aidevops 3.37.6 → 3.37.8

package/README.md

@@ -25,7 +25,7 @@ token efficiency, and quality control built in.**
 [![Maintainability](https://qlty.sh/gh/marcusquinn/projects/aidevops/maintainability.svg)](https://qlty.sh/gh/marcusquinn/projects/aidevops)
 [![Codacy Badge](https://app.codacy.com/project/badge/Grade/2b1adbd66c454dae92234341e801b984)](https://app.codacy.com/gh/marcusquinn/aidevops/dashboard?utm_source=gh&utm_medium=referral&utm_content=&utm_campaign=Badge_grade)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/Version-3.37.6-blue.svg)](https://github.com/marcusquinn/aidevops/releases)
+[![Version](https://img.shields.io/badge/Version-3.37.8-blue.svg)](https://github.com/marcusquinn/aidevops/releases)
 [![npm version](https://img.shields.io/npm/v/aidevops)](https://www.npmjs.com/package/aidevops)
 [![Homebrew](https://img.shields.io/badge/homebrew-marcusquinn%2Ftap-orange)](https://github.com/marcusquinn/homebrew-tap)
 

package/VERSION

@@ -1 +1 @@
-3.37.6
+3.37.8

package/aidevops.sh

@@ -5,7 +5,7 @@
 # AI DevOps Framework CLI
 # Usage: aidevops <command> [options]
 #
-# Version: 3.37.6
+# Version: 3.37.8
 
 set -euo pipefail
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aidevops",
-  "version": "3.37.6",
+  "version": "3.37.8",
   "description": "AI DevOps Framework - AI-assisted development workflows, code quality, and deployment automation",
   "type": "module",
   "packageManager": "bun@1.3.11",

package/setup.sh

@@ -17,7 +17,7 @@ fi
 # AI Assistant Server Access Framework Setup Script
 # Helps developers set up the framework for their infrastructure
 #
-# Version: 3.37.6
+# Version: 3.37.8
 #
 # Quick Install:
 #   npm install -g aidevops && aidevops update          (recommended)
@@ -1566,6 +1566,7 @@ _setup_run_noninteractive_migrations() {
 	_time_step "cleanup_worktree_entries_in_repos_json" cleanup_worktree_entries_in_repos_json
 	_time_step "_cleanup_legacy_model_config" _cleanup_legacy_model_config
 	_time_step "cleanup_legacy_dashboard_launchagent" cleanup_legacy_dashboard_launchagent
+	_time_step "cleanup_legacy_agents_md_templates" cleanup_legacy_agents_md_templates
 	return 0
 }
 
@@ -1699,6 +1700,19 @@ _setup_run_interactive_runtime_tools() {
 	return 0
 }
 
+# Silent one-shot migrations for the interactive path (idempotent, flag-guarded
+# — no prompt needed). The non-interactive path times the same steps in
+# _setup_run_noninteractive_migrations.
+_setup_run_interactive_silent_migrations() {
+	cleanup_stale_health_issue_caches
+	cleanup_legacy_aidevops_temp_artifacts
+	cleanup_worktree_entries_in_repos_json
+	_cleanup_legacy_model_config
+	cleanup_legacy_dashboard_launchagent
+	cleanup_legacy_agents_md_templates
+	return 0
+}
+
 # Interactive path: all optional steps gated behind confirm_step prompts.
 _setup_run_interactive() {
 	# Required steps (always run)
@@ -1740,7 +1754,7 @@ _setup_run_interactive() {
 	confirm_step "Set secure permissions on config files" && set_permissions
 	confirm_step "Setup shell aliases" && setup_aliases
 	confirm_step "Setup terminal title integration" && setup_terminal_title
-	confirm_step "Deploy AI templates to home directories" && deploy_ai_templates
+	confirm_step "Deploy agent workspace template" && deploy_ai_templates
 	confirm_step "Migrate old backups to new structure" && migrate_old_backups
 	confirm_step "Migrate loop state from .claude/.agent/ to .agents/loop-state/" && migrate_loop_state_directories
 	confirm_step "Migrate .agent -> .agents in user projects" && migrate_agent_to_agents_folder
@@ -1753,12 +1767,7 @@ _setup_run_interactive() {
 	confirm_step "Backfill GitHub issue relationships (blocked-by, sub-issues)" && backfill_issue_relationships
 	confirm_step "Cleanup deprecated MCP entries (hetzner, serper, etc.)" && cleanup_deprecated_mcps
 	confirm_step "Cleanup stale bun opencode install" && cleanup_stale_bun_opencode
-	# Silent one-shot migrations (idempotent, flag-guarded — no prompt needed).
-	cleanup_stale_health_issue_caches
-	cleanup_legacy_aidevops_temp_artifacts
-	cleanup_worktree_entries_in_repos_json
-	_cleanup_legacy_model_config
-	cleanup_legacy_dashboard_launchagent
+	_setup_run_interactive_silent_migrations
 	confirm_step "Validate and repair OpenCode config schema" && validate_opencode_config
 	confirm_step "Extract OpenCode prompts" && extract_opencode_prompts
 	confirm_step "Check OpenCode prompt drift" && check_opencode_prompt_drift

