aidevops 3.29.5 → 3.29.6

package/README.md

@@ -58,7 +58,7 @@ The result: an AI operations platform that manages projects across every busines
 [![Copyright](https://img.shields.io/badge/Copyright-Marcus%20Quinn%202025--2026-blue.svg)](https://github.com/marcusquinn)
 
 <!-- Release & Version Info -->
-[![Version](https://img.shields.io/badge/Version-3.29.5-blue.svg)](https://github.com/marcusquinn/aidevops/releases)
+[![Version](https://img.shields.io/badge/Version-3.29.6-blue.svg)](https://github.com/marcusquinn/aidevops/releases)
 [![npm version](https://img.shields.io/npm/v/aidevops)](https://www.npmjs.com/package/aidevops)
 [![Homebrew](https://img.shields.io/badge/homebrew-marcusquinn%2Ftap-orange)](https://github.com/marcusquinn/homebrew-tap)
 [![GitHub repository](https://img.shields.io/badge/github-repository-181717.svg?logo=github)](https://github.com/marcusquinn/aidevops)

package/VERSION

@@ -1 +1 @@
-3.29.5
+3.29.6

package/aidevops.sh

@@ -5,7 +5,7 @@
 # AI DevOps Framework CLI
 # Usage: aidevops <command> [options]
 #
-# Version: 3.29.5
+# Version: 3.29.6
 
 set -euo pipefail
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aidevops",
-  "version": "3.29.5",
+  "version": "3.29.6",
   "description": "AI DevOps Framework - AI-assisted development workflows, code quality, and deployment automation",
   "type": "module",
   "workspaces": [

package/packages/gui-api/src/status-adapter.ts

@@ -20,6 +20,7 @@ import {
   type GuiSetupTargetSummary,
   type GuiStatusData,
   type GuiVaultStatusData,
+  buildStatusNotifications,
   statusFixture,
   VAULT_STATUS_ROUTE_MANIFEST,
 } from "../../gui-shared/src";
@@ -60,6 +61,7 @@ export function readStatus(
   const reposPathRef = "~/.config/aidevops/repos.json";
   const oauthPoolPathRef = "~/.aidevops/oauth-pool.json";
   const opencodeDbPathRef = "~/.local/share/opencode/opencode.db";
+  const greetingCachePathRef = "~/.aidevops/cache/session-greeting.txt";
   const agentsPathRef = "~/.aidevops/agents";
   const vaultPathRef = statusFixture.vault.path_ref;
   const settingsPath = expandHome(settingsPathRef);
@@ -76,13 +78,22 @@ export function readStatus(
   const managedApps = readManagedApps(aidevopsVersion || "unknown", installedVersion || "unknown");
   const localRepos = readLocalReposSetupSummary(reposPath);
   const opencodeSessions = readOpenCodeSessions(opencodeDbPath, opencodeDbPathRef, localRepos.repos);
+  const oauthPool = readOAuthPoolSummary(oauthPoolPath, oauthPoolPathRef);
   const vault = readVaultSummary(repoRoot);
+  const notifications = buildStatusNotifications({
+    aiApps,
+    greetingOutput: readOptionalText(expandHome(greetingCachePathRef)) ?? "",
+    oauthPool,
+    restartRequired,
+    setupTargets,
+  });
   const sourcePathRefs = [
     agentsPathRef,
     settingsPathRef,
     reposPathRef,
     oauthPoolPathRef,
     opencodeDbPathRef,
+    greetingCachePathRef,
     vaultPathRef,
     "VERSION",
     ...setupTargets.map((target) => target.path_ref),
@@ -131,10 +142,11 @@ export function readStatus(
     repos: readRepoRegistrySummary(reposPath, reposPathRef),
     local_repos: localRepos,
     opencode_sessions: opencodeSessions,
-    oauth_pool: readOAuthPoolSummary(oauthPoolPath, oauthPoolPathRef),
+    oauth_pool: oauthPool,
     setup_targets: setupTargets,
     ai_apps: aiApps,
     managed_apps: managedApps,
+    notifications,
     vault,
   };
 

package/packages/gui-shared/src/contracts.ts

@@ -339,6 +339,31 @@ export interface GuiCapabilitySummary {
   doc_ref: string;
 }
 
+export type GuiNotificationSeverity = "success" | "info" | "warning" | "error";
+
+export type GuiNotificationCategory = "security" | "maintenance" | "release" | "runtime" | "setup";
+
+export interface GuiNotificationAction {
+  id: string;
+  label: string;
+  kind: "surface" | "command";
+  surface_id?: string;
+  command_preview?: string;
+  enabled: boolean;
+}
+
+export interface GuiNotificationSummary {
+  id: string;
+  title: string;
+  message: string;
+  severity: GuiNotificationSeverity;
+  category: GuiNotificationCategory;
+  source: "opencode-toast" | "gui-status";
+  source_ref: string;
+  status: "active" | "resolved";
+  actions: GuiNotificationAction[];
+}
+
 export interface GuiMachineSummary {
   id: string;
   label: string;
@@ -451,6 +476,7 @@ export interface GuiStatusData {
   setup_targets: GuiSetupTargetSummary[];
   ai_apps: GuiAiAppSummary[];
   managed_apps: GuiManagedAppSummary[];
+  notifications: GuiNotificationSummary[];
   vault: GuiVaultStatusData;
   capabilities: GuiCapabilitySummary[];
   secrets: GuiSecretReference[];

