aidevops 3.29.40 → 3.30.0

package/README.md

@@ -58,7 +58,7 @@ The result: an AI operations platform that manages projects across every busines
 [![Copyright](https://img.shields.io/badge/Copyright-Marcus%20Quinn%202025--2026-blue.svg)](https://github.com/marcusquinn)
 
 <!-- Release & Version Info -->
-[![Version](https://img.shields.io/badge/Version-3.29.40-blue.svg)](https://github.com/marcusquinn/aidevops/releases)
+[![Version](https://img.shields.io/badge/Version-3.30.0-blue.svg)](https://github.com/marcusquinn/aidevops/releases)
 [![npm version](https://img.shields.io/npm/v/aidevops)](https://www.npmjs.com/package/aidevops)
 [![Homebrew](https://img.shields.io/badge/homebrew-marcusquinn%2Ftap-orange)](https://github.com/marcusquinn/homebrew-tap)
 [![GitHub repository](https://img.shields.io/badge/github-repository-181717.svg?logo=github)](https://github.com/marcusquinn/aidevops)

package/VERSION

@@ -1 +1 @@
-3.29.40
+3.30.0

package/aidevops.sh

@@ -5,7 +5,7 @@
 # AI DevOps Framework CLI
 # Usage: aidevops <command> [options]
 #
-# Version: 3.29.40
+# Version: 3.30.0
 
 set -euo pipefail
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aidevops",
-  "version": "3.29.40",
+  "version": "3.30.0",
   "description": "AI DevOps Framework - AI-assisted development workflows, code quality, and deployment automation",
   "type": "module",
   "workspaces": [

package/packages/gui-api/src/app.ts

@@ -1,7 +1,7 @@
 import { spawn } from "node:child_process";
 import * as readline from "node:readline";
 import { Hono } from "hono";
-import { APP_ACTION_ROUTE_MANIFEST, APP_ACTION_STATUS_ROUTE_MANIFEST, BANNED_ROUTE_PATTERNS, createEnvelope, FILE_EXPLORER_ROUTE_MANIFEST, type GuiAppActionId, type GuiAppActionJobSummary, STATUS_ROUTE_MANIFEST, TAMBO_PROVIDER_CONFIG, TAMBO_PROXY_ROUTE_MANIFEST, VAULT_STATUS_ROUTE_MANIFEST } from "../../gui-shared/src";
+import { APP_ACTION_ROUTE_MANIFEST, APP_ACTION_STATUS_ROUTE_MANIFEST, BANNED_ROUTE_PATTERNS, createEnvelope, FILE_EXPLORER_ROUTE_MANIFEST, type GuiAppActionId, type GuiAppActionJobSummary, type GuiPulseWorkerActionId, type GuiPulseWorkerActionJobSummary, PULSE_WORKERS_ACTION_ROUTE_MANIFEST, PULSE_WORKERS_ACTION_STATUS_ROUTE_MANIFEST, STATUS_ROUTE_MANIFEST, TAMBO_PROVIDER_CONFIG, TAMBO_PROXY_ROUTE_MANIFEST, VAULT_STATUS_ROUTE_MANIFEST } from "../../gui-shared/src";
 import { readFileExplorer } from "./file-adapter";
 import { readStatus, readVaultStatus } from "./status-adapter";
 
@@ -34,6 +34,15 @@ const appActionCommands: Record<string, Partial<Record<GuiAppActionId, string[]>
 
 const appActionJobs = new Map<string, GuiAppActionJobSummary>();
 
+const pulseWorkerActionCommands: Record<GuiPulseWorkerActionId, { command: string[]; audit_ref: string; target_ref: string }> = {
+  diagnose: { command: ["aidevops", "pulse", "diagnose", "--gui", "--metadata-only"], audit_ref: "gui:pulse-workers:diagnose", target_ref: "selected event" },
+  run_pulse: { command: ["aidevops", "pulse", "run", "--scope", "gui"], audit_ref: "gui:pulse-workers:run-pulse", target_ref: "current filtered scope" },
+  open_logs: { command: ["aidevops", "pulse", "logs", "--metadata-only"], audit_ref: "gui:pulse-workers:open-logs", target_ref: "selected event evidence refs" },
+  create_systemic_fix: { command: ["aidevops", "task", "create", "--from-pulse", "--worker-ready"], audit_ref: "gui:pulse-workers:create-systemic-fix", target_ref: "selected event systemic-fix context" },
+};
+
+const pulseWorkerActionJobs = new Map<string, GuiPulseWorkerActionJobSummary>();
+
 export function createGuiApiApp() {
   const app = new Hono();
 
