@quolu/aishell 0.3.2 → 0.3.4

package/README.ja.md

@@ -32,7 +32,7 @@ codex mcp add aishell -- /opt/homebrew/bin/aishell-mcp
 summaryから省略された証拠だけartifact_readで読んで。
 ```
 
-既定development profileは5本の高密度toolを提供する。
+既定profileは5本の高密度development toolと、常時利用できる2本の復旧control toolを提供する。
 
 | Tool | 役割 |
 |---|---|
@@ -41,6 +41,22 @@ summaryから省略された証拠だけartifact_readで読んで。
 | `search_context` | 直接起動した`rg` workerによるbudget付き検索context |
 | `run_check` | 直接process実行、主要diagnostic、完全stdout/stderr artifact |
 | `artifact_read` | 保持artifactのrange、tail、pattern周辺read |
+| `runtime_status` | 未設定・停止中も含む許可root、停止、worktree、次操作の状態取得 |
+| `runtime_open_manager` | root追加またはAI操作再開のため管理アプリを開く |
+
+MCP serverへ`AISHELL_CAPABILITY_SET=expanded-v1`を設定すると、candidate surfaceへ明示opt-inできる。
+高密度development 9本と復旧control 2本を公開し、`run_observe`、`workspace_wait`、
+`change_impact`、`apply_change_set`を追加する。既存toolにもmanaged run、artifact query、
+semantic search、project profile、Git branch/worktree modeが加わる。
+
+Codexでは次のように登録する。
+
+```sh
+codex mcp add aishell --env AISHELL_CAPABILITY_SET=expanded-v1 -- /opt/homebrew/bin/aishell-mcp
+```
+
+未知値または空の`AISHELL_CAPABILITY_SET`と`AISHELL_TOOL_PROFILE`はtyped errorでstartup停止し、
+別profileへ黙ってfallbackしない。
 
 ## なぜAIShellか
 
@@ -112,10 +128,13 @@ codex mcp get aishell
 codex mcp remove aishell
 ```
 
-互換用full profileは既存20 primitiveと5本のdevelopment toolを合わせた25 toolを提供する。
+expanded capability未指定時の互換用full profileは全25 toolを提供する。既定7本は5本の
+development toolと2本の復旧control toolで、full modeは残りのlegacy primitiveも公開する。
+`expanded-v1`ではdevelopment 11本、full 29本を公開する。
 
 ```sh
 AISHELL_TOOL_PROFILE=full /opt/homebrew/bin/aishell-mcp
+AISHELL_CAPABILITY_SET=expanded-v1 AISHELL_TOOL_PROFILE=full /opt/homebrew/bin/aishell-mcp
 ```
 
 full profileにはfile一覧・read、SHA-256競合検出付きatomic update、copy/move/rename/Trash、直接process実行、app discovery/launch、runtime status、管理アプリの前面化が含まれる。

package/README.md

@@ -32,15 +32,27 @@ Use workspace_snapshot for the initial workspace context. Run the focused tests
 run_check, and read retained output with artifact_read only if the summary omits evidence.
 ```
 
-The default development profile exposes five high-density tools:
+The default profile exposes five high-density development tools plus two always-available recovery controls:
 
 | Tool | Purpose |
 |---|---|
 | `workspace_snapshot` | Bounded initial workspace preview, reconciled change delta, Git state, and primary context |
 | `read_context` | Budgeted multi-file reads with SHA-256 identity and continuation |
-| `search_context` | Budgeted search context produced by a directly launched `rg` worker |
+| `search_context` | Budgeted lexical context from a directly launched `rg` worker; the expanded capability also provides cursor-bound semantic definition/reference/symbol queries without lexical fallback |
 | `run_check` | Direct process execution, primary diagnostics, and complete stdout/stderr artifacts |
-| `artifact_read` | Range, tail, and pattern-centered reads from retained artifacts |
+| `artifact_read` | Range, tail, and pattern-centered reads from retained artifacts; the expanded capability also searches and compares finalized managed-run artifacts |
+| `runtime_status` | Allowed-root, pause, worktree, and next-action state, including while paused or unconfigured |
+| `runtime_open_manager` | Open the manager app to add roots or resume AI operations |
+
+Set `AISHELL_CAPABILITY_SET=expanded-v1` on the MCP server process to opt in to the candidate surface. It exposes nine high-density development tools plus the two recovery controls. The added tools are `run_observe`, `workspace_wait`, `change_impact`, and `apply_change_set`; existing tools gain closed managed-run, artifact query, semantic search, project-profile, and Git branch/worktree modes. Cross-run artifact operations require an explicit project path and reject live, expired, legacy-unbound, or different-project evidence instead of silently falling back to partial logs.
+
+For Codex, register the expanded surface explicitly:
+
+```sh
+codex mcp add aishell --env AISHELL_CAPABILITY_SET=expanded-v1 -- /opt/homebrew/bin/aishell-mcp
+```
+
+Unknown or empty `AISHELL_CAPABILITY_SET` and `AISHELL_TOOL_PROFILE` values fail startup with typed errors; they never fall back to another profile.
 
 ## Why AIShell
 
@@ -112,10 +124,11 @@ Remove the registration with:
 codex mcp remove aishell
 ```
 
