@harness-engineering/cli 1.20.0 → 1.21.0

package/dist/{chunk-YL4UHE52.js → chunk-TMSGI27F.js}

@@ -1,7 +1,7 @@
 import {
   detectEntropyDefinition,
   handleDetectEntropy
-} from "./chunk-4U4V7A6U.js";
+} from "./chunk-WXI5ONCU.js";
 import {
   checkPerformanceDefinition,
   getCriticalPathsDefinition,
@@ -11,7 +11,7 @@ import {
   handleGetPerfBaselines,
   handleUpdatePerfBaselines,
   updatePerfBaselinesDefinition
-} from "./chunk-PDEEQJHH.js";
+} from "./chunk-UVJFBKCX.js";
 import {
   analyzeDiffDefinition,
   createSelfReviewDefinition,
@@ -19,15 +19,15 @@ import {
   handleCreateSelfReview,
   handleRequestPeerReview,
   requestPeerReviewDefinition
-} from "./chunk-V73TEHIF.js";
+} from "./chunk-6GEYPBDU.js";
 import {
   handleRunSecurityScan,
   runSecurityScanDefinition
-} from "./chunk-LEWXD6PR.js";
+} from "./chunk-H6LXAH66.js";
 import {
   handleRunCodeReview,
   runCodeReviewDefinition
-} from "./chunk-45ZJPG24.js";
+} from "./chunk-L6LTNZQZ.js";
 import {
   GENERATED_HEADER_CLAUDE,
   GENERATED_HEADER_CODEX,
@@ -40,25 +40,25 @@ import {
 import {
   handleValidateProject,
   validateToolDefinition
-} from "./chunk-LVJ7SCD7.js";
+} from "./chunk-SPUK5W4W.js";
 import {
   loadGraphStore
 } from "./chunk-CZZXE6BL.js";
 import {
   checkDependenciesDefinition,
   handleCheckDependencies
-} from "./chunk-A33LHIRD.js";
+} from "./chunk-HUDEBSR2.js";
 import {
   resolveProjectConfig
 } from "./chunk-H7Y5CKTM.js";
 import {
   checkDocsDefinition,
   handleCheckDocs
-} from "./chunk-H6KZAGHZ.js";
+} from "./chunk-YF5ROTWR.js";
 import {
   TrackerConfigSchema,
   resolveConfig
-} from "./chunk-YDOGGQSF.js";
+} from "./chunk-SZ5TGZMI.js";
 import {
   resultToMcpResponse
 } from "./chunk-IDZNPTYD.js";
@@ -87,7 +87,7 @@ import {
   checkTaint,
   scanForInjection,
   writeTaint
-} from "./chunk-IC5CZSHF.js";
+} from "./chunk-YZYBQZVL.js";
 import {
   Err,
   Ok
@@ -150,6 +150,7 @@ function isDestructiveOperation(toolName, toolInput, workspaceRoot) {
 function wrapWithInjectionGuard(toolName, handler, options = {}) {
   const projectRoot = options.projectRoot ?? process.cwd();
   const sessionId = options.sessionId ?? "default";
+  const trustedOutput = options.trustedOutputTools?.has(toolName) ?? false;
   return async (input) => {
     try {
       const taintCheck = checkTaint(projectRoot, sessionId);
@@ -181,29 +182,31 @@ function wrapWithInjectionGuard(toolName, handler, options = {}) {
         }
       }
       const result = await handler(input);
-      const outputText = extractResultText(result);
-      if (outputText) {
-        const outputFindings = scanForInjection(outputText);
-        const actionableOutput = outputFindings.filter(
-          (f) => f.severity === "high" || f.severity === "medium"
-        );
-        if (actionableOutput.length > 0) {
-          writeTaint(
-            projectRoot,
-            sessionId,
-            `Injection pattern detected in MCP:${toolName} result`,
-            actionableOutput,
-            `MCP:${toolName}:output`
-          );
-          const warningLines = actionableOutput.map(
-            (f) => `Sentinel [${f.severity}] ${f.ruleId}: detected in ${toolName} output`
+      if (!trustedOutput) {
+        const outputText = extractResultText(result);
+        if (outputText) {
+          const outputFindings = scanForInjection(outputText);
+          const actionableOutput = outputFindings.filter(
+            (f) => f.severity === "high" || f.severity === "medium"
           );
-          result.content.push({
-            type: "text",
-            text: `
+          if (actionableOutput.length > 0) {
+            writeTaint(
+              projectRoot,
+              sessionId,
+              `Injection pattern detected in MCP:${toolName} result`,
+              actionableOutput,
+              `MCP:${toolName}:output`
+            );
+            const warningLines = actionableOutput.map(
+              (f) => `Sentinel [${f.severity}] ${f.ruleId}: detected in ${toolName} output`
+            );
+            result.content.push({
+              type: "text",
+              text: `
 ---
 Sentinel Warning: ${warningLines.join("; ")}`
-          });
+            });
+          }
         }
       }
       return result;
@@ -554,7 +557,7 @@ ${skippedMsg}`
 async function handleInitProject(input) {
   const i = input;
   try {
-    const { TemplateEngine } = await import("./engine-R5BZHIZB.js");
