fix: Added apparmor profile for proper sandboxing

.gitattributes

@@ -0,0 +1,4 @@
+resources/media/nxtscape-productivity.gif filter=lfs diff=lfs merge=lfs -text
+resources/nxtscape-productivity.gif filter=lfs diff=lfs merge=lfs -text
+resources/media/nxtscape-agent.gif filter=lfs diff=lfs merge=lfs -text
+resources/media/nxtscape-chat.gif filter=lfs diff=lfs merge=lfs -text

.github/ISSUE_TEMPLATE/01-bug.yml

@@ -0,0 +1,75 @@
+name: Bug report
+description: File a bug report for BrowserOS
+title: "<short description of the bug>"
+labels:
+  - "bug"
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thank you for taking the time to report this issue and help improve BrowserOS. We'll look into it! 🐛
+
+  - id: issue-type
+    type: dropdown
+    attributes:
+      label: Issue Type
+      description: What type of issue are you reporting?
+      options:
+        - Agent Issue
+        - Browser Issue
+        - Both / Not sure
+    validations:
+      required: true
+
+  - id: operating-system
+    type: dropdown
+    attributes:
+      label: Operating System
+      description: What operating system are you running?
+      options:
+        - macOS
+        - Windows
+        - Linux
+    validations:
+      required: true
+
+  - id: description
+    type: textarea
+    attributes:
+      label: Description of the bug
+      description: What happened and what did you expect?
+      placeholder: Describe what went wrong and what you expected to happen instead.
+    validations:
+      required: true
+
+  - id: reproduce
+    type: textarea
+    attributes:
+      label: Steps to Reproduce
+      placeholder: |
+        1. Open BrowserOS and navigate to...
+        2. Click on...
+        3. See error
+    validations:
+      required: true
+
+  - id: screenshots
+    type: textarea
+    attributes:
+      label: Screenshots / Videos
+      description: If applicable, add screenshots or videos to help explain your problem
+      placeholder: Drag and drop images/videos here or paste URLs
+
+  - id: browseros-version
+    type: input
+    attributes:
+      label: BrowserOS Version
+      description: Which version of BrowserOS are you using? (Find it in `chrome://settings/help`)
+      placeholder: e.g., 137.0.7212.69
+
+  - id: additional-context
+    type: textarea
+    attributes:
+      label: Additional Context
+      description: Add any other context about the problem here (logs, error messages, etc.)
+      placeholder: Paste error messages, logs, or any other relevant information...

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,14 @@
+blank_issues_enabled: false
+contact_links:
+  - name: 💬 Discord
+    url: https://discord.gg/YKwjt5vuKr
+    about: Join our Discord for help and discussions!
+  - name: 💼 Slack
+    url: https://dub.sh/browserOS-slack
+    about: Join our Slack for help and queries!
+  - name: 💡 Feature Requests
+    url: https://github.com/browseros-ai/BrowserOS/issues/99
+    about: Have an idea? Share it here and vote on others
+  - name: 📚 Documentation
+    url: https://docs.browseros.com/
+    about: Find setup guides and learn how to use BrowserOS

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,22 @@
+---
+name: Feature request
+about: Suggest a new feature or enhancement for BrowserOS
+title: '[Feature Request] '
+labels: enhancement
+assignees: ''
+---
+
+What problem does this solve? (describe the problem you're experiencing)
+* 
+
+How are you working around this today? (your current solution or workaround)
+* 
+
+What's your proposed solution? (how should BrowserOS address this?)
+* 
+
+Additional context (optional - add screenshots, examples, or other helpful details)
+* 
+
+---
+Thanks for sharing your idea! We love hearing how we can make BrowserOS better. ✨

