@quolu/aishell 0.4.11 → 0.5.0

package/README.ja.md

@@ -1,10 +1,10 @@
 <p align="center">
-  <img src=".github/og.png" alt="AIShell — AI開発へDirect OS contextを提供" width="100%">
+  <img src="https://raw.githubusercontent.com/kitepon/aishell/main/.github/og.png" alt="AIShell — AI開発へDirect OS contextを提供" width="100%">
 </p>
 
 # AIShell
 
-[![CI](https://github.com/kitepon-rgb/aishell/actions/workflows/ci.yml/badge.svg)](https://github.com/kitepon-rgb/aishell/actions/workflows/ci.yml)
+[![CI](https://github.com/kitepon/aishell/actions/workflows/ci.yml/badge.svg)](https://github.com/kitepon/aishell/actions/workflows/ci.yml)
 [![npm](https://img.shields.io/npm/v/@quolu/aishell)](https://www.npmjs.com/package/@quolu/aishell)
 ![macOS 15+](https://img.shields.io/badge/macOS-15%2B-111827)
 ![Swift 6](https://img.shields.io/badge/Swift-6-F05138)
@@ -16,11 +16,12 @@
 [kitepon.dev](https://kitepon.dev/)を運営する[クオ（@QLyun35332）](https://x.com/QLyun35332)が
 開発・メンテナンスしています。
 
-**所有境界:** 本repositoryはApple Silicon Mac向けOS context runtimeを所有します。
-製品横断の導入・統合契約は、kitepon.devの製品開発を支える内部基盤
-[dotagents](https://github.com/kitepon-rgb/dotagents)が担当します。
+**所有境界:** 本repositoryはApple Silicon Mac向けruntimeのinstall、設定、
+state/schema migration、診断、復旧、更新、releaseを単独で所有します。
+[dotagents](https://github.com/kitepon/dotagents)は公開contractを使って製品横断wireと
+互換性を統合しますが、AIShellの内部運用を制御しません。
 
-AIShellは許可root、file identity、filesystem照合state、直接起動したprocess、完全log、artifactを所有する。reasoning、thread、compaction、sub-agent、汎用terminalはAI hostの責務として残す。
+AIShellはfile identity、filesystem照合state、直接起動したprocess、完全log、artifactを所有する。reasoning、thread、compaction、sub-agent、汎用terminalはAI hostの責務として残す。
 
 ## 30秒で試す
 
@@ -32,7 +33,7 @@ aishell-open
 codex mcp add aishell --env AISHELL_CAPABILITY_SET=expanded-v1 -- aishell-mcp
 ```
 
-管理アプリでAIに許可するfolderを追加し、新しいCodex taskで次のように頼む。
+フォルダの事前登録は不要。新しいCodex taskで対象フォルダを指定して実行する。
 
 ```text
 初回workspace contextはworkspace_snapshotで取得して。focused testはrun_checkで実行し、
@@ -48,8 +49,8 @@ summaryから省略された証拠だけartifact_readで読んで。
 | `search_context` | 直接起動した`rg` workerによるbudget付き検索context |
 | `run_check` | 直接process実行、主要diagnostic、完全stdout/stderr artifact |
 | `artifact_read` | 保持artifactのrange、tail、pattern周辺read |
-| `runtime_status` | 未設定・停止中も含む許可root、停止、worktree、次操作の状態取得 |
-| `runtime_open_manager` | root追加またはAI操作再開のため管理アプリを開く |
+| `runtime_status` | 停止状態、相対パスの基準、次操作の状態取得 |
+| `runtime_open_manager` | AI操作の停止・再開のため管理アプリを開く |
 
 MCP serverへ`AISHELL_CAPABILITY_SET=expanded-v1`を設定すると、candidate surfaceへ明示opt-inできる。
 高密度development 9本と復旧control 2本を公開し、`run_observe`、`workspace_wait`、
@@ -78,7 +79,7 @@ statelessな連携では、モデルがworkspaceを何度もscanし、command出
 | Context | budget・cursor付きstructured result | stdoutを手動または暗黙に切り詰める |
 | Execution | executable URL、引数、cwd、lifecycleを分離 | shellが1本のcommand文字列を評価 |
 | Evidence | 完全stdout/stderrを期限付きhandleで保持 | response truncation時に証拠が失われやすい |
-| Scope | 人が管理する許可rootと明示的stop状態 | 周囲のshellとhost policyに依存 |
+| Scope | macOSのアクセス権と明示的stop状態 | 周囲のshellとhost policyに依存 |
 
