Repository navigation
PatchPilot is a local-first AI coding-agent preview. It takes a repository task through analysis, a plan, proposed edits, locally isolated test execution (when available), and a reviewable Git diff.
What works in this preview
- Repository inspection, task planning, isolated workspace branches, guarded edits, and reviewable diffs.
- A fail-closed Docker test runner with no network, non-root execution, bounded resources and private diagnostic logs. Test commands do not run on the host if Docker/isolation is unavailable.
- Loopback-first HTTP API with an optional bearer token, protected Git plumbing and heuristics that block some sensitive commits/model context.
- Bounded model-provider transfers and recent host Git hardening: 4 MiB output capture limit, explicit oversized-diff warning, and POSIX process-group cleanup on timeout.
Verified evidence
- 116 backend regression tests, Python 3.11/3.12 CI, Docker isolation integration, Python CodeQL, and five controlled browser scenarios.
- Latest security fix and tests: #33
- Reproduction instructions: https://github.com/harshitethic/PatchPilot/blob/main/docs/bounded-git-host-operations.md
- Security model and limitations: https://github.com/harshitethic/PatchPilot/blob/main/docs/security-boundaries.md
Try it
See the macOS/local quick start in the README. For Python test execution, preload the approved Docker test image before running; other language suites may require custom approved offline images.
Limitations: Preview, not production multi-tenant isolation or a fully audited sandbox. Cloning and trusted Git commands still run on the host; passing CI/CodeQL does not eliminate security risks. Model quality and reliability depend on the provider, and browser scenarios use controlled fixtures rather than a production AI model.
No binaries are attached; GitHub's generated source archives contain the release's source.