@iowarp/clio-coder 0.4.8 → 0.4.9

package/dist/{chunk-RKFNU5UA.js → chunk-QI72X67S.js}

@@ -1,34 +1,52 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   runVectorTool
-} from "./chunk-MEHBW2SP.js";
+} from "./chunk-YQYINEJI.js";
 import {
   PROJECT_VERIFIER_CATALOG_RELATIVE_PATH,
-  compareNumeric,
+  capturePerfEnvironment,
   evaluatePerfBudget,
   loadProjectVerifierCatalog,
   packageDeclaredCheck,
-  parseNumericPayload,
   parsePerfBaseline,
-  renderNumericReport,
   renderPerfBaseline,
   resolveProjectVerifierExecutionCwd
-} from "./chunk-5C2OQHLR.js";
+} from "./chunk-H72DCH3E.js";
+import {
+  compareNumeric,
+  parseNumericPayload,
+  renderNumericReport
+} from "./chunk-2KUBKL63.js";
 import {
   declaredVerificationScripts
 } from "./chunk-M4KFUXS7.js";
 import {
   resolveSafeCwd,
   runCommandVector
-} from "./chunk-GJ24ODAX.js";
+} from "./chunk-XTQ7MEJG.js";
 import {
   init_esm_shims
 } from "./chunk-ECBHH7LU.js";
 
