@praneeth_54/agentdoctor 3.0.0 → 3.0.2

package/dist/dashboard/ui/styles.js

@@ -0,0 +1,138 @@
+/** AgentDoctor dashboard design system CSS. */
+export const DASHBOARD_CSS = `
+:root{
+  --bg:#0b0f14;--bg-elev:#111820;--bg-soft:#151d27;--panel:#161e28;--border:#243040;
+  --fg:#e8eef5;--muted:#93a0b0;--faint:#6b7888;--accent:#4aa3ff;--accent-2:#2d7fd6;
+  --ok:#3ecf8e;--warn:#e6b84d;--crit:#e26060;--unk:#8b9aab;--focus:#7cc4ff;
+  --sidebar-w:248px;--sidebar-collapsed:64px;--topbar-h:52px;
+  --radius:10px;--font:ui-sans-serif,system-ui,-apple-system,"Segoe UI",sans-serif;
+  --mono:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;
+}
+*{box-sizing:border-box}
+html,body{height:100%;margin:0}
+body{font-family:var(--font);background:var(--bg);color:var(--fg);line-height:1.45;overflow-x:hidden}
+a{color:var(--accent);text-decoration:none}a:hover{text-decoration:underline}
+button,input,textarea,select{font:inherit}
+button:focus-visible,a:focus-visible,input:focus-visible,textarea:focus-visible,[tabindex]:focus-visible{
+  outline:2px solid var(--focus);outline-offset:2px}
+.app{display:grid;grid-template-columns:var(--sidebar-w) 1fr;grid-template-rows:var(--topbar-h) 1fr;height:100vh;min-height:100vh}
+.app.collapsed{grid-template-columns:var(--sidebar-collapsed) 1fr}
+.topbar{grid-column:1/-1;display:flex;align-items:center;gap:.75rem;padding:0 .9rem;border-bottom:1px solid var(--border);background:var(--bg-elev);min-width:0}
+.brand{display:flex;align-items:baseline;gap:.45rem;flex:0 0 auto}
+.brand-name{font-weight:700;letter-spacing:.02em;font-size:.98rem}
+.brand-ver{color:var(--muted);font-size:.78rem}
+.project-chip{display:flex;flex-direction:column;min-width:0;max-width:280px;padding:.25rem .55rem;border:1px solid var(--border);border-radius:8px;background:var(--bg-soft)}
+.project-chip strong{font-size:.82rem;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
+.project-chip span{font-size:.7rem;color:var(--muted);white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
+.topbar-spacer{flex:1}
+.topbar-actions{display:flex;align-items:center;gap:.4rem;flex:0 0 auto}
+.btn{appearance:none;border:1px solid var(--border);background:var(--bg-soft);color:var(--fg);border-radius:8px;padding:.35rem .65rem;font-size:.8rem;cursor:pointer}
+.btn:hover{border-color:#35506a}
+.btn-accent{background:var(--accent);border-color:var(--accent-2);color:#041018;font-weight:650}
+.btn-ghost{background:transparent}
+.kbd{font-family:var(--mono);font-size:.7rem;color:var(--muted);border:1px solid var(--border);border-radius:5px;padding:.05rem .3rem}
+.sidebar{border-right:1px solid var(--border);background:var(--bg-elev);overflow:auto;padding:.6rem .45rem .9rem;display:flex;flex-direction:column;gap:.35rem}
+.side-toggle{align-self:flex-end;margin:.15rem .2rem .4rem}
+.nav-group{margin:.35rem 0 .15rem}
+.nav-group-label{font-size:.65rem;letter-spacing:.08em;text-transform:uppercase;color:var(--faint);padding:.2rem .55rem;font-weight:650}
+.nav-link{display:flex;align-items:center;gap:.55rem;padding:.42rem .55rem;border-radius:8px;color:var(--muted);font-size:.84rem;text-decoration:none;border:1px solid transparent}
+.nav-link:hover{background:var(--bg-soft);color:var(--fg);text-decoration:none}
+.nav-link.active{background:#1a2838;color:var(--fg);border-color:#2b425a}
+.nav-ico{width:1.1rem;text-align:center;opacity:.85;flex:0 0 auto}
+.app.collapsed .nav-group-label,.app.collapsed .nav-text,.app.collapsed .project-chip span,.app.collapsed .brand-ver{display:none}
