chainlesschain 0.166.20 → 0.166.21

package/src/command-help-index.json

@@ -56,7 +56,7 @@
     "ecosystem": "Usage: chainlesschain ecosystem|eco [options] [command]\n\nPlugin Ecosystem 2.0 (Phase 64) — registry + deps + install + AI review +\npublish + revenue + recommend\n\nOptions:\n  -h, --help                                             display help for command\n\nCommands:\n  config                                                 Show ecosystem config (severities, statuses, rules, defaults)\n  severities                                             List review severities\n  statuses                                               List publish / install statuses\n  revenue-types                                          List revenue event types\n  dep-kinds                                              List dependency kinds\n  rules                                                  List heuristic AI review rules\n  register [options]                                     Register a new plugin (status=draft)\n  plugins [options]                                      List plugins\n  show <pluginId>                                        Show plugin details\n  update-stats [options] <pluginId>                      Update download count / avg rating\n  dep-add [options] <pluginId>                           Add a dependency to a plugin\n  deps <pluginId>                                        List direct dependencies of a plugin\n  resolve <pluginId>                                     Resolve dependency tree (detects conflicts + cycles)\n  install [options]                                      Install a plugin for a user (auto-fails on cycle/conflict)\n  installs [options]                                     List install records\n  uninstall <installId>                                  Mark an install as uninstalled\n  review [options] <pluginId>                            Run heuristic AI code review (regex rules + score)\n  review-show <reviewId>                                 Show a single review record\n  reviews [options]                                      List review records\n  sandbox [options] <pluginId>                           Record a sandbox test result (caller pushes outcome)\n  sandbox-show <testId>                                  Show a single sandbox test record\n  sandbox-tests [options]                                List sandbox test records\n  submit <pluginId>                                      Submit a plugin for review (draft/rejected → reviewing)\n  approve <pluginId>                                     Approve a reviewing plugin\n  reject [options] <pluginId>                            Reject a reviewing plugin (appends a rejection review record)\n  publish [options] <pluginId>                           Publish an approved plugin (computes sourceHash)\n  rev-record [options]                                   Record a revenue event (splits via developerShareRatio)\n  revenue [options] <developerId>                        Aggregate a developer's revenue\n  recommend [options]                                    Heuristic plugin recommendations for a user\n  stats                                                  Show ecosystem stats\n  maturity-statuses-v2                                   List V2 plugin maturity statuses\n  install-lifecycle-v2                                   List V2 install lifecycle statuses\n  default-max-active-plugins-per-developer               Show V2 default max active plugins per developer\n  max-active-plugins-per-developer                       Show current V2 max active plugins per developer\n  set-max-active-plugins-per-developer <n>               Set V2 max active plugins per developer\n  default-max-pending-installs-per-user                  Show V2 default max pending installs per user\n  max-pending-installs-per-user                          Show current V2 max pending installs per user\n  set-max-pending-installs-per-user <n>                  Set V2 max pending installs per user\n  default-auto-deprecate-after-ms                        Show V2 default auto-deprecate threshold (ms)\n  auto-deprecate-after-ms                                Show current V2 auto-deprecate threshold (ms)\n  set-auto-deprecate-after-ms <ms>                       Set V2 auto-deprecate threshold (ms)\n  default-auto-archive-after-ms                          Show V2 default auto-archive threshold (ms)\n  auto-archive-after-ms                                  Show current V2 auto-archive threshold (ms)\n  set-auto-archive-after-ms <ms>                         Set V2 auto-archive threshold (ms)\n  active-plugin-count [options]                          Count V2 active plugins (optionally scoped)\n  pending-install-count [options]                        Count V2 pending+resolving installs (optionally scoped)\n  register-plugin-v2 [options] <plugin-id>               Register V2 plugin (status=active)\n  maturity-v2 <plugin-id>                                Show V2 plugin maturity\n  set-maturity-v2 [options] <plugin-id> <status>         Transition V2 plugin maturity\n  deprecate-plugin [options] <plugin-id>                 Deprecate V2 plugin\n  archive-plugin-v2 [options] <plugin-id>                Archive V2 plugin\n  remove-plugin-v2 [options] <plugin-id>                 Remove V2 plugin (terminal)\n  touch-plugin-activity <plugin-id>                      Bump lastActivityAt for V2 plugin\n  submit-install-v2 [options] <install-id>               Submit V2 install (status=pending)\n  install-status-v2 <install-id>                         Show V2 install status\n  set-install-status-v2 [options] <install-id> <status>  Transition V2 install status\n  resolve-install [options] <install-id>                 Mark V2 install as resolving\n  complete-install [options] <install-id>                Mark V2 install as installed\n  fail-install [options] <install-id>                    Mark V2 install as failed\n  uninstall-install-v2 [options] <install-id>            Mark V2 install as uninstalled (terminal)\n  retry-failed-install [options] <install-id>            Retry a failed V2 install (failed → pending)\n  auto-deprecate-stale-plugins                           Bulk-flip stale V2 ACTIVE plugins to DEPRECATED\n  auto-archive-long-deprecated                           Bulk-flip long-deprecated V2 plugins to ARCHIVED\n  stats-v2                                               Show V2 ecosystem stats (maturity + install)\n  help [command]                                         display help for command\n",
     "encrypt": "Usage: chainlesschain encrypt [options] [command]\n\nFile encryption and database encryption management\n\nOptions:\n  -h, --help                            display help for command\n\nCommands:\n  file [options] <path>                 Encrypt a file with AES-256-GCM\n  db [options]                          Enable database encryption tracking\n  info [options] <path>                 Check if a file is encrypted\n  status [options]                      Show database encryption status\n  key-maturities-v2 [options]           [V2] List crypto key maturity states\n  job-lifecycles-v2 [options]           [V2] List crypto job lifecycle states\n  config-v2 [options]                   [V2] Show governance config\n  set-max-active-keys-per-owner-v2 <n>  [V2] Set per-owner active key cap\n  set-max-pending-jobs-per-key-v2 <n>   [V2] Set per-key pending job cap\n  set-key-idle-ms-v2 <ms>               [V2] Set key idle threshold (ms)\n  set-job-stuck-ms-v2 <ms>              [V2] Set job stuck threshold (ms)\n  register-key-v2 [options] <id>        [V2] Register a crypto key profile\n                                        (PENDING)\n  activate-key-v2 <id>                  [V2] Activate key (pending|rotated ->\n                                        active)\n  rotate-key-v2 <id>                    [V2] Rotate key (active -> rotated)\n  retire-key-v2 <id>                    [V2] Retire key (terminal)\n  touch-key-v2 <id>                     [V2] Bump key lastSeenAt\n  get-key-v2 [options] <id>             [V2] Show crypto key profile\n  list-keys-v2 [options]                [V2] List crypto key profiles\n  create-job-v2 [options] <id>          [V2] Create a queued V2 crypto job\n  start-job-v2 <id>                     [V2] Start crypto job (queued ->\n                                        running)\n  complete-job-v2 <id>                  [V2] Complete crypto job (running ->\n                                        completed)\n  fail-job-v2 <id>                      [V2] Fail crypto job (running ->\n                                        failed)\n  cancel-job-v2 <id>                    [V2] Cancel crypto job (queued|running\n                                        -> cancelled)\n  get-job-v2 [options] <id>             [V2] Show crypto job\n  list-jobs-v2 [options]                [V2] List V2 crypto jobs\n  active-key-count-v2 [options]         [V2] Count active crypto keys (optional\n                                        --owner)\n  pending-job-count-v2 [options]        [V2] Count pending crypto jobs\n                                        (queued+running)\n  auto-rotate-idle-keys-v2 [options]    [V2] Rotate idle active keys\n  auto-fail-stuck-jobs-v2 [options]     [V2] Fail stuck running crypto jobs\n  stats-v2 [options]                    [V2] Show governance stats\n  help [command]                        display help for command\n",