 // src/tools/verify/scripts.ts
 init_esm_shims();
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { createHash } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
 import path from "node:path";
+var JUDGED_CHECK_MAX_OUTPUT_BYTES = 32 * 1024 * 1024;
+var SCIENTIFIC_VALIDITY_NOT_ESTABLISHED = "not established by this check";
+function sha256(text) {
+  return createHash("sha256").update(text).digest("hex");
+}
+function executionOutcome(result) {
+  if (result.aborted) return "aborted";
+  if (result.timedOut) return "timed-out";
+  if (result.outputCapped) return "output-capped";
+  return result.exitCode === 0 ? "succeeded" : "failed";
+}
+function judgement(execution, validation) {
+  return { execution, validation, scientificValidity: SCIENTIFIC_VALIDITY_NOT_ESTABLISHED };
+}
 function repositoryRelativeCwd(workspaceRoot, resolved) {
   const relative = path.relative(workspaceRoot, resolved);
   return relative.length === 0 ? "." : relative.split(path.sep).join("/");
@@ -174,11 +192,25 @@ function listChecks(cwdArg) {
     details: { sources: clonedSources(discovery.sources) }
   };
 }
+function withCommandJudgement(result) {
+  const details = result.details ?? {};
+  if (details.judgement !== void 0) return result;
+  if (!Object.hasOwn(details, "exitCode")) return result;
+  const execution = executionOutcome({
+    aborted: details.aborted === true,
+    timedOut: details.timedOut === true,
+    outputCapped: details.outputCapped === true,
+    exitCode: typeof details.exitCode === "number" ? details.exitCode : null
+  });
+  const validation = execution === "succeeded" || execution === "failed" ? "exit-code" : "not-run";
+  return { ...result, details: { ...details, judgement: judgement(execution, validation) } };
+}
 function withDeclaredEvidence(result, check) {
+  const judged = check.kind === "command" ? withCommandJudgement(result) : result;
   return {
-    ...result,
+    ...judged,
     details: {
-      ...result.details,
+      ...judged.details,
       action: "verify",
       check: check.id,
       kind: check.kind,
@@ -211,25 +243,46 @@ function readCheckFile(workspaceRoot, relative, label) {
   }
   if (!existsSync(resolved)) return new Error(`${label} '${relative}' does not exist`);
   try {
+    const { size } = statSync(resolved);
+    if (size > JUDGED_CHECK_MAX_OUTPUT_BYTES) {
+      return new Error(`${label} '${relative}' exceeds the ${JUDGED_CHECK_MAX_OUTPUT_BYTES}-byte cap (${size} bytes)`);
+    }
     return readFileSync(resolved, "utf8");
   } catch (error) {
     return new Error(`${label} '${relative}' cannot be read (${error instanceof Error ? error.message : String(error)})`);
   }
 }
-function judgeNumericTexts(stdout, referenceText, tolerance, referenceLabel) {
+function judgeNumericTexts(stdout, referenceText, tolerance, referenceLabel, referencePath) {
   const reference = parseNumericPayload(referenceText, referenceLabel);
   if (reference instanceof Error) return reference;
-  const actual = parseNumericPayload(extractNumericPayloadText(stdout), "command output");
+  const payloadText = extractNumericPayloadText(stdout);
+  const actual = parseNumericPayload(payloadText, "command output");
   if (actual instanceof Error) return actual;
-  return compareNumeric(actual, reference, tolerance);
+  return {
+    ...compareNumeric(actual, reference, tolerance),
+    reference: {
+      source: referenceLabel,
+      ...referencePath !== void 0 ? { path: referencePath } : {},
+      sha256: sha256(referenceText),
+      bytes: Buffer.byteLength(referenceText, "utf8")
+    },
+    actual: { sha256: sha256(payloadText), bytes: Buffer.byteLength(payloadText, "utf8") }
+  };
 }
 function judgeNumericCompare(stdout, numeric, workspaceRoot) {
   const referenceText = readCheckFile(workspaceRoot, numeric.reference, "reference");
   if (referenceText instanceof Error) return referenceText;
-  return judgeNumericTexts(stdout, referenceText, numeric.tolerance, `reference '${numeric.reference}'`);
+  return judgeNumericTexts(
+    stdout,
+    referenceText,
+    numeric.tolerance,
+    `reference '${numeric.reference}'`,
+    numeric.reference
+  );
 }
-function judgePerfTexts(measuredMs, perf, baselineText, baselineLabel) {
+function judgePerfTexts(measuredMs, perf, baselineText, baselineLabel, options = {}) {
   let baseline;
+  let provenance;
   if (perf.baseline !== void 0) {
     if (baselineText === void 0) {
       return new Error(`${baselineLabel} is missing; record it with \`clio-coder verifiers baseline <id>\``);
@@ -237,12 +290,21 @@ function judgePerfTexts(measuredMs, perf, baselineText, baselineLabel) {
     const parsed = parsePerfBaseline(baselineText, baselineLabel);
     if (parsed instanceof Error) return parsed;
     baseline = parsed;
+    provenance = {
+      path: perf.baseline,
+      sha256: sha256(baselineText),
+      bytes: Buffer.byteLength(baselineText, "utf8"),
+      ...parsed.recordedAt !== void 0 ? { recordedAt: parsed.recordedAt } : {},
+      ...parsed.check !== void 0 ? { check: parsed.check } : {}
+    };
   }
-  return evaluatePerfBudget(measuredMs, {
+  const report = evaluatePerfBudget(measuredMs, {
     ...perf.budget !== void 0 ? { budget: perf.budget } : {},