package/packages/gui-shared/src/fixtures.ts

@@ -163,6 +163,19 @@ export const statusFixture: GuiStatusData = {
     },
   ],
   managed_apps: [],
+  notifications: [
+    {
+      id: "fixture-security-active",
+      title: "Security protections active",
+      message: "Security: all protections active",
+      severity: "success",
+      category: "security",
+      source: "opencode-toast",
+      source_ref: "~/.aidevops/cache/session-greeting.txt",
+      status: "resolved",
+      actions: [{ id: "open-security", label: "Open security", kind: "surface", surface_id: "security", enabled: true }],
+    },
+  ],
   vault: {
     status: "uninitialized",
     setup_state: "uninitialized",

package/packages/gui-shared/src/index.ts

@@ -1,2 +1,3 @@
 export * from "./contracts";
 export * from "./fixtures";
+export * from "./notifications";

package/packages/gui-shared/src/notifications.ts

@@ -0,0 +1,220 @@
+import type { GuiAiAppSummary, GuiNotificationAction, GuiNotificationCategory, GuiNotificationSeverity, GuiNotificationSummary, GuiOAuthPoolSummary, GuiSetupTargetSummary } from "./contracts";
+
+interface BuildNotificationInput {
+  aiApps: GuiAiAppSummary[];
+  greetingOutput: string;
+  oauthPool: GuiOAuthPoolSummary;
+  restartRequired: boolean;
+  setupTargets: GuiSetupTargetSummary[];
+}
+
+const toastSeverityRank: Record<GuiNotificationSeverity, number> = {
+  success: 0,
+  info: 1,
+  warning: 2,
+  error: 3,
+};
+
+const warningLineMatchers: Array<(line: string) => boolean> = [
+  (line) => line.startsWith("Pulse stalled"),
+  (line) => /contribution\(s\) need/i.test(line),
+  (line) => line.startsWith("[OPENCODE MAINTENANCE]"),
+  (line) => line.startsWith("[WARNING]"),
+  (line) => line.startsWith("[WARN]"),
+];
+
+const toastTitleRules: Array<{ matches: (line: string) => boolean; title: string }> = [
+  { matches: (line) => line.startsWith("[SECURITY ADVISORY]"), title: "Security advisory" },
+  { matches: (line) => line.startsWith("[ERROR]"), title: "Startup error" },
+  { matches: (line) => line.startsWith("[OPENCODE MAINTENANCE]"), title: "OpenCode maintenance" },
+  { matches: (line) => line.startsWith("Pulse stalled"), title: "Pulse stalled" },
+  { matches: (line) => /contribution\(s\) need/i.test(line), title: "External contribution review" },
+  { matches: (line) => line.startsWith("[WARNING]") || line.startsWith("[WARN]"), title: "Startup warning" },
+  { matches: (line) => line.startsWith("Security: all protections active"), title: "Security protections active" },
+];
+
+export function classifyToastLine(line: string): GuiNotificationSeverity | null {
+  const normalized = line.trim();
+  if (normalized.length === 0 || normalized.startsWith("UPDATE_AVAILABLE|") || normalized === "AUTO_UPDATE_ENABLED") {
+    return null;
+  }
+
+  if (normalized.startsWith("[SECURITY ADVISORY]") || normalized.startsWith("[ERROR]")) {
+    return "error";
+  }
+
+  if (warningLineMatchers.some((matches) => matches(normalized))) {
+    return "warning";
+  }
+
+  if (normalized.startsWith("Security: all protections active")) {
+    return "success";
+  }
+
+  return "info";
+}
+
+export function buildStatusNotifications(input: BuildNotificationInput): GuiNotificationSummary[] {
+  const notifications = [
+    ...buildToastNotifications(input.greetingOutput),
+    ...buildGuiStateNotifications(input),
+  ];
+
+  return dedupeNotifications(notifications).sort((left, right) => {
+    const severityDelta = toastSeverityRank[right.severity] - toastSeverityRank[left.severity];
+    return severityDelta === 0 ? left.title.localeCompare(right.title) : severityDelta;
+  });
+}
+
+function buildToastNotifications(greetingOutput: string): GuiNotificationSummary[] {
+  return greetingOutput
+    .split("\n")
+    .map((line) => line.trim())
+    .filter(Boolean)
+    .flatMap((line) => {
+      const severity = classifyToastLine(line);
+      if (severity === null) {
+        return [];
+      }
+
+      const category = categoryForToastLine(line, severity);
+      return [notification({
+        id: `toast-${stableId(line)}`,
+        title: titleForToastLine(line, severity),
+        message: line,
+        severity,
+        category,
+        source: "opencode-toast",
+        source_ref: "~/.aidevops/cache/session-greeting.txt",
+        status: severity === "success" || severity === "info" ? "resolved" : "active",
+        actions: actionsForToastLine(line, category, severity),
+      })];
+    });
+}
+
+function buildGuiStateNotifications(input: BuildNotificationInput): GuiNotificationSummary[] {
+  const setupNeedsUpdate = input.setupTargets.filter((target) => target.needs_update);
+  const appNeedsUpdate = input.aiApps.filter((app) => app.needs_update);
+  const authErrors = input.oauthPool.providers.filter((provider) => provider.auth_errors > 0);
+  const rateLimited = input.oauthPool.providers.filter((provider) => provider.rate_limited > 0);
+  const notifications: GuiNotificationSummary[] = [];
+
+  if (input.restartRequired) {
+    notifications.push(notification({
+      id: "gui-restart-required",
+      title: "Restart required",
