@lazyingart/agintiflow 0.20.124 → 0.20.126

package/README.md

@@ -114,6 +114,16 @@ aginti web --port 3210
 # opens http://127.0.0.1:3210, or the next available port
 ```
 
+Check or prepare the Docker/LaTeX sandbox explicitly:
+
+```bash
+aginti docker status
+aginti docker setup
+aginti docker install-host --yes   # Ubuntu host only; explicit opt-in
+```
+
+AgInTiFlow does not silently install Docker during npm postinstall. Docker changes host services and permissions, so host installation is explicit. Normal mode can install packages and TeX/Python dependencies inside the Docker sandbox. Danger mode is trusted host mode for tasks that really need host package managers or system services.
+
 Run without live model credentials for smoke tests:
 
 ```bash

package/docs/runtime-modes-and-autonomy.md

@@ -43,6 +43,15 @@ Docker package installs are safe when they match the sandbox contract.
 - OS package installs such as `apt-get install htop` affect only the current short-lived command container unless the Docker image is rebuilt.
 - To make OS packages portable, add them to `docker/sandbox.Dockerfile` and rebuild with `scripts/setup-agent-toolchain-docker.sh`.
 
+Use the built-in Docker setup command for the normal sandbox/toolchain path:
+
+```bash
+aginti docker status
+aginti docker setup
+```
+
+`aginti docker setup` builds or verifies the companion sandbox image and checks Node, npm, Python, matplotlib/numpy, `latexmk`, `pdflatex`, git, and ripgrep inside Docker. If host Docker itself is missing, AgInTiFlow prints platform-specific install guidance. `aginti docker install-host --yes` is only an explicit opt-in helper for supported Ubuntu hosts; npm postinstall does not silently install Docker or mutate host services.
+
 This is why a task can safely install Python packages in Docker, but cannot keep an interactive tmux server alive inside a one-shot Docker command.
 
 ## Permission Contract

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lazyingart/agintiflow",
-  "version": "0.20.124",
+  "version": "0.20.126",
   "type": "module",
   "description": "AgInTiFlow is a project-aware agent workspace for hybrid wet-dry R&D, hardware-aware intelligence, software automation, and industrial workflows.",
   "license": "Apache-2.0",
@@ -57,6 +57,7 @@
     "scripts/smoke-canvas-artifacts.js",
     "scripts/smoke-cli-chat.js",
     "scripts/smoke-coding-tools.js",
+    "scripts/smoke-docker-command.js",
     "scripts/smoke-dynamic-step-budget.js",
     "scripts/smoke-capabilities.js",
     "scripts/smoke-auto-update.js",
@@ -94,6 +95,7 @@
     "smoke:auth": "node scripts/smoke-auth.js",
     "smoke:canvas-artifacts": "node scripts/smoke-canvas-artifacts.js",
     "smoke:cli-chat": "node scripts/smoke-cli-chat.js",
+    "smoke:docker-command": "node scripts/smoke-docker-command.js",
     "smoke:skills": "node scripts/smoke-skills.js",
     "smoke:skillmesh": "node scripts/smoke-skillmesh.js",
     "smoke:toolchain-docker": "node scripts/smoke-toolchain-docker.js",
@@ -112,7 +114,7 @@
     "postinstall": "node scripts/postinstall-webapp.js",
     "supervision:seed": "node scripts/seed-supervised-homework.js",
     "storage:migrate": "node bin/aginti-cli.js storage migrate",
-    "test": "npm run check && npm run smoke:autoupdate && npm run smoke:web-api && npm run smoke:web-autostart && npm run smoke:webapp-command && npm run smoke:web-port-fallback && npm run smoke:coding-tools && npm run smoke:dynamic-step-budget && npm run smoke:aaps-adapter && npm run smoke:auxiliary-tools && npm run smoke:perception-research && npm run smoke:auth && npm run smoke:canvas-artifacts && npm run smoke:capabilities && npm run smoke:model-roles && npm run smoke:platform && npm run smoke:permission-modes && npm run smoke:skills && npm run smoke:skillmesh && npm run smoke:tmux-tools && npm run smoke:cli-chat && npm run smoke:inbox",
+    "test": "npm run check && npm run smoke:autoupdate && npm run smoke:web-api && npm run smoke:web-autostart && npm run smoke:webapp-command && npm run smoke:web-port-fallback && npm run smoke:docker-command && npm run smoke:coding-tools && npm run smoke:dynamic-step-budget && npm run smoke:aaps-adapter && npm run smoke:auxiliary-tools && npm run smoke:perception-research && npm run smoke:auth && npm run smoke:canvas-artifacts && npm run smoke:capabilities && npm run smoke:model-roles && npm run smoke:platform && npm run smoke:permission-modes && npm run smoke:skills && npm run smoke:skillmesh && npm run smoke:tmux-tools && npm run smoke:cli-chat && npm run smoke:inbox",
     "pack:dry-run": "npm pack --dry-run",
     "smoke:capabilities": "node scripts/smoke-capabilities.js"
   },

