@lazyingart/agintiflow 0.1.0

package/AGENTS.md

@@ -0,0 +1,41 @@
+# Repository Guidelines
+
+## Project Structure & Module Organization
+
+`run.js` is the legacy CLI entrypoint, `bin/aginti-cli.js` is the packaged CLI, and `web.js` serves the local UI. Core runtime logic lives in `src/`: `agent-runner.js` orchestrates the loop, `model-client.js` defines model/tool interactions, `model-routing.js` owns routing presets, `tool-wrappers.js` owns external agent wrapper contracts, `guardrails.js` enforces safety checks, `snapshot.js` captures browser state, and `session-store.js` persists runs under `.sessions/`. Frontend assets for the local UI live in `public/` (`index.html`, `app.js`, `styles.css`).
+
+## Build, Test, and Development Commands
+
+- `npm install`: install dependencies.
+- `npx playwright install chromium`: install the browser runtime used by Playwright.
+- `npm start -- "your task"`: run the CLI agent.
+- `npx aginti-cli --list-routes`: inspect routing presets.
+- `npx aginti-cli --list-wrappers`: inspect installed wrapper availability.
+- `npx aginti-cli --sandbox-status --sandbox-mode docker-readonly`: inspect Docker sandbox readiness.
+- `npx aginti-cli --sandbox-preflight --sandbox-mode docker-readonly`: run safe Docker dependency checks.
+- `npm run web`: start the local web UI on `http://127.0.0.1:3210`.
+- `npm run check`: run syntax checks for `run.js`, `web.js`, and all files in `src/`.
+- `npm pack --dry-run`: inspect npm package contents before release.
+
+Use `AGENT_PROVIDER=openai` or `AGENT_PROVIDER=deepseek` when running locally.
+
+## Coding Style & Naming Conventions
+
+Use ES modules, 2-space indentation, and semicolons, matching the existing JavaScript files. Prefer small single-purpose modules in `src/`. Use kebab-free lowercase filenames such as `session-store.js` and descriptive function names such as `resolveRuntimeConfig` or `captureSnapshot`. Keep browser and shell guardrails explicit rather than clever.
+
+## Testing Guidelines
+
+There is no full automated test suite yet. Treat `npm run check` as the minimum required gate before committing. For behavior changes, do one manual smoke test through either the CLI or the web UI. If you add tests later, place them in a dedicated `test/` directory and name them after the module under test, for example `guardrails.test.js`.
+
+## Commit & Pull Request Guidelines
+
+Commit messages in this repo currently follow short imperative style, for example `Make browser startup lazy and shell-first`. Keep commits focused and explain user-visible behavior changes in the body when needed. Pull requests should include:
+
+- a short summary of what changed
+- any environment or model assumptions
+- screenshots for `public/` or `web.js` UI changes
+- a brief manual test note, such as `npm run check` and one sample prompt
+
+## Security & Configuration Tips
+
+Never hard-code API keys. Use environment variables like `OPENAI_API_KEY` and `DEEPSEEK_API_KEY`. Do not expose provider defaults that include API keys through web APIs. Keep wrapper tools advisory and opt-in; do not remove read-only/planning defaults without documenting the risk. Keep npm publish and token commands blocked inside agent runs. Prefer Trusted Publishing through `.github/workflows/npm-publish.yml`; local npm tokens may only live in ignored `.env` or `.npmrc` files and must never be printed or committed. Package installs or venv/conda/npm setup must require the package policy and Docker workspace-write mode. Do not weaken guardrails in `src/guardrails.js` or `src/command-policy.js` without documenting why. Do not commit `.sessions/` artifacts.