     "eval": "Usage: chainlesschain eval [options]\n\nRun the reliability eval suite (self-checking coding tasks) and report the\ntask-success rate\n\nOptions:\n  --suite <name>                Suite to run (default: \"builtin\")\n  --model <model>               Model for the agent runs\n  --provider <provider>         Provider for the agent runs\n  --json                        Output the summary as JSON\n  --keep                        Keep the per-task temp workspaces (debug)\n  --otlp <file>                 Write OpenTelemetry (OTLP/JSON) spans for the\n                                run to a file\n  --dry-run                     Use a no-op agent (exercise the harness/report\n                                without a model)\n  --history <file>              Append this run's summary (JSONL) for trend\n                                tracking\n  --label <label>               Tag this run in the history (e.g. a\n                                version/commit)\n  --trend                       Report the pass-rate trend from --history\n                                instead of running (CI gate)\n  --regression-threshold <pct>  With --trend: pass-rate drop (in points) that\n                                fails the gate on its own (default: \"0\")\n  -h, --help                    display help for command\n",
-    "evolution": "Usage: chainlesschain evolution [options] [command]\n\nEvolution metrics and governance records — not model training or active Skill\npromotion\n\nOptions:\n  -h, --help                                 display help for command\n\nCommands:\n  assess [options] <name> <score>            Assess and track a capability\n  record-model-metrics [options] <model-id>  Record a synthetic model metric estimate (no training)\n  diagnose [options]                         Diagnose recorded evolution metrics\n  repair [options] <issue>                   Apply a maintenance strategy to a recorded diagnosis\n  predict [options] [user-id]                Predict user behavior\n  growth [options]                           Show growth log\n  stats [options]                            Show capabilities and models overview\n  export [options] <model-id>                Export a model metric record for portability\n  dimensions [options]                       List CAPABILITY_DIMENSION enum\n  severities [options]                       List DIAGNOSIS_SEVERITY enum\n  strategies [options]                       List REPAIR_STRATEGY enum\n  milestones [options]                       List GROWTH_MILESTONE enum\n  assess-v2 [options] <dimension> <score>    Assess capability by canonical dimension\n  capabilities-v2 [options]                  List V2 capabilities\n  record-training-metrics-v2 [options]       Record caller-supplied loss metrics (no training)\n  training-metrics-v2 [options]              List V2 training metric records\n  diagnose-v2 [options]                      Diagnose recorded V2 evolution metrics\n  diagnoses-v2 [options]                     List V2 diagnoses\n  diagnosis-show [options] <id>              Show a specific diagnosis\n  repair-v2 [options] <diagnosis-id>         Record a V2 maintenance strategy for a diagnosis\n  predict-v2 [options]                       Project behavior from recorded V2 metrics\n  record-milestone [options] <type>          Record a growth milestone explicitly\n  growth-v2 [options]                        List V2 growth milestones\n  configure [options]                        Update evolution config\n  config [options]                           Show evolution config\n  stats-v2 [options]                         V2 evolution stats\n  enums-v2                                   Show V2 enums (goal maturity + cycle lifecycle)\n  config-v2                                  Show V2 config thresholds\n  set-max-active-goals-v2 <n>                Set max active goals per owner\n  set-max-pending-cycles-v2 <n>              Set max pending cycles per goal\n  set-goal-idle-ms-v2 <n>                    Set goal idle threshold (ms)\n  set-cycle-stuck-ms-v2 <n>                  Set cycle stuck threshold (ms)\n  register-goal-v2 [options] <id> <owner>    Register V2 evo goal\n  activate-goal-v2 <id>                      Activate evo goal\n  pause-goal-v2 <id>                         Pause evo goal\n  archive-goal-v2 <id>                       Archive goal (terminal)\n  touch-goal-v2 <id>                         Touch goal lastTouchedAt\n  get-goal-v2 <id>                           Get V2 goal\n  list-goals-v2                              List all V2 goals\n  create-cycle-v2 [options] <id> <goalId>    Create V2 cycle (queued)\n  start-cycle-v2 <id>                        Start cycle (queued→running)\n  complete-cycle-v2 <id>                     Complete cycle (running→completed)\n  fail-cycle-v2 <id> [reason]                Fail cycle\n  cancel-cycle-v2 <id> [reason]              Cancel cycle\n  get-cycle-v2 <id>                          Get V2 cycle\n  list-cycles-v2                             List all V2 cycles\n  auto-pause-idle-v2                         Auto-pause idle active goals\n  auto-fail-stuck-v2                         Auto-fail stuck running cycles\n  gov-stats-v2                               V2 governance aggregate stats\n  help [command]                             display help for command\n",
+    "evolution": "Usage: chainlesschain evolution [options] [command]\n\nEvolution metrics and governance records — not model training or active Skill\npromotion\n\nOptions:\n  -h, --help                                 display help for command\n\nCommands:\n  workbench                                  Review governed Skill evolution evidence and versions\n  knowledge                                  Review encrypted governed knowledge conflicts\n  assess [options] <name> <score>            Assess and track a capability\n  record-model-metrics [options] <model-id>  Record a synthetic model metric estimate (no training)\n  diagnose [options]                         Diagnose recorded evolution metrics\n  repair [options] <issue>                   Apply a maintenance strategy to a recorded diagnosis\n  predict [options] [user-id]                Predict user behavior\n  growth [options]                           Show growth log\n  stats [options]                            Show capabilities and models overview\n  export [options] <model-id>                Export a model metric record for portability\n  dimensions [options]                       List CAPABILITY_DIMENSION enum\n  severities [options]                       List DIAGNOSIS_SEVERITY enum\n  strategies [options]                       List REPAIR_STRATEGY enum\n  milestones [options]                       List GROWTH_MILESTONE enum\n  assess-v2 [options] <dimension> <score>    Assess capability by canonical dimension\n  capabilities-v2 [options]                  List V2 capabilities\n  record-training-metrics-v2 [options]       Record caller-supplied loss metrics (no training)\n  training-metrics-v2 [options]              List V2 training metric records\n  diagnose-v2 [options]                      Diagnose recorded V2 evolution metrics\n  diagnoses-v2 [options]                     List V2 diagnoses\n  diagnosis-show [options] <id>              Show a specific diagnosis\n  repair-v2 [options] <diagnosis-id>         Record a V2 maintenance strategy for a diagnosis\n  predict-v2 [options]                       Project behavior from recorded V2 metrics\n  record-milestone [options] <type>          Record a growth milestone explicitly\n  growth-v2 [options]                        List V2 growth milestones\n  configure [options]                        Update evolution config\n  config [options]                           Show evolution config\n  stats-v2 [options]                         V2 evolution stats\n  enums-v2                                   Show V2 enums (goal maturity + cycle lifecycle)\n  config-v2                                  Show V2 config thresholds\n  set-max-active-goals-v2 <n>                Set max active goals per owner\n  set-max-pending-cycles-v2 <n>              Set max pending cycles per goal\n  set-goal-idle-ms-v2 <n>                    