aidevops 3.32.227 → 3.32.230

package/README.md

@@ -60,7 +60,7 @@ The result: an AI operations platform that manages projects across every busines
 [![Copyright](https://img.shields.io/badge/Copyright-Marcus%20Quinn%202025--2026-blue.svg)](https://github.com/marcusquinn)
 
 <!-- Release & Version Info -->
-[![Version](https://img.shields.io/badge/Version-3.32.227-blue.svg)](https://github.com/marcusquinn/aidevops/releases)
+[![Version](https://img.shields.io/badge/Version-3.32.230-blue.svg)](https://github.com/marcusquinn/aidevops/releases)
 [![npm version](https://img.shields.io/npm/v/aidevops)](https://www.npmjs.com/package/aidevops)
 [![Homebrew](https://img.shields.io/badge/homebrew-marcusquinn%2Ftap-orange)](https://github.com/marcusquinn/homebrew-tap)
 [![GitHub repository](https://img.shields.io/badge/github-repository-181717.svg?logo=github)](https://github.com/marcusquinn/aidevops)
@@ -105,7 +105,9 @@ the required notices and preferred credit text.
 - `aidevops runtime-bundle list` - List retained validated runtime bundles; use `rollback --bundle-id <id> --reason <text>` for an explicit audited rollback
 - `aidevops gpt56-context [enable|disable|status]` - Keep GPT-5.6 at a 300K advertised context window in OpenCode (enabled by default), so 80% auto-compaction runs near 240K before long-context pricing; disable to use native provider limits
 - `aidevops buzz [status|apply|rollback]` - Inspect or manage Buzz Desktop OpenCode ACP compatibility
+- `~/.aidevops/agents/scripts/team-interface-helper.sh [providers|detect|status|doctor|plan]` - Inspect registered collaboration providers, persist read-only observations, or emit deterministic dry-run plans; no provider-write command is exposed
 - `aidevops secret` - Manage secrets (gopass encrypted, AI-safe)
+- `aidevops source-access` - Manage exact-path, session-bound source-read approvals signed via sudo
 - `aidevops security` - Full security assessment (posture, secrets, supply chain)
 - `aidevops lint audit` - Audit native lint/format/typecheck commands and repo-verify hooks
 - `aidevops lint configure --dry-run` - Preview safe evidence-based lint provisioning
@@ -210,10 +212,16 @@ aidevops security scan-secrets # Plaintext credential locations only
 aidevops security scan-deps    # Unpinned dependency check
 aidevops security check        # Per-repo security posture assessment
 aidevops security dismiss <id> # Dismiss a security advisory after taking action
+aidevops source-access status  # List temporary source-read approvals
+sudo -k /usr/bin/python3 -I -B /etc/aidevops/source-access/source-access-helper.py revoke <approval-id>
 ```
 
 Running `aidevops security` with no arguments is the single command that covers everything — user security posture, plaintext secret detection, supply chain IoC scanning, and active advisories.
 
+When a read guard identifies only a low-confidence source-code basename match, it emits a scoped request. A maintainer can run the displayed root-broker approval command. Approvals are bound to the exact runtime session, user, Git-tracked regular source path, approved content digest, and guard reason; they expire within 12 hours and never override private-key, environment-file, credential-store, hard-link, symlink, changed-content, or untracked-file denials. The plugin redirects the approved read to a root-controlled immutable snapshot of those bytes so the live path cannot be rebound after verification; revocation removes both receipt and snapshot.
+
+`setup.sh` and interactive `aidevops update` provision this capability automatically. Setup verifies the published signed tag, asks for one sudo confirmation, has root fetch the exact reviewed broker bytes directly over TLS, compares those downloads byte-for-byte with the signed Git objects, and then creates a dedicated root-only signing key under `/etc/aidevops/source-access`. It never executes or copies the user-writable aidevops deployment as root. The plugin also rejects approvals whenever the installed broker bytes differ from the active release. Headless updates cannot request sudo, so they leave the capability fail-closed; the next terminal `aidevops update` completes provisioning without a separate bootstrap procedure.