+      message: "aidevops has updated in the background. Restart the GUI app to use the latest installed version.",
+      severity: "warning",
+      category: "release",
+      source: "gui-status",
+      source_ref: "VERSION and ~/.aidevops/agents/VERSION",
+      status: "active",
+      actions: [surfaceAction("open-installation", "Open installation", "installation"), commandAction("restart-gui", "Restart GUI app", "Quit and reopen the aidevops GUI app")],
+    }));
+  }
+
+  if (setupNeedsUpdate.length > 0 || appNeedsUpdate.length > 0) {
+    notifications.push(notification({
+      id: "gui-targets-need-update",
+      title: "Installed targets need update",
+      message: `${setupNeedsUpdate.length} setup target(s) and ${appNeedsUpdate.length} AI app target(s) need the current aidevops files.`,
+      severity: "warning",
+      category: "setup",
+      source: "gui-status",
+      source_ref: "setup_targets and ai_apps",
+      status: "active",
+      actions: [surfaceAction("open-installation", "Open installation", "installation"), commandAction("run-update", "Run update", "aidevops update")],
+    }));
+  }
+
+  for (const provider of authErrors) {
+    notifications.push(notification({
+      id: `gui-provider-auth-${provider.provider}`,
+      title: `${provider.provider} auth attention`,
+      message: `${provider.auth_errors} ${provider.provider} account(s) report auth errors. Token values remain hidden from the GUI payload.`,
+      severity: "error",
+      category: "runtime",
+      source: "gui-status",
+      source_ref: input.oauthPool.path_ref,
+      status: "active",
+      actions: [surfaceAction("open-ai-providers", "Open AI providers", "aiProviders"), commandAction("check-oauth-pool", "Check provider pool", `aidevops oauth-pool check ${provider.provider}`)],
+    }));
+  }
+
+  for (const provider of rateLimited) {
+    notifications.push(notification({
+      id: `gui-provider-rate-limit-${provider.provider}`,
+      title: `${provider.provider} rate limit`,
+      message: `${provider.rate_limited} ${provider.provider} account(s) are cooling down. The pool should recover automatically when cooldowns expire.`,
+      severity: "warning",
+      category: "runtime",
+      source: "gui-status",
+      source_ref: input.oauthPool.path_ref,
+      status: "active",
+      actions: [surfaceAction("open-ai-providers", "Open AI providers", "aiProviders")],
+    }));
+  }
+
+  return notifications;
+}
+
+function notification(input: GuiNotificationSummary): GuiNotificationSummary {
+  return input;
+}
+
+function titleForToastLine(line: string, severity: GuiNotificationSeverity): string {
+  const rule = toastTitleRules.find((candidate) => candidate.matches(line));
+  return rule?.title ?? (severity === "info" ? "Runtime status" : "aidevops status");
+}
+
+function categoryForToastLine(line: string, severity: GuiNotificationSeverity): GuiNotificationCategory {
+  if (line.startsWith("[SECURITY ADVISORY]") || line.startsWith("Security:")) return "security";
+  if (line.startsWith("[OPENCODE MAINTENANCE]") || line.startsWith("Pulse stalled")) return "maintenance";
+  if (/update|version|running in/i.test(line)) return "release";
+  if (severity === "warning") return "setup";
+  return "runtime";
+}
+
+function actionsForToastLine(line: string, category: GuiNotificationCategory, severity: GuiNotificationSeverity): GuiNotificationAction[] {
+  if (category === "security") {
+    return [surfaceAction("open-security", "Open security", "security"), surfaceAction("open-vault", "Open Vault", "vault")];
+  }
+
+  if (line.startsWith("[OPENCODE MAINTENANCE]")) {
+    return [surfaceAction("open-local-setup", "Open local setup", "localSetup"), commandAction("run-maintenance", "Run maintenance", "opencode-db-maintenance-helper.sh run")];
+  }
+
+  if (line.startsWith("Pulse stalled")) {
+    return [surfaceAction("open-maintenance", "Open maintenance", "maintenance")];
+  }
+
+  if (severity === "warning") {
+    return [surfaceAction("open-installation", "Open installation", "installation"), commandAction("run-update", "Run update", "aidevops update")];
+  }
+
+  return [surfaceAction("open-overview", "Open overview", "overview")];
+}
+
+function surfaceAction(id: string, label: string, surfaceId: string): GuiNotificationAction {
+  return { id, label, kind: "surface", surface_id: surfaceId, enabled: true };
+}
+
+function commandAction(id: string, label: string, commandPreview: string): GuiNotificationAction {
+  return { id, label, kind: "command", command_preview: commandPreview, enabled: false };
+}
+
+function stableId(value: string): string {
+  let hash = 0;
+  for (let index = 0; index < value.length; index += 1) {
+    hash = ((hash << 5) - hash + value.charCodeAt(index)) | 0;
+  }
+  return Math.abs(hash).toString(36);
+}
+
+function dedupeNotifications(notifications: GuiNotificationSummary[]): GuiNotificationSummary[] {
+  const byId = new Map<string, GuiNotificationSummary>();
+  for (const item of notifications) {
+    byId.set(item.id, item);
+  }
+  return [...byId.values()];
+}