@@ -54,8 +63,8 @@ export function createGuiApiApp() {
   });
 
   app.get(TAMBO_PROXY_ROUTE_MANIFEST.route, (context) => {
-    const tenantRef = context.req.query("tenant_ref") ?? "local";
-    const workspaceRef = context.req.query("workspace_ref") ?? "aidevops";
+    const tenantRef = threadScopeRef(context.req.query("tenant_ref") ?? "local");
+    const workspaceRef = threadScopeRef(context.req.query("workspace_ref") ?? "aidevops");
     const sessionRef = context.req.query("session_ref") ?? "conversation:local";
 
     return context.json(createEnvelope({
@@ -111,6 +120,47 @@ export function createGuiApiApp() {
     }));
   });
 
+  app.post(PULSE_WORKERS_ACTION_ROUTE_MANIFEST.route, (context) => {
+    const action = context.req.param("action") as GuiPulseWorkerActionId;
+
+    if (!Object.hasOwn(pulseWorkerActionCommands, action)) {
+      return context.json(createEnvelope({
+        operation_id: PULSE_WORKERS_ACTION_ROUTE_MANIFEST.operation_id,
+        source: { surface: "pulse_workers", authority: "allowlisted local command runner", path_refs: [] },
+        data: rejectedPulseWorkerJob(action, "No allowlisted command for this Pulse & Workers action."),
+        errors: ["action_not_allowlisted"],
+      }), 400);
+    }
+
+    const actionCommand = pulseWorkerActionCommands[action];
+    const job = startPulseWorkerActionJob(action, actionCommand.command, actionCommand.target_ref, actionCommand.audit_ref);
+    return context.json(createEnvelope({
+      operation_id: PULSE_WORKERS_ACTION_ROUTE_MANIFEST.operation_id,
+      source: { surface: "pulse_workers", authority: "allowlisted local command runner", path_refs: [".agents/scripts", "packages/gui-api/src/app.ts"] },
+      data: job,
+      warnings: ["Command runs locally in the background through an explicit allowlist. Output is redacted and retained in memory for this GUI API process only."],
+    }), 202);
+  });
+
+  app.get(PULSE_WORKERS_ACTION_STATUS_ROUTE_MANIFEST.route, (context) => {
+    const jobId = context.req.param("jobId");
+    const job = pulseWorkerActionJobs.get(jobId);
+    if (job === undefined) {
+      return context.json(createEnvelope({
+        operation_id: PULSE_WORKERS_ACTION_STATUS_ROUTE_MANIFEST.operation_id,
+        source: { surface: "pulse_workers", authority: "background job store", path_refs: [] },
+        data: rejectedPulseWorkerJob("diagnose", "Unknown Pulse & Workers job."),
+        errors: ["unknown_job"],
+      }), 404);
+    }
+
+    return context.json(createEnvelope({
+      operation_id: PULSE_WORKERS_ACTION_STATUS_ROUTE_MANIFEST.operation_id,
+      source: { surface: "pulse_workers", authority: "background job store", path_refs: [] },
+      data: job,
+    }));
+  });
+
   app.get(FILE_EXPLORER_ROUTE_MANIFEST.route, (context) => {
     const root = context.req.param("root");
     const path = context.req.query("path") ?? "";
@@ -149,6 +199,7 @@ export function createGuiApiApp() {
 
