@praneeth_54/agentdoctor 2.0.0 → 2.1.0

package/dist/dashboard/server.js

@@ -21,6 +21,9 @@ import { CONTRACTS_VERSION } from "../contracts/index.js";
 import { collectOpsHealth } from "../ops/health.js";
 import { listPolicyPacks } from "../policy/packs.js";
 import { sanitizeForOutput } from "../utils/path.js";
+import { createModelProvider, loadAiConfig } from "../ai/index.js";
+import { ChatService } from "../agent/chat/service.js";
+import { formatChatResponseForCli } from "../agent/chat/response.js";
 function safeJsonError(error) {
     const raw = error instanceof Error ? error.message : String(error);
     const { text } = redactSecrets(sanitizeForOutput(raw));
@@ -92,7 +95,7 @@ function htmlPage() {
   <header>
     <h1>AgentDoctor 2.0</h1>
     <p>Local read-only dashboard — Safety + Brain + intelligence. No cloud writes.</p>
-    <p class="notice muted">Action Policy Evaluator is evaluate-only. Local ?user= is not authentication. Team local-dev auth is separate and not SSO.</p>
+    <p class="notice muted">Action Policy Evaluator is evaluate-only. Query ?user= is a localDevIdentityHint only (not authentication). Team local-dev auth is separate and not SSO. OIDC JWT validation is a library path — full browser OAuth redirect is experimental.</p>
   </header>
   <main>
     <nav aria-label="Views" style="display:flex;flex-wrap:wrap;gap:0.75rem;font-size:0.9rem">
@@ -102,6 +105,7 @@ function htmlPage() {
       <a href="#brain">Brain</a>
       <a href="#graph">Graph</a>
       <a href="#knowledge">Knowledge</a>
+      <a href="#chat">Project Chat</a>
       <a href="#meta">Audit / baselines</a>
     </nav>
     <section id="overview">
@@ -128,6 +132,21 @@ function htmlPage() {
       <h2>Governed knowledge</h2>
       <pre id="knowledgeBody" class="muted">Loading…</pre>
     </section>
+    <section id="chat">
+      <h2>Project Chat</h2>
+      <p class="muted">Ask about this repository. Answers use evidence + truth labels. No file writes from this panel.</p>
+      <div style="display:grid;grid-template-columns:1.4fr 1fr;gap:1rem">
+        <div>
+          <textarea id="chatInput" rows="3" style="width:100%;background:#0d1520;color:#e8eef5;border:1px solid #243040;border-radius:8px;padding:0.6rem" placeholder="How does authentication work?"></textarea>
+          <button id="chatAsk" style="margin-top:0.5rem;background:var(--accent);color:#041018;border:0;border-radius:6px;padding:0.45rem 0.9rem;font-weight:600;cursor:pointer">Ask</button>
+          <pre id="chatBody" class="muted" style="margin-top:0.75rem">Ask a question…</pre>
+        </div>
+        <div>
+          <h3 style="margin:0 0 0.5rem;font-size:0.9rem">Evidence</h3>
+          <pre id="chatEvidence" class="muted">—</pre>
+        </div>
+      </div>
+    </section>
     <section id="meta">
       <h2>Safe Fix audit / baselines / sessions</h2>
       <pre id="metaBody" class="muted">Loading…</pre>
@@ -155,6 +174,28 @@ function htmlPage() {
     load().catch(err => {
       document.getElementById('status').textContent = String(err);
     });
+    document.getElementById('chatAsk').addEventListener('click', async () => {
+      const question = document.getElementById('chatInput').value.trim();
+      if (!question) return;
+      document.getElementById('chatBody').textContent = 'Thinking…';
+      try {
+        const res = await fetch('/api/chat', {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ question }),
+        });
+        const data = await res.json();
+        document.getElementById('chatBody').textContent = data.message || JSON.stringify(data, null, 2);
+        document.getElementById('chatEvidence').textContent = JSON.stringify({
+          truthClaims: data.truthClaims || [],
+          citations: data.citations || [],
+          limitations: data.limitations || [],
+          status: data.status,
+        }, null, 2);
+      } catch (err) {
