@lazyingart/agintiflow 0.20.255 → 0.20.257-integration.4

package/bin/aginti-document-worker-runtime-check.js

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+import { verifyIntegrationDocumentWorkerNodeRuntime } from "../src/integration-document-worker-runtime.js";
+
+if (process.argv.length !== 2) {
+  process.stderr.write("aginti-document-worker-runtime-check: RUNTIME_IDENTITY_INVALID\n");
+  process.exitCode = 1;
+} else {
+  verifyIntegrationDocumentWorkerNodeRuntime().catch(() => {
+    process.stderr.write("aginti-document-worker-runtime-check: RUNTIME_IDENTITY_INVALID\n");
+    process.exitCode = 1;
+  });
+}

package/bin/aginti-document-worker.js

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+import {
+  main,
+  safeIntegrationDocumentWorkerCliError,
+} from "../src/integration-document-worker-cli.js";
+
+main().catch((error) => {
+  process.stderr.write(`aginti-document-worker: ${safeIntegrationDocumentWorkerCliError(error)}\n`);
+  process.exitCode = 1;
+});

package/bin/aginti-execution-worker.js

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+import {
+  createProductionExecutionWorkerServer,
+  installExecutionWorkerShutdownHandlers,
+  loadExecutionWorkerServerConfig,
+} from "../src/execution-worker-server.js";
+
+try {
+  const config = await loadExecutionWorkerServerConfig();
+  const runtime = await createProductionExecutionWorkerServer({ config });
+  installExecutionWorkerShutdownHandlers(runtime.server);
+  console.log(JSON.stringify({
+    ok: true,
+    service: "aginti-execution-worker",
+    workerId: config.workerId,
+    runtimeBundleRootDigest: config.runtimeBundleRootDigest,
+    listener: runtime.address,
+  }));
+} catch (error) {
+  console.error(JSON.stringify({
+    ok: false,
+    service: "aginti-execution-worker",
+    code: typeof error?.code === "string" ? error.code : "EXECUTION_WORKER_START_FAILED",
+  }));
+  process.exitCode = 1;
+}

package/bin/aginti-integration-analysis.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import { main, safeIntegrationAnalysisCliError } from "../src/integration-analysis-cli.js";
+
+main().catch((error) => {
+  process.stderr.write(`aginti-integration-analysis: ${safeIntegrationAnalysisCliError(error)}\n`);
+  process.exitCode = 1;
+});

package/docs/deep-research-engine.md

@@ -10,15 +10,6 @@ Simple questions should stay on the fast path. A deep-research run spends more
 queries and model calls only when breadth, verification, and traceability add
 real value.
 
-For a request that combines local workspace evidence with web research, the
-outer agent first receives normal inspection tools. After it has read two
-relevant files, or read one file plus inspected/searched the project, the next
-research turn is constrained to `deep_research` and `finish`. This keeps local
-notes authoritative without letting an agent silently replace a requested
-multi-source review with ad hoc browsing. Tool history is scoped to the newest
-genuine user request, so a completed research call from an older task does not
-suppress a later correction or refresh.
-
 ## Architecture
 
 The implementation follows the strongest production patterns without making
@@ -44,11 +35,6 @@ every query an unbounded agent swarm:
    paper set erase the requested source class. Search snippets can guide
    discovery, but they cannot satisfy verified first-party coverage or enter
    synthesis as cited evidence.
-   Phrases such as “official Temporal docs” retain this requirement even when a
-   product name occurs between `official` and `docs`. Product-owned root pages
-   and vendor blogs are classified using the named discovery route; unrelated
-   third-party pages are not promoted merely because their URL repeats one
-   query word.
    Canonical duplicates found by multiple providers are promoted and retain
    per-provider rank evidence. Multi-domain corpora receive separate bounded `site:`
    queries matched to entity-specific subquestions instead of one fragile OR
@@ -113,10 +99,6 @@ every query an unbounded agent swarm:
    rather than arbitrary page text. Every substantive paragraph and finding
    cites exact evidence IDs instead of merely naming a source. A failed main
    synthesis gets one same-provider fast-model fallback.
-   A request for practical recommendations becomes a completion obligation:
-   every recommendation must cite verified evidence, and the run fails closed
-   rather than delivering an unsupported advice section. The renderer uses the
-   compact research objective instead of dumping the raw task prompt.
 9. **Audit**: deterministic code removes unknown or unverified evidence IDs,
    derives visible source citations from accepted evidence records, removes
    unsupported synthesis statements, then reports claim, quotation, citation,
@@ -128,13 +110,6 @@ every query an unbounded agent swarm:
     guarded workspace-relative `outputPath` when the caller requests a durable
     filename, then sent to the canvas.
 
-The reader-facing report always includes an explicit limitations section and
-separates quote-verified sources from inspected-but-uncited pages. When the
-original request asks for reproducibility or exact quotations, deterministic
-rendering adds a verification procedure, retrieval timestamps and SHA-256
-digests, and a verified-evidence appendix. These sections come from the
-retrieval/evidence ledger, not model memory.
-
 This combines the orchestrator/worker and separate citation-pass lessons
 described by [Anthropic's production research
 system](https://www.anthropic.com/engineering/multi-agent-research-system)
@@ -161,8 +136,6 @@ the authoritative original user goal. A planner may shorten the research
 question, but cannot silently drop requirements such as “compare at least three
 independent primary sources,” “read a paper/PDF when available,” or “include
 negative evidence.” These requirements are fingerprinted and checkpointed.
-The same contract covers practical recommendations, reproducible verification
-methods, and exact-quote evidence appendices.
 
