weavatrix 1.17.8 → 1.17.11

package/README.md

@@ -12,8 +12,8 @@
 Weavatrix answers the questions agents otherwise invent: what breaks if this
 file changes, who consumes this n8n field, whether an MCP schema still
 accepts yesterday’s request, which viem call sites follow an ABI layout
-change, and whether `.weavatrix/architecture.json` still holds. **65
-read-only operations**, one revision-bound graph, no LSP and no prompt pack.
+change, and whether `.weavatrix/architecture.json` still holds. **66
+operations**, one revision-bound graph, no LSP and no prompt pack.
 
 Codex, Claude Code, Cursor, and Grok get impact, architecture, APIs, Git
 history, duplicates, dead code, search, semantic links,
@@ -28,7 +28,7 @@ It does not answer from a larger grep or an invented confidence score. Every
 bounded result can carry the repository revision, file, line, extractor,
 evidence kind, and confidence that produced it. `search_code` keeps a
 resident content index for the process: the first search builds it, and
-later searches read it. A `glob` still walks files.
+later searches read it. A `glob` filters that index. The filesystem is scanned only when the widened search is truncated and the filter kept fewer hits than requested.
 
 This npm package is the convenient **prebuilt native tarball**. That is the
 only reason it exists on npm. It is not a TypeScript rewrite, not a Serena
@@ -60,7 +60,7 @@ weavatrix mcp .
 ```toml
 [mcp_servers.weavatrix]
 command = "npx"
-args = ["-y", "weavatrix@1.17.8", "mcp", "."]
+args = ["-y", "weavatrix@1.17.11", "mcp", "."]
 ```
 
 Pass an absolute repository path when the Codex process cwd is not the project
@@ -69,7 +69,7 @@ you intend to analyze.
 ### Claude Code
 
 ```sh
-claude mcp add weavatrix -- npx -y weavatrix@1.17.8 mcp .
+claude mcp add weavatrix -- npx -y weavatrix@1.17.11 mcp .
 ```
 
 ### Cursor
@@ -82,7 +82,7 @@ the plugin for the same server name:
   "mcpServers": {
     "weavatrix": {
       "command": "npx",
-      "args": ["-y", "weavatrix@1.17.8", "mcp", "${workspaceFolder}", "--output-format=structured"]
+      "args": ["-y", "weavatrix@1.17.11", "mcp", "${workspaceFolder}", "--output-format=structured"]
     }
   }
 }
@@ -91,14 +91,14 @@ the plugin for the same server name:
 Profiles expose bounded views of the same engine:
 
 ```sh
-npx -y weavatrix@1.17.8 mcp . --profile=all
-npx -y weavatrix@1.17.8 mcp . --profile=code
-npx -y weavatrix@1.17.8 mcp . --profile=seo
-npx -y weavatrix@1.17.8 mcp . --profile=n8n
-npx -y weavatrix@1.17.8 mcp . --profile=dify
-npx -y weavatrix@1.17.8 mcp . --profile=agent
-npx -y weavatrix@1.17.8 mcp . --profile=diagram
-npx -y weavatrix@1.17.8 mcp . --profile=web3
+npx -y weavatrix@1.17.11 mcp . --profile=all
+npx -y weavatrix@1.17.11 mcp . --profile=code
+npx -y weavatrix@1.17.11 mcp . --profile=seo
+npx -y weavatrix@1.17.11 mcp . --profile=n8n
+npx -y weavatrix@1.17.11 mcp . --profile=dify
+npx -y weavatrix@1.17.11 mcp . --profile=agent
+npx -y weavatrix@1.17.11 mcp . --profile=diagram
+npx -y weavatrix@1.17.11 mcp . --profile=web3
 ```
 
 The package contains native binaries for Windows x64/arm64, macOS x64/arm64,
@@ -233,7 +233,7 @@ Three commits before `ec8bf30` this package was 1.9.2; the agent reads that
 follow-up to a diff without touching the worktree. Binary blobs fail closed
 instead of being decoded into garbage.
 