 AIShellはsandboxではなく、任意code実行を安全化しない。process railの目的はtyped executionと観測可能なlifecycleを維持することであり、改名binaryや許可workerが起動する子processを阻止することではない。
 
@@ -88,7 +89,7 @@ AIShellはsandboxではなく、任意code実行を安全化しない。process
 flowchart LR
     Host[AI host<br/>reasoning · threads · compaction] --> MCP[AIShellMCP<br/>MCP 2025-11-25]
     MCP --> Core[AIShellCore]
-    Core --> State[Allowed roots · file identity<br/>FSEvents + reconciliation]
+    Core --> State[File identity<br/>FSEvents + reconciliation]
     Core --> Process[Direct process lifecycle<br/>stdout · stderr · timeout]
     Core --> Evidence[Retained evidence<br/>artifacts · freshness]
     Process --> Workers[git · rg · compiler · tests]
@@ -117,7 +118,7 @@ aishell-open
 ## Sourceからbuild
 
 ```sh
-git clone https://github.com/kitepon-rgb/aishell.git
+git clone https://github.com/kitepon/aishell.git
 cd aishell
 swift test
 scripts/package-app.sh release
@@ -126,7 +127,7 @@ open build/AIShell.app
 
 MCP実行ファイルは`build/AIShell.app/Contents/Helpers/aishell-mcp`へ同梱される。
 
-管理アプリの「許可rootを追加」でAIに操作させるfolderを選ぶ。許可済みGit repositoryの`.git/worktrees`へ正式登録され、双方の管理情報が一致するworktreeは自動的に実効rootへ加わる。
+フォルダ登録は不要。絶対パスは指定した場所を、相対パスと省略時はMCP起動ディレクトリを基準にする。Git worktreeも直接指定でき、旧設定の許可フォルダ一覧は無視される。
 
 ## 別のAI hostへ接続
 
@@ -171,6 +172,35 @@ full profileにはfile一覧・read、SHA-256競合検出付きatomic update、c
 - 初回workspace entryはbounded previewで、後続deltaはcursor pageになる。
 - Developer ID署名とnotarizationは未設定。
 
+## 運用・更新・release
+
+単独installの更新は初回と同じ公式npm経路を使い、新版の管理アプリを開く。
+
+```sh
+npm install -g @quolu/aishell@latest
+aishell-open
+```
+
+停止中の復旧入口は`runtime_status`と`runtime_open_manager`である。
+工場consumerは専用`AISHELL_TOOL_PROFILE=factory` MCP surfaceから
+`factory_diagnostics`を呼ぶ。schemaとprivacy境界は
+[製品側diagnostics contract](https://github.com/kitepon/aishell/blob/main/docs/factory-diagnostics.md)が正である。
+
+releaseでは`AIShellProduct.version`と`package.json`を一致させ、release記録を
+[`docs/archive/releases/`](https://github.com/kitepon/aishell/tree/main/docs/archive/releases)へ追加して、次を実行する。
+
+```sh
+npm test
+npm run test:package
+git fetch origin
+npm run verify:release-commit
+npm publish --access public
+```
+
+release gateはdirty treeと既定branchへ未着地のcommitを拒否する。publish後は対応する
+GitHub Releaseを作り、`@quolu/aishell@latest`を再installしてMCP initializeと
+`factory_diagnostics`をsmokeする。公開済みversionの正本はGitHub Releasesである。
+
 ## 開発検証
 
 ```sh
@@ -189,9 +219,10 @@ scripts/package-app.sh release
 
 ## ContributionとSecurity
 
-変更提案前に[CONTRIBUTING.md](CONTRIBUTING.md)を確認してほしい。脆弱性はpublic issueへ書かず、[SECURITY.md](SECURITY.md)のprivate経路で報告する。
+変更提案前に[CONTRIBUTING.md](https://github.com/kitepon/aishell/blob/main/CONTRIBUTING.md)を確認してほしい。脆弱性はpublic issueへ書かず、[SECURITY.md](https://github.com/kitepon/aishell/blob/main/SECURITY.md)のprivate経路で報告する。
 
