@quolu/aishell 0.3.3 → 0.3.5

package/README.ja.md

@@ -44,6 +44,20 @@ summaryから省略された証拠だけartifact_readで読んで。
 | `runtime_status` | 未設定・停止中も含む許可root、停止、worktree、次操作の状態取得 |
 | `runtime_open_manager` | root追加またはAI操作再開のため管理アプリを開く |
 
+MCP serverへ`AISHELL_CAPABILITY_SET=expanded-v1`を設定すると、candidate surfaceへ明示opt-inできる。
+高密度development 9本と復旧control 2本を公開し、`run_observe`、`workspace_wait`、
+`change_impact`、`apply_change_set`を追加する。既存toolにもmanaged run、artifact query、
+semantic search、project profile、Git branch/worktree modeが加わる。
+
+Codexでは次のように登録する。
+
+```sh
+codex mcp add aishell --env AISHELL_CAPABILITY_SET=expanded-v1 -- /opt/homebrew/bin/aishell-mcp
+```
+
+未知値または空の`AISHELL_CAPABILITY_SET`と`AISHELL_TOOL_PROFILE`はtyped errorでstartup停止し、
+別profileへ黙ってfallbackしない。
+
 ## なぜAIShellか
 
 statelessな連携では、モデルがworkspaceを何度もscanし、command出力から状態を再構成しやすい。AIShellは状態を持つOS側の仕事をモデルより下へ置き、後続turnが全再scanではなくdeltaと一次証拠を要求できるようにする。
@@ -114,10 +128,13 @@ codex mcp get aishell
 codex mcp remove aishell
 ```
 
-互換用full profileは全25 toolを提供する。既定7本は5本のdevelopment toolと2本の復旧control toolで、full modeは残りのlegacy primitiveも公開する。
+expanded capability未指定時の互換用full profileは全25 toolを提供する。既定7本は5本の
+development toolと2本の復旧control toolで、full modeは残りのlegacy primitiveも公開する。
+`expanded-v1`ではdevelopment 11本、full 29本を公開する。
 
 ```sh
 AISHELL_TOOL_PROFILE=full /opt/homebrew/bin/aishell-mcp
+AISHELL_CAPABILITY_SET=expanded-v1 AISHELL_TOOL_PROFILE=full /opt/homebrew/bin/aishell-mcp
 ```
 
 full profileにはfile一覧・read、SHA-256競合検出付きatomic update、copy/move/rename/Trash、直接process実行、app discovery/launch、runtime status、管理アプリの前面化が含まれる。

package/README.md

@@ -38,12 +38,22 @@ The default profile exposes five high-density development tools plus two always-
 |---|---|
 | `workspace_snapshot` | Bounded initial workspace preview, reconciled change delta, Git state, and primary context |
 | `read_context` | Budgeted multi-file reads with SHA-256 identity and continuation |
-| `search_context` | Budgeted search context produced by a directly launched `rg` worker |
+| `search_context` | Budgeted lexical context from a directly launched `rg` worker; the expanded capability also provides cursor-bound semantic definition/reference/symbol queries without lexical fallback |
 | `run_check` | Direct process execution, primary diagnostics, and complete stdout/stderr artifacts |
-| `artifact_read` | Range, tail, and pattern-centered reads from retained artifacts |
+| `artifact_read` | Range, tail, and pattern-centered reads from retained artifacts; the expanded capability also searches and compares finalized managed-run artifacts |
 | `runtime_status` | Allowed-root, pause, worktree, and next-action state, including while paused or unconfigured |
 | `runtime_open_manager` | Open the manager app to add roots or resume AI operations |
 
+Set `AISHELL_CAPABILITY_SET=expanded-v1` on the MCP server process to opt in to the candidate surface. It exposes nine high-density development tools plus the two recovery controls. The added tools are `run_observe`, `workspace_wait`, `change_impact`, and `apply_change_set`; existing tools gain closed managed-run, artifact query, semantic search, project-profile, and Git branch/worktree modes. Cross-run artifact operations require an explicit project path and reject live, expired, legacy-unbound, or different-project evidence instead of silently falling back to partial logs.
+
+For Codex, register the expanded surface explicitly:
+
+```sh
+codex mcp add aishell --env AISHELL_CAPABILITY_SET=expanded-v1 -- /opt/homebrew/bin/aishell-mcp
+```
+
+Unknown or empty `AISHELL_CAPABILITY_SET` and `AISHELL_TOOL_PROFILE` values fail startup with typed errors; they never fall back to another profile.
+
 ## Why AIShell
 
 Typical stateless integrations repeatedly ask the model to rediscover workspace state and interpret command output. AIShell keeps the stateful, OS-facing part below the model so later turns can ask for deltas and primary evidence instead of rescanning everything.
@@ -114,10 +124,11 @@ Remove the registration with:
 codex mcp remove aishell
 ```
 
