@praneeth_54/agentdoctor 1.1.0 → 2.0.0

package/README.md

@@ -1,436 +1,269 @@
 # AgentDoctor
 
+**Codebase intelligence for developers, agents, and engineering teams.**
+
+Local-first tooling that helps you understand a repository, keep AI coding agents safer, and query evidence-backed project knowledge — without requiring a cloud account or API key.
+
 [![npm](https://img.shields.io/npm/v/@praneeth_54/agentdoctor?label=npm)](https://www.npmjs.com/package/@praneeth_54/agentdoctor)
-[![npm downloads](https://img.shields.io/npm/dm/@praneeth_54/agentdoctor)](https://www.npmjs.com/package/@praneeth_54/agentdoctor)
-[![CI](https://img.shields.io/github/actions/workflow/status/pranee54/AgentDoctor/ci.yml?branch=main&label=CI)](https://github.com/pranee54/AgentDoctor/actions)
+[![CI](https://img.shields.io/github/actions/workflow/status/pranee54/AgentDoctor/ci.yml?branch=main&label=CI)](https://github.com/pranee54/AgentDoctor/actions/workflows/ci.yml)
 [![Node](https://img.shields.io/node/v/@praneeth_54/agentdoctor)](https://nodejs.org)
 [![License](https://img.shields.io/github/license/pranee54/AgentDoctor)](LICENSE)
 
-**Lighthouse for AI coding agents.**
-
-Audit coding-agent configuration before it becomes a repository problem.
-
-AgentDoctor is a local CLI that inspects project-level AI coding agent setup — Cursor, Claude Code, and Codex — for security, instructions, context, and MCP configuration. Deterministic static analysis. No API key. No code upload by default.
-
-```bash
-npx @praneeth_54/agentdoctor
-```
+**Published package:** `@praneeth_54/agentdoctor@`**2.0.0**
 
-Public release track: Safety V1 (`1.0.0`) plus Project Brain MCP for agents (`1.1.0`).
-Scan → Fix → Verify → CI remains the Safety contract. Brain MCP helps agents understand
-what is in a repository, what can be trusted, and why — not a generic coding assistant.
+[Documentation index](docs/README.md) · [AgentDoctor 2.0 docs](docs/2.0/README.md) · [Known limitations](docs/2.0/overview/known-limitations.md) · [Readiness matrix](docs/2.0/overview/readiness-matrix.md) · [Security](SECURITY.md) · [Changelog](CHANGELOG.md)
 
 ---
 
-## What you get
-
-![AgentDoctor scanning a repository and reporting coding-agent security findings](docs/images/cli-scan.png)
-
-_Real scan of the included `insecure-agent-project` fixture using AgentDoctor v1.0.0._
-
-```text
-$ npx @praneeth_54/agentdoctor
-
-🩺 AgentDoctor v1.0.0
-
-Scanning repository...
+## What AgentDoctor does
 
-Repository
-  Framework: Node.js
-  Language: JavaScript
-  Package manager: npm
-  Files scanned: 7
+AgentDoctor combines three complementary layers:
 
-AI Coding Agents
+1. **Safety** — audit and safely fix AI coding-agent configuration (scan → fix → verify → policy → CI).
+2. **Repository Brain** — evidence-backed claims, proposals, human review, and Project Brain MCP tools.
+3. **Codebase intelligence** — TypeScript/JavaScript AST graphs, git hotspots, impact analysis, knowledge governance, evaluate-only policy, and a combined MCP server.
 
-✓ Cursor       configured
-✓ Claude Code  configured
-✓ Codex        configured
+It is **not** an autonomous coding agent, chatbot, or IDE process interceptor. It does **not** block Cursor/Claude/Codex unless you deliberately run commands through AgentDoctor’s controlled runner.
 