Set goal idle threshold (ms)\n  set-cycle-stuck-ms-v2 <n>                  Set cycle stuck threshold (ms)\n  register-goal-v2 [options] <id> <owner>    Register V2 evo goal\n  activate-goal-v2 <id>                      Activate evo goal\n  pause-goal-v2 <id>                         Pause evo goal\n  archive-goal-v2 <id>                       Archive goal (terminal)\n  touch-goal-v2 <id>                         Touch goal lastTouchedAt\n  get-goal-v2 <id>                           Get V2 goal\n  list-goals-v2                              List all V2 goals\n  create-cycle-v2 [options] <id> <goalId>    Create V2 cycle (queued)\n  start-cycle-v2 <id>                        Start cycle (queued→running)\n  complete-cycle-v2 <id>                     Complete cycle (running→completed)\n  fail-cycle-v2 <id> [reason]                Fail cycle\n  cancel-cycle-v2 <id> [reason]              Cancel cycle\n  get-cycle-v2 <id>                          Get V2 cycle\n  list-cycles-v2                             List all V2 cycles\n  auto-pause-idle-v2                         Auto-pause idle active goals\n  auto-fail-stuck-v2                         Auto-fail stuck running cycles\n  gov-stats-v2                               V2 governance aggregate stats\n  help [command]                             display help for command\n",
     "evomap": "Usage: chainlesschain evomap [options] [command]\n\nEvoMap — gene exchange protocol for agent capabilities\n\nOptions:\n  -h, --help                          display help for command\n\nCommands:\n  search [options] <query>            Search for genes on the hub\n  download <geneId>                   Download a gene from the hub\n  publish [options]                   Publish a gene to the hub\n  list                                List locally installed genes\n  hubs                                List configured EvoMap hubs\n  federation                          Federated hub management and gene syncing\n  gov                                 EvoMap governance — ownership, proposals,\n                                      voting\n  enums-v2                            Show V2 governance enums\n  register-map-v2 [options]           Register an evomap profile (pending)\n  activate-map-v2 <id>                Activate map\n  stale-map-v2 <id>                   Mark map stale\n  archive-map-v2 <id>                 Archive map (terminal)\n  touch-map-v2 <id>                   Refresh lastTouchedAt\n  get-map-v2 <id>                     Get map\n  list-maps-v2                        List maps\n  create-evolution-v2 [options]       Create an evolution (queued)\n  start-evolution-v2 <id>             Transition evolution to running\n  complete-evolution-v2 <id>          Transition evolution to completed\n  fail-evolution-v2 [options] <id>    Fail evolution\n  cancel-evolution-v2 [options] <id>  Cancel evolution\n  get-evolution-v2 <id>               Get evolution\n  list-evolutions-v2                  List evolutions\n  set-max-active-maps-v2 <n>          Set per-owner active cap\n  set-max-pending-evolutions-v2 <n>   Set per-map pending cap\n  set-map-idle-ms-v2 <n>              Set idle threshold\n  set-evolution-stuck-ms-v2 <n>       Set stuck threshold\n  auto-stale-idle-maps-v2             Auto-stale idle maps\n  auto-fail-stuck-evolutions-v2       Auto-fail stuck running evolutions\n  gov-stats-v2                        V2 governance aggregate stats\n  help [command]                      display help for command\n",
     "execbe": "Usage: chainlesschain execbe [options] [command]\n\nExecution backend V2 governance\n\nOptions:\n  -h, --help                               display help for command\n\nCommands:\n  maturities-v2\n  job-lifecycle-v2\n  stats-v2\n  config-v2\n  register-backend-v2 <id> <owner> [kind]\n  activate-backend-v2 <id>\n  degrade-backend-v2 <id>\n  retire-backend-v2 <id>\n  touch-backend-v2 <id>\n  get-backend-v2 <id>\n  list-backends-v2\n  create-job-v2 <id> <backendId> [cmd]\n  start-job-v2 <id>\n  succeed-job-v2 <id>\n  fail-job-v2 <id> [reason]\n  cancel-job-v2 <id> [reason]\n  get-job-v2 <id>\n  list-jobs-v2\n  auto-degrade-idle-v2\n  auto-fail-stuck-v2\n  set-max-active-v2 <n>\n  set-max-pending-v2 <n>\n  set-idle-ms-v2 <n>\n  set-stuck-ms-v2 <n>\n  reset-state-v2\n  help [command]                           display help for command\n",
     "export": "Usage: chainlesschain export [options] [command]\n\nExport knowledge base to external formats\n\nOptions:\n  -h, --help                            display help for command\n\nCommands:\n  markdown [options]                    Export notes as markdown files\n  site [options]                        Export notes as a static HTML website\n  target-maturities-v2                  List V2 target maturity states\n  export-job-lifecycles-v2              List V2 export-job lifecycle states\n  stats-v2                              V2 knowledge-exporter stats\n  get-max-active-targets-v2             Get max active targets per owner (V2)\n  set-max-active-targets-v2 <n>         Set max active targets per owner (V2)\n  get-max-pending-jobs-v2               Get max pending jobs per target (V2)\n  set-max-pending-jobs-v2 <n>           Set max pending jobs per target (V2)\n  get-target-idle-ms-v2                 Get target idle threshold (V2)\n  set-target-idle-ms-v2 <ms>            Set target idle threshold (V2)\n  get-job-stuck-ms-v2                   Get export-job stuck threshold (V2)\n  set-job-stuck-ms-v2 <ms>              Set export-job stuck threshold (V2)\n  active-target-count-v2 <ownerId>      Active target count for owner (V2)\n  pending-job-count-v2 <targetId>       Pending export-job count for target\n                                        (V2)\n  register-target-v2 [options] <id>     Register a V2 export target\n  get-target-v2 <id>                    Get a V2 target\n  list-targets-v2 [options]             List V2 targets\n  set-target-status-v2 <id> <next>      Set V2 target status\n  activate-target-v2 <id>               Activate a V2 target\n  pause-target-v2 <id>                  Pause a V2 target\n  archive-target-v2 <id>                Archive a V2 target\n  touch-target-v2 <id>                  Touch a V2 target\n  create-export-job-v2 [options] <id>   Create a V2 export job\n  get-export-job-v2 <id>                Get a V2 export job\n  list-export-jobs-v2 [options]         List V2 export jobs\n  set-export-job-status-v2 <id> <next>  Set V2 export-job status\n  start-export-job-v2 <id>              Start a V2 export job\n  complete-export-job-v2 <id>           Complete a V2 export job\n  fail-export-job-v2 <id>               Fail a V2 export job\n  cancel-export-job-v2 <id>             Cancel a V2 export job\n  auto-pause-idle-targets-v2            Auto-pause idle V2 targets\n  auto-fail-stuck-export-jobs-v2        Auto-fail stuck V2 export jobs\n  help [command]                        display help for command\n",
@@ -144,7 +144,7 @@
     "setup": "Usage: chainlesschain setup [options]\n\nInteractive setup wizard for ChainlessChain\n\nOptions:\n  --skip-download  Skip binary download\n  --skip-services  Skip Docker service setup\n  -h, --help       display help for command\n",
     "sganal": "Usage: chainlesschain sganal [options] [command]\n\nSocial Graph Analytics V2 governance (in-memory, CLI v0.143.0)\n\nOptions:\n  -h, --help                      display help for command\n\nCommands:\n  enums-v2\n  register-profile-v2 [options]\n  activate-profile-v2 <id>\n  stale-profile-v2 <id>\n  archive-profile-v2 <id>\n  touch-profile-v2 <id>\n  get-profile-v2 <id>\n  list-profiles-v2\n  create-run-v2 [options]\n  running-run-v2 <id>\n  complete-run-v2 <id>\n  fail-run-v2 [options] <id>\n  cancel-run-v2 [options] <id>\n  get-run-v2 <id>\n  list-runs-v2\n  config-v2\n  set-max-active-profiles-v2 <n>\n  set-max-pending-runs-v2 <n>\n  set-profile-idle-ms-v2 <ms>\n  set-run-stuck-ms-v2 <ms>\n  auto-stale-idle-v2\n  auto-fail-stuck-v2\n  gov-stats-v2\n  help [command]                  display help for command\n",