 function startAppActionJob(appId: string, action: GuiAppActionId, command: string[]): GuiAppActionJobSummary {
   const now = new Date().toISOString();
+  const redactLine = createOutputLineRedactor();
   const job: GuiAppActionJobSummary = {
     id: `${Date.now()}-${Math.random().toString(36).slice(2)}`,
     app_id: appId,
@@ -169,11 +220,11 @@ function startAppActionJob(appId: string, action: GuiAppActionId, command: strin
   });
   if (child.stdout !== null) {
     const stdoutLines = readline.createInterface({ input: child.stdout, terminal: false });
-    stdoutLines.on("line", (line) => appendJobLine(job, line));
+    stdoutLines.on("line", (line) => appendJobLine(job, line, redactLine));
   }
   if (child.stderr !== null) {
     const stderrLines = readline.createInterface({ input: child.stderr, terminal: false });
-    stderrLines.on("line", (line) => appendJobLine(job, line));
+    stderrLines.on("line", (line) => appendJobLine(job, line, redactLine));
   }
   child.on("error", (error) => {
     appendJobLine(job, error.message);
@@ -190,18 +241,104 @@ function startAppActionJob(appId: string, action: GuiAppActionId, command: strin
   return job;
 }
 
-function appendJobLine(job: GuiAppActionJobSummary, line: string): void {
+function appendJobLine(job: GuiAppActionJobSummary, line: string, redactLine: (line: string) => string = redactOutputLine): void {
+  if (line.length === 0) {
+    return;
+  }
+  job.output.push(redactLine(line));
+  if (job.output.length > 400) {
+    job.output.splice(1, job.output.length - 400);
+  }
+}
+
+function startPulseWorkerActionJob(action: GuiPulseWorkerActionId, command: string[], targetRef: string, auditRef: string): GuiPulseWorkerActionJobSummary {
+  const now = new Date().toISOString();
+  const redactLine = createOutputLineRedactor();
+  const job: GuiPulseWorkerActionJobSummary = {
+    id: `${Date.now()}-${Math.random().toString(36).slice(2)}`,
+    action,
+    target_ref: targetRef,
+    status: "running",
+    command_preview: command.join(" "),
+    started_at: now,
+    finished_at: null,
+    exit_code: null,
+    output: [`$ ${command.join(" ")}`, `audit_ref=${auditRef}`],
+    audit_ref: auditRef,
+  };
+  pulseWorkerActionJobs.set(job.id, job);
+  startBackgroundProcess(command, (line) => appendPulseWorkerJobLine(job, line, redactLine), (code) => {
+    job.status = code === 0 ? "completed" : "failed";
+    job.finished_at = new Date().toISOString();
+    job.exit_code = code;
+  });
+
+  return job;
+}
+
+function appendPulseWorkerJobLine(job: GuiPulseWorkerActionJobSummary, line: string, redactLine: (line: string) => string = redactOutputLine): void {
   if (line.length === 0) {
     return;
   }
-  job.output.push(redactOutputLine(line));
+  job.output.push(redactLine(line));
   if (job.output.length > 400) {
     job.output.splice(1, job.output.length - 400);
   }
 }
 
+function startBackgroundProcess(command: string[], appendLine: (line: string) => void, finish: (code: number) => void): void {
+  let finished = false;
+  const safeFinish = (code: number): void => {
+    if (finished) {
+      return;
+    }
+    finished = true;
+    finish(code);
+  };
+
+  const child = spawn(command[0], command.slice(1), {
+    cwd: process.cwd(),
+    env: { ...process.env, AIDEVOPS_NON_INTERACTIVE: "true", CLICOLOR_FORCE: "1", FORCE_COLOR: "1", TERM: process.env.TERM ?? "xterm-256color" },
+    stdio: ["ignore", "pipe", "pipe"],
+  });
+  if (child.stdout !== null) {
+    readline.createInterface({ input: child.stdout, terminal: false }).on("line", appendLine);
+  }
+  if (child.stderr !== null) {
+    readline.createInterface({ input: child.stderr, terminal: false }).on("line", appendLine);
+  }
+  child.on("error", (error) => {
+    appendLine(error.message);
+    safeFinish(127);
+  });
+  child.on("close", (code) => safeFinish(code ?? 1));
+}
+
+export function createOutputLineRedactor(): (line: string) => string {
+  let inPrivateKeyBlock = false;
+
+  return (line: string): string => {
+    if (/-----BEGIN [A-Z ]+ PRIVATE KEY-----/.test(line)) {
+      inPrivateKeyBlock = !/-----END [A-Z ]+ PRIVATE KEY-----/.test(line);
+      return "[redacted private key]";
+    }
+
+    if (inPrivateKeyBlock) {
+      if (/-----END [A-Z ]+ PRIVATE KEY-----/.test(line)) {
+        inPrivateKeyBlock = false;
+      }
+      return "[redacted private key]";
+    }
+
+    return redactOutputLine(line);
+  };
+}
+
 function redactOutputLine(line: string): string {
-  return line.replace(/(token|secret|password|authorization)=\S+/gi, "$1=[redacted]");
+  return line
+    .replace(/(token|secret|password|authorization|api[_-]?key|sessionid)=\S+/gi, "$1=[redacted]")
+    .replace(/Bearer\s+\S+/gi, "Bearer [redacted]")
+    .replace(/-----BEGIN [A-Z ]+ PRIVATE KEY-----[\s\S]*?-----END [A-Z ]+ PRIVATE KEY-----/g, "[redacted private key]");
 }
 
