aidevops 2.85.0 → 2.86.1

package/README.md

@@ -71,7 +71,7 @@ The result: AI agents that work *with* your development process, not around it.
 [![Services Supported](https://img.shields.io/badge/Services%20Supported-30+-brightgreen.svg)](#comprehensive-service-coverage)
 [![AGENTS.md](https://img.shields.io/badge/AGENTS.md-Compliant-blue.svg)](https://agents.md/)
 [![AI Optimized](https://img.shields.io/badge/AI%20Optimized-Yes-brightgreen.svg)](https://github.com/marcusquinn/aidevops/blob/main/AGENTS.md)
-[![MCP Servers](https://img.shields.io/badge/MCP%20Servers-18-orange.svg)](#mcp-integrations)
+[![MCP Servers](https://img.shields.io/badge/MCP%20Servers-19-orange.svg)](#mcp-integrations)
 [![API Integrations](https://img.shields.io/badge/API%20Integrations-30+-blue.svg)](#comprehensive-service-coverage)
 
 <!-- AI-CONTEXT-START -->
@@ -92,8 +92,8 @@ The result: AI agents that work *with* your development process, not around it.
 ### Agent Structure
 
 - 18 primary agents (Plan+, Build+, SEO, WordPress, etc.)
-- 536+ subagent markdown files organized by domain
-- 141+ helper scripts in `.agent/scripts/`
+- 560+ subagent markdown files organized by domain
+- 146+ helper scripts in `.agent/scripts/`
 - 41 slash commands for common workflows
 
 <!-- AI-CONTEXT-END -->
@@ -584,7 +584,7 @@ The setup script offers to install these tools automatically.
 - **[Hetzner Cloud](https://www.hetzner.com/cloud)**: VPS servers, networking, load balancers
 - **[Closte](https://closte.com/)**: Managed hosting, application deployment
 - **[Coolify](https://coolify.io/)** *Enhanced with CLI*: Self-hosted PaaS with CLI integration
-- **[Cloudron](https://www.cloudron.io/)**: Server and app management platform
+- **[Cloudron](https://www.cloudron.io/)** *Enhanced with packaging guide*: Server and app management platform with custom app packaging support
 - **[Vercel](https://vercel.com/)** *Enhanced with CLI*: Modern web deployment platform with CLI integration
 - **[AWS](https://aws.amazon.com/)**: Cloud infrastructure support via standard protocols
 - **[DigitalOcean](https://www.digitalocean.com/)**: Cloud infrastructure support via standard protocols
@@ -646,6 +646,11 @@ The setup script offers to install these tools automatically.
 - **[DSPyGround](https://dspyground.com/)**: Interactive playground for prompt optimization
 - **[TOON Format](https://github.com/marcusquinn/aidevops/blob/main/.agent/toon-format.md)**: Token-Oriented Object Notation - 20-60% token reduction for LLM prompts
 
+### **Document Processing**
+
+- **[LibPDF](https://libpdf.dev/)**: PDF form filling, digital signatures (PAdES B-B/T/LT/LTA), encryption, merge/split, text extraction
+- **[Unstract](https://github.com/Zipstack/unstract)**: LLM-powered structured data extraction from unstructured documents (PDF, images, DOCX)
+
 ### **Communications**
 
 - **[Twilio](https://www.twilio.com/)**: SMS, voice calls, WhatsApp, phone verification (Verify API), call recording & transcription
@@ -671,7 +676,7 @@ The setup script offers to install these tools automatically.
 
 **Model Context Protocol servers for real-time AI assistant integration.** The framework configures these MCPs primarily for **[OpenCode](https://opencode.ai/)** (recommended). Configuration support is also available for 17 other AI assistants including Cursor, Claude Code/Desktop, Windsurf, Continue.dev, Cody, Zed, GitHub Copilot, Kilo Code, Kiro, AntiGravity, Gemini CLI, Droid, Warp AI, Aider, and Qwen.
 
