aidevops 3.32.27 → 3.32.29

package/README.md

@@ -60,7 +60,7 @@ The result: an AI operations platform that manages projects across every busines
 [![Copyright](https://img.shields.io/badge/Copyright-Marcus%20Quinn%202025--2026-blue.svg)](https://github.com/marcusquinn)
 
 <!-- Release & Version Info -->
-[![Version](https://img.shields.io/badge/Version-3.32.27-blue.svg)](https://github.com/marcusquinn/aidevops/releases)
+[![Version](https://img.shields.io/badge/Version-3.32.29-blue.svg)](https://github.com/marcusquinn/aidevops/releases)
 [![npm version](https://img.shields.io/npm/v/aidevops)](https://www.npmjs.com/package/aidevops)
 [![Homebrew](https://img.shields.io/badge/homebrew-marcusquinn%2Ftap-orange)](https://github.com/marcusquinn/homebrew-tap)
 [![GitHub repository](https://img.shields.io/badge/github-repository-181717.svg?logo=github)](https://github.com/marcusquinn/aidevops)
@@ -104,6 +104,8 @@ the required notices and preferred credit text.
 - `aidevops auto-update` - Automatic update polling (enable/disable/status)
 - `aidevops secret` - Manage secrets (gopass encrypted, AI-safe)
 - `aidevops security` - Full security assessment (posture, secrets, supply chain)
+- `aidevops lint audit` - Audit native lint/format/typecheck commands and repo-verify hooks
+- `aidevops lint configure --dry-run` - Preview safe evidence-based lint provisioning
 - `aidevops metrics generate` - Generate local LOC, language, and dependency data for README badges or app about pages
 - `/onboarding` - Interactive setup wizard (in AI assistant)
 - `/design-artifact` - Route artifact-first UI, deck, email, poster, and mobile mockup work

package/VERSION

@@ -1 +1 @@
-3.32.27
+3.32.29

package/aidevops.sh

@@ -5,7 +5,7 @@
 # AI DevOps Framework CLI
 # Usage: aidevops <command> [options]
 #
-# Version: 3.32.27
+# Version: 3.32.29
 
 set -euo pipefail
 
@@ -219,6 +219,7 @@ _run_update_setup() {
 # Update/upgrade command
 cmd_update() {
 	local skip_project_sync=false
+	local reconcile_repo_verify=false
 	local arg
 	for arg in "$@"; do case "$arg" in --skip-project-sync) skip_project_sync=true ;; esac done
 	print_header "Updating AI DevOps Framework"
@@ -266,6 +267,7 @@ cmd_update() {
 					local deployed_sha has_code_drift=0
 					deployed_sha=$(tr -d '[:space:]' <"$stamp_file" 2>/dev/null) || deployed_sha=""
 					if [[ -n "$deployed_sha" && "$deployed_sha" != "$local_hash" ]]; then
+						if _update_repo_verify_files_changed "$deployed_sha" "$local_hash"; then reconcile_repo_verify=true; fi
 						# Per Gemini code-review on PR #20342: use git's path filter +
 						# `grep -q .` to detect drift across the full set of deploy-affecting
 						# paths (not just .agents/ subdirs — also setup.sh, .agents/scripts/setup/modules/,
@@ -307,6 +309,7 @@ cmd_update() {
 			new_version=$(get_version)
 			new_hash=$(git rev-parse HEAD)
 			if [[ "$old_hash" != "$new_hash" ]]; then
+				if _update_repo_verify_files_changed "$old_hash" "$new_hash"; then reconcile_repo_verify=true; fi
 				local total_commits
 				total_commits=$(git rev-list --count "$old_hash..$new_hash" 2>/dev/null || echo "0")
 				if [[ "$total_commits" -gt 0 ]]; then
@@ -341,6 +344,9 @@ cmd_update() {
 	fi
 
 	_update_sync_projects "$skip_project_sync" "$(get_version)"
+	if [[ "$skip_project_sync" != "$_AIDEVOPS_UPDATE_TRUE" && "$reconcile_repo_verify" == "$_AIDEVOPS_UPDATE_TRUE" ]]; then
+		_update_reconcile_repo_verify
+	fi
 	_update_check_homebrew
 	_update_check_planning
 	_update_check_tools
@@ -859,6 +865,7 @@ _help_commands() {
 	echo "  repo-sync <cmd>    Daily git pull for repos in parent dirs (enable/disable/status/dirs)"
 	echo "  update-tools       Check for outdated tools (--update to auto-update)"
 	echo "  repos [cmd]        Manage registered projects (list/add/remove/clean)"
+	echo "  lint [cmd]         Audit/configure native repo lint, format, typecheck, and hooks"
 	echo "  design <cmd>       DESIGN.md detection, scaffolding, and brand guideline exports"
 	echo "  cleanup <cmd>      Cleanup helpers (remote branch audit/delete)"
 	echo "  model-accounts-pool OAuth account pool (list/check/diagnose/add/rotate/reset-cooldowns)"
@@ -1543,6 +1550,7 @@ main() {
 	auto-update | autoupdate) _dispatch_helper "auto-update-helper.sh" "auto-update-helper.sh" "$@" ;;
 	repo-sync | reposync) _dispatch_helper "repo-sync-helper.sh" "repo-sync-helper.sh" "$@" ;;
 	update-tools | tools) cmd_update_tools "$@" ;;
+	lint) _dispatch_helper "lint-helper.sh" "lint-helper.sh" "$@" ;;
 	upgrade-planning | up) cmd_upgrade_planning "$@" ;;
 	repos | projects) cmd_repos "$@" ;;
 	design) _dispatch_helper "design-guidelines-helper.sh" "design-guidelines-helper.sh" "$@" ;;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aidevops",
-  "version": "3.32.27",
+  "version": "3.32.29",
   "description": "AI DevOps Framework - AI-assisted development workflows, code quality, and deployment automation",
   "type": "module",
   "workspaces": [

