aidevops 3.21.12 → 3.22.0

package/packages/gui-shared/package.json

@@ -0,0 +1,9 @@
+{
+  "name": "@aidevops/gui-shared",
+  "version": "0.0.0",
+  "private": true,
+  "type": "module",
+  "exports": {
+    ".": "./src/index.ts"
+  }
+}

package/packages/gui-shared/src/contracts.ts

@@ -0,0 +1,341 @@
+export type GuiRouteClassification = "read" | "write" | "destructive";
+
+export type GuiOperationId = "setup.status.read" | "capabilities.read" | "filesystem.read";
+
+export type GuiFileRootId = "agents" | "config" | "localSetup" | "git";
+
+export interface GuiSourceRef {
+  surface: string;
+  authority: string;
+  path_refs: string[];
+}
+
+export interface GuiResponseEnvelope<TData> {
+  ok: boolean;
+  operation_id: GuiOperationId;
+  source: GuiSourceRef;
+  data: TData;
+  warnings: string[];
+  errors: string[];
+  redactions: string[];
+  observed_at: string;
+}
+
+export interface GuiRouteManifest {
+  route: string;
+  method: "GET";
+  operation_id: GuiOperationId;
+  classification: GuiRouteClassification;
+  source_surface: string;
+  adapter: string;
+  command_pattern: readonly string[];
+  redactions: readonly string[];
+}
+
+export interface GuiFileRootDefinition {
+  id: GuiFileRootId;
+  label: string;
+  path_ref: string;
+  description: string;
+  preview_policy: "agents_markdown_and_code" | "metadata_only";
+}
+
+export interface GuiFileEntry {
+  name: string;
+  kind: "directory" | "file";
+  path_ref: string;
+  relative_path: string;
+  extension: string;
+  preview_allowed: boolean;
+}
+
+export interface GuiFilePreview {
+  path_ref: string;
+  relative_path: string;
+  mode: "markdown" | "code" | "text" | "blocked";
+  language: string;
+  content: string;
+  truncated: boolean;
+  reason: string;
+}
+
+export interface GuiFileExplorerData {
+  root: GuiFileRootDefinition;
+  current_path_ref: string;
+  current_relative_path: string;
+  entries: GuiFileEntry[];
+  selected_preview: GuiFilePreview | null;
+  entry_limit: number;
+}
+
+export interface GuiSecretReference {
+  name: string;
+  status: "configured" | "missing" | "unchecked";
+}
+
+export interface GuiNavigationItem {
+  id: string;
+  label: string;
+  description: string;
+}
+
+export interface GuiSettingsSummary {
+  path_ref: string;
+  health: "present" | "missing" | "invalid" | "unchecked";
+  key_count: number;
+  keys: string[];
+  value_policy: "keys_only_no_values";
+}
+
+export interface GuiRepoSummary {
+  name: string;
+  platform: string;
+  slug: string;
+  local_path_status: "present" | "missing" | "not_provided" | "unchecked";
+}
+
+export interface GuiRepoRegistrySummary {
+  path_ref: string;
+  health: "present" | "missing" | "invalid" | "unchecked";
+  total: number;
+  repos: GuiRepoSummary[];
+}
+
+export interface GuiLocalRepoRemote {
+  name: string;
+  url_ref: string;
+}
+
+export interface GuiLocalRepoSetupSummary {
+  name: string;
+  path_ref: string;
+  aidevops_version: string;
+  default_branch: string;
+  remotes: GuiLocalRepoRemote[];
+  registered: boolean;
+  pulse: boolean | null;
+  local_only: boolean;
+  init_scope: string;
+  knowledge: string;
+  priority: string;
+  has_interface: boolean | null;
+  features: string[];
+  settings_policy: "read_only_no_writes";
+}
+
+export interface GuiLocalReposSetupSummary {
+  path_ref: string;
+  health: "present" | "missing" | "invalid" | "unchecked";
+  total: number;
+  excluded_worktrees: number;
+  repos: GuiLocalRepoSetupSummary[];
+}
+
+export type GuiAiProviderId = "anthropic" | "openai" | "cursor" | "google";
+
+export interface GuiOAuthPoolAccountSummary {
+  email_ref: string;
+  status: string;
+  priority: number | null;
+  last_used: string;
+  expires_at: string;
+  cooldown_until: string | null;
+}
+
+export interface GuiOAuthProviderSummary {
+  provider: GuiAiProviderId;
+  configured: boolean;
+  total: number;
+  available: number;
+  active_or_idle: number;
+  rate_limited: number;
+  auth_errors: number;
+  pending_token: boolean;
+  accounts: GuiOAuthPoolAccountSummary[];
+}
+
+export interface GuiOAuthPoolSummary {
+  path_ref: string;
+  health: "present" | "missing" | "invalid" | "unchecked";
+  value_policy: "metadata_only_no_tokens";
+  providers: GuiOAuthProviderSummary[];
+}
+
+export interface GuiSetupTargetSummary {
+  label: string;
+  path_ref: string;
+  health: "present" | "missing" | "unchecked";
+  purpose: string;
+  installed_version: string;
+  latest_version: string;
+  needs_update: boolean;
+}
+
+export interface GuiAiAppSummary {
+  name: string;
+  status: "found" | "missing" | "unchecked";
+  app_path_ref: string;