+    const { TemplateEngine } = await import("./engine-EOXMI5MD.js");
     const engine = new TemplateEngine(resolveTemplatesDir());
     const safePath = sanitizePath(i.path);
     const detected = tryDetectFramework(engine, safePath, i);
@@ -575,7 +578,7 @@ var listPersonasDefinition = {
   inputSchema: { type: "object", properties: {} }
 };
 async function handleListPersonas() {
-  const { listPersonas } = await import("./loader-2TBQUFWX.js");
+  const { listPersonas } = await import("./loader-7S4FYAPP.js");
   const result = listPersonas(resolvePersonasDir());
   return resultToMcpResponse(result);
 }
@@ -599,10 +602,10 @@ async function handleGeneratePersonaArtifacts(input) {
   if (!/^[a-z0-9][a-z0-9._-]*$/i.test(input.name)) {
     return resultToMcpResponse(Err(new Error(`Invalid persona name: ${input.name}`)));
   }
-  const { loadPersona } = await import("./loader-2TBQUFWX.js");
-  const { generateRuntime } = await import("./runtime-BN7KGJAO.js");
-  const { generateAgentsMd } = await import("./agents-md-WHXVPOK2.js");
-  const { generateCIWorkflow } = await import("./ci-workflow-HWX5OVLI.js");
+  const { loadPersona } = await import("./loader-7S4FYAPP.js");
+  const { generateRuntime } = await import("./runtime-XKOHGGRC.js");
+  const { generateAgentsMd } = await import("./agents-md-TDTLYAQU.js");
+  const { generateCIWorkflow } = await import("./ci-workflow-Z4IUJBZL.js");
   const personasDir = resolvePersonasDir();
   const filePath = path3.join(personasDir, `${input.name}.yaml`);
   if (!filePath.startsWith(personasDir)) {
@@ -657,7 +660,7 @@ async function handleRunPersona(input) {
   if (!/^[a-z0-9][a-z0-9._-]*$/i.test(input.persona)) {
     return resultToMcpResponse(Err(new Error(`Invalid persona name: ${input.persona}`)));
   }
-  const { loadPersona } = await import("./loader-2TBQUFWX.js");
+  const { loadPersona } = await import("./loader-7S4FYAPP.js");
   const { runPersona } = await import("./runner-VMYLHWOC.js");
   const { executeSkill } = await import("./skill-executor-XEVDGXUM.js");
   const personasDir = resolvePersonasDir();
@@ -839,13 +842,27 @@ var TIER_1_SKILLS = /* @__PURE__ */ new Set([
 function isTier1Skill(skillName) {
   return TIER_1_SKILLS.has(skillName);
 }
-function scoreSkill(entry, queryTerms, profile, recentFiles) {
+function scoreSkill(entry, queryTerms, profile, recentFiles, skillName) {
   const matchedKeywords = entry.keywords.filter(
     (kw) => queryTerms.some(
       (term) => kw.toLowerCase().includes(term.toLowerCase()) || term.toLowerCase().includes(kw.toLowerCase())
     )
   );
   const keywordScore = queryTerms.length > 0 ? matchedKeywords.length / queryTerms.length : 0;
+  let nameScore = 0;
+  if (skillName.length > 0 && queryTerms.length > 0) {
+    const nameSegments = skillName.toLowerCase().split("-").filter((s) => s.length > 2);
+    const matchedNameSegments = queryTerms.filter(
+      (term) => nameSegments.some((seg) => seg.includes(term) || term.includes(seg))
+    );
+    nameScore = matchedNameSegments.length / queryTerms.length;
+  }
+  let descScore = 0;
+  if (queryTerms.length > 0) {
+    const descLower = entry.description.toLowerCase();
+    const matchedDescTerms = queryTerms.filter((term) => descLower.includes(term));
+    descScore = matchedDescTerms.length / queryTerms.length;
+  }
   let stackScore = 0;
   if (profile && entry.stackSignals.length > 0) {
     const matchedSignals = entry.stackSignals.filter((signal) => {
@@ -859,19 +876,19 @@ function scoreSkill(entry, queryTerms, profile, recentFiles) {
   let recencyBoost = 0;
   if (recentFiles.length > 0) {
     const hasRecentMatch = entry.stackSignals.some((signal) => {
-      const cleanSignal = signal.replace(/\*/g, "").replace(/\*\*/g, "");
+      const cleanSignal = signal.replace(/\*/g, "");
       return recentFiles.some((f) => f.includes(cleanSignal));
     });
     recencyBoost = hasRecentMatch ? 1 : 0;
   }
-  return 0.5 * keywordScore + 0.3 * stackScore + 0.2 * recencyBoost;
+  return 0.35 * keywordScore + 0.2 * nameScore + 0.1 * descScore + 0.2 * stackScore + 0.15 * recencyBoost;
 }
 function suggest(index, taskDescription, profile, recentFiles, config) {
   const queryTerms = taskDescription.toLowerCase().split(/\s+/).filter((t) => t.length > 2);
   const scored = [];
   for (const [name, entry] of Object.entries(index.skills)) {
     if (config?.neverSuggest?.includes(name)) continue;