-release notesは[`docs/`](docs/)に置き、GitHub Releasesを公開済みversionの正本とする。
+現役文書の索引は[`docs/README.md`](https://github.com/kitepon/aishell/blob/main/docs/README.md)、過去のrelease notesは
+[`docs/archive/releases/`](https://github.com/kitepon/aishell/tree/main/docs/archive/releases)に置く。
 
 ## License
 

package/README.md

@@ -1,10 +1,10 @@
 <p align="center">
-  <img src=".github/og.png" alt="AIShell — Direct OS context for AI development" width="100%">
+  <img src="https://raw.githubusercontent.com/kitepon/aishell/main/.github/og.png" alt="AIShell — Direct OS context for AI development" width="100%">
 </p>
 
 # AIShell
 
-[![CI](https://github.com/kitepon-rgb/aishell/actions/workflows/ci.yml/badge.svg)](https://github.com/kitepon-rgb/aishell/actions/workflows/ci.yml)
+[![CI](https://github.com/kitepon/aishell/actions/workflows/ci.yml/badge.svg)](https://github.com/kitepon/aishell/actions/workflows/ci.yml)
 [![npm](https://img.shields.io/npm/v/@quolu/aishell)](https://www.npmjs.com/package/@quolu/aishell)
 ![macOS 15+](https://img.shields.io/badge/macOS-15%2B-111827)
 ![Swift 6](https://img.shields.io/badge/Swift-6-F05138)
@@ -15,12 +15,14 @@
 
 Built and maintained by [Quo](https://x.com/QLyun35332) at [kitepon.dev](https://kitepon.dev/en).
 
-**Ownership boundary:** this repository owns the macOS Apple Silicon OS-context
-runtime. Cross-product installation and the integration contract are handled by
-[dotagents](https://github.com/kitepon-rgb/dotagents), the internal development
-toolchain behind kitepon.dev's products.
+**Ownership boundary:** this repository owns the standalone macOS Apple Silicon
+runtime, including installation, configuration, state/schema migration,
+diagnostics, recovery, updates, and releases.
+[dotagents](https://github.com/kitepon/dotagents) consumes the public contract
+for cross-product wiring and compatibility; it does not control AIShell's
+internal operation.
 
-AIShell owns the OS-facing state below the model: allowed roots, file identity, filesystem reconciliation, directly launched processes, complete logs, and retained artifacts. The AI host remains responsible for reasoning, threads, compaction, sub-agents, and general-purpose terminal work.
+AIShell owns the OS-facing state below the model: file identity, filesystem reconciliation, directly launched processes, complete logs, and retained artifacts. The AI host remains responsible for reasoning, threads, compaction, sub-agents, and general-purpose terminal work.
 
 ## Try it in 30 seconds
 
@@ -32,7 +34,7 @@ aishell-open
 codex mcp add aishell --env AISHELL_CAPABILITY_SET=expanded-v1 -- aishell-mcp
 ```
 
-In the manager app, add the folders the AI may access. Start a new Codex task and try:
+フォルダの事前登録は不要です。新しいCodex taskで対象フォルダを指定して実行します。
 
 ```text
 Use workspace_snapshot for the initial workspace context. Run the focused tests with
@@ -48,8 +50,8 @@ The default profile exposes five high-density development tools plus two always-
 | `search_context` | Budgeted lexical context from a directly launched `rg` worker, scoped to a directory or one regular file; the expanded capability also provides cursor-bound semantic definition/reference/symbol queries without lexical fallback |
 | `run_check` | Direct process execution, primary diagnostics, and complete stdout/stderr artifacts |
 | `artifact_read` | Range, tail, and pattern-centered reads from retained artifacts; the expanded capability also searches and compares finalized managed-run artifacts |
-| `runtime_status` | Allowed-root, pause, worktree, and next-action state, including while paused or unconfigured |
-| `runtime_open_manager` | Open the manager app to add roots or resume AI operations |
+| `runtime_status` | Pause, relative-path base, and next-action state |
+| `runtime_open_manager` | Open the manager app to pause or resume AI operations |
 
 Set `AISHELL_CAPABILITY_SET=expanded-v1` on the MCP server process to opt in to the candidate surface. It exposes nine high-density development tools plus the two recovery controls. The added tools are `run_observe`, `workspace_wait`, `change_impact`, and `apply_change_set`; existing tools gain closed managed-run, artifact query, semantic search, project-profile, and Git branch/worktree modes. Cross-run artifact operations require an explicit project path and reject live, expired, legacy-unbound, or different-project evidence instead of silently falling back to partial logs.
 