+.app.collapsed .nav-link{justify-content:center;padding:.5rem}
+.app.collapsed .project-chip{max-width:100%;padding:.35rem}
+.main{overflow:auto;min-width:0;background:var(--bg)}
+.content{padding:1rem 1.15rem 2rem;max-width:1180px;margin:0 auto}
+.page-header{margin:0 0 1rem}
+.page-header h1{margin:0;font-size:1.35rem;font-weight:700}
+.page-desc{margin:.35rem 0 0;color:var(--muted);font-size:.9rem;max-width:70ch}
+.meta-row{display:flex;flex-wrap:wrap;gap:.35rem;margin-top:.55rem}
+.badge{display:inline-flex;align-items:center;gap:.25rem;padding:.14rem .48rem;border-radius:999px;border:1px solid var(--border);font-size:.72rem;color:var(--muted);background:var(--bg-soft)}
+.badge.ok{color:var(--ok);border-color:#2a5a44}.badge.attention{color:var(--warn);border-color:#5a4a22}
+.badge.warning,.badge.critical{color:var(--crit);border-color:#6a3030}.badge.unknown{color:var(--unk)}
+.badge.truth{text-transform:uppercase;letter-spacing:.04em;font-size:.68rem}
+.grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(230px,1fr));gap:.7rem}
+.card{background:var(--panel);border:1px solid var(--border);border-radius:var(--radius);padding:.85rem .9rem;min-width:0;display:flex;flex-direction:column;gap:.35rem}
+.card h3{margin:0;font-size:.88rem}.card p{margin:0;font-size:.8rem;color:var(--muted)}
+.card .actions{margin-top:auto;padding-top:.35rem}
+.section{margin:1rem 0;background:var(--panel);border:1px solid var(--border);border-radius:var(--radius);padding:1rem}
+.section h2{margin:0 0 .65rem;font-size:1rem}
+.section h3{margin:.8rem 0 .4rem;font-size:.9rem}
+.empty,.error,.loading{padding:1.05rem 1.1rem;border:1px dashed var(--border);border-radius:var(--radius);color:var(--muted);background:var(--bg-soft)}
+.empty strong,.error strong,.loading strong{display:block;color:var(--fg);font-size:.92rem;margin-bottom:.35rem}
+.empty p,.error p,.loading p{margin:.3rem 0 0;font-size:.84rem}
+.error{border-style:solid;border-color:#6a3030;color:#f0b4b4;background:#1a1214}
+.ask-banner{margin:0 0 .85rem;padding:.65rem .8rem;border:1px solid #2b425a;border-radius:var(--radius);background:#121a24;color:var(--muted);font-size:.82rem}
+.ask-banner strong{color:var(--fg)}
+.scope-note{margin:.5rem 0 0;font-size:.8rem;color:var(--faint)}
+.filter-input{width:100%;text-align:left;margin-bottom:.5rem}
+.section-plain{margin:1rem 0}
+.section-plain h2{margin:0 0 .65rem;font-size:1rem}
+.status-dot{width:.55rem;height:.55rem;border-radius:50%;background:var(--ok);display:inline-block;margin-right:.35rem;vertical-align:middle}
+.status-dot.warn{background:var(--warn)}.status-dot.off{background:var(--unk)}
+.topbar-status{font-size:.72rem;color:var(--muted);white-space:nowrap}
+.uncertainty{display:grid;grid-template-columns:repeat(auto-fill,minmax(160px,1fr));gap:.55rem;margin:.65rem 0}
+.uncertainty .card h3{font-size:.78rem;text-transform:uppercase;letter-spacing:.04em;color:var(--faint)}
+@media (max-width:1280px){
+  .content{max-width:100%}
+}
+@media (max-width:1024px){
+  .project-chip{max-width:200px}
+}
+@media (max-width:768px){
+  .topbar{gap:.45rem;padding:0 .55rem}
+  .topbar-status,.brand-ver{display:none}
+  .btn .kbd{display:none}
+  .content{padding:.75rem .7rem 1.5rem}
+}
+@media (max-width:390px){
+  .project-chip{max-width:36vw}
+  .brand-name{font-size:.9rem}
+}
+.skeleton{height:.85rem;border-radius:6px;background:linear-gradient(90deg,#15202b,#1c2835,#15202b);background-size:200% 100%;animation:sk 1.2s infinite}
+@keyframes sk{0%{background-position:200% 0}100%{background-position:-200% 0}}