-    ...baseline !== void 0 ? { baseline } : {},
+    ...baseline !== void 0 ? { baseline, environment: options.environment ?? capturePerfEnvironment() } : {},
     ...perf.tolerance?.relative !== void 0 ? { relative: perf.tolerance.relative } : {}
   });
+  if (report instanceof Error || provenance === void 0) return report;
+  return { ...report, baseline: provenance };
 }
 function judgePerfBudget(measuredMs, perf, workspaceRoot) {
   let baselineText;
@@ -273,16 +335,25 @@ async function runJudgedCheck(check, file, vector, cwd, options) {
     result = await runCommandVector(file, vector, {
       cwd,
       timeoutMs: check.timeoutMs,
+      maxOutputBytes: JUDGED_CHECK_MAX_OUTPUT_BYTES,
       ...options?.signal !== void 0 ? { signal: options.signal } : {}
     });
   } catch (error) {
     return { kind: "error", message: `verify: ${error instanceof Error ? error.message : String(error)}` };
   }
-  const facts = commandFacts(result);
-  const tail = `${result.stdout}${result.stderr}`.trim().slice(-2e3);
+  const execution = executionOutcome(result);
+  const facts = { ...commandFacts(result), judgement: judgement(execution, "not-run") };
   if (result.aborted) return { kind: "error", message: "verify: aborted", details: facts };
   if (result.timedOut) return { kind: "error", message: `verify: timed out after ${check.timeoutMs}ms`, details: facts };
+  if (result.outputCapped) {
+    return {
+      kind: "error",
+      message: `verify: ${check.kind} command output exceeded ${JUDGED_CHECK_MAX_OUTPUT_BYTES} bytes before judgement`,
+      details: facts
+    };
+  }
   if (result.exitCode !== 0) {
+    const tail = `${result.stdout}${result.stderr}`.trim().slice(-2e3);
     return {
       kind: "error",
       message: `verify: ${check.kind} command exited with code ${result.exitCode ?? "?"} before judgement: ${tail}`,
@@ -292,7 +363,7 @@ async function runJudgedCheck(check, file, vector, cwd, options) {
   const report = check.kind === "numeric-compare" && check.numeric !== void 0 ? judgeNumericCompare(result.stdout, check.numeric, process.cwd()) : check.kind === "perf-budget" && check.perf !== void 0 ? judgePerfBudget(result.durationMs, check.perf, process.cwd()) : new Error(`declared check '${check.id}' has kind ${check.kind} without its parameters`);
   if (report instanceof Error) return { kind: "error", message: `verify: ${report.message}`, details: facts };
   const rendered = report.kind === "numeric-compare" ? renderNumericReport(report) : report.summary;
-  const details = { ...facts, report };
+  const details = { ...facts, report, judgement: judgement(execution, report.passed ? "passed" : "failed") };
   if (!report.passed) return { kind: "error", message: `verify: ${rendered}`, details };
   return { kind: "ok", output: `${rendered}
 `, details };
@@ -321,16 +392,16 @@ async function recordPerfBaseline(check, options) {
     result = await runCommandVector(file, vector, {
       cwd,
       timeoutMs: check.timeoutMs,
+      maxOutputBytes: JUDGED_CHECK_MAX_OUTPUT_BYTES,
       ...options?.signal !== void 0 ? { signal: options.signal } : {}
     });
   } catch (error) {
     return { ok: false, message: error instanceof Error ? error.message : String(error) };
   }
-  if (result.aborted || result.timedOut || result.exitCode !== 0) {
-    return {
-      ok: false,
-      message: `command ${result.timedOut ? "timed out" : result.aborted ? "was aborted" : `exited with code ${result.exitCode ?? "?"}`}; no baseline recorded`
-    };
+  const execution = executionOutcome(result);
+  if (execution !== "succeeded") {
+    const ended = execution === "aborted" ? "was aborted" : execution === "timed-out" ? "timed out" : execution === "output-capped" ? `output exceeded ${JUDGED_CHECK_MAX_OUTPUT_BYTES} bytes` : `exited with code ${result.exitCode ?? "?"}`;
+    return { ok: false, message: `command ${ended}; no baseline recorded` };
   }
   let target;
   try {
@@ -339,9 +410,14 @@ async function recordPerfBaseline(check, options) {
     return { ok: false, message: `baseline ${error instanceof Error ? error.message : String(error)}` };
   }
   const recordedAt = (options?.now?.() ?? /* @__PURE__ */ new Date()).toISOString();
+  const environment = options?.environment ?? capturePerfEnvironment();
   try {
     mkdirSync(path.dirname(target), { recursive: true });
-    writeFileSync(target, renderPerfBaseline({ wallTimeMs: result.durationMs, check: check.id, recordedAt }), "utf8");
+    writeFileSync(
+      target,
+      renderPerfBaseline({ wallTimeMs: result.durationMs, check: check.id, recordedAt, environment }),
+      "utf8"
+    );
   } catch (error) {
     return {
       ok: false,
@@ -372,7 +448,7 @@ async function runScriptCheck(check, args, options) {
   const extraArgs = Array.isArray(args.args) ? args.args.filter((entry) => typeof entry === "string") : [];
   const vector = ["run", check];
   if (extraArgs.length > 0) vector.push("--", ...extraArgs);
-  return runVectorTool("verify", "npm", vector, { ...args, cwd }, options);
+  return withCommandJudgement(await runVectorTool("verify", "npm", vector, { ...args, cwd }, options));
 }
 function parsePackageJson(packagePath) {
   try {
@@ -391,6 +467,7 @@ function parsePackageJson(packagePath) {
 }
 
