iosm-cli 0.2.5 → 0.2.7

package/CHANGELOG.md

@@ -9,6 +9,61 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 _No unreleased changes._
 
+## [0.2.7] - 2026-03-14
+
+### Added
+
+- **`fetch` built-in tool** — added structured HTTP tool with fields `url`, `method`, `headers`, `body`, `timeout`, `max_bytes`, `response_format`, `max_redirects`; includes manual redirect loop control, bounded body capture, and `auto` JSON/text formatting by `content-type`
+- **`git_read` built-in tool** — added read-only structured git introspection actions (`status`, `diff`, `log`, `blame`) with action-specific validation and safe argv execution (no raw shell passthrough)
+- **`fs_ops` built-in tool** — added structured filesystem mutation tool (`mkdir`, `move`, `copy`, `delete`) with explicit `recursive`/`force` safety gates and `EXDEV` move fallback (`copy + delete`)
+- **SDK/public exports for new tools** — exported factories, tool singletons, and typed input/options/details surfaces for `fetch`, `git_read`, and `fs_ops`
+
+### Changed
+
+- **Profile tool policy expansion** — `fetch` and `git_read` are now included in read-only exploration profiles; `fs_ops` is included in write-capable engineering profiles (`full`, `meta`, `iosm`)
+- **Dynamic `fetch` method policy by active profile** — read-only profiles (`explore`, `plan`, `iosm_analyst`) allow only `GET|HEAD|OPTIONS`; write-capable profiles allow full method set (`GET|POST|PUT|PATCH|DELETE|HEAD|OPTIONS`)
+- **Unified tool permission/pre-hook integration** — `fetch` and `fs_ops` now pass through the same session permission and pre-tool hook pipeline used by write-capable built-ins
+- **Mutation classification updates** — `fs_ops` is now classified as mutating in shadow guard and task write-capable tool checks
+
+### Documentation
+
+- Updated CLI help, system prompt tool guidance, and docs pages to include `fetch`, `git_read`, and `fs_ops` with usage/policy notes
+- Updated profile/tool tables and architecture snippets to reflect the expanded built-in tool layer
+
+### Tests
+
+- Added dedicated coverage for `fetch`, `git_read`, and `fs_ops`
+- Added regression assertions for profile membership, read-only/write-capable classification, shadow guard behavior, and CLI help/tool listings
+
+## [0.2.6] - 2026-03-14
+
+### Added
+
+- **Shared memory scope policy** — new `IOSM_SHARED_MEMORY_SCOPE_POLICY` environment variable (`legacy` / `warn` / `enforce`) controls how missing scope arguments are handled in `shared_memory_read` / `shared_memory_write`; `meta` profile automatically activates `warn` mode so omitted scopes surface a warning in tool output and details
+- **Shared memory usage analytics** — new `summarizeSharedMemoryUsage()` API aggregates write counts by scope, unique writers, unique keys, and per-task/delegate breakdown for observability in orchestrated runs
+- **Nested delegation detection** — `promptMetaWithParallelismGuard` now tracks `nestedDelegationMissing`: when top-level fan-out is satisfied but no nested delegates were observed for multi-stream tasks, the parallelism correction prompt and TUI warning fire explicitly
+- **Workstream semantic deduplication** — `semanticallyDeduplicateWorkstreamTitles()` uses Jaccard token similarity (threshold 0.82) to eliminate near-duplicate delegate workstream titles before dispatch
+- **Duplicate delegated section detection** — `detectDuplicateDelegatedSections()` compares normalized section bodies to catch copy-pasted or near-identical delegate blocks with ≥92% coverage overlap
+- **Workstream title uniquification** — `uniquifyWorkstreamTitles()` appends ordinal suffixes to disambiguate repeated titles in fan-out plans
+- **Coordination details in task tool output** — `TaskToolDetails` now surfaces a `coordination` object with `sharedMemoryWrites`, `currentTaskWrites`, `currentTaskDelegateWrites`, `runScopeWrites`, `taskScopeWrites`, `duplicatesDetected`, `claimKeysMatched`, and `claimCollisions` fields for post-run auditing
+- **Swarm progress shared memory integration** — TUI swarm progress reporter now reads `results/` prefix keys from shared memory to enrich per-task summary display with delegated totals
+
+### Changed
+
+- **META profile evidence policy** — `meta` profile system prompt and subagent task prompt now require that metrics (speedup, compliance scores, conflict counts) are backed only by observed runtime evidence; unknown values must be marked as `unknown` rather than inferred
+- **META profile artifact claims** — `meta` and meta-subagent prompts now prohibit claiming report files or artifacts exist unless they were produced in the current run or verified on disk
+- **`resolveScope` replaces `normalizeScope`** — shared memory tool's scope defaulting logic refactored into `resolveScope()` with policy-aware warning output and `enforce` mode that throws on missing explicit scope
+- **`completedTaskToolCalls` tracking** — parallelism guard now separately tracks completed (resolved) task calls so nested delegation assessment waits for actual task completion rather than firing prematurely on partial state
+
+### Fixed
+
+- **False nested-delegation compliance** — guard no longer silently passes when top-level fan-out count is met but zero nested delegates exist inside multi-stream tasks; correction prompt now fires
+- **Scope warning surface** — `shared_memory_write` and `shared_memory_read` tool results now include `scopePolicy` and `scopeWarning` in their `details` payload for agent-side introspection
+
+### Documentation
+
+- **README redesign** — complete rewrite with professional positioning, IOSM methodology section with 4-phase table and 6 metrics, architecture ASCII diagram, profile split into primary/specialist, integration modes with CI row, extensibility as runtime platform, accurate install/extension syntax from docs
+
 ## [0.2.5] - 2026-03-13
 
 ### Added