-### **All Supported MCPs (18 active)**
+### **All Supported MCPs (19 active)**
 
 MCP packages are installed globally via `bun install -g` for instant startup (no `npx` registry lookups). Run `setup.sh` or `aidevops update-tools` to update to latest versions.
 
@@ -695,11 +700,14 @@ MCP packages are installed globally via `bun install -g` for instant startup (no
 | [Repomix](https://github.com/yamadashy/repomix) | Codebase packing for AI context | Per-agent | No |
 | [Sentry](https://sentry.io/) | Error tracking | Per-agent | Yes |
 | [Socket](https://socket.dev/) | Dependency security | Per-agent | No |
+| [Unstract](https://github.com/Zipstack/unstract) | Document data extraction | Per-agent | Yes |
 
 **Tier explanation:**
 - **Global** - Tools always available (loaded into every session)
 - **Per-agent** - Tools disabled globally, enabled per-agent via config (zero context overhead when unused)
 
+**Performance optimization:** MCP packages are installed globally via `bun install -g` for instant startup (~0.1s vs 2-3s with `npx`). The framework uses a three-tier loading strategy: 8 MCPs load eagerly at startup, 12 MCPs load on-demand when their subagent is invoked. This reduces OpenCode startup time by 12-24 seconds.
+
 ### **SEO Integrations (curl subagents - no MCP overhead)**
 
 These use direct API calls via curl, avoiding MCP server startup entirely:
@@ -721,16 +729,20 @@ These use direct API calls via curl, avoiding MCP server startup entirely:
 - [Context7](https://context7.com/) - Real-time documentation access for thousands of libraries
 - [Repomix](https://github.com/yamadashy/repomix) - Pack codebases into AI-friendly context
 
-**Browser Automation** (6 tools + anti-detect stack, [benchmarked](#browser-automation)):
+**Browser Automation** (8 tools + anti-detect stack, [benchmarked](#browser-automation)):
 
 - [Playwright](https://playwright.dev/) - Fastest engine (0.9s form fill), parallel contexts, extensions, proxy (auto-installed)
+- [playwright-cli](https://github.com/microsoft/playwright-cli) - Microsoft official CLI for AI agents, `--session` isolation, built-in tracing
 - [dev-browser](https://github.com/nicholasgriffintn/dev-browser) - Persistent profile, stays logged in, ARIA snapshots, pairs with DevTools
 - [agent-browser](https://github.com/vercel-labs/agent-browser) - CLI/CI/CD, `--session` parallel, ref-based element targeting
 - [Crawl4AI](https://github.com/unclecode/crawl4ai) - Bulk extraction, `arun_many` parallel (1.7x), LLM-ready markdown
+- [WaterCrawl](https://github.com/watercrawl/watercrawl) - Self-hosted crawling with web search, sitemap generation, JS rendering, proxy support
 - [Playwriter](https://github.com/nicholasgriffintn/playwriter) - Your browser's extensions/passwords/proxy, already unlocked
 - [Stagehand](https://github.com/browserbase/stagehand) - Natural language automation, self-healing selectors
 - [Chrome DevTools MCP](https://github.com/nicholasgriffintn/chrome-devtools-mcp) - Companion: Lighthouse, network throttling, CSS coverage (pairs with any tool)
 - [Cloudflare Browser Rendering](https://developers.cloudflare.com/browser-rendering/) - Server-side web scraping
+- [Peekaboo](https://github.com/steipete/Peekaboo) - macOS screen capture and GUI automation (pixel-accurate captures, AI vision analysis)
+- [Sweet Cookie](https://github.com/steipete/sweet-cookie) - Browser cookie extraction for API calls without launching a browser
 - **Anti-Detect Stack** ([details](#anti-detect-browser)):
   - [Camoufox](https://github.com/daijro/camoufox) (4.9k stars) - Firefox anti-detect, C++ fingerprint injection, WebRTC/Canvas/WebGL spoofing
   - [rebrowser-patches](https://github.com/nicedayfor/rebrowser-patches) (1.2k stars) - Chromium CDP leak prevention, automation signal removal
@@ -760,13 +772,23 @@ These use direct API calls via curl, avoiding MCP server startup entirely:
 **WordPress & Development:**
 