package/packages/gui-web/src/AppWorkspace.tsx

@@ -1,10 +1,10 @@
 /* jshint esversion: 11 */
 import { type ReactElement, type ReactNode, useEffect, useState } from "react";
-import { FiBell, FiChevronLeft, FiChevronRight, FiCommand, FiGlobe, FiHash, FiHelpCircle, FiLogOut, FiMessageSquare, FiSearch, FiSettings, FiShield, FiTerminal, FiUser } from "react-icons/fi";
-import type { GuiFileRootId, GuiStatusData } from "../../gui-shared/src";
+import { FiAlertTriangle, FiBell, FiCheckCircle, FiChevronLeft, FiChevronRight, FiCommand, FiGlobe, FiHash, FiHelpCircle, FiInfo, FiLogOut, FiMessageSquare, FiSearch, FiSettings, FiShield, FiTerminal, FiTool, FiUser } from "react-icons/fi";
+import type { GuiFileRootId, GuiNotificationSummary, GuiStatusData } from "../../gui-shared/src";
 import { SurfaceGlyph } from "./AppNavigation";
 import type { ConversationMode, ShellMode, SurfaceId, SurfaceNavItem } from "./app-model";
-import { inventorySurfaceConfigs, text } from "./app-model";
+import { inventorySurfaceConfigs, surfaceIds, text } from "./app-model";
 import { CommandPalette, type CommandPaletteSelection, commandPaletteShortcutQuery } from "./CommandPalette";
 import { FileExplorerSurface } from "./FileExplorerSurface";
 import { AppsSurface, EditableInventorySurface, InstallationSurface } from "./InventorySurfaces";
@@ -42,7 +42,7 @@ export function Workspace({ activeItem, activeSectionLabel, activeSurface, canGo
       <div className="workspace-scroll">
         {shellMode === "sessions"
           ? <ConversationWorkspace conversationMode={conversationMode} selectedLocalRepoIndex={selectedLocalRepoIndex} selectedSessionId={selectedSessionId} status={status} />
-          : <SurfaceContent activeItem={activeItem} activeSurface={activeSurface} fileRoot={fileRoot} status={status} />}
+          : <SurfaceContent activeItem={activeItem} activeSurface={activeSurface} fileRoot={fileRoot} openSurface={setActiveSurface} status={status} />}
       </div>
     </section>
   );
@@ -70,6 +70,7 @@ function WorkspaceHeader({ activeItem, activeSectionLabel, activeSurface, canGoB
   const [profileOpen, setProfileOpen] = useState(false);
   const userInitials = status.machine.initials || "AI";
   const userName = status.machine.username || "Local user";
+  const activeNotifications = status.notifications.filter((notification) => notification.status === "active");
 
   useEffect(() => {
     const openCommandPalette = (event: KeyboardEvent) => {
@@ -134,9 +135,9 @@ function WorkspaceHeader({ activeItem, activeSectionLabel, activeSurface, canGoB
           </button>
           <button aria-expanded={notificationsOpen} aria-label="Open notifications" className="header-icon-button" onClick={() => { setNotificationsOpen((current) => !current); setProfileOpen(false); }} type="button">
             <FiBell aria-hidden="true" />
-            <span className="notification-dot" aria-hidden="true" />
+            {activeNotifications.length > 0 ? <span className="notification-dot" aria-hidden="true" /> : null}
           </button>
-          {notificationsOpen ? <NotificationsMenu openSurface={(surface) => openItem({ surface })} /> : null}
+          {notificationsOpen ? <NotificationsMenu notifications={status.notifications} openSurface={(surface) => openItem({ surface })} /> : null}
         </div>
         <button aria-pressed={assistantOpen} aria-label="Toggle AI Assistant" className={assistantOpen ? "header-icon-button active" : "header-icon-button"} onClick={() => setAssistantOpen((current) => !current)} title="AI sessions (_)" type="button">
           <FiTerminal aria-hidden="true" />
@@ -176,16 +177,35 @@ function isEditableShortcutTarget(target: EventTarget | null): boolean {
   return target.isContentEditable || ["INPUT", "SELECT", "TEXTAREA"].includes(target.tagName);
 }
 
