# agent-boss

> حوّل فرق الوكلاء إلى نظام يمكنك قيادته. / Turn agent teams into a system you can lead.

منتج B2B أفقي عالمي لقيادة فرق الوكلاء، عربي أولًا وإنجليزي كامل. السطر أعلاه ادعاء محكوم مصنّف «معاينة تقنية» ومرتبط بالقدرة orchestration.agent-runtime، لا ادعاء إتاحة.
A horizontal, global B2B product for leading agent teams, Arabic-first with a full English experience. The line above is a governed claim carrying the technical_preview disclosure and bound to capability orchestration.agent-runtime; it is not an availability claim.

الحدّ في سطر واحد: إطلاق خاص بالدعوة · لا تسجيل ذاتي · لا checkout ولا فوترة حية (commercial.billing حالتها planned) · لا تكامل خارجي مفعّل (integrations.external-connectors حالتها planned) · لا تنفيذ حي للوكيل لدى عميل · لا ادعاء إقامة بيانات سعودية ولا امتثال · المتاح فعلًا: identity.oidc · acquisition.demo-intake.
The boundary in one line: private launch by invitation · no self-service signup · no checkout and no live billing (commercial.billing is planned) · no activated external connector (integrations.external-connectors is planned) · no live customer agent execution · no Saudi data-residency or compliance claim · actually available: identity.oidc · acquisition.demo-intake.

## الحالة / Status

- الإطلاق خاص بالدعوة، ولا يوجد تسجيل ذاتي عام.
- The launch is private and by invitation. There is no public self-service signup.
- لا يوجد checkout ذاتي. الشراء خلال الإطلاق الخاص بأمر خدمة موقّع وفاتورة مسبقة الدفع.
- There is no self-service checkout. Purchase during the private launch is by signed service order and prepaid invoice.
- وصول العميل والتنفيذ الحي للوكيل عبر مزود النماذج يبقيان مغلقين حتى قبول أدلة الإنتاج الخارجية.
- Customer access and live agent execution through a model provider remain closed until external production evidence is accepted.
- سلطة الإنتاج هي وافي في السعودية، وقاعدة البيانات المرجعية PostgreSQL، ودور Cloudflare تنسيق حافة فقط ويُمنع أن يكون المخزن الأساسي للبيانات الشخصية.
- Production authority is Wafi in Saudi Arabia, the authoritative database is PostgreSQL, and the Cloudflare role is edge coordination only; it is forbidden as the primary personal-data store.
- الموقع العام حيّ على Cloudflare عبر Next.js/OpenNext ويتكوّن من 10 مسارات عامة: العربية على المسار الجذر والإنجليزية تحت /en.
- The public site is live on Cloudflare through Next.js/OpenNext and consists of 10 public paths: Arabic at the bare path and English under /en.
- المُصدِر المستقل للهوية حيّ على https://auth.agent-boss.io/realms/agent-boss مع مستند اكتشاف ومسار Authorization Code + PKCE. هذه الحالة لا تدّعي جاهزية مسار الجلسة أو تهيئة مساحة العمل.
- The independent identity issuer is live at https://auth.agent-boss.io/realms/agent-boss with a discovery document and an Authorization Code + PKCE initiation path. This status does not claim that the application session or workspace provisioning path is production-ready.
- حالة كل قدرة معلنة في سجل قدرات machine-readable، ولا تنتقل قدرة إلى available دون كود واختبارات آلية ومسار حي موثق.
- Every capability status is declared in a machine-readable registry, and a capability does not become available without code, automated tests, and a documented live path.
- التطبيق المحمي وواجهة API ومسارات الدخول ليست جزءًا من السطح العام ولا تُفهرس.
- The authenticated application, the API, and the auth routes are not part of the public surface and are not indexed.