-    const score = scoreSkill(entry, queryTerms, profile, recentFiles);
+    const score = scoreSkill(entry, queryTerms, profile, recentFiles, name);
     const isForced = config?.alwaysSuggest?.includes(name);
     if (score >= 0.4 || isForced) {
       scored.push({
@@ -1275,7 +1292,7 @@ async function autoSyncRoadmap(projectPath) {
   try {
     const roadmapFile = path11.join(projectPath, "docs", "roadmap.md");
     if (!fs10.existsSync(roadmapFile)) return;
-    const { parseRoadmap, serializeRoadmap, syncRoadmap, applySyncChanges } = await import("./dist-WHL3NN5S.js");
+    const { parseRoadmap, serializeRoadmap, syncRoadmap, applySyncChanges } = await import("./dist-KV2ICL5X.js");
     const raw = fs10.readFileSync(roadmapFile, "utf-8");
     const parseResult = parseRoadmap(raw);
     if (!parseResult.ok) return;
@@ -1302,7 +1319,7 @@ async function triggerExternalSync(projectPath, roadmapFile) {
     }
     const token = process.env.GITHUB_TOKEN;
     if (!token) return;
-    const { fullSync, GitHubIssuesSyncAdapter } = await import("./dist-WHL3NN5S.js");
+    const { fullSync, GitHubIssuesSyncAdapter } = await import("./dist-KV2ICL5X.js");
     const adapter = new GitHubIssuesSyncAdapter({
       token,
       config: trackerConfig
@@ -1414,12 +1431,12 @@ var manageStateDefinition = {
   }
 };
 async function handleShow(projectPath, input) {
-  const { loadState } = await import("./dist-WHL3NN5S.js");
+  const { loadState } = await import("./dist-KV2ICL5X.js");
   return resultToMcpResponse(await loadState(projectPath, input.stream, input.session));
 }
 async function handleLearn(projectPath, input) {
   if (!input.learning) return mcpError("Error: learning is required for learn action");
-  const { appendLearning } = await import("./dist-WHL3NN5S.js");
+  const { appendLearning } = await import("./dist-KV2ICL5X.js");
   const result = await appendLearning(
     projectPath,
     input.learning,
@@ -1434,7 +1451,7 @@ async function handleLearn(projectPath, input) {
 async function handleFailure(projectPath, input) {
   if (!input.description) return mcpError("Error: description is required for failure action");
   if (!input.failureType) return mcpError("Error: failureType is required for failure action");
-  const { appendFailure } = await import("./dist-WHL3NN5S.js");
+  const { appendFailure } = await import("./dist-KV2ICL5X.js");
   const result = await appendFailure(
     projectPath,
     input.description,
@@ -1447,24 +1464,24 @@ async function handleFailure(projectPath, input) {
   return resultToMcpResponse(Ok({ recorded: true }));
 }
 async function handleArchive(projectPath, input) {
-  const { archiveFailures } = await import("./dist-WHL3NN5S.js");
+  const { archiveFailures } = await import("./dist-KV2ICL5X.js");
   const result = await archiveFailures(projectPath, input.stream, input.session);
   if (!result.ok) return resultToMcpResponse(result);
   return resultToMcpResponse(Ok({ archived: true }));
 }
 async function handleReset(projectPath, input) {
-  const { saveState, DEFAULT_STATE } = await import("./dist-WHL3NN5S.js");
+  const { saveState, DEFAULT_STATE } = await import("./dist-KV2ICL5X.js");
   const result = await saveState(projectPath, { ...DEFAULT_STATE }, input.stream, input.session);
   if (!result.ok) return resultToMcpResponse(result);
   return resultToMcpResponse(Ok({ reset: true }));
 }
 async function handleGate(projectPath, _input) {
-  const { runMechanicalGate } = await import("./dist-WHL3NN5S.js");
+  const { runMechanicalGate } = await import("./dist-KV2ICL5X.js");
   return resultToMcpResponse(await runMechanicalGate(projectPath));
 }
 async function handleSaveHandoff(projectPath, input) {
   if (!input.handoff) return mcpError("Error: handoff is required for save-handoff action");
-  const { saveHandoff } = await import("./dist-WHL3NN5S.js");
+  const { saveHandoff } = await import("./dist-KV2ICL5X.js");
   const result = await saveHandoff(
     projectPath,
     input.handoff,
@@ -1476,7 +1493,7 @@ async function handleSaveHandoff(projectPath, input) {
   return resultToMcpResponse(Ok({ saved: true }));
 }
 async function handleLoadHandoff(projectPath, input) {
-  const { loadHandoff } = await import("./dist-WHL3NN5S.js");
+  const { loadHandoff } = await import("./dist-KV2ICL5X.js");
   return resultToMcpResponse(await loadHandoff(projectPath, input.stream, input.session));