-function NotificationsMenu({ openSurface }: { openSurface: (surface: SurfaceId) => void }): ReactElement {
+function NotificationsMenu({ notifications, openSurface }: { notifications: GuiNotificationSummary[]; openSurface: (surface: SurfaceId) => void }): ReactElement {
+  const active = notifications.filter((notification) => notification.status === "active");
+  const preview = notifications.slice(0, 4);
+
   return (
     <div className="popover-menu notifications-menu" role="menu">
-      <strong>Notifications</strong>
-      <p>Local readiness updates, release activity, and account alerts will collect here.</p>
+      <div className="notifications-menu-heading">
+        <strong>Notifications</strong>
+        <span>{active.length} active</span>
+      </div>
+      {preview.length === 0 ? <p>No current aidevops notifications.</p> : null}
+      {preview.map((notification) => <NotificationPreview key={notification.id} notification={notification} />)}
       <button onClick={() => openSurface("notifications")} role="menuitem" type="button">Open notifications</button>
     </div>
   );
 }
 
+function NotificationPreview({ notification }: { notification: GuiNotificationSummary }): ReactElement {
+  return (
+    <article className={`notification-preview ${notification.severity}`}>
+      <span aria-hidden="true"><NotificationIcon notification={notification} /></span>
+      <div>
+        <strong>{notification.title}</strong>
+        <small>{notification.category} · {notification.status}</small>
+      </div>
+    </article>
+  );
+}
+
 function ConversationWorkspace({ conversationMode, selectedLocalRepoIndex, selectedSessionId, status }: {
   conversationMode: ConversationMode;
   selectedLocalRepoIndex: number;
@@ -268,10 +288,11 @@ function AssistantPanel({ activeSurface, userName }: { activeSurface: SurfaceId;
   );
 }
 
-function SurfaceContent({ activeItem, activeSurface, fileRoot, status }: {
+function SurfaceContent({ activeItem, activeSurface, fileRoot, openSurface, status }: {
   activeItem: SurfaceNavItem;
   activeSurface: SurfaceId;
   fileRoot: GuiFileRootId | undefined;
+  openSurface: (surface: SurfaceId) => void;
   status: GuiStatusData;
 }) {
   const inventoryConfig = inventorySurfaceConfigs[activeSurface];
@@ -280,7 +301,7 @@ function SurfaceContent({ activeItem, activeSurface, fileRoot, status }: {
     overview: <OverviewSurface status={status} />,
     help: <HelpSurface />,
     settings: <SettingsSurface status={status} />,
-    notifications: <NotificationsSurface />,
+    notifications: <NotificationsSurface openSurface={openSurface} status={status} />,
     admin: <AdminSurface />,
     vault: <VaultSurface status={status} />,
     aiSessions: <PlannedSurface label={text.aiSessions} detail={text.aiSessionsIntro} />,
@@ -391,22 +412,69 @@ function SettingsSurface({ status }: { status: GuiStatusData }): ReactElement {
   );
 }
 
-function NotificationsSurface(): ReactElement {
+function NotificationsSurface({ openSurface, status }: { openSurface: (surface: SurfaceId) => void; status: GuiStatusData }): ReactElement {
+  const active = status.notifications.filter((notification) => notification.status === "active");
+  const resolved = status.notifications.filter((notification) => notification.status === "resolved");
+
   return (
-    <section className="settings-surface">
-      <div className="planned-card">
+    <section className="settings-surface notifications-surface">
+      <div className="planned-card notifications-hero">
         <h2>Notifications</h2>
-        <p>Release updates, workflow failures, security notices, and hosted account messages will appear here.</p>
+        <p>OpenCode startup toasts and the GUI notification centre read the same aidevops status cache and local readiness data, so resolved items disappear or downgrade everywhere after the underlying status changes.</p>
+        <section aria-label="Notification summary" className="notification-summary-strip">
+          <span><strong>{active.length}</strong> active</span>
+          <span><strong>{resolved.length}</strong> resolved</span>
+          <span><strong>{status.notifications.length}</strong> total</span>
+        </section>
       </div>
-      <ul className="notification-list">
-        <li><strong>Readiness</strong><span>Local status and restart notices.</span></li>
-        <li><strong>Workflow</strong><span>PR, release, and routine activity.</span></li>
-        <li><strong>Security</strong><span>Vault and credentials posture reminders.</span></li>
+      <ul aria-label="aidevops notifications" className="github-notification-list">
+        {status.notifications.length === 0 ? <p className="empty-state">No aidevops notifications are currently reported.</p> : null}
+        {status.notifications.map((notification) => <NotificationCard key={notification.id} notification={notification} openSurface={openSurface} />)}
       </ul>
     </section>
   );
 }
 