## الصفحات / Pages

- [agent-boss — قيادة فرق الوكلاء](https://agent-boss.io/index.html.md): حوّل فرق الوكلاء إلى نظام يمكنك قيادته، مع رؤية وموافقات وحدود تشغيل واضحة.
- [agent-boss — Lead agent teams](https://agent-boss.io/en/index.html.md): Turn agent teams into a system you can lead, with visibility, approvals, and explicit operating boundaries.
- [المنصة](https://agent-boss.io/platform/index.html.md): تعرف على cockpit القيادة ومسارات التشغيل والموافقة والتكلفة في Agent Boss. معاينة تقنية لمسارات الموافقة البشرية قبل الأفعال الحساسة. معاينة تقنية لحدود الاستهلاك والتكلفة لكل تشغيل.
- [Platform](https://agent-boss.io/en/platform/index.html.md): Explore the Agent Boss command cockpit, runs, traces, approvals, and cost views. Technical preview of human approval paths before sensitive actions. Technical preview of usage and cost boundaries for each run.
- [حالات الاستخدام](https://agent-boss.io/use-cases/index.html.md): أنماط قيادة للوكلاء في خدمة العملاء والمحتوى والوكالات والموارد البشرية.
- [Use cases](https://agent-boss.io/en/use-cases/index.html.md): Leadership patterns for customer operations, content, agencies, and people operations.
- [الأمن والحوكمة](https://agent-boss.io/security-governance/index.html.md): مبادئ الصلاحيات والموافقة والتدقيق وحقيقة القدرات في Agent Boss. معاينة تقنية لمسارات الموافقة البشرية قبل الأفعال الحساسة.
- [Security and governance](https://agent-boss.io/en/security-governance/index.html.md): Least privilege, human approval, traceability, and evidence-backed capability claims. Technical preview of human approval paths before sensitive actions.
- [الموارد](https://agent-boss.io/resources/index.html.md): سجل القدرات ونموذج التشغيل ومواد الإطلاق الخاصة بـAgent Boss. معاينة تقنية لمسارات الموافقة البشرية قبل الأفعال الحساسة. معاينة تقنية لحدود الاستهلاك والتكلفة لكل تشغيل.
- [Resources](https://agent-boss.io/en/resources/index.html.md): Capability truth, the operating model, and private-launch decision material. Technical preview of human approval paths before sensitive actions. Technical preview of usage and cost boundaries for each run.
- [Starter — السعر والنطاق](https://agent-boss.io/pricing/index.html.md): عرض Starter للإطلاق الخاص، شامل السعر والضريبة والنطاق وطريقة التعاقد اليدوي.
- [Starter — pricing and scope](https://agent-boss.io/en/pricing/index.html.md): The private-launch Starter offer, including price, VAT, scope, and manual contracting path.
- [الدعم والتواصل](https://agent-boss.io/support/index.html.md): قناة الدعم والمبيعات والخصوصية والأمن الرسمية لـAgent Boss.
- [Support and contact](https://agent-boss.io/en/support/index.html.md): The official Agent Boss channel for support, sales, privacy, and security.
- [طلب عرض خاص](https://agent-boss.io/demo/index.html.md): اطلب عرض Agent Boss مخصصًا لمسار تشغيل واحد في فريقك. استقبال طلبات العرض متاح؛ التحقق والتأهيل والتفعيل التجاري مراحل مستقلة ومحكومة.
- [Request a private demo](https://agent-boss.io/en/demo/index.html.md): Request an Agent Boss demo focused on one operating path in your team. Demo intake is available; verification, qualification, and commercial activation remain separate governed stages.
- [سياسة الخصوصية](https://agent-boss.io/privacy/index.html.md): سياسة خصوصية Agent Boss وبيانات المشغّل وأغراض المعالجة والاحتفاظ وحقوق أصحاب البيانات.
- [Privacy policy](https://agent-boss.io/en/privacy/index.html.md): Agent Boss privacy policy, operator details, processing purposes, retention, and data-subject rights.
- [الشروط والأحكام](https://agent-boss.io/terms/index.html.md): الشروط النافذة لاستخدام Agent Boss والتعاقد على خدمته في الإطلاق الخاص.
- [Terms and conditions](https://agent-boss.io/en/terms/index.html.md): Effective terms for using and purchasing Agent Boss during the private launch.

