ucn 5.5.3 → 5.6.1

package/mcp/server.js

@@ -29,13 +29,16 @@ const {
     FLAG_APPLICABILITY,
     REVERSE_PARAM_MAP,
     generateMcpParamSection,
+    mcpParamProperties,
+    paramValues,
+    GLOBAL_PARAMS,
     resolveCommand,
     suggestCommand,
     v4MigrationHint,
     formatSurfaceMessage,
 } = require('../core/registry');
 const { execute } = require('../core/execute');
-const { sourceRangeTarget } = require('../core/public-command');
+const { sourceRangeTarget, noOpNotes } = require('../core/public-command');
 const { describeError, UcnError } = require('../core/errors');
 const { applyOutputBudget, MAX_OUTPUT_CHARS } = require('../core/output-budget');
 
@@ -124,13 +127,14 @@ const server = new StdioMcpServer({
 // TOOL HELPERS
 // ============================================================================
 
-function toolResult(text, command, maxChars, suffixNote, params = {}) {
+function toolResult(text, command, maxChars, suffixNote, params = {}, peerText) {
     const suffix = suffixNote || '';
     const budget = applyOutputBudget(text + suffix, {
         command,
         maxChars,
         surface: 'mcp',
         params,
+        ...(typeof peerText === 'string' && { peerText: peerText + suffix }),
     });
     // The text block is the ONLY payload channel. Truncation facts live in the
     // text itself (the OUTPUT TRUNCATED notice carries full size, limit, and
@@ -236,107 +240,40 @@ const CONCISE_TOOL_DESCRIPTION = `Auditable AST code intelligence for JavaScript
 Use UCN for semantic questions: exact definitions, symbol-aware callers/callees, change impact, test selection, dependencies, APIs, entry points, and focused audits. Use grep/ripgrep for simple literals, error messages, configuration, filenames, Markdown, and unsupported languages. UCN search is worthwhile when AST structure, code-only filtering, or the shared agent contract matters.
 
 18 task-oriented commands:
-- repo: repository overview; sections=files,stats,health adds detail. Reports skipped unsupported source explicitly and hands it to grep/language-native tooling.
-- show: one symbol; sections=summary,callers,callees,source,dependencies,tests,types,example,related.
+- repo: repository overview; sections=${paramValues('sections', 'repo').join(',')} selects detail. Reports skipped unsupported source explicitly and hands it to grep/language-native tooling.
+- show: one symbol; sections=${paramValues('sections', 'show').join(',')}.
 - find/usages/search/source: locate definitions, literal-name occurrences, literal text (regex=true selects the linear-time RE2-compatible engine), AST structure, or exact source. Find activity is pinned confirmed + visible-unverified candidates; proved other-target calls are separate.
-- trace: direction=callees or callers; to=entrypoints follows callers to roots.
+- trace: direction=${paramValues('direction', 'trace').join(' or ')}; to=${paramValues('to', 'trace').join('|')} follows callers to roots.
 - impact: symbol impact when name is set; Git-diff impact when it is omitted.
-- tests: static direct links by default; depth>0 includes transitive affected links. Empty results are not runtime coverage proof.
+- tests: static direct links by default; depth>0 includes transitive affected links. Each test is named by its file, suites and name, with the command that runs it where the runner is proven. Empty results are not runtime coverage proof.
 - deps/api/entrypoints/endpoints: architecture and public surfaces.
-- check: symbol signature check when name is set; precommit check when omitted. plan previews the selected declaration plus indexed call/import/export edits.
+- check: symbol signature check when name is set; precommit check when omitted (per changed symbol: BLOCKED = a break was observed, REVIEW = change exposure or a changed call cannot be settled, READY = no unresolved exposure in the modeled checks, not compiler or runtime proof; staged=true reads the git index, not the worktree). plan previews the selected declaration plus indexed call/import/export edits; with delete=true it assesses deleting the declaration (no-static-dependents, has-static-dependents, or review with the reason), by the rule deadcode applies to every name. A .ucn.json "kind": "application" lets exported symbols be assessed.
 - deadcode/audit_async/stacktrace: focused audits and runtime evidence. Computed dispatch is reported as a health/deletion blind spot; unknown decorators and member-assigned handlers are withheld from default dead-code claims.
 