+function NotificationCard({ notification, openSurface }: { notification: GuiNotificationSummary; openSurface: (surface: SurfaceId) => void }): ReactElement {
+  return (
+    <li className={`github-notification-card ${notification.severity} ${notification.status}`}>
+      <div className="notification-state-icon" aria-hidden="true"><NotificationIcon notification={notification} /></div>
+      <div className="notification-card-body">
+        <header>
+          <div>
+            <p className="eyebrow">{notification.category} · {notification.source}</p>
+            <h3>{notification.title}</h3>
+          </div>
+          <span className="notification-status-pill">{notification.status}</span>
+        </header>
+        <p>{notification.message}</p>
+        <small>{notification.source_ref}</small>
+        <div className="notification-actions">
+          {notification.actions.map((action) => {
+            if (action.kind === "surface" && isSurfaceId(action.surface_id)) {
+              const surfaceId = action.surface_id;
+              return <button className="secondary-action" disabled={!action.enabled} key={action.id} onClick={() => openSurface(surfaceId)} type="button">{action.label}</button>;
+            }
+
+            return <button className="secondary-action" disabled key={action.id} title={action.command_preview} type="button">{action.label}</button>;
+          })}
+        </div>
+      </div>
+    </li>
+  );
+}
+
+function NotificationIcon({ notification }: { notification: GuiNotificationSummary }): ReactElement {
+  if (notification.severity === "error") return <FiAlertTriangle />;
+  if (notification.severity === "warning") return <FiTool />;
+  if (notification.severity === "success") return <FiCheckCircle />;
+  return <FiInfo />;
+}
+
+function isSurfaceId(value: string | undefined): value is SurfaceId {
+  return surfaceIds.includes(value as SurfaceId);
+}
+
 function AdminSurface(): ReactElement {
   return (
     <section className="settings-surface">

package/packages/gui-web/src/app-model.ts

@@ -330,6 +330,10 @@ function plannedNavItem(id: SurfaceId, label: string, description: string, icon:
   return { id, label, description, icon, badge: text.planned };
 }
 
+function plannedCommsGroup(label: string, items: SurfaceNavItem[]): SurfaceNavGroup {
+  return { label, mode: "comms", items };
+}
+
 export const navGroups: SurfaceNavGroup[] = [
   {
     label: text.development,
@@ -388,36 +392,28 @@ export const navGroups: SurfaceNavGroup[] = [
       { id: "marketplaces", label: text.marketplaces, description: "Storefronts and seller profiles", icon: "package", badge: text.planned },
     ],
   },
-  {
-    label: text.management,
-    mode: "comms",
-    items: [
-      plannedNavItem("channels", text.channels, "Team channels", "hash"),
-      plannedNavItem("directMessages", text.directMessages, "Direct and group DMs", "message"),
-      { id: "emailAccounts", label: text.emailAccounts, description: "Mail account sync", icon: "mail", badge: text.planned },
-      { id: "messagingAccounts", label: text.messagingAccounts, description: "Messaging account sync", icon: "message", badge: text.planned },
-      { id: "events", label: text.calendars, description: "CalDAV calendar sync", icon: "calendar", badge: text.planned },
-      { id: "contacts", label: text.contacts, description: "CardDAV contact sync", icon: "users", badge: text.planned },
-      { id: "tasks", label: text.tasks, description: "CalDAV task sync", icon: "list", badge: text.planned },
-      { id: "notes", label: text.notes, description: "Synced notes", icon: "note", badge: text.planned },
-      { id: "bookmarks", label: text.bookmarks, description: "Saved links and references", icon: "bookmark", badge: text.planned },
-    ],
-  },
-  {
-    label: text.projectWork,
-    mode: "comms",
-    items: [
-      { id: "inbox", label: text.inbox, description: "Project intake", icon: "folder", badge: text.planned },
-      { id: "campaigns", label: text.campaigns, description: "Campaign folders", icon: "folder", badge: text.planned },
-      { id: "cases", label: text.cases, description: "Case folders", icon: "folder", badge: text.planned },
-      { id: "projectConfig", label: text.config, description: "Project configuration", icon: "folder", badge: text.planned },
-      { id: "feedback", label: text.feedback, description: "Feedback folders", icon: "folder", badge: text.planned },
-      { id: "knowledge", label: text.knowledge, description: "Knowledge folders", icon: "folder", badge: text.planned },
-      { id: "maintenance", label: text.maintenance, description: "Maintenance folders", icon: "folder", badge: text.planned },
-      { id: "performance", label: text.performance, description: "Performance folders", icon: "folder", badge: text.planned },
-      { id: "reports", label: text.reports, description: "Report folders", icon: "folder", badge: text.planned },
-    ],
-  },
+  plannedCommsGroup(text.management, [
+    plannedNavItem("channels", text.channels, "Team channels", "hash"),
+    plannedNavItem("directMessages", text.directMessages, "Direct and group DMs", "message"),
+    plannedNavItem("emailAccounts", text.emailAccounts, "Mail account sync", "mail"),
+    plannedNavItem("messagingAccounts", text.messagingAccounts, "Messaging account sync", "message"),
+    plannedNavItem("events", text.calendars, "CalDAV calendar sync", "calendar"),
+    plannedNavItem("contacts", text.contacts, "CardDAV contact sync", "users"),
+    plannedNavItem("tasks", text.tasks, "CalDAV task sync", "list"),
+    plannedNavItem("notes", text.notes, "Synced notes", "note"),
+    plannedNavItem("bookmarks", text.bookmarks, "Saved links and references", "bookmark"),
+  ]),
+  plannedCommsGroup(text.projectWork, [
+    plannedNavItem("inbox", text.inbox, "Project intake", "folder"),
+    plannedNavItem("campaigns", text.campaigns, "Campaign folders", "folder"),
+    plannedNavItem("cases", text.cases, "Case folders", "folder"),
+    plannedNavItem("projectConfig", text.config, "Project configuration", "folder"),
+    plannedNavItem("feedback", text.feedback, "Feedback folders", "folder"),
+    plannedNavItem("knowledge", text.knowledge, "Knowledge folders", "folder"),
+    plannedNavItem("maintenance", text.maintenance, "Maintenance folders", "folder"),
+    plannedNavItem("performance", text.performance, "Performance folders", "folder"),
+    plannedNavItem("reports", text.reports, "Report folders", "folder"),
+  ]),
 ];
 