@@ -75,7 +77,7 @@ Typical stateless integrations repeatedly ask the model to rediscover workspace
 | Context | Bounded, cursor-based structured results | Unbounded or manually truncated stdout |
 | Execution | Executable URL, arguments, working directory, and lifecycle remain separate | A shell evaluates one command string |
 | Evidence | Complete stdout/stderr retained behind expiring handles | Evidence often disappears when the response is truncated |
-| Scope | Human-managed allowed roots and explicit stop state | Depends on the surrounding shell and host policy |
+| Scope | macOS access permissions and explicit stop state | Depends on the surrounding shell and host policy |
 
 AIShell is not a sandbox and does not make arbitrary code execution safe. Its process rails exist to preserve typed execution and observable lifecycle—not to stop renamed binaries or child processes launched by an allowed worker.
 
@@ -85,7 +87,7 @@ AIShell is not a sandbox and does not make arbitrary code execution safe. Its pr
 flowchart LR
     Host[AI host<br/>reasoning · threads · compaction] --> MCP[AIShellMCP<br/>MCP 2025-11-25]
     MCP --> Core[AIShellCore]
-    Core --> State[Allowed roots · file identity<br/>FSEvents + reconciliation]
+    Core --> State[File identity<br/>FSEvents + reconciliation]
     Core --> Process[Direct process lifecycle<br/>stdout · stderr · timeout]
     Core --> Evidence[Retained evidence<br/>artifacts · freshness]
     Process --> Workers[git · rg · compiler · tests]
@@ -115,7 +117,7 @@ The current experimental build is not yet Developer ID signed or notarized.
 ## Build from source
 
 ```sh
-git clone https://github.com/kitepon-rgb/aishell.git
+git clone https://github.com/kitepon/aishell.git
 cd aishell
 swift test
 scripts/package-app.sh release
@@ -124,7 +126,7 @@ open build/AIShell.app
 
 The MCP executable is bundled at `build/AIShell.app/Contents/Helpers/aishell-mcp`.
 
-After opening the app, use **Add Allowed Root** to select the folders AIShell may access. A Git worktree registered under an allowed repository is recognized automatically when both sides of the worktree metadata agree.
+フォルダ登録は不要です。絶対パスは指定した場所を、相対パスと省略時はMCP起動ディレクトリを基準にします。Git worktreeも直接指定できます。旧設定の許可フォルダ一覧は無視されます。
 
 ## Connect another AI host
 
@@ -171,6 +173,37 @@ The full profile includes file listing and reads, atomic SHA-256-guarded updates
 - Initial workspace entries are a bounded preview; later deltas are cursor-paged.
 - Developer ID signing and notarization are not yet configured.
 
+## Operations, updates, and releases
+
+Upgrade a standalone installation through the same official npm path used for
+initial installation, then open the newly installed manager:
+
+```sh
+npm install -g @quolu/aishell@latest
+aishell-open
+```
+
+`runtime_status` and `runtime_open_manager` are the recovery entrypoints for an
+paused runtime. Factory consumers call `factory_diagnostics`
+through the dedicated `AISHELL_TOOL_PROFILE=factory` MCP surface; its schema and
+privacy boundary are owned by [the product contract](https://github.com/kitepon/aishell/blob/main/docs/factory-diagnostics.md).
+
+For a release, keep `AIShellProduct.version` and `package.json` aligned, add the
+release record under [`docs/archive/releases/`](https://github.com/kitepon/aishell/tree/main/docs/archive/releases), and run:
+
+```sh
+npm test
+npm run test:package
+git fetch origin
+npm run verify:release-commit
+npm publish --access public
+```
+
+The release gate rejects a dirty tree or a commit that has not landed on the
+default branch. After publishing, create the matching GitHub Release, reinstall
+`@quolu/aishell@latest`, and smoke MCP initialize plus `factory_diagnostics`.
+GitHub Releases are the public record of shipped versions.
+
 ## Development
 
 ```sh
@@ -189,9 +222,10 @@ On the original verification machine, Xcode 26.6 and the installed CoreSimulator
 
 ## Contributing and security
 
-See [CONTRIBUTING.md](CONTRIBUTING.md) before proposing a change. Please report vulnerabilities through the private process in [SECURITY.md](SECURITY.md), not through a public issue.
+See [CONTRIBUTING.md](https://github.com/kitepon/aishell/blob/main/CONTRIBUTING.md) before proposing a change. Please report vulnerabilities through the private process in [SECURITY.md](https://github.com/kitepon/aishell/blob/main/SECURITY.md), not through a public issue.
 
