aidevops 2.52.1 → 2.53.1

package/README.md

@@ -55,7 +55,7 @@ The result: AI agents that work *with* your development process, not around it.
 [![GitHub commits since latest release](https://img.shields.io/github/commits-since/marcusquinn/aidevops/latest)](https://github.com/marcusquinn/aidevops/commits/main)
 
 <!-- Repository Stats -->
-[![Version](https://img.shields.io/badge/Version-2.52.1-blue)](https://github.com/marcusquinn/aidevops/releases)
+[![Version](https://img.shields.io/badge/Version-2.53.0-blue)](https://github.com/marcusquinn/aidevops/releases)
 [![GitHub repo size](https://img.shields.io/github/repo-size/marcusquinn/aidevops?style=flat&color=blue)](https://github.com/marcusquinn/aidevops)
 [![Lines of code](https://img.shields.io/badge/Lines%20of%20Code-18%2C000%2B-brightgreen)](https://github.com/marcusquinn/aidevops)
 [![GitHub language count](https://img.shields.io/github/languages/count/marcusquinn/aidevops)](https://github.com/marcusquinn/aidevops)

package/VERSION

@@ -1 +1 @@
-2.52.1
+2.53.1

package/aidevops.sh

@@ -76,6 +76,7 @@ init_repos_file() {
         mkdir -p "$CONFIG_DIR"
         echo '{"initialized_repos": []}' > "$REPOS_FILE"
     fi
+    return 0
 }
 
 # Register a repo in repos.json
@@ -88,7 +89,10 @@ register_repo() {
     init_repos_file
     
     # Normalize path (resolve symlinks, remove trailing slash)
-    repo_path=$(cd "$repo_path" 2>/dev/null && pwd -P)
+    if ! repo_path=$(cd "$repo_path" 2>/dev/null && pwd -P); then
+        print_warning "Cannot access path: $repo_path"
+        return 1
+    fi
     
     if ! command -v jq &>/dev/null; then
         print_warning "jq not installed - repo tracking disabled"
@@ -109,6 +113,7 @@ register_repo() {
             '.initialized_repos += [{path: $path, version: $version, features: ($features | split(",")), initialized: (now | strftime("%Y-%m-%dT%H:%M:%SZ"))}]' \
             "$REPOS_FILE" > "$temp_file" && mv "$temp_file" "$REPOS_FILE"
     fi
+    return 0
 }
 
 # Get list of registered repos
@@ -121,6 +126,7 @@ get_registered_repos() {
     fi
     
     jq -r '.initialized_repos[] | .path' "$REPOS_FILE" 2>/dev/null || echo ""
+    return 0
 }
 
 # Check if a repo needs upgrade (version behind current)
@@ -152,7 +158,7 @@ detect_unregistered_repo() {
     local project_root
     
     # Check if in a git repo
-    if ! git rev-parse --is-inside-work-tree &>/dev/null 2>&1; then
+    if ! git rev-parse --is-inside-work-tree &>/dev/null; then
         return 1
     fi
     
@@ -1473,19 +1479,21 @@ cmd_repos() {
         
         remove|rm)
             local repo_path="${2:-}"
+            local original_path="$repo_path"
             
             if [[ -z "$repo_path" ]]; then
                 # Use current directory
                 if git rev-parse --is-inside-work-tree &>/dev/null; then
                     repo_path=$(git rev-parse --show-toplevel)
+                    original_path="$repo_path"
                 else
                     print_error "Specify a repo path or run from within a git repo"
                     return 1
                 fi
             fi
             
-            # Normalize path
-            repo_path=$(cd "$repo_path" 2>/dev/null && pwd -P) || repo_path="$2"
+            # Normalize path (keep original if normalization fails)
+            repo_path=$(cd "$repo_path" 2>/dev/null && pwd -P) || repo_path="$original_path"
             
             if ! command -v jq &>/dev/null; then
                 print_error "jq required for repo management"
@@ -1511,16 +1519,13 @@ cmd_repos() {
             local removed=0
             local temp_file="${REPOS_FILE}.tmp"
             