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!) The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 AgInTi and AgInTiFlow contributors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,294 @@
+[English](README.md) · [العربية](i18n/README.ar.md) · [Español](i18n/README.es.md) · [Français](i18n/README.fr.md) · [日本語](i18n/README.ja.md) · [한국어](i18n/README.ko.md) · [Tiếng Việt](i18n/README.vi.md) · [中文 (简体)](i18n/README.zh-Hans.md) · [中文（繁體）](i18n/README.zh-Hant.md) · [Deutsch](i18n/README.de.md) · [Русский](i18n/README.ru.md)
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/lachlanchen/lachlanchen/main/figs/banner.png" alt="Lachlan Chen banner" width="960" />
+</p>
+
+<p align="center">
+  <img src="./logos/banner-opaque.png" alt="AgInTiFlow banner" width="960" />
+</p>
+
+# AgInTiFlow
+
+![Node.js](https://img.shields.io/badge/Node.js-22%2B-339933?logo=nodedotjs&logoColor=white)
+![Playwright](https://img.shields.io/badge/Browser-Playwright-2EAD33?logo=playwright&logoColor=white)
+![Express](https://img.shields.io/badge/Web-Express-111827)
+![Models](https://img.shields.io/badge/Models-OpenAI%20%2B%20DeepSeek-0ea5e9)
+![Sandbox](https://img.shields.io/badge/Shell-Docker%20Sandbox-f97316)
+![Status](https://img.shields.io/badge/Status-Prototype-7c3aed)
+
+AgInTiFlow is AgInTi's web-first agent platform for controlled website automation, persistent conversations, resumable runs, guarded local commands, and optional coding-agent wrappers.
+
+It is designed for workflows where an AI agent should act, but every tool, log, and session state should remain inspectable.
+
+## Product Snapshot
+
+| Area | Direction |
+| --- | --- |
+| Core loop | Plan -> use tools -> log events -> finish or resume |
+| Browser control | Playwright, lazy browser startup, domain allowlists |
+| Model layer | Smart routing over DeepSeek fast/pro presets with manual OpenAI-compatible fallback |
+| Local tools | Optional guarded shell commands, Docker sandbox support, and advisory agent wrappers |
+| Memory | Session state, persisted web settings, chat continuation |
+| Operator UX | Multilingual web UI with provider selection, run output, and conversation history |
+
+## Quick Start
+
+Install the published CLI:
+
+```bash
+npm install -g @lazyingart/agintiflow
+aginti --list-routes
+aginti --sandbox-status --sandbox-mode docker-readonly --cwd "$PWD"
+```
+
+Launch the local web UI from an installed package:
+
+```bash
+aginti-cli --routing smart --allow-shell "List this folder"
+aginti --sandbox-preflight --sandbox-mode docker-readonly --cwd "$PWD"
+```
+
+Run from a source checkout:
+
+```bash
+cd /home/lachlan/ProjectsLFS/Agent/AgInTiFlow
+npm install
+npx playwright install chromium
+npm run web
+```
+
+Open `http://127.0.0.1:3210`.
+
+Run a CLI task:
+
+```bash
+AGENT_PROVIDER=deepseek npm start -- "List this folder and summarize what each project is for"
+```
+
+Use the dedicated CLI entrypoint:
+
+```bash
+npx aginti-cli --routing smart --allow-shell "List this folder"
+npx aginti-cli --list-routes
+npx aginti-cli --list-wrappers
+npx aginti-cli --sandbox-status --sandbox-mode docker-readonly --cwd /home/lachlan/ProjectsLFS/Agent/AgInTiFlow
+npx aginti-cli --sandbox-preflight --sandbox-mode docker-readonly --cwd /home/lachlan/ProjectsLFS/Agent/AgInTiFlow
+```
+
+Start from a URL:
+
+```bash
+npm start -- --start-url https://news.ycombinator.com "Summarize this page"
+```
+
+Resume a run:
+
+```bash
+npm start -- --resume your-session-id
+```
+
+The package exposes both `aginti` and `aginti-cli`; they run the same CLI entrypoint.
+
+## Web UI
+
+The web app includes:
+
+- Routing dropdown for smart, fast, complex, and manual model selection.
+- Provider dropdown for OpenAI and DeepSeek when manual routing is needed.