package/scripts/smoke-cli-chat.js

@@ -219,6 +219,7 @@ try {
     "helpScouts",
     "helpRouting",
     "helpProvider",
+    "helpDocker",
     "helpDockerOn",
     "helpDockerOff",
     "helpLatex",

package/scripts/smoke-docker-command.js

@@ -0,0 +1,42 @@
+#!/usr/bin/env node
+import assert from "node:assert/strict";
+import { execFile } from "node:child_process";
+import fs from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { promisify } from "node:util";
+
+const execFileAsync = promisify(execFile);
+const repoRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
+const tempRoot = await fs.mkdtemp(path.join(os.tmpdir(), "agintiflow-docker-command-"));
+
+try {
+  const { stdout } = await execFileAsync(process.execPath, [path.join(repoRoot, "bin/aginti-cli.js"), "docker", "status", "--json", "--cwd", tempRoot], {
+    cwd: tempRoot,
+    env: {
+      ...process.env,
+      AGINTIFLOW_NO_WEB_AUTO_START: "1",
+    },
+    timeout: 20000,
+    maxBuffer: 1024 * 1024,
+  });
+  const parsed = JSON.parse(stdout);
+  assert.equal(parsed.ok, true, "docker status command should return ok envelope");
+  assert.equal(parsed.summary.workspace, tempRoot, "docker status should honor --cwd");
+  assert.equal(typeof parsed.summary.dockerAvailable, "boolean", "docker status should include docker availability");
+  assert(parsed.summary.install?.command, "docker status should include install guidance");
+
+  const install = await execFileAsync(process.execPath, [path.join(repoRoot, "bin/aginti-cli.js"), "docker", "install-host", "--json"], {
+    cwd: tempRoot,
+    timeout: 20000,
+    maxBuffer: 1024 * 1024,
+  });
+  const installPlan = JSON.parse(install.stdout);
+  assert.equal(typeof installPlan.supported, "boolean", "install-host plan should state support");
+  assert(installPlan.command, "install-host plan should include a command or guidance");
+
+  console.log("docker command smoke ok");
+} finally {
+  await fs.rm(tempRoot, { recursive: true, force: true });
+}

package/src/cli.js

@@ -38,9 +38,11 @@ import { handleAapsCliCommand } from "./aaps-adapter.js";
 import { formatInstructionTemplateList, normalizeInstructionTemplate } from "./behavior-contract.js";
 import { applyPermissionMode, normalizePermissionMode } from "./permission-modes.js";
 import { ensureAgintiWebApp } from "./web-autostart.js";
+import { dockerHostInstallPlan, formatDockerSetupText, summarizeDockerSetup } from "./docker-setup.js";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { spawn } from "node:child_process";
 import readline from "node:readline/promises";
 import * as readlineRaw from "node:readline";
 
