devvami 1.1.1 → 1.2.0

package/oclif.manifest.json

@@ -273,6 +273,29 @@
         "upgrade.js"
       ]
     },
+    "welcome": {
+      "aliases": [],
+      "args": {},
+      "description": "Show the dvmi mission dashboard with animated intro",
+      "examples": [
+        "<%= config.bin %> welcome"
+      ],
+      "flags": {},
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "welcome",
+      "pluginAlias": "devvami",
+      "pluginName": "devvami",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "src",
+        "commands",
+        "welcome.js"
+      ]
+    },
     "whoami": {
       "aliases": [],
       "args": {},
@@ -703,14 +726,19 @@
         "search.js"
       ]
     },
-    "pr:create": {
+    "pipeline:logs": {
       "aliases": [],
-      "args": {},
-      "description": "Apri Pull Request precompilata con template, label e reviewer",
+      "args": {
+        "run-id": {
+          "description": "ID del workflow run",
+          "name": "run-id",
+          "required": true
+        }
+      },
+      "description": "Log di un workflow run specifico",
       "examples": [
-        "<%= config.bin %> pr create",
-        "<%= config.bin %> pr create --draft",
-        "<%= config.bin %> pr create --title \"My PR\" --dry-run"
+        "<%= config.bin %> pipeline logs 12345",
+        "<%= config.bin %> pipeline logs 12345 --job test"
       ],
       "flags": {
         "json": {
@@ -720,29 +748,17 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "title": {
-          "description": "Titolo PR (default: auto-generated)",
-          "name": "title",
+        "job": {
+          "description": "Filtra per job name",
+          "name": "job",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
-        },
-        "draft": {
-          "description": "Crea come draft",
-          "name": "draft",
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "dry-run": {
-          "description": "Preview senza eseguire",
-          "name": "dry-run",
-          "allowNo": false,
-          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "pr:create",
+      "id": "pipeline:logs",
       "pluginAlias": "devvami",
       "pluginName": "devvami",
       "pluginType": "core",
@@ -752,24 +768,18 @@
       "relativePath": [
         "src",
         "commands",
-        "pr",
-        "create.js"
+        "pipeline",
+        "logs.js"
       ]
     },
-    "pr:detail": {
+    "pipeline:rerun": {
       "aliases": [],
-      "args": {
-        "number": {
-          "description": "Numero della PR",
-          "name": "number",
-          "required": true
-        }
-      },
-      "description": "Dettaglio PR con commenti QA e checklist degli step",
+      "args": {},
+      "description": "Rilancia l'ultimo workflow fallito",
       "examples": [
-        "<%= config.bin %> pr detail 42",
-        "<%= config.bin %> pr detail 42 --repo devvami/my-api",
-        "<%= config.bin %> pr detail 42 --json"
+        "<%= config.bin %> pipeline rerun",
+        "<%= config.bin %> pipeline rerun --failed-only",
+        "<%= config.bin %> pipeline rerun --run-id 12345"
       ],
       "flags": {
         "json": {
@@ -779,17 +789,23 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "repo": {
-          "description": "Repository nel formato owner/repo (default: rilevato da git remote)",
-          "name": "repo",
+        "run-id": {
+          "description": "ID specifico del run",
+          "name": "run-id",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "failed-only": {
+          "description": "Rilancia solo i job falliti",
+          "name": "failed-only",
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "pr:detail",
+      "id": "pipeline:rerun",
       "pluginAlias": "devvami",
       "pluginName": "devvami",
       "pluginType": "core",
@@ -799,17 +815,18 @@
       "relativePath": [
         "src",
         "commands",
-        "pr",
-        "detail.js"
+        "pipeline",
+        "rerun.js"
       ]
     },
-    "pr:review": {
+    "pipeline:status": {
       "aliases": [],
       "args": {},
-      "description": "Lista PR assegnate a te per la code review",
+      "description": "Stato GitHub Actions per il repo corrente",
       "examples": [
-        "<%= config.bin %> pr review",
-        "<%= config.bin %> pr review --json"
+        "<%= config.bin %> pipeline status",
+        "<%= config.bin %> pipeline status --branch main",
+        "<%= config.bin %> pipeline status --limit 20 --json"
       ],
       "flags": {
         "json": {
@@ -818,11 +835,26 @@
           "name": "json",
           "allowNo": false,
           "type": "boolean"
+        },
+        "branch": {
+          "description": "Filtra per branch",
+          "name": "branch",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "limit": {
+          "description": "Numero di run da mostrare",
+          "name": "limit",
+          "default": 10,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "pr:review",
+      "id": "pipeline:status",
       "pluginAlias": "devvami",
       "pluginName": "devvami",
       "pluginType": "core",
@@ -832,18 +864,18 @@
       "relativePath": [
         "src",
         "commands",
-        "pr",
-        "review.js"
+        "pipeline",
+        "status.js"
       ]
     },
-    "pr:status": {
+    "pr:create": {
       "aliases": [],
       "args": {},
-      "description": "Stato delle tue PR aperte (come autore e come reviewer)",
+      "description": "Apri Pull Request precompilata con template, label e reviewer",
       "examples": [
-        "<%= config.bin %> pr status",
-        "<%= config.bin %> pr status --author",
-        "<%= config.bin %> pr status --json"
+        "<%= config.bin %> pr create",
+        "<%= config.bin %> pr create --draft",
+        "<%= config.bin %> pr create --title \"My PR\" --dry-run"
       ],
       "flags": {
         "json": {
@@ -853,22 +885,29 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "author": {
-          "description": "Solo PR dove sei autore",
-          "name": "author",
+        "title": {
+          "description": "Titolo PR (default: auto-generated)",
+          "name": "title",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "draft": {
+          "description": "Crea come draft",
+          "name": "draft",
           "allowNo": false,
           "type": "boolean"