+- Language dropdown with 11 persisted UI locales.
+- Editable model field, with DeepSeek v4 flash as the fast default and DeepSeek v4 pro as the complex route.
+- Goal, start URL, allowed domains, working directory, and max-step controls.
+- Sandbox mode, Docker image/status, package-install approval state, and recent sandbox logs.
+- Toggleable shell tool, agent wrappers, headless browser, password typing, and destructive actions.
+- Live run logs above a persistent conversation panel.
+
+`Start URL` is only a suggestion. The browser opens only when the model chooses a browser tool.
+
+## Safety Model
+
+AgInTiFlow is intentionally conservative:
+
+- Password typing is blocked unless explicitly enabled.
+- Destructive browser actions are blocked unless explicitly enabled.
+- Shell commands are disabled unless the shell tool is enabled.
+- Guarded shell mode only allows inspection, test/build checks, and approved setup commands.
+- Docker read-only mode mounts the workspace read-only and disables container network access.
+- Docker workspace-write mode is required for approved package or environment setup.
+- Package installs default to `prompt`, so npm/pip/conda/venv setup is blocked until explicitly approved.
+- NPM publishing, npm token commands, sudo, destructive git actions, curl/wget, and shell chaining are blocked.
+- NPM tokens and API keys are redacted from tool logs and API responses.
+- Every tool request and result is written to structured logs.
+
+## Configuration
+
+```bash
+AGENT_PROVIDER=deepseek
+LLM_MODEL=deepseek-chat
+OPENAI_API_KEY=...
+DEEPSEEK_API_KEY=...
+MAX_STEPS=15
+HEADLESS=true
+ALLOWED_DOMAINS=news.ycombinator.com,github.com
+ALLOW_SHELL_TOOL=false
+SANDBOX_MODE=docker-readonly
+PACKAGE_INSTALL_POLICY=prompt
+USE_DOCKER_SANDBOX=true
+DOCKER_SANDBOX_IMAGE=agintiflow-sandbox:latest
+COMMAND_CWD=/home/lachlan/ProjectsLFS/Agent
+```
+
+Defaults:
+
+| Route | Provider | Default model | Override |
+| --- | --- | --- | --- |
+| `smart` | DeepSeek | Fast for normal tasks, pro for complex tasks | `AGENT_ROUTING_MODE=smart` |
+| `fast` | DeepSeek | `deepseek-v4-flash` | `DEEPSEEK_FAST_MODEL` |
+| `complex` | DeepSeek | `deepseek-v4-pro` | `DEEPSEEK_PRO_MODEL` |
+| `manual` | DeepSeek/OpenAI | user supplied | `AGENT_PROVIDER`, `LLM_MODEL` |
+
+Provider credentials:
+
+| Provider | API key | Base URL |
+| --- | --- | --- |
+| OpenAI | `OPENAI_API_KEY` | `https://api.openai.com/v1` |
+| DeepSeek | `DEEPSEEK_API_KEY` | `https://api.deepseek.com/v1` |
+
+## Agent Wrappers
+
+AgInTiFlow can expose external coding agents as advisory tools when `ALLOW_WRAPPER_TOOLS=true` or the web UI toggle is enabled. Wrappers are not a replacement for the core runner; they are used for second opinions, codebase analysis, or planning when they are installed and authenticated.
+
+Current wrappers:
+
+| Wrapper | Command | Safety mode |
+| --- | --- | --- |
+| Codex | `codex exec` | read-only sandbox, primary `gpt-5.5` medium, spare `gpt-5.4-mini` high |
+| Claude Code | `claude --print` | plan permission mode |
+| Gemini CLI | `gemini` | advisory prompt |
+| GitHub Copilot CLI | `gh copilot` | advisory prompt |
+| Qwen Code | `qwen` | plan approval mode |
+
+Wrapper prompts are capped and filtered for destructive intent unless destructive actions are explicitly enabled.
+
+## npm Release Safety
+
+AgInTiFlow is published as `@lazyingart/agintiflow`.
+
+Preferred release path:
+
+1. Bump `package.json` version.
+2. Run `npm test` and `npm pack --dry-run`.
+3. Create a GitHub Release or run `.github/workflows/npm-publish.yml` manually.
+4. Let npm Trusted Publishing use GitHub Actions OIDC and `npm publish --access public --provenance`.
+
+Trusted Publishing setup on npm:
+
+```bash
+npm install -g npm@^11.5.1