+
 **Security advisories** are delivered via `aidevops update` and shown in the session greeting until dismissed. The scanner never exposes secret values — only file locations and key names. All remediation commands should be run in a separate terminal, not inside AI chat sessions.
 
 **Supply chain hardening:** All Python dependencies are pinned to exact versions (`==`) to prevent malicious package upgrades. The `.pth` file auditor detects known supply chain attack indicators (e.g., the LiteLLM March 2026 PyPI compromise).

package/VERSION

@@ -1 +1 @@
-3.32.227
+3.32.230

package/aidevops.sh

@@ -5,7 +5,7 @@
 # AI DevOps Framework CLI
 # Usage: aidevops <command> [options]
 #
-# Version: 3.32.227
+# Version: 3.32.230
 
 set -euo pipefail
 
@@ -285,6 +285,18 @@ _run_update_setup_transaction() {
 	return 0
 }
 
+_run_update_source_access_reconciliation() {
+	local setup_script="${INSTALL_DIR}/setup.sh"
+
+	[[ -t 0 ]] || return 0
+	[[ -z "${AIDEVOPS_AUTO_UPDATE:-}" ]] || return 0
+	[[ "${AIDEVOPS_NON_INTERACTIVE:-false}" != "true" ]] || return 0
+	if ! AIDEVOPS_SOURCE_ACCESS_INTERACTIVE=true bash "$setup_script" --stage source-access; then
+		print_warning "Source-access broker provisioning remains deferred and fail-closed"
+	fi
+	return 0
+}
+
 _update_render_changelog() {
 	local old_hash="$1"
 	local new_hash="$2"
@@ -435,6 +447,7 @@ cmd_update() {
 		_update_fresh_install || return 1
 	fi
 
+	_run_update_source_access_reconciliation
 	_update_sync_projects "$skip_project_sync" "$(get_version)"
 	if [[ "$skip_project_sync" != "$_AIDEVOPS_UPDATE_TRUE" && "$reconcile_repo_verify" == "$_AIDEVOPS_UPDATE_TRUE" ]]; then
 		_update_reconcile_repo_verify
@@ -930,6 +943,7 @@ _cmd_setup_help() {
 	printf '%s\n' "  opencode  Repair/install the OpenCode CLI only"
 	printf '%s\n' "  agents    Deploy aidevops agents/scripts only"
 	printf '%s\n' "  runtime-config  Reconcile generated runtime commands/configuration"
+	printf '%s\n' "  source-access  Install/verify the signed root approval broker"
 	printf '%s\n' "  hooks     Install safety hooks only"
 	printf '%s\n' "  tabby     Sync Tabby terminal profiles only"
 	printf '%s\n' "  pulse     Install/refresh the pulse scheduler only"
@@ -995,7 +1009,7 @@ cmd_setup() {
 _help_commands() {
 	echo "Commands:"
 	echo "  init [features]    Initialize aidevops in current project"
-	echo "  setup --scope <s>  Run scoped setup/deploy (opencode, agents, hooks, tabby, pulse, gui-desktop, ai-session, full)"
+	echo "  setup --scope <s>  Run scoped setup/deploy (opencode, agents, source-access, hooks, tabby, pulse, gui-desktop, ai-session, full)"
 	echo "  init-routines      Scaffold private routines repo (--org <name> | --local)"
 	echo "  upgrade-planning   Upgrade TODO.md/PLANS.md to latest templates"
 	echo "  features           List available features for init"
@@ -1036,6 +1050,7 @@ _help_commands() {
 	echo "  ip-check <cmd>     IP reputation checks (check/batch/report/providers)"