-Findings
-
-CRITICAL
-
-  ✗ Sensitive environment file may enter agent context
-    .env
-    Affected: Claude Code, Codex
-    Fix: Add an agent-specific exclusion (for example .cursorignore or a
-         Claude Code Read deny rule), keep the file out of version control,
-         and rotate any credentials that may have been exposed.
-
-  ✗ Private key or credential file present in repository
-    test-private-key.pem
-    Affected: Claude Code, Codex, Cursor
-
-WARNING
-
-  ! Claude Code bypassPermissions mode enabled
-    .claude/settings.json
-
-Summary
+---
 
-  3 critical
-  1 warning
-  0 info
+## Install
 
-  Readiness: 13/100
-  Category and agent scores: agentdoctor scan --json
+```bash
+npm install -g @praneeth_54/agentdoctor
+# or
+npx @praneeth_54/agentdoctor --help
 ```
 
-Abbreviated text example from the same fixture for accessibility and search. Secret values are never printed. Re-run the scan if counts change.
+Requires **Node.js 20+**. The runtime depends on the TypeScript compiler API for AST analysis.
 
 ---
 
-## Why AgentDoctor?
-
-Repositories accumulate agent configuration quickly:
-
-- Multiple instruction formats (`.cursor/rules`, `CLAUDE.md`, `AGENTS.md`)
-- Stale path references in always-on instructions
-- Ignore differences between `.gitignore`, `.cursorignore`, and agent defaults
-- MCP filesystem scopes that are broader than intended
-- Generated directories and large logs that waste context
-- Credential-like files that may be readable by agents
-- Conflicting assumptions about what each agent can see
-
-Manually reviewing all of that across Cursor, Claude Code, and Codex is slow and inconsistent. AgentDoctor provides one deterministic local audit with stable rule IDs, evidence paths, and affected-agent information.
-
-| Analogy         | Domain                           |
-| --------------- | -------------------------------- |
-| Lighthouse      | Web pages                        |
-| `npm audit`     | Dependencies                     |
-| ESLint          | Source code                      |
-| **AgentDoctor** | **AI coding agent environments** |
+## Quick start
 
-AgentDoctor analyzes configuration. It does not run agents or call an LLM. `agentdoctor fix` may append safe context exclusions (Cursor `.cursorignore`, Claude Code Read deny rules, and Codex filesystem deny keys); it does not rewrite secrets, credentials, or security modes such as `bypassPermissions`.
+```bash
+# Safety loop
+agentdoctor scan
+agentdoctor fix --dry-run
+agentdoctor verify --baseline agentdoctor-report.json
+
+# Repository Brain proposals (never auto-approved)
+agentdoctor init --name "My App" --domain "payments"
+agentdoctor brain proposals
+agentdoctor brain review --artifact <id> --decision approved
+
+# Intelligence
+agentdoctor graph --mode auto --json
+agentdoctor health --json
+agentdoctor c4 --json
+agentdoctor impact --json
+agentdoctor refactor-impact --symbol MySymbol --json
+
+# Knowledge (draft → human approve)
+agentdoctor knowledge-create --title "Standard" --content "…"
+agentdoctor knowledge-approve --id <id> --decision approved
+
+# Policy (evaluate-only by default)
+agentdoctor enforce --command "npm test" --json
+
+# MCP (Brain tools preserved; combined server adds intelligence tools)
+agentdoctor brain-mcp --root /ABS/PATH/TO/REPO
+agentdoctor mcp --root /ABS/PATH/TO/REPO
+
+# Local dashboard (loopback)
+agentdoctor dashboard
+```
 
 ---
 
-## Before / after
+## Capability status (honest)
 
-**Before**
+Classifications match [docs/2.0/overview/readiness-matrix.md](docs/2.0/overview/readiness-matrix.md). **No blanket 5/5 claims.**
 
-A repository may contain:
+### Fully verified (shipped & regression-tested core)
 
-```text
-.cursor/rules/
-AGENTS.md
-CLAUDE.md
-.claude/settings.json
-.mcp.json
-.env
-```
+| Capability                                                                        | Notes                                                      |