 Planning and evidence extraction deliberately use the configured routing model
 when it belongs to a hosted active provider. Synthesis uses the configured main
@@ -214,10 +187,7 @@ To resume a partial or completed same-query run, pass the returned
 `refresh=true` is explicit. A transient run that retrieved zero allowed sources
 is marked failed, preserves its attempts, and retries retrieval on resume
 instead of caching an empty report as success. Checkpoint schema changes
-invalidate old cached runs automatically. The public tool result also carries
-the research schema version; the outer session reuses a completed result only
-when that version matches the installed engine. Versionless or older retained
-results are refreshed instead of being presented as current evidence.
+invalidate old cached runs automatically.
 
 `outputPath` is optional and must name a Markdown file inside the active
 workspace. Repository internals such as `.git`, dependency trees such as

package/docs/model-selection.md

@@ -26,8 +26,6 @@ The local tier policy uses the workstation's installed aliases without treating
 
 Installed aliases are not loaded during routing. A genuine coding/implementation request starts on Deep, checks the authenticated model inventory, and selects the exact `AGINTI_LOCALLLM_CODE_MODEL` value only when present. Missing or unverified capability stays on Deep; the decision and effective model are recorded so fallback sessions can re-evaluate and selected sessions resume on the same model. Explanation-only code questions and non-code writing/research/documentation/design keep their existing route. Automatic Max is off by default; set `AGINTI_LOCALLLM_ALLOW_AUTO_MAX=true` to opt in. An opted-in high-complexity non-code run starts on Deep, confirms the Max alias through authenticated `/v1/models`, and only then samples current resources. Unknown or pressured resource state stays on Deep. Explicit Max also cannot bypass the live gate: immediately before client creation, each new or resumed run rechecks at least 24 GiB available RAM, swap use at or below 75%, and 40 GiB aggregate free NVIDIA memory. A blocked explicit gate creates no model client and performs no inference.
 
-Smart hosted routes fail over only toward the local trust boundary. If a hosted provider returns an authentication, quota, rate-limit, model-availability, capacity, or network failure, AgInTiFlow records `provider.handoff_requested`, patches the same durable session to `localllm-deep`, verifies LocalLLM readiness, records `provider.handoff_activated`, and continues without replaying the user request or prior side effects. Manual routing remains exact and never changes provider automatically. Retained integration profiles also keep their pinned provider identity. Set `AGINTI_PROVIDER_HANDOFF=false` to disable the smart hosted-to-local handoff or `AGINTI_PROVIDER_HANDOFF_MODEL` to select another verified local fallback model.
-
 Long writing tasks use an additional tool boundary: `writing_specialist`. The main model still plans the run, manages files, formats Markdown/LaTeX/Final Draft output, compiles/checks artifacts, and finishes. The specialist gets only the writing brief, canon, style guide, prior draft, target, audience, constraints, and format intent, then returns prose plus a formatter handoff. It follows the active LocalLLM provider by default even when hosted keys exist. Cross-provider writing requires both an explicit target (`AGINTI_WRITING_PROVIDER` or a per-run provider override) and `AGINTI_ALLOW_HOSTED_WRITING_SPECIALIST=true` (or the equivalent per-run permission flag); language detection and ambient credentials never grant that permission.
 
 ## CLI Commands

package/docs/runtime-modes-and-autonomy.md

@@ -73,8 +73,6 @@ Current contract:
 - `danger` is trusted host/full-access mode: host shell, destructive actions, host installs, password typing, and outside-workspace file paths are enabled. Use it only for tasks you trust; obvious secret/publish exfiltration guards remain hard stops.
 - Workspace file tools may read and write inside the configured project folder when file tools are enabled.
 - Narrow workspace-local shell actions such as safe probes, Gradle/TeX builds, and `chmod +x` on a project script may run when the command policy can classify them precisely.
-- Finite literal read-only audits may bind a small literal path, inspect/hash it, count matches through a bounded read-only pipeline, summarize stdin with `sort | uniq -c`, and display numeric results with `echo` or `printf` without asking for destructive permission. Shell line continuations are accepted for finite literal item lists. Every producer, consumer, and surrounding command must still classify as bounded read-only work; network access, redirects, output-file operands, secret/dynamic expansion, shell-state `printf -v`, mutation, dynamic item lists, and computed values used as executable arguments remain blocked.
-- Completion checks distinguish a resolved historical state such as "previously paused" from work that is currently pending or incomplete. A resolved past blocker therefore does not force another verification loop, while any explicit current unfinished state still does.
 - Android/JVM toolchain commands may include safe local env assignments such as `ANDROID_HOME`, `ANDROID_SDK_ROOT`, `JAVA_HOME`, or `GRADLE_USER_HOME`, plus small workspace-local status-log redirects. Secret-like env vars and redirects outside the workspace remain blocked.
 - Workspace writes outside that folder, secret paths, `.git` internals, and dependency folders such as `node_modules` are blocked.
 - `git clone`, `git fetch`, `git pull --ff-only`, `git push`, `curl`, and `wget` are classified as network operations.

