onbuzz 3.3.0

package/LICENSE

@@ -0,0 +1,267 @@
+LOXIA AUTOPILOT ONE - COMMERCIAL LICENSE
+
+Copyright (c) 2025 Loxia AI. All rights reserved.
+
+================================================================================
+                              LICENSE AGREEMENT
+================================================================================
+
+This License Agreement ("Agreement") is a legal agreement between you (either
+an individual or a single entity, "Licensee") and Loxia AI ("Licensor") for
+the Loxia Autopilot One software product, which includes computer software and
+may include associated media, printed materials, and online or electronic
+documentation ("Software").
+
+By installing, copying, or otherwise using the Software, you agree to be bound
+by the terms of this Agreement. If you do not agree to the terms of this
+Agreement, do not install or use the Software.
+
+================================================================================
+                           GRANT OF LICENSE
+================================================================================
+
+Subject to the terms and conditions of this Agreement, AND upon Licensee's
+registration and authentication with valid credentials provided by Licensor,
+Licensor hereby grants Licensee a non-exclusive, non-transferable, worldwide
+license to:
+
+1. INSTALL AND USE the Software ONLY with valid, active authentication
+   credentials obtained through registration or subscription with Licensor.
+
+2. USE the Software for the duration of your active subscription or license
+   period, as determined by Licensor.
+
+3. MODIFY the Software configuration files and settings for your own use.
+
+4. USE the Software in connection with your own projects, products, or services,
+   subject to maintaining an active, valid subscription or license.
+
+================================================================================
+                            RESTRICTIONS
+================================================================================
+
+Licensee shall NOT:
+
+1. USE the Software without valid, active authentication credentials obtained
+   through proper registration or subscription with Licensor.
+
+2. SHARE, transfer, or provide access to authentication credentials with any
+   third party or unauthorized user.
+
+3. REDISTRIBUTE, sublicense, sell, rent, lease, or lend the Software or any
+   portion thereof to any third party, whether in original or modified form.
+
+4. REVERSE ENGINEER, decompile, disassemble, deobfuscate, or otherwise attempt
+   to derive the source code of the Software.
+
+5. REMOVE, alter, or obscure any proprietary notices, labels, or marks on or
+   in the Software.
+
+6. CIRCUMVENT, bypass, or disable any authentication, licensing, or security
+   mechanisms in the Software.
+
+7. CREATE DERIVATIVE WORKS based on the Software, except for modifications
+   to configuration files as permitted above.
+
+8. USE the Software to create a competing product or service.
+
+9. DISTRIBUTE the Software as part of a product or service offered for sale
+   or as a service (SaaS) without explicit written permission from Licensor.
+
+10. USE the Software in any manner that violates applicable laws or regulations.
+
+11. CONTINUE TO USE the Software after subscription expiration or termination
+    without renewing or obtaining a new valid license.
+
+================================================================================
+                          INTELLECTUAL PROPERTY
+================================================================================
+
+The Software is licensed, not sold. Licensor retains all right, title, and
+interest in and to the Software, including all intellectual property rights
+therein. The Software is protected by copyright laws and international treaty
+provisions.
+
+This license does not grant Licensee any rights to trademarks, service marks,
+or trade names of Licensor.
+
+================================================================================
+                      DISCLAIMER OF WARRANTY
+================================================================================
+
+THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS
+OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.
+
+LICENSOR DOES NOT WARRANT THAT THE SOFTWARE WILL MEET YOUR REQUIREMENTS OR
+THAT THE OPERATION OF THE SOFTWARE WILL BE UNINTERRUPTED OR ERROR-FREE.
+
+================================================================================
+                      LIMITATION OF LIABILITY
+================================================================================
+
+IN NO EVENT SHALL LICENSOR BE LIABLE FOR ANY SPECIAL, INCIDENTAL, INDIRECT,
+OR CONSEQUENTIAL DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, DAMAGES
+FOR LOSS OF BUSINESS PROFITS, BUSINESS INTERRUPTION, LOSS OF BUSINESS
+INFORMATION, OR ANY OTHER PECUNIARY LOSS) ARISING OUT OF THE USE OF OR
+INABILITY TO USE THE SOFTWARE, EVEN IF LICENSOR HAS BEEN ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGES.