-The compatibility profile retains the original 20 primitives alongside the five development tools:
+Without the expanded capability, the compatibility profile retains all 25 tools. The default seven are the five development tools plus the two recovery controls; full mode adds the remaining legacy primitives. With `expanded-v1`, development exposes 11 tools and full exposes 29:
 
 ```sh
 AISHELL_TOOL_PROFILE=full /opt/homebrew/bin/aishell-mcp
+AISHELL_CAPABILITY_SET=expanded-v1 AISHELL_TOOL_PROFILE=full /opt/homebrew/bin/aishell-mcp
 ```
 
 The full profile includes file listing and reads, atomic SHA-256-guarded updates, copy/move/rename/Trash, direct process execution, app discovery and launch, runtime status, and manager activation.
@@ -125,6 +138,10 @@ The full profile includes file listing and reads, atomic SHA-256-guarded updates
 - AIShell never evaluates a shell command string. It resolves a development program from `PATH` to an executable URL and keeps arguments, environment, and working directory separate.
 - Direct launch of shell and wrapper basenames such as `sh`, `bash`, `zsh`, `env`, and `osascript` is rejected as a product rail, not advertised as a security boundary.
 - `run_check` is an open-world capability: an allowed worker may update files, launch child processes, or access the network. AI hosts may require approval before execution.
+- npm projects may opt a `build`, `test`, or `lint` check into freshness caching with the closed
+  direct-Node `package.json` declaration documented in `docs/adr/0009-project-profile-contract.md`. Ordinary npm
+  scripts remain executable but cache-ineligible; AIShell does not infer arguments, inputs, or effects
+  from shell script text.
 - Text updates may use SHA-256 or expected old text as a precondition. Deletes go to Trash.
 - The manager app can stop normal operations globally. Runtime status and manager activation remain available while stopped.
 

package/dist/AIShell.app/Contents/Info.plist

@@ -17,9 +17,9 @@
     <key>CFBundlePackageType</key>
     <string>APPL</string>
     <key>CFBundleShortVersionString</key>
-    <string>0.3.2</string>
+    <string>0.3.4</string>
     <key>CFBundleVersion</key>
-    <string>7</string>
+    <string>8</string>
     <key>LSApplicationCategoryType</key>
     <string>public.app-category.utilities</string>
     <key>LSMinimumSystemVersion</key>

package/dist/AIShell.app/Contents/_CodeSignature/CodeResources

@@ -10,10 +10,19 @@
 		<dict>
 			<key>cdhash</key>
 			<data>
-			JRbqlAClD40Akx/45QsEw19Bp+w=
+			Ge4Dzh+MEHgbY60PDUm0GYbTpoU=
 			</data>
 			<key>requirement</key>
-			<string>cdhash H"2516ea9400a50f8d00931ff8e50b04c35f41a7ec"</string>
+			<string>cdhash H"19ee03ce1f8c10781b63ad0f0d49b41986d3a685"</string>
+		</dict>
+		<key>Helpers/aishell-run-supervisor</key>
+		<dict>
+			<key>cdhash</key>
+			<data>
+			ok923ptOjLL4NSX3ymkwMEsJrIM=
+			</data>
+			<key>requirement</key>
+			<string>cdhash H"a24f76de9b4e8cb2f83525f7ca6930304b09ac83"</string>
 		</dict>
 	</dict>
 	<key>rules</key>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quolu/aishell",
-  "version": "0.3.2",
+  "version": "0.3.4",
   "description": "A native macOS state runtime with high-density MCP tools for AI development",
   "license": "Apache-2.0",
   "author": "quolu",