@@ -716,12 +718,104 @@ function exitOnUnknownOptions(parsed) {
 
 function printUsage() {
   console.log(
-    'Usage: aginti [chat] OR aginti init [--template minimal|disciplined|coding|research|writing|design|aaps|supervision] OR aginti web [--port 3210] OR aginti update OR aginti models OR aginti aaps [status|init|files|validate|compile|check|run] OR aginti skills [query] OR aginti skillmesh [status|off|record|share|sync|serve|service] OR aginti housekeeping [--json] OR aginti auth [deepseek|openai|qwen|venice|grsai] OR aginti resume [--all-sessions] [latest|<session-id>] ["prompt"] OR aginti --remove-empty-sessions OR aginti --remove-sessions OR aginti queue <session-id> "message" OR aginti [--no-auto-update] [-s safe|normal|danger] [--language en|ja|zh-Hans|zh-Hant|ko|fr|es|ar|vi|de|ru] [--image] [--latex] [--scs|--scs auto|--no-scs] [--dynamic-steps auto|on|off] [--routing smart|fast|complex|manual] [--provider deepseek|openai|qwen|venice|mock] [--model MODEL] [--route-model MODEL] [--main-model MODEL] [--spare-model MODEL --spare-reasoning medium] [--aux-provider grsai|venice --aux-model MODEL] [--sandbox-mode host|docker-readonly|docker-workspace] [--package-install-policy block|prompt|allow] [--approve-package-installs] [--allow-shell|--no-shell] [--allow-file-tools|--no-file-tools] [--web-search|--no-web-search] [--parallel-scouts|--no-parallel-scouts --scout-count 1..10] [--allow-auxiliary-tools|--no-auxiliary-tools] [--allow-wrappers --wrapper codex --wrapper-model gpt-5.5] [--list-models|--list-routes] "your task"'
+    'Usage: aginti [chat] OR aginti init [--template minimal|disciplined|coding|research|writing|design|aaps|supervision] OR aginti web [--port 3210] OR aginti docker [status|setup|install-host] OR aginti update OR aginti models OR aginti aaps [status|init|files|validate|compile|check|run] OR aginti skills [query] OR aginti skillmesh [status|off|record|share|sync|serve|service] OR aginti housekeeping [--json] OR aginti auth [deepseek|openai|qwen|venice|grsai] OR aginti resume [--all-sessions] [latest|<session-id>] ["prompt"] OR aginti --remove-empty-sessions OR aginti --remove-sessions OR aginti queue <session-id> "message" OR aginti [--no-auto-update] [-s safe|normal|danger] [--language en|ja|zh-Hans|zh-Hant|ko|fr|es|ar|vi|de|ru] [--image] [--latex] [--scs|--scs auto|--no-scs] [--dynamic-steps auto|on|off] [--routing smart|fast|complex|manual] [--provider deepseek|openai|qwen|venice|mock] [--model MODEL] [--route-model MODEL] [--main-model MODEL] [--spare-model MODEL --spare-reasoning medium] [--aux-provider grsai|venice --aux-model MODEL] [--sandbox-mode host|docker-readonly|docker-workspace] [--package-install-policy block|prompt|allow] [--approve-package-installs] [--allow-shell|--no-shell] [--allow-file-tools|--no-file-tools] [--web-search|--no-web-search] [--parallel-scouts|--no-parallel-scouts --scout-count 1..10] [--allow-auxiliary-tools|--no-auxiliary-tools] [--allow-wrappers --wrapper codex --wrapper-model gpt-5.5] [--list-models|--list-routes] "your task"'
   );
   console.log("Permission shortcuts: -s safe asks before writes/setup; -s normal allows current-project writes and Docker setup; -s danger enables trusted host/full-access mode.");
   console.log(`Languages: ${["en", "ja", "zh-Hans", "zh-Hant", "ko", "fr", "es", "ar", "vi", "de", "ru"].map((code) => `${code}=${languageLabel(code)}`).join(", ")}`);
 }
 
