzero exit status.
-
----
+Your choices (preset, framework, package manager, agents, skill sources) are saved in
+`aginit.config.json`, so the next run starts from them. The package manager is also passed
+to framework scaffolders.
 
-## Safety & Dry Run
+## Existing projects
 
-Preview changes without touching the disk:
+`aginit init` never replaces application code. It keeps your source, custom scripts,
+dependency versions and test configs, and only adds what's missing. If you already use a
+different test runner, aginit adds a separate `test:unit` script instead of touching yours.
 
-```bash
-aginit new test-project --preset web --dry-run
-aginit init --dry-run
-```
+An existing `AGENTS.md` is preserved; aginit only appends its bootstrap section. Configs from
+older versions that used the retired default skill selection are upgraded to the current
+set, while a skill list you narrowed by hand stays as written.
 
-Existing application files are preserved. Manifest additions and explicit configuration changes are intentional; rerunning the same initialization is idempotent. Framework scaffold failures stop the command instead of generating a substitute app.
+## Design
 
-Missing Graft or failed skill installation produces an actionable warning and a nonzero exit status. The scaffold is retained so you can resolve the prerequisite and rerun `aginit init`.
+- **Orchestrates, doesn't vendor.** Skills, Graft, Vite, Next.js and Playwright come from
+  their upstream tools. aginit picks good defaults and runs them.
+- **Idempotent.** Re-running the same init is safe; explicit options override saved settings.
+- **Honest dry-run.** `--dry-run` lists every planned operation without writing files or
+  downloading tools. (Files produced by upstream scaffolders are only known after they run.)
+- **Fails loudly.** Invalid config is reported before any file changes. A failed scaffold
+  stops the command; missing Graft, a failed skill install or a failed agent-browser setup
+  exits nonzero and keeps the scaffold, so you can fix it and re-run `aginit init`.
+- **Hands off your system.** If the Linux kernel blocks Chrome's sandbox (`No usable
+  sandbox!`), aginit tells you the sysctl fix and the narrower `--no-sandbox` option. It
+  never changes system settings for you.
 
-`--dry-run` prints planned operations without creating files or downloading framework tools. Upstream-generated files cannot be enumerated until the real scaffolder runs.
+## Related
 
----
+[agbox](https://github.com/antomanc/agbox) prepares the *machine* for AI agents (toolchains,
+Docker, Playwright, Tailscale, snapshots). aginit prepares the *project*. Use them together:
+`agbox setup`, then `npx @antomanc/aginit` in a new project.
 
-## Development & Release Verification
+## Development
 
 ```bash
 pnpm install --frozen-lockfile
-pnpm check                 # typecheck, tests, build, dependency audit
-pnpm smoke                 # install the tarball and verify generated consumer projects
-pnpm smoke --frameworks    # additionally scaffold, test, build, and serve Vite and Next.js
-pnpm smoke --package-managers # verify native pnpm, Yarn, and Bun consumer commands
-npm pack --dry-run
+pnpm check                    # typecheck (src + tests), tests, build, dependency audit
+pnpm check:skills             # compare the standard skill set with upstream (after pnpm build)
+pnpm smoke                    # verify projects generated from the packed tarball
+pnpm smoke --frameworks       # also scaffold, test, build and serve Vite and Next.js
+pnpm smoke --package-managers # verify pnpm, Yarn and Bun consumer commands
 ```
 
-The framework smoke test downloads upstream tools and dependencies. The generated generic project has a working Vitest starter harness; application-specific assertions remain yours to write. `npm publish` runs the checks and base consumer smoke test before publication.
-
----
-
-## Upstream Licenses Notice
-
-Aginit integrates and configures independent open-source software and skills:
-- **Graft**: Copyright © NanoNets / Graft contributors
-- **skills.sh**: Copyright © Vercel Inc. and contributors
-- **Matt Pocock Skills**: Copyright © Matt Pocock
-- **Impeccable**: Copyright © Peter Bak-Hansen
-- **agent-browser**: Copyright © Vercel Labs
-- **Playwright**: Copyright © Microsoft Corporation
-
-Each upstream tool is governed by its own independent license. Aginit does not vendor, alter, or relicense upstream software. For details, see [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md).
-
----
-
-## Contributing & Security
-
-- **Contributing**: Please read [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines on development and submitting pull requests.
-- **Security**: See [SECURITY.md](SECURITY.md) for our vulnerability reporting policy.
-
----
+`npm publish` runs `pnpm check` and the base smoke test first. See
+[CHANGELOG.md](CHANGELOG.md), [CONTRIBUTING.md](CONTRIBUTING.md) and
+[SECURITY.md](SECURITY.md).
 