+| --------------------------------------------------------------------------------- | ---------------------------------------------------------- |
+| Safety scan / Safe Fix / verify / policy gates                                    | Exit codes and CI Action preserved                         |
+| Agent adapters (Cursor, Claude Code, Codex, Copilot, Windsurf, Gemini CLI, Aider) | Detect + rules; Safe Fix where official ignore/deny exists |
+| Project Brain store + Brain MCP tool names (`brain_*`)                            | STDIO MCP; `--root` required                               |
 
-Potential problems stay invisible until something leaks into model context, CI, or a teammate’s agent session:
+### Partially validated (implemented, tested; accuracy/perf not independently certified)
 
-- environment or credential-like files reachable by agents
-- stale instruction path references
-- broad MCP filesystem access
-- oversized always-on context
+| Capability                                      | Entry points                                |
+| ----------------------------------------------- | ------------------------------------------- |
+| Repository Brain init / proposal review         | `init`, `brain review`, `brain proposals`   |
+| TS/JS AST intelligence graph (+ regex fallback) | `graph`                                     |
+| Git hotspots / bus-factor style metrics         | `health` (method disclosed per metric)      |
+| Impact / test-impact / refactor-impact          | `impact`, `test-impact`, `refactor-impact`  |
+| Knowledge governance + abstention               | `knowledge*`; MCP `knowledge_retrieve`      |
+| Policy packs + controlled enforcement runner    | `enforce`, `platform policy-check`          |
+| Combined MCP (`agentdoctor mcp`)                | Brain + intelligence tools                  |
+| Dashboard + `/api/v2/*`                         | `dashboard` (loopback default)              |
+| Local-dev team auth (scrypt)                    | `team-register`, `team-login` — **not SSO** |
 
-**Run**
+### Experimental
 
-```bash
-npx @praneeth_54/agentdoctor
-```
-
-**After**
+| Capability     | Notes                                                                             |
+| -------------- | --------------------------------------------------------------------------------- |
+| C4-style views | `c4` — **inferred/proposed** from graph evidence, not approved architecture truth |
 
-You get deterministic findings with:
+### Unsupported / not claimed
 
-- stable rule IDs (for example `security/env-file-exposure`)
-- evidence paths
-- affected agents when exposure claims are supported
-- conservative recommendations
-- readiness score (`scores.overall` in JSON; overall line in the terminal)
-
-Safe context exclusions (Cursor / Claude Code / Codex) can be applied with `agentdoctor fix`. Security and review findings stay manual — Fix explains why and does not invent unsafe edits.
+| Topic                                            | Status                                             |
+| ------------------------------------------------ | -------------------------------------------------- |
+| Enterprise SSO / IdP                             | Not bundled                                        |
+| Production SQLite / Postgres / vector search     | Flags off / stub only                              |
+| Full multi-language AST (Python, Go, …)          | Unsupported                                        |
+| Direct IDE interception / agent process blocking | Unsupported                                        |
+| Coverage-backed test selection as ground truth   | Not bundled (test-impact is heuristic/graph-based) |
 
 ---
 
-## Quick start
-
-### One-shot (recommended)
-
-```bash
-npx @praneeth_54/agentdoctor
-```
+## Safety (preserved)
 
-Pin a version when you need a fixed install:
+Scan agent configs and repository hygiene; apply Safe Fix where supported; verify against a baseline; fail CI on severity/score gates.
 
