iosm-cli 0.2.15 → 0.2.16

package/docs/configuration.generated.md

@@ -0,0 +1,81 @@
+# Generated Settings Reference
+
+This file is generated from `src/core/settings.schema.json`.
+
+## `permissionMode`
+
+- Type: `string`
+- Default: `"ask"`
+- Allowed values: `ask | auto | yolo`
+- Description: Default permission behavior for tool execution.
+
+## `permissionAllow`
+
+- Type: `array`
+- Default: `[]`
+- Allowed values: `(any)`
+- Description: Legacy allow rules in <tool:match> format. Migrated into policy v2 at runtime.
+
+## `permissionDeny`
+
+- Type: `array`
+- Default: `[]`
+- Allowed values: `(any)`
+- Description: Legacy deny rules in <tool:match> format. Migrated into policy v2 at runtime.
+
+## `permissions`
+
+- Type: `object`
+- Default: `(none)`
+- Allowed values: `(any)`
+- Description: No description.
+
+## `permissions.extensionToolEnforcement`
+
+- Type: `boolean`
+- Default: `false`
+- Allowed values: `(any)`
+- Description: Require requiredPermission metadata for extension tools in auto mode.
+
+## `sandbox`
+
+- Type: `object`
+- Default: `(none)`
+- Allowed values: `(any)`
+- Description: No description.
+
+## `sandbox.enabled`
+
+- Type: `boolean`
+- Default: `false`
+- Allowed values: `(any)`
+- Description: Enable Linux bubblewrap sandbox for process-based tools.
+
+## `webSearch`
+
+- Type: `object`
+- Default: `(none)`
+- Allowed values: `(any)`
+- Description: No description.
+
+## `webSearch.enabled`
+
+- Type: `boolean`
+- Default: `true`
+- Allowed values: `(any)`
+- Description: Enable built-in web search tool integration.
+
+## `webSearch.providerMode`
+
+- Type: `string`
+- Default: `"auto"`
+- Allowed values: `auto | tavily`
+- Description: Primary web search provider selection strategy.
+
+## `webSearch.fallbackMode`
+
+- Type: `string`
+- Default: `"searxng_ddg"`
+- Allowed values: `searxng_ddg | searxng_only | none`
+- Description: Fallback provider policy when primary lookup fails.
+

package/docs/configuration.md

@@ -202,6 +202,7 @@ Manage MCP servers from CLI and interactive mode:
 # CLI
 iosm mcp list
 iosm mcp add filesystem --transport stdio --command npx --arg -y --arg @modelcontextprotocol/server-filesystem --arg .
+iosm mcp add github --transport http --url https://mcp.example.com --tool-approval search=prompt --tool-approval get_file=approve
 iosm mcp tools
 
 # Interactive
@@ -210,6 +211,12 @@ iosm mcp tools
 /mcp add filesystem --transport stdio --command npx --arg -y --arg @modelcontextprotocol/server-filesystem --arg .
 ```
 
+Per-tool approval mode is set with `--tool-approval <tool>=<mode>`:
+
+- `auto`: default policy behavior.
+- `prompt`: always require confirmation.
+- `approve`: auto-allow only for trusted MCP servers (`trust=true`); otherwise confirmation is required.
+
 MCP configs are loaded with project override precedence:
 
 1. `~/.iosm/agent/mcp.json`

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "iosm-cli",
-	"version": "0.2.15",
+	"version": "0.2.16",
 	"description": "Standalone IOSM CLI with agent tooling, session management, and IOSM artifact orchestration",
 	"type": "module",
 	"iosmConfig": {
@@ -36,12 +36,15 @@
 		"deploy-local": "npm run build && node scripts/deploy-local.mjs",
 		"build:binary": "npm run build && bun build --compile ./dist/cli.js --outfile dist/iosm && npm run copy-binary-assets",
 		"check": "tsc --noEmit -p tsconfig.build.json",
+		"generate:settings-docs": "node scripts/generate-settings-docs.mjs",
+		"check:settings-docs": "node scripts/check-settings-docs.mjs",
 		"copy-assets": "shx mkdir -p dist/modes/interactive/theme && shx cp src/modes/interactive/theme/*.json dist/modes/interactive/theme/ && shx mkdir -p dist/core/export-html/vendor && shx cp src/core/export-html/template.html src/core/export-html/template.css src/core/export-html/template.js dist/core/export-html/ && shx cp src/core/export-html/vendor/*.js dist/core/export-html/vendor/",
 		"copy-binary-assets": "shx cp package.json dist/ && shx cp README.md dist/ && shx cp CHANGELOG.md dist/ && shx mkdir -p dist/theme && shx cp src/modes/interactive/theme/*.json dist/theme/ && shx mkdir -p dist/export-html/vendor && shx cp src/core/export-html/template.html dist/export-html/ && shx cp src/core/export-html/vendor/*.js dist/export-html/vendor/ && shx cp -r docs dist/ && shx cp -r examples dist/ && shx cp node_modules/@silvia-odwyer/photon-node/photon_rs_bg.wasm dist/",
 		"test": "vitest --run",
 		"prepublishOnly": "npm run clean && npm run build"
 	},
 	"dependencies": {
+		"@iarna/toml": "^2.2.5",
 		"@mariozechner/jiti": "^2.6.2",
 		"@mariozechner/pi-agent-core": "^0.56.1",
 		"@mariozechner/pi-ai": "^0.56.1",