 	echo "  review-gate <cmd>  Configure review_gate merge policies (rate-limit/completion)"
 	echo "  github-app-auth    GitHub App auth setup/status and API route decisions"
+	echo "  source-access <cmd> Session-bound, sudo-signed source-read approvals"
 	echo "  secret <cmd>       Manage secrets (set/list/run/init/import/status)"
 	echo "  vault <cmd>        Local encrypted Vault broker (init/unlock/lock/status/read/update)"
 	echo "  config <cmd>       Feature toggles (list/get/set/reset/path/help)"
@@ -1065,6 +1080,12 @@ _help_detailed_sections() {
 	echo "  aidevops security check      # Per-repo security posture assessment"
 	echo "  aidevops security dismiss <id> # Dismiss a security advisory"
 	echo ""
+	echo "Temporary source access:"
+	echo "  aidevops update                              # Install/verify broker during normal setup"
+	echo "  sudo -k /usr/bin/python3 -I -B /etc/aidevops/source-access/source-access-helper.py approve <id> --ttl 12h"
+	echo "  aidevops source-access status                    # List active/expired approvals"
+	echo "  sudo -k /usr/bin/python3 -I -B /etc/aidevops/source-access/source-access-helper.py revoke <approval-id>"
+	echo ""
 	echo "IP Reputation:"
 	echo "  aidevops ip-check check <ip> # Check IP reputation across providers"
 	echo "  aidevops ip-check batch <f>  # Batch check IPs from file"
@@ -1843,6 +1864,7 @@ main() {
 	opencode-desktop | oc-desktop) _dispatch_helper "opencode-launcher-helper.sh" "opencode-launcher-helper.sh" desktop "$@" ;;
 	opencode-sandbox | oc-sandbox) _dispatch_helper "opencode-sandbox-helper.sh" "opencode-sandbox-helper.sh" "$@" ;;
 	review-gate | review_gate) _dispatch_helper "review-gate-config-helper.sh" "review-gate-config-helper.sh" "$@" ;;
+	source-access | source_access) _dispatch_helper "source-access-helper.sh" "source-access-helper.sh" "$@" ;;
 	secret | secrets) _dispatch_helper "secret-helper.sh" "secret-helper.sh" "$@" ;;
 	vault) _dispatch_helper "vault-helper.sh" "vault-helper.sh" "$@" ;;
 	approve) _dispatch_helper "approval-helper.sh" "approval-helper.sh" "$@" ;;

package/bun.lock

@@ -15,6 +15,7 @@
         "@types/bun": "latest",
         "@types/react": "^19.0.0",
         "@types/react-dom": "^19.0.0",
+        "ajv": "^8.18.0",
         "react": "^19.0.0",
         "react-dom": "^19.0.0",
         "secretlint": "^11.2.5",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aidevops",
-  "version": "3.32.227",
+  "version": "3.32.230",
   "description": "AI DevOps Framework - AI-assisted development workflows, code quality, and deployment automation",
   "type": "module",
   "workspaces": [
@@ -65,10 +65,11 @@
     "vite": "^7.0.0"
   },
   "devDependencies": {
-    "@types/react": "^19.0.0",
-    "@types/react-dom": "^19.0.0",
     "@secretlint/secretlint-rule-preset-recommend": "^11.2.5",
     "@types/bun": "latest",
+    "@types/react": "^19.0.0",
+    "@types/react-dom": "^19.0.0",