 ```bash
-npx @praneeth_54/agentdoctor@1.0.0
+agentdoctor scan --json
+agentdoctor fix -y
+agentdoctor verify --baseline agentdoctor-report.json
 ```
 
-### Global (optional)
-
-```bash
-npm install -g @praneeth_54/agentdoctor
-agentdoctor
-```
-
-### Scan → Fix → Verify
-
-```bash
-# 1. Scan (save a baseline for Verify)
-npx @praneeth_54/agentdoctor scan . --json > agentdoctor-report.json
-
-# 2. Fix safe context exclusions (preview first with --dry-run)
-npx @praneeth_54/agentdoctor fix . --dry-run
-npx @praneeth_54/agentdoctor fix . -y
+GitHub Action: pin `pranee54/AgentDoctor@v2.0.0` (default npm version input is `2.0.0`). Surfaces matrix: [docs/reference/surfaces-and-adapters.md](docs/reference/surfaces-and-adapters.md).
 
-# 3. Verify against the baseline
-npx @praneeth_54/agentdoctor verify . --baseline agentdoctor-report.json
+```yaml
+- uses: pranee54/AgentDoctor@v2.0.0
+  with:
+    path: .
+    version: "2.0.0"
 ```
 
-`fix` writes safe context exclusions for Cursor (`.cursorignore`), Claude Code
-(`permissions.deny` Read rules in `.claude/settings.json`), and Codex (filesystem `deny`
-keys under a permissions profile in `.codex/config.toml`) for findings such as unignored
-`build/` or large logs. Review/manual security findings are listed as skipped — address those
-yourself, then re-run `verify`.
-
-### Common commands
-
-```bash
-agentdoctor .
-agentdoctor scan . --json
-agentdoctor fix . --dry-run
-agentdoctor verify . --ci --baseline agentdoctor-report.json
-agentdoctor explain security/env-file-exposure
-agentdoctor doctor
-```
+---
 
-Package name: `@praneeth_54/agentdoctor` (npm blocks the unscoped name). CLI binary: `agentdoctor`. Requires **Node.js 20+**.
+## Repository Brain
 
-### Programmatic API
+`agentdoctor init` writes **PROPOSED** artifacts under `.agentdoctor/repository-brain/proposals/`. They are **not** facts until a human reviews them.
 
 ```bash
-npm install @praneeth_54/agentdoctor
+agentdoctor brain init
+agentdoctor brain snapshot
+agentdoctor brain review --artifact prop_… --decision approved|rejected
 ```
 
-```ts
-import { scan, verify, buildFixPlan, applyFixPlan } from "@praneeth_54/agentdoctor";
-
-const result = await scan({ cwd: process.cwd() });
-console.log(result.summary);
-console.log(result.scores?.overall);
-console.log(result.agentSecurityAnalysis); // "full" | "limited"
-```
+Guide: [docs/2.0/guides/repository-brain.md](docs/2.0/guides/repository-brain.md).
 
 ---
 
-## Supported agents
+## Codebase intelligence
 
-Project-level configuration only (repository files). Global user settings are not scanned.
+- **AST graph** — TypeScript/JavaScript via the TypeScript compiler API; regex fallback when needed (`graph --mode auto|typescript-ast|regex`).
+- **Git intelligence** — recent-window hotspots / co-change heuristics with method disclosure (`health`).
+- **C4 views** — inferred diagrams (`c4`); label them proposed/inferred.
+- **Impact** — change/test/refactor blast-radius helpers (`impact`, `refactor-impact`).
 
-| Agent           | What AgentDoctor inspects                                              |
-| --------------- | ---------------------------------------------------------------------- |
-| **Cursor**      | `.cursor/rules/*.mdc`, `.cursorignore`, Cursor MCP config, `AGENTS.md` |
-| **Claude Code** | `CLAUDE.md`, `.claude/settings*.json`, `.claude/rules`, MCP config     |
-| **Codex**       | `AGENTS.md` / overrides, project `.codex/` configuration               |
-
-Additional adapters are planned — see [ROADMAP.md](ROADMAP.md).
+Limitations: call resolution is best-effort; non-TS languages are not deeply analyzed.
 
 ---
 
-## Finding categories
-
-| Category         | Examples                                                              |
-| ---------------- | --------------------------------------------------------------------- |
-| **Security**     | Env-file exposure, private-key filenames, broad MCP filesystem scopes |
-| **Context**      | Large instruction files, large logs, unignored generated directories  |
-| **Instructions** | Empty instructions, duplicate content, missing path references        |
-| **MCP**          | Malformed MCP config, high-risk filesystem path arguments             |
+## Knowledge governance
 
-Full catalog with severities and fixability: [docs/rules.md](docs/rules.md).
+Draft → pending-review → approved/rejected. Retrieval **abstains** when no approved record matches.
 
-Explain any rule:
-
-```bash
-npx @praneeth_54/agentdoctor explain security/env-file-exposure
-```
+Guide: [docs/2.0/guides/knowledge-governance.md](docs/2.0/guides/knowledge-governance.md).
 
