@iservu-inc/adf-cli 0.4.29 → 0.4.30

package/CHANGELOG.md

@@ -5,6 +5,31 @@ All notable changes to `@iservu-inc/adf-cli` will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.4.30] - 2025-10-04
+
+### 🔒 Security: Auto .gitignore Protection
+
+**Added: Automatic .gitignore Management**
+- **Feature:** Automatically create/update `.gitignore` to protect `.adf/.env` file
+- **Purpose:** Prevent accidentally committing API keys to version control
+- **Implementation:**
+  - New `ensureGitignore()` function in `ai-config.js`
+  - Called automatically after saving API keys
+  - Creates `.gitignore` if it doesn't exist
+  - Adds `.adf/.env` entry with warning comment
+  - Skips if entry already exists (non-destructive)
+
+**Code Changes:**
+- `lib/ai/ai-config.js:106-136` - New `ensureGitignore()` function
+- `lib/ai/ai-config.js:158-160` - Auto-call after saving API keys
+
+**User Benefit:**
+- No more risk of committing API keys
+- Automatic protection without manual setup
+- Works with existing `.gitignore` files safely
+
+---
+
 ## [0.4.29] - 2025-10-04
 
 ### 🐛 CRITICAL FIX: OpenAI Model Fetching

package/lib/ai/ai-config.js

@@ -103,6 +103,38 @@ async function loadEnvFile(envPath) {
   return {};
 }
 
+/**
+ * Ensure .gitignore includes .adf/.env to protect API keys
+ */
+async function ensureGitignore(projectPath) {
+  const gitignorePath = path.join(projectPath, '.gitignore');
+  const entryToAdd = '.adf/.env';
+
+  let content = '';
+  let hasEntry = false;
+
+  // Read existing .gitignore if it exists
+  if (await fs.pathExists(gitignorePath)) {
+    content = await fs.readFile(gitignorePath, 'utf-8');
+    hasEntry = content.split('\n').some(line => line.trim() === entryToAdd);
+  }
+
+  // Add entry if not already present
+  if (!hasEntry) {
+    const lines = content ? content.split('\n') : [];
+
+    // Add a section header if .gitignore is empty or doesn't have the entry
+    if (lines.length === 0 || (lines[lines.length - 1] && lines[lines.length - 1].trim() !== '')) {
+      lines.push(''); // Add blank line if file is not empty
+    }
+
+    lines.push('# adf-cli - AI Provider API Keys (DO NOT COMMIT)');
+    lines.push(entryToAdd);
+
+    await fs.writeFile(gitignorePath, lines.join('\n'), 'utf-8');
+  }
+}
+
 /**
  * Save API key to .env file
  */
@@ -122,6 +154,10 @@ async function saveToEnvFile(envPath, key, value) {
 
   await fs.ensureDir(path.dirname(envPath));
   await fs.writeFile(envPath, lines.join('\n'), 'utf-8');
+
+  // Ensure .gitignore protects this file
+  const projectPath = path.dirname(path.dirname(envPath)); // Go up from .adf/.env to project root
+  await ensureGitignore(projectPath);
 }
 
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@iservu-inc/adf-cli",
-  "version": "0.4.29",
+  "version": "0.4.30",
   "description": "CLI tool for AgentDevFramework - AI-assisted development framework with multi-provider AI support",
   "main": "index.js",
   "bin": {