 function rejectedJob(appId: string, action: GuiAppActionId, message: string): GuiAppActionJobSummary {
@@ -209,4 +346,13 @@ function rejectedJob(appId: string, action: GuiAppActionId, message: string): Gu
   return { id: "rejected", app_id: appId, action, status: "rejected", command_preview: "not run", started_at: now, finished_at: now, exit_code: null, output: [message] };
 }
 
+function rejectedPulseWorkerJob(action: GuiPulseWorkerActionId, message: string): GuiPulseWorkerActionJobSummary {
+  const now = new Date().toISOString();
+  return { id: "rejected", action, target_ref: "none", status: "rejected", command_preview: "not run", started_at: now, finished_at: now, exit_code: null, output: [message], audit_ref: "gui:pulse-workers:rejected" };
+}
+
 export const app = createGuiApiApp();
+
+function threadScopeRef(value: string): string {
+  return value.replace(/:/g, "");
+}

package/packages/gui-api/src/status-pulse-workers-attention.ts

@@ -0,0 +1,24 @@
+import type { GuiPulseResourceSnapshot, GuiPulseWorkerSummary } from "../../gui-shared/src";
+import { hasAvailableProvider } from "./status-pulse-workers-classifiers";
+import { slug } from "./status-pulse-workers-values";
+
+interface SourceState {
+  path_ref: string;
+  health: "present" | "missing" | "invalid";
+  observed_at: string;
+}
+
+export function buildAttention(sources: SourceState[], counters: Record<string, number>, resources: GuiPulseResourceSnapshot[], oauthPool: Record<string, unknown>): GuiPulseWorkerSummary["attention"] {
+  const missing = sources.filter((source) => source.health !== "present");
+  const attention: GuiPulseWorkerSummary["attention"] = missing.map((source) => ({ id: `source-${source.health}-${slug(source.path_ref)}`, severity: source.health === "invalid" ? "warning" : "info", title: `Telemetry source ${source.health}`, detail: `${source.path_ref} was ${source.health}; the GUI used safe empty summaries for that source.`, event_ref: null }));
+  for (const [name, count] of Object.entries(counters).filter(([, count]) => count > 0)) {
+    attention.push({ id: `pulse-counter-${slug(name)}`, severity: "warning", title: `Pulse counter active: ${name}`, detail: `${count} events observed in the selected local period.`, event_ref: null });
+  }
+  for (const resource of resources.filter((item) => item.pressure === "medium" || item.pressure === "high")) {
+    attention.push({ id: `resource-${slug(resource.kind)}-${slug(resource.label)}`, severity: resource.pressure === "high" ? "critical" : "warning", title: `${resource.label} pressure ${resource.pressure}`, detail: resource.available_label, event_ref: null });
+  }
+  if (!hasAvailableProvider(oauthPool)) {
+    attention.push({ id: "provider-availability-unknown", severity: "info", title: "Provider availability unknown", detail: "OAuth pool metadata did not expose an available provider account count; the GUI marks provider capacity as unknown.", event_ref: null });
+  }
+  return attention.slice(0, 12);
+}