-## The 65 read-only operations
+## The 66 operations
 
 | Workflow | Operations |
 | --- | --- |
@@ -244,7 +244,7 @@ instead of being decoded into garbage.
 | APIs and transports | `list_endpoints`, `trace_endpoint`, `trace_api_contract` |
 | Architecture | `architecture_inventory`, `get_architecture_contract`, `verify_architecture`, `verify_capabilities`, `explain_architecture_violation`, `propose_architecture_exception` |
 | Local CI | `ci_restrictions`, `ci_protection`, `explain_restriction` |
-| Git and repositories | `git_history`, `git_read_blob`, `cross_repo_git`, `open_repo`, `list_known_repos`, `rebuild_graph` |
+| Git and repositories | `git_history`, `git_read_blob`, `cross_repo_git`, `git_fetch`, `open_repo`, `list_known_repos`, `rebuild_graph` |
 | Native extensions | `semantic_link` |
 | n8n workflows | `n8n_inventory`, `n8n_trace`, `n8n_context` |
 | Dify apps | `dify_inventory`, `dify_trace`, `dify_context` |
@@ -252,7 +252,9 @@ instead of being decoded into garbage.
 | Mermaid diagrams | `diagram_inventory`, `diagram_trace`, `diagram_context` |
 | Web3 integration | `web3_inventory`, `web3_trace`, `web3_impact`, `web3_context` |
 
-Every operation is read-only with respect to the analyzed repository.
+Every operation leaves the analyzed repository unchanged.
+`git_fetch` writes only its cache: a depth-1 checkout of one URL. The launch
+root stays pinned.
 Pagination and explicit limits bound large neighborhoods, histories, searches,
 and contract inventories.
 