-            # Filter out repos that don't exist
-            jq '[.initialized_repos[] | select(.path as $p | ($p | type == "string") and ([$p] | .[0] | test("^/")))]' "$REPOS_FILE" > /dev/null 2>&1
-            
             while IFS= read -r repo_path; do
                 [[ -z "$repo_path" ]] && continue
                 if [[ ! -d "$repo_path" ]]; then
                     jq --arg path "$repo_path" '.initialized_repos |= map(select(.path != $path))' "$REPOS_FILE" > "$temp_file" && \
                         mv "$temp_file" "$REPOS_FILE"
                     print_info "Removed: $repo_path"
-                    ((removed++))
+                    removed=$((removed + 1))
                 fi
             done < <(get_registered_repos)
             
@@ -1589,7 +1594,7 @@ cmd_detect() {
             if command -v jq &>/dev/null; then
                 if ! jq -e --arg path "$repo_dir" '.initialized_repos[] | select(.path == $path)' "$REPOS_FILE" &>/dev/null; then
                     to_register+=("$repo_dir")
-                    ((found++))
+                    found=$((found + 1))
                 fi
             fi
         done < <(find "$HOME/Git" -maxdepth 3 -name ".aidevops.json" -print0 2>/dev/null)
@@ -1623,6 +1628,7 @@ cmd_detect() {
             print_success "Registered $(basename "$repo")"
         done
     fi
+    return 0
 }
 
 # Help command

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aidevops",
-  "version": "2.52.1",
+  "version": "2.53.1",
   "description": "AI DevOps Framework - AI-assisted development workflows, code quality, and deployment automation",
   "type": "module",
   "main": "index.js",
@@ -37,7 +37,7 @@
   "author": "Marcus Quinn <marcus@aidevops.sh>",
   "license": "MIT",
   "dependencies": {
-    "dspyground": "^0.1.0",
+    "dspyground": "^0.2.0",
     "elysia": "^1.1.0"
   },
   "devDependencies": {
@@ -60,9 +60,9 @@
     "bin/",
     "aidevops.sh",
     "setup.sh",
-    ".agent/",
     "VERSION",
-    "scripts/npm-postinstall.js"
+    "scripts/npm-postinstall.js",
+    "templates/"
   ],
   "repository": {
     "type": "git",

package/scripts/npm-postinstall.js

@@ -1,21 +1,19 @@
-#!/usr/bin/env node
 /**
  * npm postinstall script for aidevops
  * Runs setup.sh to deploy agents after npm install -g
  */
 
-const { execSync, spawn } = require('child_process');
+const { execSync } = require('child_process');
 const path = require('path');
 const fs = require('fs');
+const os = require('os');
 
 const packageDir = path.resolve(__dirname, '..');
 const setupScript = path.join(packageDir, 'setup.sh');
-const agentsDir = path.join(require('os').homedir(), '.aidevops', 'agents');
+const agentsDir = path.join(os.homedir(), '.aidevops', 'agents');
 
 // Check if this is a global install
-const isGlobalInstall = process.env.npm_config_global === 'true' || 
-                        process.argv.includes('--global') ||
-                        process.argv.includes('-g');
+const isGlobalInstall = process.env.npm_config_global === 'true';
 
