aidevops 3.12.0 → 3.13.1

package/README.md

@@ -238,6 +238,23 @@ This creates:
 
 **Available features:** `planning`, `git-workflow`, `code-quality`, `time-tracking`, `beads`
 
+### Per-repo platform setup
+
+After `aidevops init` registers a new repo, run `/setup-git` in your AI assistant
+to apply per-repo platform secrets. Most notably, this sets `SYNC_PAT` — a
+GitHub Actions secret that lets `issue-sync.yml` push TODO.md auto-completion
+past branch protection.
+
+This is distinct from `/onboarding` (per-account credentials like `gh auth login`):
+GitHub Actions secrets are scoped per-repo, so each repo needs its own. You need
+`gh auth login` to succeed before any per-repo helper can run, so `/onboarding`
+comes first, `/setup-git` second.
+
+Run `/setup-git` again whenever you register a new repo with `aidevops repos add`
+or when a `SYNC_PAT` advisory appears in the session greeting toast. If you skip
+this step, `issue-sync.yml` will post a remediation comment when it hits branch
+protection — `/setup-git` walks through the fix.
+
 ### Upgrade Planning Files
 
 When aidevops templates evolve, upgrade existing projects to the latest format:

package/VERSION

@@ -1 +1 @@
-3.12.0
+3.13.1

package/aidevops.sh

@@ -5,7 +5,7 @@
 # AI DevOps Framework CLI
 # Usage: aidevops <command> [options]
 #
-# Version: 3.12.0
+# Version: 3.13.1
 
 set -euo pipefail
 
@@ -557,6 +557,71 @@ _update_verify_signature() {
 	return 0
 }
 
+# One-shot, idempotent migration of supervisor.* → orchestration.* in settings.json (t2946).
+# Safe: reads value from supervisor.* only when orchestration.* key is absent.
+# Logs to ~/.aidevops/logs/settings-migration.log.
+_migrate_settings_supervisor_to_orchestration() {
+	local _settings_file="${HOME}/.config/aidevops/settings.json"
+	local _log_file="${HOME}/.aidevops/logs/settings-migration.log"
+
+	if ! command -v jq >/dev/null 2>&1; then
+		return 0
+	fi
+	if [[ ! -f "$_settings_file" ]]; then
+		return 0
+	fi
+	if ! jq . "$_settings_file" >/dev/null 2>&1; then
+		return 0
+	fi
+
+	# Check if supervisor.pulse_interval_seconds exists and orchestration.pulse_interval_seconds is absent.
+	local _has_sv _has_orch
+	_has_sv=$(jq -r 'if .supervisor.pulse_interval_seconds != null then "yes" else "no" end' "$_settings_file" 2>/dev/null)
+	_has_orch=$(jq -r 'if .orchestration.pulse_interval_seconds != null then "yes" else "no" end' "$_settings_file" 2>/dev/null)
+
+	if [[ "$_has_sv" != "yes" ]]; then
+		return 0
+	fi
+
+	local _ts
+	_ts=$(date -u +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date +%Y-%m-%dT%H:%M:%SZ)
+	mkdir -p "$(dirname "$_log_file")" 2>/dev/null || true
+
+	local _tmp
+	_tmp=$(mktemp 2>/dev/null) || return 0
+
+	if [[ "$_has_orch" == "no" ]]; then
+		# Migrate: copy supervisor.pulse_interval_seconds to orchestration.pulse_interval_seconds,
+		# then remove supervisor.pulse_interval_seconds.
+		local _sv_val
+		_sv_val=$(jq -r '.supervisor.pulse_interval_seconds' "$_settings_file" 2>/dev/null)
+		if jq --argjson v "$_sv_val" \
+			'(.orchestration.pulse_interval_seconds) = $v | del(.supervisor.pulse_interval_seconds)' \
+			"$_settings_file" >"$_tmp" 2>/dev/null && [[ -s "$_tmp" ]]; then
+			mv "$_tmp" "$_settings_file"
+			printf '[%s] migrated supervisor.pulse_interval_seconds=%s → orchestration.pulse_interval_seconds\n' \
+				"$_ts" "$_sv_val" >>"$_log_file" 2>/dev/null || true
+			print_info "Settings migrated: supervisor.pulse_interval_seconds → orchestration.pulse_interval_seconds ($_sv_val)"
+		else
+			rm -f "$_tmp"
+		fi
+	else
+		# Both present: orchestration wins, remove the stale supervisor key.
+		local _orch_val
+		_orch_val=$(jq -r '.orchestration.pulse_interval_seconds' "$_settings_file" 2>/dev/null)
+		if jq 'del(.supervisor.pulse_interval_seconds)' \
+			"$_settings_file" >"$_tmp" 2>/dev/null && [[ -s "$_tmp" ]]; then
+			mv "$_tmp" "$_settings_file"
+			printf '[%s] removed stale supervisor.pulse_interval_seconds (orchestration.pulse_interval_seconds=%s wins)\n' \
+				"$_ts" "$_orch_val" >>"$_log_file" 2>/dev/null || true
+			print_info "Settings cleaned: removed stale supervisor.pulse_interval_seconds (orchestration value $_orch_val kept)"
+		else
+			rm -f "$_tmp"
+		fi
+	fi
+	return 0
+}
+
 # Update/upgrade command
 cmd_update() {
 	local skip_project_sync=false
@@ -693,6 +758,12 @@ cmd_update() {
 		_update_check_daemon_health
 	fi
 