@@ -329,12 +331,12 @@ coding agent
     |
     | MCP over stdio
     v
-weavatrix 1.17.8
+weavatrix 1.17.11
     profile catalog · refresh · watcher · MCP framing
     |
     v
-weavatrix-rust 2.17.8
-    typed graph · analysis · 65 product operations including local CI, n8n, Dify, agent packages, Mermaid, and Web3
+weavatrix-rust 2.17.10
+    typed graph · analysis · 66 product operations including local CI, n8n, Dify, agent packages, Mermaid, and Web3
 ```
 
 This npm product owns MCP transport and native distribution. The

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "weavatrix",
-  "version": "1.17.8",
-  "weavatrixEngineVersion": "2.17.8",
-  "description": "Native repository intelligence for coding agents: 65 read-only MCP operations backed by typed evidence graphs, impact, architecture, local CI restrictions, APIs, Git, search, semantic links, n8n workflows, Dify apps, agent packages, Mermaid diagrams, and Web3 ABIs.",
+  "version": "1.17.11",
+  "weavatrixEngineVersion": "2.17.10",
+  "description": "Native repository intelligence for coding agents: 66 MCP operations backed by typed evidence graphs, impact, architecture, local CI restrictions, APIs, Git, search, semantic links, n8n workflows, Dify apps, agent packages, Mermaid diagrams, and Web3 ABIs.",
   "author": "Sergii Ziborov <sergii.ziborov@gmail.com>",
   "license": "MIT",
   "homepage": "https://weavatrix.com",

package/server.json

@@ -2,19 +2,19 @@
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.Weavatrix/weavatrix",
   "title": "Weavatrix",
-  "description": "Native Weavatrix MCP: 65 read-only tools for code, local CI, n8n, Dify, agents, Mermaid, Web3.",
+  "description": "Native Weavatrix MCP: 66 tools for code, local CI, n8n, Dify, agents, Mermaid, Web3.",
   "repository": {
     "url": "https://github.com/Weavatrix/weavatrix",
     "source": "github"
   },
-  "version": "1.17.8",
+  "version": "1.17.11",
   "websiteUrl": "https://weavatrix.com",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "weavatrix",
-      "version": "1.17.8",
+      "version": "1.17.11",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"

package/skill/SKILL.md

@@ -95,7 +95,10 @@ tool ran. Read `evidence_completeness` and `stop_reason`. `MAX_NODES` means
 the combined cap omitted nodes.
 
 `git_history` without `path` is repository HEAD history. Pass `path` for the
-commits that touch one file or directory.
+commits that touch one file or directory. `git_fetch` is separate: one `url`
+and an optional `ref`, depth 1, into a cache. It returns `checkout` and does
+not retarget this process. Analyze that path by launching on it, or by
+`open_repo` only when this process was started with `--allow-retarget`.
 
 `find_dead_code` treats every `main.go` and every Go `func main` as an entry.
 Receiver names and function-literal parameters are not symbols.
@@ -118,6 +121,8 @@ audit and coverage results.
   `coverage_map` is an ingest. Quality builds the LCOV file.
 - Preserve exact transport identity; do not merge Kafka, AMQP/RabbitMQ, NATS,
   SNS/SQS, JMS, GraphQL, and gRPC evidence because operation names match.
-- The core is local, offline, and read-only. Use `weavatrix-refactor` only for
-  an explicitly approved write plan and `weavatrix-online` only for explicitly
-  approved network work.
+- The core reads the launch root and leaves that tree unchanged. `git_fetch`
+  is the one call that contacts a remote: it shallow-clones one URL into a
+  cache and returns that path. Use `weavatrix-refactor` only for an explicitly
+  approved write plan and `weavatrix-online` only for explicitly approved
+  network work beyond that clone.

package/skill/references/tool-routing.md

@@ -10,44 +10,45 @@ cannot silently switch to another repository. Pass an explicit
 
 ## Graph, source, and orientation
 
-- [`graph_stats`](tools/graph_stats.md) — Graph size, evidence and build freshness.
+- [`graph_stats`](tools/graph_stats.md) — Graph size, edge evidence and build freshness of the loaded snapshot.
 - [`get_node`](tools/get_node.md) — Resolve one exact graph node.
-- [`get_neighbors`](tools/get_neighbors.md) — Direct typed incoming and outgoing relationships.
-- [`query_graph`](tools/query_graph.md) — Bounded BFS or DFS around exact or textual seeds.
+- [`get_neighbors`](tools/get_neighbors.md) — Direct typed incoming and outgoing relationships. Compact rows are direction, relation, the other node, and, when present, coupling and the call line.
+- [`query_graph`](tools/query_graph.md) — Bounded BFS or DFS around exact or textual seeds. Edges are source, target, kind, and, when present, coupling and the call line.
 - [`god_nodes`](tools/god_nodes.md) — Rank high-connectivity production nodes.
 - [`shortest_path`](tools/shortest_path.md) — Shortest typed dependency path between two nodes.
 - [`get_community`](tools/get_community.md) — Return one coupling community (containment and package edges excluded).
 - [`list_communities`](tools/list_communities.md) — List deterministic coupling communities (containment and package edges excluded).
 - [`module_map`](tools/module_map.md) — Production folder map at a requested directory depth.
 - [`build_graph`](tools/build_graph.md) — Typed workspace, target, configuration, task, and runner topology from captured manifest evidence.
-- [`search_code`](tools/search_code.md) — Literal or Rust-regex search on the resident content index. A glob still walks files.
+- [`search_code`](tools/search_code.md) — Literal or Rust-regex search on the resident content index. A glob filters that index.
 - [`read_source`](tools/read_source.md) — Bounded source context by node or repository path.
 - [`inspect_symbol`](tools/inspect_symbol.md) — Definition, direct relationships and source evidence.
-- [`go_to_definition`](tools/go_to_definition.md) — Resolve the symbol at a source position to its definition without guessing by name.
-- [`find_references`](tools/find_references.md) — Occurrences of the symbol at a position or label, from the graph and an on-disk SCIP index if present.
-- [`context_bundle`](tools/context_bundle.md) — Compact graph and source bundle for one symbol.
+- [`go_to_definition`](tools/go_to_definition.md) — Resolve the symbol at a source position to its definition without guessing by name. An unresolved position omits definition.
+- [`find_references`](tools/find_references.md) — Occurrences of the symbol at a position or label, from the graph and an on-disk SCIP index if present. Test and classified rows stay out unless opted in.
+- [`context_bundle`](tools/context_bundle.md) — Compact graph and source bundle for one symbol. The subject and relationship rows are compact.