package/packages/gui-api/src/status-pulse-workers-classifiers.ts

@@ -0,0 +1,99 @@
+import {
+  type GuiPulseAuthorAssociation,
+  type GuiPulseIssueOrigin,
+  type GuiPulseProviderId,
+  type GuiPulseWorkerOutcome,
+  type GuiPulseWorkerSeverity,
+  type GuiPulseWorkerStatus,
+} from "../../gui-shared/src";
+
+type MetricRecord = Record<string, unknown>;
+
+const KNOWN_WORKER_OUTCOMES = new Set<GuiPulseWorkerOutcome>(["merged", "closed", "in_progress", "needs_maintainer_review", "blocked", "failed", "deferred", "created_followup"]);
+const HEALTHY_WORKER_OUTCOMES = new Set<GuiPulseWorkerOutcome>(["merged", "closed", "deferred", "created_followup"]);
+const OUTCOME_MATCHERS: Array<{ pattern: RegExp; outcome: GuiPulseWorkerOutcome }> = [
+  { pattern: /success|complete/, outcome: "merged" },
+  { pattern: /follow/, outcome: "created_followup" },
+  { pattern: /defer/, outcome: "deferred" },
+  { pattern: /block/, outcome: "blocked" },
+  { pattern: /fail|kill/, outcome: "failed" },
+];
+const KNOWN_ISSUE_ORIGINS = new Set<GuiPulseIssueOrigin>(["aidevops_created", "self_created", "maintainer_created", "origin_interactive", "third_party", "imported", "unknown"]);
+const ISSUE_ORIGIN_MATCHERS: Array<{ pattern: RegExp; origin: GuiPulseIssueOrigin }> = [
+  { pattern: /interactive/, origin: "origin_interactive" },
+  { pattern: /third|community/, origin: "third_party" },
+  { pattern: /import/, origin: "imported" },
+  { pattern: /self|user/, origin: "self_created" },
+  { pattern: /maintainer/, origin: "maintainer_created" },
+  { pattern: /aidevops/, origin: "aidevops_created" },
+];
+const STATUS_BY_OUTCOME: Partial<Record<GuiPulseWorkerOutcome, GuiPulseWorkerStatus>> = {
+  failed: "failed",
+  blocked: "blocked",
+  needs_maintainer_review: "blocked",
+  in_progress: "running",
+  deferred: "deferred",
+};
+const SEVERITY_BY_STATUS: Partial<Record<GuiPulseWorkerStatus, GuiPulseWorkerSeverity>> = {
+  failed: "critical",
+  blocked: "critical",
+  attention: "warning",
+  deferred: "warning",
+  completed: "success",
+  healthy: "success",
+};
+const KNOWN_AUTHOR_ASSOCIATIONS = new Set<GuiPulseAuthorAssociation>(["OWNER", "MEMBER", "COLLABORATOR", "CONTRIBUTOR", "FIRST_TIMER", "FIRST_TIME_CONTRIBUTOR", "NONE", "UNKNOWN"]);
+const KNOWN_PROVIDER_IDS = new Set<GuiPulseProviderId>(["anthropic", "openai", "cursor", "google", "local"]);
+
+export function outcomeFromRecord(record: MetricRecord): GuiPulseWorkerOutcome {
+  const raw = String(record.outcome ?? record.result ?? record.status ?? "in_progress").toLowerCase();
+  if (KNOWN_WORKER_OUTCOMES.has(raw as GuiPulseWorkerOutcome)) {
+    return raw as GuiPulseWorkerOutcome;
+  }
+  return OUTCOME_MATCHERS.find((matcher) => matcher.pattern.test(raw))?.outcome ?? "in_progress";
+}
+
+export function statusFromOutcome(outcome: GuiPulseWorkerOutcome): GuiPulseWorkerStatus {
+  return STATUS_BY_OUTCOME[outcome] ?? "completed";
+}
+
+export function severityFromStatus(status: GuiPulseWorkerStatus): GuiPulseWorkerSeverity {
+  return SEVERITY_BY_STATUS[status] ?? "info";
+}
+
+export function isHealthyOutcome(outcome: GuiPulseWorkerOutcome): boolean {
+  return HEALTHY_WORKER_OUTCOMES.has(outcome);
+}
+
+export function issueOriginFromRecord(record: MetricRecord): GuiPulseIssueOrigin {
+  const raw = String(record.issue_origin ?? record.origin ?? "unknown").toLowerCase();
+  if (KNOWN_ISSUE_ORIGINS.has(raw as GuiPulseIssueOrigin)) return raw as GuiPulseIssueOrigin;
+  return ISSUE_ORIGIN_MATCHERS.find((matcher) => matcher.pattern.test(raw))?.origin ?? "unknown";
+}
+
+export function authorAssociationFromRecord(record: MetricRecord): GuiPulseAuthorAssociation {
+  const raw = String(record.author_association ?? "UNKNOWN").toUpperCase();
+  if (KNOWN_AUTHOR_ASSOCIATIONS.has(raw as GuiPulseAuthorAssociation)) return raw as GuiPulseAuthorAssociation;
+  return "UNKNOWN";
+}
+
+export function hasAvailableProvider(record: MetricRecord): boolean {
+  const providers = Array.isArray(record.providers) ? record.providers : [];
+  return providers.some((provider) => providerAvailability(provider) > 0);
+}
+
+function providerAvailability(provider: unknown): number {
+  const record = providerRecord(provider);
+  const available = record?.available;
+  return typeof available === "number" && Number.isFinite(available) ? available : 0;
+}
+
+function providerRecord(value: unknown): MetricRecord | null {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
+  return value as MetricRecord;
+}
+
+export function providerFromString(value: string | undefined): GuiPulseProviderId {
+  if (KNOWN_PROVIDER_IDS.has(value as GuiPulseProviderId)) return value as GuiPulseProviderId;
+  return "unknown";
+}