+.table-wrap{overflow:auto;border:1px solid var(--border);border-radius:8px}
+table,.table-wrap table{width:100%;border-collapse:collapse;font-size:.8rem}
+table.data{width:100%;border-collapse:collapse;font-size:.8rem}
+table th,table td,table.data th,table.data td{padding:.45rem .55rem;border-bottom:1px solid var(--border);text-align:left;vertical-align:top}
+table.data th{color:var(--muted);font-weight:600;background:var(--bg-soft);position:sticky;top:0}
+table.data tr:hover td{background:#182230}
+.mono,.code{font-family:var(--mono);font-size:.78rem}
+.tech details{margin-top:.75rem}
+.tech summary{cursor:pointer;color:var(--accent);font-size:.85rem}
+.pre{white-space:pre-wrap;word-break:break-word;font-family:var(--mono);font-size:.75rem;color:#d5dde6;margin:0;max-height:420px;overflow:auto;background:var(--bg-soft);border:1px solid var(--border);border-radius:8px;padding:.65rem}
+.chips{display:flex;flex-wrap:wrap;gap:.3rem}
+.path-sec{font-size:.75rem;color:var(--faint);word-break:break-all;margin:.25rem 0 0}
+.chat-layout{display:grid;grid-template-columns:minmax(0,1.4fr) minmax(240px,1fr);gap:.85rem}
+.chat-log{min-height:280px;max-height:52vh;overflow:auto;border:1px solid var(--border);border-radius:8px;padding:.75rem;background:var(--bg-soft)}
+.chat-msg{margin:0 0 .75rem;padding:.55rem .65rem;border-radius:8px;border:1px solid var(--border);background:var(--panel)}
+.chat-msg.user{border-color:#2b425a}
+.composer{display:flex;flex-direction:column;gap:.45rem;margin-top:.55rem}
+.composer textarea{width:100%;min-height:72px;resize:vertical;background:#0d1520;color:var(--fg);border:1px solid var(--border);border-radius:8px;padding:.55rem}
+.graph-legend{display:flex;flex-wrap:wrap;gap:.4rem;margin:.5rem 0}
+.graph-canvas{width:100%;height:320px;border:1px solid var(--border);border-radius:8px;background:#0d1520;overflow:hidden}
+.palette{position:fixed;inset:0;background:rgba(0,0,0,.55);display:none;align-items:flex-start;justify-content:center;padding:12vh 1rem;z-index:50}
+.palette.open{display:flex}
+.palette-box{width:min(640px,100%);background:var(--bg-elev);border:1px solid var(--border);border-radius:12px;overflow:hidden;box-shadow:0 20px 60px rgba(0,0,0,.45)}
+.palette-box input{width:100%;border:0;border-bottom:1px solid var(--border);background:transparent;color:var(--fg);padding:.85rem 1rem;font-size:1rem}
+.palette-list{max-height:50vh;overflow:auto}
+.palette-item{display:flex;justify-content:space-between;gap:1rem;padding:.65rem 1rem;cursor:pointer;border:0;background:transparent;color:var(--fg);width:100%;text-align:left}
+.palette-item:hover,.palette-item.active{background:var(--bg-soft)}
+.palette-item small{color:var(--muted)}
+.drawer-backdrop{position:fixed;inset:0;background:rgba(0,0,0,.45);display:none;z-index:40}
+.drawer-backdrop.open{display:block}
+.mobile-nav{display:none}
+.safety-row{display:flex;flex-wrap:wrap;gap:.3rem;align-items:center}
+@media (max-width:980px){
+  .app,.app.collapsed{grid-template-columns:1fr}
+  .sidebar{position:fixed;inset:var(--topbar-h) auto 0 0;width:min(280px,86vw);z-index:45;transform:translateX(-105%);transition:transform .18s ease;box-shadow:8px 0 30px rgba(0,0,0,.35)}
+  .sidebar.open{transform:translateX(0)}
+  .mobile-nav{display:inline-flex}
+  .chat-layout{grid-template-columns:1fr}
+}
+@media (max-width:640px){
+  .content{padding:.85rem}.page-header h1{font-size:1.15rem}.grid{grid-template-columns:1fr}
+  .project-chip{max-width:42vw}
+}
+`.trim();