 - [`map_stacktrace`](tools/map_stacktrace.md) — Map stack-trace text onto repository files and symbols.
 
 ## Change impact and Git
 
-- [`get_dependents`](tools/get_dependents.md) — Bounded transitive reverse blast radius.
-- [`change_impact`](tools/change_impact.md) — Read-only Git change impact with graph evidence.
+- [`get_dependents`](tools/get_dependents.md) — Bounded transitive reverse blast radius. The seed and each dependent are id, label, kind, language, and span.
+- [`change_impact`](tools/change_impact.md) — Read-only Git change impact with graph evidence. Impacted nodes are id, label, kind, language, and span.
 - [`select_tests`](tools/select_tests.md) — Select the test suites a change most plausibly needs to run.
 - [`git_history`](tools/git_history.md) — Bounded direct Git history without launching git.
 - [`git_read_blob`](tools/git_read_blob.md) — Bounded UTF-8 file content at an immutable Git revision or blob OID; binary blobs are refused.
+- [`git_fetch`](tools/git_fetch.md) — Shallow-clone one URL at one ref into a cache and return `checkout`. Depth is 1. The process root stays pinned.
 - [`cross_repo_git`](tools/cross_repo_git.md) — Parallel histories, shared commits, or diffs across named local repositories.
-- [`verified_change`](tools/verified_change.md) — Composite pre-commit evidence and conservative verdict.
+- [`verified_change`](tools/verified_change.md) — Composite pre-commit evidence and conservative verdict. `impact_depth` bounds the embedded blast radius. Selected symbols and data-flow edges are compact.
 - [`graph_diff`](tools/graph_diff.md) — Compare the current snapshot with an immutable Git revision.
 
 ## Quality and architecture
 
 - [`architecture_inventory`](tools/architecture_inventory.md) — Bounded architecture overview and evidence-bounded style hypotheses by default, with complete edge/cycle-candidate totals; `detail:"full"` gives paged evidence. Explain statuses and witnesses in prose, not as a JSON dump.
 - [`ci_restrictions`](tools/ci_restrictions.md) — Local GitHub Actions checks and conditional applicability.
-- [`ci_protection`](tools/ci_protection.md) — Candidate checks and declared rule bindings for an explicit file list. Not included in change or diff answers.
+- [`ci_protection`](tools/ci_protection.md) — Candidate checks and declared rule bindings for an explicit file list. Membership ids in the answer are path labels. Not included in change or diff answers.
 - [`explain_restriction`](tools/explain_restriction.md) — One restriction and its evidence limits.
-- [`find_duplicates`](tools/find_duplicates.md) — Deterministic Type-1/2/3 clone families.
-- [`find_dead_code`](tools/find_dead_code.md) — Conservative unreferenced-symbol review queue.
-- [`run_audit`](tools/run_audit.md) — Repository structure and evidence completeness audit.
+- [`find_duplicates`](tools/find_duplicates.md) — Deterministic Type-1/2/3 clone families. `.gen.`, `.generated.`, and OpenAPI Generator headers stay out unless `include_boilerplate` is set.
+- [`find_dead_code`](tools/find_dead_code.md) — Conservative unreferenced-symbol review queue. A type-only import does not keep its target live.
+- [`run_audit`](tools/run_audit.md) — Repository structure and evidence completeness audit. A named category collects only that section.
 - [`coverage_map`](tools/coverage_map.md) — Ingest a report Quality already built. Does not run tests. Missing report is unmeasured, not 0%.
 - [`hot_path_review`](tools/hot_path_review.md) — Rank functions by static complexity times resolved call fan-in.
 - [`perf_attribution`](tools/perf_attribution.md) — Correlate a measurement series with the declarations that changed between the revisions that produced it.
@@ -60,7 +61,7 @@ cannot silently switch to another repository. Pass an explicit
 
 ## APIs and transports
 
-- [`list_endpoints`](tools/list_endpoints.md) — Inventory statically extracted HTTP endpoints, including hand-rolled req.method/pathname conditions.
+- [`list_endpoints`](tools/list_endpoints.md) — Compact HTTP endpoint inventory. `max_results` pages it and reports `endpoints_total`. App Router `route.*` files contribute one endpoint per exported HTTP method. A Go struct that embeds `Unimplemented*Server` contributes `GRPC Service/Method`. A `"use server"` file contributes `ACTION /path/name`.
 - [`trace_endpoint`](tools/trace_endpoint.md) — Resolve an endpoint and its bounded call neighborhood.
 - [`trace_api_contract`](tools/trace_api_contract.md) — Cross-repository HTTP, GraphQL, gRPC and event-transport contract evidence for named backend and client roots.
 
@@ -72,7 +73,7 @@ cannot silently switch to another repository. Pass an explicit
 
 ## Semantic link
 
-- [`semantic_link`](tools/semantic_link.md) — Rank a text query with the local token hash `weavatrix-token-hash-v1`, or link a non-empty caller-supplied vectors array. Nearest-neighbor search, SEO page links, and the event journal are library crates, not MCP tools.
+- [`semantic_link`](tools/semantic_link.md) — Rank a text query with `weavatrix-token-hash-v1` (name, path, doc comment, declaration, short body; test paths rank lower), or link a non-empty caller-supplied vectors array. Nearest-neighbor search, SEO page links, and the event journal are library crates, not MCP tools.
 
 ## n8n workflows
 

package/skill/references/tools/change_impact.md

@@ -4,7 +4,7 @@ Read-only Git change impact with graph evidence.
 
 ## When to use
 
-Map a working-tree diff, explicit files, or Git revisions onto affected graph nodes. Naming `files` or `target` when that file matches HEAD still returns its symbols as `change: "file_scope"` and `change_basis: "explicit_file"`. That is a hypothetical blast radius, not a measured edit. A dirty file keeps the real symbol diff. `status` stays COMPLETE when the tool ran. Read `evidence_completeness` and `stop_reason`. `MAX_NODES` means the combined cap omitted nodes.
+Map a working-tree diff, explicit files, or Git revisions onto affected graph nodes. Naming `files` or `target` when that file matches HEAD still returns its symbols as `change: "file_scope"` and `change_basis: "explicit_file"`. That is a hypothetical blast radius, not a measured edit. A dirty file keeps the real symbol diff. `status` stays COMPLETE when the tool ran. Read `evidence_completeness` and `stop_reason`. `MAX_NODES` means the combined cap omitted nodes. Impacted nodes are id, label, kind, language, and span.
 
 Static impact is not proof that selected behavior executed.
 

package/skill/references/tools/ci_protection.md

@@ -22,5 +22,9 @@ call `ci_restrictions`. For one finding, call `explain_restriction`.
 ```
 