+function parseDockerCommandArgs(argv = [], fallbackCwd = process.cwd()) {
+  const result = {
+    action: "status",
+    json: false,
+    yes: false,
+    commandCwd: fallbackCwd,
+  };
+  for (let index = 0; index < argv.length; index += 1) {
+    const arg = argv[index];
+    if (arg === "--json") {
+      result.json = true;
+      continue;
+    }
+    if (arg === "--yes" || arg === "-y") {
+      result.yes = true;
+      continue;
+    }
+    if (arg === "--cwd") {
+      result.commandCwd = readOption(argv, index) || result.commandCwd;
+      index += 1;
+      continue;
+    }
+    if (!arg.startsWith("-") && result.action === "status") {
+      result.action = arg;
+      continue;
+    }
+  }
+  return result;
+}
+
+function runInherited(command, args = [], options = {}) {
+  return new Promise((resolve) => {
+    const child = spawn(command, args, { stdio: "inherit", ...options });
+    child.on("close", (code) => resolve(Number(code || 0)));
+    child.on("error", (error) => {
+      console.error(error instanceof Error ? error.message : String(error));
+      resolve(1);
+    });
+  });
+}
+
+async function handleDockerCommand(argv = [], { commandCwd = process.cwd() } = {}) {
+  const parsed = parseDockerCommandArgs(argv, commandCwd);
+  const config = loadConfig(
+    {
+      goal: "docker setup",
+      commandCwd: parsed.commandCwd,
+      sandboxMode: "docker-workspace",
+      packageInstallPolicy: "allow",
+      provider: "mock",
+      routingMode: "manual",
+    },
+    { packageDir, baseDir: parsed.commandCwd }
+  );
+  const action = String(parsed.action || "status").toLowerCase();
+
+  if (["install", "install-host", "host-install"].includes(action)) {
+    const plan = dockerHostInstallPlan(packageDir);
+    if (parsed.json) {
+      console.log(JSON.stringify(plan, null, 2));
+      return;
+    }
+    if (!plan.supported) {
+      console.log(formatDockerSetupText(summarizeDockerSetup({ status: await getDockerSandboxStatus(config), packageDir })));
+      console.log("");
+      console.log("Host Docker auto-install is intentionally not run on this platform.");
+      console.log(`Recommended path: ${plan.command}`);
+      return;
+    }
+    if (!parsed.yes) {
+      console.log("Host Docker install requires explicit confirmation because it changes system packages/services.");
+      console.log(`Run: aginti docker install-host --yes`);
+      console.log(`Script: ${plan.command}`);
+      return;
+    }
+    const exitCode = await runInherited("bash", [plan.command], { cwd: packageDir });
+    process.exitCode = exitCode;
+    return;
+  }
+
+  const buildImage = ["setup", "build", "preflight", "latex", "toolchain"].includes(action);
+  const result = buildImage
+    ? await runDockerPreflight(config, { buildImage: true })
+    : { ok: true, status: await getDockerSandboxStatus(config), checks: [] };
+  const summary = summarizeDockerSetup({ status: result.status, preflight: buildImage ? result : null, packageDir });
+  if (parsed.json) {
+    console.log(JSON.stringify({ ok: buildImage ? result.ok : true, summary, result }, null, 2));
+    return;
+  }
+  console.log(formatDockerSetupText(summary));
+}
+
 function stripLeadingGlobalOptions(argv = []) {
   let index = 0;
   const options = {
@@ -1607,6 +1701,11 @@ export async function main(argv = process.argv.slice(2)) {
     return;
   }
 
+  if (commandArgv[0] === "docker") {
+    await handleDockerCommand(commandArgv.slice(1), { commandCwd });
+    return;
+  }
+
   if (commandArgv.includes("--remove-empty-sessions") || commandArgv[0] === "remove-empty-sessions") {
     await handleRemoveSessionsCommand({ emptyOnly: true });
     return;