package/docs/supervision-campaign-ledger.md

@@ -285,126 +285,3 @@ external semantic and repository-state contract passed at target commit
 `f19ff4b`. No AgInTiFlow source change or task-specific prompt branch was
 needed; the run validates the generic inbox, context, evidence, and completion
 contracts in the published package.
-
-### LabCanvas least-privilege worker integration
-
-`labcanvas-worker-permission-018` validated the installed AgInTiFlow `0.20.217`
-through LabCanvas after a real WeCom research task paused at
-`permission_required`. The defect was in the integration boundary: LabCanvas
-unconditionally selected AgInTi's blocked package-install tier, which also
-blocked ordinary workspace shell execution. LabCanvas now keeps response-only
-roles blocked while granting genuine worker roles reversible package setup
-inside the Docker workspace. Host access, credentials, payment, publication,
-destructive operations, and other irreversible actions remain separately
-guarded.
-
-A direct DeepSeek-backed worker smoke created and validated a bounded workspace
-artifact without a permission prompt. Focused backend regressions, all WeChat
-self-checks, the complete 1,442-test LabCanvas suite, and GitHub Actions passed.
-The originally blocked exact-chat task was then resumed without duplicate model
-work, produced a visually inspected nine-page XeLaTeX research report, and
-delivered one concise message plus the PDF through the verified WeCom transport.
-The follow-up message was preserved in the same chat session. The reusable fix
-is AgenticApp commit `e705bb0`; no AgInTiFlow release change was required.
-
-### Durable background-job recovery after foreground interruption
-
-`long-job-recovery-019` exercised installed AgInTiFlow `0.20.217` with a normal
-laboratory-export request whose terminal could disconnect. The DeepSeek-backed
-agent inspected the checked-in resumable scripts, rejected duplicate execution,
-and selected the generic `start_long_job` routine. The campaign interrupted only
-the foreground AgInTi pane after durable admission; the independent job tmux
-continued, completed eight delayed batches, ran deferred verification, and
-cleaned up its own tmux session.
-
-The same AgInTi session then resumed from retained state. It recovered the exact
-job ID through `long_job_status`, independently reran the project verifier,
-confirmed the artifact and checksum, and finished without calling
-`start_long_job` again. Proactive context compaction reduced the resumed history
-from 190,805 to 30,680 characters while preserving the job identity and original
-task boundary.
-
-The independent acceptance contract verified one process invocation, one durable
-job directory, attempt `1`, command and verifier exit `0`, the required durable
-event sequence, a project handoff with exact status and verification commands,
-and no lingering job tmux session. No source patch or npm release was needed;
-this run validates the published package's general long-job, resume, context,
-deduplication, and cleanup contracts without task-specific routing.
-
-### Host-managed response roles and permission integrity
-
-`permission-resilient-synthesis-030` traced a real LabCanvas career-report
-failure to the integration boundary rather than weakening AgInTiFlow's
-permission guard. LabCanvas invoked the host-managed report under the role
-`career_research`, while its response-only classifier recognized only the older
-`career_daily` alias. The model was consequently offered file tools in a safe,
-read-only run; when it tried to save its already synthesized report,
-AgInTiFlow correctly persisted a `permission_required` pause.
-
-LabCanvas now classifies the full `career-research-*` and
-`daily-organizer-*` role families as host-managed response turns. Those turns
-use AgInTi's `chatops` profile with shell, file, and auxiliary tools disabled;
-the host owns persistence, compilation, quality validation, and delivery.
-General worker roles retain their existing writable Docker contract, and safe
-mode still blocks genuine unapproved writes.
-
-A fresh installed `0.20.248` DeepSeek run completed the imperfect synthesis
-prompt in one model turn. Independent event inspection found zero tool calls,
-zero permission events, one normal `session.finished`, a complete 1,893-byte
-answer, and no task artifact mutation. This was an AgenticApp integration fix;
-no AgInTiFlow runtime or npm release change was required.
-
-### Reader-facing report quality and local editorial routing
-
-`research-pdf-quality-034` exercised a normal scheduled-research packet through
-the AgInTi-backed LabCanvas worker. DeepSeek revised an existing local report
-into a 17,557-byte Chinese scientific review with nine traceable sources,
-source-level methods/results/limitations, cross-source synthesis and tensions,
-explicit evidence boundaries, actionable experiments, and references. The
-first host compile exposed a nearly empty final page, and the prior agent repair
-claimed success without changing the source.
-
-LabCanvas now treats the PDF as a different deliverable from the concise chat
-brief. It audits every configured content dimension, keeps orchestration
-provenance out of the reader document, extracts text per page, renders private
-page previews, rejects orphan pages, retries one conservative compact layout,
-rebuilds stale sibling PDFs, and can deterministically adopt a corrected
-host-built PDF during stored-result repair. The accepted four-page PDF has
-embedded CJK fonts, page body counts `1584, 1988, 1416, 2058`, and no visual or
-layout issues. Stored replay covered every task item with no model rerun or
-external write.
-
-The scenario also exposed two general AgInTi routing false positives. Explicit
-local report paths and existing-document revision language now count as local
-workspace intent, so surrounding research policy does not force a new deep
-research route. The phrase `page-safe` no longer creates a browser-evidence
-requirement. Focused routing/evidence smokes and the full npm suite pass.
-
-### Fresh current-turn command evidence on retained sessions
-
-`security-labshare-035` exercised a long-lived LocalLLM security-repair
-session after the target repository was already fixed, committed, and clean.
-The follow-up prompt deliberately asked the agent not to edit or recommit. It
-required only the exact hidden verifier and `git status --short`, while allowing
-all other passing implementation and unit-test evidence to remain reusable.
-
-Installed AgInTiFlow `0.20.250` incorrectly finished after `inspect_project`.
-It reused the old verifier/status evidence and never executed either command in
-the current turn. The defect was not model quality: the runtime had failed to
-turn explicit commands in a concrete same-task interruption into a fresh,
-revision-bound evidence obligation.
-
-The runtime now records explicit current-turn commands in the active execution
-contract and creates a fresh command batch for only that subset. Unrelated
-passing evidence from the unchanged mutation revision remains valid, while old
-runs of the newly requested commands cannot pre-complete the batch. Inline
-command extraction also recognizes natural `verify`, `validate`, `check`,
-`confirm`, and rerun wording in English and Chinese.
-
-The same real session was replayed against the patched source at goal revision
-`34`. Its event ledger records both commands under
-`required-command-batch-3`: the exact external security contract returned
-`security_labshare_contract: PASS`, and `git status --short` returned empty.
-The target stayed at commit `2b35928` with no mutation. Focused planning,
-truthful-completion, and dynamic-budget regressions pass, as does the complete
-AgInTiFlow npm suite. The fix is released in AgInTiFlow `0.20.251`.