 ## License
 
-[MIT](LICENSE) © 2026 Antonio Mancuso
+[MIT](LICENSE) © 2026 Antonio Mancini
+
+Upstream tools and skills keep their own licenses; aginit does not vendor or relicense them.
+See [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md).

package/THIRD_PARTY_NOTICES.md

@@ -19,6 +19,17 @@ Each integrated upstream tool is governed by its respective authors and licenses
   - Author: Matt Pocock
   - Repository: https://github.com/mattpocock/skills
 
+- **Humanizer**
+  - Project: Agent skill that removes signs of AI-generated writing from text
+  - Author: Blake Robbins / Humanizer contributors
+  - Repository: https://github.com/blader/humanizer
+
+- **Ponytail**
+  - Project: Agent skill for the smallest complete change and less over-engineering
+  - Author: Dietrich Gebert
+  - License: MIT
+  - Repository: https://github.com/DietrichGebert/ponytail
+
 - **Impeccable**
   - Project: Frontend craft & design system review skill
   - Author: Peter Bak-Hansen

package/dist/adapters/agent-browser.d.ts

@@ -0,0 +1,54 @@
+import { SkillSourceConfig } from '../config/schema.js';
+/**
+ * Whether a configured skill source will install the agent-browser skill stub
+ * whose instructions assume the `agent-browser` CLI exists.
+ */
+export declare function agentBrowserConfigured(sources: SkillSourceConfig[]): boolean;
+/** Whether the agent-browser skill stub is already on disk. */
+export declare function agentBrowserStubInstalled(targetDir: string): boolean;
+export interface UsernsRestriction {
+    sysctl: string;
+    value: string;
+    fixValue: string;
+}
+/**
+ * Detect the Linux sysctls that block Chrome's sandbox when set to their
+ * restrictive value: Chrome's renderer sandbox runs on unprivileged user
+ * namespaces, so agent-browser launches die with "No usable sandbox!".
+ *
+ * Returns null when the kernel does not expose the knobs (other distros,
+ * macOS, Windows) or none of them is restrictive.
+ */
+export declare function findUsernsRestriction(procRoot?: string): UsernsRestriction | null;
+export interface AgentBrowserSetupOptions {
+    dryRun?: boolean;
+    silent?: boolean;
+    /** Working directory for the provisioning commands (defaults to cwd). */
+    cwd?: string;
+    /** Root of the proc filesystem; overridable for tests. */
+    procRoot?: string;
+}
+/**
+ * Provision the runtime the agent-browser skill stub depends on: the globally
+ * installed CLI (`npm i -g agent-browser`, matching the skill's own install
+ * line — npm ships with Node and works regardless of the project's package
+ * manager) and its browser binaries (`agent-browser install`, idempotent).
+ *
+ * A blocked Chrome sandbox is reported as a warning only: it needs a system
+ * change aginit must not make on the user's behalf. Returns false when the
+ * CLI or the browser binaries could not be provisioned.
+ */
+export declare function setupAgentBrowser(options?: AgentBrowserSetupOptions): Promise<boolean>;
+export interface AgentBrowserDiagnostic {
+    message: string;
+    fix?: string;
+}
+/**
+ * Run upstream's own diagnostics (`agent-browser doctor --quick --offline
+ * --json`) and return the failing checks, so aginit reports browser health
+ * instead of reimplementing it. Returns null when the report cannot be
+ * parsed (older CLI, unexpected output) — callers should then skip the check
+ * rather than guess.
+ */
+export declare function runAgentBrowserDiagnostics(): Promise<AgentBrowserDiagnostic[] | null>;
+//# sourceMappingURL=agent-browser.d.ts.map

package/dist/adapters/agent-browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-browser.d.ts","sourceRoot":"","sources":["../../src/adapters/agent-browser.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAMxD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAO5E;AAED,+DAA+D;AAC/D,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAEpE;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,SAAU,GAAG,iBAAiB,GAAG,IAAI,CAYlF;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,GAAE,wBAA6B,GAAG,OAAO,CAAC,OAAO,CAAC,CAiDhG;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;;;GAMG;AACH,wBAAsB,0BAA0B,IAAI,OAAO,CAAC,sBAAsB,EAAE,GAAG,IAAI,CAAC,CAuB3F"}

