deepdebug-local-agent 0.3.18 → 1.0.2

package/package.json

@@ -1,30 +1,42 @@
 {
   "name": "deepdebug-local-agent",
-  "version": "0.3.18",
-  "description": "Insptech AI — DeepDebug Local Agent. Autonomous code debugging agent for production environments.",
+  "version": "1.0.2",
+  "description": "DeepDebug Local Agent - AI-powered code debugging assistant",
+  "private": false,
   "type": "module",
   "main": "src/server.js",
   "bin": {
-    "deepdebug-local-agent": "bin/install.js"
+    "deepdebug-agent": "src/server.js"
   },
   "scripts": {
     "start": "node src/server.js",
     "dev": "NODE_ENV=development node src/server.js",
-    "mcp": "node src/mcp-server.js"
+    "mcp": "node src/mcp-server.js",
+    "build": "npm run build:all",
+    "build:all": "npm run build:win && npm run build:mac && npm run build:linux",
+    "build:win": "pkg . --target node20-win-x64 --output dist/deepdebug-agent-win.exe",
+    "build:mac": "pkg . --target node20-macos-x64 --output dist/deepdebug-agent-macos",
+    "build:mac-arm": "pkg . --target node20-macos-arm64 --output dist/deepdebug-agent-macos-arm64",
+    "build:linux": "pkg . --target node20-linux-x64 --output dist/deepdebug-agent-linux",
+    "docker:build": "docker build -t deepdebug/local-agent:latest .",
+    "docker:push": "docker push deepdebug/local-agent:latest",
+    "test": "node --test",
+    "lint": "eslint src/"
   },
-  "keywords": [
-    "deepdebug",
-    "insptech",
-    "debugging",
-    "ai",
-    "autonomous",
-    "agent"
-  ],
-  "author": "Insptech AI <contacto@insptech.pt>",
-  "license": "UNLICENSED",
-  "homepage": "https://deepdebug.ai",
-  "engines": {
-    "node": ">=18.0.0"
+  "pkg": {
+    "scripts": [
+      "src/**/*.js"
+    ],
+    "assets": [
+      "src/**/*"
+    ],
+    "targets": [
+      "node20-win-x64",
+      "node20-macos-x64",
+      "node20-macos-arm64",
+      "node20-linux-x64"
+    ],
+    "outputPath": "dist"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.26.0",
@@ -35,7 +47,30 @@
     "pidusage": "^3.0.2",
     "properties-reader": "^2.3.0",
     "strip-ansi": "^7.1.0",
-    "unidiff": "^1.0.2",
-    "ws": "^8.18.0"
-  }
+    "unidiff": "^1.0.2"
+  },
+  "devDependencies": {
+    "pkg": "^5.8.1",
+    "eslint": "^8.57.0"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "os": [
+    "darwin",
+    "linux",
+    "win32"
+  ],
+  "cpu": [
+    "x64",
+    "arm64"
+  ],
+  "keywords": [
+    "debugging",
+    "ai",
+    "code-analysis",
+    "developer-tools"
+  ],
+  "author": "InspTech AI",
+  "license": "Proprietary"
 }

package/src/mcp-http-server.js

@@ -161,7 +161,7 @@ export function startMCPHttpServer(workspaceManager, port = 5056) {
 
         try {
             const root = workspaceManager.resolveRoot(workspaceId);
-            const results = await grepWorkspaceX(root, query, filePattern, maxResults);
+            const results = await grepWorkspace(root, query, filePattern, maxResults);
             res.json({ ok: true, query, matches: results.length, results });
         } catch (e) {
             res.status(400).json({ error: e.message });
@@ -183,7 +183,7 @@ export function startMCPHttpServer(workspaceManager, port = 5056) {
 