 }
 async function handleAppendEntry(projectPath, input) {
@@ -1484,7 +1501,7 @@ async function handleAppendEntry(projectPath, input) {
   if (!input.section) return mcpError("Error: section is required for append_entry action");
   if (!input.authorSkill) return mcpError("Error: authorSkill is required for append_entry action");
   if (!input.content) return mcpError("Error: content is required for append_entry action");
-  const { appendSessionEntry } = await import("./dist-WHL3NN5S.js");
+  const { appendSessionEntry } = await import("./dist-KV2ICL5X.js");
   const result = await appendSessionEntry(
     projectPath,
     input.session,
@@ -1500,7 +1517,7 @@ async function handleUpdateEntryStatus(projectPath, input) {
   if (!input.entryId) return mcpError("Error: entryId is required for update_entry_status action");
   if (!input.newStatus)
     return mcpError("Error: newStatus is required for update_entry_status action");
-  const { updateSessionEntryStatus } = await import("./dist-WHL3NN5S.js");
+  const { updateSessionEntryStatus } = await import("./dist-KV2ICL5X.js");
   const result = await updateSessionEntryStatus(
     projectPath,
     input.session,
@@ -1513,7 +1530,7 @@ async function handleUpdateEntryStatus(projectPath, input) {
 async function handleReadSection(projectPath, input) {
   if (!input.session) return mcpError("Error: session is required for read_section action");
   if (!input.section) return mcpError("Error: section is required for read_section action");
-  const { readSessionSection } = await import("./dist-WHL3NN5S.js");
+  const { readSessionSection } = await import("./dist-KV2ICL5X.js");
   const result = await readSessionSection(
     projectPath,
     input.session,
@@ -1523,13 +1540,13 @@ async function handleReadSection(projectPath, input) {
 }
 async function handleReadSections(projectPath, input) {
   if (!input.session) return mcpError("Error: session is required for read_sections action");
-  const { readSessionSections } = await import("./dist-WHL3NN5S.js");
+  const { readSessionSections } = await import("./dist-KV2ICL5X.js");
   const result = await readSessionSections(projectPath, input.session);
   return resultToMcpResponse(result);
 }
 async function handleArchiveSession(projectPath, input) {
   if (!input.session) return mcpError("Error: session is required for archive_session action");
-  const { archiveSession } = await import("./dist-WHL3NN5S.js");
+  const { archiveSession } = await import("./dist-KV2ICL5X.js");
   const result = await archiveSession(projectPath, input.session);
   if (!result.ok) return resultToMcpResponse(result);
   await autoSyncRoadmap(projectPath);
@@ -1593,7 +1610,7 @@ var listStreamsDefinition = {
 };
 async function handleListStreams(input) {
   try {
-    const { listStreams, loadStreamIndex } = await import("./dist-WHL3NN5S.js");
+    const { listStreams, loadStreamIndex } = await import("./dist-KV2ICL5X.js");
     const projectPath = sanitizePath(input.path);
     const indexResult = await loadStreamIndex(projectPath);
     const streamsResult = await listStreams(projectPath);
@@ -1631,7 +1648,7 @@ var checkPhaseGateDefinition = {
 };
 async function handleCheckPhaseGate(input) {
   try {
-    const { runCheckPhaseGate } = await import("./check-phase-gate-2VXVOUJ5.js");
+    const { runCheckPhaseGate } = await import("./check-phase-gate-I4NQOCSU.js");
     const result = await runCheckPhaseGate({ cwd: sanitizePath(input.path) });
     if (result.ok) {
       return { content: [{ type: "text", text: JSON.stringify(result.value) }] };
@@ -1687,7 +1704,7 @@ async function handleValidateCrossCheck(input) {
     };
   }
   try {
-    const { runCrossCheck } = await import("./validate-cross-check-76Z5P6EX.js");
+    const { runCrossCheck } = await import("./validate-cross-check-PFRKABCS.js");
     const specsDir = path12.resolve(projectPath, input.specsDir ?? "docs/specs");
     if (!specsDir.startsWith(projectPath)) {
       return {
@@ -2332,7 +2349,7 @@ async function handleGenerateSlashCommands(input) {
 // src/mcp/resources/state.ts
 async function getStateResource(projectRoot) {
   try {
-    const { loadState, migrateToStreams } = await import("./dist-WHL3NN5S.js");
+    const { loadState, migrateToStreams } = await import("./dist-KV2ICL5X.js");
     await migrateToStreams(projectRoot);
     const result = await loadState(projectRoot);
     if (result.ok) {