package/dist/discovery/files.js

@@ -1,6 +1,7 @@
 import fs from "node:fs/promises";
 import path from "node:path";
 import { DEFAULT_IGNORE_DIRECTORIES, DEFAULT_MAX_FILE_SIZE_BYTES } from "../constants.js";
+import { classifyRelativePathOwnership, decideDirectoryTraversal } from "../project/ownership.js";
 import { isPathInsideRoot, toPosixRelative } from "../utils/path.js";
 import { isLogLikePath } from "./log-like.js";
 /**
@@ -63,6 +64,15 @@ export async function discoverFiles(options) {
                     directoriesSkipped.push(relativePath);
                     continue;
                 }
+                const traversal = await decideDirectoryTraversal({
+                    projectRoot: root,
+                    absoluteDir: absolutePath,
+                    relativeDir: relativePath,
+                });
+                if (!traversal.traverse) {
+                    directoriesSkipped.push(`${relativePath} (${traversal.ownership})`);
+                    continue;
+                }
                 queue.push(absolutePath);
                 continue;
             }
@@ -79,6 +89,9 @@ export async function discoverFiles(options) {
                     filesSkippedOversized += 1;
                     continue;
                 }
+                if (classifyRelativePathOwnership(relativePath) !== "project_owned") {
+                    continue;
+                }
                 files.push({
                     absolutePath,
                     relativePath,

package/dist/intelligence/graph/build.js

@@ -1,7 +1,7 @@
-import fs from "node:fs/promises";
 import path from "node:path";
 import { createHash } from "node:crypto";
 import ts from "typescript";
+import { discoverFiles } from "../../discovery/files.js";
 import { resolveRepoRoot, toPosixRelative } from "../../utils/path.js";
 import { buildRepositoryGraph } from "../../platform/graph/build.js";
 import { CONTRACTS_VERSION } from "../../contracts/index.js";
@@ -45,35 +45,15 @@ async function applyLanguageEnrichment(graph, root) {
     }
 }
 export async function listTsFiles(root, limit = 400) {
-    const out = [];
-    const skip = new Set(["node_modules", ".git", "dist", "coverage", ".agentdoctor", "vendor"]);
-    async function walk(dir) {
-        if (out.length >= limit)
-            return;
-        let entries;
-        try {
-            entries = await fs.readdir(dir, { withFileTypes: true });
-        }
-        catch {
-            return;
-        }
-        for (const e of entries) {
-            if (skip.has(e.name))
-                continue;
-            const abs = path.join(dir, e.name);
-            if (e.isSymbolicLink())
-                continue;
-            if (e.isDirectory()) {
-                await walk(abs);
-                continue;
-            }
-            if (/\.(ts|tsx|mts|cts)$/i.test(e.name) && !e.name.endsWith(".d.ts")) {
-                out.push(abs);
-            }
-        }
-    }
-    await walk(root);
-    return out.sort();
+    const discovered = await discoverFiles({ root });
+    return discovered.files
+        .filter((f) => {
+        const name = path.basename(f.relativePath);
+        return /\.(ts|tsx|mts|cts)$/i.test(name) && !name.endsWith(".d.ts");
+    })
+        .map((f) => f.absolutePath)
+        .sort()
+        .slice(0, limit);
 }
 /**
  * TypeScript compiler API based graph enrichment.