+
+IN ANY CASE, LICENSOR'S ENTIRE LIABILITY UNDER ANY PROVISION OF THIS
+AGREEMENT SHALL BE LIMITED TO THE AMOUNT ACTUALLY PAID BY LICENSEE FOR THE
+SOFTWARE.
+
+================================================================================
+                    REGISTRATION AND AUTHENTICATION
+================================================================================
+
+1. REGISTRATION REQUIRED: Use of the Software requires registration and
+   authentication through Licensor's authentication system.
+
+2. VALID CREDENTIALS: Licensee must obtain valid authentication credentials
+   through one of the following methods:
+   - Active paid subscription
+   - Valid license purchase
+   - Authorized trial or evaluation access
+   - Other methods explicitly approved by Licensor
+
+3. CREDENTIAL SECURITY: Licensee is solely responsible for:
+   - Maintaining the confidentiality of authentication credentials
+   - All activities that occur under their credentials
+   - Immediately notifying Licensor of any unauthorized use
+
+4. NO CREDENTIAL SHARING: Authentication credentials are personal and
+   non-transferable. Sharing credentials with others is strictly prohibited
+   and may result in immediate termination of the license.
+
+5. SUBSCRIPTION VALIDITY: Access to the Software is conditional upon
+   maintaining an active, valid subscription or license. Upon expiration or
+   termination of subscription, all rights to use the Software cease
+   immediately.
+
+6. VERIFICATION: Licensor reserves the right to verify authentication
+   credentials and subscription status at any time. The Software may
+   periodically communicate with Licensor's servers for authentication
+   verification.
+
+================================================================================
+                          SUPPORT AND UPDATES
+================================================================================
+
+Licensor may, at its sole discretion, provide updates, upgrades, bug fixes,
+or technical support for the Software to Licensees with active, valid
+subscriptions. Such support, if any, will be provided "as is" without warranty
+of any kind.
+
+Licensee is not entitled to any updates or support unless they maintain an
+active subscription or have explicitly agreed to support terms in a separate
+agreement.
+
+================================================================================
+                            TERMINATION
+================================================================================
+
+This Agreement is effective until terminated. Licensee's rights under this
+Agreement will terminate automatically without notice from Licensor upon:
+
+1. SUBSCRIPTION EXPIRATION: Automatic termination upon expiration of the
+   subscription period if not renewed.
+
+2. BREACH OF TERMS: Failure to comply with any term(s) of this Agreement,
+   including but not limited to:
+   - Unauthorized use without valid credentials
+   - Sharing or transferring authentication credentials
+   - Circumventing authentication or security mechanisms
+   - Reverse engineering or deobfuscation attempts
+   - Redistribution of the Software
+
+3. CREDENTIAL VIOLATIONS: Any misuse, unauthorized sharing, or security
+   breach involving Licensee's authentication credentials.
+
+4. NON-PAYMENT: Failure to maintain payment for subscription-based access.
+
+Upon termination, Licensee must:
+- Immediately cease all use of the Software
+- Destroy all copies, full or partial, of the Software
+- Delete or destroy all authentication credentials
+- Certify destruction upon Licensor's request
+
+Termination does not relieve Licensee of payment obligations incurred prior
+to termination.
+
+================================================================================
+                     DATA COLLECTION AND PRIVACY
+================================================================================
+
+1. AUTHENTICATION DATA: The Software requires periodic communication with
+   Licensor's authentication servers to verify credentials and subscription
+   status. This includes:
+   - Authentication credentials verification
+   - Subscription status checks
+   - License validation
+
+2. LOCAL OPERATION: Beyond authentication verification, the Software operates
+   locally on Licensee's machine. Licensor does not collect telemetry, usage
+   data, or personal information from the Software without explicit consent.
+
+3. DATA SECURITY: Licensor implements reasonable security measures to protect
+   authentication data during transmission and storage.
+
+4. USER RESPONSIBILITY: Licensee is responsible for compliance with applicable
+   privacy laws when using the Software to process any personal or sensitive
+   data.