     "siem": "Usage: chainlesschain siem [options] [command]\n\nSIEM integration — log export to external targets\n\nOptions:\n  -h, --help                                    display help for command\n\nCommands:\n  targets [options]                             List SIEM export targets\n  add-target [options] <type> <url>             Add a SIEM target (splunk_hec, elasticsearch, azure_sentinel)\n  export <target-id>                            Export logs to a SIEM target\n  stats [options]                               Show SIEM export statistics\n  formats                                       List SIEM export formats (V2)\n  target-types                                  List SIEM target types (V2)\n  severities                                    List SIEM severity levels (V2)\n  statuses                                      List SIEM target statuses (V2)\n  default-batch-size                            Show default SIEM batch size (V2)\n  severity-cef <severity>                       Map a SIEM severity to its CEF integer (0-10)\n  format-log [options] <format>                 Format a JSON log payload as cef|leef|json\n  add-target-v2 [options]                       Add a SIEM target via canonical options (V2)\n  remove-target <target-id>                     Remove a SIEM target (V2)\n  set-status <target-id> <status>               Transition a SIEM target's status (V2)\n  export-v2 [options] <target-id>               Batch-export logs to a target (V2)\n  stats-v2                                      Show extended SIEM stats (byFormat/byType/byStatus, V2)\n  by-status <status>                            List SIEM targets filtered by status (V2)\n  enums-v2                                      Show V2 enums (target maturity + export lifecycle)\n  config-v2                                     Show V2 config thresholds\n  set-max-active-targets-v2 <n>                 Set max active targets per operator\n  set-max-pending-exports-v2 <n>                Set max pending exports per target\n  set-target-idle-ms-v2 <n>                     Set target idle threshold (ms)\n  set-export-stuck-ms-v2 <n>                    Set export stuck threshold (ms)\n  register-target-v2 [options] <id> <operator>  Register V2 SIEM target\n  activate-target-v2 <id>                       Activate target\n  degrade-target-v2 <id>                        Degrade target\n  retire-target-v2 <id>                         Retire target (terminal)\n  touch-target-v2 <id>                          Touch target lastTouchedAt\n  get-target-v2 <id>                            Get V2 target\n  list-targets-v2                               List V2 targets\n  create-export-v2 [options] <id> <targetId>    Create V2 export (queued)\n  start-export-v2 <id>                          Start export\n  deliver-export-v2 <id>                        Deliver export\n  fail-export-v2 <id> [reason]                  Fail export\n  cancel-export-v2 <id> [reason]                Cancel export\n  get-export-v2 <id>                            Get V2 export\n  list-exports-v2                               List V2 exports\n  auto-degrade-idle-v2                          Auto-degrade idle targets\n  auto-fail-stuck-v2                            Auto-fail stuck sending exports\n  gov-stats-v2                                  V2 governance aggregate stats\n  help [command]                                display help for command\n",
-    "skill": "Usage: chainlesschain skill [options] [command]\n\nManage and run AI skills (multi-layer: bundled + global + project)\n\nOptions:\n  -h, --help                            display help for command\n\nCommands:\n  recording|record-replay               Record, review, replay, enable, and\n                                        govern deterministic UI skills\n  list [options]                        List all available skills\n  categories                            List skill categories\n  info [options] <name>                 Show detailed info about a skill\n  search <query>                        Search skills by keyword\n  run [options] <name> [input...]       Execute a skill through a controlled\n                                        agent/tool route\n  add [options] <name>                  Create a custom skill\n  remove [options] <name>               Remove a custom skill (project or\n                                        global)\n  sync-cli [options]                    Generate or update CLI command skill\n                                        packs (9 domain packs wrapping all 62\n                                        CLI commands)\n  sources [options]                     Show skill source layers, paths, and\n                                        counts\n  skill-maturities-v2                   List V2 skill maturity states\n  execution-lifecycles-v2               List V2 execution lifecycle states\n  stats-v2                              V2 skill-loader stats\n  get-max-active-skills-v2              Get max active skills per owner (V2)\n  set-max-active-skills-v2 <n>          Set max active skills per owner (V2)\n  get-max-pending-executions-v2         Get max pending executions per skill\n                                        (V2)\n  set-max-pending-executions-v2 <n>     Set max pending executions per skill\n                                        (V2)\n  get-skill-idle-ms-v2                  Get skill idle threshold (V2)\n  set-skill-idle-ms-v2 <ms>             Set skill idle threshold (V2)\n  get-exec-stuck-ms-v2                  Get execution stuck threshold (V2)\n  set-exec-stuck-ms-v2 <ms>             Set execution stuck threshold (V2)\n  active-skill-count-v2 <ownerId>       Active skill count for owner (V2)\n  pending-execution-count-v2 <skillId>  Pending execution count for skill (V2)\n  register-skill-v2 [options] <id>      Register a V2 skill\n  get-skill-v2 <id>                     Get a V2 skill\n  list-skills-v2 [options]              List V2 skills\n  set-skill-status-v2 <id> <next>       Set V2 skill status\n  activate-skill-v2 <id>                Activate a V2 skill\n  deprecate-skill-v2 <id>               Deprecate a V2 skill\n  archive-skill-v2 <id>                 Archive a V2 skill\n  touch-skill-v2 <id>                   Touch a V2 skill\n  create-execution-v2 [options] <id>    Create a V2 execution\n  get-execution-v2 <id>                 Get a V2 execution\n  list-executions-v2 [options]          List V2 executions\n  set-execution-status-v2 <id> <next>   Set V2 execution status\n  start-execution-v2 <id>               Start a V2 execution\n  succeed-execution-v2 <id>             Succeed a V2 execution\n  fail-execution-v2 <id>                Fail a V2 execution\n  cancel-execution-v2 <id>              Cancel a V2 execution\n  auto-deprecate-idle-skills-v2         Auto-deprecate idle V2 skills\n  auto-fail-stuck-executions-v2         Auto-fail stuck V2 executions\n  help [command]                        display help for command\n",
+    "skill": "Usage: chainlesschain skill [options] [command]\n\nManage and run AI skills (multi-layer: bundled + global + project)\n\nOptions:\n  -h, --help                            display help for command\n\nCommands:\n  recording|record-replay               Record, review, replay, enable, and\n                                        govern deterministic UI skills\n  list [options]                        List all available skills\n  categories                            List skill categories\n  info [options] <name>                 Show detailed info about a skill\n  search [options] <query>              Search digest-bound skills with the\n                                        canonical router\n  run [options] <name> [input...]       Execute a skill through a controlled\n                                        agent/tool route\n  add [options] <name>                  Create a custom skill\n  remove [options] <name>               Remove a custom skill (project or\n                                        global)\n  sync-cli [options]                    Generate or update CLI command skill\n                                        packs (9 domain packs wrapping all 62\n                                        CLI commands)\n  sources [options]                     Show skill source layers, paths, and\n                                        counts\n  skill-maturities-v2                   List V2 skill maturity states\n  execution-lifecycles-v2               List V2 execution lifecycle states\n  stats-v2                              V2 skill-loader stats\n  get-max-active-skills-v2              Get max active skills per owner (V2)\n  set-max-active-skills-v2 <n>          Set max active skills per owner (V2)\n  get-max-pending-executions-v2         Get max pending executions per skill\n                                        (V2)\n  set-max-pending-executions-v2 <n>     Set max pending executions per skill\n                                        (V2)\n  get-skill-idle-ms-v2                  Get skill idle threshold (V2)\n  set-skill-idle-ms-v2 <ms>             Set skill idle threshold (V2)\n  get-exec-stuck-ms-v2                  Get execution stuck threshold (V2)\n  set-exec-stuck-ms-v2 <ms>             Set execution stuck threshold (V2)\n  active-skill-count-v2 <ownerId>       Active skill count for owner (V2)\n  pending-execution-count-v2 <skillId>  Pending execution count for skill (V2)\n  register-skill-v2 [options] <id>      Register a V2 skill\n  get-skill-v2 <id>                     Get a V2 skill\n  list-skills-v2 [options]              List V2 skills\n  set-skill-status-v2 <id> <next>       Set V2 skill status\n  activate-skill-v2 <id>                Activate a V2 skill\n  deprecate-skill-v2 <id>               Deprecate a V2 skill\n  archive-skill-v2 <id>                 Archive a V2 skill\n  touch-skill-v2 <id>                   Touch a V2 skill\n  create-execution-v2 [options] <id>    Create a V2 execution\n  get-execution-v2 <id>                 Get a V2 execution\n  list-executions-v2 [options]          List V2 executions\n  set-execution-status-v2 <id> <next>   Set V2 execution status\n  start-execution-v2 <id>               Start a V2 execution\n  succeed-execution-v2 <id>             Succeed a V2 execution\n  fail-execution-v2 <id>                Fail a V2 execution\n  cancel-execution-v2 <id>              Cancel a V2 execution\n  auto-deprecate-idle-skills-v2         Auto-deprecate idle V2 skills\n  auto-fail-stuck-executions-v2         Auto-fail stuck V2 executions\n  help [command]                        display help for command\n",