-CONFIRMED carries target-identity evidence. UNVERIFIED is possible and requires review; when same-name definitions compete, show returns their stable handles once above the sites. ACCOUNT conserves observed literal-name lines; an observed-text zero never claims semantic completeness or safe deletion. Evidence weights are ordinal, not probabilities. Warnings, excluded reasons, and contract metadata remain visible when caller evidence is returned. Releases are gated on pinned real repositories: sampled callers, callees, value references, and dead-code claims are compared with ts-morph, Pyright, gopls, rust-analyzer, JDT LS, Roslyn, and clangd, and one handle's claims must agree across find, show, source, impact, tests, check, and caller trace.` + generateMcpParamSection();
+CONFIRMED carries target-identity evidence. UNVERIFIED is possible and requires review; when same-name definitions compete, show returns their stable handles once above the sites. ACCOUNT conserves observed literal-name lines; an observed-text zero never claims semantic completeness or safe deletion. CONTRACT is a state: text-complete means every literal-name line of project source was classified, never that aliases, indirect calls, generated code or runtime dispatch are absent. Source UCN reads without analyzing (bundles, paths excluded in .ucn.json, oversized files, unsupported languages) is searched for each name and listed only when the name occurs there; a path that cannot be read degrades every account. repo health states the scope once. Evidence weights are ordinal, not probabilities. Warnings, excluded reasons, and contract metadata remain visible when caller evidence is returned. Releases are gated on pinned real repositories: sampled callers, callees, value references, and dead-code claims are compared with ts-morph, Pyright, gopls, rust-analyzer, JDT LS, Roslyn, and clangd, and one handle's claims must agree across find, show, source, impact, tests, check, and caller trace.` + generateMcpParamSection();
 
 // The default description is the only public contract. The former verbose
 // description is intentionally not selectable: it documented retired commands
 // and made the single MCP tool difficult for agents to parse.
 const TOOL_DESCRIPTION = CONCISE_TOOL_DESCRIPTION;
 