 // Skip if not global install (local dev doesn't need postinstall)
 if (!isGlobalInstall && fs.existsSync(agentsDir)) {
@@ -54,7 +52,8 @@ try {
     console.log('');
 } catch (error) {
     console.error('aidevops: Setup encountered issues (non-critical)');
-    console.error('Run manually: bash ~/.aidevops/setup.sh');
+    console.error(`Run manually: bash "${setupScript}"`);
+    console.error('Or reinstall with: bash <(curl -fsSL https://aidevops.sh)');
     // Don't fail the install
     process.exit(0);
 }

package/setup.sh

@@ -3,7 +3,7 @@
 # AI Assistant Server Access Framework Setup Script
 # Helps developers set up the framework for their infrastructure
 #
-# Version: 2.52.1
+# Version: 2.53.0
 #
 # Quick Install (one-liner):
 #   bash <(curl -fsSL https://aidevops.dev/install)

package/templates/deploy-templates.sh

@@ -0,0 +1,144 @@
+#!/bin/bash
+
+# AI DevOps Framework - Template Deployment Script
+# Securely deploys minimal AGENTS.md templates to user's home directory
+
+set -euo pipefail
+
+# Color codes for output
+readonly RED='\033[0;31m'
+readonly GREEN='\033[0;32m'
+readonly YELLOW='\033[1;33m'
+readonly BLUE='\033[0;34m'
+readonly NC='\033[0m' # No Color
+
+# Print functions
+print_info() { local msg="$1"; echo -e "${BLUE}[INFO]${NC} $msg"; return 0; }
+print_success() { local msg="$1"; echo -e "${GREEN}[SUCCESS]${NC} $msg"; return 0; }
+print_warning() { local msg="$1"; echo -e "${YELLOW}[WARNING]${NC} $msg"; return 0; }
+print_error() { local msg="$1"; echo -e "${RED}[ERROR]${NC} $msg" >&2; return 0; }
+
+# Get the directory where this script is located
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(dirname "$SCRIPT_DIR")"
+
+# Validate we're in the correct repository
+if [[ ! -f "$REPO_ROOT/AGENTS.md" ]] || [[ ! -d "$REPO_ROOT/.agent" ]]; then
+    print_error "This script must be run from within the aidevops repository"
+    exit 1
+fi
+
+deploy_home_agents() {
+    local target_file="$HOME/AGENTS.md"
+    
+    print_info "Deploying minimal AGENTS.md to home directory..."
+    
+    # Backup existing file if it exists
+    if [[ -f "$target_file" ]]; then
+        print_warning "Existing AGENTS.md found, creating backup..."
+        cp "$target_file" "$target_file.backup.$(date +%Y%m%d_%H%M%S)"
+    fi
+    
+    # Deploy template
+    cp "$SCRIPT_DIR/home/AGENTS.md" "$target_file"
+    print_success "Deployed: $target_file"
+    return 0
+}
+
+deploy_git_agents() {
+    local git_dir="$HOME/git"
+    local target_file="$git_dir/AGENTS.md"
+    
+    print_info "Deploying minimal AGENTS.md to git directory..."
+    
+    # Create git directory if it doesn't exist
+    if [[ ! -d "$git_dir" ]]; then
+        mkdir -p "$git_dir"
+        print_info "Created git directory: $git_dir"
+    fi
+    
+    # Backup existing file if it exists
+    if [[ -f "$target_file" ]]; then
+        print_warning "Existing git/AGENTS.md found, creating backup..."
+        cp "$target_file" "$target_file.backup.$(date +%Y%m%d_%H%M%S)"
+    fi
+    
+    # Deploy template
+    cp "$SCRIPT_DIR/home/git/AGENTS.md" "$target_file"
+    print_success "Deployed: $target_file"
+    return 0
+}
+
+deploy_agent_directory() {
+    local agent_workspace="$HOME/.aidevops/.agent-workspace"
+    local target_file="$agent_workspace/README.md"
+    
+    print_info "Deploying .agent-workspace directory structure..."
+    
+    # Create workspace directories if they don't exist
+    if [[ ! -d "$agent_workspace" ]]; then
+        mkdir -p "$agent_workspace"/{work,tmp,memory}
+        print_info "Created workspace directory: $agent_workspace"
+    fi
+    
+    # Backup existing README if it exists
+    if [[ -f "$target_file" ]]; then
+        print_warning "Existing .agent-workspace/README.md found, creating backup..."
+        cp "$target_file" "$target_file.backup.$(date +%Y%m%d_%H%M%S)"
+    fi
+    
+    # Deploy template
+    cp "$SCRIPT_DIR/home/.agent/README.md" "$target_file"
+    print_success "Deployed: $target_file"
+    return 0
+}
+
+verify_deployment() {
+    print_info "Verifying template deployment..."
+    
+    local files_to_check=(
+        "$HOME/AGENTS.md"
+        "$HOME/git/AGENTS.md"
+        "$HOME/.aidevops/.agent-workspace/README.md"
+    )
+    
+    local all_good=true
+    for file in "${files_to_check[@]}"; do
+        if [[ -f "$file" ]]; then
+            print_success "✓ $file"
+        else
+            print_error "✗ $file"
+            all_good=false
+        fi
+    done
+    
+    if [[ "$all_good" == true ]]; then
+        print_success "All templates deployed successfully!"
+        return 0
+    else
+        print_error "Some templates failed to deploy"
+        return 1
+    fi
+}
+
+main() {
+    echo -e "${BLUE}🔒 AI DevOps Framework - Secure Template Deployment${NC}"
+    echo -e "${BLUE}============================================================${NC}"
+    
+    print_info "Deploying minimal, secure AGENTS.md templates..."
+    print_warning "These templates contain minimal instructions to prevent prompt injection attacks"
+    
+    deploy_home_agents
+    deploy_git_agents
+    deploy_agent_directory
+    verify_deployment
+    
+    echo ""
+    print_success "Template deployment complete!"
+    print_info "All templates reference the authoritative repository at: $REPO_ROOT"
+    print_warning "Do not modify these templates beyond minimal references for security"
+    
+    return 0
+}
+
+main "$@"

