chainlesschain 0.166.20 → 0.166.22

package/src/commands/serve.js

@@ -5,11 +5,50 @@
 
 import { logger } from "../lib/logger.js";
 import { createAgentRuntimeFactory } from "../runtime/runtime-factory.js";
+import { captureAgentSkillOutcomeIndex } from "../lib/evolution/agent-evolution-runtime-composition-brand.js";
+import { captureSkillVectorAuthority } from "../lib/skill-vector-authority.js";
+import { isEvolutionWorkbenchCliHost } from "../lib/evolution/evolution-workbench-cli-host.js";
+import { isGovernedKnowledgeReviewHost } from "../lib/evolution/governed-knowledge-review-host.js";
 import path from "node:path";
 
+export function captureServeGovernanceHosts({
+  evolutionWorkbenchHost = null,
+  governedKnowledgeReviewHost = null,
+} = {}) {
+  if (
+    evolutionWorkbenchHost !== null &&
+    !isEvolutionWorkbenchCliHost(evolutionWorkbenchHost)
+  ) {
+    throw new TypeError(
+      "serve evolutionWorkbenchHost must be a branded Workbench host",
+    );
+  }
+  if (
+    governedKnowledgeReviewHost !== null &&
+    !isGovernedKnowledgeReviewHost(governedKnowledgeReviewHost)
+  ) {
+    throw new TypeError(
+      "serve governedKnowledgeReviewHost must be a branded review host",
+    );
+  }
+  return Object.freeze({
+    evolutionWorkbenchHost,
+    governedKnowledgeReviewHost,
+  });
+}
+
 export function registerServeCommand(program, dependencies = {}) {
   const evolutionCompositionFactory =
     dependencies.evolutionCompositionFactory ?? null;
+  const skillOutcomeIndex =
+    dependencies.skillOutcomeIndex == null
+      ? null
+      : captureAgentSkillOutcomeIndex(dependencies.skillOutcomeIndex);
+  const skillVectorAuthority =
+    dependencies.skillVectorAuthority == null
+      ? null
+      : captureSkillVectorAuthority(dependencies.skillVectorAuthority);
+  const governanceHosts = captureServeGovernanceHosts(dependencies);
   const serve = program
     .command("serve")
     .description("Start WebSocket server for remote CLI access")
@@ -129,6 +168,9 @@ export function registerServeCommand(program, dependencies = {}) {
               store,
               kernelFactory: () => new CliAgentKernelAdapter({ cwd }),
               evolutionCompositionFactory,
+              skillOutcomeIndex,
+              skillVectorAuthority,
+              ...governanceHosts,
               maxQueuedRequests,
             });
             const info = await host.start();
@@ -159,6 +201,9 @@ export function registerServeCommand(program, dependencies = {}) {
               store,
               kernel: new CliAgentKernelAdapter({ cwd }),
               evolutionCompositionFactory,
+              skillOutcomeIndex,
+              skillVectorAuthority,
+              ...governanceHosts,
               maxQueuedRequests,
             });
           } finally {
@@ -171,6 +216,8 @@ export function registerServeCommand(program, dependencies = {}) {
             evolutionCompositionFactory === null
               ? {}
               : { evolutionCompositionFactory },
+          skillOutcomeIndex,
+          skillVectorAuthority,
         }).createServerRuntime({
           port: parseInt(opts.port, 10),
           host: opts.host,

package/src/commands/skill.js

@@ -59,6 +59,12 @@ import {
 } from "../lib/skill-packs/generator.js";
 import { CLI_PACK_DOMAINS } from "../lib/skill-packs/schema.js";
 import { registerRecordReplayCommands } from "./record-replay.js";
+import { routeSkillDescriptors } from "../lib/skill-retrieval-router.js";
+import { resolveSkillOutcomeAuthority } from "../lib/skill-outcome-authority.js";
+import {
+  captureSkillVectorAuthority,
+  unavailableSkillVectorEvidence,
+} from "../lib/skill-vector-authority.js";
 
 const LAYER_LABELS = {
   bundled: chalk.blue("[bundled]"),
@@ -75,6 +81,84 @@ function canRunOnPlatform(skill) {
   return skill.os.includes(process.platform);
 }
 