 export {
+  JUDGED_CHECK_MAX_OUTPUT_BYTES,
   discoverDeclaredProjectEntriesAtRoot,
   discoverDeclaredChecksAtRoot,
   discoverDeclaredChecks,
@@ -401,4 +478,4 @@ export {
   recordPerfBaseline,
   runScriptCheck
 };
-//# sourceMappingURL=chunk-RKFNU5UA.js.map
+//# sourceMappingURL=chunk-QI72X67S.js.map

package/dist/chunk-QKHZZFKH.js

@@ -0,0 +1,98 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  printError
+} from "./chunk-KIVFXGBM.js";
+import {
+  MCP_TRUST_ACTION_CLASSES,
+  resolveMcpServers,
+  trustMcpServer,
+  untrustMcpServer
+} from "./chunk-PP23PZEV.js";
+import {
+  init_esm_shims
+} from "./chunk-ECBHH7LU.js";
+
+// src/cli/mcp.ts
+init_esm_shims();
+var HELP = `clio-coder mcp <command>
+
+Commands:
+  clio-coder mcp list [--json]
+  clio-coder mcp trust <id> [--action-class <class>] [--json]
+  clio-coder mcp untrust <id> [--json]
+
+Action classes: ${MCP_TRUST_ACTION_CLASSES.join(", ")}
+
+JSON responses (--json):
+  list: {servers: [...], diagnostics: [...], trustDiagnostics: [...]}
+    Each server includes its declaration and trust {status, actionClass, reason?}.
+  trust: {ok: true, record: {projectRoot, id, digest, actionClass, trustedAt}}
+  untrust: {ok: true, removed: boolean}
+  errors: {ok: false, message: string}
+Exit codes: 0 success; 1 operational failure; 2 invalid usage.
+List retains its response shape on failure and exits 1 when config or trust
+ diagnostics are present. Mutation errors return the error shape with a
+ one-line reason. --help prints this text even when --json is supplied.
+`;
+function mcpCommandOutput(argv, options = { cwd: process.cwd() }) {
+  const fail = (code, message) => {
+    const text = message.replace(/[\r\n]+/gu, " ");
+    return { code, text, data: { ok: false, message: text } };
+  };
+  try {
+    const [command, id, ...rest] = argv;
+    if (command === "list" && id === void 0) {
+      const result2 = resolveMcpServers(options);
+      const lines = result2.servers.map(
+        (server2) => `${server2.id} scope=${server2.scope} command=${JSON.stringify([server2.command, ...server2.args])} cwd=${JSON.stringify(server2.cwd)} trust=${server2.trust.status}${"reason" in server2.trust ? ` (${server2.trust.reason})` : ""} actionClass=${server2.trust.actionClass}`
+      );
+      lines.push(...result2.diagnostics.map((entry) => `${entry.path}: ${entry.message}`), ...result2.trustDiagnostics);
+      return {
+        code: result2.diagnostics.length || result2.trustDiagnostics.length ? 1 : 0,
+        text: lines.join("\n") || "mcp: none",
+        data: result2
+      };
+    }
+    if (command !== "trust" && command !== "untrust" || !id)
+      return fail(2, "usage: clio-coder mcp list | trust <id> [--action-class <class>] | untrust <id>");
+    let actionClass;
+    if (rest.length) {
+      if (command !== "trust" || rest.length !== 2 || rest[0] !== "--action-class" || !MCP_TRUST_ACTION_CLASSES.includes(rest[1]))
+        return fail(2, `--action-class must be one of ${MCP_TRUST_ACTION_CLASSES.join(", ")} and applies only to trust`);
+      actionClass = rest[1];
+    }
+    if (command === "trust") {
+      const result2 = trustMcpServer({ ...options, id, ...actionClass ? { actionClass } : {} });
+      return result2.ok ? { code: 0, text: `mcp: trusted ${id} ${JSON.stringify(result2.record)}`, data: result2 } : fail(1, result2.message);
+    }
+    const resolved = resolveMcpServers(options);
+    const server = resolved.servers.find((entry) => entry.id === id);
+    if (!server) return fail(1, `no declared MCP server with id '${id}'`);
+    if (server.scope === "user")
+      return fail(1, `server '${id}' is a user-scope declaration; it is trusted by authorship`);
+    const result = untrustMcpServer({ ...options, id });
+    return result.ok ? { code: 0, text: `mcp: untrusted ${id} (record ${result.removed ? "removed" : "already absent"})`, data: result } : fail(1, result.message);
+  } catch (error) {
+    return fail(1, error instanceof Error ? error.message : String(error));
+  }
+}
+function runMcpCommand(argv) {
+  if (argv.includes("--help") || argv.includes("-h")) {
+    process.stdout.write(HELP);
+    return 0;
+  }
+  const json = argv.includes("--json");
+  const result = mcpCommandOutput(argv.filter((arg) => arg !== "--json"));
+  if (json) process.stdout.write(`${JSON.stringify(result.data, null, 2)}
+`);
+  else if (result.code && argv[0] !== "list") printError(result.text);
+  else process.stdout.write(`${result.text}
+`);
+  return result.code;
+}
+
+export {
+  mcpCommandOutput,
+  runMcpCommand
+};
+//# sourceMappingURL=chunk-QKHZZFKH.js.map