         },
-        "reviewer": {
-          "description": "Solo PR dove sei reviewer",
-          "name": "reviewer",
+        "dry-run": {
+          "description": "Preview senza eseguire",
+          "name": "dry-run",
           "allowNo": false,
           "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "pr:status",
+      "id": "pr:create",
       "pluginAlias": "devvami",
       "pluginName": "devvami",
       "pluginType": "core",
@@ -879,22 +918,23 @@
         "src",
         "commands",
         "pr",
-        "status.js"
+        "create.js"
       ]
     },
-    "pipeline:logs": {
+    "pr:detail": {
       "aliases": [],
       "args": {
-        "run-id": {
-          "description": "ID del workflow run",
-          "name": "run-id",
+        "number": {
+          "description": "Numero della PR",
+          "name": "number",
           "required": true
         }
       },
-      "description": "Log di un workflow run specifico",
+      "description": "Dettaglio PR con commenti QA e checklist degli step",
       "examples": [
-        "<%= config.bin %> pipeline logs 12345",
-        "<%= config.bin %> pipeline logs 12345 --job test"
+        "<%= config.bin %> pr detail 42",
+        "<%= config.bin %> pr detail 42 --repo devvami/my-api",
+        "<%= config.bin %> pr detail 42 --json"
       ],
       "flags": {
         "json": {
@@ -904,9 +944,9 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "job": {
-          "description": "Filtra per job name",
-          "name": "job",
+        "repo": {
+          "description": "Repository nel formato owner/repo (default: rilevato da git remote)",
+          "name": "repo",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -914,7 +954,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "pipeline:logs",
+      "id": "pr:detail",
       "pluginAlias": "devvami",
       "pluginName": "devvami",
       "pluginType": "core",
@@ -924,18 +964,17 @@
       "relativePath": [
         "src",
         "commands",
-        "pipeline",
-        "logs.js"
+        "pr",
+        "detail.js"
       ]
     },
-    "pipeline:rerun": {
+    "pr:review": {
       "aliases": [],
       "args": {},
-      "description": "Rilancia l'ultimo workflow fallito",
+      "description": "Lista PR assegnate a te per la code review",
       "examples": [
-        "<%= config.bin %> pipeline rerun",
-        "<%= config.bin %> pipeline rerun --failed-only",
-        "<%= config.bin %> pipeline rerun --run-id 12345"
+        "<%= config.bin %> pr review",
+        "<%= config.bin %> pr review --json"
       ],
       "flags": {
         "json": {
@@ -944,24 +983,11 @@
           "name": "json",
           "allowNo": false,
           "type": "boolean"
-        },
-        "run-id": {
-          "description": "ID specifico del run",
-          "name": "run-id",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "failed-only": {
-          "description": "Rilancia solo i job falliti",
-          "name": "failed-only",
-          "allowNo": false,
-          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "pipeline:rerun",
+      "id": "pr:review",
       "pluginAlias": "devvami",
       "pluginName": "devvami",
       "pluginType": "core",
@@ -971,18 +997,18 @@
       "relativePath": [
         "src",
         "commands",
-        "pipeline",
-        "rerun.js"
+        "pr",
+        "review.js"
       ]
     },
-    "pipeline:status": {
+    "pr:status": {
       "aliases": [],
       "args": {},
-      "description": "Stato GitHub Actions per il repo corrente",
+      "description": "Stato delle tue PR aperte (come autore e come reviewer)",
       "examples": [
-        "<%= config.bin %> pipeline status",
-        "<%= config.bin %> pipeline status --branch main",
-        "<%= config.bin %> pipeline status --limit 20 --json"
+        "<%= config.bin %> pr status",
+        "<%= config.bin %> pr status --author",
+        "<%= config.bin %> pr status --json"
       ],
       "flags": {
         "json": {
@@ -992,25 +1018,22 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "branch": {
-          "description": "Filtra per branch",
-          "name": "branch",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
+        "author": {
+          "description": "Solo PR dove sei autore",
+          "name": "author",
+          "allowNo": false,
+          "type": "boolean"
         },
-        "limit": {
-          "description": "Numero di run da mostrare",
-          "name": "limit",
-          "default": 10,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
+        "reviewer": {
+          "description": "Solo PR dove sei reviewer",
+          "name": "reviewer",
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "pipeline:status",
+      "id": "pr:status",
       "pluginAlias": "devvami",
       "pluginName": "devvami",
       "pluginType": "core",
@@ -1020,7 +1043,7 @@
       "relativePath": [
         "src",
         "commands",
-        "pipeline",
+        "pr",
         "status.js"
       ]
     },
@@ -1346,6 +1369,46 @@
         "list.js"
       ]
     },
+    "security:setup": {
+      "aliases": [],
+      "args": {},
+      "description": "Interactive wizard to install and configure credential protection tools (aws-vault, pass, GPG, Git Credential Manager, macOS Keychain)",
+      "examples": [
+        "<%= config.bin %> security setup",
+        "<%= config.bin %> security setup --json"
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "help": {
+          "char": "h",
+          "description": "Show CLI help.",
+          "name": "help",
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "security:setup",
+      "pluginAlias": "devvami",
+      "pluginName": "devvami",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": true,
+      "relativePath": [
+        "src",
+        "commands",
+        "security",
+        "setup.js"
+      ]
+    },
     "tasks:assigned": {
       "aliases": [],
       "args": {},
@@ -1498,5 +1561,5 @@
       ]
     }
   },
-  "version": "1.1.1"
+  "version": "1.2.0"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "devvami",
   "description": "DevEx CLI for developers and teams — manage repos, PRs, pipelines, tasks, and costs from the terminal",
-  "version": "1.1.1",
+  "version": "1.2.0",
   "author": "",
   "type": "module",
   "bin": {