 `candidate_checks` and `declared_rule_bindings` are static candidates.
-Execution, path filters, and remote enforcement are not proven. The live
-MCP `tools/list` schema is authoritative.
+Component and build membership in the answer are path labels
+(`component:directory:src/api`, `test:architecture`, `Cargo.toml`), not
+repository hashes. `restrictions_unresolved` returns at most 20 strings and
+`restrictions_unresolved_total` is the full count. Execution, path filters,
+and remote enforcement are not proven. The live MCP `tools/list` schema is
+authoritative.

package/skill/references/tools/context_bundle.md

@@ -4,7 +4,7 @@ Compact graph and source bundle for one symbol.
 
 ## When to use
 
-Assemble a ranked, token-bounded workset around one task or target.
+Assemble a ranked, token-bounded workset around one task or target. The subject is id, label, kind, language, and span. Relationship rows match compact `get_neighbors`.
 
 ## Inputs
 

package/skill/references/tools/find_dead_code.md

@@ -4,7 +4,7 @@ Conservative unreferenced-symbol review queue.
 
 ## When to use
 
-Build a conservative dead-code review queue. Every `main.go` and every Go `func main` is an entry, so `main` itself is reachable. Receiver names and function-literal parameters are not symbols. Exported symbols with no callers stay at confidence 50; private ones at 85. `REVIEW_ONLY` means the queue is a review list.
+Build a conservative dead-code review queue. Every `main.go` and every Go `func main` is an entry, so `main` itself is reachable. Receiver names and function-literal parameters are not symbols. Exported symbols with no callers stay at confidence 50; private ones at 85. `REVIEW_ONLY` means the queue is a review list. Each candidate is id, label, kind, language, and span. A type-only import does not keep its target live.
 
 Never delete from this result alone; confirm source and framework registration points.
 

package/skill/references/tools/find_duplicates.md

@@ -4,7 +4,7 @@ Deterministic Type-1/2/3 clone families.
 