 - [LocalWP](https://localwp.com/) - Direct WordPress database access
+- [WordPress MCP Adapter](https://github.com/WordPress/mcp-adapter) - Official WordPress MCP for content management (STDIO, HTTP, and SSH transports)
 - [Next.js DevTools](https://nextjs.org/docs) - React/Next.js development assistance
 
+**CRM & Marketing:**
+
+- [FluentCRM](https://fluentcrm.com/) - WordPress CRM: contacts, tags, lists, campaigns, automations, smart links, webhooks
+
 **Accounts & Finance:**
 
 - [QuickFile](https://github.com/marcusquinn/quickfile-mcp) - Accounting API integration (MCP)
 - [Amazon Order History](https://github.com/marcusquinn/amazon-order-history-csv-download-mcp) - Order data extraction (MCP)
 
+**Document Processing:**
+
+- [LibPDF](https://libpdf.dev/) - PDF form filling, digital signatures, encryption, merge/split (via helper script)
+- [Unstract](https://github.com/Zipstack/unstract) - LLM-powered structured data extraction from PDFs, images, DOCX (MCP)
+
 ### **Quick Setup**
 
 ```bash
@@ -810,42 +832,46 @@ These catch formatting and syntax issues during editing, reducing preflight/post
 
 ## **Browser Automation**
 
-6 browser tools + anti-detect stack, benchmarked and integrated for AI-assisted web automation, dev testing, data extraction, and bot detection evasion. Agents automatically select the optimal tool based on task requirements.
+8 browser tools + anti-detect stack, benchmarked and integrated for AI-assisted web automation, dev testing, data extraction, and bot detection evasion. Agents automatically select the optimal tool based on task requirements.
 
 ### Performance Benchmarks
 
 Tested on macOS ARM64, all headless, warm daemon:
 
-| Test | Playwright | dev-browser | agent-browser | Crawl4AI | Playwriter | Stagehand |
-|------|-----------|-------------|---------------|----------|------------|-----------|
-| **Navigate + Screenshot** | **1.43s** | 1.39s | 1.90s | 2.78s | 2.95s | 7.72s |
-| **Form Fill** (4 fields) | **0.90s** | 1.34s | 1.37s | N/A | 2.24s | 2.58s |
-| **Data Extraction** (5 items) | 1.33s | **1.08s** | 1.53s | 2.53s | 2.68s | 3.48s |
-| **Multi-step** (click + nav) | **1.49s** | 1.49s | 3.06s | N/A | 4.37s | 4.48s |
-| **Parallel** (3 sessions) | **1.6s** | N/A | 2.0s | 3.0s | N/A | Slow |
+| Test | Playwright | playwright-cli | dev-browser | agent-browser | Crawl4AI | Playwriter | Stagehand |
+|------|-----------|----------------|-------------|---------------|----------|------------|-----------|
+| **Navigate + Screenshot** | **1.43s** | ~1.9s | 1.39s | 1.90s | 2.78s | 2.95s | 7.72s |
+| **Form Fill** (4 fields) | **0.90s** | ~1.4s | 1.34s | 1.37s | N/A | 2.24s | 2.58s |
+| **Data Extraction** (5 items) | 1.33s | ~1.5s | **1.08s** | 1.53s | 2.53s | 2.68s | 3.48s |
+| **Multi-step** (click + nav) | **1.49s** | ~2.0s | 1.49s | 3.06s | N/A | 4.37s | 4.48s |
+| **Parallel** (3 sessions) | **1.6s** | ~2.0s | N/A | 2.0s | 3.0s | N/A | Slow |
 
 ### Feature Matrix
 
-| Feature | Playwright | dev-browser | agent-browser | Crawl4AI | Playwriter | Stagehand |
-|---------|-----------|-------------|---------------|----------|------------|-----------|
-| **Headless** | Yes | Yes | Yes | Yes | No (your browser) | Yes |