@@ -3151,7 +3168,7 @@ var generateAgentDefinitionsDefinition = {
   }
 };
 async function handleGenerateAgentDefinitions(input) {
-  const { generateAgentDefinitions } = await import("./generate-agent-definitions-LN3A45OL.js");
+  const { generateAgentDefinitions } = await import("./generate-agent-definitions-QICSCGXB.js");
   const platforms = input.platform === "all" || !input.platform ? ["claude-code", "gemini-cli"] : [input.platform];
   const results = generateAgentDefinitions({
     platforms: [...platforms],
@@ -3448,7 +3465,7 @@ function handleSync(projectPath, input, deps) {
 }
 async function handleManageRoadmap(input) {
   try {
-    const { parseRoadmap, serializeRoadmap, syncRoadmap, applySyncChanges } = await import("./dist-WHL3NN5S.js");
+    const { parseRoadmap, serializeRoadmap, syncRoadmap, applySyncChanges } = await import("./dist-KV2ICL5X.js");
     const { Ok: Ok2 } = await import("./dist-USY2C5JL.js");
     const projectPath = sanitizePath(input.path);
     const deps = { parseRoadmap, serializeRoadmap, syncRoadmap, applySyncChanges, Ok: Ok2 };
@@ -3834,6 +3851,20 @@ var emitInteractionDefinition = {
     required: ["path", "type"]
   }
 };
+function dualContent(prompt, metadata) {
+  return [
+    {
+      type: "text",
+      text: prompt,
+      annotations: { audience: ["user", "assistant"], priority: 1 }
+    },
+    {
+      type: "text",
+      text: JSON.stringify(metadata),
+      annotations: { audience: ["assistant"], priority: 0.2 }
+    }
+  ];
+}
 function formatZodErrors(issues) {
   return issues.map((i) => i.path.length > 0 ? `${i.path.join(".")}: ${i.message}` : i.message).join("; ");
 }
@@ -3845,7 +3876,7 @@ async function handleQuestion(validInput, projectPath, id) {
     return mcpError(`Error: ${formatZodErrors(questionResult.error.issues)}`);
   const prompt = renderQuestion(questionResult.data);
   await recordInteraction(projectPath, id, "question", questionResult.data.text, validInput.stream);
-  return { content: [{ type: "text", text: JSON.stringify({ id, prompt }) }] };
+  return { content: dualContent(prompt, { id }) };
 }
 async function handleConfirmation(validInput, projectPath, id) {
   if (!validInput.confirmation)
@@ -3863,7 +3894,7 @@ async function handleConfirmation(validInput, projectPath, id) {
     confirmResult.data.text,
     validInput.stream
   );
-  return { content: [{ type: "text", text: JSON.stringify({ id, prompt }) }] };
+  return { content: dualContent(prompt, { id }) };
 }
 async function handleTransition(validInput, projectPath, id) {
   if (!validInput.transition)
@@ -3876,7 +3907,7 @@ async function handleTransition(validInput, projectPath, id) {
   const transition = transitionResult.data;
   const prompt = renderTransition(transition);
   try {
-    const { saveHandoff } = await import("./dist-WHL3NN5S.js");
+    const { saveHandoff } = await import("./dist-KV2ICL5X.js");
     await saveHandoff(
       projectPath,
       {
@@ -3903,12 +3934,12 @@ async function handleTransition(validInput, projectPath, id) {
     `${transition.completedPhase} -> ${transition.suggestedNext}`,
     validInput.stream
   );
-  const responsePayload = { id, prompt, handoffWritten: true };
+  const metadata = { id, handoffWritten: true };
   if (!transition.requiresConfirmation) {
-    responsePayload.autoTransition = true;
-    responsePayload.nextAction = `Invoke harness-${transition.suggestedNext} skill now`;
+    metadata.autoTransition = true;
+    metadata.nextAction = `Invoke harness-${transition.suggestedNext} skill now`;
   }
-  return { content: [{ type: "text", text: JSON.stringify(responsePayload) }] };
+  return { content: dualContent(prompt, metadata) };
 }
 async function handleBatch(validInput, projectPath, id) {
   if (!validInput.batch) return mcpError("Error: batch payload is required when type is batch");
@@ -3919,9 +3950,7 @@ async function handleBatch(validInput, projectPath, id) {
     );
   const prompt = renderBatch(batchResult.data);
   await recordInteraction(projectPath, id, "batch", batchResult.data.text, validInput.stream);
-  return {
-    content: [{ type: "text", text: JSON.stringify({ id, prompt, batchMode: true }) }]
-  };
+  return { content: dualContent(prompt, { id, batchMode: true }) };
 }
 var INTERACTION_HANDLERS = {
   question: handleQuestion,
@@ -3946,7 +3975,7 @@ async function handleEmitInteraction(input) {
 }