         try {
             const root = workspaceManager.resolveRoot(workspaceId);
-            const result = await execInWorkspaceX(root, command, timeout);
+            const result = await execInWorkspace(root, command, timeout);
             res.json({ ok: result.exitCode === 0, ...result });
         } catch (e) {
             res.status(400).json({ error: e.message });
@@ -310,100 +310,4 @@ function execInWorkspace(root, command, timeoutSec) {
             resolve({ exitCode: code, stdout, stderr: stderr.substring(0, 5000), timedOut: false });
         });
     });
-}
-// ========================================
-// WINDOWS IMPLEMENTATIONS
-// ========================================
-
-import fs from "fs";
-const { promises: fsp } = fs;
-
-/**
- * grepWorkspaceWindows — Pure Node.js search, no grep required.
- * Used automatically on Windows (process.platform === "win32").
- */
-async function grepWorkspaceWindows(root, query, filePattern, maxResults) {
-    const results = [];
-    const queryLower = query.toLowerCase();
-
-    let fileRegex = null;
-    if (filePattern && filePattern !== "*") {
-        const escaped = filePattern
-            .replace(/[.+^${}()|[\]\\]/g, "\\$&")
-            .replace(/\*/g, ".*");
-        fileRegex = new RegExp(escaped + "$", "i");
-    }
-
-    async function searchDir(dir) {
-        if (results.length >= maxResults) return;
-        let entries;
-        try { entries = await fsp.readdir(dir, { withFileTypes: true }); }
-        catch { return; }
-
-        for (const entry of entries) {
-            if (results.length >= maxResults) break;
-            const fullPath = path.join(dir, entry.name);
-            const relPath = path.relative(root, fullPath).replace(/\\/g, "/");
-
-            if (entry.isDirectory()) {
-                if (IGNORE_DIRS.includes(entry.name)) continue;
-                await searchDir(fullPath);
-            } else if (entry.isFile()) {
-                if (fileRegex && !fileRegex.test(entry.name)) continue;
-                const stat = await fsp.stat(fullPath).catch(() => null);
-                if (!stat || stat.size > 500000) continue;
-
-                try {
-                    const content = await fsp.readFile(fullPath, "utf8");
-                    const lines = content.split("\n");
-                    for (let i = 0; i < lines.length && results.length < maxResults; i++) {
-                        if (lines[i].toLowerCase().includes(queryLower)) {
-                            results.push({ file: relPath, line: i + 1, content: lines[i].trim() });
-                        }
-                    }
-                } catch { /* skip unreadable */ }
-            }
-        }
-    }
-
-    await searchDir(root);
-    return results;
-}
-
-/**
- * execInWorkspaceWindows — Uses cmd.exe instead of sh.
- * Used automatically on Windows.
- */
-function execInWorkspaceWindows(root, command, timeoutSec) {
-    return new Promise((resolve) => {
-        const child = spawn("cmd.exe", ["/c", command], { cwd: root });
-        let stdout = "";
-        let stderr = "";
-
-        child.stdout.on("data", d => stdout += d.toString());
-        child.stderr.on("data", d => stderr += d.toString());
-
-        child.on("error", (err) => {
-            resolve({ exitCode: -1, stdout: "", stderr: err.message, timedOut: false });
-        });
-
-        const timer = setTimeout(() => {
-            try { child.kill("SIGKILL"); } catch {}
-            resolve({ exitCode: -1, stdout, stderr, timedOut: true });
-        }, timeoutSec * 1000);
-
-        child.on("close", (code) => {
-            clearTimeout(timer);
-            const maxLen = 10000;
-            if (stdout.length > maxLen) {
-                stdout = stdout.substring(0, maxLen / 2) + "\n...(truncated)...\n" + stdout.substring(stdout.length - maxLen / 2);
-            }
-            resolve({ exitCode: code ?? 0, stdout, stderr: stderr.substring(0, 5000), timedOut: false });
-        });
-    });
-}
-
-// Platform dispatchers — original functions unchanged above
-const IS_WINDOWS = process.platform === "win32";
-const grepWorkspaceX = IS_WINDOWS ? grepWorkspaceWindows : grepWorkspace;
-const execInWorkspaceX = IS_WINDOWS ? execInWorkspaceWindows : execInWorkspace;
+}

package/src/runtimes/base-runtime.js

@@ -267,7 +267,7 @@ export class BaseRuntime {
 
 /**
  * @typedef {object} Integration
- * @property {string} type - Tipo (rest-template, feign, axios, etc.)
+ * @property {string} type - Tipo (rest-templates, feign, axios, etc.)
  * @property {string} file - Arquivo onde foi encontrado
  * @property {number} line - Linha
  * @property {string} targetUrl - URL alvo (se detectável)

package/src/runtimes/java/java-integrations.js

@@ -101,7 +101,7 @@ export class JavaIntegrationAnalyzer {
                 const method = this.extractHttpMethod(match[0]);
 
                 this.integrations.push({
-                    type: 'rest-template',
+                    type: 'rest-templates',
                     subType: pattern.type,
                     file: filePath,
                     line,

package/src/runtimes/node/node-integrations.js

@@ -98,7 +98,7 @@ export class NodeIntegrationAnalyzer {
     findFetch(content, filePath, lines) {
         const patterns = [
             { regex: /fetch\s*\(\s*['"`]/g, type: 'call' },
-            { regex: /fetch\s*\(\s*\$\{/g, type: 'template-call' }
+            { regex: /fetch\s*\(\s*\$\{/g, type: 'templates-call' }
         ];
 
         for (const pattern of patterns) {

package/src/server.js

@@ -27,9 +27,11 @@ import { startMCPHttpServer } from "./mcp-http-server.js";
 
 const execAsync = promisify(exec);
 
