aidevops 3.8.6 → 3.8.8

package/VERSION

@@ -1 +1 @@
-3.8.6
+3.8.8

package/aidevops.sh

@@ -5,7 +5,7 @@
 # AI DevOps Framework CLI
 # Usage: aidevops <command> [options]
 #
-# Version: 3.8.6
+# Version: 3.8.8
 
 set -euo pipefail
 
@@ -19,9 +19,17 @@ BOLD='\033[1m'
 NC='\033[0m' # No Color
 
 # Paths
-INSTALL_DIR="$HOME/Git/aidevops"
-AGENTS_DIR="$HOME/.aidevops/agents"
-CONFIG_DIR="$HOME/.config/aidevops"
+# When running under sudo on Linux, HOME is reset to /root/ by env_reset.
+# Resolve the real user's home via SUDO_USER so agent/config paths are correct.
+# Security: no escalation — root already has full filesystem access.
+if [[ -n "${SUDO_USER:-}" && "$(id -u)" -eq 0 ]]; then
+	_AIDEVOPS_REAL_HOME=$(getent passwd "$SUDO_USER" | cut -d: -f6)
+else
+	_AIDEVOPS_REAL_HOME="$HOME"
+fi
+INSTALL_DIR="$_AIDEVOPS_REAL_HOME/Git/aidevops"
+AGENTS_DIR="$_AIDEVOPS_REAL_HOME/.aidevops/agents"
+CONFIG_DIR="$_AIDEVOPS_REAL_HOME/.config/aidevops"
 REPOS_FILE="$CONFIG_DIR/repos.json"
 # shellcheck disable=SC2034  # Used in fresh install fallback
 REPO_URL="https://github.com/marcusquinn/aidevops.git"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aidevops",
-  "version": "3.8.6",
+  "version": "3.8.8",
   "description": "AI DevOps Framework - AI-assisted development workflows, code quality, and deployment automation",
   "type": "module",
   "bin": {

package/setup.sh

@@ -12,7 +12,7 @@ shopt -s inherit_errexit 2>/dev/null || true
 # AI Assistant Server Access Framework Setup Script
 # Helps developers set up the framework for their infrastructure
 #
-# Version: 3.8.6
+# Version: 3.8.8
 #
 # Quick Install:
 #   npm install -g aidevops && aidevops update          (recommended)
@@ -90,6 +90,8 @@ if [[ -d "$SETUP_MODULES_DIR" ]]; then
 	# shellcheck disable=SC1091
 	source "$SETUP_MODULES_DIR/_privacy_guard.sh"
 	# shellcheck disable=SC1091
+	source "$SETUP_MODULES_DIR/_task_id_guard.sh"
+	# shellcheck disable=SC1091
 	source "$SETUP_MODULES_DIR/_canonical_guard.sh"
 fi
 
@@ -926,6 +928,11 @@ _setup_run_non_interactive() {
 	# directory are warned against (t1995). Complements pre-edit-check.sh's
 	# t1990 edit-time check by catching the branch switch itself.
 	setup_canonical_guard
+	# Install/refresh the task-id collision guard commit-msg hook in every
+	# initialized repo so invented t-IDs in commit subjects are rejected
+	# at commit time (t2047). Belt-and-braces with the CI check in
+	# .github/workflows/task-id-collision-check.yml.
+	setup_task_id_guard
 	return 0
 }