+
+================================================================================
+                        EXPORT RESTRICTIONS
+================================================================================
+
+Licensee agrees to comply with all applicable export and import laws and
+regulations. Licensee shall not export or re-export the Software, directly or
+indirectly, to any countries that are subject to export restrictions.
+
+================================================================================
+                           GOVERNING LAW
+================================================================================
+
+This Agreement shall be governed by and construed in accordance with the laws
+of the State of Israel, without regard to its conflict of law provisions.
+
+Any disputes arising under or in connection with this Agreement shall be
+subject to the exclusive jurisdiction of the competent courts of Tel Aviv-Jaffa,
+Israel.
+
+================================================================================
+                            ENTIRE AGREEMENT
+================================================================================
+
+This Agreement constitutes the entire agreement between Licensee and Licensor
+concerning the Software and supersedes all prior or contemporaneous oral or
+written communications, proposals, and representations with respect to the
+Software or any other subject matter covered by this Agreement.
+
+This Agreement may not be modified except by a written amendment signed by an
+authorized representative of Licensor.
+
+================================================================================
+                         SEVERABILITY
+================================================================================
+
+If any provision of this Agreement is held to be unenforceable, such provision
+shall be reformed only to the extent necessary to make it enforceable, and the
+remaining provisions of this Agreement shall remain in full force and effect.
+
+================================================================================
+                          ACKNOWLEDGMENT
+================================================================================
+
+BY INSTALLING OR USING THE SOFTWARE, LICENSEE ACKNOWLEDGES THAT LICENSEE HAS
+READ THIS AGREEMENT, UNDERSTANDS IT, AND AGREES TO BE BOUND BY ITS TERMS AND
+CONDITIONS.
+
+================================================================================
+
+For questions regarding this license, please contact:
+Email: legal@loxia.ai
+Website: https://loxia.ai
+
+Version 1.0 - January 2025

package/README.md

@@ -0,0 +1,425 @@
+<div align="center">
+
+# Loxia Autopilot One
+
+**Autonomous AI Agent System for Software Development**
+
+[![npm version](https://img.shields.io/npm/v/@loxia-labs/loxia-autopilot-one.svg?style=flat-square)](https://www.npmjs.com/package/@loxia-labs/loxia-autopilot-one)
+[![Node.js Version](https://img.shields.io/node/v/@loxia-labs/loxia-autopilot-one.svg?style=flat-square)](https://nodejs.org)
+[![License: Commercial](https://img.shields.io/badge/License-Commercial-blue.svg?style=flat-square)](./LICENSE)
+
+**[Quick Start](#-quick-start)** | **[Features](#-features)** | **[Documentation](#-documentation)** | **[Tools](#-ai-powered-tools)** | **[Web UI](#-web-interface)**
+
+</div>
+
+---
+
+## What is Loxia Autopilot One?
+
+Loxia Autopilot One is a **production-ready autonomous AI agent system** that empowers developers with intelligent coding assistance. It combines the power of multiple AI models with a comprehensive toolkit for software development, code analysis, and automation.
+
+### Why Loxia?
+
+- **Multi-Agent Orchestration** - Run multiple AI agents simultaneously with isolated workspaces
+- **Rich Tool Ecosystem** - 18+ specialized tools for development, analysis, and automation
+- **Dual Interface** - Modern Web UI + powerful CLI for any workflow
+- **Real-Time Monitoring** - Track agent activity, costs, and performance
+- **Persistent State** - Resume conversations and continue work across sessions
+- **Secure by Design** - Agent isolation, resource limits, and security scanning
+
+---
+
+## Features
+
+### Core Capabilities
+
+<table>
+<tr>
+<td width="50%">
+
+#### Intelligent Agent System
+- Multi-agent conversation orchestration
+- Automatic model selection and routing
+- Task-based agent specialization
+- Inter-agent communication
+- Background task management
+
+</td>
+<td width="50%">
+
+#### Professional Tooling
+- Terminal command execution
+- File system operations
+- Web browsing and scraping
+- Image generation (DALL-E, Flux)
+- Code analysis and refactoring
+
+</td>
+</tr>
+<tr>
+<td width="50%">
+
+#### Development Features
+- Import/export analysis
+- Dependency resolution
+- Static code analysis
+- Clone detection
+- Security scanning
+
+</td>
+<td width="50%">
+
+#### Smart Assistance
+- Context-aware responses
+- File attachments in chat
+- Conversation compaction
+- Task management
+- Progress tracking
+
+</td>
+</tr>
+</table>
+
+---
+
+## Quick Start
+
+### 1. Create an Account
+
+Register at **[autopilot.loxia.ai](https://autopilot.loxia.ai)** to get started.