package/dist/{chunk-5UG6EZI3.js → chunk-RDKX2PME.js}

@@ -1,13 +1,13 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   runPending
-} from "./chunk-P4JS3MH5.js";
+} from "./chunk-LWJYOHT3.js";
 import {
   runDoctor
-} from "./chunk-JLBVCROW.js";
+} from "./chunk-2DRRZ57Q.js";
 import {
   readStateInfo
-} from "./chunk-JIMWEYWO.js";
+} from "./chunk-EHZRAB4U.js";
 import {
   getVersionInfo
 } from "./chunk-GD55RTIW.js";
@@ -63,4 +63,4 @@ export {
   describeUpgradeNotice,
   LifecycleDomainModule
 };
-//# sourceMappingURL=chunk-5UG6EZI3.js.map
+//# sourceMappingURL=chunk-RDKX2PME.js.map

package/dist/{chunk-B5ZTR6KZ.js → chunk-RL7LJYN4.js}

@@ -63,4 +63,4 @@ function getSharedBus() {
 export {
   getSharedBus
 };
-//# sourceMappingURL=chunk-B5ZTR6KZ.js.map
+//# sourceMappingURL=chunk-RL7LJYN4.js.map

package/dist/{chunk-BE4I3UJ2.js → chunk-RQROVOV3.js}

@@ -1,26 +1,28 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  BROWSER_MODES,
+  prepareVerifyArguments,
+  verifyToolSurface
+} from "./chunk-L4RUTLRL.js";
 import {
   discoverDeclaredChecks,
   listChecks,
   runProjectCheck,
   runScriptCheck
-} from "./chunk-RKFNU5UA.js";
-import {
-  BROWSER_MODES,
-  prepareVerifyArguments,
-  verifyToolSurface
-} from "./chunk-2U2U5POA.js";
+} from "./chunk-QI72X67S.js";
 import {
   prepareBoundedImage
 } from "./chunk-YGDMBK7O.js";
 import {
-  maxOutputArg,
-  timeoutArg
-} from "./chunk-MEHBW2SP.js";
+  escapeRegExp
+} from "./chunk-IZZI3SKQ.js";
 import {
-  escapeRegExp,
   resolveReadPath
-} from "./chunk-V552WL53.js";
+} from "./chunk-KP5BPXR3.js";
+import {
+  maxOutputArg,
+  timeoutArg
+} from "./chunk-YQYINEJI.js";
 import {
   truncateUtf8
 } from "./chunk-MYI32N4R.js";
@@ -31,7 +33,7 @@ import {
 import {
   combineSafeOutput,
   runCommandVector
-} from "./chunk-GJ24ODAX.js";
+} from "./chunk-XTQ7MEJG.js";
 import {
   init_esm_shims
 } from "./chunk-ECBHH7LU.js";
@@ -665,4 +667,4 @@ var verifyTool = {
 export {
   verifyTool
 };
-//# sourceMappingURL=chunk-BE4I3UJ2.js.map
+//# sourceMappingURL=chunk-RQROVOV3.js.map