 export const dashboardNavItem: SurfaceNavItem = {
@@ -607,6 +603,7 @@ export function surfaceRecordCounts(status: GuiStatusData): SurfaceRecordCounts
     hosts: populatedInventoryRowCount("hosts"),
     installation: installationRows.length,
     localSetup: status.paths.length,
+    notifications: status.notifications.filter((notification) => notification.status === "active").length,
     projects: status.repos.total || status.repos.repos.length,
     repos: (status.local_repos.total || status.local_repos.repos.length) + (status.repos.total || status.repos.repos.length),
     registrars: populatedInventoryRowCount("registrars"),

package/packages/gui-web/src/dashboard.ts

@@ -55,7 +55,7 @@ export function renderDashboardHtml(status: GuiResponseEnvelope<GuiStatusData>):
     `<h1>aidevops app interface</h1>`,
     `<p>Made for creators.</p>`,
     `<p>AI-assisted development workflows, code quality, and deployment automation.</p>`,
-    `<p>Theme follows system preferences with light and dark overrides. Sidebar modes: DevOps and Comms. Appearance controls can be hidden or shown, and include editable Hue, icon Reset, Show borders toggle, Show counts toggle, Font size choices xs, s, m, lg, xl, and Font options: IBM Plex Mono, IBM Plex Sans, IBM Plex Serif, Inter, Menlo (default), Playpen Sans, Poppins, Source Sans, Source Serif, Tilt Neon, Ubuntu Mono. The workspace header includes a command palette, reserved signposts/help slot immediately left of notifications, notifications menu, AI Assistant panel, and profile menu with Settings, Theme, Language, Community, Admin, and Logout entries. A desktop status bar shows local readiness, repo totals, secret reference count, provider accounts, and update state.</p>`,
+    `<p>Theme follows system preferences with light and dark overrides. Sidebar modes: DevOps and Comms. Appearance controls can be hidden or shown, and include editable Hue, icon Reset, Show borders toggle, Show counts toggle, Font size choices xs, s, m, lg, xl, and Font options: IBM Plex Mono, IBM Plex Sans, IBM Plex Serif, Inter, Menlo (default), Playpen Sans, Poppins, Source Sans, Source Serif, Tilt Neon, Ubuntu Mono. The workspace header includes a command palette, reserved signposts/help slot immediately left of notifications, notifications menu, AI Assistant panel, and profile menu with Settings, Theme, Language, Community, Admin, and Logout entries. Notifications reuse the OpenCode toast status cache and GUI readiness data. A desktop status bar shows local readiness, repo totals, secret reference count, provider accounts, and update state.</p>`,
     `<p>Secret references stay read-only and redacted.</p>`,
     `<p>Vault surfaces show padlock indicators. Encrypted by aidevops Vault; contents visible only when unlocked through app or authorised vault commands.</p>`,
     `<p>${escapeHtml(status.data.update.message)}</p>`,

package/packages/gui-web/src/status-client.ts

@@ -87,6 +87,7 @@ function normalizeStatusEnvelope(envelope: GuiResponseEnvelope<Partial<GuiStatus
       setup_targets: data.setup_targets ?? statusFixture.setup_targets,
       ai_apps: data.ai_apps ?? statusFixture.ai_apps,
       managed_apps: data.managed_apps ?? statusFixture.managed_apps,
+      notifications: data.notifications ?? statusFixture.notifications,
       vault: {
         ...statusFixture.vault,
         ...data.vault,