+    "ajv": "^8.18.0",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "secretlint": "^11.2.5",

package/setup.sh

@@ -17,7 +17,7 @@ fi
 # AI Assistant Server Access Framework Setup Script
 # Helps developers set up the framework for their infrastructure
 #
-# Version: 3.32.227
+# Version: 3.32.230
 #
 # Quick Install:
 #   npm install -g aidevops && aidevops update          (recommended)
@@ -35,6 +35,7 @@ NC='\033[0m' # No Color
 CLEAN_MODE=false
 INTERACTIVE_MODE=false
 NON_INTERACTIVE="${AIDEVOPS_NON_INTERACTIVE:-false}"
+SETUP_EXPLICIT_NON_INTERACTIVE="${AIDEVOPS_NON_INTERACTIVE:-false}"
 UPDATE_TOOLS_MODE=false
 SETUP_STAGE=""
 SETUP_STAGE_OPENCODE="setup_opencode_cli"
@@ -45,6 +46,7 @@ SETUP_STAGE_PULSE="setup_supervisor_pulse"
 SETUP_STAGE_GUI_DESKTOP="setup_gui_desktop_app"
 SETUP_STAGE_AI_SESSION="setup_ai_session_incremental"
 SETUP_STAGE_RUNTIME_CONFIG="reconcile_runtime_config"
+SETUP_STAGE_SOURCE_ACCESS="setup_source_access_broker"
 SETUP_STAGE_OPENCODE_PLUGINS="setup_opencode_plugins"
 SETUP_STAGE_HOTFIX_CONFIG="_deploy_hotfix_config"
 SETUP_GUI_APP_NAME="aidevops.app"
@@ -372,6 +374,8 @@ source "${SETUP_IMPL_MODULES_DIR}/tool-beads.sh"
 # shellcheck disable=SC1091
 source "${SETUP_IMPL_MODULES_DIR}/config.sh"
 # shellcheck disable=SC1091
+source "${SETUP_IMPL_MODULES_DIR}/source-access.sh"
+# shellcheck disable=SC1091
 source "${SETUP_IMPL_MODULES_DIR}/plugins.sh"
 # shellcheck disable=SC1091
 source "${SETUP_IMPL_MODULES_DIR}/schedulers.sh"
@@ -392,6 +396,7 @@ parse_args() {
 			;;
 		--non-interactive | -n)
 			NON_INTERACTIVE=true
+			SETUP_EXPLICIT_NON_INTERACTIVE=true
 			shift
 			;;
 		--update | -u)
@@ -433,8 +438,9 @@ parse_args() {
 			echo "Use --clean after removing or renaming agents to sync deletions."
 			echo "Use --interactive to control each step individually."
 			echo "Use --non-interactive for CI/CD or AI agent shells (no stdin required)."
-			echo "Use --stage for targeted updates: opencode, agents, runtime-config, hooks, tabby, pulse, gui-desktop, ai-session, full."
-			echo "Stage aliases: ${SETUP_STAGE_OPENCODE}, ${SETUP_STAGE_AGENTS}, ${SETUP_STAGE_RUNTIME_CONFIG}, ${SETUP_STAGE_HOOKS}, ${SETUP_STAGE_TABBY}, ${SETUP_STAGE_PULSE}, ${SETUP_STAGE_GUI_DESKTOP}, ${SETUP_STAGE_AI_SESSION}."
+			echo "Use --stage for targeted updates: opencode, agents, runtime-config, source-access, hooks, tabby, pulse, gui-desktop, ai-session, full."
+			echo "Stage aliases: ${SETUP_STAGE_OPENCODE}, ${SETUP_STAGE_AGENTS}, ${SETUP_STAGE_RUNTIME_CONFIG}, ${SETUP_STAGE_SOURCE_ACCESS}, ${SETUP_STAGE_HOOKS}, ${SETUP_STAGE_TABBY}, ${SETUP_STAGE_PULSE}, ${SETUP_STAGE_GUI_DESKTOP}, ${SETUP_STAGE_AI_SESSION}."
+			echo "The source-access stage may request sudo when attached to an interactive terminal."
 			echo "Install ${SETUP_GUI_APP_NAME} explicitly with --stage gui-desktop or AIDEVOPS_GUI_DESKTOP_INSTALL=true."
 			echo "Use --update to check for tool updates after setup completes."