-const stringParam = (description, extra = {}) => ({ type: 'string', description, ...extra });
-const booleanParam = description => ({ type: 'boolean', description });
-const integerParam = (description, extra = {}) => ({ type: 'integer', description, ...extra });
-const numberParam = (description, extra = {}) => ({ type: 'number', description, ...extra });
-
-// Keep the public JSON Schema and runtime validation rules in one dependency-
-// free object. Unknown keys remain allowed so the handler can return typo and
-// applicability guidance instead of silently changing the requested answer.
+// The public JSON Schema and the runtime validation rules are one object,
+// written from the registry's parameter table: a type, a bound, a value list
+// or a default stated here is the one the engine uses. Unknown keys remain
+// allowed so the handler can return typo and applicability guidance instead
+// of silently changing the requested answer.
 const INPUT_SHAPE = {
-    command: stringParam(
-        `UCN task command. One of: ${getMcpCommandEnum().join(', ')}.`,
-        { enum: getMcpCommandEnum() },
-    ),
-    project_dir: stringParam('Non-empty absolute path, or a path relative to the MCP server process working directory, identifying the project to analyze.', { minLength: 1 }),
-    name: stringParam('Symbol name or stable path:line:name handle. Used by show/find/usages/source/trace/impact/tests/check/plan.'),
-    file: stringParam('File target for source/deps/api or a symbol-disambiguation filter.'),
-    sections: stringParam('Comma-separated projection. show: summary,callers,callees,source,dependencies,tests,types,example,related. repo: summary,files,stats,health.'),
-    exclude: stringParam('Comma-separated patterns to exclude (e.g. "test,mock,vendor")'),
-    include_tests: booleanParam('Include test files in results (excluded by default)'),
-    exclude_tests: booleanParam('Exclude test files: the default for entrypoints (include_tests=true lists them); usages and endpoints list test files unless exclude_tests=true.'),
-    include_methods: booleanParam('Include method callees where receiver evidence permits. Caller-bearing views always tier method sites.'),
-    expand_unverified: booleanParam('trace callers: follow unverified edges; downstream nodes remain marked possible, never confirmed.'),
-    min_confidence: numberParam('Minimum ordinal evidence weight (legacy name; not a probability) for caller/callee edges', { minimum: 0, maximum: 1 }),
-    show_confidence: booleanParam('show: resolution-evidence labels default to visible; set false to hide them. Numeric weights are ordinal, not probabilities.'),
-    unreachable_only: booleanParam('show/impact: retain only relationships unreachable from detected entry points.'),
-    with_types: booleanParam('show: include related type definitions.'),
-    with_source: booleanParam('Attach exact source to find results.'),
-    detailed: booleanParam('repo files: show symbols per file; deps: include import declarations and importers.'),
-    exact: booleanParam('Exact name match only (no substring matching)'),
-    in: stringParam('Only search in this directory path (e.g. "src/core")'),
-    top: integerParam('Max results to show (default: 10). Must be a positive integer.', { exclusiveMinimum: 0, maximum: 10000 }),
-    depth: integerParam('Max depth (default: 3 for trace, 2 for deps); expands all children. Non-negative integer.', { minimum: 0, maximum: 100 }),
-    code_only: booleanParam('Exclude matches in comments and strings'),
-    context: integerParam('Lines of context around each match. Non-negative integer.', { minimum: 0, maximum: 1000 }),
-    include_exported: booleanParam('Include exported symbols in deadcode results'),
-    include_decorated: booleanParam('Include decorated/annotated symbols in deadcode results'),
-    calls_only: booleanParam('tests: retain direct calls and test-case matches only.'),
-    max_lines: integerParam('source: maximum lines per declaration; raw mode discloses any truncation.', { exclusiveMinimum: 0, maximum: 1000000 }),
-    direction: stringParam('trace: callees/callers. deps: imports/importers/both.', { enum: ['callees', 'callers', 'imports', 'importers', 'both'] }),
-    to: stringParam('trace with direction=callers: continue toward entry points.', { enum: ['entrypoints'] }),
-    cycles: booleanParam('deps: report circular imports instead of a file graph.'),
-    term: stringParam('Literal search term by default. Set regex=true only for regular-expression syntax.'),
-    regex: booleanParam('Treat search term as a regular expression (default: false/literal). Ordinary patterns run in an RE2-compatible linear-time engine; unsafe nested repetition is rejected.'),
-    functions: booleanParam('repo stats: include per-function line counts sorted by size.'),
-    hot: booleanParam('repo stats: include the top N most-called functions.'),
-    diverse: booleanParam('show example: return representatives from distinct argument shapes.'),
-    lines: booleanParam('find/usages/search/show/impact: path:line:text listings without default row caps; explicit top/limit still apply. show accepts callers/callees sections, default callers. Tier tags follow a tab; accounting and notes follow as "# " lines. MCP transport budgets still apply and preserve accounting.'),
-    raw: booleanParam('source: code text without a header or line-number gutter, including full large classes. Notes follow as "# " lines; MCP transport budgets still apply.'),
-    git: booleanParam('show summary: attach last-modified, author, and recent-change metadata.'),
-    add_param: stringParam('Parameter name to add (plan command)'),
-    remove_param: stringParam('Parameter name to remove (plan command)'),
-    rename_to: stringParam('New name for the function, method, or type (plan command)'),
-    default_value: stringParam('Default value for added parameter (plan command)'),
-    stack: stringParam('The stack trace text to parse (stacktrace command)'),
-    range: stringParam('source line range, e.g. "10-20" or "15", of the file given as file or name.'),
-    base: stringParam('Git ref (default: HEAD). impact/check without a symbol: diff against it; check with a symbol: compare the declaration with its version there. E.g. "HEAD~3", "main", a commit SHA'),
-    staged: booleanParam('impact/check without a symbol: analyze staged changes.'),
-    deep: booleanParam('repo: include health and sample the ordinal resolution-evidence profile, not accuracy.'),
-    compact: booleanParam('Compact output defaults to true for show/impact and false for usages; set the opposite value to change that command\'s presentation.'),
-    case_sensitive: booleanParam('Case-sensitive search (default: false, case-insensitive)'),
-    all: booleanParam('Lift formatter and result caps where supported.'),
-    top_level: booleanParam('repo files: show only top-level functions.'),
-    class_name: stringParam('Class name to scope method analysis (e.g. "MarketDataFetcher" for close)'),
-    line: integerParam('Definition line pin. Resolves the symbol defined at this exact line (the middle component of a file:line:name handle). Disambiguates same-file same-name definitions.', { exclusiveMinimum: 0, maximum: Number.MAX_SAFE_INTEGER }),
-    limit: integerParam('Max results to return (default: 500; structural search: 50; usages and lines: uncapped). Caps find, usages, search, deadcode, api, and repo files. find text shows the top 5 in detail and counts the rest; limit raises both. Must be a positive integer.', { exclusiveMinimum: 0, maximum: 1000000 }),
-    max_files: integerParam('Max files to index (default: 10000). Use for very large codebases. Must be a positive integer.', { exclusiveMinimum: 0, maximum: 10000000 }),
-    max_chars: integerParam('Max output characters, not UTF-8 bytes, including notes and preserved metadata. Broad sweep commands (repo, entrypoints, endpoints, deadcode, deps, check, audit_async) default to 3K; all other commands default to 10K. Maximum: 100K. all=true lifts formatter caps but keeps the 100K transport ceiling.', { exclusiveMinimum: 0, maximum: 100000 }),
-    type: stringParam('Symbol type filter for structural search: function, class, call, method, type, state, field, constant, macro. Triggers index-based search.'),
-    param: stringParam('Filter by parameter name or type (structural search). E.g. "Request", "ctx".'),
-    receiver: stringParam('Filter calls by receiver (structural search, type=call). E.g. "db", "http".'),
-    returns: stringParam('Filter by return type (structural search). E.g. "Promise", "error".'),
-    decorator: stringParam('Filter by decorator/annotation (structural search). E.g. "Route", "Test".'),
-    exported: booleanParam('Only exported/public symbols (structural search).'),
-    unused: booleanParam('Only symbols with zero callers (structural search).'),
-    framework: stringParam('Filter entrypoints by framework (e.g. "express", "spring", "flask"). Comma-separated for multiple.'),
-    follow_symlinks: booleanParam('Follow symlinks during file discovery (default: true)'),
-    include_bundled: booleanParam('Index *.min.js and *.bundle.js files (default: false). Source maps remain disclosed but unindexed. Bypasses the shared cache.'),
-    bridge: booleanParam('Match server routes to client requests (endpoints command).'),
-    server_only: booleanParam('Only list server routes (endpoints command).'),
-    client_only: booleanParam('Only list client requests (endpoints command).'),
-    unmatched: booleanParam('Only show unmatched routes/requests (endpoints command).'),
-    method: stringParam('Filter by HTTP method (e.g. "GET", "POST") for endpoints.'),
-    prefix: stringParam('Filter routes/requests by path prefix (endpoints command).'),
-    hide_uncertain: booleanParam('Hide uncertain (interpolated-path) bridges (endpoints command).'),
+    command: {
+        type: 'string',
+        description: `UCN task command. One of: ${getMcpCommandEnum().join(', ')}.`,
+        enum: getMcpCommandEnum(),
+    },
+    project_dir: {
+        type: 'string',
+        description: 'Non-empty absolute path, or a path relative to the MCP server process working directory, identifying the project to analyze.',
+        minLength: 1,
+    },
+    ...mcpParamProperties(),
 };
 