.github/SECURITY.md

@@ -0,0 +1,19 @@
+## Reporting Security Issues
+
+If you believe you have found a security vulnerability in BrowserOS, please report it through coordinated disclosure.
+
+**Please do not report security vulnerabilities through the repository issues, discussions, or pull requests.**
+
+Instead, please open a new [Github security advisory](https://github.com/browseros-ai/BrowserOS/security/advisories/new).
+
+Please include as much of the information listed below as you can to help me better understand and resolve the issue:
+
+* The type of issue (e.g., buffer overflow, SQL injection, or cross-site scripting)
+* Full paths of source file(s) related to the manifestation of the issue
+* The location of the affected source code (tag/branch/commit or direct URL)
+* Any special configuration required to reproduce the issue
+* Step-by-step instructions to reproduce the issue
+* Proof-of-concept or exploit code (if possible)
+* Impact of the issue, including how an attacker might exploit the issue
+
+This information will help us triage your report more quickly.

.github/workflows/cla.yml

@@ -0,0 +1,59 @@
+name: 'CLA Assistant'
+on:
+  issue_comment:
+    types: [created]
+  pull_request_target:
+    types: [opened, closed, synchronize]
+
+# Explicitly configure permissions
+permissions:
+  actions: write
+  contents: write
+  pull-requests: write
+  statuses: write
+
+jobs:
+  CLAAssistant:
+    runs-on: ubuntu-latest
+    steps:
+      - name: 'CLA Assistant'
+        if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target'
+        uses: contributor-assistant/[email protected]
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          # Path where signatures will be stored
+          path-to-signatures: 'signatures/version1/cla.json'
+
+          # Path to your CLA document
+          path-to-document: 'https://github.com/browseros-ai/BrowserOS/blob/main/CLA.md'
+
+          # Branch to store signatures (should not be protected)
+          branch: 'main'
+
+          # Allowlist for users who don't need to sign (bots, core team members)
+          allowlist: shadowfax92,felarof99,dependabot[bot],renovate[bot],github-actions[bot]
+
+          # Optional: Custom messages
+          custom-notsigned-prcomment: |
+            **CLA Assistant Lite bot** Thank you for your submission! We require contributors to sign our [Contributor License Agreement](https://github.com/browseros-ai/BrowserOS/blob/main/CLA.md) before we can accept your contribution.
+
+            By signing the CLA, you confirm that:
+            - You have read and agree to the AGPL-3.0 license terms
+            - Your contribution is your original work
+            - You grant us the rights to use your contribution under the AGPL-3.0 license
+
+            **To sign the CLA, please comment on this PR with:**
+            `I have read the CLA Document and I hereby sign the CLA`
+
+          custom-pr-sign-comment: 'I have read the CLA Document and I hereby sign the CLA'
+
+          custom-allsigned-prcomment: |
+            **CLA Assistant Lite bot** ✅ All contributors have signed the CLA. Thank you for helping make BrowserOS better!
+
+          # Lock PR after merge to prevent signature tampering
+          lock-pullrequest-aftermerge: true
+
+          # Custom commit messages
+          create-file-commit-message: 'docs: Create CLA signatures file'
+          signed-commit-message: 'docs: $contributorName signed the CLA in $owner/$repo#$pullRequestNo'

