aidevops 2.97.0 → 2.98.0

package/README.md

@@ -534,6 +534,73 @@ Coordinator (pulse loop)
 
 **Subagent index** (`.agent/subagent-index.toon`): Compressed TOON routing table listing all agents, subagents, workflows, and scripts with model tier assignments - enables fast agent discovery without loading full markdown files.
 
+## **Advanced Capabilities** (Planned)
+
+### Parallel Agents & Headless Dispatch
+
+Run multiple AI sessions concurrently with isolated contexts:
+
+| Feature | Description |
+|---------|-------------|
+| **Headless dispatch** | `claude -p` / OpenCode server API for non-interactive execution |
+| **Session management** | Deterministic session IDs, resume with `--resume` |
+| **Memory namespaces** | Per-agent memory isolation with shared access when needed |
+| **Matrix integration** | Chat-triggered dispatch via self-hosted Matrix (optional) |
+
+**Architecture:**
+
+```text
+OpenCode Server (opencode serve)
+├── Session 1 (code-reviewer)
+├── Session 2 (seo-analyst)
+└── Session 3 (scheduled-task)
+         ↑
+    HTTP API / SSE Events
+         ↑
+┌────────┴────────┐
+│  Dispatch Layer │ ← Matrix bot, cron, CLI
+└─────────────────┘
+```
+
+### Self-Improving Agent System
+
+Agents that learn from experience and contribute improvements:
+
+| Phase | Description |
+|-------|-------------|
+| **Review** | Analyze memory for success/failure patterns |
+| **Refine** | Generate and apply improvements to agents |
+| **Test** | Validate in isolated OpenCode sessions |
+| **PR** | Contribute to community with privacy filtering |
+
+**Safety guardrails:**
+- Worktree isolation for all changes
+- Human approval required for PRs
+- Mandatory privacy filter (secretlint + pattern redaction)
+- Dry-run default, explicit opt-in for PR creation
+- Audit log to memory
+
+### Voice Integration
+
+Speech-to-speech AI conversations:
+
+| Method | Description |
+|--------|-------------|
+| **VoiceInk + Shortcut** | macOS: transcription → OpenCode API → response |
+| **iPhone Shortcut** | iOS: dictate → HTTP → speak response |
+| **Pipecat STS** | Full voice pipeline: Soniox STT → AI → Cartesia TTS |
+
+### Scheduled Agent Tasks
+
+Cron-based agent dispatch for automated workflows:
+
+```bash
+# Example: Daily SEO report at 9am
+0 9 * * * ~/.aidevops/agents/scripts/droid-helper.sh dispatch "seo-analyst" "Generate daily SEO report"
+```
+
+**See:** [TODO.md](TODO.md) tasks t109-t118 for implementation status.
+
 ## **Requirements**
 
 ```bash
@@ -625,6 +692,10 @@ The setup script offers to install these tools automatically.
 - **[Codacy](https://www.codacy.com/)**: Multi-tool analysis (0 findings)
 - **[CodeRabbit](https://coderabbit.ai/)**: AI-powered code reviews
 - **[Snyk](https://snyk.io/)**: Security vulnerability scanning
+- **[Socket](https://socket.dev/)**: Dependency security and supply chain protection
+- **[Sentry](https://sentry.io/)**: Error monitoring and performance tracking
+- **[Secretlint](https://github.com/secretlint/secretlint)**: Detect exposed secrets in code
+- **[OSV Scanner](https://google.github.io/osv-scanner/)**: Google's vulnerability database scanner
 - **[Qlty](https://qlty.sh/)**: Universal code quality platform (70+ linters, auto-fixes)
 - **[Gemini Code Assist](https://cloud.google.com/gemini/docs/codeassist/overview)**: Google's AI-powered code completion and review
 
@@ -1265,6 +1336,10 @@ These are examples of subagents that have supporting MCPs enabled. See `.agent/`
 | `@git-platforms` | GitHub, GitLab, Gitea | gh_grep, context7 |
 | `@sentry` | Error monitoring, Next.js SDK setup | sentry |
 | `@socket` | Dependency security scanning | socket |
+| `@security-analysis` | AI-powered vulnerability detection (OSV, Ferret, git history) | osv-scanner, gemini-cli-security |
+| `@secretlint` | Detect exposed secrets in code | (Docker-based) |
+| `@snyk` | Security vulnerability scanning | (API-based) |
+| `@auditing` | Code auditing services and security analysis | (API-based) |
 | `@agent-review` | Session analysis, agent improvement (under build-agent/) | (read/write only) |
 
 ### **Setup for OpenCode**

package/VERSION

@@ -1 +1 @@
-2.97.0
+2.98.0

package/aidevops.sh

@@ -3,7 +3,7 @@
 # AI DevOps Framework CLI
 # Usage: aidevops <command> [options]
 #
-# Version: 2.97.0
+# Version: 2.98.0
 
 set -euo pipefail
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aidevops",
-  "version": "2.97.0",
+  "version": "2.98.0",
   "description": "AI DevOps Framework - AI-assisted development workflows, code quality, and deployment automation",
   "type": "module",
   "main": "index.js",
@@ -41,6 +41,7 @@
   },
   "devDependencies": {
     "@secretlint/secretlint-rule-preset-recommend": "^11.2.5",
+    "@secretlint/secretlint-rule-regexp": "^11.2.5",
     "@types/bun": "latest",
     "secretlint": "^11.2.5",
     "typescript": "^5.0.0"

package/setup.sh

@@ -3,7 +3,7 @@
 # AI Assistant Server Access Framework Setup Script
 # Helps developers set up the framework for their infrastructure
 #
-# Version: 2.97.0
+# Version: 2.98.0
 #
 # Quick Install (one-liner):
 #   bash <(curl -fsSL https://aidevops.dev/install)