+function validateSkillSearchRequest(skills, query, options = {}) {
+  if (
+    !Array.isArray(skills) ||
+    typeof query !== "string" ||
+    query.trim().length < 1 ||
+    query.length > 4096 ||
+    !options ||
+    typeof options !== "object" ||
+    Array.isArray(options)
+  ) {
+    throw new TypeError("Skill search request is invalid");
+  }
+  const limit = options.limit === undefined ? 20 : Number(options.limit);
+  if (!Number.isSafeInteger(limit) || limit < 1 || limit > 64) {
+    throw new TypeError("Skill search limit must be an integer from 1 to 64");
+  }
+  for (const [name, value] of [
+    ["category", options.category],
+    ["source", options.source],
+    ["tag", options.tag],
+    ["os", options.os],
+  ]) {
+    if (
+      value !== undefined &&
+      (typeof value !== "string" || value.length < 1 || value.length > 128)
+    ) {
+      throw new TypeError(`Skill search ${name} is invalid or unbounded`);
+    }
+  }
+  return limit;
+}
+
+export function routeSkillSearch(skills, query, options = {}) {
+  const limit = validateSkillSearchRequest(skills, query, options);
+  const category = options.category ?? null;
+  const routedSkills =
+    category === null
+      ? skills
+      : skills.filter(
+          (candidate) =>
+            String(candidate.category || "").toLowerCase() ===
+            category.toLowerCase(),
+        );
+  return routeSkillDescriptors({
+    skills: routedSkills,
+    query,
+    namespace: options.source ?? null,
+    tags: options.tag ? [options.tag] : [],
+    target: { os: options.os || process.platform },
+    outcomeMetrics: options.outcomeMetrics ?? null,
+    vectorScores: options.vectorScores ?? null,
+    topK: limit,
+  });
+}
+
+export async function routeSkillSearchWithVectorAuthority(
+  skills,
+  query,
+  options = {},
+  authority = null,
+) {
+  validateSkillSearchRequest(skills, query, options);
+  const vectorAuthority =
+    authority === null ? null : captureSkillVectorAuthority(authority);
+  const vector =
+    vectorAuthority === null
+      ? null
+      : await vectorAuthority.score({ query, skills });
+  const routed = routeSkillSearch(skills, query, {
+    ...options,
+    vectorScores: vector?.scores ?? null,
+  });
+  return Object.freeze({
+    ...routed,
+    vectorAuthority: vector?.evidence ?? unavailableSkillVectorEvidence(),
+  });
+}
+
 export const SKILL_TEMPLATE_MD = (name) => `---
 name: ${name}
 display-name: ${name}
@@ -283,7 +367,11 @@ export async function runControlledSkill(options = {}) {
   }
 }
 
-export function registerSkillCommand(program) {
+export function registerSkillCommand(program, dependencies = {}) {
+  const skillVectorAuthority =
+    dependencies.skillVectorAuthority == null
+      ? null
+      : captureSkillVectorAuthority(dependencies.skillVectorAuthority);
   const skill = program
     .command("skill")
     .description(
@@ -455,32 +543,86 @@ export function registerSkillCommand(program) {
   // skill search
   skill
     .command("search")
-    .description("Search skills by keyword")
+    .description("Search digest-bound skills with the canonical router")
     .argument("<query>", "Search query")
-    .action(async (query) => {
+    .option("--category <category>", "Filter by exact category")
+    .option("--tag <tag>", "Require an exact tag")
+    .option(
+      "--source <layer>",
+      "Filter by source layer (bundled, marketplace, managed, workspace)",
+    )
+    .option("--limit <count>", "Maximum results (1-64)", "20")
+    .option("--json", "Output the canonical routing result as JSON")
+    .action(async (query, options) => {
       const skills = loader.loadAll();
-      const q = query.toLowerCase();
-      const matches = skills.filter(
-        (s) =>
-          s.id.includes(q) ||
-          s.displayName.toLowerCase().includes(q) ||
-          s.description.toLowerCase().includes(q) ||
-          s.tags.some((t) => t.toLowerCase().includes(q)),
+      try {
+        validateSkillSearchRequest(skills, query, options);
+      } catch (error) {
+        logger.error(error.message);
+        process.exitCode = 1;
+        return;
+      }
+      const outcomeAuthority = resolveSkillOutcomeAuthority(
+        Object.prototype.hasOwnProperty.call(dependencies, "skillOutcomeIndex")
+          ? { index: dependencies.skillOutcomeIndex }
+          : {},
       );
+      let result;
+      try {
+        result = await routeSkillSearchWithVectorAuthority(
+          skills,
+          query,
+          {
+            ...options,
+            outcomeMetrics: outcomeAuthority.metrics,
+          },
+          skillVectorAuthority,
+        );
+        result = Object.freeze({
+          ...result,
+          outcomeAuthority: outcomeAuthority.evidence,
+        });
+      } catch (error) {
+        logger.error(error.message);
+        process.exitCode = 1;
+        return;
+      }
 