+	# t2946: one-shot idempotent migration from legacy supervisor.* to canonical
+	# orchestration.* namespace in settings.json. Safe: no-op when orchestration.*
+	# is already set. Runs even on "already up to date" updates so users who
+	# install the fix without a new release still get migrated on next 'aidevops update'.
+	_migrate_settings_supervisor_to_orchestration
+
 	# t2914: ensure pulse is running after every update. The existing
 	# restart paths (setup.sh:1329, agent-deploy.sh:601) call
 	# pulse-lifecycle-helper.sh restart-if-running which is a silent no-op
@@ -708,7 +779,7 @@ cmd_update() {
 	# 'restart-if-running' do). Non-fatal: a pulse start failure should
 	# not fail the update.
 	if [[ "${AIDEVOPS_SKIP_PULSE_RESTART:-0}" != "1" ]]; then
-		local _pulse_helper="${HOME}/.aidevops/agents/scripts/pulse-lifecycle-helper.sh"
+		local _pulse_helper="${AGENTS_DIR}/scripts/pulse-lifecycle-helper.sh"
 		if [[ -x "$_pulse_helper" ]]; then
 			"$_pulse_helper" start >/dev/null 2>&1 || print_warning "Pulse start failed (non-fatal)"
 		fi
@@ -1496,6 +1567,7 @@ _help_commands() {
 	echo "  client-format      Client request format alignment (extract/check/canary/monitor)"
 	echo "  opencode-sandbox   Test OpenCode versions in isolation (install/run/check/clean)"
 	echo "  approve <cmd>      Cryptographic issue/PR approval (setup/issue/pr/verify/status)"
+	echo "  issue <cmd>        Interactive issue ownership (claim/release/status/scan-stale)"
 	echo "  security [cmd]     Full security assessment (posture + hygiene + supply chain)"
 	echo "  contributions      External contributions inbox (bare: status | seed/scan/stop/restart/install/uninstall)"
 	echo "  inbox [cmd]        Capture transit zone (bare: status | provision/add/find/digest/help)"
@@ -1505,6 +1577,7 @@ _help_commands() {
 	echo "  secret <cmd>       Manage secrets (set/list/run/init/import/status)"
 	echo "  config <cmd>       Feature toggles (list/get/set/reset/path/help)"
 	echo "  knowledge <cmd>    Knowledge plane management (init/status/provision)"
+	echo "  campaign <cmd>     Campaign plane P6: launch + promote results/learnings"
 	echo "  stats <cmd>        LLM usage analytics (summary/models/projects/costs/trend)"
 	echo "  tabby <cmd>        Manage Tabby terminal profiles (sync/status/zshrc/help)"
 	echo "  parent-status <N>  Show decomposition state of parent-task issue #N (alias: ps)"
@@ -1590,6 +1663,15 @@ _help_detailed_sections() {
 	echo "  aidevops knowledge init off            # Disable knowledge plane"
 	echo "  aidevops knowledge status              # Show provisioning state"
 	echo "  aidevops knowledge provision [path]    # Re-provision (idempotent)"
+	echo "  aidevops knowledge add <file|url>      # Ingest file or URL into sources/"
+	echo "  aidevops knowledge list [--state s] [--kind k]  # List all known sources"
+	echo "  aidevops knowledge search <query>      # Search sources (grep fallback)"
+	echo ""
+	echo "Campaign Plane (P6 — performance integration + learnings promotion):"
+	echo "  aidevops campaign launch <id>            # Move active/<id> → launched/, create result/learning templates"
+	echo "  aidevops campaign promote <id> --results # Push metrics to _performance/marketing/<id>.md"
+	echo "  aidevops campaign promote <id> --learnings # Promote insights to _knowledge/insights/marketing/"
+	echo "  aidevops campaign feedback [<id>]        # Surface _feedback/ insights for campaign research"
 	echo ""
 	echo "LLM Stats:"