package/examples/document-worker/README.md

@@ -0,0 +1,69 @@
+# Workstation document worker example
+
+This example is deployment input, not an installed service. It deliberately
+starts in the read/delete rollback floor with `creation.enabled=false`.
+Readiness, staged-receipt commit, content reads, and two-phase delete remain
+available; only new compile requests return `WORKER_CREATION_DISABLED` (503).
+
+The fixed application listener is `127.0.0.1:18102`. LazyEdge is the only
+intended caller and injects the distinct upstream application bearer. Store the
+same bare upstream capability in a protected LazyEdge worker binding file and
+in the root-owned, mode `0400`, non-symlink systemd credential source:
+
+`/etc/agintiflow/credentials/document-worker-upstream-token`
+
+The service receives it only through systemd at:
+
+`/run/credentials/aginti-document-worker.service/document-worker-upstream-token`
+
+Do not put that value in the JSON config, an environment variable, an argument,
+logs, documentation, or Git. The dedicated `aginti-document-worker` user/group,
+selected release path, config, and credential must be created by a reviewed
+deployment step; this example does not create them. Before installing the unit,
+deployment must replace `RELEASE_SHA256` with the exact lowercase SHA-256 release
+identifier. No mutable `current` entry is permitted beside `releases` and
+`runtimes` under `/opt/agintiflow-document-worker`.
+The root-only installer creates the mode `0755` `releases` child and performs
+each no-replace release rename inside that child; the application root itself
+can remain frozen at mode `0555` throughout staging.
+
+The unit never executes the workstation's `/usr/bin/node` or a user-owned Node
+path. A reviewed root bootstrap first verifies the versioned Node 22.21.0
+source, then installs the exact binary at the immutable `/opt` path recorded in
+`runtime-manifest.json`. The binary and its four application runtime
+directories are all `root:root` mode `0555`; `/` and `/opt` remain `root:root`
+mode `0755`. `ProtectHome=tmpfs` therefore needs no home-directory exception.
+Before enable, deployment must verify the version, SHA-256, ownership, mode,
+size, ancestry, and exact runtime inventories, then run both the CLI check and
+real bwrap/latexmk/qpdf activation canary under the installed unit.
+Both `ExecStartPre` checks and `ExecStart` use that same immutable Node. The
+worker repeats the no-follow identity, hash, stable-ancestry, and inventory
+checks after exec and fails unless it is running from that exact path as the
+non-root service user/group. Thus a later automatic restart does not trust
+deployment-time evidence alone.
+The second `ExecStartPre` is the exact in-unit `check`: it runs one bounded,
+network-isolated LaTeX/qpdf canary even while `creation.enabled=false`. Its
+success is deployment evidence only; live readiness still advertises
+`compiler:null`, and the compile endpoint remains disabled. The probe never
+stages or commits worker-store objects, removes its private temporary tree, and
+zeroes its process-local artifact buffers before returning.
+The exact installed candidate unit must complete `aginti-document-worker check`
+successfully before LazyEdge route activation, AgInTi broker activation, or Web
+exposure is allowed; static unit verification is not a substitute for that
+namespace and compiler activation proof.
+
+LazyEdge permits two concurrent requests and the worker admits at most two
+compiler processes; at most four additional compiles remain in a bounded
+in-process queue and excess admission fails retryably.
+The private ledger also enforces fixed group/directory bounds, per-source and
+per-PDF limits, and an 8 GiB aggregate live-object ceiling; quota exhaustion
+does not disable existing reads or two-phase deletion.
+Each compiler process has a 30-second wall limit. The 120-second private-route
+timeout is intentionally longer so queueing, forced cleanup, and a structured
+failure response retain transport headroom.
+
+The TeX compiler uses bubblewrap namespaces. Therefore the unit intentionally
+does not use `RestrictNamespaces=true`; it denies only time namespaces. Every
+candidate unit must run the real bwrap/latexmk/qpdf activation canary under the
+installed unit before creation is enabled. A hash-only executable check is not
+an activation proof.