package/dist/{chunk-TEHVMHOK.js → chunk-S34A7BSP.js}

@@ -1,10 +1,10 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   compileExecutionPlan
-} from "./chunk-L75H5B3B.js";
+} from "./chunk-DIAJYJYG.js";
 import {
   deriveExecutionRole
-} from "./chunk-FNVPQQYT.js";
+} from "./chunk-H6IUCY6Q.js";
 import {
   init_esm_shims
 } from "./chunk-ECBHH7LU.js";
@@ -94,4 +94,4 @@ function compileScoutTransition(input) {
 export {
   compileScoutTransition
 };
-//# sourceMappingURL=chunk-TEHVMHOK.js.map
+//# sourceMappingURL=chunk-S34A7BSP.js.map

package/dist/{chunk-4P6M2TTE.js → chunk-SJETVJHX.js}

@@ -2,7 +2,7 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   cwdHash,
   sessionPaths
-} from "./chunk-36XSBPXL.js";
+} from "./chunk-3RDHGNU7.js";
 import {
   init_esm_shims
 } from "./chunk-ECBHH7LU.js";
@@ -116,4 +116,4 @@ export {
   readPromptCompileManifest,
   readPromptCompileRecords
 };
-//# sourceMappingURL=chunk-4P6M2TTE.js.map
+//# sourceMappingURL=chunk-SJETVJHX.js.map

package/dist/{chunk-OPC4DQD6.js → chunk-SJMNU4ZS.js}

@@ -2,7 +2,7 @@ import { createRequire as __clioCreateRequire } from "node:module"; const requir
 import {
   cwdHash,
   sessionPaths
-} from "./chunk-36XSBPXL.js";
+} from "./chunk-3RDHGNU7.js";
 import {
   init_esm_shims
 } from "./chunk-ECBHH7LU.js";
@@ -631,4 +631,4 @@ export {
   snapshotInputTokens,
   reconcileSnapshot
 };
-//# sourceMappingURL=chunk-OPC4DQD6.js.map
+//# sourceMappingURL=chunk-SJMNU4ZS.js.map

package/dist/{chunk-2JSCCEKO.js → chunk-SLLG2G44.js}

@@ -1,7 +1,7 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
 import {
   printError
-} from "./chunk-ATB3Q7YO.js";
+} from "./chunk-KIVFXGBM.js";
 import {
   resolvePackageRoot
 } from "./chunk-E3LEPLQ2.js";
@@ -82,4 +82,4 @@ export {
   runWebCommand,
   prepareWebUninstall
 };
-//# sourceMappingURL=chunk-2JSCCEKO.js.map
+//# sourceMappingURL=chunk-SLLG2G44.js.map