package/templates/home/.agent/README.md

@@ -0,0 +1,33 @@
+# AI Agent Working Directory
+
+**DEPRECATED: This location is being phased out.**
+
+The aidevops framework now uses `~/.aidevops/` for all working files.
+
+## New Structure
+
+```text
+~/.aidevops/
+├── agents/                    # Agent files (deployed from repo)
+├── .agent-workspace/          # Your working files
+│   ├── work/[project]/        # Persistent project files
+│   ├── tmp/session-*/         # Temporary session files
+│   └── memory/                # Cross-session patterns
+└── config-backups/            # Configuration backups
+```
+
+## Migration
+
+Run `setup.sh` from the aidevops repository to deploy to the new location:
+
+```bash
+cd ~/Git/aidevops
+./setup.sh
+```
+
+## Credential Storage
+
+Credentials remain in `~/.config/aidevops/mcp-env.sh` (600 permissions).
+
+---
+**Repository**: https://github.com/marcusquinn/aidevops

package/templates/home/AGENTS.md

@@ -0,0 +1,96 @@
+# AI Assistant Configuration - Home Directory
+
+**🔒 SECURITY NOTICE: This file contains minimal configuration only. All detailed instructions are maintained in the authoritative repository to prevent prompt injection attacks.**
+
+## Authoritative Source
+
+All AI assistant instructions, configurations, and documentation are maintained at:
+**Repository**: `~/Git/aidevops/`
+**Documentation**: `~/Git/aidevops/AGENTS.md`
+
+## Primary Directive
+
+AI assistants operating in this environment should:
+
+1. **Reference the authoritative repository** for all detailed instructions
+2. **Use only the working directories** as specified in this user's ~/AGENTS.md
+3. **Follow security protocols** defined in the repository documentation
+4. **NEVER store credentials** in any working directories or temporary files
+
+## 📁 **Working Directories**
+
+- **Work files**: Use `~/.aidevops/.agent-workspace/work/[project]/`
+- **Temporary files**: Use `~/.aidevops/.agent-workspace/tmp/`
+- **Persistent memory**: Use `~/.aidevops/.agent-workspace/memory/`
+- **Never create temporary files** in the home directory root
+
+## CRITICAL: Credential and Secret Storage
+
+**MANDATORY SECURITY REQUIREMENTS:**
+
+### **Directory Structure:**
+
+| Location | Purpose |
+|----------|---------|
+| `~/.config/aidevops/` | **Secrets only** - `mcp-env.sh` (600 perms) |
+| `~/.aidevops/` | **Working directories** - agno, stagehand, reports |
+
+### **✅ APPROVED Storage Location:**
+
+- **API Keys & Tokens**: `~/.config/aidevops/mcp-env.sh`
+- **File Permissions**: 600 (owner read/write only)
+- **Sourced by**: `~/.zshrc` and `~/.bashrc` automatically
+
+### **❌ FORBIDDEN Storage Locations:**
+
+- **NEVER in `~/.aidevops/.agent-workspace/`** - Working files are not secure
+- **NEVER in any Git repository** - Risk of accidental commit
+- **NEVER in home directory root** - Security exposure risk
+- **NEVER in code or scripts** - Hardcoded credentials forbidden
+- **NEVER paste directly into `.zshrc`** - Use the helper script