-      if (matches.length === 0) {
+      if (options.json) {
+        console.log(JSON.stringify(result, null, 2));
+        return;
+      }
+
+      if (result.candidates.length === 0) {
         logger.info(`No skills matching "${query}"`);
         return;
       }
 
+      if (!["verified", "verified-indexed"].includes(outcomeAuthority.status)) {
+        logger.warn(
+          "Verified Skill outcome history is unavailable; retrieval is not using partial transcript metrics.",
+        );
+      }
+
       logger.log(
-        chalk.bold(`\nSearch results for "${query}" (${matches.length}):\n`),
+        chalk.bold(
+          `\nSearch results for "${query}" (${result.candidates.length}):\n`,
+        ),
       );
-      for (const s of matches) {
-        const handler = s.hasHandler ? chalk.green("●") : chalk.gray("○");
-        const label = LAYER_LABELS[s.source] || "";
+      if (result.selected === null && result.conflicts.length > 0) {
+        logger.warn(
+          "No automatic selection: narrow the query or filters to resolve the reported conflict.",
+        );
+      }
+      for (const candidate of result.candidates) {
+        const label = LAYER_LABELS[candidate.namespace] || "";
+        logger.log(
+          `  ${chalk.cyan(candidate.id.padEnd(30))} ${chalk.gray(`v${candidate.version}`)} ${label}`,
+        );
         logger.log(
-          `  ${handler} ${chalk.cyan(s.id.padEnd(30))} ${chalk.gray(s.description.substring(0, 40))} ${label}`,
+          chalk.gray(
+            `    ${candidate.digest}  score=${candidate.score.toFixed(3)}  ${candidate.reason}`,
+          ),
         );
       }
       logger.log("");

package/src/data/changelog.json

@@ -1,6 +1,32 @@
 {
   "source": "CHANGELOG.md",
   "releases": [
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.22",
+      "cliVersions": ["0.166.21", "0.166.22"],
+      "date": "2026-09-05",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Fixed - cc CLI 0.166.22: keep IDE Agent streams alive during slow commands",
+          "body": "> `chainlesschain` **0.166.21 -> 0.166.22** (release candidate,\n> 2026-09-05).\n\n- **Responsive persistent IDE streams**: execute foreground shell commands\n  asynchronously for `stream-json` hosts, so a slow networked command such as\n  `git push` no longer blocks the Agent protocol pump or session-lease\n  heartbeat.\n- **Safe late heartbeat recovery**: let the exact live local lease owner renew\n  after an event-loop stall. A revocation or successor still changes the\n  durable authority tuple and fences the old host before any guarded write.\n- **Regression coverage**: verify event-loop responsiveness, late renewal, and\n  the IDE stream's non-blocking shell option while retaining the existing\n  takeover, revocation, and delegated-writer fences.\n- **Release inventory coherence**: align the Skill-writer inventory with the\n  current candidate-only sync and inactive marketplace-plugin staging paths,\n  removing stale evidence for legacy active hot-loading.\n- **Release boundary**: publication requires this exact release commit to pass\n  every configured Linux, Windows, and macOS job in `CLI CI` and\n  `CLI Strict Sandbox`; no Session Core, Agent SDK/Protocol, Personal Data Hub,\n  or other npm workspace version changes are required for this CLI-only fix."
+        }
+      ]
+    },
+    {
+      "productVersion": null,
+      "cliVersion": "0.166.21",
+      "cliVersions": ["0.1.8", "0.2.8", "0.3.11", "0.166.20", "0.166.21"],
+      "date": "2026-09-04",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Added - cc CLI 0.166.21: governed evolution knowledge and IDE review",
+          "body": "> `chainlesschain` **0.166.20 -> 0.166.21**,\n> `@chainlesschain/session-core` **0.3.10 -> 0.3.11**,\n> `@chainlesschain/agent-protocol` **0.1.7 -> 0.1.8**,\n> `@chainlesschain/agent-sdk` **0.2.7 -> 0.2.8**, and\n> `chainlesschain-agent-sdk` **0.2.7 -> 0.2.8** (release candidates,\n> 2026-09-04).\n\n- **Governed knowledge synchronization**: add tenant-scoped encrypted sharing,\n  durable conflict review, human-approved merge publication, revocation\n  dependency settlement, reviewer key lifecycle, and response-loss recovery.\n- **Evolution Workbench and Skill Retrieval**: expose bounded, digest-verified\n  review and evidence-ranked search through CLI, App Server, Desktop, VS Code,\n  and JetBrains surfaces without moving mutation authority into IDE clients.\n- **Coordinated runtime contracts**: ship durable Skill-invocation receipts in\n  Session Core, refreshed Kotlin and Swift protocol projections, and the latest\n  App Server pilot client behavior in both TypeScript and Python SDKs. Personal\n  Data Hub remains `0.4.59` because its published source has not changed.\n- **Release boundary**: publication requires this exact release commit to pass\n  every configured Linux, Windows, and macOS job in `CLI CI` and\n  `CLI Strict Sandbox`, plus the affected protocol and SDK gates. Publish the\n  dependency packages before the pinned CLI, followed by registry and IDE\n  marketplace readback."
+        }
+      ]
+    },
     {
       "productVersion": null,
       "cliVersion": "0.166.20",

