@lazyingart/agintiflow 0.8.6 → 0.8.7

package/README.md

@@ -46,6 +46,14 @@ aginti --list-profiles
 aginti --sandbox-status
 ```
 
+On first interactive use, if no DeepSeek key is detected, `aginti` asks you to paste it and saves it to the project-local ignored file `.aginti/.env` with `0600` permissions. You can also set it explicitly:
+
+```bash
+aginti login deepseek
+# or non-interactively:
+printf '%s' "$DEEPSEEK_API_KEY" | aginti keys set deepseek --stdin
+```
+
 Start an interactive Codex-style CLI chat from any project folder:
 
 ```bash

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lazyingart/agintiflow",
-  "version": "0.8.6",
+  "version": "0.8.7",
   "type": "module",
   "description": "AgInTiFlow is a resumable Playwright website-control agent with OpenAI-compatible tool calling.",
   "license": "Apache-2.0",

package/src/auth-onboarding.js

@@ -0,0 +1,62 @@
+import readline from "node:readline/promises";
+import { stdin as input, stdout as output } from "node:process";
+import { Writable } from "node:stream";
+import { providerKeyStatus, setProviderKey } from "./project.js";
+
+class MutedWritable extends Writable {
+  constructor(target) {
+    super();
+    this.target = target;
+    this.muted = false;
+  }
+
+  _write(chunk, encoding, callback) {
+    if (!this.muted) this.target.write(chunk, encoding);
+    callback();
+  }
+}
+
+export async function promptHidden(promptText) {
+  if (!input.isTTY || !output.isTTY) return "";
+
+  const mutedOutput = new MutedWritable(output);
+  const rl = readline.createInterface({
+    input,
+    output: mutedOutput,
+    terminal: true,
+  });
+
+  try {
+    output.write(promptText);
+    mutedOutput.muted = true;
+    const value = await rl.question("");
+    output.write("\n");
+    return String(value || "").trim();
+  } finally {
+    mutedOutput.muted = false;
+    rl.close();
+  }
+}
+
+export function shouldPromptForDeepSeek(args = {}, projectRoot = process.cwd()) {
+  const provider = String(args.provider || "").toLowerCase();
+  if (provider === "mock" || provider === "openai") return false;
+  if (process.env.AGINTIFLOW_NO_AUTH_PROMPT === "1") return false;
+  if (!input.isTTY || !output.isTTY) return false;
+  return !providerKeyStatus(projectRoot).deepseek;
+}
+
+export async function promptAndSaveDeepSeekKey(projectRoot = process.cwd(), options = {}) {
+  const key = await promptHidden(
+    options.promptText || "DeepSeek API key not found. Paste DEEPSEEK_API_KEY to save locally, or press Enter to skip: "
+  );
+  if (!key) return { saved: false, skipped: true };
+
+  const result = await setProviderKey(projectRoot, "deepseek", key);
+  return {
+    saved: true,
+    provider: result.provider,
+    keyName: result.keyName,
+    path: result.path,
+  };
+}

package/src/cli.js

@@ -15,6 +15,7 @@ import {
   showProjectSession,
 } from "./project.js";
 import { listTaskProfiles } from "./task-profiles.js";
+import { promptAndSaveDeepSeekKey, promptHidden, shouldPromptForDeepSeek } from "./auth-onboarding.js";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
@@ -219,7 +220,7 @@ export function parseArgs(argv) {
 
 function printUsage() {
   console.log(
-    'Usage: aginti [chat] OR aginti web [--port 3210] OR aginti resume [latest|<session-id>] ["prompt"] OR aginti queue <session-id> "message" OR aginti [--latex] [--routing smart|fast|complex|manual] [--provider deepseek|openai|mock] [--sandbox-mode host|docker-readonly|docker-workspace] [--package-install-policy block|prompt|allow] [--approve-package-installs] [--allow-shell|--no-shell] [--allow-destructive] [--allow-file-tools|--no-file-tools] [--allow-wrappers --wrapper codex] [--sandbox-status|--sandbox-preflight] "your task"'
+    'Usage: aginti [chat] OR aginti web [--port 3210] OR aginti login deepseek OR aginti resume [latest|<session-id>] ["prompt"] OR aginti queue <session-id> "message" OR aginti [--latex] [--routing smart|fast|complex|manual] [--provider deepseek|openai|mock] [--sandbox-mode host|docker-readonly|docker-workspace] [--package-install-policy block|prompt|allow] [--approve-package-installs] [--allow-shell|--no-shell] [--allow-destructive] [--allow-file-tools|--no-file-tools] [--allow-wrappers --wrapper codex] [--sandbox-status|--sandbox-preflight] "your task"'
   );
 }
 
@@ -298,6 +299,21 @@ async function readStdin() {
   return input.trim();
 }
 
+async function ensureDeepSeekKeyForOneShot(args) {
+  if (!shouldPromptForDeepSeek(args, process.cwd())) return true;
+  console.log("DeepSeek API key is not configured for this project.");
+  console.log("Paste it once to save it in `.aginti/.env` with 0600 permissions, or press Enter to cancel.");
+  const result = await promptAndSaveDeepSeekKey(process.cwd(), {
+    promptText: "DeepSeek API key: ",
+  });
+  if (result.saved) {
+    console.log(`saved ${result.keyName} to project-local ignored env`);
+    return true;
+  }
+  console.error("No DeepSeek key saved. Run `aginti login deepseek` later, or use `--provider mock` for local tests.");
+  return false;
+}
+
 async function handleKeyCommand(argv) {
   const [verb = "status", provider = ""] = argv;
   if (verb === "status") {
@@ -313,17 +329,17 @@ async function handleKeyCommand(argv) {
 
   if (verb === "set") {
     const target = provider || "deepseek";
-    if (!argv.includes("--stdin")) {
-      console.error(`Usage: aginti keys set ${target} --stdin`);
+    const key = argv.includes("--stdin") ? await readStdin() : await promptHidden(`${target === "openai" ? "OpenAI" : "DeepSeek"} API key: `);
+    if (!key) {
+      console.error("No key saved.");
       process.exit(1);
     }
-    const key = await readStdin();
     const result = await setProviderKey(process.cwd(), target, key);
     console.log(`saved ${result.provider} key to project-local ignored env (${result.keyName})`);
     return;
   }
 