## القدرات وحالاتها / Capabilities and statuses

الحالات المعلنة، ولا حالة غيرها / The declared statuses, and no others: available · technical_preview · launching · planned · requires_confirmation

كل ملخص يُنشر كاملًا. الجملة الأخيرة في كل ملخص هي حدّ الادعاء، لا حاشية.
Every summary is published whole. The closing sentence of each summary is the claim boundary, not a footnote.

- `identity.oidc` — available — The independent Agent Boss OIDC issuer, discovery document, and Authorization Code + PKCE initiation path are live through auth.agent-boss.io. This status does not claim that the application callback, session, or workspace provisioning path is production-ready.
- `identity.application-session` — technical_preview — The Wafi callback, PostgreSQL-backed application-session exchange, signed safe projection, and same-origin Cloudflare BFF path are implemented and internally tested. Live Wafi activation and independent release evidence are still required before customer access can be enabled.
- `identity.workspace-provisioning` — technical_preview — The existing JIT workspace workflow is a Cloudflare-native technical preview that depends on D1, KV, Workflows, Vectorize, Queues, ab-shield, and the legacy quota counter. It must not provision production Agent Boss customers.
- `identity.wafi-workspace-provisioning` — technical_preview — Wafi workspace creation, membership persistence, invitation handling, and bounded PostgreSQL procedures are implemented and internally tested. The path remains unavailable to customers until live activation and independent verification succeed.
- `identity.workspace-authorization` — technical_preview — Wafi/PostgreSQL now enforces workspace-scoped roles, membership checks, session workspace switching, and owner/admin/member/viewer authorization in the private API. It remains an internally verified preview until live deployment evidence is independently accepted.
- `platform.application-cockpit` — technical_preview — The private application now presents one formal bilingual cockpit system for agents, encrypted workspace knowledge, conversations, run results with immutable execution steps, usage, memberships, integrations, and billing read models through the hardened Wafi same-origin BFF. Every status, capability, grouping, and conservative cost settlement comes from a governed server projection; a 202 response remains queued rather than completed AI work. It remains a technical preview until external production verification and enabled-stage evidence are accepted.
- `orchestration.agent-runtime` — technical_preview — The existing Cloudflare-native runtime is a non-production technical preview; production execution is assigned to Wafi and is not built in this launch scope.
- `orchestration.wafi-runtime` — technical_preview — The isolated Wafi/PostgreSQL runtime now supports one governed local read-only tool, kb.search, over encrypted workspace knowledge. A run may make one bounded decision call, execute at most one deterministic local search, and make one final model call with explicitly untrusted matches; recursion, write tools, provider-side execution, and per-call double settlement remain forbidden. Immutable steps expose safe operational evidence without storing prompts, queries, knowledge plaintext, or model output. Customer execution remains disabled until external live evidence is accepted.
- `platform.cloudflare-ai-gateway` — technical_preview — The single-purpose Cloudflare AI Gateway broker and bounded AI Run client support a pinned decision phase that may return only one kb.search request and a final phase in which tools are omitted. Tool execution remains local and read-only on Wafi; usage from both model calls is aggregated while the run reservation settles once. The pinned Workers AI route and encrypted credential passed a bounded live probe from Wafi, but the expanded create-to-terminal path remains unverified until the production service release completes.
- `governance.approvals` — technical_preview — Human approval queue has a Wafi/PostgreSQL private API and authenticated cockpit surface, while runtime-generated approvals remain private-preview only.
- `governance.cost-controls` — technical_preview — Quota and prepaid accounting controls are tested internally and are not yet a public billing product.
- `catalog.agent-templates` — technical_preview — Eleven governed agent kits are available to the private builder through a permission-gated Wafi projection and strict same-origin BFF. Template provenance, domain/workflow binding, encrypted first-version packaging, and system-versus-tenant message separation are machine-checked. Provider tools and customer access remain inactive.