+npm trust github @lazyingart/agintiflow --repo lazyingart/AgInTiFlow --file npm-publish.yml
+```
+
+The npm trust command may require the package to exist first and may require an OTP in the browser/account flow. Do not commit `.npmrc`, `.env`, npm tokens, OTPs, or npm debug logs.
+
+Local token fallback is only for bootstrapping when Trusted Publishing cannot be used:
+
+```bash
+cp .env.example .env
+# Put NPM_TOKEN or NODE_AUTH_TOKEN in .env locally only.
+set -a && source .env && set +a
+npm publish --access public
+```
+
+Never publish with `npm publish` from inside an agent run. The runtime command policy blocks npm publish and npm token commands by design.
+
+## Docker Bootstrap
+
+Ubuntu helper:
+
+```bash
+./scripts/install-docker-ubuntu.sh
+```
+
+If running as `root` and configuring Docker for a regular user:
+
+```bash
+DOCKER_TARGET_USER=lachlan ./scripts/install-docker-ubuntu.sh
+```
+
+Open a new login shell, or run `newgrp docker`, before testing non-root Docker access.
+
+## Sandbox Modes
+
+| Mode | Workspace mount | Network | Intended use |
+| --- | --- | --- | --- |
+| `host` | local process | host network | legacy read-only inspection only |
+| `docker-readonly` | read-only `/workspace` | none | default safe coding inspection and tests |
+| `docker-workspace` | writable `/workspace` | none by default, enabled only for approved package installs | environment setup inside the mounted project |
+
+Package policy values:
+
+| Policy | Behavior |
+| --- | --- |
+| `block` | Always block npm/pip/conda/venv setup. |
+| `prompt` | Return a clear approval-required error; the UI can switch to approved. |
+| `allow` | Permit allowlisted setup commands only in `docker-workspace`. |
+
+Safe preflight endpoints:
+
+```bash
+curl http://127.0.0.1:3210/api/sandbox/status
+curl -X POST http://127.0.0.1:3210/api/sandbox/preflight \
+  -H 'Content-Type: application/json' \
+  -d '{"sandboxMode":"docker-readonly","buildImage":true}'
+```
+
+These endpoints report Docker/image/workspace readiness and recent sandbox logs without returning API keys or npm tokens.
+
+## Runtime Artifacts
+
+Each run stores state under `.sessions/<session-id>/`:
+
+| File | Purpose |
+| --- | --- |
+| `state.json` | Resumable model and tool state |
+| `plan.md` | Execution plan |
+| `events.jsonl` | Structured event log |
+| `storage-state.json` | Browser session persistence |
+| `artifacts/step-XXX.png` | Screenshots |
+| `artifacts/step-XXX.snapshot.json` | DOM snapshots |
+
+## Project Structure
+
+```text
+AgInTiFlow/
+├── public/                 # Web UI
+├── src/                    # Agent runtime, tools, guardrails, storage
+├── docker/                 # Shell sandbox image
+├── scripts/                # Docker bootstrap helper
+├── bin/                    # aginti/aginti-cli entrypoint
+├── logos/                  # Brand assets and crop notes
+├── references/             # Design philosophy and research notes
+├── tools/                  # Reusable project documentation helpers
+├── run.js                  # CLI entrypoint
+└── web.js                  # Express web server
+```
+
+## Development
+
+```bash
+npm run check
+```
+
+The check validates JavaScript syntax for the CLI, web server, and runtime modules.
+
+## Prompt Tools
+
+This repo includes small prompt helpers for repeatable documentation and i18n work:
+
+```bash
+node tools/readme_prompt_tool.js agintiflow
+node tools/readme_prompt_tool.js aginti-landing
+node tools/webapp_i18n_prompt_tool.js
+```
+
+The README helper captures the documentation style used here: concise overview, full language links, product signals, quick start, safety notes, and localized README targets. The webapp i18n helper captures the full UI translation key contract for future language backfills.