 ---
 
-## Privacy and trust
-
-**Scans run locally on your machine.**
+## Policy evaluation and controlled enforcement
 
-AgentDoctor:
+| Mode                                                               | Behavior                                                                                  |
+| ------------------------------------------------------------------ | ----------------------------------------------------------------------------------------- |
+| Policy evaluation (`platform policy-check`, MCP `policy_evaluate`) | Verdict only; `executionResult: "not-executed"`                                           |
+| Controlled runner (`enforce`)                                      | Can report `blocked-by-enforcement` when **AgentDoctor** refuses to run a blocked command |
+| Third-party IDEs                                                   | **Not** intercepted                                                                       |
 
-- does not require an API key
-- does not upload repository contents by default
-- does not call an LLM for core scanning
-- does not execute MCP servers
-- does not execute project code
-- never prints secret values from files it flags by name
-- enforces repository boundary checks for path references and symlink escape
-
-This is still software that reads untrusted repository trees. Treat findings as guidance, not a security certification. AgentDoctor is **not** a complete secret-content scanner.
+Trust boundaries: [docs/2.0/overview/trust-boundaries.md](docs/2.0/overview/trust-boundaries.md).
 
 ---
 
-## CI usage
+## MCP
 
-### GitHub Action
+| Command                               | Server     | Tools                      |
+| ------------------------------------- | ---------- | -------------------------- |
+| `agentdoctor brain-mcp --root <path>` | Brain only | Stable `brain_*` names     |
+| `agentdoctor mcp --root <path>`       | Combined   | Brain + intelligence tools |
 
-Run AgentDoctor directly in a workflow:
+MCP docs: [docs/2.0/guides/mcp.md](docs/2.0/guides/mcp.md) · legacy detail: [docs/mcp/brain-mcp.md](docs/mcp/brain-mcp.md).
 
-```yaml
-permissions:
-  contents: read
-
-steps:
-  - uses: actions/checkout@v4
-
-  - name: Audit coding-agent configuration
-    id: agentdoctor
-    uses: pranee54/AgentDoctor@v1.0.0
-    with:
-      path: .
-      version: "1.0.0"
-      output-file: agentdoctor-report.json
-      minimum-score: "70"
-      fail-on-severity: critical
-      summary: "true"
-
-  - name: Upload AgentDoctor report
-    uses: actions/upload-artifact@v4
-    with:
-      name: agentdoctor-report
-      path: ${{ steps.agentdoctor.outputs.report-path }}
-```
-
-Policy inputs: `minimum-score`, `fail-on-severity`, `fail-on-rule`, `fail-on-new`,
-`verify-baseline`, `summary`, `annotations`. The Action stays report-only until you set a
-policy input. The Action default `version` is `1.0.0`. For local CI against this repo, use
-`version: workspace` after `npm run build`. The action installs `@praneeth_54/agentdoctor`,
-runs scan (or `verify` when `verify-baseline` is set) with `--json`, and writes the report
-inside the workspace.
+---
 
-### CLI
+## CLI / API / dashboard
 
-Use JSON directly in other CI systems:
+- CLI index: [docs/2.0/guides/cli.md](docs/2.0/guides/cli.md)
+- HTTP API (local dashboard): [docs/2.0/guides/api.md](docs/2.0/guides/api.md)
+- Dashboard defaults to `127.0.0.1`; `?user=` role selection is **not** authentication
 
 ```bash
-# Report-only (exit 0 even when findings exist; scores still in JSON)
-npx @praneeth_54/agentdoctor --json
-
-# Fail when any critical finding exists
-npx @praneeth_54/agentdoctor --ci --json
-
-# Fail when overall readiness is below 70 (with --ci also fails on criticals)
-npx @praneeth_54/agentdoctor --ci --json --min-score 70
-
-# Fail on warning-or-higher (overrides the default critical gate from --ci)
-npx @praneeth_54/agentdoctor --ci --json --fail-on-severity warning
+agentdoctor dashboard
+agentdoctor doctor --json
 ```
 