-| **Proxy/VPN** | Full | Via args | No | Full | Your browser | Via args |
-| **Extensions** | Yes (persistent) | Yes (profile) | No | No | Yes (yours) | Possible |
-| **Password managers** | Partial (needs unlock) | Partial | No | No | **Yes** (unlocked) | No |
-| **Parallel sessions** | 5 ctx/2.1s | Shared | 3 sess/2.0s | arun_many 1.7x | Shared | Per-instance |
-| **Session persistence** | storageState | Profile dir | state save/load | user_data_dir | Your browser | Per-instance |
-| **Natural language** | No | No | No | LLM extraction | No | Yes |
-| **Self-healing** | No | No | No | No | No | Yes |
+| Feature | Playwright | playwright-cli | dev-browser | agent-browser | Crawl4AI | Playwriter | Stagehand |
+|---------|-----------|----------------|-------------|---------------|----------|------------|-----------|
+| **Headless** | Yes | Yes (default) | Yes | Yes (default) | Yes | No (your browser) | Yes |
+| **Proxy/VPN** | Full | No | Via args | No | Full | Your browser | Via args |
+| **Extensions** | Yes (persistent) | No | Yes (profile) | No | No | Yes (yours) | Possible |
+| **Password managers** | Partial (needs unlock) | No | Partial | No | No | **Yes** (unlocked) | No |
+| **Parallel sessions** | 5 ctx/2.1s | --session | Shared | 3 sess/2.0s | arun_many 1.7x | Shared | Per-instance |
+| **Session persistence** | storageState | Profile dir | Profile dir | state save/load | user_data_dir | Your browser | Per-instance |
+| **Tracing** | Full API | Built-in CLI | Via Playwright | Via Playwright | No | Via CDP | Via Playwright |
+| **Natural language** | No | No | No | No | LLM extraction | No | Yes |
+| **Self-healing** | No | No | No | No | No | No | Yes |
+| **Maintainer** | Microsoft | Microsoft | Community | Vercel | Community | Community | Browserbase |
 
 ### Tool Selection
 
 | Need | Tool | Why |
 |------|------|-----|
 | **Fastest automation** | Playwright | 0.9s form fill, parallel contexts |
+| **AI agent (CLI)** | playwright-cli | Microsoft official, `--session` isolation, built-in tracing |
 | **Stay logged in** | dev-browser | Profile persists across restarts |
 | **Your extensions/passwords** | Playwriter | Already unlocked in your browser |
 | **Bulk extraction** | Crawl4AI | Purpose-built, parallel, LLM-ready output |
-| **CLI/CI/CD** | agent-browser | No server needed, `--session` isolation |
+| **Self-hosted crawling** | WaterCrawl | Docker deployment, web search, sitemap generation |
+| **CLI/CI/CD** | playwright-cli or agent-browser | No server needed, `--session` isolation |
 | **Unknown pages** | Stagehand | Natural language, self-healing |
 | **Performance debugging** | Chrome DevTools MCP | Companion tool, pairs with any browser |
 | **Bot detection evasion** | Anti-detect stack | Camoufox (full) or rebrowser-patches (quick) |
@@ -1814,6 +1840,31 @@ bash .agent/scripts/setup-mcp-integrations.sh all
 - Set proper file permissions (600 for configs)
 - Regular key rotation and access audits
 
+### Multi-Tenant Credential Storage
+
+Manage multiple accounts/clients per service with isolated credential sets:
+
+```bash
+# Create a new tenant
+credential-helper.sh create client-acme
+
+# Switch active tenant
+credential-helper.sh switch client-acme
+
+# Set credentials for current tenant