-The compatibility profile retains all 25 tools. The default seven are the five development tools plus the two recovery controls; full mode adds the remaining legacy primitives:
+Without the expanded capability, the compatibility profile retains all 25 tools. The default seven are the five development tools plus the two recovery controls; full mode adds the remaining legacy primitives. With `expanded-v1`, development exposes 11 tools and full exposes 29:
 
 ```sh
 AISHELL_TOOL_PROFILE=full /opt/homebrew/bin/aishell-mcp
+AISHELL_CAPABILITY_SET=expanded-v1 AISHELL_TOOL_PROFILE=full /opt/homebrew/bin/aishell-mcp
 ```
 
 The full profile includes file listing and reads, atomic SHA-256-guarded updates, copy/move/rename/Trash, direct process execution, app discovery and launch, runtime status, and manager activation.
@@ -127,6 +138,10 @@ The full profile includes file listing and reads, atomic SHA-256-guarded updates
 - AIShell never evaluates a shell command string. It resolves a development program from `PATH` to an executable URL and keeps arguments, environment, and working directory separate.
 - Direct launch of shell and wrapper basenames such as `sh`, `bash`, `zsh`, `env`, and `osascript` is rejected as a product rail, not advertised as a security boundary.
 - `run_check` is an open-world capability: an allowed worker may update files, launch child processes, or access the network. AI hosts may require approval before execution.
+- npm projects may opt a `build`, `test`, or `lint` check into freshness caching with the closed
+  direct-Node `package.json` declaration documented in `docs/adr/0009-project-profile-contract.md`. Ordinary npm
+  scripts remain executable but cache-ineligible; AIShell does not infer arguments, inputs, or effects
+  from shell script text.
 - Text updates may use SHA-256 or expected old text as a precondition. Deletes go to Trash.
 - The manager app can stop normal operations globally. Runtime status and manager activation remain available while stopped.
 

package/dist/AIShell.app/Contents/Info.plist

@@ -17,9 +17,9 @@
     <key>CFBundlePackageType</key>
     <string>APPL</string>
     <key>CFBundleShortVersionString</key>
-    <string>0.3.3</string>
+    <string>0.3.5</string>
     <key>CFBundleVersion</key>
-    <string>7</string>
+    <string>9</string>
     <key>LSApplicationCategoryType</key>
     <string>public.app-category.utilities</string>
     <key>LSMinimumSystemVersion</key>

package/dist/AIShell.app/Contents/_CodeSignature/CodeResources

@@ -10,10 +10,19 @@
 		<dict>
 			<key>cdhash</key>
 			<data>
-			7xZ0nBtAcU2VykKqtpKSvPwhR0c=
+			GxWGE+OBtGFk8LqNVjuVkDvNOJA=
 			</data>
 			<key>requirement</key>
-			<string>cdhash H"ef16749c1b40714d95ca42aab69292bcfc214747"</string>
+			<string>cdhash H"1b158613e381b46164f0ba8d563b95903bcd3890"</string>
+		</dict>
+		<key>Helpers/aishell-run-supervisor</key>
+		<dict>
+			<key>cdhash</key>
+			<data>
+			ppzjYZ96+CrXPbs4DTGK12LWV3I=
+			</data>
+			<key>requirement</key>
+			<string>cdhash H"a69ce3619f7af82ad73dbb380d318ad762d65772"</string>
 		</dict>
 	</dict>
 	<key>rules</key>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quolu/aishell",
-  "version": "0.3.3",
+  "version": "0.3.5",
   "description": "A native macOS state runtime with high-density MCP tools for AI development",
   "license": "Apache-2.0",
   "author": "quolu",