package/examples/document-worker/aginti-document-worker.service

@@ -0,0 +1,67 @@
+[Unit]
+Description=AgInTi workstation document artifact worker
+Documentation=https://flow.lazying.art
+After=local-fs.target
+
+[Service]
+Type=simple
+User=aginti-document-worker
+Group=aginti-document-worker
+UMask=0077
+Environment=PATH=/usr/sbin:/usr/bin:/sbin:/bin
+WorkingDirectory=/var/lib/aginti-document-worker
+ExecStartPre=/opt/agintiflow-document-worker/runtimes/node-v22.21.0-29e9c28204d89d85/bin/node /opt/agintiflow-document-worker/releases/RELEASE_SHA256/bin/aginti-document-worker-runtime-check.js
+ExecStartPre=/opt/agintiflow-document-worker/runtimes/node-v22.21.0-29e9c28204d89d85/bin/node /opt/agintiflow-document-worker/releases/RELEASE_SHA256/bin/aginti-document-worker.js check --config /etc/agintiflow/document-worker.json
+ExecStart=/opt/agintiflow-document-worker/runtimes/node-v22.21.0-29e9c28204d89d85/bin/node /opt/agintiflow-document-worker/releases/RELEASE_SHA256/bin/aginti-document-worker.js serve --config /etc/agintiflow/document-worker.json
+LoadCredential=document-worker-upstream-token:/etc/agintiflow/credentials/document-worker-upstream-token
+StateDirectory=aginti-document-worker
+StateDirectoryMode=0700
+RuntimeDirectory=aginti-document-worker
+RuntimeDirectoryMode=0700
+Restart=on-failure
+RestartSec=2s
+TimeoutStartSec=60s
+TimeoutStopSec=15s
+KillMode=mixed
+KillSignal=SIGTERM
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateDevices=yes
+PrivateIPC=yes
+ProtectSystem=strict
+ProtectHome=tmpfs
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+ProtectKernelLogs=yes
+ProtectClock=yes
+ProtectControlGroups=yes
+ProtectHostname=yes
+ProtectProc=invisible
+ProcSubset=pid
+RestrictAddressFamilies=AF_UNIX AF_INET AF_NETLINK
+RestrictNamespaces=~time
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+LockPersonality=yes
+SystemCallArchitectures=native
+CapabilityBoundingSet=
+AmbientCapabilities=
+IPAddressDeny=any
+IPAddressAllow=localhost
+SocketBindDeny=any
+SocketBindAllow=tcp:18102
+ReadOnlyPaths=/etc/agintiflow/document-worker.json
+InaccessiblePaths=/etc/agintiflow/credentials
+InaccessiblePaths=/var/lib/lazyedge
+InaccessiblePaths=/var/lib/agintiflow-integration
+MemoryMax=1610612736
+MemorySwapMax=0
+TasksMax=64
+CPUQuota=200%
+CPUQuotaPeriodSec=100ms
+LimitNOFILE=512
+LimitCORE=0
+OOMPolicy=kill
+
+[Install]
+WantedBy=multi-user.target

package/examples/document-worker/document-worker.json

@@ -0,0 +1,12 @@
+{
+  "schemaVersion": "aginti-document-worker-service-config-v1",
+  "listen": {
+    "host": "127.0.0.1",
+    "port": 18102
+  },
+  "stateRoot": "/var/lib/aginti-document-worker",
+  "creation": {
+    "enabled": false,
+    "maximumConcurrentCompiles": 2
+  }
+}