 async function recordInteraction(projectPath, id, type, decision, stream) {
   try {
-    const { loadState, saveState } = await import("./dist-WHL3NN5S.js");
+    const { loadState, saveState } = await import("./dist-KV2ICL5X.js");
     const stateResult = await loadState(projectPath, stream);
     if (stateResult.ok) {
       const state = stateResult.value;
@@ -4035,10 +4064,10 @@ async function handleGatherContext(input) {
     input.include ?? ["state", "learnings", "handoff", "graph", "validation"]
   );
   const errors = [];
-  const statePromise = includeSet.has("state") ? import("./dist-WHL3NN5S.js").then(
+  const statePromise = includeSet.has("state") ? import("./dist-KV2ICL5X.js").then(
     (core) => core.loadState(projectPath, void 0, input.session)
   ) : Promise.resolve(null);
-  const learningsPromise = includeSet.has("learnings") ? import("./dist-WHL3NN5S.js").then(
+  const learningsPromise = includeSet.has("learnings") ? import("./dist-KV2ICL5X.js").then(
     (core) => core.loadBudgetedLearnings(projectPath, {
       intent: input.intent,
       tokenBudget: input.learningsBudget ?? 1e3,
@@ -4047,7 +4076,7 @@ async function handleGatherContext(input) {
       ...input.depth !== void 0 && { depth: input.depth }
     })
   ) : Promise.resolve(null);
-  const handoffPromise = includeSet.has("handoff") ? import("./dist-WHL3NN5S.js").then(
+  const handoffPromise = includeSet.has("handoff") ? import("./dist-KV2ICL5X.js").then(
     (core) => core.loadHandoff(projectPath, void 0, input.session)
   ) : Promise.resolve(null);
   const graphPromise = includeSet.has("graph") ? (async () => {
@@ -4091,11 +4120,11 @@ async function handleGatherContext(input) {
       context: contextBlocks
     };
   })() : Promise.resolve(null);
-  const sessionsPromise = includeSet.has("sessions") && input.session ? import("./dist-WHL3NN5S.js").then(
+  const sessionsPromise = includeSet.has("sessions") && input.session ? import("./dist-KV2ICL5X.js").then(
     (core) => core.readSessionSections(projectPath, input.session)
   ) : Promise.resolve(null);
   const shouldIncludeEvents = input.includeEvents !== void 0 ? input.includeEvents : includeSet.has("events") || !!input.session && !input.include;
-  const eventsPromise = shouldIncludeEvents ? import("./dist-WHL3NN5S.js").then(async (core) => {
+  const eventsPromise = shouldIncludeEvents ? import("./dist-KV2ICL5X.js").then(async (core) => {
     const result = await core.loadEvents(projectPath, {
       session: input.session
     });
@@ -4103,7 +4132,7 @@ async function handleGatherContext(input) {
     return core.formatEventTimeline(result.value);
   }) : Promise.resolve(null);
   const validationPromise = includeSet.has("validation") ? (async () => {
-    const { handleValidateProject: handleValidateProject2 } = await import("./validate-R5WGB2AV.js");
+    const { handleValidateProject: handleValidateProject2 } = await import("./validate-VHFE6J6O.js");
     const result = await handleValidateProject2({ path: projectPath });
     const first = result.content[0];
     return first ? JSON.parse(first.text) : null;
@@ -4197,7 +4226,7 @@ async function handleGatherContext(input) {
   };
   if (input.session) {
     try {
-      const core = await import("./dist-WHL3NN5S.js");
+      const core = await import("./dist-KV2ICL5X.js");
       core.updateSessionIndex(
         projectPath,
         input.session,
@@ -4267,7 +4296,7 @@ async function handleAssessProject(input) {
   let validateResult = null;
   if (checksToRun.has("validate")) {
     try {
-      const { handleValidateProject: handleValidateProject2 } = await import("./validate-R5WGB2AV.js");
+      const { handleValidateProject: handleValidateProject2 } = await import("./validate-VHFE6J6O.js");
       const result = await handleValidateProject2({ path: projectPath });
       const first = result.content[0];
       const parsed = first ? JSON.parse(first.text) : {};
@@ -4292,7 +4321,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleCheckDependencies: handleCheckDependencies2 } = await import("./architecture-45YCLD26.js");
+          const { handleCheckDependencies: handleCheckDependencies2 } = await import("./architecture-NANP4XPE.js");
           const result = await handleCheckDependencies2({ path: projectPath });
           const first = result.content[0];
           const parsed = first ? JSON.parse(first.text) : {};
