Feat/tui workflow implementation

README.md

@@ -21,11 +21,18 @@ It profiles application repositories, runs registered deterministic security too
 npm install
 npm run build
 npm run dev -- init
+npm run dev
 npm run dev -- audit .
 ```
 
 By default, LLM runtimes are disabled and scanner tools are detected from your local `PATH`. Enable runtimes in `.secflow/config.yaml` and pass `--approve-context` when you want a curated, redacted context package sent to a configured provider or local agent CLI.
 
+Running `npm run dev` launches the interactive TUI audit wizard. It walks through target selection, preflight checks, live audit progress, optional LLM context approval, and results/report review.
+
+## WSL Terminal Note
+
+When running the TUI in WSL through Windows Terminal, there is a known unresolved issue where terminal input mode can remain in an odd state after exit. SecFlow attempts to reset the known modes on shutdown, but this does not fully resolve the issue in all WSL setups. If arrow keys start printing raw sequences or input behaves strangely, open a new terminal tab.
+
 ## Commands
 
 ```bash

package.json

@@ -25,13 +25,17 @@
     "commander": "^14.0.2",
     "execa": "^9.6.0",
     "ink": "^6.5.0",
+    "ink-select-input": "^6.2.0",
+    "ink-spinner": "^5.0.0",
+    "ink-text-input": "^6.0.0",
     "react": "^19.2.0",
     "yaml": "^2.8.1",
     "zod": "^4.1.12"
   },
   "devDependencies": {
     "@types/node": "^24.10.1",
     "@types/react": "^19.2.6",
+    "ink-testing-library": "^4.0.0",
     "tsx": "^4.20.6",
     "typescript": "^5.9.3",
     "vitest": "^4.0.13"