+  binary_path_ref: string;
+  config_path_ref: string;
+  aidevops_target_path_ref: string;
+  app_version: string;
+  aidevops_version: string;
+  latest_version: string;
+  needs_update: boolean;
+}
+
+export interface GuiCapabilitySummary {
+  id: string;
+  label: string;
+  status: "available" | "planned" | "placeholder";
+  doc_ref: string;
+}
+
+export interface GuiMachineSummary {
+  id: string;
+  label: string;
+  initials: string;
+  username: string;
+  hostname: string;
+  local_ips: string[];
+  public_ip: string | null;
+}
+
+export interface GuiStatusData {
+  aidevops_version: string;
+  update: {
+    running_version: string;
+    installed_version: string;
+    restart_required: boolean;
+    message: string;
+  };
+  runtime: {
+    host: "local";
+    api: "hono";
+    read_only: true;
+  };
+  machine: GuiMachineSummary;
+  paths: Array<{
+    label: string;
+    path_ref: string;
+    health: "present" | "missing" | "unchecked";
+  }>;
+  helper_availability: Array<{
+    name: string;
+    status: "available" | "missing" | "unchecked";
+  }>;
+  navigation: GuiNavigationItem[];
+  settings: GuiSettingsSummary;
+  repos: GuiRepoRegistrySummary;
+  local_repos: GuiLocalReposSetupSummary;
+  oauth_pool: GuiOAuthPoolSummary;
+  setup_targets: GuiSetupTargetSummary[];
+  ai_apps: GuiAiAppSummary[];
+  capabilities: GuiCapabilitySummary[];
+  secrets: GuiSecretReference[];
+  placeholders: string[];
+}
+
+export const STATUS_ROUTE_MANIFEST: GuiRouteManifest = {
+  route: "/api/status",
+  method: "GET",
+  operation_id: "setup.status.read",
+  classification: "read",
+  source_surface: "setup",
+  adapter: "statusAdapter.readStatus",
+  command_pattern: ["aidevops", "status"],
+  redactions: ["secret_values", "credential_paths", "private_key_material"],
+};
+
+export const FILE_EXPLORER_ROUTE_MANIFEST: GuiRouteManifest = {
+  route: "/api/files/:root",
+  method: "GET",
+  operation_id: "filesystem.read",
+  classification: "read",
+  source_surface: "filesystem",
+  adapter: "fileAdapter.readFileExplorer",
+  command_pattern: ["node:fs", "read-only", "root-allowlist"],
+  redactions: ["secret_values", "credential_paths", "private_key_material"],
+};
+
+export const GUI_FILE_ROOTS: readonly GuiFileRootDefinition[] = [
+  {
+    id: "agents",
+    label: "Agents",
+    path_ref: "~/.aidevops/agents",
+    description: "Agent, workflow, tool, service, and reference files deployed by aidevops.",
+    preview_policy: "agents_markdown_and_code",
+  },
+  {
+    id: "config",
+    label: "Config",
+    path_ref: "~/.config/aidevops",
+    description: "Local aidevops configuration files. Contents stay hidden until a redaction policy lands.",
+    preview_policy: "metadata_only",
+  },
+  {
+    id: "localSetup",
+    label: "Local Setup",
+    path_ref: "~/.aidevops",
+    description: "Local aidevops runtime folders, cache, memory, logs, and deployed assets.",
+    preview_policy: "metadata_only",
+  },
+  {
+    id: "git",
+    label: "Git",
+    path_ref: "~/Git",
+    description: "Local git workspace roots and worktrees.",
+    preview_policy: "metadata_only",
+  },
+] as const;
+
+export const BANNED_ROUTE_PATTERNS = [
+  "/shell",
+  "/exec",
+  "/terminal",
+  "/run",
+  "/run-command",
+] as const;
+
+export const SECRET_SENTINELS = [
+  "SECRET_SENTINEL_DO_NOT_RENDER",
+  "-----BEGIN PRIVATE KEY-----",
+  "Bearer fake-token-value",
+  "sessionid=fake-cookie-value",
+  "/tmp/fake/credentials.json",
+] as const;
+
+export function createEnvelope<TData>(input: {
+  operation_id: GuiOperationId;
+  source: GuiSourceRef;
+  data: TData;
+  warnings?: string[];
+  errors?: string[];
+  observed_at?: string;
+}): GuiResponseEnvelope<TData> {
+  return {
+    ok: input.errors === undefined || input.errors.length === 0,
+    operation_id: input.operation_id,
+    source: input.source,
+    data: input.data,
+    warnings: input.warnings ?? [],
+    errors: input.errors ?? [],
+    redactions: ["secret_values", "credential_paths", "private_key_material"],
+    observed_at: input.observed_at ?? new Date().toISOString(),
+  };
+}
+
+export function containsSecretSentinel(value: unknown): boolean {
+  const serialized = JSON.stringify(value);
+  return SECRET_SENTINELS.some((sentinel) => serialized.includes(sentinel));
+}
+
+export function assertNoSecretSentinels(value: unknown): void {
+  if (containsSecretSentinel(value)) {
+    throw new Error("Secret sentinel leaked into GUI payload");
+  }
+}
+
+export function isReadOnlyManifest(manifest: GuiRouteManifest): boolean {
+  return manifest.method === "GET" && manifest.classification === "read";
+}