package/examples/document-worker/runtime-manifest.json

@@ -0,0 +1,28 @@
+{
+  "schemaVersion": "aginti-document-worker-runtime-manifest-v1",
+  "node": {
+    "path": "/opt/agintiflow-document-worker/runtimes/node-v22.21.0-29e9c28204d89d85/bin/node",
+    "version": "v22.21.0",
+    "sha256": "29e9c28204d89d85cc426b518b4a7c6e32aafecd5e447d65301ffb2c1c15335a",
+    "owner": "root",
+    "group": "root",
+    "mode": "0555",
+    "size": 123351032,
+    "unitMount": "none"
+  },
+  "immutableAncestry": {
+    "owner": "root",
+    "group": "root",
+    "mode": "0555",
+    "applicationRootEntries": [
+      "releases",
+      "runtimes"
+    ],
+    "paths": [
+      "/opt/agintiflow-document-worker",
+      "/opt/agintiflow-document-worker/runtimes",
+      "/opt/agintiflow-document-worker/runtimes/node-v22.21.0-29e9c28204d89d85",
+      "/opt/agintiflow-document-worker/runtimes/node-v22.21.0-29e9c28204d89d85/bin"
+    ]
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lazyingart/agintiflow",
-  "version": "0.20.255",
+  "version": "0.20.257-integration.4",
   "type": "module",
   "description": "AgInTiFlow is a project-aware agent workspace for hybrid wet-dry R&D, hardware-aware intelligence, software automation, and industrial workflows.",
   "license": "Apache-2.0",
@@ -31,6 +31,12 @@
     "access": "public"
   },
   "exports": {
+    "./document-worker": "./src/integration-document-worker-service.js",
+    "./document-worker/config": "./src/integration-document-worker-config.js",
+    "./document-worker/contract": "./src/integration-document-worker-contract.js",
+    "./document-worker/server": "./src/integration-document-worker-server.js",
+    "./document-worker/store": "./src/integration-document-worker-store.js",
+    "./document-worker/runtime": "./src/integration-document-worker-runtime.js",
     "./public-research": "./src/public-research-wrapper.js",
     "./public-research/server": "./src/public-research-server.js",
     "./safe-chat": "./src/safe-chat-wrapper.js",
@@ -46,6 +52,7 @@
     "bin/",
     "docs/",
     "docker/",
+    "examples/document-worker/",
     "demos/agintiflow-cli-launch.jpg",
     "demos/agintiflow-web-console-run-output.jpg",
     "i18n/",
@@ -66,8 +73,6 @@
     "scripts/supervision-ledger.js",
     "scripts/smoke-supervision-ledger.js",
     "scripts/smoke-integration-production-mount.js",
-    "scripts/smoke-integration-production-runtime-bundle.js",
-    "scripts/smoke-integration-retained-idempotency-store.js",
     "scripts/smoke-integration-storage-authority.js",
     "scripts/smoke-integration-retained-durable-common.js",
     "scripts/smoke-integration-retained-file-lock.js",
@@ -81,6 +86,32 @@
     "scripts/smoke-integration-retained-runtime-repository-phase-b.js",
     "scripts/smoke-integration-runtime-repository-contract.js",
     "scripts/smoke-integration-runtime-authority.js",
+    "scripts/smoke-integration-api.js",
+    "scripts/smoke-integration-sandbox-profile.js",
+    "scripts/smoke-execution-worker.js",
+    "scripts/smoke-execution-runtime-bundle.js",
+    "scripts/smoke-execution-worker-server.js",
+    "scripts/smoke-execution-worker-systemd-boundary.js",
+    "scripts/smoke-integration-analysis-coordinator.js",
+    "scripts/smoke-integration-document-artifacts.js",
+    "scripts/smoke-integration-document-content.js",
+    "scripts/smoke-integration-document-revision.js",
+    "scripts/smoke-integration-document-session-broker.js",
+    "scripts/smoke-integration-document-worker-contract.js",
+    "scripts/smoke-integration-document-worker-store.js",
+    "scripts/smoke-integration-document-worker-service.js",
+    "scripts/smoke-integration-document-worker-server.js",
+    "scripts/github-hosted-release-environment.js",
+    "scripts/smoke-integration-document-worker-systemd-boundary.js",
+    "scripts/smoke-integration-document-worker-real-compile.js",
+    "scripts/smoke-integration-document-worker-cross-boundary.js",
+    "scripts/test-document-worker-fixture.js",
+    "scripts/fixtures/integration-document-worker-smoke-fixture.js",
+    "scripts/smoke-integration-grounded-search.js",
+    "scripts/smoke-integration-analysis-planner.js",
+    "scripts/smoke-integration-analysis-session-service.js",
+    "scripts/smoke-integration-analysis-api-server.js",
+    "scripts/live-production-planner-smoke.js",
     "scripts/smoke-auxiliary-tools.js",
     "scripts/smoke-agentlink.js",
     "scripts/smoke-auth.js",
@@ -99,15 +130,12 @@
     "scripts/smoke-localllm-auto-max.js",
     "scripts/smoke-localllm-code-routing.js",
     "scripts/smoke-local-failure-recovery.js",
-    "scripts/smoke-planning-timeout-recovery.js",
     "scripts/smoke-local-resource-policy.js",
     "scripts/smoke-localllm-model-tiers.js",
     "scripts/smoke-localllm-provider.js",
     "scripts/smoke-progressive-tool-selection.js",
     "scripts/smoke-truthful-completion.js",
-    "scripts/smoke-document-artifact-quality.js",
     "scripts/smoke-writing-specialist-routing.js",
-    "scripts/smoke-workspace-secret-false-positive.js",
     "scripts/eval-provider-attribution.js",
     "scripts/local-first-agent-eval.mjs",
     "scripts/fixtures/local-first-agent-eval-fixtures.mjs",
@@ -143,7 +171,10 @@
   "bin": {
     "aginti": "bin/aginti-cli.js",
     "aginti-cli": "bin/aginti-cli.js",
+    "aginti-execution-worker": "bin/aginti-execution-worker.js",
+    "aginti-document-worker": "bin/aginti-document-worker.js",
     "aginti-integration": "bin/aginti-integration.js",
+    "aginti-integration-analysis": "bin/aginti-integration-analysis.js",
     "aginti-public-research": "bin/aginti-public-research.js",
     "aginti-safe-chat": "bin/aginti-safe-chat.js"