+
+### 2. Install the Package
+
+```bash
+npm install -g @loxia-labs/loxia-autopilot-one
+```
+
+### 3. Verify Installation
+
+```bash
+loxia --version
+# Should display: Loxia Autopilot One v2.3.0
+```
+
+### 4. Create an API Key
+
+1. Sign in at [autopilot.loxia.ai](https://autopilot.loxia.ai)
+2. Navigate to [API Keys](https://autopilot.loxia.ai/api-keys)
+3. Create a new API key and copy it
+
+### 5. Launch & Configure
+
+#### Option A: Web UI
+```bash
+loxia web
+```
+This starts the server and opens the Web UI in your browser. Go to **Settings** and paste your API key.
+
+#### Option B: Terminal UI
+```bash
+loxia plus-terminal
+```
+This starts the server + Terminal UI. Press `Ctrl+,` to open Settings, paste your API key. Press `Alt+H` for help.
+
+### 6. Start Using Loxia
+
+1. **Create an agent** using the interface
+2. **Send a message** to start interacting
+3. **Enjoy** autonomous AI assistance!
+
+### CLI Reference
+
+```bash
+loxia web             # Start server + open Web UI in browser
+loxia terminal        # Start Terminal UI (server must be running)
+loxia plus-terminal   # Start server + Terminal UI together
+loxia plus-web        # Alias for 'web'
+loxia --port 3000     # Use custom port (works with any command)
+loxia --version       # Show version
+loxia --help          # Show all options
+```
+
+---
+
+## Web Interface
+
+The modern Web UI provides an intuitive interface for managing agents and conversations:
+
+### Key Features
+
+- **Chat Interface** - Clean, responsive chat with markdown support
+- **File Attachments** - Drag and drop files into conversations
+- **Agent Management** - Create, switch, and manage multiple agents
+- **Real-Time Updates** - Live agent status and output streaming
+- **Model Selection** - Switch between AI models on the fly
+- **Task Tracking** - Visual task lists with progress indicators
+- **Search & Filter** - Find conversations and messages quickly
+- **Modern UI** - Built with React, TailwindCSS, and WebSockets
+
+---
+
+## AI-Powered Tools
+
+Loxia comes with 18+ specialized tools that agents can use autonomously:
+
+### Development Tools
+
+| Tool | Description | Key Features |
+|------|-------------|--------------|
+| **Terminal** | Execute shell commands | Background processes, stdin input, prompt detection |
+| **File System** | File operations | Create, read, update, delete files and directories |
+| **Browser** | Web automation | Headless browsing, screenshots, scraping with Puppeteer |
+| **Seek** | Code search | Pattern matching, multi-directory support |
+| **File Tree** | Directory visualization | Tree structure generation, filtering |
+
+### Analysis Tools
+
+| Tool | Description | Key Features |
+|------|-------------|--------------|
+| **Import Analyzer** | Import/export analysis | ES6, CommonJS, circular dependencies, unused exports |
+| **Dependency Resolver** | Dependency management | Semantic versioning, conflict detection, upgrade paths |
+| **Static Analysis** | Code quality | ESLint, Prettier, TypeScript, Stylelint integration |
+| **Clone Detection** | Code duplication | AST-based analysis, similarity scoring |
+| **Security Scanner** | Security audits | npm audit, dependency vulnerabilities, deployment checks |
+
+### AI & Automation Tools
+
+| Tool | Description | Key Features |
+|------|-------------|--------------|
+| **Image Generator** | AI image creation | Flux Pro support, high-quality outputs |
+| **Video Generator** | AI video creation | Azure OpenAI Sora integration, async processing |
+| **Task Manager** | Task tracking | Todo lists, progress tracking, agent synchronization |
+| **Web Tool** | HTTP requests | GET, POST, API testing, webhook debugging |
+| **File Content Replace** | Bulk replacements | Pattern-based, multi-file, preview changes |
+| **Agent Communication** | Inter-agent messaging | Task delegation, collaborative workflows |
+
+### System Tools
+
+| Tool | Description | Key Features |
+|------|-------------|--------------|
+| **Agent Delay** | Pause agent execution | Timed delays, background operation support |
+| **Job Done** | Task completion | Mark autonomous work complete, exit to chat mode |