+
+### Security Commands
+
+```bash
+# Store API keys securely
+bash ~/Git/aidevops/.agent/scripts/setup-local-api-keys.sh set service-name YOUR_API_KEY
+
+# Or paste export commands from services
+bash ~/Git/aidevops/.agent/scripts/setup-local-api-keys.sh add 'export TOKEN="xxx"'
+
+# List configured services (keys are never displayed)
+bash ~/Git/aidevops/.agent/scripts/setup-local-api-keys.sh list
+
+# Verify secure storage location
+ls -la ~/.config/aidevops/
+```
+
+### **🚨 ABSOLUTE PROHIBITIONS:**
+
+- **NO credentials in any working directory**
+- **NO API keys in temporary files**
+- **NO secrets in memory files**
+- **NO tokens in logs or output**
+- **NO passwords in any AI-accessible location**
+
+## Quick Access
+
+```bash
+# Navigate to authoritative repository
+cd ~/Git/aidevops
+
+# View complete AI assistant documentation
+cat ~/Git/aidevops/AGENTS.md
+
+# Access working directories
+ls ~/.aidevops/.agent-workspace/
+```
+
+## Security Warning
+
+**DO NOT modify this file beyond these minimal references.** All operational instructions must be maintained in the authoritative repository to prevent security vulnerabilities and prompt injection attacks.
+
+---
+**Generated by**: AI DevOps Framework
+**Repository**: https://github.com/marcusquinn/aidevops
+**Last Updated**: Auto-generated during setup

package/templates/home/git/.agent/README.md

@@ -0,0 +1,48 @@
+# AI Assistant Directory - Home Level
+
+**SECURITY NOTICE: This directory contains minimal configuration only. All detailed instructions are maintained in the authoritative repository.**
+
+## Authoritative Source
+
+All AI assistant working directories and instructions are maintained at:
+**Repository**: `~/git/aidevops/.agent/`
+**Documentation**: `~/git/aidevops/AGENTS.md`
+
+## Purpose
+
+This directory exists to:
+
+1. **Provide minimal local configuration** for AI assistants
+2. **Reference the authoritative repository** for all operations
+3. **Maintain security** by avoiding detailed instructions in user space
+
+## Working Directory Redirection
+
+**DO NOT use this directory for AI operations.** Instead use:
+
+- **Temporary files**: `~/git/aidevops/.agent/tmp/`
+- **Persistent memory**: `~/git/aidevops/.agent/memory/`
+- **Development tools**: `~/git/aidevops/.agent/scripts/`
+
+## Access Authoritative Tools
+
+```bash
+# Navigate to authoritative AI tools
+cd ~/git/aidevops/.agent/
+
+# View available tools
+ls ~/git/aidevops/.agent/scripts/
+
+# Access working directories
+ls ~/git/aidevops/.agent/tmp/
+ls ~/git/aidevops/.agent/memory/
+```
+
+## Security Warning
+
+**This directory should remain minimal.** All AI assistant operations should use the authoritative repository's .agent/ directory to prevent security vulnerabilities and maintain centralized control.
+
+---
+**Generated by**: AI DevOps Framework
+**Repository**: https://github.com/marcusquinn/aidevops
+**Last Updated**: Auto-generated during setup