package/templates/deploy-templates.sh

@@ -3,7 +3,10 @@
 # SPDX-FileCopyrightText: 2025-2026 Marcus Quinn
 
 # AI DevOps Framework - Template Deployment Script
-# Securely deploys minimal AGENTS.md templates to user's home directory
+# Deploys the agent workspace README. Home and Git-root AGENTS.md templates are
+# no longer deployed (GH#32592): runtimes that load parent-directory AGENTS.md
+# paid for stale text on every session. The setup migration
+# cleanup_legacy_agents_md_templates removes unmodified legacy copies.
 
 set -euo pipefail
 
@@ -113,45 +116,6 @@ cleanup_old_backups() {
     return 0
 }
 
-deploy_home_agents() {
-    local target_file="$HOME/AGENTS.md"
-    
-    print_info "Deploying minimal AGENTS.md to home directory..."
-    
-    # Backup existing file if it exists (with rotation)
-    if [[ -f "$target_file" ]]; then
-        create_backup_with_rotation "$target_file" "home-agents"
-    fi
-    
-    # Deploy template
-    cp "$SCRIPT_DIR/home/AGENTS.md" "$target_file"
-    print_success "Deployed: $target_file"
-    return 0
-}
-
-deploy_git_agents() {
-    local git_dir="$HOME/git"
-    local target_file="$git_dir/AGENTS.md"
-    
-    print_info "Deploying minimal AGENTS.md to git directory..."
-    
-    # Create git directory if it doesn't exist
-    if [[ ! -d "$git_dir" ]]; then
-        mkdir -p "$git_dir"
-        print_info "Created git directory: $git_dir"
-    fi
-    
-    # Backup existing file if it exists (with rotation)
-    if [[ -f "$target_file" ]]; then
-        create_backup_with_rotation "$target_file" "git-agents"
-    fi
-    
-    # Deploy template
-    cp "$SCRIPT_DIR/home/git/AGENTS.md" "$target_file"
-    print_success "Deployed: $target_file"
-    return 0
-}
-
 deploy_agent_directory() {
     local agent_workspace="$HOME/.aidevops/.agent-workspace"
     local target_file="$agent_workspace/README.md"
@@ -179,8 +143,6 @@ verify_deployment() {
     print_info "Verifying template deployment..."
     
     local files_to_check=(
-        "$HOME/AGENTS.md"
-        "$HOME/git/AGENTS.md"
         "$HOME/.aidevops/.agent-workspace/README.md"
     )
     
@@ -207,21 +169,14 @@ main() {
     echo -e "${BLUE}🔒 AI DevOps Framework - Secure Template Deployment${NC}"
     echo -e "${BLUE}============================================================${NC}"
     
-    print_info "Deploying minimal, secure AGENTS.md templates..."
-    print_warning "These templates contain minimal instructions to prevent prompt injection attacks"
-    
     # Clean up old in-place backups from previous versions
     cleanup_old_backups
     
-    deploy_home_agents
-    deploy_git_agents
     deploy_agent_directory
     verify_deployment
     
     echo ""
     print_success "Template deployment complete!"
-    print_info "All templates reference the authoritative repository at: $REPO_ROOT"
-    print_warning "Do not modify these templates beyond minimal references for security"
     