+| **Async Tool Manager** | Background task handling | Long-running operations, status tracking |
+| **Loop Detection** | Repetition prevention | Sliding window analysis, automatic termination |
+
+---
+
+## System Requirements
+
+- **Node.js**: >= 20.0.0 (20.x LTS recommended)
+- **npm**: >= 7.0.0
+- **Operating System**: Windows, macOS (Intel & Apple Silicon), Linux
+- **Memory**: 2GB minimum, 4GB+ recommended
+- **Disk Space**: 500MB for package and dependencies
+- **Shell**: bash, zsh (macOS default), PowerShell, cmd
+
+---
+
+## Architecture
+
+### High-Level Overview
+
+```
++--------------------------------------------------+
+|               Client Interfaces                  |
+|  +-------------+  +-------------------------+   |
+|  |   Web UI    |  |     CLI Interface       |   |
+|  |  (React)    |  |  (Interactive Shell)    |   |
+|  +-------------+  +-------------------------+   |
++------------------------+-------------------------+
+                         | WebSocket / IPC
+           +-------------v--------------+
+           |   Orchestrator Service     |
+           |  (Request Coordination)    |
+           +---------+--------+--------+
+                     |        |
+          +----------v--+  +--v--------------+
+          | Agent Pool  |  |  AI Service     |
+          | - Lifecycle |  |  - Model Router |
+          | - Scheduling|  |  - Backend API  |
+          +------+------+  +-----------------+
+                 |
+          +------v--------------------------+
+          |   Message Processor             |
+          |   - Tool Registry               |
+          |   - Command Extraction          |
+          |   - Execution Engine            |
+          +----------------------------------+
+```
+
+### Key Components
+
+- **Orchestrator**: Central coordination hub for all requests
+- **Agent Pool**: Manages agent lifecycle, isolation, and communication
+- **Message Processor**: Parses and executes tool commands from AI responses
+- **AI Service**: Routes requests to appropriate AI backends
+- **State Manager**: Persistent storage and session management
+- **Tool Registry**: Extensible tool system with 18+ built-in tools
+
+---
+
+## Documentation
+
+### For Users
+
+- **[Installation Guide](./INSTALLATION.md)** - Detailed installation and setup
+- **[Tool Documentation](./docs/CREATING_TOOLS.md)** - How to use and create tools
+- **[Architecture Docs](./docs/README.md)** - Interactive architecture diagrams
+
+### For Developers
+
+- **[Architecture Overview](./docs/architecture/)** - System design and components
+- **[API Agent Capabilities](./docs/API-AGENT-CAPABILITIES.md)** - Agent API reference
+- **[Creating Tools](./docs/CREATING_TOOLS.md)** - Build custom tools
+
+---
+
+## Security & Privacy
+
+### Built-In Security Features
+
+- **Agent Isolation** - Each agent has isolated workspace and permissions
+- **Resource Limits** - Prevents resource exhaustion (CPU, memory, commands)
+- **Path Validation** - Prevents directory traversal attacks
+- **Command Sanitization** - Protects against command injection
+- **Security Scanning** - Built-in vulnerability detection
+- **Audit Logging** - Comprehensive activity logs
+
+### Privacy
+
+- **Authentication Only** - Only credential verification communicates with servers
+- **Local-First** - All work data stays on your machine
+- **No Usage Telemetry** - No tracking or analytics of your work
+- **State Control** - Full control over conversation history
+- **Easy Cleanup** - Delete state directory to remove all local data
+
+---
+
+## Roadmap
+
+### Current Version (2.2.5)
+
+- Two-layer tool descriptions: compact index + on-demand full docs via Help tool
+- Document creation tools: DOCX (Word) and Excel read/create support
+- PDF creation: HTML to PDF via Puppeteer with full CSS support
+- Tool result turn tracking: batched results grouped by turn with manifest headers
+- Unified `MAX_OUTPUT_TOKENS` constant (10,000) shared by aiService and compaction check
+- Compaction: preserve recent achievements, file paths, meaningful tool outcomes; 8K summary tokens
+
+### v2.0.6
+- Tool path sync: terminal `cd` now propagates to all tools (filesystem, seek, pdf, etc.)