package/dist/intelligence/graph/incremental.d.ts

@@ -12,6 +12,8 @@ export interface GraphSnapshot {
     nodes: GraphNode[];
     edges: GraphEdge[];
     limitations: string[];
+    /** Reject cached graphs built under a prior ownership boundary. */
+    ownershipBoundaryVersion?: number;
 }
 export interface GraphStatus {
     present: boolean;

package/dist/intelligence/graph/incremental.js

@@ -3,6 +3,7 @@ import { spawnSync } from "node:child_process";
 import fs from "node:fs/promises";
 import path from "node:path";
 import { PACKAGE_VERSION } from "../../constants.js";
+import { OWNERSHIP_BOUNDARY_VERSION } from "../../project/ownership.js";
 import { resolveRepoRoot, toPosixRelative } from "../../utils/path.js";
 import { atomicWriteTextFile } from "../../utils/fs.js";
 import { buildIntelligenceGraph, listTsFiles } from "./build.js";
@@ -75,6 +76,13 @@ async function loadSnapshot(root) {
         if (!isValidSnapshot(parsed)) {
             return { ok: false, corrupt: true, error: "index.json failed schema checks" };
         }
+        if (parsed.ownershipBoundaryVersion !== OWNERSHIP_BOUNDARY_VERSION) {
+            return {
+                ok: false,
+                corrupt: false,
+                error: `graph index ownership boundary is stale (have ${String(parsed.ownershipBoundaryVersion ?? "missing")}, need ${OWNERSHIP_BOUNDARY_VERSION})`,
+            };
+        }
         return { ok: true, snapshot: parsed };
     }
     catch (error) {
@@ -109,6 +117,7 @@ async function buildAndPersist(root, mode = "auto") {
             ...graph.limitations,
             "Incremental index persists file hashes for change detection",
         ],
+        ownershipBoundaryVersion: OWNERSHIP_BOUNDARY_VERSION,
     };
     const saved = await persistSnapshot(root, snapshot);
     return { snapshot, path: saved };

package/dist/mcp/intelligence/path-safety.d.ts

@@ -4,6 +4,11 @@ export { tryDecodeUriComponent };
  * Validate a user-supplied repository-relative or in-repo target.
  * Returns a normalized path relative to root (POSIX) when the target is path-like and safe,
  * or null when the target is treated as a non-path identifier (graph id / label).
- * Throws a safe Error (no outside path leakage) when a path-like target escapes the root.
+ * Throws a safe Error (no outside path leakage) when a path-like target escapes the root
+ * or is outside project ownership (.private, AgentDoctorOS, fixtures, validation).
  */
 export declare function assertSafeRepoTarget(root: string, rawTarget: string): string | null;
+/**
+ * Async ownership gate including nested-repository ancestry (for MCP file-path tools).
+ */
+export declare function assertSafeOwnedRepoTarget(root: string, rawTarget: string): Promise<string | null>;