package/packages/gui-shared/src/fixtures.ts

@@ -0,0 +1,250 @@
+import { GUI_FILE_ROOTS, type GuiFileExplorerData, type GuiStatusData } from "./contracts";
+
+export const statusFixture: GuiStatusData = {
+  aidevops_version: "unknown",
+  update: {
+    running_version: "unknown",
+    installed_version: "unknown",
+    restart_required: false,
+    message: "The GUI app is using the latest installed aidevops version.",
+  },
+  runtime: {
+    host: "local",
+    api: "hono",
+    read_only: true,
+  },
+  machine: {
+    id: "local",
+    label: "Local machine",
+    initials: "LM",
+    username: "local",
+    hostname: "localhost",
+    local_ips: ["127.0.0.1"],
+    public_ip: null,
+  },
+  paths: [
+    {
+      label: "deployed agents",
+      path_ref: "~/.aidevops/agents",
+      health: "unchecked",
+    },
+    {
+      label: "settings",
+      path_ref: "~/.config/aidevops/settings.json",
+      health: "unchecked",
+    },
+  ],
+  helper_availability: [
+    {
+      name: "aidevops status",
+      status: "unchecked",
+    },
+  ],
+  navigation: [
+    {
+      id: "overview",
+      label: "Overview",
+      description: "Local setup, update, and API health.",
+    },
+    {
+      id: "agents",
+      label: "Agents",
+      description: "Read-only file explorer for deployed agent files.",
+    },
+    {
+      id: "config",
+      label: "Config",
+      description: "Read-only file explorer for aidevops config.",
+    },
+    {
+      id: "git",
+      label: "Local Repos",
+      description: "Read-only local git workspace browser.",
+    },
+    {
+      id: "security",
+      label: "Secrets",
+      description: "Secret-reference-only trust boundary.",
+    },
+  ],
+  settings: {
+    path_ref: "~/.config/aidevops/settings.json",
+    health: "unchecked",
+    key_count: 0,
+    keys: [],
+    value_policy: "keys_only_no_values",
+  },
+  repos: {
+    path_ref: "~/.config/aidevops/repos.json",
+    health: "unchecked",
+    total: 0,
+    repos: [],
+  },
+  local_repos: {
+    path_ref: "~/Git",
+    health: "unchecked",
+    total: 0,
+    excluded_worktrees: 0,
+    repos: [],
+  },
+  oauth_pool: {
+    path_ref: "~/.aidevops/oauth-pool.json",
+    health: "unchecked",
+    value_policy: "metadata_only_no_tokens",
+    providers: [
+      {
+        provider: "anthropic",
+        configured: false,
+        total: 0,
+        available: 0,
+        active_or_idle: 0,
+        rate_limited: 0,
+        auth_errors: 0,
+        pending_token: false,
+        accounts: [],
+      },
+      {
+        provider: "openai",
+        configured: false,
+        total: 0,
+        available: 0,
+        active_or_idle: 0,
+        rate_limited: 0,
+        auth_errors: 0,
+        pending_token: false,
+        accounts: [],
+      },
+      {
+        provider: "cursor",
+        configured: false,
+        total: 0,
+        available: 0,
+        active_or_idle: 0,
+        rate_limited: 0,
+        auth_errors: 0,
+        pending_token: false,
+        accounts: [],
+      },
+      {
+        provider: "google",
+        configured: false,
+        total: 0,
+        available: 0,
+        active_or_idle: 0,
+        rate_limited: 0,