+        document.getElementById('chatBody').textContent = String(err);
+      }
+    });
   </script>
 </body>
 </html>`;
@@ -186,8 +227,55 @@ export async function startDashboardServer(options) {
                 return;
             }
             const url = new URL(rawUrl, `http://${host}:${port}`);
+            if (req.method === "POST" && url.pathname === "/api/chat") {
+                const chunks = [];
+                for await (const chunk of req) {
+                    chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
+                }
+                let body = {};
+                try {
+                    body = JSON.parse(Buffer.concat(chunks).toString("utf8") || "{}");
+                }
+                catch {
+                    sendJson(res, 400, { error: "invalid JSON body" });
+                    return;
+                }
+                const question = typeof body.question === "string" ? body.question.trim() : "";
+                if (!question) {
+                    sendJson(res, 400, { error: "question required" });
+                    return;
+                }
+                const provider = options.chatProvider ?? createModelProvider(loadAiConfig());
+                if (provider.id === "none") {
+                    sendJson(res, 503, {
+                        error: "provider-none",
+                        message: "AI chat is not configured. Set AGENTDOCTOR_AI_PROVIDER to mock or an OpenAI-compatible provider. Silent mock fallback is disabled.",
+                        status: "provider-none",
+                    });
+                    return;
+                }
+                const chat = new ChatService({
+                    root,
+                    provider,
+                    persistAudit: false,
+                });
+                try {
+                    const response = await chat.ask(question);
+                    sendJson(res, response.status === "ok" ? 200 : 502, {
+                        ...response,
+                        cliPreview: formatChatResponseForCli(response),
+                        note: "Dashboard chat is ask-only; it does not edit files or run commands.",
+                    });
+                }
+                finally {
+                    await chat.end();
+                }
+                return;
+            }
             if (req.method !== "GET") {
-                sendJson(res, 405, { error: "read-only dashboard; GET only" });
+                sendJson(res, 405, {
+                    error: "dashboard is read-only except POST /api/chat (ask-only; no repo writes)",
+                });
                 return;
             }
             if (pathnameLooksHostile(url.pathname)) {
@@ -208,7 +296,7 @@ export async function startDashboardServer(options) {
                     host,
                     loopbackOnly: isLoopbackHost(host),
                     contractsVersion: CONTRACTS_VERSION,
-                    roleNote: "Local ?user= role selection is not authentication",
+                    roleNote: "Query ?user= is a localDevIdentityHint only — not authentication. Privileged role elevation requires AGENTDOCTOR_ALLOW_LOCAL_IDENTITY_HINT=1",
                     actionPolicyNote: EVALUATE_ONLY,
                     adapters: agentRegistry.map((a) => a.id),
                     policyPacks: listPolicyPacks(),
@@ -259,9 +347,20 @@ export async function startDashboardServer(options) {
             }
             if (url.pathname === "/api/platform") {
                 const auth = await loadLocalAuthConfig(root);
-                const role = resolveRole(auth, url.searchParams.get("user") ?? undefined);
+                const identityHint = url.searchParams.get("user");
+                const allowLocalHint = process.env.AGENTDOCTOR_ALLOW_LOCAL_IDENTITY_HINT === "1";
+                // Default: deny privileged elevation. ?user= is a label only unless opt-in env is set.