     "sla": "Usage: chainlesschain sla [options] [command]\n\nCross-org SLA management — contracts, metrics, violations, compensation\n\nOptions:\n  -h, --help                                              display help for command\n\nCommands:\n  tiers [options]                                         List built-in SLA tiers\n  create [options] <org-id>                               Create a new SLA contract\n  list [options]                                          List SLA contracts\n  show [options] <sla-id>                                 Show a single SLA contract\n  terminate <sla-id>                                      Terminate an SLA contract\n  record [options] <sla-id> <term> <value>                Record a metric (term: availability|response_time|throughput|error_rate)\n  metrics [options] <sla-id>                              Show aggregated metrics for an SLA\n  check [options] <sla-id>                                Detect violations against the contract's terms\n  violations [options]                                    List recorded violations\n  compensate [options] <violation-id>                     Calculate compensation for a violation\n  report [options] <sla-id>                               Generate an SLA compliance report\n  statuses                                                List SLA_STATUS_V2 values\n  tier-names                                              List SLA_TIER_V2 values\n  term-names                                              List SLA_TERM_V2 values\n  severities                                              List VIOLATION_SEVERITY_V2 values\n  violation-statuses                                      List VIOLATION_STATUS_V2 values\n  default-max-active                                      Show SLA_DEFAULT_MAX_ACTIVE_PER_ORG\n  max-active                                              Show current max active SLAs per org\n  set-max-active <n>                                      Set per-org active-contract admission cap\n  active-count <org-id>                                   Show active SLA count for an org\n  create-v2 [options] <org-id>                            Create a V2 SLA contract (enforces per-org active cap)\n  set-status <sla-id> <status>                            Transition SLA to a given status (state-machine guarded)\n  expire <sla-id>                                         Expire an SLA (shortcut for set-status ... expired)\n  auto-expire [options]                                   Bulk-flip ACTIVE contracts past endDate to EXPIRED\n  set-violation-status [options] <violation-id> <status>  Transition a violation (open→{acknowledged,resolved,waived})\n  acknowledge-violation [options] <violation-id>          Acknowledge a violation\n  resolve-violation [options] <violation-id>              Resolve a violation\n  waive-violation [options] <violation-id>                Waive a violation\n  stats-v2                                                Show aggregate V2 SLA stats (byStatus/byTier/violations)\n  help [command]                                          display help for command\n",
     "slotfill": "Usage: chainlesschain slotfill [options] [command]\n\nSlot Filler V2 governance\n\nOptions:\n  -h, --help                                   display help for command\n\nCommands:\n  enums-v2\n  config-v2\n  set-max-active-v2 <n>\n  set-max-pending-v2 <n>\n  set-idle-ms-v2 <n>\n  set-stuck-ms-v2 <n>\n  register-template-v2 [options] <id> <owner>\n  activate-template-v2 <id>\n  stale-template-v2 <id>\n  archive-template-v2 <id>\n  touch-template-v2 <id>\n  get-template-v2 <id>\n  list-templates-v2\n  create-fill-v2 [options] <id> <templateId>\n  filling-fill-v2 <id>\n  fill-fill-v2 <id>\n  fail-fill-v2 <id> [reason]\n  cancel-fill-v2 <id> [reason]\n  get-fill-v2 <id>\n  list-fills-v2\n  auto-stale-idle-v2\n  auto-fail-stuck-v2\n  gov-stats-v2\n  reset-state-v2\n  help [command]                               display help for command\n",
     "social": "Usage: chainlesschain social [options] [command]\n\nSocial platform — contacts, friends, posts, chat\n\nOptions:\n  -h, --help                                  display help for command\n\nCommands:\n  contact                                     Contact management\n  friend                                      Friend management\n  post                                        Social posts\n  chat                                        Direct messaging\n  stats [options]                             Show social statistics\n  analyze [options] <text>                    Classify text into topics (language-aware, multilingual)\n  detect-lang [options] <text>                Detect dominant language of text (zh|ja|en|other)\n  graph                                       Social graph — typed edges, neighbors, live event stream\n  relationship-maturities-v2 [options]        List V2 relationship maturity states\n  thread-lifecycles-v2 [options]              List V2 thread lifecycle states\n  stats-v2 [options]                          Show V2 social stats\n  get-max-connected-v2                        Get max connected per user\n  set-max-connected-v2 <n>                    Set max connected per user\n  get-max-open-threads-v2                     Get max open threads per user\n  set-max-open-threads-v2 <n>                 Set max open threads per user\n  get-relationship-idle-ms-v2                 Get relationship idle ms\n  set-relationship-idle-ms-v2 <ms>            Set relationship idle ms\n  get-thread-stuck-ms-v2                      Get thread stuck ms\n  set-thread-stuck-ms-v2 <ms>                 Set thread stuck ms\n  connected-count-v2 <userId>                 Count connected relationships for user\n  open-thread-count-v2 <userId>               Count open+engaged threads for user\n  register-relationship-v2 [options] <id>     Register V2 relationship (initial=pending)\n  get-relationship-v2 <id>                    Get V2 relationship by id\n  list-relationships-v2 [options]             List V2 relationships\n  connect-relationship-v2 <id>                Transition relationship → connected\n  mute-relationship-v2 <id>                   Transition relationship → muted\n  block-relationship-v2 <id>                  Transition relationship → blocked (terminal)\n  touch-relationship-v2 <id>                  Update relationship lastSeenAt\n  create-thread-v2 [options] <id>             Create V2 thread (initial=open)\n  get-thread-v2 <id>                          Get V2 thread by id\n  list-threads-v2 [options]                   List V2 threads\n  engage-thread-v2 <id>                       Transition thread → engaged\n  resolve-thread-v2 <id>                      Transition thread → resolved (terminal)\n  abandon-thread-v2 <id>                      Transition thread → abandoned (terminal)\n  report-thread-v2 <id>                       Transition thread → reported (terminal)\n  auto-mute-idle-rel-v2                       Auto-mute idle connected relationships; output flipped\n  auto-abandon-stuck-threads-v2               Auto-abandon stuck threads; output flipped\n  sg-enums-v2\n  sg-config-v2\n  sg-set-max-active-v2 <n>\n  sg-set-max-pending-v2 <n>\n  sg-set-idle-ms-v2 <n>\n  sg-set-stuck-ms-v2 <n>\n  sg-register-node-v2 [options] <id> <owner>\n  sg-activate-node-v2 <id>\n  sg-deactivate-node-v2 <id>\n  sg-remove-node-v2 <id>\n  sg-touch-node-v2 <id>\n  sg-get-node-v2 <id>\n  sg-list-nodes-v2\n  sg-create-edge-v2 [options] <id> <nodeId>\n  sg-establish-edge-v2 <id>\n  sg-sever-edge-v2 <id> [reason]\n  sg-expire-edge-v2 <id>\n  sg-cancel-edge-v2 <id> [reason]\n  sg-get-edge-v2 <id>\n  sg-list-edges-v2\n  sg-auto-deactivate-idle-v2\n  sg-auto-expire-stale-v2\n  sg-gov-stats-v2\n  sg-reset-state-v2\n  help [command]                              display help for command\n",