   },
@@ -173,17 +204,13 @@
     "smoke:localllm-auto-max": "node scripts/smoke-localllm-auto-max.js",
     "smoke:localllm-code-routing": "node scripts/smoke-localllm-code-routing.js",
     "smoke:local-failure-recovery": "node scripts/smoke-local-failure-recovery.js",
-    "smoke:planning-timeout-recovery": "node scripts/smoke-planning-timeout-recovery.js",
-    "smoke:provider-handoff": "node scripts/smoke-provider-handoff.js",
     "smoke:local-resource-policy": "node scripts/smoke-local-resource-policy.js",
     "smoke:context-budget-recovery": "node scripts/smoke-context-budget-recovery.js",
     "smoke:localllm-model-tiers": "node scripts/smoke-localllm-model-tiers.js",
     "smoke:localllm-provider": "node scripts/smoke-localllm-provider.js",
     "smoke:progressive-tools": "node scripts/smoke-progressive-tool-selection.js",
     "smoke:truthful-completion": "node scripts/smoke-truthful-completion.js",
-    "smoke:document-artifact-quality": "node scripts/smoke-document-artifact-quality.js",
     "smoke:writing-specialist-routing": "node scripts/smoke-writing-specialist-routing.js",
-    "smoke:workspace-secret-false-positive": "node scripts/smoke-workspace-secret-false-positive.js",
     "smoke:mcp": "node scripts/smoke-mcp.js",
     "smoke:model-roles": "node scripts/smoke-model-roles.js",
     "smoke:platform": "node scripts/smoke-platform.js",
@@ -210,8 +237,6 @@
     "supervision:ledger": "node scripts/supervision-ledger.js",
     "smoke:supervision-ledger": "node scripts/smoke-supervision-ledger.js",
     "smoke:integration-production-mount": "node scripts/smoke-integration-production-mount.js",
-    "smoke:integration-production-runtime-bundle": "node scripts/smoke-integration-production-runtime-bundle.js",
-    "smoke:integration-retained-idempotency-store": "node scripts/smoke-integration-retained-idempotency-store.js",
     "smoke:integration-storage-authority": "node scripts/smoke-integration-storage-authority.js",
     "smoke:integration-retained-durable-common": "node scripts/smoke-integration-retained-durable-common.js",
     "smoke:integration-retained-file-lock": "node scripts/smoke-integration-retained-file-lock.js",
@@ -225,11 +250,34 @@
     "smoke:integration-retained-runtime-repository-phase-b": "node scripts/smoke-integration-retained-runtime-repository-phase-b.js",
     "smoke:integration-runtime-repository-contract": "node scripts/smoke-integration-runtime-repository-contract.js",
     "smoke:integration-runtime-authority": "node scripts/smoke-integration-runtime-authority.js",
+    "smoke:integration-api": "node scripts/smoke-integration-api.js",
+    "smoke:integration-sandbox-profile": "node scripts/smoke-integration-sandbox-profile.js",
+    "smoke:execution-worker": "node scripts/smoke-execution-worker.js",
+    "smoke:execution-runtime-bundle": "node scripts/smoke-execution-runtime-bundle.js",
+    "smoke:execution-worker-server": "node scripts/smoke-execution-worker-server.js",
+    "smoke:execution-worker-systemd-boundary": "node scripts/smoke-execution-worker-systemd-boundary.js",
+    "smoke:integration-analysis-coordinator": "node scripts/smoke-integration-analysis-coordinator.js",
+    "smoke:integration-document-artifacts": "node scripts/smoke-integration-document-artifacts.js",
+    "smoke:integration-document-content": "node scripts/smoke-integration-document-content.js",
+    "smoke:integration-document-revision": "node scripts/smoke-integration-document-revision.js",
+    "smoke:integration-document-session-broker": "node scripts/smoke-integration-document-session-broker.js",
+    "smoke:integration-document-worker-contract": "node scripts/smoke-integration-document-worker-contract.js",
+    "smoke:integration-document-worker-store": "node scripts/smoke-integration-document-worker-store.js",
+    "smoke:integration-document-worker-service": "node scripts/smoke-integration-document-worker-service.js",
+    "smoke:integration-document-worker-server": "node scripts/smoke-integration-document-worker-server.js",
+    "smoke:integration-document-worker-systemd-boundary": "node scripts/smoke-integration-document-worker-systemd-boundary.js",
+    "smoke:integration-document-worker-real-compile": "node scripts/smoke-integration-document-worker-real-compile.js",
+    "smoke:integration-document-worker-cross-boundary": "node scripts/smoke-integration-document-worker-cross-boundary.js .",
+    "test:document-worker": "npm run smoke:integration-document-worker-contract && npm run smoke:integration-document-worker-store && npm run smoke:integration-document-worker-service && npm run smoke:integration-document-worker-server && npm run smoke:integration-document-worker-systemd-boundary && npm run smoke:integration-document-worker-real-compile",
+    "smoke:integration-grounded-search": "node scripts/smoke-integration-grounded-search.js",
+    "smoke:integration-analysis-planner": "node scripts/smoke-integration-analysis-planner.js",
+    "smoke:integration-analysis-session-service": "node scripts/smoke-integration-analysis-session-service.js",
+    "smoke:integration-analysis-api-server": "node scripts/smoke-integration-analysis-api-server.js",
+    "smoke:integration-analysis-live": "node scripts/live-production-planner-smoke.js",
     "storage:migrate": "node bin/aginti-cli.js storage migrate",
     "publish:env": "node scripts/npm-publish-from-env.js publish --access public",
     "publish:env:whoami": "node scripts/npm-publish-from-env.js whoami",
-    "pretest": "npm run smoke:planning-timeout-recovery",