package/src/commands/init.js

@@ -2,7 +2,7 @@ import { Command, Flags } from '@oclif/core'
 import chalk from 'chalk'
 import ora from 'ora'
 import { confirm, input, select } from '@inquirer/prompts'
-import { printBanner } from '../utils/banner.js'
+import { printWelcomeScreen } from '../utils/welcome.js'
 import { typewriterLine } from '../utils/typewriter.js'
 import { detectPlatform } from '../services/platform.js'
 import { exec, which } from '../services/shell.js'
@@ -32,7 +32,7 @@ export default class Init extends Command {
     const isDryRun = flags['dry-run']
     const isJson = flags.json
 
-    if (!isJson) await printBanner()
+    if (!isJson) await printWelcomeScreen(this.config.version)
 
     const platform = await detectPlatform()
     const steps = []
@@ -80,6 +80,8 @@ export default class Init extends Command {
     let config = await loadConfig()
 
      if (!configExists() && !isDryRun && !isJson) {
+       // Stop the spinner before interactive prompts to avoid TTY contention on macOS
+       configSpinner?.stop()
        const useOrg = await confirm({ message: 'Do you use a GitHub organization? (y/n)', default: true })
        let org = ''
        if (useOrg) {

package/src/commands/prompts/run.js

@@ -1,7 +1,7 @@
 import { Command, Args, Flags } from '@oclif/core'
 import ora from 'ora'
 import chalk from 'chalk'
-import { select } from '@inquirer/prompts'
+import { select, confirm } from '@inquirer/prompts'
 import { join } from 'node:path'
 import { readdir } from 'node:fs/promises'
 import { resolveLocalPrompt, invokeTool, SUPPORTED_TOOLS } from '../../services/prompts.js'
@@ -176,6 +176,24 @@ export default class PromptsRun extends Command {
     this.log(chalk.bold(`\nRunning: ${chalk.hex('#FF9A5C')(prompt.title)}`))
     this.log(chalk.dim(`  Tool: ${toolName}`) + '\n')
 
+    // Security: show a preview of the prompt content and ask for confirmation.
+    // This protects against prompt injection from tampered local files (originally
+    // downloaded from remote repositories). Skipped in CI/non-interactive environments.
+    if (!process.env.CI && process.stdin.isTTY) {
+      const preview = prompt.body.length > 500
+        ? prompt.body.slice(0, 500) + chalk.dim('\n…[truncated]')
+        : prompt.body
+      this.log(chalk.yellow('Prompt preview:'))
+      this.log(chalk.dim('─'.repeat(50)))
+      this.log(chalk.dim(preview))
+      this.log(chalk.dim('─'.repeat(50)) + '\n')
+      const ok = await confirm({ message: `Run this prompt with ${toolName}?`, default: true })
+      if (!ok) {
+        this.log(chalk.dim('Aborted.'))
+        return
+      }
+    }
+
     // Invoke tool
     try {
       await invokeTool(toolName, prompt.body)