package/src/docker-setup.js

@@ -0,0 +1,107 @@
+import os from "node:os";
+import path from "node:path";
+import { platformInfo, platformLabel, platformSetupHints } from "./platform.js";
+
+function latexStatusFromChecks(checks = []) {
+  const latexChecks = checks.filter((check) => /latexmk|pdflatex/i.test(check.command || ""));
+  if (!latexChecks.length) return "unchecked";
+  return latexChecks.every((check) => check.ok) ? "ready" : "missing";
+}
+
+export function dockerHostInstallPlan(packageDir = process.cwd(), info = platformInfo()) {
+  const hints = platformSetupHints(info);
+  const script = path.join(packageDir, "scripts", "install-docker-ubuntu.sh");
+  if (info.isMac) {
+    return {
+      supported: false,
+      platform: platformLabel(info),
+      command: "Install Docker Desktop or Colima, then run: aginti docker setup",
+      hints,
+    };
+  }
+  if (info.isWindows && !info.isWsl) {
+    return {
+      supported: false,
+      platform: platformLabel(info),
+      command: "Use WSL2 with Docker Desktop WSL integration, then run: aginti docker setup inside WSL",
+      hints,
+    };
+  }
+  if (info.isLinux && info.linuxFamily === "debian" && /ubuntu/i.test(`${info.linuxId} ${info.distro}`)) {
+    return {
+      supported: true,
+      platform: platformLabel(info),
+      command: script,
+      hints,
+    };
+  }
+  return {
+    supported: false,
+    platform: platformLabel(info),
+    command: "Install a Docker-compatible engine with your OS package manager, then run: aginti docker setup",
+    hints,
+  };
+}
+
+export function summarizeDockerSetup({ status, preflight = null, packageDir = process.cwd() } = {}) {
+  const info = platformInfo();
+  const install = dockerHostInstallPlan(packageDir, info);
+  const checks = preflight?.checks || [];
+  const failedChecks = checks.filter((check) => !check.ok);
+  const latex = latexStatusFromChecks(checks);
+  return {
+    platform: platformLabel(info),
+    sandboxMode: status?.sandboxMode || "unknown",
+    packageInstallPolicy: status?.packageInstallPolicy || "unknown",
+    dockerAvailable: Boolean(status?.dockerAvailable),
+    image: status?.image || "agintiflow-sandbox:latest",
+    imageReady: Boolean(status?.imageReady),
+    dockerfileExists: Boolean(status?.dockerfileExists),
+    workspace: status?.workspace || process.cwd(),
+    persistentDocker: status?.persistentDocker || {},
+    latex,
+    preflightOk: preflight ? Boolean(preflight.ok && failedChecks.length === 0) : undefined,
+    failedChecks: failedChecks.map((check) => check.command || check.error || "unknown"),
+    install,
+  };
+}
+
+export function formatDockerSetupText(summary = {}) {
+  const lines = [
+    "AgInTiFlow Docker setup",
+    `platform=${summary.platform || `${os.type()} (${process.arch})`}`,
+    `sandbox=${summary.sandboxMode || "unknown"} installs=${summary.packageInstallPolicy || "unknown"}`,
+    `docker=${summary.dockerAvailable ? "available" : "missing"} image=${summary.image || "agintiflow-sandbox:latest"} ${
+      summary.imageReady ? "ready" : "not-ready"
+    }`,
+    `dockerfile=${summary.dockerfileExists ? "present" : "missing"}`,
+    `workspace=${summary.workspace || process.cwd()}`,
+  ];
+
+  if (summary.persistentDocker?.root || summary.persistentDocker?.env) {
+    lines.push(`persistent=${summary.persistentDocker.root || path.dirname(summary.persistentDocker.env)}`);
+  }
+  if (summary.latex && summary.latex !== "unchecked") lines.push(`latex=${summary.latex}`);
+  if (summary.preflightOk !== undefined) lines.push(`preflight=${summary.preflightOk ? "passed" : "failed"}`);
+  if (summary.failedChecks?.length) {
+    lines.push(`failedChecks=${summary.failedChecks.join(", ")}`);
+  }
+
+  lines.push("");
+  if (!summary.dockerAvailable) {
+    lines.push("Docker is not available.");
+    lines.push(`Install path: ${summary.install?.command || "Install Docker, then run: aginti docker setup"}`);
+  } else if (!summary.imageReady || summary.preflightOk === false) {
+    lines.push("Next: aginti docker setup");
+  } else {
+    lines.push("Docker sandbox is ready for normal-mode package setup and LaTeX/PDF work.");
+  }
+
+  if (summary.install?.hints?.length) {
+    lines.push("");
+    lines.push("Platform notes:");
+    for (const hint of summary.install.hints) lines.push(`- ${hint}`);
+  }
+
+  return lines.join("\n");
+}