-    "test": "npm run check && npm run smoke:integration-production-mount && npm run smoke:integration-production-runtime-bundle && npm run smoke:integration-retained-idempotency-store && npm run smoke:integration-storage-authority && npm run smoke:integration-retained-durable-common && npm run smoke:integration-retained-file-lock && npm run smoke:integration-retained-event-ledger && npm run smoke:integration-retained-event-ledger-bundle && npm run smoke:integration-retained-repository-kernel && npm run smoke:integration-retained-session-state-store && npm run smoke:integration-retained-native-session-repository-state && npm run smoke:integration-retained-native-execution-evidence && npm run smoke:integration-retained-runtime-repository-surface && npm run smoke:integration-retained-runtime-repository-phase-b && npm run smoke:integration-runtime-repository-contract && npm run smoke:integration-runtime-authority && npm run smoke:localllm-provider && npm run smoke:localllm-model-tiers && npm run smoke:localllm-code-routing && npm run smoke:local-failure-recovery && npm run smoke:localllm-auto-max && npm run smoke:local-resource-policy && npm run smoke:context-budget-recovery && npm run smoke:session-runtime && npm run smoke:runtime-core && npm run smoke:progressive-tools && npm run smoke:truthful-completion && npm run smoke:document-artifact-quality && npm run smoke:writing-specialist-routing && npm run smoke:workspace-secret-false-positive && npm run smoke:provider-handoff && npm run eval:local-first-agent && npm run eval:provider-attribution && npm run smoke:runtime-compat && npm run smoke:autoupdate && npm run smoke:web-api && npm run smoke:math-rendering && npm run smoke:web-ui && npm run smoke:web-autostart && npm run smoke:webapp-command && npm run smoke:web-port-fallback && npm run smoke:docker-command && npm run smoke:coding-tools && npm run smoke:dynamic-step-budget && npm run smoke:execution-policy && npm run smoke:aaps-adapter && npm run smoke:auxiliary-tools && npm run smoke:perception-research && npm run smoke:deep-research && npm run smoke:public-research && npm run smoke:safe-chat && npm run smoke:auth && npm run smoke:agentlink && npm run smoke:canvas-artifacts && npm run smoke:capabilities && npm run smoke:mcp && npm run smoke:model-roles && npm run smoke:platform && npm run smoke:permission-modes && npm run smoke:skills && npm run smoke:skillmesh && npm run smoke:supervision-ledger && npm run smoke:tmux-tools && npm run smoke:long-jobs && npm run smoke:run-stdin && npm run smoke:cli-chat && npm run smoke:inbox",
+    "test": "npm run check && npm run smoke:integration-production-mount && npm run smoke:integration-storage-authority && npm run smoke:integration-retained-durable-common && npm run smoke:integration-retained-file-lock && npm run smoke:integration-retained-event-ledger && npm run smoke:integration-retained-event-ledger-bundle && npm run smoke:integration-retained-repository-kernel && npm run smoke:integration-retained-session-state-store && npm run smoke:integration-retained-native-session-repository-state && npm run smoke:integration-retained-native-execution-evidence && npm run smoke:integration-retained-runtime-repository-surface && npm run smoke:integration-retained-runtime-repository-phase-b && npm run smoke:integration-runtime-repository-contract && npm run smoke:integration-runtime-authority && npm run smoke:integration-api && npm run smoke:integration-sandbox-profile && npm run smoke:execution-worker && npm run smoke:execution-runtime-bundle && npm run smoke:execution-worker-server && npm run smoke:execution-worker-systemd-boundary && npm run smoke:integration-analysis-coordinator && npm run smoke:integration-document-artifacts && npm run smoke:integration-document-content && npm run test:document-worker && npm run smoke:integration-document-worker-cross-boundary && npm run smoke:integration-document-session-broker && npm run smoke:integration-document-revision && npm run smoke:integration-grounded-search && npm run smoke:integration-analysis-planner && npm run smoke:integration-analysis-session-service && npm run smoke:integration-analysis-api-server && npm run smoke:localllm-provider && npm run smoke:localllm-model-tiers && npm run smoke:localllm-code-routing && npm run smoke:local-failure-recovery && npm run smoke:localllm-auto-max && npm run smoke:local-resource-policy && npm run smoke:context-budget-recovery && npm run smoke:session-runtime && npm run smoke:runtime-core && npm run smoke:progressive-tools && npm run smoke:truthful-completion && npm run smoke:writing-specialist-routing && npm run eval:local-first-agent && npm run eval:provider-attribution && npm run smoke:runtime-compat && npm run smoke:autoupdate && npm run smoke:web-api && npm run smoke:math-rendering && npm run smoke:web-ui && npm run smoke:web-autostart && npm run smoke:webapp-command && npm run smoke:web-port-fallback && npm run smoke:docker-command && npm run smoke:coding-tools && npm run smoke:dynamic-step-budget && npm run smoke:execution-policy && npm run smoke:aaps-adapter && npm run smoke:auxiliary-tools && npm run smoke:perception-research && npm run smoke:deep-research && npm run smoke:public-research && npm run smoke:safe-chat && npm run smoke:auth && npm run smoke:agentlink && npm run smoke:canvas-artifacts && npm run smoke:capabilities && npm run smoke:mcp && npm run smoke:model-roles && npm run smoke:platform && npm run smoke:permission-modes && npm run smoke:skills && npm run smoke:skillmesh && npm run smoke:supervision-ledger && npm run smoke:tmux-tools && npm run smoke:long-jobs && npm run smoke:run-stdin && npm run smoke:cli-chat && npm run smoke:inbox",
     "pack:dry-run": "npm pack --dry-run",
     "smoke:capabilities": "node scripts/smoke-capabilities.js"
   },