+// ============================================
 // 🧠 AI VIBE CODING ENGINE
 // Sistema universal de auto-healing que usa AI
 // para resolver QUALQUER erro automaticamente
+// ============================================
 
 class AIVibeCodingEngine extends EventEmitter {
     constructor(processManager, getWorkspaceRoot) {
@@ -586,8 +588,10 @@ const MCP_PORT = process.env.MCP_PORT || 5056;
 // 🧠 Inicializar AI Vibe Coding Engine
 aiEngine = new AIVibeCodingEngine(processManager, () => WORKSPACE_ROOT);
 
+// ============================================
 // 🆕 BACKUP STORAGE (Sprint 1.3)
 // In-memory backup storage with configurable max size
+// ============================================
 const BACKUPS = new Map();
 const MAX_BACKUPS = 50;
 const BACKUP_INDEX_PATH = path.join(os.tmpdir(), 'deepdebug-backups-index.json');
@@ -884,7 +888,9 @@ app.post("/workspace/batch-read", async (req, res) => {
     }
 });
 
+// ============================================
 // 🆕 FILE VALIDATION ENDPOINTS (Enhanced Analysis)
+// ============================================
 
 /**
  * GET /workspace/file-exists
@@ -1244,7 +1250,9 @@ app.post("/workspace/find-field-definition", async (req, res) => {
 });
 
 
+// ============================================
 // 🆕 RUNTIME MANAGEMENT ENDPOINTS
+// ============================================
 
 /** Detecta serviços no workspace */
 app.get("/workspace/services/detect", async (_req, res) => {
@@ -1395,7 +1403,9 @@ app.get("/workspace/services/:serviceId/logs/stream", (req, res) => {
     });
 });
 
+// ============================================
 // ENDPOINTS LEGADOS (manter compatibilidade)
+// ============================================
 
 app.get("/workspace/files", async (req, res) => {
     if (!WORKSPACE_ROOT) return res.status(400).json({ error: "workspace not set" });
@@ -1428,7 +1438,9 @@ app.post("/workspace/write", async (req, res) => {
     }
 });
 
+// ============================================
 // ✅ CORRECTED: /workspace/patch endpoint
+// ============================================
 app.post("/workspace/patch", async (req, res) => {
     if (!WORKSPACE_ROOT) return res.status(400).json({ error: "workspace not set" });
     const { diff, incidentId } = req.body || {};
@@ -1484,7 +1496,9 @@ app.post("/workspace/run", async (req, res) => {
     res.json(out);
 });
 
+// ============================================
 // 🆕 TEST LOCAL ENDPOINTS
+// ============================================
 
 /** Store test local state */
 let TEST_LOCAL_STATE = {
@@ -1497,7 +1511,9 @@ let TEST_LOCAL_STATE = {
     serverLogs: [] // Buffer circular de logs do servidor (últimos 1000)
 };
 
+// ============================================
 // 🆕 TEST LOCAL STATE ENDPOINTS (ADDED)
+// ============================================
 
 /**
  * GET /workspace/test-local/state
@@ -2001,8 +2017,10 @@ app.get("/workspace/config", async (_req, res) => {
     }
 });
 
+// ============================================
 // 🆕 BACKUP & ROLLBACK ENDPOINTS (Sprint 1.3)
 // Added without modifying existing endpoints
+// ============================================
 
 /**
  * Helper: Validate diff format
@@ -2407,9 +2425,11 @@ app.delete("/workspace/backups/:backupId", (req, res) => {
     });
 });
 
+// ============================================
 // 📊 DIFF VIEWER ENDPOINT
 // Returns before/after content for files modified by a patch
 // Used by the frontend diff viewer
+// ============================================
 
 /**
  * GET /workspace/diff/by-incident/:incidentId
@@ -2589,8 +2609,10 @@ app.get("/workspace/diff/:backupId", async (req, res) => {
     }
 });
 
+// ============================================
 // 🆕 DETECT PORT ENDPOINT (Sprint 1.2)
 // Multi-language port detection
+// ============================================
 
 /**
  * GET /workspace/detect-port
@@ -2861,7 +2883,9 @@ async function detectDotNetPort(servicePath) {
     return { port: 5000, method: 'dotnet-default' };
 }
 