@@ -4319,7 +4348,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleCheckDocs: handleCheckDocs2 } = await import("./docs-FJFY7GF2.js");
+          const { handleCheckDocs: handleCheckDocs2 } = await import("./docs-2PCZVSGB.js");
           const result = await handleCheckDocs2({ path: projectPath, scope: "coverage" });
           const first = result.content[0];
           const parsed = first ? JSON.parse(first.text) : {};
@@ -4346,7 +4375,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleDetectEntropy: handleDetectEntropy2 } = await import("./entropy-Y2GE4MYS.js");
+          const { handleDetectEntropy: handleDetectEntropy2 } = await import("./entropy-VGXXBIGX.js");
           const result = await handleDetectEntropy2({ path: projectPath, type: "all" });
           const first = result.content[0];
           const parsed = first ? JSON.parse(first.text) : {};
@@ -4373,7 +4402,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleRunSecurityScan: handleRunSecurityScan2 } = await import("./security-3T4JGDZP.js");
+          const { handleRunSecurityScan: handleRunSecurityScan2 } = await import("./security-NLWTMK3G.js");
           const result = await handleRunSecurityScan2({ path: projectPath });
           const first = result.content[0];
           const parsed = first ? JSON.parse(first.text) : {};
@@ -4405,7 +4434,7 @@ async function handleAssessProject(input) {
     parallelChecks.push(
       (async () => {
         try {
-          const { handleCheckPerformance: handleCheckPerformance2 } = await import("./performance-BSOMMWK5.js");
+          const { handleCheckPerformance: handleCheckPerformance2 } = await import("./performance-RV4DUMFI.js");
           const result = await handleCheckPerformance2({ path: projectPath });
           if ("isError" in result && result.isError) {
             const msg = result.content[0]?.text ?? "Performance check failed";
@@ -4608,7 +4637,7 @@ async function handleReviewChanges(input) {
   }
 }
 async function runQuickReview(projectPath, diff, diffLines, downgraded) {
-  const { handleAnalyzeDiff: handleAnalyzeDiff2 } = await import("./feedback-FKZ7GMPO.js");
+  const { handleAnalyzeDiff: handleAnalyzeDiff2 } = await import("./feedback-VTSPL3O7.js");
   const result = await handleAnalyzeDiff2({ diff, path: projectPath });
   const firstContent = result.content[0];
   if (!firstContent) throw new Error("Empty analyze_diff response");
@@ -4639,7 +4668,7 @@ function extractFileCount(diffParsed) {
   return files?.length ?? 0;
 }
 async function runStandardReview(projectPath, diff, diffLines, downgraded) {
-  const { handleAnalyzeDiff: handleAnalyzeDiff2, handleCreateSelfReview: handleCreateSelfReview2 } = await import("./feedback-FKZ7GMPO.js");
+  const { handleAnalyzeDiff: handleAnalyzeDiff2, handleCreateSelfReview: handleCreateSelfReview2 } = await import("./feedback-VTSPL3O7.js");
   const [diffResult, reviewResult] = await Promise.all([
     handleAnalyzeDiff2({ diff, path: projectPath }),
     handleCreateSelfReview2({ path: projectPath, diff })
@@ -4671,7 +4700,7 @@ async function runStandardReview(projectPath, diff, diffLines, downgraded) {
   };
 }
 async function runDeepReview(projectPath, diff, diffLines, _downgraded) {
-  const { handleRunCodeReview: handleRunCodeReview2 } = await import("./review-pipeline-KUBHP3RV.js");
+  const { handleRunCodeReview: handleRunCodeReview2 } = await import("./review-pipeline-7KQJB4SI.js");
   const result = await handleRunCodeReview2({ path: projectPath, diff });
   const deepContent = result.content[0];
   if (!deepContent) throw new Error("Empty code review response");
@@ -4957,7 +4986,7 @@ async function handleDetectStaleConstraints(input) {
         ]
       };
     }
-    const { detectStaleConstraints } = await import("./dist-WHL3NN5S.js");
+    const { detectStaleConstraints } = await import("./dist-KV2ICL5X.js");
     const result = detectStaleConstraints(
       store,
       windowDays,
@@ -4987,7 +5016,7 @@ async function handleDetectStaleConstraints(input) {
 // src/mcp/tools/search-skills.ts
 var searchSkillsDefinition = {
   name: "search_skills",
-  description: "Search the skill catalog for domain-specific skills. Returns ranked results based on keyword and stack-signal matching. Use this to discover catalog skills that are not loaded as slash commands.",