package/packages/gui-web/src/styles.css

@@ -1044,6 +1044,78 @@ code {
   min-width: 240px;
 }
 
+.notifications-menu {
+  min-width: 320px;
+}
+
+.notifications-menu-heading,
+.notification-preview {
+  align-items: center;
+  display: flex;
+}
+
+.notifications-menu-heading {
+  justify-content: space-between;
+  padding: 2px 4px 6px;
+}
+
+.notifications-menu-heading span {
+  background: var(--surface-muted);
+  border-radius: 999px;
+  color: var(--text-muted);
+  font-size: 0.76rem;
+  font-weight: 900;
+  padding: 4px 8px;
+  text-transform: uppercase;
+}
+
+.notification-preview {
+  border: 1px solid var(--border);
+  border-left: 4px solid var(--notification-color, var(--accent));
+  border-radius: 12px;
+  gap: 10px;
+  padding: 10px;
+}
+
+.notification-preview > span {
+  color: var(--notification-color, var(--accent));
+}
+
+.notification-preview strong,
+.notification-preview small {
+  display: block;
+}
+
+.notification-preview small {
+  color: var(--text-muted);
+  font-size: 0.74rem;
+  text-transform: uppercase;
+}
+
+.notification-preview.error,
+.github-notification-card.error {
+  --notification-color: #cf222e;
+  --notification-bg: rgb(207 34 46 / 10%);
+}
+
+.notification-preview.warning,
+.github-notification-card.warning {
+  --notification-color: #9a6700;
+  --notification-bg: rgb(191 135 0 / 12%);
+}
+
+.notification-preview.info,
+.github-notification-card.info {
+  --notification-color: #0969da;
+  --notification-bg: rgb(9 105 218 / 10%);
+}
+
+.notification-preview.success,
+.github-notification-card.success {
+  --notification-color: #1a7f37;
+  --notification-bg: rgb(26 127 55 / 10%);
+}
+
 .popover-menu button,
 .popover-menu a {
   align-items: center;
@@ -1440,6 +1512,112 @@ code {
   color: var(--text-muted);
 }
 
+.notifications-hero {
+  background:
+    linear-gradient(135deg, var(--notification-bg, color-mix(in srgb, var(--accent) 12%, transparent)), transparent 62%),
+    var(--surface-elevated);
+}
+
+.notification-summary-strip {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 8px;
+  margin-top: 16px;
+}
+
+.notification-summary-strip span,
+.notification-status-pill {
+  background: var(--surface-muted);
+  border: 1px solid var(--border);
+  border-radius: 999px;
+  color: var(--text-secondary);
+  font-size: 0.8rem;
+  font-weight: 800;
+  padding: 6px 10px;
+}
+
+.notification-summary-strip strong {
+  color: var(--accent);
+}
+
+.github-notification-list {
+  display: grid;
+  gap: 12px;
+  list-style: none;
+  margin: 0;
+  padding: 0;
+}
+
+.github-notification-card {
+  background: var(--surface-elevated);
+  border: 1px solid var(--border);
+  border-left: 5px solid var(--notification-color, var(--accent));
+  border-radius: 18px;
+  box-shadow: var(--glass-panel-shadow);
+  display: grid;
+  gap: 12px;
+  grid-template-columns: auto minmax(0, 1fr);
+  padding: 16px;
+}
+
+.github-notification-card.resolved {
+  opacity: 0.78;
+}
+
+.notification-state-icon {
+  align-items: center;
+  background: var(--notification-bg, var(--success-bg));
+  border-radius: 999px;
+  color: var(--notification-color, var(--accent));
+  display: inline-flex;
+  height: 38px;
+  justify-content: center;
+  width: 38px;
+}
+
+.notification-state-icon svg {
+  height: 20px;
+  stroke-width: 2.5;
+  width: 20px;
+}
+
+.notification-card-body {
+  display: grid;
+  gap: 10px;
+  min-width: 0;
+}
+
+.notification-card-body header {
+  align-items: start;
+  display: flex;
+  gap: 12px;
+  justify-content: space-between;
+}
+
+.notification-card-body h3,
+.notification-card-body p {
+  margin: 0;
+}
+
+.notification-card-body p {
+  color: var(--text-secondary);
+}
+
+.notification-card-body small {
+  color: var(--text-muted);
+  overflow-wrap: anywhere;
+}
+
+.notification-actions {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 8px;
+}
+
+.notification-actions .secondary-action {
+  padding: 8px 10px;
+}
+
 .metric-card span,
 .planned-home span,
 .data-row.header-row,

package/setup.sh

@@ -12,7 +12,7 @@ shopt -s inherit_errexit 2>/dev/null || true
 # AI Assistant Server Access Framework Setup Script
 # Helps developers set up the framework for their infrastructure
 #
-# Version: 3.29.5
+# Version: 3.29.6
 #
 # Quick Install:
 #   npm install -g aidevops && aidevops update          (recommended)