package/packages/gui-api/src/status-pulse-workers-values.ts

@@ -0,0 +1,59 @@
+import type { GuiPulseWorkerOutcome } from "../../gui-shared/src";
+
+export type MetricRecord = Record<string, unknown>;
+
+const TIME_FIELDS = ["ts", "timestamp", "started_at", "finished_at", "created_at", "updated_at"];
+
+export function recordTimeMs(record: MetricRecord): number | null {
+  for (const key of TIME_FIELDS) {
+    const parsed = timeValueMs(record[key]);
+    if (parsed !== null) return parsed;
+  }
+  return null;
+}
+
+export function durationMsFromRecord(record: MetricRecord): number | null {
+  const duration = numberValue(record.duration_ms ?? record.wall_time_ms);
+  if (duration !== null) return duration;
+  const elapsed = numberValue(record.elapsed_s);
+  return elapsed === null ? null : elapsed * 1000;
+}
+
+export function summaryFromRecord(record: MetricRecord, outcome: GuiPulseWorkerOutcome): string {
+  const issue = stringOrNumber(record.issue ?? record.issue_number);
+  return issue === null ? `Worker outcome: ${outcome}.` : `Worker outcome for #${issue.replace(/^#/, "")}: ${outcome}.`;
+}
+
+export function countOptions(values: string[], prefix = ""): Array<{ id: string; label: string; count: number }> {
+  const counts = new Map<string, number>();
+  for (const value of values) counts.set(value, (counts.get(value) ?? 0) + 1);
+  return [...counts.entries()].map(([label, count]) => ({ id: `${prefix}${slug(label)}`, label, count })).sort((a, b) => b.count - a.count || a.label.localeCompare(b.label));
+}
+
+export function costRef(record: MetricRecord): string | null {
+  const cost = record.estimated_cost_ref ?? record.cost_ref;
+  if (typeof cost === "string" && cost.length > 0 && !cost.includes("/")) return cost;
+  const amount = numberValue(record.estimated_cost_usd ?? record.cost_usd);
+  return amount === null ? null : `$${amount.toFixed(2)} estimated`;
+}
+
+export function stringOrNumber(value: unknown): string | null {
+  if (typeof value === "string" && value.length > 0) return value;
+  if (typeof value === "number" && Number.isFinite(value)) return String(value);
+  return null;
+}
+
+export function numberValue(value: unknown): number | null {
+  return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+
+export function slug(value: string): string {
+  return value.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "") || "unknown";
+}
+
+function timeValueMs(value: unknown): number | null {
+  if (typeof value === "number" && Number.isFinite(value)) return value > 9_999_999_999 ? value : value * 1000;
+  if (typeof value !== "string" || value.length === 0) return null;
+  const parsed = Date.parse(value);
+  return Number.isFinite(parsed) ? parsed : null;
+}