 ## When to use
 
-Review bounded Type-1, Type-2, or Type-3 clone families before confirming candidates in source.
+Review bounded Type-1, Type-2, or Type-3 clone families before confirming candidates in source. Files named `.gen.` or `.generated.`, and files whose header says they were generated by openapi-generator.tech, stay out unless `include_boilerplate` is set.
 
 ## Inputs
 

package/skill/references/tools/find_references.md

@@ -5,7 +5,7 @@ Occurrences of the symbol at a position or label, from the graph and an on-disk
 ## When to use
 
 List every recorded occurrence of one symbol after you have a label or a pinned
-`(path, line, column)` usage.
+`(path, line, column)` usage. Test and classified rows stay out unless `include_tests` or `include_classified` is set. The definition row stays.
 
 ## Inputs
 

package/skill/references/tools/get_dependents.md

@@ -4,7 +4,7 @@ Bounded transitive reverse blast radius.
 
 ## When to use
 
-Measure a bounded transitive reverse blast radius from one exact node.
+Measure a bounded transitive reverse blast radius from one exact node. The seed and each dependent are id, label, kind, language, and span. Attributes stay on `get_node`.
 
 ## Inputs
 

package/skill/references/tools/get_neighbors.md

@@ -4,7 +4,7 @@ Direct typed incoming and outgoing relationships.
 
 ## When to use
 
-Inspect only the direct typed incoming and outgoing relationships of one exact node.
+Inspect only the direct typed incoming and outgoing relationships of one exact node. The seed and each neighbor node are id, label, kind, language, and span unless `response_detail` is `full`. A compact row also carries direction, relation, and, when present, coupling and the call line. Test and classified neighbors stay out unless `include_tests` or `include_classified` is set.
 
 For transitive reverse impact use `get_dependents`; for bounded multi-hop exploration use `query_graph`.
 

package/skill/references/tools/git_fetch.md

@@ -0,0 +1,27 @@
+# `git_fetch`
+
+Shallow-clone one Git URL at one ref into a local cache and return that checkout. Depth is 1. This launches git and writes only the cache. The process root stays pinned. `git_history` still reads the active repository.
+
+## When to use
+
+The repository to analyze is a remote URL, and this process is pinned to another root. Call `git_fetch`, then launch a new process on `checkout`, or call `open_repo` with that path only when this process was started with `--allow-retarget`. A repeated call for the same URL updates the same cache entry. The cache is not a working copy to edit.
+
+## Inputs
+
+- `url` (string, required) — https, http, ssh, git, or file URL, scp-style `git@host:path`, or an absolute local path. A URL that embeds credentials is refused. A trailing `.git` names the same cache entry.
+- `ref` (string) — branch, tag, or commit. Omit it to fetch the remote HEAD. Depth is always 1.
+- `output_format` ("text" | "json" | "structured", default "json") — text returns one JSON text block of the full payload, not a shorter summary; json returns structured output and mirrors that JSON into text, so the answer is about twice as large; structured drops the mirror and is the smaller payload when the client reads structuredContent.
+
+## Minimal call
+
+```json
+{
+  "name": "git_fetch",
+  "arguments": {
+    "url": "https://github.com/org/repo",
+    "ref": "main"
+  }
+}
+```
+
+The answer carries `checkout`, `commit`, `ref`, `depth` 1, and `reused`. `repository_context.root` remains the launch root. The live MCP `tools/list` schema remains authoritative for this installed version.

package/skill/references/tools/go_to_definition.md

@@ -5,7 +5,7 @@ Resolve the symbol at a source position to its definition without guessing by na
 ## When to use
 
 You already have `(path, line, column)` for a usage and need the definition the
-graph recorded for that occurrence - not a same-named overload elsewhere.
+graph recorded for that occurrence - not a same-named overload elsewhere. An unresolved position omits `definition`.
 
 ## Inputs
 

package/skill/references/tools/graph_stats.md

@@ -1,6 +1,6 @@
 # `graph_stats`
 
-Graph size, evidence and build freshness.
+Graph size, evidence and build freshness. `evidence` counts edges, not a percentage; `evidence_share` is that split. `freshness.state` `CURRENT` means the loaded snapshot, not a new disk walk.
 