package/src/commands/agent.js

@@ -10,7 +10,11 @@ import path from "node:path";
 import fs from "node:fs";
 import { randomUUID } from "node:crypto";
 import { createAgentRuntimeFactory } from "../runtime/runtime-factory.js";
-import { captureAgentEvolutionRuntimeComposition } from "../lib/evolution/agent-evolution-runtime-composition-brand.js";
+import {
+  captureAgentEvolutionRuntimeComposition,
+  captureAgentSkillOutcomeIndex,
+} from "../lib/evolution/agent-evolution-runtime-composition-brand.js";
+import { captureSkillVectorAuthority } from "../lib/skill-vector-authority.js";
 import { resolvePromptText } from "../runtime/system-prompt.js";
 import {
   makeFallbackChatFn,
@@ -264,6 +268,14 @@ export async function resolveAgentCommandEvolutionComposition(
 export function registerAgentCommand(program, dependencies = {}) {
   const evolutionCompositionFactory =
     dependencies.evolutionCompositionFactory ?? null;
+  const skillOutcomeIndex =
+    dependencies.skillOutcomeIndex == null
+      ? null
+      : captureAgentSkillOutcomeIndex(dependencies.skillOutcomeIndex);
+  const skillVectorAuthority =
+    dependencies.skillVectorAuthority == null
+      ? null
+      : captureSkillVectorAuthority(dependencies.skillVectorAuthority);
   program
     .command("agent")
     .aliases(["a", "exec"])
@@ -1558,6 +1570,8 @@ export function registerAgentCommand(program, dependencies = {}) {
             // appended after each turn (parity with single-prompt --json-schema).
             jsonSchema: options.jsonSchema || null,
             claudeStorageLaunchEnv,
+            ...(skillOutcomeIndex === null ? {} : { skillOutcomeIndex }),
+            ...(skillVectorAuthority === null ? {} : { skillVectorAuthority }),
             ...(evolutionComposition === null
               ? {}
               : { evolutionIngress: evolutionComposition.evolutionIngress }),
@@ -1898,6 +1912,8 @@ export function registerAgentCommand(program, dependencies = {}) {
           // --fallback-model: retry once on a backup model on transient errors
           chatFn: fallbackChatFn,
           claudeStorageLaunchEnv,
+          ...(skillOutcomeIndex === null ? {} : { skillOutcomeIndex }),
+          ...(skillVectorAuthority === null ? {} : { skillVectorAuthority }),
           ...(evolutionComposition === null
             ? {}
             : { evolutionIngress: evolutionComposition.evolutionIngress }),
@@ -2010,6 +2026,8 @@ export function registerAgentCommand(program, dependencies = {}) {
       }
       const runtime = createAgentRuntimeFactory({
         evolutionComposition,
+        skillOutcomeIndex,
+        skillVectorAuthority,
       }).createAgentRuntime({
         model: options.model,
         thinking,

package/src/commands/evolution-knowledge.js

@@ -0,0 +1,54 @@
+import { intArg } from "../lib/cli-arg.js";
+import { isGovernedKnowledgeReviewHost } from "../lib/evolution/governed-knowledge-review-host.js";
+import { parseJsonOption } from "../lib/parse-json-option.js";
+
+function host(value) {
+  if (!isGovernedKnowledgeReviewHost(value)) {
+    throw new Error(
+      "Governed knowledge review is unavailable: a trusted deployment host is required",
+    );
+  }
+  return value;
+}
+
+function output(value) {
+  console.log(JSON.stringify(value, null, 2));
+}
+
+export function registerGovernedKnowledgeCommands(
+  evolution,
+  { governedKnowledgeReviewHost = null } = {},
+) {
+  const knowledge = evolution
+    .command("knowledge")
+    .description("Review encrypted governed knowledge conflicts");
+
+  knowledge
+    .command("conflicts")
+    .description("List redacted conflicts awaiting human merge")
+    .option("--cursor <n>", "Conflict cursor", intArg("--cursor"), 0)
+    .option("--limit <n>", "Page size (1..256)", intArg("--limit"), 50)
+    .action(async (options) => {
+      output(
+        await host(governedKnowledgeReviewHost).list({
+          cursor: options.cursor,
+          limit: options.limit,
+        }),
+      );
+    });
+
+  knowledge
+    .command("merge <conflict-envelope-digest>")
+    .description("Submit a human-reviewed merged governed record")
+    .requiredOption("--record <json>", "Canonical merged knowledge record")
+    .requiredOption("--reason <text>", "Human merge rationale")
+    .action(async (conflictEnvelopeDigest, options) => {
+      output(
+        await host(governedKnowledgeReviewHost).merge({
+          conflictEnvelopeDigest,
+          mergedRecord: parseJsonOption(options.record, "--record"),
+          reason: options.reason,
+        }),
+      );
+    });
+}

