aidevops Agent工作流

3. Create required labels

gh label create "ai-approved" --color "0E8A16" --description "Issue approved for AI agent" gh label create "security-review" --color "D93F0B" --description "Requires security review" ```

The secure workflow is included at .github/workflows/opencode-agent.yml.

Usage:

See .agents/tools/git/opencode-github-security.md for the full security documentation.

Supported AI tool: OpenCode is the recommended and tested AI coding tool for aidevops. All features, agents, and workflows are designed and tested for OpenCode first. We recommend OpenAI models for the best current results across all agent tiers: GPT-5.4 mini for fast triage/routine work and GPT-5.5 for complex implementation, review, and reasoning. Claude models (Anthropic) remain fully supported, and other providers are tested as their capabilities change.

Recommended stack:

• OpenCode - The recommended AI coding agent. Powerful agentic TUI/CLI with native MCP support, Tab-based agent switching, LSP integration, plugin ecosystem, and excellent DX. All aidevops features are designed and tested for OpenCode first.
• OpenCode Zen - Free tier of OpenCode with included models. Start working with AI straight away at no cost -- no API keys or subscriptions required.
• OpenAI GPT-5.5 / GPT-5.4 mini - Recommended model pair for aidevops today. Use GPT-5.5 for complex reasoning and high-impact agent tiers; use GPT-5.4 mini for triage, routine implementation, and cost-efficient parallel workers.
• Claude (Anthropic) - Fully supported alternative provider. Claude models remain useful for fallback, cross-provider verification, and users with Claude Pro/Max OAuth access.
• Tabby - Recommended terminal. Colour-coded Profiles per project/repo, auto-syncs tab title with git repo/branch.
• Zed - Recommended editor. High-performance with AI integration (use with the OpenCode Agent Extension).

Installation Options

npm (recommended - verified provenance):

npm install -g aidevops && aidevops update

Note: npm suppresses postinstall output. The && aidevops update deploys agents to ~/.aidevops/agents/. The CLI will remind you if agents need updating.

Bun (fast alternative):

bun install -g aidevops && aidevops update

Homebrew (macOS/Linux):

brew install marcusquinn/tap/aidevops && aidevops update

Direct from source (aidevops.sh):

bash <(curl -fsSL https://aidevops.sh/install)

Manual (git clone):

git clone https://github.com/marcusquinn/aidevops.git ~/Git/aidevops
~/Git/aidevops/setup.sh

That's it! The setup script will: - Clone/update the repo to ~/Git/aidevops - Deploy agents to ~/.aidevops/agents/ - Install the aidevops CLI command - Configure your AI assistants automatically - Offer to install Oh My Zsh (optional, opt-in) for enhanced shell experience - Install recommended token-efficiency tooling by default, including RTK for compact git/gh/test/lint command summaries before output reaches AI context - Guide you through recommended tools (Tabby, Zed, Git CLIs) - Ensure all PATH and alias changes work in both bash, zsh, and fish - When Claude Code is installed, add a claude alias that runs claude --dangerously-skip-permissions (skips per-tool permission prompts). Re-running setup updates the alias automatically. To grant permissions per-session instead, press Shift-Tab inside Claude Code to cycle through permission modes (default → skip permissions → auto-approve).

New users: Start OpenCode and type /onboarding to configure your services interactively. OpenCode is the recommended tool for aidevops; pair it with OpenAI GPT-5.5 and GPT-5.4 mini for the best current results across agent tiers. The onboarding wizard will: - Explain what aidevops can do - Ask about your work to give personalized recommendations - Show which services are configured vs need setup - Guide you through setting up each service with links and commands

After installation, use the CLI:

aidevops status           # Check what's installed
aidevops doctor           # Detect duplicate installs and PATH conflicts
aidevops update           # Update framework + check registered projects
aidevops auto-update      # Manage automatic update polling (every 10 min)
aidevops init             # Initialize aidevops in any project
aidevops features         # List available features
aidevops repos            # List/add/remove registered projects
aidevops design           # DESIGN.md detection + brand guideline HTML/PDF exports
aidevops detect           # Scan for unregistered aidevops projects
aidevops upgrade-planning # Upgrade TODO.md/PLANS.md to latest templates
aidevops update-tools     # Check and update installed tools
aidevops uninstall        # Remove aidevops

Print safe install plan only

open-design-helper.sh install

Install alongside aidevops only after opting in

open-design-helper.sh install --execute

Per-repo platform setup

After aidevops init registers a new repo, run /setup-git in your AI assistant to apply per-repo platform secrets. Most notably, this sets SYNC_PAT — a GitHub Actions secret that lets issue-sync.yml push TODO.md auto-completion past branch protection.

This is distinct from /onboarding (per-account credentials like gh auth login): GitHub Actions secrets are scoped per-repo, so each repo needs its own. You need gh auth login to succeed before any per-repo helper can run, so /onboarding comes first, /setup-git second.

Run /setup-git again whenever you register a new repo with aidevops repos add or when a SYNC_PAT advisory appears in the session greeting toast. If you skip this step, issue-sync.yml will post a remediation comment when it hits branch protection — /setup-git walks through the fix.