package/dist/adapters/agent-browser.js

@@ -0,0 +1,122 @@
+import path from 'node:path';
+import { fileExists, readTextFile } from '../utils/fs.js';
+import { commandExists, runExecutable } from '../utils/shell.js';
+import { logger } from '../utils/logger.js';
+const AGENT_BROWSER_SKILL = 'agent-browser';
+const AGENT_BROWSER_CLI = 'agent-browser';
+const AGENT_BROWSER_PACKAGE = 'vercel-labs/agent-browser';
+/**
+ * Whether a configured skill source will install the agent-browser skill stub
+ * whose instructions assume the `agent-browser` CLI exists.
+ */
+export function agentBrowserConfigured(sources) {
+    return sources.some((source) => source.skills.includes(AGENT_BROWSER_SKILL) ||
+        (source.package === AGENT_BROWSER_PACKAGE &&
+            (source.skills.length === 0 || source.skills.includes('*'))));
+}
+/** Whether the agent-browser skill stub is already on disk. */
+export function agentBrowserStubInstalled(targetDir) {
+    return fileExists(path.join(targetDir, '.agents', 'skills', AGENT_BROWSER_SKILL, 'SKILL.md'));
+}
+/**
+ * Detect the Linux sysctls that block Chrome's sandbox when set to their
+ * restrictive value: Chrome's renderer sandbox runs on unprivileged user
+ * namespaces, so agent-browser launches die with "No usable sandbox!".
+ *
+ * Returns null when the kernel does not expose the knobs (other distros,
+ * macOS, Windows) or none of them is restrictive.
+ */
+export function findUsernsRestriction(procRoot = '/proc') {
+    const knobs = [
+        ['kernel.apparmor_restrict_unprivileged_userns', '1', '0'],
+        ['kernel.unprivileged_userns_clone', '0', '1']
+    ];
+    for (const [sysctl, blockingValue, fixValue] of knobs) {
+        const raw = readTextFile(path.join(procRoot, 'sys', ...sysctl.split('.')));
+        if (raw !== null && raw.trim() === blockingValue) {
+            return { sysctl, value: raw.trim(), fixValue };
+        }
+    }
+    return null;
+}
+/**
+ * Provision the runtime the agent-browser skill stub depends on: the globally
+ * installed CLI (`npm i -g agent-browser`, matching the skill's own install
+ * line — npm ships with Node and works regardless of the project's package
+ * manager) and its browser binaries (`agent-browser install`, idempotent).
+ *
+ * A blocked Chrome sandbox is reported as a warning only: it needs a system
+ * change aginit must not make on the user's behalf. Returns false when the
+ * CLI or the browser binaries could not be provisioned.
+ */
+export async function setupAgentBrowser(options = {}) {
+    const { dryRun = false, silent = false, cwd = process.cwd(), procRoot = '/proc' } = options;
+    const cliPresent = await commandExists('agent-browser');
+    if (!cliPresent) {
+        if (!silent)
+            logger.dim('Installing agent-browser CLI globally (npm -g)...');
+        const cli = await runExecutable('npm', ['install', '-g', AGENT_BROWSER_SKILL], {
+            cwd,
+            dryRun,
+            silent: true,
+            timeout: 600_000
+        });
+        if (!cli.ok && !dryRun) {
+            if (!silent) {
+                logger.warn(`Failed installing agent-browser CLI: ${cli.stderr || cli.stdout}`);
+                logger.dim('  Install it manually: npm i -g agent-browser && agent-browser install');
+            }
+            return false;
+        }
+    }
+    if (!silent)
+        logger.dim('Ensuring agent-browser browser binaries...');
+    const browser = await runExecutable(AGENT_BROWSER_CLI, ['install'], {
+        cwd,
+        dryRun,
+        silent: true,
+        timeout: 600_000
+    });
+    if (!browser.ok && !dryRun) {
+        if (!silent) {
+            logger.warn(`Failed downloading agent-browser browsers: ${browser.stderr || browser.stdout}`);
+            logger.dim('  Retry manually: agent-browser install');
+        }
+        return false;
+    }
+    const restriction = findUsernsRestriction(procRoot);
+    if (restriction && !silent) {
+        logger.warn(`Chrome's sandbox is blocked: ${restriction.sysctl}=${restriction.value} restricts unprivileged user namespaces, so agent-browser launches fail with "No usable sandbox!".`);
+        logger.dim(`  → Fix (machine-wide): echo '${restriction.sysctl}=${restriction.fixValue}' | sudo tee /etc/sysctl.d/99-agent-browser-userns.conf && sudo sysctl --system`);
+        logger.dim('  → Narrower option: pass --args "--no-sandbox" to agent-browser for that launch (Chrome sandbox disabled for that session)');
+    }
+    return true;
+}
+/**
+ * Run upstream's own diagnostics (`agent-browser doctor --quick --offline
+ * --json`) and return the failing checks, so aginit reports browser health
+ * instead of reimplementing it. Returns null when the report cannot be
+ * parsed (older CLI, unexpected output) — callers should then skip the check
+ * rather than guess.
+ */
+export async function runAgentBrowserDiagnostics() {
+    const res = await runExecutable(AGENT_BROWSER_CLI, ['doctor', '--quick', '--offline', '--json'], {
+        silent: true,
+        timeout: 60_000
+    });
+    try {
+        const parsed = JSON.parse(res.stdout);
+        if (!Array.isArray(parsed.checks))
+            return null;
+        return parsed.checks
+            .filter((check) => check?.status === 'fail')
+            .map((check) => ({
+            message: String(check?.message || 'check failed'),
+            ...(check?.fix ? { fix: String(check.fix) } : {})
+        }));
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=agent-browser.js.map