-`--ci` fails when any **critical** finding exists. Override the severity floor with
-`--fail-on-severity`, and use `--min-score` / `--fail-on-rule` for additional gates.
-Omit `--ci` for report-only JSON (exit `0` even when findings exist).
-
-Exit codes: [docs/exit-codes.md](docs/exit-codes.md). Compatibility promises: [docs/compatibility.md](docs/compatibility.md).
-
-### Readiness scoring
-
-Scans populate `scoringAvailable: true` and a deterministic `scores` object
-(overall, categories, agents). The terminal prints overall readiness; category and agent
-scores are in JSON (`--json`).
-
-`--min-score N` is enforced by the CLI. Details (weights, security caps, threshold rules,
-and deferred v2 items): [docs/scoring.md](docs/scoring.md).
-
----
-
-## Known limitations
-
-Honest limits of v1:
-
-| Limitation                  | Status                                                                          |
-| --------------------------- | ------------------------------------------------------------------------------- |
-| Automatic fixes             | Safe Cursor / Claude Code / Codex context exclusions only                       |
-| Security findings           | Review/manual — Fix does not rewrite secrets or security modes                  |
-| Secret-content scanning     | Filename / config heuristics only                                               |
-| Detection style             | Intentionally conservative; false security findings are avoided                 |
-| Agent coverage              | Cursor, Claude Code, Codex project configs                                      |
-| Missing-path residual noise | Broad path-lattice expansion deferred; instruction-directory resolution shipped |
-
-See [CHANGELOG.md](CHANGELOG.md) and [docs/compatibility.md](docs/compatibility.md).
-
 ---
 