 const INPUT_SCHEMA = {
@@ -415,7 +352,7 @@ server.registerTool(
         if (applicable) {
             // Truly global options — apply to all commands (build/display control).
             // Command-specific params (name, term, stack, range, etc.) are in FLAG_APPLICABILITY.
-            const coreParams = new Set(['maxChars', 'maxFiles', 'followSymlinks', 'includeBundled']);
+            const coreParams = new Set(GLOBAL_PARAMS);
             for (const key of Object.keys(ep)) {
                 if (coreParams.has(key)) continue;
                 if (!applicable.includes(key) && ep[key] !== undefined &&
@@ -436,34 +373,23 @@ server.registerTool(
         if (strippedParams.length > 0) {
             noteParts.push(`${strippedParams.join(', ')} ignored (not applicable to ${command}).`);
         }
-        if (ep.includeMethods && ['impact', 'trace', 'tests', 'check'].includes(canonicalCommand)) {
-            noteParts.push(`include_methods=true has no effect on '${command}' — method calls are always tiered by receiver evidence.`);
-        }
+        for (const note of noOpNotes(canonicalCommand, ep)) noteParts.push(formatSurfaceMessage(note, 'mcp'));
         if (projectScopeNote) noteParts.push(projectScopeNote);
         noteParts.push(...unknownParamNotes);
         const strippedNote = noteParts.length > 0
             ? '\n\n' + noteParts.map(part => `Note: ${part}`).join('\n')
             : '';
+        // In a line listing everything that is not a record is a "# " line.
+        const listingNote = noteParts.length > 0
+            ? '\n' + noteParts.map(part => `# Note: ${part}`).join('\n')
+            : '';
 