 	echo "  aidevops stats               # Show usage summary (last 30 days)"
@@ -1825,9 +1907,24 @@ _cmd_email() {
 		;;
 	poll)
 		# Direct poll commands forwarded to email-poll-helper.sh
-		_dispatch_helper "$_EPH" "$_EPH" "$action" "$@" ;;
+		local poll_action="${1:-tick}"
+		shift || true
+		_dispatch_helper "$_EPH" "$_EPH" "$poll_action" "$@" ;;
+	thread)
+		# Thread lookup: email thread <message-id> [knowledge-root]
+		local _ETH="email-thread-helper.sh"
+		_dispatch_helper "$_ETH" "$_ETH" thread "$@" ;;
+	build)
+		# Thread rebuild: email build [knowledge-root] [--force]
+		local _ETH2="email-thread-helper.sh"
+		_dispatch_helper "$_ETH2" "$_ETH2" build "$@" ;;
+	filter)
+		# Filter rules: email filter tick|add|test|list [knowledge-root]
+		local _EFH="email-filter-helper.sh"
+		[[ $# -eq 0 ]] && set -- list
+		_dispatch_helper "$_EFH" "$_EFH" "$@" ;;
 	*)
-		echo "Usage: aidevops email <mailbox|poll> [subcommand]"
+		echo "Usage: aidevops email <mailbox|poll|thread|build|filter> [subcommand]"
 		echo ""
 		echo "Email subcommands:"
 		echo "  mailbox add              Register a new IMAP mailbox (interactive)"
@@ -1836,6 +1933,12 @@ _cmd_email() {
 		echo "  mailbox remove <id>      Un-register a mailbox"
 		echo "  poll tick                Poll all mailboxes now (same as routine r044)"
 		echo "  poll backfill <id>       Backfill a mailbox from a given date"
+		echo "  thread <message-id>      Look up thread by message-id"
+		echo "  build [--force]          Rebuild thread index from email sources"
+		echo "  filter list              List filter rules"
+		echo "  filter add               Add a new filter rule (interactive)"
+		echo "  filter test <rule>       Dry-run rule against last 50 sources"
+		echo "  filter tick              Run filter pass (routine r045)"
 		;;
 	esac
 	return 0
@@ -1914,6 +2017,75 @@ main() {
 	pulse) _dispatch_helper "pulse-session-helper.sh" "pulse-session-helper.sh" "$@" ;;
 	check-workflows | workflows) _dispatch_helper "check-workflows-helper.sh" "check-workflows-helper.sh" "$@" ;;
 	sync-workflows) _dispatch_helper "sync-workflows-helper.sh" "sync-workflows-helper.sh" "$@" ;;
+	badges)
+		# Badge management: render | check | sync | install (t2975)
+		# Bare 'aidevops badges' with no subcommand shows a usage summary.
+		# Subcommands:
+		#   render <slug>               — render canonical badge block for a repo
+		#   check  [--repo SLUG] [--json] [--verbose]  — cross-repo drift check
+		#   sync   [--repo SLUG] [--apply]              — inject badge block + install workflow
+		#   install [--repo SLUG] [--apply]             — install loc-badge caller workflow only
+		local _badges_sub="${1:-help}"
+		local _badges_check_h="badges-check-helper.sh"
+		local _badges_sync_h="badges-sync-helper.sh"
+		case "$_badges_sub" in
+		render)
+			shift
+			local _render_helper
+			_render_helper=$(bash -c '
+				d="$HOME/.aidevops/agents/scripts/readme-badges-helper.sh"
+				l="'"$AGENTS_DIR"'/scripts/readme-badges-helper.sh"
+				[[ -f "$d" ]] && echo "$d" || echo "$l"
+			')
+			if [[ -f "$_render_helper" ]]; then
+				bash "$_render_helper" render "$@"
+			else
+				print_error "readme-badges-helper.sh not found. Run: aidevops update"
+				exit 1
+			fi
+			;;
+		check)
+			shift
+			_dispatch_helper "$_badges_check_h" "$_badges_check_h" "$@"
+			;;
+		sync)
+			shift
+			_dispatch_helper "$_badges_sync_h" "$_badges_sync_h" "$@"
+			;;
+		install)
+			shift
+			_dispatch_helper "$_badges_sync_h" "$_badges_sync_h" --workflow-only "$@"
+			;;