+        auth_errors: 0,
+        pending_token: false,
+        accounts: [],
+      },
+    ],
+  },
+  setup_targets: [
+    {
+      label: "Deployed agents",
+      path_ref: "~/.aidevops/agents/VERSION",
+      health: "unchecked",
+      purpose: "Canonical aidevops agent, workflow, script, and reference bundle.",
+      installed_version: "unknown",
+      latest_version: "unknown",
+      needs_update: false,
+    },
+  ],
+  ai_apps: [
+    {
+      name: "OpenCode",
+      status: "unchecked",
+      app_path_ref: "~/Applications/OpenCode AIDevOps.app",
+      binary_path_ref: "not found",
+      config_path_ref: "~/.config/opencode/opencode.json",
+      aidevops_target_path_ref: "~/.config/opencode/AGENTS.md",
+      app_version: "unknown",
+      aidevops_version: "unknown",
+      latest_version: "unknown",
+      needs_update: false,
+    },
+    {
+      name: "Claude Code",
+      status: "unchecked",
+      app_path_ref: "/Applications/Claude.app",
+      binary_path_ref: "not found",
+      config_path_ref: "~/.config/Claude/claude_desktop_config.json",
+      aidevops_target_path_ref: "~/.config/Claude/AGENTS.md",
+      app_version: "unknown",
+      aidevops_version: "unknown",
+      latest_version: "unknown",
+      needs_update: false,
+    },
+  ],
+  capabilities: [
+    {
+      id: "setup-status",
+      label: "Setup/status",
+      status: "available",
+      doc_ref: "docs/gui/helper-api-contract.md:98",
+    },
+    {
+      id: "repos",
+      label: "Repository registry",
+      status: "placeholder",
+      doc_ref: "docs/gui/helper-api-contract.md:103",
+    },
+    {
+      id: "settings",
+      label: "Effective settings",
+      status: "placeholder",
+      doc_ref: "docs/gui/helper-api-contract.md:101",
+    },
+  ],
+  secrets: [
+    {
+      name: "GITHUB_TOKEN",
+      status: "unchecked",
+    },
+  ],
+  placeholders: [
+    "Settings, repos, routines, OpenCode sessions, and capabilities will be added as read-only adapters.",
+  ],
+};
+
+export const fileExplorerFixture: GuiFileExplorerData = {
+  root: GUI_FILE_ROOTS[0],
+  current_path_ref: "~/.aidevops/agents",
+  current_relative_path: "",
+  entry_limit: 80,
+  entries: [
+    {
+      name: "workflows",
+      kind: "directory",
+      path_ref: "~/.aidevops/agents/workflows",
+      relative_path: "workflows",
+      extension: "",
+      preview_allowed: false,
+    },
+    {
+      name: "AGENTS.md",
+      kind: "file",
+      path_ref: "~/.aidevops/agents/AGENTS.md",
+      relative_path: "AGENTS.md",
+      extension: ".md",
+      preview_allowed: true,
+    },
+  ],
+  selected_preview: {
+    path_ref: "~/.aidevops/agents/AGENTS.md",
+    relative_path: "AGENTS.md",
+    mode: "markdown",
+    language: "md",
+    content: "# AI DevOps Framework\n\nRead-only local preview.",
+    truncated: false,
+    reason: "",
+  },
+};
+
+export const unsafeSecretFixture = {
+  secret_name: "GUI_TEST_SECRET",
+  secret_value: "SECRET_SENTINEL_DO_NOT_RENDER",
+  private_key: "-----BEGIN PRIVATE KEY-----\nfake\n-----END PRIVATE KEY-----",
+  bearer: "Bearer fake-token-value",
+  cookie: "sessionid=fake-cookie-value",
+  credential_path: "/tmp/fake/credentials.json",
+};