-Release notes are kept in [`docs/`](docs/). GitHub Releases are the public record for shipped versions.
+The current documentation map is [`docs/README.md`](https://github.com/kitepon/aishell/blob/main/docs/README.md). Historical
+release notes live in [`docs/archive/releases/`](https://github.com/kitepon/aishell/tree/main/docs/archive/releases).
 
 ## License
 

package/dist/AIShell.app/Contents/Info.plist

@@ -17,9 +17,9 @@
     <key>CFBundlePackageType</key>
     <string>APPL</string>
     <key>CFBundleShortVersionString</key>
-    <string>0.4.11</string>
+    <string>0.5.0</string>
     <key>CFBundleVersion</key>
-    <string>18</string>
+    <string>20</string>
     <key>LSApplicationCategoryType</key>
     <string>public.app-category.utilities</string>
     <key>LSMinimumSystemVersion</key>

package/dist/AIShell.app/Contents/_CodeSignature/CodeResources

@@ -10,19 +10,19 @@
 		<dict>
 			<key>cdhash</key>
 			<data>
-			VN9Kks7EfTzI7Y5PoSBwo3bGY78=
+			YtRYGFYE+Yh3gPk+NxMYVUyUi6M=
 			</data>
 			<key>requirement</key>
-			<string>cdhash H"54df4a92cec47d3cc8ed8e4fa12070a376c663bf"</string>
+			<string>cdhash H"62d458185604f9887780f93e371318554c948ba3"</string>
 		</dict>
 		<key>Helpers/aishell-run-supervisor</key>
 		<dict>
 			<key>cdhash</key>
 			<data>
-			7QIL+vqsxrhf1J+A8U88pcugzmc=
+			TcWgD4ePO0zxS53P4eI9iGT41LE=
 			</data>
 			<key>requirement</key>
-			<string>cdhash H"ed020bfafaacc6b85fd49f80f14f3ca5cba0ce67"</string>
+			<string>cdhash H"4dc5a00f878f3b4cf14b9dcfe1e23d8864f8d4b1"</string>
 		</dict>
 	</dict>
 	<key>rules</key>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quolu/aishell",
-  "version": "0.4.11",
+  "version": "0.5.0",
   "description": "A native macOS state runtime with high-density MCP tools for AI development",
   "license": "Apache-2.0",
   "author": {
@@ -9,12 +9,12 @@
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/kitepon-rgb/aishell.git"
+    "url": "git+https://github.com/kitepon/aishell.git"
   },
   "bugs": {
-    "url": "https://github.com/kitepon-rgb/aishell/issues"
+    "url": "https://github.com/kitepon/aishell/issues"
   },
-  "homepage": "https://github.com/kitepon-rgb/aishell#readme",
+  "homepage": "https://github.com/kitepon/aishell#readme",
   "keywords": [
     "mcp",
     "macos",
@@ -40,8 +40,9 @@
   "scripts": {
     "build:npm": "node scripts/prepare-npm-release.mjs",
     "prepack": "npm run build:npm",
-    "test": "swift test && npm run test:release-gate",
+    "test": "swift test && npm run test:release-gate && npm run test:repository-contract",
     "test:release-gate": "node --test scripts/verify-release-commit.test.mjs",
+    "test:repository-contract": "node --test scripts/repository-contract.test.mjs",
     "test:package": "npm run build:npm && node scripts/verify-npm-package.mjs",
     "verify:release-commit": "node scripts/verify-release-commit.mjs",
     "prepublishOnly": "npm run verify:release-commit && npm run test:package"
@@ -49,6 +50,13 @@
   "engines": {
     "node": ">=18"
   },
+  "devDependencies": {
+    "parse-srcset": "1.0.2",
+    "parse5": "^8.0.1",
+    "remark-gfm": "^4.0.1",
+    "remark-parse": "^11.0.0",
+    "unified": "^11.0.5"
+  },
   "publishConfig": {
     "access": "public"
   }