package/src/gateways/ws/session-protocol.js

@@ -648,6 +648,8 @@ async function ensureSessionHandler(
         sessionHostLease,
         sessionBudgetRoot,
         evolutionCompositionFactory: server.evolutionCompositionFactory,
+        skillOutcomeIndex: server.skillOutcomeIndex,
+        skillVectorAuthority: server.skillVectorAuthority,
       });
       sessionHostLease = null;
       sessionBudgetRoot = null;

package/src/gateways/ws/ws-agent-handler.js

@@ -74,6 +74,8 @@ import {
   settleWsTurnClaim,
 } from "../../harness/jsonl-session-store.js";
 import { sessionBudgetAdmissionError } from "../../lib/session-budget-production-root.js";
+import { captureAgentSkillOutcomeIndex } from "../../lib/evolution/agent-evolution-runtime-composition-brand.js";
+import { captureSkillVectorAuthority } from "../../lib/skill-vector-authority.js";
 import {
   beginSessionBudgetUsage,
   markSessionBudgetUsageUnknown,
@@ -178,6 +180,8 @@ export class WSAgentHandler {
     sessionBudgetRoot = null,
     hostResourceBudget = null,
     evolutionCompositionFactory = null,
+    skillOutcomeIndex = null,
+    skillVectorAuthority = null,
   }) {
     this.session = session;
     this.interaction = interaction;
@@ -252,6 +256,23 @@ export class WSAgentHandler {
       throw new TypeError("evolutionCompositionFactory must be a function");
     }
     this._evolutionCompositionFactory = evolutionCompositionFactory;
+    this._skillOutcomeIndex =
+      skillOutcomeIndex === null
+        ? null
+        : captureAgentSkillOutcomeIndex(skillOutcomeIndex);
+    this._skillVectorAuthority =
+      skillVectorAuthority === null
+        ? null
+        : captureSkillVectorAuthority(skillVectorAuthority);
+    if (
+      this._skillOutcomeIndex !== null &&
+      this._skillVectorAuthority !== null &&
+      this._skillOutcomeIndex.tenantId !== this._skillVectorAuthority.tenantId
+    ) {
+      throw new TypeError(
+        "WebSocket retrieval authorities must share one tenant",
+      );
+    }
     this._compactionLlmQuery = compactionLlmQuery || null;
     this._compactionSettlementBlock = null;
     this._compactionChatFn =
@@ -333,6 +354,22 @@ export class WSAgentHandler {
           "Agent evolution composition belongs to another WebSocket turn",
         );
       }
+      if (
+        this._skillOutcomeIndex !== null &&
+        composition.tenantId !== this._skillOutcomeIndex.tenantId
+      ) {
+        throw new TypeError(
+          "WebSocket evolution composition and Skill outcome index must share one tenant",
+        );
+      }
+      if (
+        this._skillVectorAuthority !== null &&
+        composition.tenantId !== this._skillVectorAuthority.tenantId
+      ) {
+        throw new TypeError(
+          "WebSocket evolution composition and Skill vector authority must share one tenant",
+        );
+      }
       await composition.evolutionIngress.start();
       return composition;
     } catch (cause) {
@@ -821,44 +858,50 @@ export class WSAgentHandler {
     let result;
     try {
       this._sessionHostLease?.assert?.();
-      result = await this._compactContextMemory(session.messages, {
-        provider: session.provider,
-        model: session.model,
-        baseUrl: session.baseUrl,
-        apiKey: session.apiKey,
-        signal:
-          signal || this._sessionBudgetSignal || this._sessionHostLease?.signal,
-        onlyIfNeeded: true,
-        preserveCompletedExchange: true,
-        llmQuery: this._compactionLlmQuery,
-        chatFn: this._compactionChatFn,
-        chatOptions: {
-          cwd: session.projectRoot,
-          sessionId: session.id,
-        },
-        ...(meterCompaction
-          ? {
-              onProviderCallStart: () => {
-                const call = this._beginCanonicalCompactionUsage();
-                compactionUsageCall = call;
-                return call.callId;
-              },
+      result = await this._compactContextMemory(
+        session.messages,
+        {
+          provider: session.provider,
+          model: session.model,
+          baseUrl: session.baseUrl,
+          apiKey: session.apiKey,
+          signal:
+            signal ||
+            this._sessionBudgetSignal ||
+            this._sessionHostLease?.signal,
+          onlyIfNeeded: true,
+          preserveCompletedExchange: true,
+          llmQuery: this._compactionLlmQuery,
+          chatFn: this._compactionChatFn,
+          chatOptions: {
+            cwd: session.projectRoot,
+            sessionId: session.id,
+          },
+          ...(meterCompaction
+            ? {
+                onProviderCallStart: () => {
+                  const call = this._beginCanonicalCompactionUsage();
+                  compactionUsageCall = call;
+                  return call.callId;
+                },
+              }
+            : {}),
+          maxMessages: session.compactionMaxMessages,
+          maxTokens: session.compactionMaxTokens,
+          maxOutputTokens: session.compactionMaxOutputTokens,
+          summaryInputMaxChars: session.compactionInputMaxChars,
+          onContextMemorySummarySettled: (summaryResult) => {
+            if (compactionUsageCall && !compactionUsageSettled) {
+              this._settleCanonicalCompactionUsage(