package/src/i18n.js

@@ -146,6 +146,7 @@ const TRANSLATIONS = {
     helpRouting: "Set routing: smart, fast, complex, manual.",
     helpProvider: "Open provider selector, or set deepseek/openai/qwen/venice/mock.",
     helpPermissionMode: "Switch safe/normal/danger permission posture for this session.",
+    helpDocker: "Inspect or prepare the Docker sandbox/toolchain.",
     helpDockerOn: "Use docker-workspace with approved package installs.",
     helpDockerOff: "Use host shell policy.",
     helpLatex: "Use the LaTeX/PDF profile in Docker with a larger step budget.",
@@ -197,6 +198,7 @@ const TRANSLATIONS = {
     helpScouts: "並列 DeepSeek スカウトを有効化し数を設定します。",
     helpRouting: "routing を smart、fast、complex、manual に設定します。",
     helpProvider: "プロバイダ選択を開くか deepseek/openai/qwen/venice/mock を設定します。",
+    helpDocker: "Docker サンドボックス/ツールチェーンを確認または準備します。",
     helpDockerOn: "承認済みパッケージインストール付き docker-workspace を使います。",
     helpDockerOff: "ホストシェルポリシーを使います。",
     helpLatex: "Docker で LaTeX/PDF プロファイルと大きめのステップ数を使います。",
@@ -248,6 +250,7 @@ const TRANSLATIONS = {
     helpScouts: "启用并设置并行 DeepSeek scouts 数量。",
     helpRouting: "设置 routing: smart、fast、complex、manual。",
     helpProvider: "打开 provider 选择器，或设置 deepseek/openai/qwen/venice/mock。",
+    helpDocker: "检查或准备 Docker 沙箱/工具链。",
     helpDockerOn: "使用允许安装包的 docker-workspace。",
     helpDockerOff: "使用主机 shell 策略。",
     helpLatex: "在 Docker 中使用 LaTeX/PDF profile 和更大步骤数。",
@@ -299,6 +302,7 @@ const TRANSLATIONS = {
     helpScouts: "啟用並設定並行 DeepSeek scouts 數量。",
     helpRouting: "設定 routing: smart、fast、complex、manual。",
     helpProvider: "開啟 provider 選擇器，或設定 deepseek/openai/qwen/venice/mock。",
+    helpDocker: "檢查或準備 Docker 沙箱/工具鏈。",
     helpDockerOn: "使用允許安裝套件的 docker-workspace。",
     helpDockerOff: "使用主機 shell 策略。",
     helpLatex: "在 Docker 中使用 LaTeX/PDF profile 和較大步數。",
@@ -353,6 +357,7 @@ const FALLBACKS = {
     helpScouts: "병렬 DeepSeek 스카우트를 켜고 수를 설정합니다.",
     helpRouting: "routing 을 smart, fast, complex, manual 로 설정합니다.",
     helpProvider: "provider 선택기를 열거나 deepseek/openai/qwen/venice/mock 을 설정합니다.",
+    helpDocker: "Docker 샌드박스/툴체인을 확인하거나 준비합니다.",
     helpDockerOn: "승인된 패키지 설치가 가능한 docker-workspace 를 사용합니다.",
     helpDockerOff: "호스트 shell 정책을 사용합니다.",
     helpLatex: "Docker 에서 LaTeX/PDF 프로필과 더 큰 단계 예산을 사용합니다.",
@@ -404,6 +409,7 @@ const FALLBACKS = {
     helpScouts: "Activer les scouts DeepSeek parallèles et régler leur nombre.",
     helpRouting: "Définir le routage: smart, fast, complex, manual.",
     helpProvider: "Ouvrir le sélecteur provider, ou définir deepseek/openai/qwen/venice/mock.",
+    helpDocker: "Inspecter ou préparer le sandbox/la toolchain Docker.",
     helpDockerOn: "Utiliser docker-workspace avec installations de paquets approuvées.",
     helpDockerOff: "Utiliser la politique shell hôte.",
     helpLatex: "Utiliser le profil LaTeX/PDF dans Docker avec plus d'étapes.",
@@ -455,6 +461,7 @@ const FALLBACKS = {
     helpScouts: "Activar scouts DeepSeek paralelos y configurar cantidad.",
     helpRouting: "Configurar routing: smart, fast, complex, manual.",
     helpProvider: "Abrir selector provider, o configurar deepseek/openai/qwen/venice/mock.",
+    helpDocker: "Inspeccionar o preparar el sandbox/toolchain Docker.",
     helpDockerOn: "Usar docker-workspace con instalaciones aprobadas.",
     helpDockerOff: "Usar política de shell host.",
     helpLatex: "Usar perfil LaTeX/PDF en Docker con más pasos.",
@@ -506,6 +513,7 @@ const FALLBACKS = {
     helpScouts: "تفعيل كشافات DeepSeek المتوازية وتحديد عددها.",
     helpRouting: "تعيين routing: smart أو fast أو complex أو manual.",
     helpProvider: "فتح محدد provider أو تعيين deepseek/openai/qwen/venice/mock.",
+    helpDocker: "فحص أو تجهيز صندوق Docker والأدوات.",
     helpDockerOn: "استخدام docker-workspace مع تثبيت حزم معتمد.",
     helpDockerOff: "استخدام سياسة shell المضيف.",
     helpLatex: "استخدام ملف LaTeX/PDF في Docker مع ميزانية خطوات أكبر.",
@@ -557,6 +565,7 @@ const FALLBACKS = {
     helpScouts: "Bật DeepSeek scouts song song và đặt số lượng.",
     helpRouting: "Đặt routing: smart, fast, complex, manual.",
     helpProvider: "Mở bộ chọn provider, hoặc đặt deepseek/openai/qwen/venice/mock.",
+    helpDocker: "Kiểm tra hoặc chuẩn bị sandbox/toolchain Docker.",
     helpDockerOn: "Dùng docker-workspace với cài package đã duyệt.",
     helpDockerOff: "Dùng chính sách shell host.",
     helpLatex: "Dùng profile LaTeX/PDF trong Docker với ngân sách bước lớn hơn.",
@@ -608,6 +617,7 @@ const FALLBACKS = {
     helpScouts: "Parallele DeepSeek-Scouts aktivieren und Anzahl setzen.",
     helpRouting: "Routing setzen: smart, fast, complex, manual.",
     helpProvider: "Provider-Auswahl öffnen oder deepseek/openai/qwen/venice/mock setzen.",
+    helpDocker: "Docker-Sandbox/Toolchain prüfen oder vorbereiten.",
     helpDockerOn: "docker-workspace mit genehmigten Paketinstallationen verwenden.",
     helpDockerOff: "Host-Shell-Policy verwenden.",
     helpLatex: "LaTeX/PDF-Profil in Docker mit größerem Schrittbudget verwenden.",
@@ -659,6 +669,7 @@ const FALLBACKS = {
     helpScouts: "Включить параллельных DeepSeek scouts и задать количество.",
     helpRouting: "Задать routing: smart, fast, complex, manual.",
     helpProvider: "Открыть выбор provider или задать deepseek/openai/qwen/venice/mock.",
+    helpDocker: "Проверить или подготовить Docker sandbox/toolchain.",
     helpDockerOn: "Использовать docker-workspace с одобренными установками пакетов.",
     helpDockerOff: "Использовать политику host shell.",
     helpLatex: "Использовать профиль LaTeX/PDF в Docker с большим числом шагов.",