-  console.error("Usage: aginti keys status OR aginti keys set deepseek --stdin");
+  console.error("Usage: aginti keys status OR aginti keys set deepseek [--stdin]");
   process.exit(1);
 }
 
@@ -442,11 +458,13 @@ export async function main(argv = process.argv.slice(2)) {
 
   if (argv[0] === "login") {
     const provider = argv[1] || "deepseek";
-    if (!argv.includes("--stdin") && process.stdin.isTTY) {
-      console.error(`Usage: printf '%s' '<key>' | aginti login ${provider} --stdin`);
+    const key = argv.includes("--stdin") || !process.stdin.isTTY
+      ? await readStdin()
+      : await promptHidden(`${provider === "openai" ? "OpenAI" : "DeepSeek"} API key: `);
+    if (!key) {
+      console.error("No key saved.");
       process.exit(1);
     }
-    const key = await readStdin();
     const result = await setProviderKey(process.cwd(), provider, key);
     console.log(`saved ${result.provider} key to project-local ignored env (${result.keyName})`);
     return;
@@ -478,7 +496,9 @@ export async function main(argv = process.argv.slice(2)) {
       });
       return;
     }
-    const config = loadConfig(agentDefaults({ ...parseArgs([prompt]), resume: sessionId, goal: prompt }), { packageDir });
+    const resumeArgs = agentDefaults({ ...parseArgs([prompt]), resume: sessionId, goal: prompt });
+    if (!(await ensureDeepSeekKeyForOneShot(resumeArgs))) process.exit(1);
+    const config = loadConfig(resumeArgs, { packageDir });
     await runAgent(config);
     return;
   }
@@ -527,6 +547,8 @@ export async function main(argv = process.argv.slice(2)) {
     process.exit(1);
   }
 
-  const config = loadConfig(agentDefaults(args), { packageDir });
+  const finalArgs = agentDefaults(args);
+  if (!(await ensureDeepSeekKeyForOneShot(finalArgs))) process.exit(1);
+  const config = loadConfig(finalArgs, { packageDir });
   await runAgent(config);
 }

package/src/interactive-cli.js

@@ -6,6 +6,7 @@ import { loadConfig } from "./config.js";
 import { initProject, listProjectSessions } from "./project.js";
 import { normalizePackageInstallPolicy, normalizeSandboxMode } from "./command-policy.js";
 import { normalizeTaskProfile } from "./task-profiles.js";
+import { promptAndSaveDeepSeekKey, shouldPromptForDeepSeek } from "./auth-onboarding.js";
 
 const useColor = Boolean(input.isTTY && output.isTTY && !process.env.NO_COLOR);
 const ansi = {
@@ -223,6 +224,29 @@ function createState(args = {}) {
   };
 }
 
+async function maybeOnboardDeepSeekKey(state) {
+  if (!shouldPromptForDeepSeek(state, process.cwd())) return;
+
+  printAgentMessage(
+    [
+      "DeepSeek API key is not configured for this project.",
+      "Paste it once to save it in `.aginti/.env` with 0600 permissions, or press Enter to continue in mock mode.",
+    ].join("\n")
+  );
+  const result = await promptAndSaveDeepSeekKey(process.cwd(), {
+    promptText: "DeepSeek API key: ",
+  });
+  if (result.saved) {
+    printAgentMessage(`Saved ${result.keyName} to project-local ignored env.`);
+    return;
+  }
+
+  state.provider = "mock";
+  state.routingMode = "manual";
+  state.model = "mock-agent";
+  printAgentMessage("No key saved. Continuing in local mock mode. Use `/provider deepseek` after running `aginti login deepseek`.");
+}
+
 async function handleCommand(line, state, packageDir) {
   const [command, ...rest] = line.slice(1).trim().split(/\s+/);
   const value = rest.join(" ").trim();
@@ -431,6 +455,7 @@ async function runPrompt(prompt, state, packageDir) {
 
 export async function startInteractiveCli(args = {}, { packageDir, packageVersion } = {}) {
   const state = createState(args);
+  await maybeOnboardDeepSeekKey(state);
   const rl = readline.createInterface({ input, output, terminal: Boolean(input.isTTY && output.isTTY) });
 
   console.log(color(` AgInTiFlow ${packageVersion || ""} `, ansi.agentBg, ansi.bold).trimEnd());

package/src/project.js

@@ -199,6 +199,11 @@ export async function setProviderKey(projectRoot, provider, value) {
 
   const paths = projectPaths(projectRoot);
   await fsp.mkdir(paths.controlDir, { recursive: true });
+  await ensureLine(paths.gitignorePath, [
+    ".aginti/.env",
+    ".aginti/.env.*",
+    "!.aginti/.env.example",
+  ]);
   let parsed = {};
   try {
     parsed = parseEnvText(await fsp.readFile(paths.envPath, "utf8"));