+// ============================================
 // TEST LOCAL ENDPOINTS (existing)
+// ============================================
 
 /** Prepare for testing: compile + discover endpoints */
 app.post("/workspace/test-local/prepare", async (req, res) => {
@@ -3112,8 +3136,10 @@ app.get("/workspace/test-local/logs/stream", async (req, res) => {
     }
 });
 
+// ============================================
 // 🆕 AUTO-TRAINING ENDPOINTS
 // Escanear e ler arquivos para treinamento AI
+// ============================================
 
 /**
  * POST /workspace/scan-files
@@ -3332,8 +3358,10 @@ app.post("/workspace/read-files", async (req, res) => {
     }
 });
 
+// ============================================
 // 🆕 SYSTEM FOLDER PICKER ENDPOINT
 // Abre file picker nativo do SO (Windows/Mac/Linux)
+// ============================================
 
 /**
  * GET /system/folder-picker
@@ -3456,8 +3484,10 @@ app.get("/system/info", (req, res) => {
     });
 });
 
+// ============================================
 // 🆕 API DOCS ENDPOINT
 // Retorna endpoints detectados das controllers
+// ============================================
 
 /**
  * GET /workspace/api-docs
@@ -3637,7 +3667,9 @@ app.get("/workspace/api-docs/:controller", async (req, res) => {
     }
 });
 
+// ============================================
 // 🧠 AI ENGINE ENDPOINTS
+// ============================================
 
 /**
  * GET /ai-engine/status
@@ -3843,8 +3875,10 @@ app.post("/workspace/test-local/restart", async (req, res) => {
     }
 });
 
+// ============================================
 // 🤖 AGENTIC TOOLS ENDPOINTS
 // Used by the agentic Claude loop for autonomous debugging
+// ============================================
 
 /**
  * POST /workspace/search
@@ -4014,8 +4048,10 @@ app.post("/workspace/exec", async (req, res) => {
     }
 });
 
+// ============================================
 // 🧪 ENDPOINT TESTING
 // Execute curl-like requests and capture full request/response
+// ============================================
 
 /**
  * POST /workspace/test-endpoint
@@ -4106,8 +4142,10 @@ app.post("/workspace/test-endpoint", async (req, res) => {
     }
 });
 
+// ============================================
 // 🔀 GIT INTEGRATION
 // Create branch, commit, push for auto-fix PRs
+// ============================================
 
 /**
  * POST /workspace/git/create-fix-branch
@@ -4330,8 +4368,16 @@ app.post("/workspace/git/create-fix-branch", async (req, res) => {
             }
 
             // Generate MR/PR URL based on provider
+            // 🔒 SECURITY FIX: Remove any embedded tokens from URL before constructing MR link
+            // This prevents tokens from appearing in logs, UI, or being shared accidentally
             const cleanUrl = remoteUrl
                 .replace(/\.git$/, '')
+                // Remove token authentication patterns (SECURITY FIX - tokens must not appear in MR URL)
+                .replace(/https:\/\/[^@]+@github\.com\//, 'https://github.com/')
+                .replace(/https:\/\/[^@]+@gitlab\.com\//, 'https://gitlab.com/')
+                .replace(/https:\/\/[^@]+@bitbucket\.org\//, 'https://bitbucket.org/')
+                .replace(/https:\/\/[^@]+@([^\/]+)\//, 'https://$1/')  // Generic: any host with embedded credentials
+                // Handle SSH URLs
                 .replace(/^git@github\.com:/, 'https://github.com/')
                 .replace(/^git@gitlab\.com:/, 'https://gitlab.com/')
                 .replace(/^git@bitbucket\.org:/, 'https://bitbucket.org/');
@@ -4576,9 +4622,11 @@ app.get("/workspace/git/status", async (req, res) => {
     }
 });
 
+// ============================================
 // 💬 PULL REQUEST COMMENTS ENDPOINTS
 // Read, reply, and resolve PR comments via git providers
 // Used by the frontend "Code Review" tab in incident detail
+// ============================================
 
 /**
  * GET /workspace/git/pr/comments
@@ -4898,8 +4946,10 @@ app.post("/workspace/git/pr/comments/:commentId/fix-and-resolve", async (req, re
 });
 
 
+// ============================================
 // 🔧 GIT PROVIDER HELPER (internal)
 // Detects provider from remote URL and configures with token
+// ============================================
 
 async function _getGitProvider() {
     if (!WORKSPACE_ROOT) return null;
@@ -4962,7 +5012,9 @@ async function _getGitProvider() {
         return null;
     }
 }
+// ============================================
 // 📂 MULTI-WORKSPACE ENDPOINTS
+// ============================================
 