package/src/interactive-cli.js

@@ -13,6 +13,8 @@ import {
   sessionStoreOptions,
 } from "./project.js";
 import { normalizePackageInstallPolicy, normalizeSandboxMode } from "./command-policy.js";
+import { getDockerSandboxStatus, runDockerPreflight } from "./docker-sandbox.js";
+import { formatDockerSetupText, summarizeDockerSetup } from "./docker-setup.js";
 import { defaultMaxStepsForProfile, normalizeTaskProfile } from "./task-profiles.js";
 import { recommendedMaxStepsForTask } from "./engineering-guidance.js";
 import { normalizeAuthProvider, runAuthWizard, shouldPromptForDeepSeek } from "./auth-onboarding.js";
@@ -294,7 +296,23 @@ function promptViewportRows(height = terminalHeight()) {
 }
 
 function stripAnsi(value) {
-  return String(value || "").replace(/\x1b\[[0-9;?]*[ -/]*[@-~]/g, "");
+  return String(value || "")
+    .replace(/\x1b\][\s\S]*?(?:\x07|\x1b\\)/g, "")
+    .replace(/\x1b\[[0-9;?]*[ -/]*[@-~]/g, "");
+}
+
+function terminalHyperlink(url = "", text = url) {
+  if (!useColor || process.env.AGINTIFLOW_NO_HYPERLINK === "1") return String(text || "");
+  const safeUrl = String(url || "").replace(/[\x00-\x1f\x7f]/g, "");
+  if (!safeUrl) return String(text || "");
+  return `\x1b]8;;${safeUrl}\x07${text}\x1b]8;;\x07`;
+}
+
+function linkifyTerminalUrl(line = "", url = "") {
+  const visibleLine = String(line || "");
+  const visibleUrl = String(url || "");
+  if (!visibleLine || !visibleUrl || !visibleLine.includes(visibleUrl)) return visibleLine;
+  return visibleLine.replace(visibleUrl, terminalHyperlink(visibleUrl, visibleUrl));
 }
 
