- Supports Deno 2.7+ as an explicit alternate host for the published CLI while keeping Node 24+ as the default for installed binaries.
- Verifies the packed package under Deno across
.js,.mjs,.ts, and.mtscommands, including arguments, environment, working directory, and nonzero exit propagation. - Provisions Deno in generated CI and publishes the runtime security contract as a dedicated Pages document.
- Walks
.clioverlays from the caller's working directory to the filesystem root, nearest first, before falling back to the user-global command tree. - Continues past namespace-only overlays until a runnable command is found, while preserving nearer runnable-prefix shadowing.
- Uses the nearest existing local overlay for command lifecycle operations,
falling back to
ASYNC_CLI_PROJECT_ROOTor the caller's working directory without requiring a Git root. - Defines
CLI_PROJECT_ROOTfrom the explicit override or the command overlay's owner, with the nearest local owner or caller directory for global commands. - Removes the bundled MCP server,
cli --mcp,runMcpServer, andMcpIo.cli --list --jsonremains the machine-readable command discovery surface.
- Covers symlinked file and directory contents in local-overlay trust hashes,
includes symlinked
.cliroot identity, and rejects cyclic directory links. - Rechecks the resolved local overlay immediately before MCP command execution.
- Documents the trusted-client boundary for the local MCP stdio server.
- Updates the Pipeline devDependency to
@async/pipeline@0.9.35; regenerated workflows now pinasync/actions@v0.1.24and@async/release@v0.1.6. - Adds the generated
dependency-bumpreceiver job (sync.github.dependencyBump) soasync-dep-bumpdispatches from the pipeline release update train bump the pinned dependency, regenerate synced surfaces, verify withrelease:check, and land onmainor open a pull request on failure. - Documents the pipeline-generated CI, Pages, preview, and release automation in README.md and AGENTS.md.
- Exports
CommandList,CreateCommandResult, andMoveCommandResultfrom the root package type surface. - Includes
API_SURFACE.mdandROUTING.mdin the published package and generated Pages documentation.
- Adds a direnv-style trust model for repo-local overlays:
cli --trust,cli --untrust,cli --trust --status, content-hash validation, exit 3 on untrusted or changed overlays, andASYNC_CLI_TRUST=offfor controlled environments. CLI mutations (--new,--cp/--mv --to local,--add --to local) record or refresh trust for the target overlay. - Adds shell completions:
cli --completions bash|zsh|fishand the hiddencli --completehelper that completes command segments and built-in flags. - Adds
cli --edit <cmd...>to open the resolved script in$VISUAL/$EDITORandcli --rm <cmd...> [--root] [--force]with nested-command protection and empty-parent pruning. - Adds
--new --template <name>, copying command templates from_templates/in any command root, nearest-local first. - Adds the
// cli-cwd: caller|project-root|script-dirpragma plus aCLI_CALLER_CWDenvironment value for scripts. - Adds
cli --doctor [--json]: audits ambiguous script directories, escaping imports, empty command directories, trust state, descriptions, shadowing, and managed context-block drift. - Adds
cli --mcp, a zero-dependency MCP stdio server that exposes the command tree as tools (gh pullbecomesgh__pull), excluding untrusted local overlays. - Adds command packs:
cli --add <git-url> [--to root|local] [--prefix <name>] [--force]installs.cli/trees from any Git source. - Exports
removeCommand,addPack,runDoctor,complete,completionScript,runMcpServer, and the trust helpers from the root export.
- Adds
cli --cp <command...> [--to root|local]andcopyCommand()for non-destructive command directory transfers between local and user-global command trees.
- Pins generated workflows to the publish action that repairs scoped package public access before registry verification.
- Updates the Pipeline devDependency used to generate committed workflow files.
- Normalizes binary paths to match npm package metadata.
- Initial package scaffold for
@async/cli. - Declares
cliandasync-clibinaries. - Adds maintainer local-link scripts for checkout-backed binaries.
- Adds the accepted filesystem router v1 spec, package docs, build harness, and scaffold tests.