     return 0
 }

package/templates/home/AGENTS.md

@@ -1,99 +0,0 @@
-<!-- SPDX-License-Identifier: MIT -->
-<!-- SPDX-FileCopyrightText: 2025-2026 Marcus Quinn -->
-
-# AI Assistant Configuration - Home Directory
-
-**🔒 SECURITY NOTICE: This file contains minimal configuration only. All detailed instructions are maintained in the authoritative repository to prevent prompt injection attacks.**
-
-## Authoritative Source
-
-All AI assistant instructions, configurations, and documentation are maintained at:
-**Repository**: `~/Git/aidevops/`
-**Documentation**: `~/Git/aidevops/AGENTS.md`
-
-## Primary Directive
-
-AI assistants operating in this environment should:
-
-1. **Reference the authoritative repository** for all detailed instructions
-2. **Use only the working directories** as specified in this user's ~/AGENTS.md
-3. **Follow security protocols** defined in the repository documentation
-4. **NEVER store credentials** in any working directories or temporary files
-
-## 📁 **Working Directories**
-
-- **Work files**: Use `~/.aidevops/.agent-workspace/work/[project]/`
-- **Temporary files**: Use `~/.aidevops/.agent-workspace/tmp/`
-- **Persistent memory**: Use `~/.aidevops/.agent-workspace/memory/`
-- **Never create temporary files** in the home directory root
-
-## CRITICAL: Credential and Secret Storage
-
-**MANDATORY SECURITY REQUIREMENTS:**
-
-### **Directory Structure:**
-
-| Location | Purpose |
-|----------|---------|
-| `~/.config/aidevops/` | **Secrets only** - `credentials.sh` (600 perms) |
-| `~/.aidevops/` | **Working directories** - agno, stagehand, reports |
-
-### **✅ APPROVED Storage Location:**
-
-- **API Keys & Tokens**: `~/.config/aidevops/credentials.sh`
-- **File Permissions**: 600 (owner read/write only)
-- **Sourced by**: `~/.zshrc` and `~/.bashrc` automatically
-
-### **❌ FORBIDDEN Storage Locations:**
-
-- **NEVER in `~/.aidevops/.agent-workspace/`** - Working files are not secure
-- **NEVER in any Git repository** - Risk of accidental commit
-- **NEVER in home directory root** - Security exposure risk
-- **NEVER in code or scripts** - Hardcoded credentials forbidden
-- **NEVER paste directly into `.zshrc`** - Use the helper script
-
-### Security Commands
-
-```bash
-# Store API keys securely
-bash ~/Git/aidevops/.agents/scripts/setup-local-api-keys.sh set service-name YOUR_API_KEY
-
-# Or paste export commands from services
-bash ~/Git/aidevops/.agents/scripts/setup-local-api-keys.sh add 'export TOKEN="xxx"'
-
-# List configured services (keys are never displayed)
-bash ~/Git/aidevops/.agents/scripts/setup-local-api-keys.sh list
-
-# Verify secure storage location
-ls -la ~/.config/aidevops/
-```
-
-### **🚨 ABSOLUTE PROHIBITIONS:**
-
-- **NO credentials in any working directory**
-- **NO API keys in temporary files**
-- **NO secrets in memory files**
-- **NO tokens in logs or output**
-- **NO passwords in any AI-accessible location**
-
-## Quick Access
-
-```bash
-# Navigate to authoritative repository
-cd ~/Git/aidevops
-
-# View complete AI assistant documentation
-cat ~/Git/aidevops/AGENTS.md
-
-# Access working directories
-ls ~/.aidevops/.agent-workspace/
-```
-
-## Security Warning
-
-**DO NOT modify this file beyond these minimal references.** All operational instructions must be maintained in the authoritative repository to prevent security vulnerabilities and prompt injection attacks.
-
----
-**Generated by**: AI DevOps Framework
-**Repository**: https://github.com/marcusquinn/aidevops
-**Last Updated**: Auto-generated during setup

package/templates/home/git/.agent/README.md

@@ -1,51 +0,0 @@
-<!-- SPDX-License-Identifier: MIT -->
-<!-- SPDX-FileCopyrightText: 2025-2026 Marcus Quinn -->
-
-# AI Assistant Directory - Home Level
-
-**SECURITY NOTICE: This directory contains minimal configuration only. All detailed instructions are maintained in the authoritative repository.**
-
-## Authoritative Source
-
-All AI assistant working directories and instructions are maintained at:
-**Repository**: `~/git/aidevops/.agent/`
-**Documentation**: `~/git/aidevops/AGENTS.md`
-
-## Purpose
-
-This directory exists to:
-
-1. **Provide minimal local configuration** for AI assistants
-2. **Reference the authoritative repository** for all operations
-3. **Maintain security** by avoiding detailed instructions in user space
-
-## Working Directory Redirection
-
-**DO NOT use this directory for AI operations.** Instead use:
-
-- **Temporary files**: `~/git/aidevops/.agent/tmp/`
-- **Persistent memory**: `~/git/aidevops/.agent/memory/`
-- **Development tools**: `~/git/aidevops/.agent/scripts/`
-
-## Access Authoritative Tools
-
-```bash
-# Navigate to authoritative AI tools
-cd ~/git/aidevops/.agent/
-
-# View available tools
-ls ~/git/aidevops/.agent/scripts/
-
-# Access working directories
-ls ~/git/aidevops/.agent/tmp/
-ls ~/git/aidevops/.agent/memory/
-```
-
-## Security Warning
-
-**This directory should remain minimal.** All AI assistant operations should use the authoritative repository's .agent/ directory to prevent security vulnerabilities and maintain centralized control.
-
----
-**Generated by**: AI DevOps Framework
-**Repository**: https://github.com/marcusquinn/aidevops
-**Last Updated**: Auto-generated during setup