.github/workflows/top-issues.yml

@@ -0,0 +1,88 @@
+name: Top Issues and Features by Votes
+
+on:
+  schedule:
+    - cron: "0 * * * *"  # Run every hour
+  workflow_dispatch:  # Allow manual triggering
+
+permissions:
+  issues: write
+  contents: read
+
+jobs:
+  update-top-issues:
+    runs-on: ubuntu-latest
+    if: github.repository == 'browseros-ai/BrowserOS'
+
+    steps:
+      - name: Update top issues list
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          ISSUE_NUMBER: 169
+        run: |
+          #!/bin/bash
+          set -e
+
+          echo "Fetching all open issues..."
+
+          # Fetch all open issues with reaction data
+          issues=$(gh api graphql -f query='
+            query($owner: String!, $repo: String!) {
+              repository(owner: $owner, name: $repo) {
+                issues(first: 100, states: OPEN, orderBy: {field: CREATED_AT, direction: DESC}) {
+                  nodes {
+                    number
+                    title
+                    url
+                    reactions(content: THUMBS_UP) {
+                      totalCount
+                    }
+                  }
+                }
+              }
+            }
+          ' -f owner='browseros-ai' -f repo='BrowserOS')
+
+          # Parse and sort issues by thumbs up count
+          sorted_issues=$(echo "$issues" | jq -r --arg ISSUE_NUMBER "$ISSUE_NUMBER" '
+            .data.repository.issues.nodes
+            | map(select(.number != ($ISSUE_NUMBER | tonumber)))
+            | sort_by(-.reactions.totalCount)
+            | to_entries
+            | map("\(.key + 1). [\(.value.title)](\(.value.url)) - \(.value.reactions.totalCount) 👍")
+            | join("\n")
+          ')
+
+          # Create issue body
+          current_time=$(date -u +"%Y-%m-%d %H:%M:%S UTC")
+
+          {
+            echo "# 👍 Top Issues and Features by Votes"
+            echo ""
+            echo "This list is automatically updated every hour based on 👍 reactions."
+            echo ""
+            echo "## How to Use This List"
+            echo ""
+            echo "**👍 Upvote features you want** - Items with more votes get prioritized."
+            echo ""
+            echo "**Don't see what you need?** Create a new [feature request](https://github.com/browseros-ai/BrowserOS/issues/new) or [bug report](https://github.com/browseros-ai/BrowserOS/issues/new)."
+            echo ""
+            echo "Thank you for helping us prioritize!"
+            echo ""
+            echo "**Last updated:** $current_time"
+            echo ""
+            echo "## Top Issues"
+            echo ""
+            echo "$sorted_issues"
+            echo ""
+            echo "---"
+            echo "🤖 *This issue is automatically updated by [GitHub Actions](.github/workflows/top-issues.yml)*"
+          } > /tmp/issue_body.md
+
+          # Update the tracking issue
+          echo "Updating issue #$ISSUE_NUMBER..."
+          gh issue edit "$ISSUE_NUMBER" \
+            --repo browseros-ai/BrowserOS \
+            --body-file /tmp/issue_body.md
+
+          echo "✅ Successfully updated top issues list!"

.github/workflows/update-agent-submodule.yml

@@ -0,0 +1,41 @@
+name: Update Agent Submodule
+
+on:
+  schedule:
+    # Run every hour
+    - cron: "0 * * * *"
+  # Allow manual triggering for testing
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+concurrency:
+  group: submodule-update
+  cancel-in-progress: false
+
+jobs:
+  update-submodule:
+    runs-on: ubuntu-latest
+    # Only run on the main repository, not on forks
+    if: github.repository == 'browseros-ai/BrowserOS'
+
+    steps:
+      - name: Checkout repository with submodules
+        uses: actions/checkout@v4
+        with:
+          submodules: true
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Configure git
+        run: |
+          git config user.name "Felarof"
+          git config user.email "[email protected]"
+
+      - name: Update agent submodule
+        run: |
+          bash scripts/update-submodule.sh main
+
+      - name: Push changes
+        run: |
+          git push origin main

.gitignore

@@ -1,7 +1,20 @@
 **/.DS_Store
 .gcs_entries
-build/
-dmg/
-scripts/__pycache__/
-scripts/patches/__pycache__/
-releases/
+**/dmg
+**/env
+**/logs
+**/old-scripts
+
+# Python
+**/__pycache__/
+**/*.pyc
+**/*.pyo
+**/*.egg-info/
+**/*.egg
+**/.pytest_cache/
+**/dist/
+**/releases/
+
+nxtscape-cli-access.json
+gclient.json
+.env

.gitmodules

@@ -0,0 +1,4 @@
+[submodule "packages/browseros-agent"]
+	path = packages/browseros-agent
+	url = https://github.com/browseros-ai/BrowserOS-agent.git
+	branch = main