package/dist/{chunk-EPYATQMG.js → chunk-SQAZN2V3.js}

@@ -4,52 +4,55 @@ import {
 } from "./chunk-RFCKPS2V.js";
 import {
   createWorkerProgressFold
-} from "./chunk-K3W6BF5C.js";
+} from "./chunk-7JSOSVLP.js";
 import {
   PANES_PRESETS,
   PANES_PRESET_IDS,
   resolvePanesPresetId
 } from "./chunk-QUIJZSDW.js";
+import {
+  SKILL_SURFACE_CLEAR_ARG,
+  parseSkillCommand
+} from "./chunk-7FBCRWVT.js";
+import {
+  mcpCommandOutput
+} from "./chunk-QKHZZFKH.js";
 import {
   acceptanceFromTaskFlags,
   formatUserTaskHandoff
-} from "./chunk-3IQOZRQ6.js";
+} from "./chunk-3TQN67I2.js";
 import {
   AdmissionCanceledError,
   WORKER_OUTPUT_MAX_BYTES,
   activeDecisionRefs,
   decisionRationale
-} from "./chunk-STC6CWUZ.js";
-import {
-  SKILL_SURFACE_CLEAR_ARG,
-  parseSkillCommand
-} from "./chunk-EXKUF426.js";
+} from "./chunk-K3XN4LZ4.js";
 import {
   isLibraryKind
 } from "./chunk-6UJ7RDI7.js";
 import {
   TOOL_PROFILE_NAMES,
   isToolProfileName
-} from "./chunk-GEVQNST4.js";
+} from "./chunk-XZWSP67B.js";
 import {
   requestExecutionRole
-} from "./chunk-FNVPQQYT.js";
+} from "./chunk-H6IUCY6Q.js";
 import {
   resolveModelReference
-} from "./chunk-GVU4CXPJ.js";
-import {
-  truncateUtf8
-} from "./chunk-MYI32N4R.js";
+} from "./chunk-4HFJKRGZ.js";
 import {
   BusChannels
 } from "./chunk-W5RM7YAH.js";
 import {
   parseCouncilReport,
   parseOracleResult
-} from "./chunk-ARRUMZ7X.js";
+} from "./chunk-I47EJPYL.js";
+import {
+  truncateUtf8
+} from "./chunk-MYI32N4R.js";
 import {
   THINKING_LEVELS
-} from "./chunk-3XE4NRLF.js";
+} from "./chunk-ZKJU55MX.js";
 import {
   init_esm_shims
 } from "./chunk-ECBHH7LU.js";
@@ -1429,6 +1432,29 @@ var BUILTIN_SLASH_COMMANDS = [
       ctx.openSkillsHub?.({ tab: "prompt" });
     }
   },
+  {
+    name: "mcp",
+    description: "List MCP servers or manage explicit trust with trust <id> [class] and untrust <id>",
+    group: "Inspect",
+    kinds: ["mcp"],
+    args: {
+      positionals: [
+        { name: "action", required: false, values: ["list", "trust", "untrust"] },
+        { name: "id", required: false },
+        { name: "class", required: false }
+      ]
+    },
+    fromArgs(parsed) {
+      if (parsed.error) return { kind: "usage-error", command: "mcp", reason: parsed.error };
+      const [action = "list", id, actionClass] = parsed.positionals;
+      return { kind: "mcp", argv: [action, ...id ? [id] : [], ...actionClass ? ["--action-class", actionClass] : []] };
+    },
+    handle(command, ctx) {
+      if (command.kind !== "mcp") return;
+      const result = mcpCommandOutput(command.argv);
+      ctx.notice(result.code ? "error" : "info", result.text);
+    }
+  },
   {
     name: "extensions",
     description: "Inspect harness extensions or reload their commands, hooks and operator UI",
@@ -2715,4 +2741,4 @@ export {
   dispatchSlashCommand,
   commandReference
 };
-//# sourceMappingURL=chunk-EPYATQMG.js.map
+//# sourceMappingURL=chunk-SQAZN2V3.js.map

package/dist/{chunk-E2NSPYLC.js → chunk-SQBT46OF.js}

@@ -1,16 +1,16 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
-import {
-  artifactDefaultPath
-} from "./chunk-NTTS3O53.js";
 import {
   canonicalizeExistingPath
 } from "./chunk-KQ6IDQIB.js";
+import {
+  artifactDefaultPath
+} from "./chunk-NTTS3O53.js";
 import {
   isVerificationScriptName
 } from "./chunk-M4KFUXS7.js";
 import {
   ToolNames
-} from "./chunk-WLHX3MM5.js";
+} from "./chunk-V4XJWDHR.js";
 import {
   init_esm_shims
 } from "./chunk-ECBHH7LU.js";
@@ -811,4 +811,4 @@ export {
   commandArgumentSegments,
   scanShellLike
 };
-//# sourceMappingURL=chunk-E2NSPYLC.js.map
+//# sourceMappingURL=chunk-SQBT46OF.js.map

package/dist/{chunk-WTZVSMQZ.js → chunk-TCUOGIL2.js}

@@ -1,10 +1,10 @@
 import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
-import {
-  StringEnum
-} from "./chunk-QLAGXTTV.js";
 import {
   ToolNames
-} from "./chunk-WLHX3MM5.js";
+} from "./chunk-V4XJWDHR.js";
+import {
+  StringEnum
+} from "./chunk-UIU7MGZ3.js";
 import {
   typebox_exports
 } from "./chunk-GH5ZR6JP.js";
@@ -49,4 +49,4 @@ export {
   CODE_NAV_MAX_LIMIT,
   codeNavToolSurface
 };
-//# sourceMappingURL=chunk-WTZVSMQZ.js.map
+//# sourceMappingURL=chunk-TCUOGIL2.js.map