+                let role = auth.defaultRole;
+                const localDevIdentityHint = identityHint && identityHint.trim() ? identityHint.trim() : null;
+                if (localDevIdentityHint && allowLocalHint) {
+                    role = resolveRole(auth, localDevIdentityHint);
+                }
                 if (!canAccess(role, "read-findings")) {
-                    sendJson(res, 403, { error: "forbidden" });
+                    sendJson(res, 403, {
+                        error: "forbidden",
+                        localDevIdentityHint,
+                        notice: "?user= is not authentication; privileged ops denied without AGENTDOCTOR_ALLOW_LOCAL_IDENTITY_HINT=1",
+                    });
                     return;
                 }
                 const snapshot = await readJsonIfExists(path.join(platformDir(root), "snapshots", "latest.json"));
@@ -271,6 +370,8 @@ export async function startDashboardServer(options) {
                     : [];
                 sendJson(res, 200, {
                     role,
+                    localDevIdentityHint,
+                    localIdentityHintElevated: Boolean(localDevIdentityHint && allowLocalHint),
                     hasSnapshot: snapshot !== null,
                     findingCount: snapshot?.findings.length ?? 0,
                     graphNodes: snapshot?.graph.nodes.length ?? 0,
@@ -295,7 +396,10 @@ export async function startDashboardServer(options) {
                         ...(snapshot?.limitations ?? [
                             "No platform snapshot yet — run: agentdoctor platform scan",
                         ]),
-                        "Local ?user= role selection is not authentication — spoofable on shared hosts",
+                        "?user= is localDevIdentityHint only — not authentication",
+                        allowLocalHint
+                            ? "AGENTDOCTOR_ALLOW_LOCAL_IDENTITY_HINT=1 enabled — hint may elevate local roles (still not SSO)"
+                            : "Privileged role elevation from ?user= denied unless AGENTDOCTOR_ALLOW_LOCAL_IDENTITY_HINT=1",
                         EVALUATE_ONLY,
                     ],
                     sampleFindings: canExport

package/dist/enforcement/runner.d.ts

@@ -1,19 +1,45 @@
 import type { PolicyDecisionContract } from "../contracts/index.js";
+/**
+ * Map argv to a portable executable form for shell:false execution.
+ * Policy evaluation still uses the original human-facing argv/command string.
+ */
+export declare function resolveExecutableArgv(argv: string[]): string[];
+export type ExecutionStatus = "executed" | "blocked-by-enforcement" | "not-executed" | "execution-failed";
 export interface EnforcementResult {
     decision: PolicyDecisionContract;
     enforced: boolean;
     notice: string;
+    stdout?: string;
+    stderr?: string;
+    exitCode?: number | null;
+    durationMs?: number;
 }
+/**
+ * Parse a command string into argv without invoking a shell.
+ * Supports simple double/single quotes; rejects unclosed quotes.
+ */
+export declare function parseArgv(command: string): string[];
+export declare function buildAllowlistedEnv(source?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+/**
+ * Reject path-like args that resolve outside the repository root.
+ */
+export declare function assertArgsInsideRoot(args: string[], root: string): void;
 /**
  * AgentDoctor-controlled command runner.
- * Only this boundary can mark execution as blocked-by-enforcement when it refuses to run.
+ * Executes only when executeIfAllowed===true AND policy decision===allow.
+ * Default path uses shell:false with argv parsing (no shell metacharacters).
  */
 export declare function runControlledCommand(options: {
     root: string;
-    command: string;
+    command?: string;
+    argv?: string[];
     failClosed?: boolean;
-    /** When true, actually attempt execution only if policy allows — still default false. */
+    /** When true, execute only if policy allows. */
     executeIfAllowed?: boolean;
+    /** Explicit high-risk shell mode — requires policy allow as well. */
+    useShell?: boolean;
+    timeoutMs?: number;
+    maxBuffer?: number;
 }): Promise<EnforcementResult>;
 /** Append-only tamper-evident audit chain (HMAC over previous hash). */
 export declare function appendAuditChain(previousHash: string | null, record: unknown, secret?: string): {
@@ -21,3 +47,26 @@ export declare function appendAuditChain(previousHash: string | null, record: un
     payload: string;
 };
 export declare function auditRecordId(parts: string): string;
+/**
+ * Explain what the controlled runner would do for a command (evaluate-only).
+ * Does not execute.
+ */
+export declare function explainControlledRun(options: {
+    root: string;
+    command?: string;
+    argv?: string[];
+    failClosed?: boolean;
+    useShell?: boolean;
+}): Promise<{
+    command: string;
+    argv: string[];
+    useShell: boolean;
+    decision: string;
+    reason: string;
+    policyId: string | null;
+    riskLevel: string;
+    wouldExecute: boolean;
+    executionResult: "not-executed";
+    notice: string;
+    meaning: string;
+}>;