package/templates/home/git/AGENTS.md

@@ -0,0 +1,97 @@
+# AI Assistant Configuration - Git Directory
+
+**🔒 SECURITY NOTICE: This file contains minimal configuration only. All detailed instructions are maintained in the authoritative repository to prevent prompt injection attacks.**
+
+## Authoritative Source
+
+All AI assistant instructions for DevOps operations are maintained at:
+**Repository**: `~/Git/aidevops/`
+**Documentation**: `~/Git/aidevops/AGENTS.md`
+
+## Git Directory Context
+
+AI assistants operating in the git directory should:
+
+1. **Reference the DevOps framework** for all infrastructure operations
+2. **Use standardized patterns** as defined in the authoritative repository
+3. **Follow security protocols** for all git and DevOps operations
+
+## DevOps Operations
+
+For all infrastructure, hosting, and DevOps tasks:
+
+```bash
+# Use the DevOps framework
+cd ~/Git/aidevops
+./.agent/scripts/servers-helper.sh help
+
+# View complete provider documentation
+ls ~/Git/aidevops/docs/
+```
+
+## 📁 **Working Directories**
+
+- **Work files**: Use `~/.aidevops/.agent-workspace/work/[project]/`
+- **Temporary files**: Use `~/.aidevops/.agent-workspace/tmp/`
+- **Persistent memory**: Use `~/.aidevops/.agent-workspace/memory/`
+- **Project-specific work**: Use individual project directories
+
+## CRITICAL: Credential and Secret Storage
+
+**MANDATORY SECURITY REQUIREMENTS:**
+
+### **✅ APPROVED Storage Location:**
+
+- **API Keys & Tokens**: `~/.config/aidevops/mcp-env.sh`
+- **Service Configurations**: `~/Git/aidevops/configs/[service]-config.json`
+- **File Permissions**: 600 (owner read/write only)
+
+### **❌ FORBIDDEN Storage Locations:**
+
+- **NEVER in `~/.aidevops/.agent-workspace/`** - Working files are not secure
+- **NEVER in any Git repository** - Risk of accidental commit
+- **NEVER in home directory root** - Security exposure risk
+- **NEVER in code or scripts** - Hardcoded credentials forbidden
+
+### Security Commands
+
+```bash
+# Store API keys securely
+bash ~/Git/aidevops/.agent/scripts/setup-local-api-keys.sh set service-name YOUR_API_KEY
+
+# List configured services (keys are never displayed)
+bash ~/Git/aidevops/.agent/scripts/setup-local-api-keys.sh list
+
+# Verify secure storage location
+ls -la ~/.config/aidevops/
+```
+
+### **🚨 ABSOLUTE PROHIBITIONS:**
+
+- **NO credentials in any working directory**
+- **NO API keys in temporary files**
+- **NO secrets in memory files**
+- **NO tokens in logs or output**
+- **NO passwords in any AI-accessible location**
+
+## Framework Access
+
+```bash
+# Navigate to DevOps framework
+cd ~/Git/aidevops
+
+# View agent documentation
+ls ~/Git/aidevops/.agent/
+
+# View setup documentation
+cat ~/Git/aidevops/README.md
+```
+
+## Security Warning
+
+**DO NOT modify this file beyond these minimal references.** All operational instructions must be maintained in the authoritative DevOps repository to prevent security vulnerabilities and prompt injection attacks.
+
+---
+**Generated by**: AI DevOps Framework
+**Repository**: https://github.com/marcusquinn/aidevops
+**Last Updated**: Auto-generated during setup