package/dist/mcp/intelligence/path-safety.js

@@ -1,4 +1,6 @@
 import path from "node:path";
+import fs from "node:fs";
+import { assertProjectOwnedRepoPath, classifyRelativePathOwnership, ProjectOwnershipError, } from "../../project/ownership.js";
 import { PathEscapeError, rejectHostilePathInput, resolveSafeRepoPath, tryDecodeUriComponent, } from "../../security/paths.js";
 import { sanitizeForOutput } from "../../utils/path.js";
 export { tryDecodeUriComponent };
@@ -6,7 +8,8 @@ export { tryDecodeUriComponent };
  * Validate a user-supplied repository-relative or in-repo target.
  * Returns a normalized path relative to root (POSIX) when the target is path-like and safe,
  * or null when the target is treated as a non-path identifier (graph id / label).
- * Throws a safe Error (no outside path leakage) when a path-like target escapes the root.
+ * Throws a safe Error (no outside path leakage) when a path-like target escapes the root
+ * or is outside project ownership (.private, AgentDoctorOS, fixtures, validation).
  */
 export function assertSafeRepoTarget(root, rawTarget) {
     if (typeof rawTarget !== "string" || rawTarget.includes("\0")) {
@@ -52,12 +55,62 @@ export function assertSafeRepoTarget(root, rawTarget) {
     const primary = candidates[candidates.length - 1];
     try {
         const abs = resolveSafeRepoPath(root, primary);
-        return path.relative(root, abs).split(path.sep).join("/");
+        const lexicalRel = path.isAbsolute(primary)
+            ? path.relative(root, abs).split(path.sep).join("/")
+            : primary.replace(/\\/g, "/").replace(/^\.\//, "");
+        // Lexical non-owned prefixes always deny.
+        if (classifyRelativePathOwnership(lexicalRel) !== "project_owned") {
+            throw new Error("path outside project ownership");
+        }
+        // Realpath-relative classification catches symlink aliases into non-owned trees.
+        let realRoot = root;
+        let realAbs = abs;
+        try {
+            realRoot = fs.realpathSync(root);
+        }
+        catch {
+            /* keep */
+        }
+        try {
+            realAbs = fs.realpathSync(abs);
+        }
+        catch {
+            /* keep */
+        }
+        const realRel = path.relative(realRoot, realAbs).split(path.sep).join("/") || ".";
+        if (realRel.startsWith("..") ||
+            path.isAbsolute(realRel) ||
+            classifyRelativePathOwnership(realRel) !== "project_owned") {
+            throw new Error("path outside project ownership");
+        }
+        return realRel || lexicalRel;
     }
     catch (error) {
         if (error instanceof PathEscapeError) {
             throw new Error(error.message);
         }
+        if (error instanceof Error && error.message === "path outside project ownership") {
+            throw error;
+        }
         throw new Error("invalid target");
     }
 }
+/**
+ * Async ownership gate including nested-repository ancestry (for MCP file-path tools).
+ */
+export async function assertSafeOwnedRepoTarget(root, rawTarget) {
+    const rel = assertSafeRepoTarget(root, rawTarget);
+    if (rel === null)
+        return null;
+    try {
+        const abs = resolveSafeRepoPath(root, rel);
+        await assertProjectOwnedRepoPath(root, abs, rel);
+    }
+    catch (error) {
+        if (error instanceof PathEscapeError || error instanceof ProjectOwnershipError) {
+            throw new Error(error.message);
+        }
+        throw error;
+    }
+    return rel;
+}

package/dist/platform/graph/build.js

@@ -1,6 +1,7 @@
 import fs from "node:fs/promises";
 import path from "node:path";
 import { createHash } from "node:crypto";
+import { decideDirectoryTraversal } from "../../project/ownership.js";
 import { readTextFile } from "../../utils/fs.js";
 import { resolveRepoRoot, toPosixRelative } from "../../utils/path.js";
 const SKIP = new Set([
@@ -48,6 +49,14 @@ async function walk(root, dir, files, dirs, limit) {
         if (entry.isSymbolicLink())
             continue;
         if (entry.isDirectory()) {
+            const relativeDir = toPosixRelative(root, absolute);
+            const traversal = await decideDirectoryTraversal({
+                projectRoot: root,
+                absoluteDir: absolute,
+                relativeDir,
+            });
+            if (!traversal.traverse)
+                continue;
             dirs.push(absolute);
             await walk(root, absolute, files, dirs, limit);
             continue;