package/setup.sh

@@ -12,7 +12,7 @@ shopt -s inherit_errexit 2>/dev/null || true
 # AI Assistant Server Access Framework Setup Script
 # Helps developers set up the framework for their infrastructure
 #
-# Version: 3.32.27
+# Version: 3.32.29
 #
 # Quick Install:
 #   npm install -g aidevops && aidevops update          (recommended)
@@ -108,6 +108,8 @@ if [[ -d "$SETUP_MODULES_DIR" ]]; then
 	# shellcheck disable=SC1091
 	source "$SETUP_MODULES_DIR/_complexity_guard.sh"
 	# shellcheck disable=SC1091
+	source "$SETUP_MODULES_DIR/_repo_verify_guard.sh"
+	# shellcheck disable=SC1091
 	source "$SETUP_MODULES_DIR/_task_id_guard.sh"
 	# shellcheck disable=SC1091
 	source "$SETUP_MODULES_DIR/_canonical_guard.sh"
@@ -1194,6 +1196,7 @@ _setup_ai_session_reset_plan() {
 	_SETUP_AI_SESSION_NEEDS_AGENTS=0
 	_SETUP_AI_SESSION_NEEDS_CLI=0
 	_SETUP_AI_SESSION_NEEDS_HOOKS=0
+	_SETUP_AI_SESSION_NEEDS_REPO_VERIFY=0
 	_SETUP_AI_SESSION_NEEDS_PULSE=0
 	_SETUP_AI_SESSION_NEEDS_GUI=0
 	_SETUP_AI_SESSION_REQUIRES_FULL=0
@@ -1246,6 +1249,12 @@ _setup_ai_session_plan_file() {
 		;;
 	.agents/hooks/*)
 		_SETUP_AI_SESSION_NEEDS_HOOKS=1
+		[[ "$filepath" == ".agents/hooks/repo-verify-pre-push.sh" ]] && _SETUP_AI_SESSION_NEEDS_REPO_VERIFY=1
+		;;
+	.agents/scripts/repo-verify-config-lib.sh | .agents/scripts/lint-helper.sh | \
+		.agents/scripts/install-pre-push-guards.sh | .agents/configs/repo-verify-defaults.conf | \
+		.agents/scripts/aidevops-cli/aidevops-init-lib.sh | .agents/scripts/aidevops-cli/aidevops-update-lib.sh)
+		_SETUP_AI_SESSION_NEEDS_REPO_VERIFY=1
 		;;
 	.agents/scripts/setup/modules/schedulers*.sh | .agents/scripts/setup/_scheduler_runtime.sh)
 		_SETUP_AI_SESSION_NEEDS_PULSE=1
@@ -1359,6 +1368,9 @@ _setup_run_ai_session_incremental() {
 	if [[ "$_SETUP_AI_SESSION_NEEDS_HOOKS" -eq 1 ]]; then
 		_time_step "$SETUP_STAGE_HOOKS" setup_safety_hooks || return $?
 	fi
+	if [[ "$_SETUP_AI_SESSION_NEEDS_REPO_VERIFY" -eq 1 ]]; then
+		_time_step "setup_repo_verify_guard" setup_repo_verify_guard || return $?
+	fi
 	if [[ "$_SETUP_AI_SESSION_NEEDS_PULSE" -eq 1 ]]; then
 		_time_step "$SETUP_STAGE_PULSE" setup_supervisor_pulse "$os" || return $?
 	fi
@@ -1515,6 +1527,9 @@ _setup_run_non_interactive() {
 	# initialized repo so pushes that introduce new function-complexity,
 	# nesting-depth, or file-size violations are caught before CI (t2198).
 	_time_step "setup_complexity_guard" setup_complexity_guard
+	# Migrate exact repository-native lint policy and install/refresh repo-verify
+	# for eligible registered repositories. Explicit opt-outs are preserved.
+	_time_step "setup_repo_verify_guard" setup_repo_verify_guard
 	# Install/refresh the canonical-on-main post-checkout hook in every
 	# initialized repo so branch switches away from main in the canonical
 	# directory are warned against (t1995). Complements pre-edit-check.sh's