package/bin/aginti-cli.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import { main } from "../src/cli.js";
+
+main().catch((error) => {
+  console.error(error);
+  process.exit(1);
+});

package/docker/sandbox.Dockerfile

@@ -0,0 +1,22 @@
+FROM ubuntu:24.04
+
+ENV DEBIAN_FRONTEND=noninteractive
+
+RUN apt-get update && apt-get install -y --no-install-recommends \
+  bash \
+  ca-certificates \
+  curl \
+  findutils \
+  gawk \
+  git \
+  grep \
+  npm \
+  nodejs \
+  python3-pip \
+  python3-venv \
+  python3 \
+  ripgrep \
+  sed \
+  && rm -rf /var/lib/apt/lists/*
+
+WORKDIR /workspace

package/docs/npm-publishing.md

@@ -0,0 +1,45 @@
+# npm Publishing
+
+AgInTiFlow is published on npm as `@lazyingart/agintiflow`.
+
+## Trusted Publishing
+
+Use GitHub Actions Trusted Publishing for normal releases. The workflow is `.github/workflows/npm-publish.yml` and publishes with provenance using OIDC.
+
+Trusted Publisher settings on npm:
+
+- Package: `@lazyingart/agintiflow`
+- Publisher: GitHub Actions
+- Repository: `lazyingart/AgInTiFlow`
+- Workflow filename: `npm-publish.yml`
+- Environment: blank, unless a GitHub deployment environment is added later
+
+Equivalent setup command:
+
+```bash
+npm install -g npm@^11.5.1
+npm trust github @lazyingart/agintiflow --repo lazyingart/AgInTiFlow --file npm-publish.yml
+```
+
+The npm trust setup may require the package to exist before trust can be attached. If npm asks for an OTP or browser confirmation, stop and complete that step outside the agent.
+
+## Release Flow
+
+1. Update `package.json` version.
+2. Run `npm test`.
+3. Run `npm pack --dry-run` and inspect the tarball contents.
+4. Push the release commit and create a GitHub Release, or run the publish workflow manually.
+5. Confirm the npm package page shows provenance.
+
+## Local Token Fallback
+
+Trusted Publishing is preferred. A local automation token can be used only for bootstrap or emergency fallback:
+
+```bash
+cp .env.example .env
+# Add NPM_TOKEN or NODE_AUTH_TOKEN locally only.
+set -a && source .env && set +a
+npm publish --access public
+```
+
+Never commit `.env`, `.npmrc`, npm tokens, OTPs, npm debug logs, or generated credential material. The runtime command policy intentionally blocks npm publish and npm token commands during agent runs.

package/i18n/README.ar.md

@@ -0,0 +1,51 @@
+[English](../README.md) · [العربية](README.ar.md) · [Español](README.es.md) · [Français](README.fr.md) · [日本語](README.ja.md) · [한국어](README.ko.md) · [Tiếng Việt](README.vi.md) · [中文 (简体)](README.zh-Hans.md) · [中文（繁體）](README.zh-Hant.md) · [Deutsch](README.de.md) · [Русский](README.ru.md)
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/lachlanchen/lachlanchen/main/figs/banner.png" alt="Lachlan Chen banner" width="960" />
+</p>
+
+<p align="center">
+  <img src="../logos/banner-opaque.png" alt="AgInTiFlow banner" width="960" />
+</p>
+
+# AgInTiFlow
+
+AgInTiFlow هو وكيل من AgInTi للتحكم المنضبط في المتصفح والأدوات المحلية: أتمتة الويب، محادثات مستمرة، تشغيل قابل للاستئناف، وأوامر محلية محمية.
+
+## لمحة
+
+| المجال | الاتجاه |
+| --- | --- |
+| الحلقة الأساسية | تخطيط -> استخدام أدوات -> تسجيل أحداث -> إنهاء أو استئناف |
+| المتصفح | Playwright، تشغيل عند الحاجة، قائمة سماح للنطاقات |
+| النماذج | Tool calling متوافق مع OpenAI مع إعدادات OpenAI و DeepSeek |
+| الأدوات المحلية | Shell اختياري مع guardrails و Docker sandbox |
+| الذاكرة | حالة الجلسة، إعدادات محفوظة، ومتابعة المحادثة |
+
+## تشغيل سريع
+
+```bash
+cd /home/lachlan/ProjectsLFS/Agent/AgInTiFlow
+npm install
+npx playwright install chromium
+npm run web
+```
+
+افتح `http://127.0.0.1:3210`.
+
+```bash
+AGENT_PROVIDER=deepseek npm start -- "List this folder"
+```
+
+## الأمان
+
+- كلمات المرور والإجراءات التخريبية محجوبة ما لم يتم تفعيلها صراحة.
+- shell اختياري ويمكن تشغيله داخل Docker بلا شبكة.
+- كل طلب أداة ونتيجته يتم تسجيلهما في `.sessions/`.
+
+## التطوير
+
+```bash
+npm run check
+node tools/readme_prompt_tool.js agintiflow
+```