+credential-helper.sh set GITHUB_TOKEN ghp_xxx
+
+# Per-project override (gitignored)
+echo "client-acme" > .aidevops-tenant
+
+# Export for scripts
+eval $(credential-helper.sh export)
+```
+
+**Resolution priority:** Project `.aidevops-tenant` → Global active tenant → Default
+
+See `.agent/tools/credentials/multi-tenant.md` for complete documentation.
+
 **Quality Assurance:**
 
 - Multi-platform analysis (SonarCloud, CodeFactor, Codacy, CodeRabbit, Qlty, Snyk, Gemini Code Assist)

package/VERSION

@@ -1 +1 @@
-2.85.0
+2.86.1

package/aidevops.sh

@@ -3,7 +3,7 @@
 # AI DevOps Framework CLI
 # Usage: aidevops <command> [options]
 #
-# Version: 2.85.0
+# Version: 2.86.1
 
 set -euo pipefail
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aidevops",
-  "version": "2.85.0",
+  "version": "2.86.1",
   "description": "AI DevOps Framework - AI-assisted development workflows, code quality, and deployment automation",
   "type": "module",
   "main": "index.js",

package/setup.sh

@@ -3,7 +3,7 @@
 # AI Assistant Server Access Framework Setup Script
 # Helps developers set up the framework for their infrastructure
 #
-# Version: 2.85.0
+# Version: 2.86.1
 #
 # Quick Install (one-liner):
 #   bash <(curl -fsSL https://aidevops.dev/install)
@@ -192,6 +192,7 @@ cleanup_deprecated_mcps() {
         "dataforseo"
         "hostinger-api"
         "shadcn"
+        "repomix"
     )
     
     # Tool rules to remove (for MCPs that no longer exist)
@@ -202,6 +203,7 @@ cleanup_deprecated_mcps() {
         "dataforseo_*"
         "serper_*"
         "shadcn_*"
+        "repomix_*"
     )
     
     local cleaned=0
@@ -233,7 +235,6 @@ cleanup_deprecated_mcps() {
     local -a mcp_pkgs=(
         "chrome-devtools-mcp"
         "mcp-server-gsc"
-        "repomix"
         "playwriter"
         "@steipete/macos-automator-mcp"
         "@steipete/claude-code-mcp"
@@ -242,7 +243,6 @@ cleanup_deprecated_mcps() {
     local -a mcp_bins=(
         "chrome-devtools-mcp"
         "mcp-server-gsc"
-        "repomix"
         "playwriter"
         "macos-automator-mcp"
         "claude-code-mcp"
@@ -262,12 +262,7 @@ cleanup_deprecated_mcps() {
             local full_path
             full_path=$(resolve_mcp_binary_path "$bin_name")
             if [[ -n "$full_path" ]]; then
-                # Preserve --mcp flag for repomix
-                if [[ "$bin_name" == "repomix" ]]; then
-                    jq --arg k "$mcp_key" --arg p "$full_path" '.mcp[$k].command = [$p, "--mcp"]' "$tmp_config" > "${tmp_config}.new" && mv "${tmp_config}.new" "$tmp_config"
-                else
-                    jq --arg k "$mcp_key" --arg p "$full_path" '.mcp[$k].command = [$p]' "$tmp_config" > "${tmp_config}.new" && mv "${tmp_config}.new" "$tmp_config"
-                fi
+                jq --arg k "$mcp_key" --arg p "$full_path" '.mcp[$k].command = [$p]' "$tmp_config" > "${tmp_config}.new" && mv "${tmp_config}.new" "$tmp_config"
                 ((cleaned++))
             fi
         fi
@@ -2157,7 +2152,6 @@ install_mcp_packages() {
     local -a node_mcps=(
         "chrome-devtools-mcp"
         "mcp-server-gsc"
-        "repomix"
         "playwriter"
         "@steipete/macos-automator-mcp"
         "@steipete/claude-code-mcp"