1. Install the OpenCode GitHub App

**Quick Start**

Optional Design Artifact Studio

aidevops now treats design as a self-contained stack with optional peripherals:

• Google DESIGN.md standard: AI-readable design systems with YAML tokens, linting, previews, and brand/style libraries (.agents/tools/design/design-md.md).
• Init-aware design files: aidevops init records has_interface and seeds root DESIGN.md for standard repos plus minimal-scope repos with detected GUI/interface markers.
• Brand guideline exports: aidevops design guidelines . --pdf generates _reports/brand-guidelines/brand-guidelines.md, HTML, and A4/US Letter/slides PDFs from DESIGN.md.
• Repo rollout: aidevops design survey --json audits owned initialized GUI repos; aidevops design issues --apply files worker-ready auto-dispatch issues for missing DESIGN.md/brand-guideline artifacts.
• Design agents and skills: brand identity, palettes, UI inspiration, product UI rules, shadcn/Tailwind/UI skills, Nothing-style design, email rendering, Remotion/video, and browser-based UI verification.
• Artifact routing commands: /design-artifact decides whether to use aidevops-native implementation or a companion artifact studio; /open-design manages optional Open Design workflows.
• Verification gates: Playwright screenshots, accessibility/contrast checks, email rendering, deck export/fidelity checks, and media smoke tests before generated artifacts are accepted.

Optional companion: Open Design by nexu-io (Apache-2.0) is supported as a peripheral for live sandboxed previews, design-skill pickers, .od/ artifact workspaces, and HTML/PDF/PPTX/ZIP-style exports. aidevops remains canonical for agents, skill ingestion, Google DESIGN.md, local hosting, and verification.

```bash

Inspect optional companion status

open-design-helper.sh status

→ https://open-design.local when localdev is configured

```

Imported Open Design skills are not copied verbatim. They are evaluated through aidevops build-agent methodology, deduplicated against existing agents, flattened into aidevops *-skill.md structure, attributed to upstream, and given verification commands. See .agents/tools/design/open-design-ingestion.md for the full skill-value matrix.

Project tracking: When you run aidevops init, the project is automatically registered in ~/.config/aidevops/repos.json. Running aidevops update checks all registered projects for version updates.

Repository → Settings → Secrets → OPENAI_API_KEY or ANTHROPIC_API_KEY

Quick Reference

• Purpose: AI-assisted DevOps automation framework
• Install: npm install -g aidevops && aidevops update
• Recommended runtime/models: OpenCode + OpenAI GPT-5.5 / GPT-5.4 mini
• Entry: aidevops CLI, ~/.aidevops/agents/AGENTS.md
• Stack: Bash scripts, TypeScript (Bun), MCP servers
• Recent focus: OpenCode control-plane safety, local repo metrics, mobile simulator testing, self-hosted runner operations, and pulse/worker diagnostics

Opens browser OAuth flow — no API key required

Google AI Pool (Gemini CLI / Vertex AI)

Use your Google AI Pro, AI Ultra, or Workspace subscription for Gemini models. Tokens are injected as ADC bearer tokens that Gemini CLI, Vertex AI SDK, and the Gemini API pick up automatically.

Setup:

```bash

2. Add API key secret for your chosen provider

GitHub AI Agent Integration

Enable AI-powered issue resolution directly from GitHub. Comment /oc fix this on any issue and the AI creates a branch, implements the fix, and opens a PR.

Security-first design - The workflow includes: - Trusted users only (OWNER/MEMBER/COLLABORATOR) - ai-approved label required on issues before AI processing - Prompt injection pattern detection - Audit logging of all invocations - 15-minute timeout and rate limiting

Quick setup:

```bash

Troubleshooting Auth

If you see "Anthropic Key Missing", "OpenAI Key Missing", or the model stops responding, run these commands from any terminal — no working model session required.

Step 1 — Check pool health

aidevops model-accounts-pool status       # counts: available / rate-limited / auth-error
aidevops model-accounts-pool check        # live token validity test per account

Step 2 — Fix based on what you see

Step 3 — If still broken, re-add the account

aidevops model-accounts-pool add openai        # ChatGPT Plus/Pro
aidevops model-accounts-pool add anthropic     # Claude Pro/Max — opens browser OAuth
aidevops model-accounts-pool add cursor        # Cursor Pro (reads from local IDE)
aidevops model-accounts-pool add google        # Google AI Pro/Ultra/Workspace — browser OAuth
aidevops model-accounts-pool import claude-cli # Import from existing Claude CLI auth

Restart OpenCode after any add, rotate, or reset-cooldowns to pick up the new credentials.

Full command reference

aidevops model-accounts-pool status            # Pool health at a glance
aidevops model-accounts-pool list              # Per-account detail + expiry
aidevops model-accounts-pool check             # Live API validity test
aidevops model-accounts-pool rotate [provider] # Switch to next available account NOW
aidevops model-accounts-pool reset-cooldowns   # Clear all rate-limit cooldowns
aidevops model-accounts-pool assign-pending <p># Assign stranded pending token
aidevops model-accounts-pool remove <p> <email># Remove an account

Note: reset-cooldowns clears cooldowns in the pool file. If OpenCode is already running, the in-memory token endpoint cooldown is only cleared when OpenCode restarts or when you use the /model-accounts-pool reset-cooldowns slash command inside an active session.

If you prefer guided help: Open OpenCode with a free model (OpenCode Zen includes free models that don't require any API key or subscription) and run the auth troubleshooting agent by typing:

@auth-troubleshooting

The agent contains the full recovery flow and symptom table. Free models work fine for this — no paid subscription needed.