+		help | --help | -h | "")
+			echo ""
+			echo "aidevops badges — README badge block and LOC workflow management (t2975)"
+			echo ""
+			echo "Subcommands:"
+			echo "  render  <slug>                 Print canonical badge block for a repo"
+			echo "  check   [--repo SLUG] [--json]  Detect badge drift across managed repos"
+			echo "  sync    [--repo SLUG] [--apply] Inject badge block + install LOC workflow"
+			echo "  install [--repo SLUG] [--apply] Install loc-badge caller workflow only"
+			echo ""
+			echo "Options (check/sync/install):"
+			echo "  --repo SLUG    Limit to a single repo"
+			echo "  --apply        Actually perform the sync (default: dry-run)"
+			echo "  --json         Machine-readable output"
+			echo "  --verbose      Show diff summaries (check only)"
+			echo ""
+			echo "Examples:"
+			echo "  aidevops badges check                       # scan all repos for badge drift"
+			echo "  aidevops badges check --json | jq '.[]'    # machine-readable output"
+			echo "  aidevops badges render owner/repo           # print badge block"
+			echo "  aidevops badges sync                        # dry-run sync across all repos"
+			echo "  aidevops badges sync --repo owner/r --apply # apply to a single repo"
+			echo ""
+			;;
+		*)
+			print_error "Unknown badges subcommand: $_badges_sub (try render|check|sync|install|help)"
+			exit 1
+			;;
+		esac
+		;;
 	security) _cmd_security "$@" ;;
 	doctor | doc) _dispatch_helper "doctor-helper.sh" "doctor-helper.sh" "$@" ;;
 	detect | scan) cmd_detect ;;
@@ -1924,6 +2096,7 @@ main() {
 	review-gate | review_gate) _dispatch_helper "review-gate-config-helper.sh" "review-gate-config-helper.sh" "$@" ;;
 	secret | secrets) _dispatch_helper "secret-helper.sh" "secret-helper.sh" "$@" ;;
 	approve) _dispatch_helper "approval-helper.sh" "approval-helper.sh" "$@" ;;
+	issue) _dispatch_helper "interactive-session-helper.sh" "interactive-session-helper.sh" "$@" ;;
 	signing) _dispatch_helper "signing-setup.sh" "signing-setup.sh" "$@" ;;
 	contributions | contrib)
 		# Bare `aidevops contributions` defaults to status (most common use).
@@ -1939,7 +2112,13 @@ main() {
 	case | cases)
 		# Bare `aidevops case` defaults to list (most common use).
 		[[ $# -eq 0 ]] && set -- list
-		_dispatch_helper "case-helper.sh" "case-helper.sh" "$@"
+		# alarm-test subcommand routes to case-alarm-helper.sh
+		if [[ "${1:-}" == "alarm-test" ]]; then
+			shift
+			_dispatch_helper "case-alarm-helper.sh" "case-alarm-helper.sh" alarm-test "$@"
+		else
+			_dispatch_helper "case-helper.sh" "case-helper.sh" "$@"
+		fi
 		;;
 	email) _cmd_email "$@" ;;
 	stats | observability) _dispatch_helper "observability-helper.sh" "observability-helper.sh" "$@" ;;
@@ -1947,6 +2126,7 @@ main() {
 	init-routines) _dispatch_helper "init-routines-helper.sh" "init-routines-helper.sh" "$@" ;;
 	parent-status | ps) _dispatch_helper "parent-status-helper.sh" "parent-status-helper.sh" "$@" ;;
 	knowledge) _dispatch_helper "knowledge-helper.sh" "knowledge-helper.sh" "$@" ;;
+	campaign | campaigns) _dispatch_helper "campaign-helper.sh" "campaign-helper.sh" "$@" ;;
 	config | configure) _dispatch_config "$@" ;;
 	uninstall | remove) cmd_uninstall ;;
 	version | v | -v | --version) cmd_version ;;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aidevops",
-  "version": "3.12.0",
+  "version": "3.13.1",
   "description": "AI DevOps Framework - AI-assisted development workflows, code quality, and deployment automation",
   "type": "module",
   "bin": {