 /** Lista todos os workspaces abertos */
 app.get("/workspaces", (_req, res) => {
@@ -5040,8 +5092,10 @@ app.post("/workspace/:workspaceId/run", async (req, res) => {
 });
 
 
+// ============================================
 // 🔌 WEBSOCKET REVERSE TUNNEL
 // Connects Local Agent to Gateway — no public URL needed
+// ============================================
 async function startWebSocketTunnel(port, gatewayUrl, apiKey, tenantId) {
     if (!gatewayUrl || !apiKey || !tenantId) {
         console.log('⚠️  WebSocket tunnel skipped: missing gatewayUrl, apiKey or tenantId in ~/.deepdebug/config.json');
@@ -5133,16 +5187,6 @@ async function startWebSocketTunnel(port, gatewayUrl, apiKey, tenantId) {
                 }
             }
 
-            case 'workspace.git.create-fix-branch': {
-                const fetch2 = (await import('node-fetch')).default;
-                const r = await fetch2(`http://localhost:5055/workspace/git/create-fix-branch`, {
-                    method: 'POST',
-                    headers: { 'Content-Type': 'application/json' },
-                    body: JSON.stringify(params)
-                });
-                return await r.json();
-            }
-
             case 'workspace.safe-patch':
             case 'workspace.compile':
             case 'workspace.rollback':
@@ -5165,7 +5209,32 @@ async function startWebSocketTunnel(port, gatewayUrl, apiKey, tenantId) {
                 return await res.json();
             }
 
+            // ============================================
+            // WORKSPACE DIFF — Returns before/after for patches
+            // ============================================
+            case 'workspace.diff': {
+                const { backupId, incidentId } = params;
+                let endpoint;
+
+                if (backupId) {
+                    endpoint = `/workspace/diff/${backupId}`;
+                } else if (incidentId) {
+                    endpoint = `/workspace/diff/by-incident/${incidentId}`;
+                } else {
+                    return { error: 'backupId or incidentId is required' };
+                }
+
+                console.log(`📊 WS workspace.diff → ${endpoint}`);
+                const res = await fetch(`${localBase}${endpoint}`, {
+                    method: 'GET',
+                    headers: { 'Content-Type': 'application/json' }
+                });
+                return await res.json();
+            }
+
+            // ============================================
             // MCP TOOLS — routed via MCP HTTP Bridge (port 5056)
+            // ============================================
             case 'mcp.read-file': {
                 const mcpBase = `http://localhost:5056`;
                 const res = await fetch(`${mcpBase}/mcp/read-file`, {
@@ -5288,7 +5357,9 @@ async function startWebSocketTunnel(port, gatewayUrl, apiKey, tenantId) {
     connect();
 }
 
+// ============================================
 // START SERVER
+// ============================================
 app.listen(PORT, '0.0.0.0', async () => {
     console.log(`\n🔌 DeepDebug Local Agent listening on port ${PORT}`);
     console.log(`📦 Environment: ${process.env.NODE_ENV || 'development'}`);

package/src/workspace/detect-port.js

@@ -15,6 +15,7 @@ app.get("/workspace/detect-port", async (req, res) => {
         return res.status(400).json({
             error: "workspace not set",
             hint: "call POST /workspace/open first"
+
         });
     }
 

package/.idea/deepdebug-local-agent.iml

@@ -1,12 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<module type="WEB_MODULE" version="4">
-  <component name="NewModuleRootManager">
-    <content url="file://$MODULE_DIR$">
-      <excludeFolder url="file://$MODULE_DIR$/.tmp" />
-      <excludeFolder url="file://$MODULE_DIR$/temp" />
-      <excludeFolder url="file://$MODULE_DIR$/tmp" />
-    </content>
-    <orderEntry type="inheritedJdk" />
-    <orderEntry type="sourceFolder" forTests="false" />
-  </component>
-</module>

package/.idea/modules.xml

@@ -1,8 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="ProjectModuleManager">
-    <modules>
-      <module fileurl="file://$PROJECT_DIR$/.idea/deepdebug-local-agent.iml" filepath="$PROJECT_DIR$/.idea/deepdebug-local-agent.iml" />
-    </modules>
-  </component>
-</project>

package/.idea/vcs.xml

@@ -1,6 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="VcsDirectoryMappings">
-    <mapping directory="$PROJECT_DIR$" vcs="Git" />
-  </component>
-</project>