package/src/commands/evolution-workbench.js

@@ -0,0 +1,83 @@
+import { intArg } from "../lib/cli-arg.js";
+import { isEvolutionWorkbenchCliHost } from "../lib/evolution/evolution-workbench-cli-host.js";
+
+function host(value) {
+  if (!isEvolutionWorkbenchCliHost(value)) {
+    throw new Error(
+      "Evolution Workbench is unavailable: a trusted deployment host is required",
+    );
+  }
+  return value;
+}
+
+function output(value) {
+  console.log(JSON.stringify(value, null, 2));
+}
+
+export function registerEvolutionWorkbenchCommands(
+  evolution,
+  { workbenchHost = null } = {},
+) {
+  const workbench = evolution
+    .command("workbench")
+    .description("Review governed Skill evolution evidence and versions");
+
+  workbench
+    .command("list")
+    .description("List verified candidate review packets")
+    .option(
+      "--query <text>",
+      "Search evidence, digest, runtime or capability",
+      "",
+    )
+    .option("--status <status>", "Filter pending|approved|rejected|expired")
+    .option("--offset <n>", "Result offset", intArg("--offset"), 0)
+    .option("--limit <n>", "Result limit (1..500)", intArg("--limit"), 100)
+    .action(async (options) => {
+      output(
+        await host(workbenchHost).list({
+          query: options.query,
+          status: options.status ?? null,
+          offset: options.offset,
+          limit: options.limit,
+        }),
+      );
+    });
+
+  workbench
+    .command("compare <left-packet-digest> <right-packet-digest>")
+    .description("Compare two verified Skill versions")
+    .action(async (left, right) => {
+      output(await host(workbenchHost).compare(left, right));
+    });
+
+  workbench
+    .command("review <decision> <packet-digests...>")
+    .description(
+      "Approve or reject pending packets with per-item human decisions",
+    )
+    .requiredOption("--reason <text>", "Human review reason")
+    .action(async (decision, packetDigests, options) => {
+      output(
+        await host(workbenchHost).review({
+          decision,
+          packetDigests,
+          reason: options.reason,
+        }),
+      );
+    });
+
+  workbench
+    .command("rollback <from-packet-digest> <to-packet-digest>")
+    .description("Roll back the active Skill to an approved exact version")
+    .requiredOption("--reason <text>", "Human rollback reason")
+    .action(async (fromPacketDigest, toPacketDigest, options) => {
+      output(
+        await host(workbenchHost).rollback({
+          fromPacketDigest,
+          toPacketDigest,
+          reason: options.reason,
+        }),
+      );
+    });
+}

package/src/commands/evolution.js

@@ -10,6 +10,8 @@ import ora from "ora";
 import { logger } from "../lib/logger.js";
 import { parseJsonOption } from "../lib/parse-json-option.js";
 import { bootstrap, shutdown } from "../runtime/bootstrap.js";
+import { registerEvolutionWorkbenchCommands } from "./evolution-workbench.js";
+import { registerGovernedKnowledgeCommands } from "./evolution-knowledge.js";
 import {
   assessCapability,
   recordIncrementalModelMetrics,
@@ -41,13 +43,16 @@ import {
   getEvolutionStatsV2,
 } from "../lib/evolution-system.js";
 
-export function registerEvolutionCommand(program) {
+export function registerEvolutionCommand(program, dependencies = {}) {
   const evolution = program
     .command("evolution")
     .description(
       "Evolution metrics and governance records — not model training or active Skill promotion",
     );
 
+  registerEvolutionWorkbenchCommands(evolution, dependencies);
+  registerGovernedKnowledgeCommands(evolution, dependencies);
+
   // evolution assess <name> <score>
   evolution
     .command("assess")

package/src/commands/serve.js

@@ -5,11 +5,21 @@
 
 import { logger } from "../lib/logger.js";
 import { createAgentRuntimeFactory } from "../runtime/runtime-factory.js";
+import { captureAgentSkillOutcomeIndex } from "../lib/evolution/agent-evolution-runtime-composition-brand.js";
+import { captureSkillVectorAuthority } from "../lib/skill-vector-authority.js";
 import path from "node:path";
 
 export function registerServeCommand(program, dependencies = {}) {
   const evolutionCompositionFactory =
     dependencies.evolutionCompositionFactory ?? null;
+  const skillOutcomeIndex =
+    dependencies.skillOutcomeIndex == null
+      ? null
+      : captureAgentSkillOutcomeIndex(dependencies.skillOutcomeIndex);
+  const skillVectorAuthority =
+    dependencies.skillVectorAuthority == null
+      ? null
+      : captureSkillVectorAuthority(dependencies.skillVectorAuthority);
   const serve = program
     .command("serve")
     .description("Start WebSocket server for remote CLI access")
@@ -129,6 +139,8 @@ export function registerServeCommand(program, dependencies = {}) {
               store,
               kernelFactory: () => new CliAgentKernelAdapter({ cwd }),
               evolutionCompositionFactory,
+              skillOutcomeIndex,
+              skillVectorAuthority,
               maxQueuedRequests,
             });
             const info = await host.start();
@@ -159,6 +171,8 @@ export function registerServeCommand(program, dependencies = {}) {
               store,
               kernel: new CliAgentKernelAdapter({ cwd }),
               evolutionCompositionFactory,
+              skillOutcomeIndex,
+              skillVectorAuthority,
               maxQueuedRequests,
             });
           } finally {
@@ -171,6 +185,8 @@ export function registerServeCommand(program, dependencies = {}) {
             evolutionCompositionFactory === null
               ? {}
               : { evolutionCompositionFactory },
+          skillOutcomeIndex,
+          skillVectorAuthority,
         }).createServerRuntime({
           port: parseInt(opts.port, 10),
           host: opts.host,

package/src/commands/skill.js

@@ -59,6 +59,12 @@ import {
 } from "../lib/skill-packs/generator.js";
 import { CLI_PACK_DOMAINS } from "../lib/skill-packs/schema.js";
 import { registerRecordReplayCommands } from "./record-replay.js";
+import { routeSkillDescriptors } from "../lib/skill-retrieval-router.js";
+import { resolveSkillOutcomeAuthority } from "../lib/skill-outcome-authority.js";
+import {
+  captureSkillVectorAuthority,
+  unavailableSkillVectorEvidence,
+} from "../lib/skill-vector-authority.js";
 
 const LAYER_LABELS = {
   bundled: chalk.blue("[bundled]"),
@@ -75,6 +81,84 @@ function canRunOnPlatform(skill) {
   return skill.os.includes(process.platform);
 }
 
+function validateSkillSearchRequest(skills, query, options = {}) {
+  if (
+    !Array.isArray(skills) ||
+    typeof query !== "string" ||
+    query.trim().length < 1 ||
+    query.length > 4096 ||
+    !options ||
+    typeof options !== "object" ||
+    Array.isArray(options)
+  ) {
+    throw new TypeError("Skill search request is invalid");
+  }
+  const limit = options.limit === undefined ? 20 : Number(options.limit);
+  if (!Number.isSafeInteger(limit) || limit < 1 || limit > 64) {
+    throw new TypeError("Skill search limit must be an integer from 1 to 64");
+  }
+  for (const [name, value] of [
+    ["category", options.category],
+    ["source", options.source],
+    ["tag", options.tag],
+    ["os", options.os],
+  ]) {
+    if (
+      value !== undefined &&
+      (typeof value !== "string" || value.length < 1 || value.length > 128)
+    ) {
+      throw new TypeError(`Skill search ${name} is invalid or unbounded`);
+    }
+  }
+  return limit;
+}
+
+export function routeSkillSearch(skills, query, options = {}) {
+  const limit = validateSkillSearchRequest(skills, query, options);
+  const category = options.category ?? null;
+  const routedSkills =
+    category === null
+      ? skills
+      : skills.filter(
+          (candidate) =>
+            String(candidate.category || "").toLowerCase() ===
+            category.toLowerCase(),
+        );
+  return routeSkillDescriptors({
+    skills: routedSkills,
+    query,
+    namespace: options.source ?? null,
+    tags: options.tag ? [options.tag] : [],
+    target: { os: options.os || process.platform },
+    outcomeMetrics: options.outcomeMetrics ?? null,
+    vectorScores: options.vectorScores ?? null,
+    topK: limit,
+  });
+}
+
+export async function routeSkillSearchWithVectorAuthority(
+  skills,
+  query,
+  options = {},
+  authority = null,
+) {
+  validateSkillSearchRequest(skills, query, options);
+  const vectorAuthority =
+    authority === null ? null : captureSkillVectorAuthority(authority);
+  const vector =
+    vectorAuthority === null
+      ? null
+      : await vectorAuthority.score({ query, skills });
+  const routed = routeSkillSearch(skills, query, {
+    ...options,
+    vectorScores: vector?.scores ?? null,
+  });
+  return Object.freeze({
+    ...routed,
+    vectorAuthority: vector?.evidence ?? unavailableSkillVectorEvidence(),
+  });
+}
+
 export const SKILL_TEMPLATE_MD = (name) => `---
 name: ${name}
 display-name: ${name}
@@ -283,7 +367,11 @@ export async function runControlledSkill(options = {}) {
   }
 }
 