         // Wrap toolResult to auto-inject command + maxChars + stripping note
-        const tr = (text) => toolResult(text, command, maxChars, strippedNote, ep);
+        const tr = (text, peerText) => toolResult(text, command, maxChars, ep.lines ? listingNote : strippedNote, ep, peerText);
         // Wrap toolError to include stripping note on error paths too
         const te = strippedNote
             ? (msg) => toolError(msg + strippedNote)
             : toolError;
-        // Translate CLI flag syntax in execute-layer notes to MCP param
-        // syntax — the deadcode exported/decorated hints were already
-        // param-styled, but limit/depth/truncation notes leaked
-        // '--limit N' / '--max-files N' / '--all' at this surface.
-        const mn = (note) => note && note
-            .replace(/--limit N\b/g, 'limit=<n>')
-            .replace(/--max-files N\b/g, 'max_files=<n>')
-            .replace(/--depth=N\b/g, 'depth=<n>')
-            .replace(/--detailed\b/g, 'detailed=true')
-            .replace(/--all\b/g, 'all=true')
-            .replace(/--expand-unverified\b/g, 'expand_unverified=true')
-            .replace(/--(\w[\w-]*)/g, (_m, f) => f.replace(/-/g, '_'));
-
         let index = null; // Track for post-command cache save
         try {
             // Public v5 has one MCP dispatch path. The canonical registry,
@@ -514,7 +440,6 @@ server.registerTool(
 
             const presentationExecution = {
                 ...execution,
-                note: mn(execution.note),
                 surface: 'mcp',
             };
             return tr(output.formatPublicText(
@@ -522,6 +447,11 @@ server.registerTool(
                 execution.result,
                 ep,
                 presentationExecution,
+            ), ep.lines || ep.raw ? undefined : output.formatPublicText(
+                canonicalCommand,
+                execution.result,
+                ep,
+                { ...execution, surface: 'cli' },
             ));
 