+- Streaming performance: chunk batching, incremental parser, reduced overscan
+- WebSocket log suppression for high-frequency stream chunks
+
+### Previous Versions
+
+- v2.0.2: Compaction system rewrite, SSE stream parser fix, token usage tracking
+- v2.0.0: System port protection, UI responsiveness fixes, model error handling
+- v1.9.x: Port registry fix, startup timeout fix, agent creation UX, flow agent visibility
+- v1.8.0: Teams, agent duplication, flow execution, awaiting user input scheduling
+- v1.6.x: JSON repair, filesystem hardening, streaming abort, stop button visibility
+- v1.5.0: Dynamic version display, tool builtin delay, compaction indicator redesign
+- v1.4.x: Parallel agent processing, streaming response display, smart auto-scroll
+- v1.3.x: Binary distribution, video tool (Sora), PDF tool, API key persistence
+- v1.2.x: Full macOS compatibility, help modal, keyboard shortcuts
+- v1.1.x: Multi-agent orchestration, 18+ tools, conversation compaction
+
+### Upcoming Features
+
+- **VSCode Extension** - Native IDE integration
+- **Plugin System** - Custom tool marketplace
+- **Cloud Sync** - Optional cloud backup (opt-in)
+
+---
+
+## Contributing
+
+We welcome contributions! See [CONTRIBUTING.md](./CONTRIBUTING.md) for guidelines.
+
+### Development Setup
+
+```bash
+# Clone the repository
+git clone https://github.com/loxia-ai/autopilot-cli-v10.git
+cd autopilot-cli-v10
+
+# Install dependencies
+npm install
+
+# Build Web UI
+cd web-ui && npm install && npm run build && cd ..
+
+# Start in development mode
+npm run dev
+```
+
+---
+
+## License
+
+**Commercial License** - see [LICENSE](./LICENSE) file for complete terms.
+
+- **Authentication Required** - Valid subscription or license needed to use
+- **Commercial Use** - Use in your own projects and services (with active subscription)
+- **No Free Use** - Requires active subscription or valid license
+- **No Redistribution** - Cannot resell, redistribute, or sublicense
+
+**Copyright (c) 2025-2026 Loxia AI. All rights reserved.**
+
+---
+
+## Support
+
+- **Documentation**: Check the [docs](./docs/) directory
+- **Bug Reports**: [GitHub Issues](https://github.com/loxia-ai/autopilot-cli-v10/issues)
+- **Email**: support@loxia.ai
+
+### Troubleshooting
+
+**Web UI won't start?**
+```bash
+# Check if port is in use
+lsof -i :8080
+
+# Use a different port
+loxia --port 3000
+```
+
+**Agent not responding?**
+```bash
+# Check logs
+cat .loxia-state/logs/system.log
+
+# Restart with debug logging
+LOXIA_LOG_LEVEL=debug loxia
+```
+
+**Installation issues?**
+```bash
+# Clear npm cache
+npm cache clean --force
+
+# Reinstall
+npm install -g @loxia-labs/loxia-autopilot-one --force
+```
+
+**macOS Installation**
+
+On macOS, configure npm to use a user-writable directory:
+```bash
+mkdir ~/.npm-global
+npm config set prefix '~/.npm-global'
+echo 'export PATH=~/.npm-global/bin:$PATH' >> ~/.zshrc
+source ~/.zshrc
+npm install -g @loxia-labs/loxia-autopilot-one
+```
+
+---
+
+<div align="center">
+
+**Made with care by the Loxia team**
+
+[Website](https://loxia.ai) | [Twitter](https://twitter.com/loxia_ai)
+
+</div>