package/templates/home/git/AGENTS.md

@@ -1,100 +0,0 @@
-<!-- SPDX-License-Identifier: MIT -->
-<!-- SPDX-FileCopyrightText: 2025-2026 Marcus Quinn -->
-
-# AI Assistant Configuration - Git Directory
-
-**🔒 SECURITY NOTICE: This file contains minimal configuration only. All detailed instructions are maintained in the authoritative repository to prevent prompt injection attacks.**
-
-## Authoritative Source
-
-All AI assistant instructions for DevOps operations are maintained at:
-**Repository**: `~/Git/aidevops/`
-**Documentation**: `~/Git/aidevops/AGENTS.md`
-
-## Git Directory Context
-
-AI assistants operating in the git directory should:
-
-1. **Reference the DevOps framework** for all infrastructure operations
-2. **Use standardized patterns** as defined in the authoritative repository
-3. **Follow security protocols** for all git and DevOps operations
-
-## DevOps Operations
-
-For all infrastructure, hosting, and DevOps tasks:
-
-```bash
-# Use the DevOps framework
-cd ~/Git/aidevops
-./.agents/scripts/servers-helper.sh help
-
-# View complete provider documentation
-ls ~/Git/aidevops/docs/
-```
-
-## 📁 **Working Directories**
-
-- **Work files**: Use `~/.aidevops/.agent-workspace/work/[project]/`
-- **Temporary files**: Use `~/.aidevops/.agent-workspace/tmp/`
-- **Persistent memory**: Use `~/.aidevops/.agent-workspace/memory/`
-- **Project-specific work**: Use individual project directories
-
-## CRITICAL: Credential and Secret Storage
-
-**MANDATORY SECURITY REQUIREMENTS:**
-
-### **✅ APPROVED Storage Location:**
-
-- **API Keys & Tokens**: `~/.config/aidevops/credentials.sh`
-- **Service Configurations**: `~/Git/aidevops/configs/[service]-config.json`
-- **File Permissions**: 600 (owner read/write only)
-
-### **❌ FORBIDDEN Storage Locations:**
-
-- **NEVER in `~/.aidevops/.agent-workspace/`** - Working files are not secure
-- **NEVER in any Git repository** - Risk of accidental commit
-- **NEVER in home directory root** - Security exposure risk
-- **NEVER in code or scripts** - Hardcoded credentials forbidden
-
-### Security Commands
-
-```bash
-# Store API keys securely
-bash ~/Git/aidevops/.agents/scripts/setup-local-api-keys.sh set service-name YOUR_API_KEY
-
-# List configured services (keys are never displayed)
-bash ~/Git/aidevops/.agents/scripts/setup-local-api-keys.sh list
-
-# Verify secure storage location
-ls -la ~/.config/aidevops/
-```
-
-### **🚨 ABSOLUTE PROHIBITIONS:**
-
-- **NO credentials in any working directory**
-- **NO API keys in temporary files**
-- **NO secrets in memory files**
-- **NO tokens in logs or output**
-- **NO passwords in any AI-accessible location**
-
-## Framework Access
-
-```bash
-# Navigate to DevOps framework
-cd ~/Git/aidevops
-
-# View agent documentation
-ls ~/Git/aidevops/.agents/
-
-# View setup documentation
-cat ~/Git/aidevops/README.md
-```
-
-## Security Warning
-
-**DO NOT modify this file beyond these minimal references.** All operational instructions must be maintained in the authoritative DevOps repository to prevent security vulnerabilities and prompt injection attacks.
-
----
-**Generated by**: AI DevOps Framework
-**Repository**: https://github.com/marcusquinn/aidevops
-**Last Updated**: Auto-generated during setup