 function charCellWidth(char = "") {
@@ -806,7 +824,9 @@ export function buildLaunchHeaderLines({
     row(centerLine(subtitle, contentWidth), ansi.dim),
     row(centerLine(credit, contentWidth), ansi.dim),
     tagline ? mid : "",
-    tagline ? row(centerLine(compactLine(tagline, contentWidth), contentWidth), webAppUrl ? ansi.cyan : ansi.yellow) : "",
+    tagline
+      ? row(centerLine(linkifyTerminalUrl(compactLine(tagline, contentWidth), webAppUrl), contentWidth), webAppUrl ? ansi.cyan : ansi.yellow)
+      : "",
     bottom,
   ].filter(Boolean);
   const indent = " ".repeat(Math.max(Math.floor((terminalColumns - Math.max(...boxLines.map((line) => visualLength(line)))) / 2), 0));
@@ -871,8 +891,7 @@ function printHelp() {
       `  ${command("/routing <mode>", "Set routing: smart, fast, complex, manual.", "helpRouting")}`,
       `  ${command("/provider [name]", "Open provider selector, or set deepseek/openai/qwen/venice/mock.", "helpProvider")}`,
       `  ${command("/safe | /normal | /danger", "Switch permission posture for this session.", "helpPermissionMode")}`,
-      `  ${command("/docker on", "Use docker-workspace with approved package installs.", "helpDockerOn")}`,
-      `  ${command("/docker off", "Use host shell policy.", "helpDockerOff")}`,
+      `  ${command("/docker [status|setup|on|off]", "Inspect or prepare the Docker sandbox/toolchain.", "helpDocker")}`,
       `  ${command("/latex on", "Use the LaTeX/PDF profile in Docker with a larger step budget.", "helpLatex")}`,
       `  ${command("/installs block|prompt|allow", "Set package install policy.", "helpInstalls")}`,
       `  ${command("/cwd <path>", "Change command workspace.", "helpCwd")}`,
@@ -3601,8 +3620,35 @@ async function handleCommand(line, state, packageDir) {
       state.sandboxMode = "host";
       state.packageInstallPolicy = "prompt";
       printSystemLine("docker=off sandbox=host installs=prompt");
+    } else if (value === "status" || value === "") {
+      const config = loadConfig(
+        {
+          ...state,
+          goal: "docker status",
+          commandCwd: state.commandCwd || process.cwd(),
+          sandboxMode: state.sandboxMode || "docker-workspace",
+          packageInstallPolicy: state.packageInstallPolicy || "allow",
+        },
+        { packageDir, baseDir: state.commandCwd || process.cwd() }
+      );
+      const status = await getDockerSandboxStatus(config);
+      printAgentMessage(formatDockerSetupText(summarizeDockerSetup({ status, packageDir })));
+    } else if (value === "setup" || value === "preflight" || value === "build" || value === "latex") {
+      const config = loadConfig(
+        {
+          ...state,
+          goal: "docker setup",
+          commandCwd: state.commandCwd || process.cwd(),
+          sandboxMode: "docker-workspace",
+          packageInstallPolicy: "allow",
+        },
+        { packageDir, baseDir: state.commandCwd || process.cwd() }
+      );
+      printSystemLine("docker=setup starting");
+      const result = await runDockerPreflight(config, { buildImage: true });
+      printAgentMessage(formatDockerSetupText(summarizeDockerSetup({ status: result.status, preflight: result, packageDir })));
     } else {
-      printAgentMessage("Usage: /docker on OR /docker off");
+      printAgentMessage("Usage: /docker status OR /docker setup OR /docker on OR /docker off");
     }
     return true;
   }