- `acquisition.demo-intake` — available — Public bilingual demo intake is available through the dedicated Agent Boss edge and Wafi API with Turnstile verification, PostgreSQL persistence, bounded retention, and root-only qualification. External email and Telegram delivery remains a separate disabled stage; accepted requests persist without contacting an external party.
- `acquisition.pseo-catalog` — technical_preview — A deterministic 640-page bilingual pSEO catalog and PII-free one-percent conversion measurement contract are implemented and locally tested. Catalog generation is hold-only: all pages remain noindex and no ingest messages can be emitted until a separate governed release-evidence command is implemented and independently approved.
- `acquisition.deterministic-harvest` — technical_preview — The shared harvest contract is implemented and machine-checked, and the classified edge worker that executes it exists. One closed report schema describes a single organization: inferred identity that must declare whether each value was extracted or drafted, crawled sources carrying a link, a fetch time and a content hash, an extracted policy ledger whose every clause keeps its source and locator, detected contradictions, and cards. A separate human-reviewed question-set contract covers four agent kits with deterministic matching rules, and the gate pins every named tool to tool-governance.json and every named workflow to platform/agents. A decision card cannot be expressed without a verbatim quote, a cited policy clause and a dated trigger; the gate proves this by rejecting fifteen forbidden report shapes. The contract also pins zero model calls, a respected robots.txt and an explicit ownership assertion. ab-harvest implements it: it vets the seed link against an explicit SSRF policy before its first request, reads the origin robots.txt before any document, crawls under a clamped page, time, byte and rate budget, holds no storage binding, and refuses its own report when a citation does not resolve. It has never fetched a real hostname: every run to date is driven by an injected fetcher over saved fixtures. It carries no route, no workers_dev hostname and no preview URL, so nothing here reaches a customer.
- `acquisition.public-report` — technical_preview — The public report surface is implemented against its input contract and serves no report to anyone. The schema defines what one report page may present: every card carries a verbatim quote, a source link with its fetch time, a cited policy-ledger clause, a dated trigger, a reversibility statement and an extracted-versus-drafted provenance chip, while any card short of that grounding is expressible only as unsupported with a declared reason. Coverage of every governed question is mandatory, so silence about a question is not representable. The contract pins execution_claim to no-agent-run-occurred, so no rendering of it may present a harvest as a completed agent run, and the Arabic and English pages derive that chip from the report rather than asserting it. The reader fails closed: a card missing a quote, a basis or a dated trigger, a tool claiming an approval degree it does not hold, or a citation that does not resolve drops the whole read to a classified fault state instead of a thinner report. No report is served: the production repository selector throws, the composed fixture is refused outside development, and no slug has ever been allocated. The surface is scoped inside the acquisition perimeter rather than the private application cockpit.
- `integrations.external-connectors` — planned — A provider-neutral lifecycle foundation plus disabled, host-pinned WhatsApp Cloud, Salla, and Zid adapters are implemented and locally tested. They are not registered in the application, no customer configuration route is enabled, and Zid webhooks remain fail-closed without a documented cryptographic signature contract.
- `commercial.billing` — planned — An owner-approved Starter offer, effective bilingual terms, support route, first-sale service-order path, provider-neutral manual-contract authority, and disabled token-only Moyasar client/webhook verifier are implemented. Moyasar is not registered; checkout, live settlement, and customer self-service remain disabled.
- `deployment.self-hosting` — requires_confirmation — No self-hosting offer is approved or evidenced.
- `compliance.saudi-data-residency` — requires_confirmation — No Saudi data-residency claim is approved or evidenced.

