aidevops 3.39.107 → 3.39.109

package/README.md

@@ -25,7 +25,7 @@ token efficiency, and quality control built in.**
 [![Maintainability](https://qlty.sh/gh/marcusquinn/projects/aidevops/maintainability.svg)](https://qlty.sh/gh/marcusquinn/projects/aidevops)
 [![Codacy Badge](https://app.codacy.com/project/badge/Grade/2b1adbd66c454dae92234341e801b984)](https://app.codacy.com/gh/marcusquinn/aidevops/dashboard?utm_source=gh&utm_medium=referral&utm_content=&utm_campaign=Badge_grade)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/Version-3.39.107-blue.svg)](https://github.com/marcusquinn/aidevops/releases)
+[![Version](https://img.shields.io/badge/Version-3.39.109-blue.svg)](https://github.com/marcusquinn/aidevops/releases)
 [![npm version](https://img.shields.io/npm/v/aidevops)](https://www.npmjs.com/package/aidevops)
 [![Homebrew](https://img.shields.io/badge/homebrew-marcusquinn%2Ftap-orange)](https://github.com/marcusquinn/homebrew-tap)
 

package/VERSION

@@ -1 +1 @@
-3.39.107
+3.39.109

package/aidevops.sh

@@ -5,7 +5,7 @@
 # AI DevOps Framework CLI
 # Usage: aidevops <command> [options]
 #
-# Version: 3.39.107
+# Version: 3.39.109
 