+  description: "Search the skill catalog for domain-specific skills. Returns ranked results based on keyword, name, description, and stack-signal matching. Use this to discover catalog skills that are not loaded as slash commands.",
   inputSchema: {
     type: "object",
     properties: {
@@ -5019,18 +5048,7 @@ async function handleSearchSkills(input) {
   const queryTerms = query.toLowerCase().split(/\s+/).filter((t) => t.length > 2);
   const results = [];
   for (const [name, entry] of Object.entries(index.skills)) {
-    const matchedKeywords = entry.keywords.filter(
-      (kw) => queryTerms.some(
-        (term) => kw.toLowerCase().includes(term.toLowerCase()) || term.toLowerCase().includes(kw.toLowerCase())
-      )
-    );
-    const keywordScore = queryTerms.length > 0 ? matchedKeywords.length / queryTerms.length : 0;
-    let stackScore = 0;
-    if (entry.stackSignals.length > 0) {
-      const matchedSignals = entry.stackSignals.filter((signal) => profile.signals[signal]);
-      stackScore = matchedSignals.length / entry.stackSignals.length;
-    }
-    const score = 0.6 * keywordScore + 0.4 * stackScore;
+    const score = scoreSkill(entry, queryTerms, profile, [], name);
     if (score > 0 || queryTerms.length === 0) {
       results.push({
         name,
@@ -5089,7 +5107,7 @@ async function handleCodeOutline(input) {
     };
   }
   try {
-    const { getOutline, formatOutline, EXTENSION_MAP } = await import("./dist-WHL3NN5S.js");
+    const { getOutline, formatOutline, EXTENSION_MAP } = await import("./dist-KV2ICL5X.js");
     const { stat } = await import("fs/promises");
     const stats = await stat(targetPath).catch(() => null);
     if (stats?.isFile()) {
@@ -5169,7 +5187,7 @@ async function handleCodeSearch(input) {
     };
   }
   try {
-    const { searchSymbols } = await import("./dist-WHL3NN5S.js");
+    const { searchSymbols } = await import("./dist-KV2ICL5X.js");
     const result = await searchSymbols(input.query, directory, input.glob);
     const lines = [`Search: "${result.query}" \u2014 ${result.matches.length} matches`];
     for (const match of result.matches) {
@@ -5238,7 +5256,7 @@ async function handleCodeUnfold(input) {
   }
   try {
     if (input.symbol) {
-      const { unfoldSymbol } = await import("./dist-WHL3NN5S.js");
+      const { unfoldSymbol } = await import("./dist-KV2ICL5X.js");
       const result = await unfoldSymbol(filePath, input.symbol);
       const header = result.warning ? `${result.file}:${result.startLine}-${result.endLine} ${result.warning}
 ` : `${result.file}:${result.startLine}-${result.endLine}
@@ -5246,7 +5264,7 @@ async function handleCodeUnfold(input) {
       return { content: [{ type: "text", text: header + result.content }] };
     }
     if (input.startLine != null && input.endLine != null) {
-      const { unfoldRange } = await import("./dist-WHL3NN5S.js");
+      const { unfoldRange } = await import("./dist-KV2ICL5X.js");
       const result = await unfoldRange(filePath, input.startLine, input.endLine);
       const header = `${result.file}:${result.startLine}-${result.endLine}
 `;
@@ -5325,7 +5343,7 @@ var TOOL_DEFINITIONS = [
   codeOutlineDefinition,
   codeSearchDefinition,
   codeUnfoldDefinition
-];
+].map((def) => ({ ...def, trustedOutput: true }));
 var TOOL_HANDLERS = {
   validate_project: handleValidateProject,
   check_dependencies: handleCheckDependencies,
@@ -5461,7 +5479,7 @@ async function appendUpdateNotification(result, resolvedRoot) {
       shouldRunCheck,
       readCheckState,
       spawnBackgroundCheck
-    } = await import("./dist-WHL3NN5S.js");
+    } = await import("./dist-KV2ICL5X.js");
     const { CLI_VERSION } = await import("./version-KFFPOQAX.js");
     const configInterval = readConfigInterval(resolvedRoot);
     const DEFAULT_INTERVAL = 864e5;
@@ -5493,7 +5511,13 @@ function createHarnessServer(projectRoot, toolFilter) {
   server.setRequestHandler(ListToolsRequestSchema, async () => ({
     tools: filteredDefinitions
   }));
-  const guardedHandlers = applyInjectionGuard(filteredHandlers, { projectRoot: resolvedRoot });
+  const trustedOutputTools = new Set(
+    filteredDefinitions.filter((t) => t.trustedOutput === true).map((t) => t.name)
+  );
+  const guardedHandlers = applyInjectionGuard(filteredHandlers, {
+    projectRoot: resolvedRoot,
+    trustedOutputTools
+  });
   server.setRequestHandler(CallToolRequestSchema, async (request) => {
     const { name, arguments: args } = request.params;
     const handler = guardedHandlers[name];