## العرض التجاري / Commercial offer

- خطة Starter منشورة بسعرها: 690 SAR شهريًا قبل ضريبة القيمة المضافة، و793.5 SAR شاملة ضريبة 15 بالمئة، وتشمل 3 وكلاء نشطين و5,000,000 توكن شهريًا، والتجاوز مسبق الدفع فقط.
- The Starter plan publishes its price: 690 SAR per month before VAT, 793.5 SAR including 15 percent VAT, covering 3 active agents and 5,000,000 monthly tokens, with prepaid-only overage.
- نشر السعر ليس فوترة عاملة: قدرة commercial.billing حالتها planned، ولا يوجد checkout ذاتي، ولا يبدأ تفعيل العميل قبل إغلاق كل بوابات الإطلاق وتوثيق الدفع.
- A published price is not working billing: capability commercial.billing is planned, there is no self-service checkout, and customer activation does not begin before every launch gate is closed and payment is evidenced.

## ما لا ندّعيه / What we do not claim

- لا تسجيل ذاتي ولا وصول عملاء مفعّل.
- No self-service signup and no enabled customer access.
- لا فوترة حية ولا checkout ذاتي؛ commercial.billing حالتها planned.
- No live billing and no self-service checkout; commercial.billing is planned.
- لا تكامل خارجي مفعّل؛ integrations.external-connectors حالتها planned، والمحوّلات غير مسجّلة ومسار الإعداد معطّل.
- No activated external connector; integrations.external-connectors is planned, the adapters are unregistered, and the configuration route is disabled.
- لا تنفيذ حي للوكيل لدى عميل. نجح فحص اتصال للمعاينة التقنية على مسار Workers AI المثبّت عبر البوابة، لكن إثبات الاتصال لا يفتح التنفيذ للعملاء.
- No live customer agent execution. A technical-preview connectivity probe succeeded on the pinned Workers AI route through the gateway, but connectivity evidence does not enable customer execution.
- لا ادعاء إقامة بيانات داخل السعودية ولا ادعاء امتثال؛ compliance.saudi-data-residency تحتاج تأكيدًا وأدلة مستقلة، والحوسبة السعودية وحدها لا تثبت إقامة البيانات من طرف إلى طرف.
- No Saudi data-residency claim and no compliance claim; compliance.saudi-data-residency requires confirmation and independent evidence, and Saudi-hosted compute alone does not prove end-to-end residency.
- لا عرض استضافة ذاتية؛ deployment.self-hosting تحتاج تأكيدًا ولا دليل لها.
- No self-hosting offer; deployment.self-hosting requires confirmation and carries no evidence.
- لا التزام توافر أو زمن استجابة أو SLA إلا إذا نص عليه أمر خدمة موقّع، وادعاء التوافر العالي على مضيف واحد ممنوع بالعقد.
- No uptime, response-time, or SLA commitment unless a signed service order states one; a single-host high-availability claim is forbidden by contract.
- لا موقع توثيق منشور بعد، لذلك لا يذكر هذا الملف رابط توثيق.
- No documentation site is published yet, so this file deliberately lists no documentation link.

## التواصل / Contact

- support@wdeftksa.com — قناة الدعم والمبيعات والخصوصية والأمن، بالعربية والإنجليزية.
- support@wdeftksa.com — the support, sales, privacy, and security channel in Arabic and English.
- المشغّل القانوني: مكتب علينا للخدمات الإلكترونية، بتصريح وزارة التجارة رقم 7032383478، المملكة العربية السعودية.
- Legal operator: Alayna Electronic Services Office, Saudi Ministry of Commerce permit 7032383478, Kingdom of Saudi Arabia.
- سياسة الخصوصية سارية من 2026-07-26، والشروط نافذة من 2026-07-26 بالإصدار 2026-07-26.
- The privacy policy is effective from 2026-07-26, and the terms are effective from 2026-07-26 at version 2026-07-26.

آخر مراجعة / Last reviewed: 2026-08-21