 set -euo pipefail
 
@@ -279,12 +279,39 @@ _run_update_setup_transaction() {
 	local output_mode="$1"
 	local expected_sha="$2"
 	local setup_exit=0
-	_run_update_setup "$output_mode" || setup_exit=$?
+	local rollback_receipt=""
+	rollback_receipt=$(mktemp) || return 1
+	AIDEVOPS_UPDATE_ROLLBACK_RECEIPT="$rollback_receipt" _run_update_setup "$output_mode" || setup_exit=$?
 	if [[ "$setup_exit" -ne 0 ]]; then
+		rm -f "$rollback_receipt"
 		print_error "Agent deployment failed: setup exited with code $setup_exit"
 		return 1
 	fi
-	_update_verify_deployment_state "$expected_sha" || return 1
+	if ! _update_verify_deployment_state "$expected_sha"; then
+		# Load deployment helpers only in the recovery subprocess, keeping the
+		# CLI's already-sourced runtime and global state unchanged.
+		if [[ -s "$rollback_receipt" ]]; then
+			(
+				if ! declare -F _runtime_bundle_rollback >/dev/null; then
+					# shellcheck source=.agents/scripts/setup/modules/agent-deploy.sh
+					source "$INSTALL_DIR/.agents/scripts/setup/modules/agent-deploy.sh" || exit 1
+				fi
+				if ! declare -F aidevops_runtime_transition_lock_acquire >/dev/null; then
+					# shellcheck source=.agents/scripts/setup/modules/agent-runtime.sh
+					source "$INSTALL_DIR/.agents/scripts/setup/modules/agent-runtime.sh" || exit 1
+				fi
+				{
+					IFS= read -r _AIDEVOPS_ACTIVE_BUNDLE_ROOT &&
+						IFS= read -r _AIDEVOPS_PREVIOUS_BUNDLE_ROOT &&
+						IFS= read -r _AIDEVOPS_PREVIOUS_DEPLOYED_SHA
+				} <"$rollback_receipt" || exit 1
+				_runtime_bundle_rollback "$_AIDEVOPS_REAL_HOME/.aidevops/agents"
+			) || print_error "Failed to roll back the runtime bundle after convergence failure"
+		fi
+		rm -f "$rollback_receipt"
+		return 1
+	fi
+	rm -f "$rollback_receipt"
 	_update_adopt_deployed_version
 	return 0
 }
@@ -460,7 +487,7 @@ _update_already_current() {
 	deployed_sha=$(tr -d '[:space:]' <"$stamp_file" 2>/dev/null) || deployed_sha=""
 	[[ -n "$deployed_sha" && "$deployed_sha" != "$local_hash" ]] || return 0
 	if _update_repo_verify_files_changed "$deployed_sha" "$local_hash"; then _AIDEVOPS_UPDATE_RECONCILE_REPO_VERIFY=true; fi
-	if git -C "$INSTALL_DIR" diff --name-only "$deployed_sha" "$local_hash" -- .agents/scripts/ .agents/agents/ .agents/workflows/ .agents/prompts/ .agents/hooks/ setup.sh .agents/scripts/setup/modules/ aidevops.sh 2>/dev/null | grep -q .; then
+	if git -C "$INSTALL_DIR" diff --name-only "$deployed_sha" "$local_hash" -- .agents/scripts/ .agents/agents/ .agents/workflows/ .agents/prompts/ .agents/hooks/ .agents/worker-lifecycle/ setup.sh .agents/scripts/setup/modules/ aidevops.sh 2>/dev/null | grep . >/dev/null; then
 		print_warning "Deployed scripts drifted (${deployed_sha:0:7}→${local_hash:0:7})"
 		print_info "Re-running incremental setup to deploy latest scripts..."
 		_run_update_setup_transaction "$update_output_mode" "$local_hash" || return 1
@@ -1256,7 +1283,7 @@ _help_commands() {
 	echo "  github auth <cmd> Repository auth routes, App profiles, checks and local usage"
 	echo "  github-app-auth    GitHub App auth setup/status and API route decisions"
 	echo "  source-access <cmd> Session-bound, sudo-signed source-read approvals"
-	echo "  secret <cmd>       Manage secrets (set/list/run/init/import/status)"
+	echo "  secret <cmd>       Manage secrets (set/rm/list/run/init/import/status)"
 	echo "  vault <cmd>        Local encrypted Vault broker (init/unlock/lock/status/read/update)"
 	echo "  config <cmd>       Feature toggles (list/get/set/reset/path/help)"
 	echo "  knowledge <cmd>    Knowledge plane management (init/status/provision)"
@@ -1341,6 +1368,7 @@ _help_detailed_sections_content() {
 	_help_security_sections
 	echo "Secrets:"
 	echo "  aidevops secret set NAME     # Store a secret (hidden input)"
+	echo "  aidevops secret rm NAME      # Remove from gopass + plaintext (confirm or --yes)"
 	echo "  aidevops secret list         # List secret names (never values)"
 	echo "  aidevops secret run CMD      # Run with secrets injected + redacted"
 	echo "  aidevops secret init         # Initialize gopass encrypted store"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aidevops",
-  "version": "3.39.107",
+  "version": "3.39.109",
   "description": "AI DevOps Framework - AI-assisted development workflows, code quality, and deployment automation",
   "type": "module",
   "packageManager": "bun@1.3.11",

package/setup.sh

@@ -17,7 +17,7 @@ fi
 # AI Assistant Server Access Framework Setup Script
 # Helps developers set up the framework for their infrastructure
 #
-# Version: 3.39.107
+# Version: 3.39.109
 #
 # Quick Install:
 #   npm install -g aidevops && aidevops update          (recommended)
@@ -1401,8 +1401,12 @@ _setup_ai_session_verify_deploy() {
 		"$INSTALL_DIR" \
 		"$expected_sha" \
 		"$HOME/.aidevops/agents" \
-		"$HOME/.aidevops/.deployed-sha"
-	return $?
+		"$HOME/.aidevops/.deployed-sha" || {
+		_runtime_bundle_rollback "$HOME/.aidevops/agents" ||
+			print_error "Failed to roll back the runtime bundle after convergence failure"
+		return 1
+	}
+	return 0
 }
 
 # OpenCode DB archive (daily) and maintenance (weekly) schedulers keep the