 ## When to use
 

package/skill/references/tools/list_endpoints.md

@@ -4,7 +4,7 @@ Inventory statically extracted HTTP endpoints.
 
 ## When to use
 
-Inventory statically extracted HTTP endpoints with optional method and path filters.
+Inventory statically extracted HTTP endpoints with optional method and path filters. Each row is a compact node: id, label, kind, language, and span. `max_results` pages that list and the answer reports `endpoints_total`; omit it to return every visible endpoint. An App Router `route.*` file under `app` contributes one endpoint per exported HTTP method. The URL is the directory path; route groups are omitted. A Go struct that embeds `Unimplemented*Server` contributes `GRPC Service/Method`. A file whose first statement is `"use server"` contributes `ACTION /path/name` for each exported function. Page, layout, and route modules stay on their own rules.
 
 ## Inputs
 

package/skill/references/tools/query_graph.md

@@ -4,7 +4,7 @@ Bounded BFS or DFS around exact or textual seeds.
 
 ## When to use
 
-Traverse a bounded BFS or DFS when a question needs several hops, direction controls, or multiple seeds.
+Traverse a bounded BFS or DFS when a question needs several hops, direction controls, or multiple seeds. Each edge is source, target, kind, and, when present, coupling and the call line.
 
 Start with exact seeds and a small depth, node cap, and `token_budget`.
 

package/skill/references/tools/run_audit.md

@@ -4,7 +4,7 @@ Repository structure and evidence completeness audit.
 
 ## When to use
 
-Run a broad repository health and evidence-completeness pass before targeted investigation.
+Run a broad repository health and evidence-completeness pass before targeted investigation. A named category collects only that section. At least 200 parsed edges with resolved edges under one fifth of that is REVIEW.
 
 ## Inputs
 

package/skill/references/tools/search_code.md

@@ -4,7 +4,7 @@ Literal or Rust-regex repository search without ripgrep.
 
 ## When to use
 
-Find bounded literal or regular-expression matches in file text when the source text is known but its location is not. The process keeps a resident content index: the first search builds it and later searches read it (`backend` `liveindex`). A `glob` still walks the filesystem. This is not a symbol-graph search. Use `find_references` or `go_to_definition` for a symbol.
+Find bounded literal or regular-expression matches in file text when the source text is known but its location is not. The process keeps a resident content index: the first search builds it and later searches read it (`backend` `liveindex`). A `glob` filters that index. The filesystem is scanned only when the widened search is truncated and the filter kept fewer hits than requested. This is not a symbol-graph search. Use `find_references` or `go_to_definition` for a symbol.
 
 ## Inputs
 

package/skill/references/tools/semantic_link.md

@@ -4,7 +4,7 @@ Rank symbols for a phrase, or link caller-supplied vectors.
 
 ## When to use
 
-Pass `query` to rank functions, methods, and types by the local deterministic token hash `weavatrix-token-hash-v1` (name, path, and the declaration line). That hash is not a neural embedding, and Weavatrix does not create one.
+Pass `query` to rank functions, methods, and types by the local deterministic token hash `weavatrix-token-hash-v1` (name, path, a short doc comment above the declaration, the declaration line, and a short body). Test paths rank lower. That hash is not a neural embedding, and Weavatrix does not create one.
 
 Pass a non-empty `vectors` array only when you already have embeddings. An empty `vectors` array without `query` is an error and builds no links. When both are set, the supplied vectors are linked and the phrase is not ranked.
 

package/skill/references/tools/verified_change.md

@@ -4,7 +4,7 @@ Composite pre-commit evidence and conservative verdict.
 
 ## When to use
 
-Produce one conservative plan or verify envelope combining impact, architecture, duplicate, API, and optional test evidence.
+Produce one conservative plan or verify envelope combining impact, architecture, duplicate, API, and optional test evidence. `impact_depth` and `max_impact_nodes` bound the embedded blast radius. Selected symbols are compact nodes. Data-flow edges are source, target, kind, and, when present, coupling and the call line. Each edit context keeps at most 8 relationship rows.
 
 Use the same `task` and base revision in `phase:"plan"` and `phase:"verify"`.