package/dist/adapters/agent-browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-browser.js","sourceRoot":"","sources":["../../src/adapters/agent-browser.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAG5C,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAC5C,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAC1C,MAAM,qBAAqB,GAAG,2BAA2B,CAAC;AAE1D;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAA4B;IACjE,OAAO,OAAO,CAAC,IAAI,CACjB,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QAC3C,CAAC,MAAM,CAAC,OAAO,KAAK,qBAAqB;YACvC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CACjE,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,yBAAyB,CAAC,SAAiB;IACzD,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,mBAAmB,EAAE,UAAU,CAAC,CAAC,CAAC;AAChG,CAAC;AAQD;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAQ,GAAG,OAAO;IACtD,MAAM,KAAK,GAAqE;QAC9E,CAAC,8CAA8C,EAAE,GAAG,EAAE,GAAG,CAAC;QAC1D,CAAC,kCAAkC,EAAE,GAAG,EAAE,GAAG,CAAC;KAC/C,CAAC;IACF,KAAK,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,aAAa,EAAE,CAAC;YACjD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAWD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAO,GAA6B,EAAE;IAC5E,MAAM,EAAE,MAAM,GAAG,KAAK,EAAE,MAAM,GAAG,KAAK,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC;IAE5F,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,eAAe,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC,MAAM;YAAE,MAAM,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,mBAAmB,CAAC,EAAE;YAC7E,GAAG;YACH,MAAM;YACN,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,OAAO;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,CAAC,IAAI,CAAC,wCAAwC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBAChF,MAAM,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;YACvF,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,IAAI,CAAC,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,iBAAiB,EAAE,CAAC,SAAS,CAAC,EAAE;QAClE,GAAG;QACH,MAAM;QACN,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,OAAO;KACjB,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,8CAA8C,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9F,MAAM,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,WAAW,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CACT,gCAAgC,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,KAAK,oGAAoG,CAC5K,CAAC;QACF,MAAM,CAAC,GAAG,CACR,iCAAiC,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,QAAQ,iFAAiF,CAC7J,CAAC;QACF,MAAM,CAAC,GAAG,CACR,6HAA6H,CAC9H,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,MAAM,GAAG,GAAG,MAAM,aAAa,CAC7B,iBAAiB,EACjB,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,EAC5C;QACE,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,MAAM;KAChB,CACF,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAEnC,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,OAAO,MAAM,CAAC,MAAM;aACjB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;aAC3C,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACf,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,cAAc,CAAC;YACjD,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC,CAAC;IACR,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/adapters/agents-md.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agents-md.d.ts","sourceRoot":"","sources":["../../src/adapters/agents-md.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAKnD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,YAAY,EACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,MAAM,CA+FR;AAED,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,EACpB,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACxE,OAAO,CA+BT"}
+{"version":3,"file":"agents-md.d.ts","sourceRoot":"","sources":["../../src/adapters/agents-md.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAKnD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,YAAY,EACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC/B,MAAM,CAiIR;AAED,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,EACpB,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACxE,OAAO,CA+BT"}