+                compactionUsageCall,
+                summaryResult,
+              );
+              compactionUsageSettled = true;
             }
-          : {}),
-        maxMessages: session.compactionMaxMessages,
-        maxTokens: session.compactionMaxTokens,
-        maxOutputTokens: session.compactionMaxOutputTokens,
-        summaryInputMaxChars: session.compactionInputMaxChars,
-        onContextMemorySummarySettled: (summaryResult) => {
-          if (compactionUsageCall && !compactionUsageSettled) {
-            this._settleCanonicalCompactionUsage(
-              compactionUsageCall,
-              summaryResult,
-            );
-            compactionUsageSettled = true;
-          }
+          },
         },
-      }, "auto");
+        "auto",
+      );
       if (compactionUsageCall && !compactionUsageSettled) {
         this._settleCanonicalCompactionUsage(compactionUsageCall, result);
         compactionUsageSettled = true;
@@ -1471,6 +1514,12 @@ export class WSAgentHandler {
         shellPolicyOverrides: session.shellPolicyOverrides || null,
         slotFiller,
         interaction: this.interaction,
+        ...(this._skillOutcomeIndex === null
+          ? {}
+          : { skillOutcomeIndex: this._skillOutcomeIndex }),
+        ...(this._skillVectorAuthority === null
+          ? {}
+          : { skillVectorAuthority: this._skillVectorAuthority }),
         signal: turnSignal,
         sessionBudget: this._sessionBudget,
         // P0 authority: null unless opted in (byte-identical default — agent
@@ -1567,6 +1616,7 @@ export class WSAgentHandler {
               ? event.result?.skill || event.result?.skill_name || undefined
               : undefined),
           durationMs,
+          invocationReceipt: event.result?.invocationReceipt,
         });
         if (record.providerId) activeToolCalls.delete(record.providerId);
         const index = activeToolCallOrder.indexOf(record);
@@ -2183,41 +2233,46 @@ export class WSAgentHandler {
         try {
           this.assertSessionBudgetAdmission("WebSocket compaction");
           this._sessionHostLease?.assert?.();
-          result = await this._compactContextMemory(session.messages, {
-            provider: session.provider,
-            model: session.model,
-            baseUrl: session.baseUrl,
-            apiKey: session.apiKey,
-            signal: this._sessionBudgetSignal || this._sessionHostLease?.signal,
-            force: true,
-            preserveCompletedExchange: true,
-            llmQuery: this._compactionLlmQuery,
-            chatFn: this._compactionChatFn,
-            chatOptions: {
-              cwd: session.projectRoot,
-              sessionId: session.id,
-            },
-            ...(meterCompaction
-              ? {
-                  onProviderCallStart: () => {
-                    const call = this._beginCanonicalCompactionUsage();
-                    compactionUsageCall = call;
-                    return call.callId;
-                  },
+          result = await this._compactContextMemory(
+            session.messages,
+            {
+              provider: session.provider,
+              model: session.model,
+              baseUrl: session.baseUrl,
+              apiKey: session.apiKey,
+              signal:
+                this._sessionBudgetSignal || this._sessionHostLease?.signal,
+              force: true,
+              preserveCompletedExchange: true,
+              llmQuery: this._compactionLlmQuery,
+              chatFn: this._compactionChatFn,
+              chatOptions: {
+                cwd: session.projectRoot,
+                sessionId: session.id,
+              },
+              ...(meterCompaction
+                ? {
+                    onProviderCallStart: () => {
+                      const call = this._beginCanonicalCompactionUsage();
+                      compactionUsageCall = call;
+                      return call.callId;
+                    },
+                  }
+                : {}),
+              maxOutputTokens: session.compactionMaxOutputTokens,
+              summaryInputMaxChars: session.compactionInputMaxChars,
+              onContextMemorySummarySettled: (summaryResult) => {
+                if (compactionUsageCall && !compactionUsageSettled) {
+                  this._settleCanonicalCompactionUsage(
+                    compactionUsageCall,
+                    summaryResult,
+                  );
+                  compactionUsageSettled = true;
                 }
-              : {}),
-            maxOutputTokens: session.compactionMaxOutputTokens,
-            summaryInputMaxChars: session.compactionInputMaxChars,
-            onContextMemorySummarySettled: (summaryResult) => {
-              if (compactionUsageCall && !compactionUsageSettled) {
-                this._settleCanonicalCompactionUsage(
-                  compactionUsageCall,
-                  summaryResult,
-                );
-                compactionUsageSettled = true;
-              }
+              },
             },
-          }, "manual");
+            "manual",
+          );
           if (compactionUsageCall && !compactionUsageSettled) {
             this._settleCanonicalCompactionUsage(compactionUsageCall, result);
             compactionUsageSettled = true;