package/dist/product/decisions/ledger.d.ts

@@ -1,10 +1,19 @@
+import { type ProjectOwnershipClass } from "../../project/ownership.js";
 import type { ProductEvidence, TruthLabel } from "../truth.js";
+/** Why a decision document is attributed to the current project. */
+export type DecisionSourceKind = "adr_file" | "decision_ledger" | "architecture_document" | "internal_note" | "unknown";
 export interface DecisionRecord {
     id: string;
     title: string;
     status?: string;
+    /** Wire-compat provenance channel. */
     source: "adr-file" | "ledger";
+    sourceKind: DecisionSourceKind;
     truth: TruthLabel;
+    /** Explicit meaning for UI — never “architecture proven correct”. */
+    truthMeaning: string;
+    projectRoot: string;
+    ownership: ProjectOwnershipClass;
     evidence: ProductEvidence[];
     recordedAt?: string;
     bodyExcerpt?: string;
@@ -16,9 +25,12 @@ export interface DecisionLedgerResult {
     limitations: string[];
 }
 export declare function parseAdrDecisions(rootInput: string, maxFileSizeBytes?: number): Promise<DecisionRecord[]>;
-export declare function appendDecisionLedgerEntry(rootInput: string, record: Omit<DecisionRecord, "source" | "truth"> & {
+export declare function appendDecisionLedgerEntry(rootInput: string, record: Omit<DecisionRecord, "source" | "truth" | "sourceKind" | "truthMeaning" | "projectRoot" | "ownership"> & {
     source?: DecisionRecord["source"];
+    sourceKind?: DecisionSourceKind;
     truth?: TruthLabel;
+    truthMeaning?: string;
+    ownership?: ProjectOwnershipClass;
 }): Promise<DecisionRecord>;
 export declare function loadDecisionLedger(rootInput: string): Promise<DecisionLedgerResult>;
 export declare function resolveDecisionPath(rootInput: string, candidate: string): string;

