aidevops 3.39.39 → 3.39.41

package/README.md

@@ -25,7 +25,7 @@ token efficiency, and quality control built in.**
 [![Maintainability](https://qlty.sh/gh/marcusquinn/projects/aidevops/maintainability.svg)](https://qlty.sh/gh/marcusquinn/projects/aidevops)
 [![Codacy Badge](https://app.codacy.com/project/badge/Grade/2b1adbd66c454dae92234341e801b984)](https://app.codacy.com/gh/marcusquinn/aidevops/dashboard?utm_source=gh&utm_medium=referral&utm_content=&utm_campaign=Badge_grade)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Version](https://img.shields.io/badge/Version-3.39.39-blue.svg)](https://github.com/marcusquinn/aidevops/releases)
+[![Version](https://img.shields.io/badge/Version-3.39.41-blue.svg)](https://github.com/marcusquinn/aidevops/releases)
 [![npm version](https://img.shields.io/npm/v/aidevops)](https://www.npmjs.com/package/aidevops)
 [![Homebrew](https://img.shields.io/badge/homebrew-marcusquinn%2Ftap-orange)](https://github.com/marcusquinn/homebrew-tap)
 
@@ -434,9 +434,18 @@ aidevops secret set NAME
 aidevops security
 aidevops security status
 aidevops security scan
+aidevops secret audit-credentials  # Names-only JSON Lines, including tenant stores
+aidevops security fix             # Separate interactive terminal only
 aidevops source-access status
 ```
 
+Credential hygiene scans report parser errors, gopass drift, prune candidates,
+unsafe permissions, leftover backups and literal MCP environment secrets without
+printing values. Interactive fixes delegate to secret import/prune commands,
+confirm pruning and trash moves, and leave drift and malformed lines unchanged.
+Import and prune target only the active tenant. Scans do not probe provider APIs;
+an opt-in `--probe` may be added later.
+
 ### Vault
 
 Vault adds protected-data classes, local encrypted stores, provider-routing

package/VERSION

@@ -1 +1 @@
-3.39.39
+3.39.41

package/aidevops.sh

@@ -5,7 +5,7 @@
 # AI DevOps Framework CLI
 # Usage: aidevops <command> [options]
 #
-# Version: 3.39.39
+# Version: 3.39.41
 
 set -euo pipefail
 
@@ -1278,6 +1278,7 @@ _help_security_sections() {
 	echo "  aidevops security posture    # Interactive security posture setup (gopass, gh, SSH)"
 	echo "  aidevops security status     # Combined posture + hygiene summary"
 	echo "  aidevops security scan       # Secret hygiene & supply chain scan"
+	echo "  aidevops security fix        # Interactive credential hygiene remediation"
 	echo "  aidevops security scan-pth   # Python .pth file audit (supply chain IoC)"
 	echo "  aidevops security scan-secrets # Plaintext credential locations"
 	echo "  aidevops security scan-deps  # Unpinned dependency check"
@@ -1777,6 +1778,9 @@ _cmd_security() {
 	scan | scan-secrets | scan-pth | scan-deps)
 		_dispatch_helper "secret-hygiene-helper.sh" "secret-hygiene-helper.sh" "$@"
 		;;
+	fix)
+		_dispatch_helper "security-fix-helper.sh" "security-fix-helper.sh" || return $?
+		;;
 	dismiss)
 		if [[ "${2:-}" == "tanstack-minishaihulud-2026-05" ]]; then
 			_dispatch_helper "supply-chain-advisory-helper.sh" "supply-chain-advisory-helper.sh" dismiss

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aidevops",
-  "version": "3.39.39",
+  "version": "3.39.41",
   "description": "AI DevOps Framework - AI-assisted development workflows, code quality, and deployment automation",
   "type": "module",
   "packageManager": "bun@1.3.11",

package/setup.sh

@@ -17,7 +17,7 @@ fi
 # AI Assistant Server Access Framework Setup Script
 # Helps developers set up the framework for their infrastructure
 #
-# Version: 3.39.39
+# Version: 3.39.41
 #
 # Quick Install:
 #   npm install -g aidevops && aidevops update          (recommended)