package/src/gateways/ws/ws-server.js

@@ -15,6 +15,8 @@ import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
 import { fileURLToPath } from "node:url";
 import { dirname, join } from "node:path";
 import { WebSocketServer } from "ws";
+import { captureAgentSkillOutcomeIndex } from "../../lib/evolution/agent-evolution-runtime-composition-brand.js";
+import { captureSkillVectorAuthority } from "../../lib/skill-vector-authority.js";
 import {
   createEnvelope,
   envelopeFromStreamEvent,
@@ -330,6 +332,23 @@ export class ChainlessChainWSServer extends EventEmitter {
     }
     this.evolutionCompositionFactory =
       options.evolutionCompositionFactory || null;
+    this.skillOutcomeIndex =
+      options.skillOutcomeIndex == null
+        ? null
+        : captureAgentSkillOutcomeIndex(options.skillOutcomeIndex);
+    this.skillVectorAuthority =
+      options.skillVectorAuthority == null
+        ? null
+        : captureSkillVectorAuthority(options.skillVectorAuthority);
+    if (
+      this.skillOutcomeIndex !== null &&
+      this.skillVectorAuthority !== null &&
+      this.skillOutcomeIndex.tenantId !== this.skillVectorAuthority.tenantId
+    ) {
+      throw new TypeError(
+        "WebSocket retrieval authorities must share one tenant",
+      );
+    }
 
     /** Optional Phase-5 envelope bus for fan-out to hosted HTTP SSE. */
     this.envelopeBus = options.envelopeBus || null;

package/src/generated/cc-agent-protocol.schema.json

@@ -3649,7 +3649,13 @@
                     "graph/status",
                     "graph/history",
                     "graph/cancel",
-                    "graph/reconcile"
+                    "graph/reconcile",
+                    "evolution/workbench/list",
+                    "evolution/workbench/compare",
+                    "evolution/workbench/review",
+                    "evolution/workbench/rollback",
+                    "evolution/knowledge/conflicts",
+                    "evolution/knowledge/merge"
                   ]
                 }
               }