-export function registerSkillCommand(program) {
+export function registerSkillCommand(program, dependencies = {}) {
+  const skillVectorAuthority =
+    dependencies.skillVectorAuthority == null
+      ? null
+      : captureSkillVectorAuthority(dependencies.skillVectorAuthority);
   const skill = program
     .command("skill")
     .description(
@@ -455,32 +543,86 @@ export function registerSkillCommand(program) {
   // skill search
   skill
     .command("search")
-    .description("Search skills by keyword")
+    .description("Search digest-bound skills with the canonical router")
     .argument("<query>", "Search query")
-    .action(async (query) => {
+    .option("--category <category>", "Filter by exact category")
+    .option("--tag <tag>", "Require an exact tag")
+    .option(
+      "--source <layer>",
+      "Filter by source layer (bundled, marketplace, managed, workspace)",
+    )
+    .option("--limit <count>", "Maximum results (1-64)", "20")
+    .option("--json", "Output the canonical routing result as JSON")
+    .action(async (query, options) => {
       const skills = loader.loadAll();
-      const q = query.toLowerCase();
-      const matches = skills.filter(
-        (s) =>
-          s.id.includes(q) ||
-          s.displayName.toLowerCase().includes(q) ||
-          s.description.toLowerCase().includes(q) ||
-          s.tags.some((t) => t.toLowerCase().includes(q)),
+      try {
+        validateSkillSearchRequest(skills, query, options);
+      } catch (error) {
+        logger.error(error.message);
+        process.exitCode = 1;
+        return;
+      }
+      const outcomeAuthority = resolveSkillOutcomeAuthority(
+        Object.prototype.hasOwnProperty.call(dependencies, "skillOutcomeIndex")
+          ? { index: dependencies.skillOutcomeIndex }
+          : {},
       );
+      let result;
+      try {
+        result = await routeSkillSearchWithVectorAuthority(
+          skills,
+          query,
+          {
+            ...options,
+            outcomeMetrics: outcomeAuthority.metrics,
+          },
+          skillVectorAuthority,
+        );
+        result = Object.freeze({
+          ...result,
+          outcomeAuthority: outcomeAuthority.evidence,
+        });
+      } catch (error) {
+        logger.error(error.message);
+        process.exitCode = 1;
+        return;
+      }
 
-      if (matches.length === 0) {
+      if (options.json) {
+        console.log(JSON.stringify(result, null, 2));
+        return;
+      }
+
+      if (result.candidates.length === 0) {
         logger.info(`No skills matching "${query}"`);
         return;
       }
 
+      if (!["verified", "verified-indexed"].includes(outcomeAuthority.status)) {
+        logger.warn(
+          "Verified Skill outcome history is unavailable; retrieval is not using partial transcript metrics.",
+        );
+      }
+
       logger.log(
-        chalk.bold(`\nSearch results for "${query}" (${matches.length}):\n`),
+        chalk.bold(
+          `\nSearch results for "${query}" (${result.candidates.length}):\n`,
+        ),
       );
-      for (const s of matches) {
-        const handler = s.hasHandler ? chalk.green("●") : chalk.gray("○");
-        const label = LAYER_LABELS[s.source] || "";
+      if (result.selected === null && result.conflicts.length > 0) {
+        logger.warn(
+          "No automatic selection: narrow the query or filters to resolve the reported conflict.",
+        );
+      }
+      for (const candidate of result.candidates) {
+        const label = LAYER_LABELS[candidate.namespace] || "";
+        logger.log(
+          `  ${chalk.cyan(candidate.id.padEnd(30))} ${chalk.gray(`v${candidate.version}`)} ${label}`,
+        );
         logger.log(
-          `  ${handler} ${chalk.cyan(s.id.padEnd(30))} ${chalk.gray(s.description.substring(0, 40))} ${label}`,
+          chalk.gray(
+            `    ${candidate.digest}  score=${candidate.score.toFixed(3)}  ${candidate.reason}`,
+          ),
         );
       }
       logger.log("");

package/src/data/changelog.json

@@ -1,6 +1,19 @@
 {
   "source": "CHANGELOG.md",
   "releases": [
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.21",
+      "cliVersions": ["0.1.8", "0.2.8", "0.3.11", "0.166.20", "0.166.21"],
+      "date": "2026-09-04",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Added - cc CLI 0.166.21: governed evolution knowledge and IDE review",
+          "body": "> `chainlesschain` **0.166.20 -> 0.166.21**,\n> `@chainlesschain/session-core` **0.3.10 -> 0.3.11**,\n> `@chainlesschain/agent-protocol` **0.1.7 -> 0.1.8**,\n> `@chainlesschain/agent-sdk` **0.2.7 -> 0.2.8**, and\n> `chainlesschain-agent-sdk` **0.2.7 -> 0.2.8** (release candidates,\n> 2026-09-04).\n\n- **Governed knowledge synchronization**: add tenant-scoped encrypted sharing,\n  durable conflict review, human-approved merge publication, revocation\n  dependency settlement, reviewer key lifecycle, and response-loss recovery.\n- **Evolution Workbench and Skill Retrieval**: expose bounded, digest-verified\n  review and evidence-ranked search through CLI, App Server, Desktop, VS Code,\n  and JetBrains surfaces without moving mutation authority into IDE clients.\n- **Coordinated runtime contracts**: ship durable Skill-invocation receipts in\n  Session Core, refreshed Kotlin and Swift protocol projections, and the latest\n  App Server pilot client behavior in both TypeScript and Python SDKs. Personal\n  Data Hub remains `0.4.59` because its published source has not changed.\n- **Release boundary**: publication requires this exact release commit to pass\n  every configured Linux, Windows, and macOS job in `CLI CI` and\n  `CLI Strict Sandbox`, plus the affected protocol and SDK gates. Publish the\n  dependency packages before the pinned CLI, followed by registry and IDE\n  marketplace readback."
+        }
+      ]
+    },
     {
       "productVersion": null,
       "cliVersion": "0.166.20",

package/src/gateways/ws/session-protocol.js

@@ -648,6 +648,8 @@ async function ensureSessionHandler(
         sessionHostLease,
         sessionBudgetRoot,
         evolutionCompositionFactory: server.evolutionCompositionFactory,
+        skillOutcomeIndex: server.skillOutcomeIndex,
+        skillVectorAuthority: server.skillVectorAuthority,
       });
       sessionHostLease = null;
       sessionBudgetRoot = null;