-## Architecture
+## Local-development team authentication
 
-```text
-Discovery → Project detect → Agent adapters → Rule engine → Findings → Scores → Terminal / JSON
+```bash
+agentdoctor team-register --username alice --password '………'
+agentdoctor team-login --username alice --password '………'
 ```
 
-Details: [docs/architecture.md](docs/architecture.md)
+This is **local-dev scrypt auth**, clearly labeled — **not** enterprise SSO.
 
 ---
 
-## Documentation
-
-| Doc                                                                | Contents                        |
-| ------------------------------------------------------------------ | ------------------------------- |
-| [docs/README.md](docs/README.md)                                   | Documentation index             |
-| [docs/architecture.md](docs/architecture.md)                       | Scan pipeline                   |
-| [docs/rules.md](docs/rules.md)                                     | Stable rule IDs                 |
-| [docs/exit-codes.md](docs/exit-codes.md)                           | Process exit codes              |
-| [docs/scoring.md](docs/scoring.md)                                 | Readiness scoring specification |
-| [docs/compatibility.md](docs/compatibility.md)                     | v1 compatibility promises       |
-| [docs/project-brain.md](docs/project-brain.md)                     | Project Brain understanding     |
-| [docs/mcp/brain-mcp.md](docs/mcp/brain-mcp.md)                     | Brain → MCP → Agent bridge      |
-| [docs/development.md](docs/development.md)                         | Local development               |
-| [docs/github-launch-checklist.md](docs/github-launch-checklist.md) | GitHub About / topics / launch  |
-| [ROADMAP.md](ROADMAP.md)                                           | Near- and medium-term plans     |
-| [CHANGELOG.md](CHANGELOG.md)                                       | Release history                 |
+## Important limitations (read before adopting)
 
----
+1. AST depth is **TypeScript/JavaScript**-oriented.
+2. Test-impact is **heuristic / graph-based**, not coverage-oracle accurate.
+3. C4 views are **inferred**, not approved architecture.
+4. Firewall is **evaluate-only** unless you use AgentDoctor’s controlled runner.
+5. Team auth is **local-dev**, not SSO.
+6. No IDE interception.
+7. No production SQLite/Postgres/vector backend in this package.
+8. No complete multi-language AST.
+9. Deep 2.0 audits and readiness reports live on GitHub under [docs/2.0/](docs/2.0/README.md) (not inside the npm tarball — packaging Option B).
 
-## Contributing
+Full list: [docs/2.0/overview/known-limitations.md](docs/2.0/overview/known-limitations.md).
 
-Issues and pull requests are welcome.
+---
 
-1. Read [CONTRIBUTING.md](CONTRIBUTING.md) and the [Code of Conduct](CODE_OF_CONDUCT.md)
-2. Prefer [good first issues](docs/good-first-issues.md) ideas
-3. Report security issues via [SECURITY.md](SECURITY.md) — never paste real secrets into issues
+## Compatibility
 
-```bash
-git clone https://github.com/pranee54/AgentDoctor.git
-cd AgentDoctor
-npm install
-npm run verify
-node dist/cli/index.js ./fixtures/clean-configured-project
-```
+- Safety CLI exit codes and Brain MCP tool names are preserved.
+- Additive 2.0 commands do not remove 1.x workflows.
+- Migration notes: [docs/2.0/guides/migration.md](docs/2.0/guides/migration.md).
 
 ---
 
-## Project Brain MCP (agent context)
+## Documentation map
 
-Evidence-backed repository understanding for agents (not a search MCP):
-
-```bash
-agentdoctor brain-mcp --root /absolute/path/to/project
-```
-
-Tools: overview, query, explain, trace, claims, evidence, ownership, risk, delta, snapshot.
-Local STDIO only — no API key, no upload. Docs: [docs/mcp/brain-mcp.md](docs/mcp/brain-mcp.md).
-Examples: [examples/mcp/](examples/mcp/).
+| Area             | Link                                                                       |
+| ---------------- | -------------------------------------------------------------------------- |
+| 2.0 index        | [docs/2.0/README.md](docs/2.0/README.md)                                   |
+| CLI / MCP / API  | [docs/2.0/guides/](docs/2.0/guides/)                                       |
+| Release blockers | [docs/2.0/audits/release-blockers.md](docs/2.0/audits/release-blockers.md) |
+| Docs hub         | [docs/README.md](docs/README.md)                                           |
+| Changelog        | [CHANGELOG.md](CHANGELOG.md)                                               |
+| Contributing     | [CONTRIBUTING.md](CONTRIBUTING.md)                                         |
 
 ---
 
-## Next steps
+## Contributing
 
-- **Try it:** `npx @praneeth_54/agentdoctor`
-- **Report a false positive / false negative:** use the issue templates (include version, rule ID, anonymized evidence — no secrets)
-- **Propose a rule or adapter:** [feature request](.github/ISSUE_TEMPLATE/feature_request.md) / [rule proposal](.github/ISSUE_TEMPLATE/rule_proposal.md)
-- **Contribute:** [CONTRIBUTING.md](CONTRIBUTING.md)
-- **Useful?** Star or watch the repository so you see updates
+See [CONTRIBUTING.md](CONTRIBUTING.md) and [docs/development/development.md](docs/development/development.md).
 
 ---
 
 ## License
 
-[MIT](LICENSE) © AgentDoctor Contributors
+MIT — see [LICENSE](LICENSE).

package/dist/agents/aider/adapter.d.ts

@@ -0,0 +1 @@
+export { aiderAdapter, detectAider } from "./detector.js";

package/dist/agents/aider/adapter.js

@@ -0,0 +1 @@
+export { aiderAdapter, detectAider } from "./detector.js";

package/dist/agents/aider/detector.d.ts

@@ -0,0 +1,14 @@
+import type { AgentAdapter, AgentDetectionContext, AgentDetectionResult } from "../types.js";
+/**
+ * Aider project configuration detection.
+ *
+ * Official sources (aider.chat docs):
+ * - Config: `.aider.conf.yml` (cwd / git root); `.aider.conf.yaml` also seen in the wild
+ * - Ignore: `.aiderignore` (gitignore-style; default at git root)
+ * - Conventions: `CONVENTIONS.md` commonly loaded via conf `read:` — only counted when
+ *   an Aider config/ignore file is also present (avoids false positives)
+ *
+ * We do NOT inspect `~/.aider.conf.yml` — repository only.
+ */
+export declare function detectAider(context: AgentDetectionContext): Promise<AgentDetectionResult>;
+export declare const aiderAdapter: AgentAdapter;