package/dist/product/decisions/ledger.js

@@ -2,21 +2,26 @@ import fs from "node:fs/promises";
 import path from "node:path";
 import { DEFAULT_MAX_FILE_SIZE_BYTES } from "../../constants.js";
 import { detectProject } from "../../detectors/project.js";
-import { readTextFile } from "../../utils/fs.js";
+import { classifyRelativePathOwnership, isProjectOwnedRelativePath, verifiedDecisionTruthMeaning, } from "../../project/ownership.js";
 import { resolveSafeRepoPath } from "../../security/paths.js";
+import { pathExists, readTextFile } from "../../utils/fs.js";
 import { resolveRepoRoot } from "../../utils/path.js";
-import { pathExists } from "../../utils/fs.js";
 function ledgerFile(root) {
     return path.join(resolveRepoRoot(root), ".agentdoctor", "decisions", "entries.jsonl");
 }
+/**
+ * ADR-shaped paths under the current project-owned tree only.
+ * Nested foreign trees with an adr directory segment are excluded by ownership
+ * before this runs; this still refuses internal_docs / private paths as defense in depth.
+ */
 function isAdrPath(relativePath) {
+    if (!isProjectOwnedRelativePath(relativePath))
+        return false;
     const norm = relativePath.replace(/\\/g, "/").toLowerCase();
-    return (norm.startsWith("docs/adr/") ||
-        norm.startsWith("adr/") ||
-        norm.includes("/adr/") ||
-        /^adr-\d+/i.test(path.basename(relativePath)));
+    const base = path.basename(relativePath);
+    return norm.startsWith("docs/adr/") || norm.startsWith("adr/") || /^adr[-_]\d+/i.test(base);
 }
-function parseAdr(relativePath, content) {
+function parseAdr(projectRoot, relativePath, content) {
     const lines = content.split(/\r?\n/);
     let title = "";
     let status;
@@ -31,12 +36,17 @@ function parseAdr(relativePath, content) {
     if (!title)
         return null;
     const id = relativePath.replace(/[^\w./-]/g, "_");
+    const ownership = classifyRelativePathOwnership(relativePath);
     return {
         id,
         title,
         ...(status !== undefined ? { status } : {}),
         source: "adr-file",
+        sourceKind: "adr_file",
         truth: "VERIFIED",
+        truthMeaning: verifiedDecisionTruthMeaning(),
+        projectRoot,
+        ownership,
         evidence: [{ path: relativePath, line: 1, excerpt: title.slice(0, 120) }],
         bodyExcerpt: content.slice(0, 400),
     };
@@ -52,7 +62,7 @@ export async function parseAdrDecisions(rootInput, maxFileSizeBytes = DEFAULT_MA
         const text = await readTextFile(path.join(root, rel), maxFileSizeBytes);
         if (!text)
             continue;
-        const parsed = parseAdr(rel, text);
+        const parsed = parseAdr(root, rel, text);
         if (parsed)
             decisions.push(parsed);
     }
@@ -66,7 +76,11 @@ export async function appendDecisionLedgerEntry(rootInput, record) {
     const full = {
         ...record,
         source: record.source ?? "ledger",
+        sourceKind: record.sourceKind ?? "decision_ledger",
         truth: record.truth ?? "VERIFIED",
+        truthMeaning: record.truthMeaning ?? verifiedDecisionTruthMeaning(),
+        projectRoot: root,
+        ownership: record.ownership ?? "project_owned",
         recordedAt: record.recordedAt ?? new Date().toISOString(),
     };
     await fs.appendFile(ledgerFile(root), `${JSON.stringify(full)}\n`, "utf8");
@@ -76,7 +90,9 @@ export async function loadDecisionLedger(rootInput) {
     const root = resolveRepoRoot(rootInput);
     const limitations = [
         "ADR parsing reads markdown titles and Status lines only.",
-        "Ledger JSONL entries are merged with discovered ADR files (deduped by id).",
+        "Only project-owned trees are scanned; nested repositories and private/validation checkouts are excluded.",
+        "VERIFIED means the ADR file was found and parsed — not that the architecture decision is independently proven correct.",
+        "Ledger JSONL entries are merged with discovered ADR files (deduped by id) when present and project-owned.",
     ];
     const fromAdr = await parseAdrDecisions(root);
     const fromLedger = [];
@@ -87,7 +103,22 @@ export async function loadDecisionLedger(rootInput) {
             if (!line.trim())
                 continue;
             try {
-                fromLedger.push(JSON.parse(line));
+                const raw = JSON.parse(line);
+                const evidencePath = raw.evidence?.[0]?.path ?? raw.id;
+                if (!isProjectOwnedRelativePath(String(evidencePath)) &&
+                    !isProjectOwnedRelativePath(String(raw.id))) {
+                    limitations.push(`Skipped non-owned ledger entry: ${raw.id}`);
+                    continue;
+                }
+                fromLedger.push({
+                    ...raw,
+                    source: raw.source ?? "ledger",
+                    sourceKind: raw.sourceKind ?? "decision_ledger",
+                    truth: raw.truth ?? "VERIFIED",
+                    truthMeaning: raw.truthMeaning ?? verifiedDecisionTruthMeaning(),
+                    projectRoot: raw.projectRoot ?? root,
+                    ownership: raw.ownership ?? classifyRelativePathOwnership(String(evidencePath)),
+                });
             }
             catch {
                 limitations.push("Skipped malformed decision ledger line.");

package/dist/product/discovery/roots.d.ts

@@ -25,6 +25,16 @@ export interface DiscoverProjectOptions {
     /** Auto-select highest score when exactly one strong candidate. */
     autoSelect?: boolean;
 }
+/**
+ * True when `cwd` is the user home directory or a similarly unsafe broad folder
+ * (Desktop / Downloads / Documents). Used to refuse silent whole-home scans.
+ */
+export declare function classifyBroadUserScanRoot(cwdInput: string, homeInput?: string): {
+    blocked: true;
+    reason: string;
+} | {
+    blocked: false;
+};
 /**
  * Discover likely project roots from cwd without silently scanning home/Desktop/Downloads
  * or unbounded parent trees.