chore: hard-block chat and show admin-only scope message; silence favicon

deepshell-backend/deepshell/__main__.py

@@ -6,18 +6,17 @@ from pydantic import BaseModel
 import os
 from pathlib import Path
 
-from .llm import get_global_client
+# LLM disabled in hard-block mode. To re-enable later, uncomment this import
+# and the marked section in run_agent.
+# from .llm import get_global_client
 
-# Resolve paths
-# This file is at: deepshell-backend/deepshell/__main__.py
-# Repo root is two levels up from here
 REPO_ROOT = Path(__file__).resolve().parents[2]  # deepshell_modui/
 INDEX_PATH = REPO_ROOT / "index.html"
-STATIC_ROOT = REPO_ROOT  # serve app.js, services.css, etc. from repo root
+STATIC_ROOT = REPO_ROOT
 
 app = FastAPI(title="DeepShell Backend + UI")
 
-# CORS (kept minimal; mostly redundant when same-origin)
+# CORS (mostly redundant when same-origin)
 default_origins = [
     "http://localhost",
     "http://localhost:8001",
@@ -36,28 +35,18 @@ app.add_middleware(
     allow_headers=["*"],
 )
 
-# Mount static files from repo root at /static (and also expose top-level files)
-# We’ll explicitly serve index.html at /, and expose other files at their names.
-# Primary mount so /app.js, /services.css, etc. work:
+# Serve static assets from repo root
 app.mount("/static", StaticFiles(directory=str(STATIC_ROOT), html=False), name="static")
 
 class ChatRequest(BaseModel):
     prompt: str
 
-# Serve index.html at /
 @app.get("/")
 def root_page():
     if INDEX_PATH.exists():
         return FileResponse(str(INDEX_PATH))
-    return {
-        "name": "DeepShell Backend",
-        "status": "ok",
-        "endpoints": ["/chat/ready", "/chat/run-agent"],
-        "note": f"index.html not found at {INDEX_PATH}",
-    }
-
-# Convenience routes to serve common top-level assets directly
-# so your <script src="./app.js"> works without /static prefix.
+    return {"status": "ok", "note": f"index.html not found at {INDEX_PATH}"}
+
 @app.get("/app.js")
 def get_app_js():
     path = STATIC_ROOT / "app.js"
@@ -72,32 +61,38 @@ def get_css():
         return FileResponse(str(path), media_type="text/css")
     return {"detail": "Not Found"}, 404
 
+@app.get("/favicon.ico")
+def favicon():
+    # Silence 404 noise for favicon
+    return {"ok": True}
+
 @app.get("/chat/ready")
 def chat_ready():
-    try:
-        _ = get_global_client(os.getenv("PROVIDER", "groq"))
-        return {"status": "ok"}
-    except Exception as e:
-        return {"status": "error", "detail": str(e)}
+    # UI health remains OK in hard-block mode
+    return {"status": "ok"}
+
+# Polite block message (updated wording)
+BLOCK_MSG = (
+    "DeepShell is for Linux SysAdmin, DevOps, IaC, Cloud, and Linux scripting questions only. "
+    "Please rephrase your request in that context (e.g., commands, troubleshooting steps, "
+    "automation snippets, config examples, or cloud/infra best practices)."
+)
 
 @app.post("/chat/run-agent")
 def run_agent(req: ChatRequest):
     prompt = (req.prompt or "").strip()
     if not prompt:
-        return {"error": "prompt is required"}
-
-    client = get_global_client(os.getenv("PROVIDER", "groq"))
-    resp = client.chat(prompt, max_tokens=1024, temperature=0.1)
+        # Still respond politely rather than erroring
+        return {"answer": BLOCK_MSG}
 
-    if not hasattr(resp, "choices") or not resp.choices:
-        try:
-            text = resp.choices[0].message.content
-        except Exception:
-            text = str(resp)
-        return {"error": text}
+    # HARD BLOCK: always return the policy message; do not call the LLM.
+    return {"answer": BLOCK_MSG}
 
-    text = resp.choices[0].message.content
-    return {"answer": text}
+    # To re-enable later, replace the two lines above with:
+    # client = get_global_client(os.getenv("PROVIDER", "groq"))
+    # resp = client.chat(prompt, max_tokens=1024, temperature=0.1)
+    # text = getattr(resp.choices[0].message, "content", str(resp))
+    # return {"answer": text}
 
 if __name__ == "__main__":
     import uvicorn