         } catch (e) {
@@ -540,6 +470,10 @@ server.registerTool(
                 try { index.saveCache(); } catch (_) { /* best-effort */ }
                 index.callsCacheDirty = false;
             }
+            // A HOT ranking this request computed, for the next session.
+            if (index && !ep.includeBundled && !ep.maxFiles && index.hotSummaryDirty) {
+                try { index.saveHotSummaries(); } catch (_) { /* best-effort */ }
+            }
         }
     }
 );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ucn",
-  "version": "5.5.3",
+  "version": "5.6.1",
   "mcpName": "io.github.mleoca/ucn",
   "description": "Auditable AST code intelligence for AI agents: 18 task-oriented commands through one MCP tool, CLI, or agent skill. Supports JS/TS, Python, Go, Rust, Java, C, C++, C#, and HTML.",
   "main": "index.js",
@@ -9,8 +9,8 @@
     "ucn-mcp": "mcp/server.js"
   },
   "scripts": {
-    "version": "node scripts/sync-server-version.js && git add server.json",
-    "test": "node --test test/audit-5.4.0.test.js test/audit-5.3.8.test.js test/audit-5.3.7.test.js test/audit-5.3.6.test.js test/evidence-provenance.test.js test/provenance-unit.test.js test/provenance-scope.test.js test/shell-output.test.js test/parser-unit.test.js test/integration.test.js test/cache.test.js test/formatter.test.js test/interactive.test.js test/feature.test.js test/regression-js.test.js test/regression-py.test.js test/regression-go.test.js test/regression-java.test.js test/regression-rust.test.js test/regression-c-family.test.js test/regression-cross.test.js test/regression-mcp.test.js test/mcp-protocol.test.js test/mcp-sdk-compat.test.js test/dependency-security.test.js test/regression-parser.test.js test/regression-commands.test.js test/regression-fixes.test.js test/regression-bugfixes.test.js test/release-surface-regressions.test.js test/prerelease-audit.test.js test/release-readiness-audit.test.js test/cross-language.test.js test/accuracy.test.js test/command-coverage.test.js test/perf-optimizations.test.js test/performance-gate-policy.test.js test/oracle-gate-policy.test.js test/outcome-policy.test.js test/consistency-eval.test.js test/agent-public-surface-benchmark.test.js test/command-contracts.test.js test/language-adapter.test.js test/systematic-test.js test/mcp-edge-cases.js test/conservation.test.js test/parity-test.js test/trust-matrix.test.js",
+    "version": "node scripts/sync-server-version.js && node scripts/changelog.js && git add server.json CHANGELOG.md",
+    "test": "node --test test/audit-5.4.0.test.js test/audit-5.3.8.test.js test/audit-5.3.7.test.js test/audit-5.3.6.test.js test/evidence-provenance.test.js test/evidence-bands.test.js test/constructed-receiver.test.js test/provenance-unit.test.js test/provenance-scope.test.js test/shell-output.test.js test/param-table.test.js test/changelog.test.js test/repo-facts.test.js test/parser-unit.test.js test/integration.test.js test/cache.test.js test/formatter.test.js test/interactive.test.js test/feature.test.js test/regression-js.test.js test/regression-py.test.js test/regression-go.test.js test/regression-java.test.js test/regression-rust.test.js test/regression-c-family.test.js test/regression-cross.test.js test/regression-mcp.test.js test/mcp-protocol.test.js test/mcp-sdk-compat.test.js test/dependency-security.test.js test/regression-parser.test.js test/regression-commands.test.js test/regression-fixes.test.js test/regression-bugfixes.test.js test/release-surface-regressions.test.js test/prerelease-audit.test.js test/release-readiness-audit.test.js test/cross-language.test.js test/accuracy.test.js test/command-coverage.test.js test/perf-optimizations.test.js test/performance-gate-policy.test.js test/oracle-gate-policy.test.js test/outcome-policy.test.js test/outcome-mutations.test.js test/source-universe.test.js test/deletion.test.js test/check-change-kinds.test.js test/check-outgoing.test.js test/check-performance.test.js test/test-units.test.js test/check-staged.test.js test/consistency-eval.test.js test/agent-public-surface-benchmark.test.js test/command-contracts.test.js test/language-adapter.test.js test/systematic-test.js test/mcp-edge-cases.js test/conservation.test.js test/parity-test.js test/trust-matrix.test.js",
     "benchmark:agent": "node test/agent-public-surface-benchmark.js",
     "benchmark:agent:gate": "node test/agent-public-surface-benchmark.js --gate",
     "benchmark:agent:legacy": "node test/agent-understanding-benchmark.js",
@@ -21,7 +21,8 @@
     "eval:host-calibration": "node eval/lib/host-calibration.js --pin",
     "eval:consistency": "node eval/run-consistency-eval.js --project .",
     "profile:callers": "node eval/profile-callers.js",
-    "lint": "eslint core/ cli/ mcp/ languages/ eval/run-*.js eval/*-gate-policy.js eval/outcome-policy.js eval/profile-callers.js eval/oracles/*.js",
+    "profile:check": "node eval/profile-check.js",
+    "lint": "eslint core/ cli/ mcp/ languages/ eval/run-*.js eval/*-gate-policy.js eval/outcome-policy.js eval/outcome-mutations.js eval/deletion-matrix-cases.js eval/check-matrix-cases.js eval/check-outgoing-cases.js eval/test-unit-matrix-cases.js eval/profile-callers.js eval/profile-check.js eval/oracles/*.js",
     "verify": "npm run lint && npm test",
     "trust:gate:semantic": "node eval/run-oracle-eval.js --release --min-precision 0.98 --max-unscored-ratio 0.10",
     "trust:gate:deadcode": "node eval/run-deadcode-eval.js --release --sample 100 --arm default",
@@ -30,8 +31,13 @@
     "trust:gate:consistency": "node eval/run-consistency-eval.js --release --sample 40",
     "trust:gate:agent": "node test/agent-public-surface-benchmark.js --gate",
     "trust:gate:fast": "node --expose-gc eval/run-performance-gate.js --repo preact-signals,httpx --queries 20 && node eval/run-oracle-eval.js --repo preact-signals,httpx --min-precision 0.98 && node eval/run-consistency-eval.js --repo preact-signals,httpx --sample 20 --gate",
-    "trust:gate": "npm run trust:gate:performance && npm run trust:gate:semantic && npm run trust:gate:deadcode && npm run trust:gate:consistency && npm run trust:gate:agent",
+    "trust:gate:matrices": "node eval/run-deletion-matrix.js && node eval/run-check-matrix.js && node eval/run-test-unit-matrix.js",
+    "trust:gate:outcome": "node eval/run-outcome-eval.js --gate",
+    "trust:gate": "npm run trust:gate:performance && npm run trust:gate:semantic && npm run trust:gate:deadcode && npm run trust:gate:consistency && npm run trust:gate:agent && npm run trust:gate:matrices && npm run trust:gate:outcome",
     "eval:outcome": "node eval/run-outcome-eval.js",
+    "eval:deletion-matrix": "node eval/run-deletion-matrix.js",
+    "eval:check-matrix": "node eval/run-check-matrix.js",
+    "eval:test-unit-matrix": "node eval/run-test-unit-matrix.js",
     "eval:census": "node eval/run-unverified-census.js"
   },
   "keywords": [