 			exit 0
@@ -457,6 +463,7 @@ _setup_print_stage_help() {
 	printf '  opencode | %s          Repair/install OpenCode CLI only\n' "$SETUP_STAGE_OPENCODE"
 	printf '  agents   | %s     Deploy .agents scripts/prompts only\n' "$SETUP_STAGE_AGENTS"
 	printf '  runtime-config | %s  Reconcile generated runtime commands/configuration\n' "$SETUP_STAGE_RUNTIME_CONFIG"
+	printf '  source-access | %s  Install/verify the signed root broker\n' "$SETUP_STAGE_SOURCE_ACCESS"
 	printf '  hooks    | %s          Install safety hooks only\n' "$SETUP_STAGE_HOOKS"
 	printf '  tabby    | %s                 Sync Tabby profiles only\n' "$SETUP_STAGE_TABBY"
 	printf '  pulse    | %s      Install/refresh pulse scheduler only\n' "$SETUP_STAGE_PULSE"
@@ -472,6 +479,7 @@ _setup_canonical_stage() {
 	opencode | "$SETUP_STAGE_OPENCODE") printf '%s' "$SETUP_STAGE_OPENCODE" ;;
 	agents | "$SETUP_STAGE_AGENTS") printf '%s' "$SETUP_STAGE_AGENTS" ;;
 	runtime-config | runtime | "$SETUP_STAGE_RUNTIME_CONFIG") printf '%s' "$SETUP_STAGE_RUNTIME_CONFIG" ;;
+	source-access | "$SETUP_STAGE_SOURCE_ACCESS") printf '%s' "$SETUP_STAGE_SOURCE_ACCESS" ;;
 	hooks | "$SETUP_STAGE_HOOKS") printf '%s' "$SETUP_STAGE_HOOKS" ;;
 	tabby | "$SETUP_STAGE_TABBY") printf '%s' "$SETUP_STAGE_TABBY" ;;
 	pulse | "$SETUP_STAGE_PULSE") printf '%s' "$SETUP_STAGE_PULSE" ;;
@@ -1452,6 +1460,14 @@ _setup_run_scoped_stage() {
 	"$SETUP_STAGE_RUNTIME_CONFIG")
 		_time_step "$SETUP_STAGE_RUNTIME_CONFIG" _setup_reconcile_runtime_config
 		;;
+	"$SETUP_STAGE_SOURCE_ACCESS")
+		if [[ "$SETUP_EXPLICIT_NON_INTERACTIVE" == "true" ]]; then
+			_time_step "$SETUP_STAGE_SOURCE_ACCESS" setup_source_access_broker
+		else
+			AIDEVOPS_SOURCE_ACCESS_INTERACTIVE=true \
+				_time_step "$SETUP_STAGE_SOURCE_ACCESS" setup_source_access_broker
+		fi
+		;;
 	"$SETUP_STAGE_HOOKS")
 		_time_step "$SETUP_STAGE_HOOKS" setup_safety_hooks
 		;;
@@ -1549,6 +1565,7 @@ _setup_run_non_interactive() {
 	_time_step "setup_opencode_desktop_launcher" setup_opencode_desktop_launcher
 	_time_step "sync_agent_sources" sync_agent_sources
 	_time_step "install_aidevops_cli" install_aidevops_cli || print_warning "aidevops CLI installation encountered issues; continuing configuration reconciliation"
+	_time_step "setup_source_access_broker" setup_source_access_broker_nonfatal
 	_time_step "setup_shellcheck_wrapper" setup_shellcheck_wrapper
 	if is_feature_enabled safety_hooks 2>/dev/null; then
 		_time_step "$SETUP_STAGE_HOOKS" setup_safety_hooks
@@ -1722,6 +1739,9 @@ _setup_run_interactive() {
 	# Launcher verification reads the deployed VERSION, so it must follow agent
 	# deployment on first-run interactive setup as it already does non-interactively.
 	confirm_step "Install and verify aidevops CLI command" && install_aidevops_cli
+	if confirm_step "Install the secure source-access approval broker"; then
+		AIDEVOPS_SOURCE_ACCESS_INTERACTIVE=true setup_source_access_broker_nonfatal
+	fi
 	confirm_step "Sync agents from private repositories" && sync_agent_sources
 	confirm_step "Set up routines repo (private repo for recurring operational jobs)" && setup_routines
 	is_feature_enabled safety_hooks 2>/dev/null && confirm_step "Install Claude Code safety hooks (block destructive commands)" && setup_safety_hooks