package/packages/gui-shared/src/index.ts

@@ -0,0 +1,2 @@
+export * from "./contracts";
+export * from "./fixtures";

package/packages/gui-web/index.html

@@ -0,0 +1,24 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>aidevops GUI</title>
+  </head>
+  <body>
+    <div id="root">
+      <main class="app-shell">
+        <aside class="sidebar" aria-label="Dashboard navigation">
+          <div class="brand-mark">aidevops</div>
+          <button class="nav-item active" type="button"><span>Overview</span><small>Loading local dashboard.</small></button>
+        </aside>
+        <section class="content" aria-label="aidevops status">
+          <p class="eyebrow">Read-only local dashboard scaffold</p>
+          <h1>aidevops control plane</h1>
+          <p class="lede">Loading the local GUI. If this message stays visible, refresh the page or check ~/Library/Logs/aidevops-gui/web.log.</p>
+        </section>
+      </main>
+    </div>
+    <script type="module" src="/src/main.tsx"></script>
+  </body>
+</html>

package/packages/gui-web/package.json

@@ -0,0 +1,25 @@
+{
+  "name": "@aidevops/gui-web",
+  "version": "0.0.0",
+  "private": true,
+  "type": "module",
+  "dependencies": {
+    "@aidevops/gui-shared": "workspace:*",
+    "@fontsource/ibm-plex-mono": "^5.2.7",
+    "@fontsource/ibm-plex-sans": "^5.2.8",
+    "@fontsource/ibm-plex-serif": "^5.2.7",
+    "@fontsource/inter": "^5.2.8",
+    "@fontsource/playpen-sans": "^5.2.8",
+    "@fontsource/poppins": "^5.2.7",
+    "@fontsource/source-sans-3": "^5.2.9",
+    "@fontsource/source-serif-4": "^5.2.9",
+    "@fontsource/tilt-neon": "^5.2.10",
+    "@fontsource/ubuntu-mono": "^5.2.8",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0",
+    "react-icons": "^5.5.0"
+  },
+  "scripts": {
+    "dev": "vite --host 127.0.0.1"
+  }
+}