@skill-map/cli 0.21.0 → 0.23.0

package/dist/index.js

@@ -92,18 +92,15 @@ var Registry = class {
   }
 };
 
-// kernel/orchestrator.ts
-import { createHash } from "crypto";
-import { existsSync as existsSync8, statSync as statSync2 } from "fs";
-import { isAbsolute as isAbsolute3, resolve as resolvePath } from "path";
-import { Tiktoken } from "js-tiktoken/lite";
+// kernel/orchestrator/index.ts
+import { existsSync as existsSync9, statSync as statSync2 } from "fs";
+import { Tiktoken as Tiktoken2 } from "js-tiktoken/lite";
 import cl100k_base from "js-tiktoken/ranks/cl100k_base";
-import yaml4 from "js-yaml";
 
 // package.json
 var package_default = {
   name: "@skill-map/cli",
-  version: "0.21.0",
+  version: "0.23.0",
   description: "skill-map reference implementation \u2014 kernel + CLI + adapters.",
   license: "MIT",
   type: "module",
@@ -156,29 +153,30 @@ var package_default = {
     "lint:fix": "eslint . --fix",
     reference: "node scripts/build-reference.js",
     "reference:check": "node scripts/build-reference.js --check",
-    validate: "npm run typecheck && npm run lint && npm run build && npm run test:ci && npm run reference:check",
+    validate: "npm run validate:compile && npm run validate:test",
+    "validate:compile": "npm run typecheck && npm run lint && npm run build && npm run reference:check",
+    "validate:test": "npm run test:ci",
     pretest: "tsup",
-    "pretest:ci": "tsup",
     "pretest:coverage": "tsup",
     "pretest:coverage:html": "tsup",
     test: "tsc --noEmit && node --import tsx --test --test-reporter=spec 'test/**/*.test.ts' 'built-in-plugins/**/*.test.ts' 'kernel/**/*.test.ts' 'server/**/*.test.ts'",
-    "test:ci": "tsc --noEmit && node --import tsx --test 'test/**/*.test.ts' 'built-in-plugins/**/*.test.ts' 'kernel/**/*.test.ts' 'server/**/*.test.ts'",
+    "test:ci": "node --import tsx --test 'test/**/*.test.ts' 'built-in-plugins/**/*.test.ts' 'kernel/**/*.test.ts' 'server/**/*.test.ts'",
     "test:coverage": "tsc --noEmit && SKILL_MAP_SKIP_BENCHMARK=1 node --experimental-default-config-file --import tsx --test --experimental-test-coverage 'test/**/*.test.ts' 'built-in-plugins/**/*.test.ts' 'kernel/**/*.test.ts' 'server/**/*.test.ts'",
     "test:coverage:html": "tsc --noEmit && SKILL_MAP_SKIP_BENCHMARK=1 c8 node --import tsx --test 'test/**/*.test.ts' 'built-in-plugins/**/*.test.ts' 'kernel/**/*.test.ts' 'server/**/*.test.ts'",
     clean: "rm -rf dist coverage"
   },
   dependencies: {
     "@hono/node-server": "2.0.1",
-    "@skill-map/spec": "0.21.0",
+    "@skill-map/spec": "0.23.0",
     ajv: "8.18.0",
     "ajv-formats": "3.0.1",
     chokidar: "5.0.0",
     clipanion: "4.0.0-rc.4",
-    hono: "4.12.16",
+    hono: "4.12.18",
     ignore: "7.0.5",
     "js-tiktoken": "1.0.21",
     "js-yaml": "4.1.1",
-    kysely: "0.28.16",
+    kysely: "0.28.17",
     semver: "7.7.4",
     typanion: "3.14.0",
     ws: "8.20.0"
@@ -206,12 +204,32 @@ var package_default = {
   }
 };
 
-// kernel/sidecar/parse.ts
-import { existsSync, readFileSync } from "fs";
-import { dirname, resolve } from "path";
+// kernel/adapters/in-memory-progress.ts
+var InMemoryProgressEmitter = class {
+  #listeners = /* @__PURE__ */ new Set();
+  emit(event) {
+    for (const listener of this.#listeners) listener(event);
+  }
+  subscribe(listener) {
+    this.#listeners.add(listener);
+    return () => {
+      this.#listeners.delete(listener);
+    };
+  }
+};
+
+// kernel/adapters/plugin-loader/index.ts
 import { createRequire } from "module";
+import { existsSync, readFileSync as readFileSync2, readdirSync } from "fs";
+import { join, resolve as resolve3 } from "path";
+import { pathToFileURL } from "url";
+import semver from "semver";
+
+// kernel/adapters/plugin-loader/id-utils.ts
+import { isAbsolute, relative, resolve } from "path";
+
+// kernel/adapters/plugin-loader/validation.ts
 import { Ajv2020 } from "ajv/dist/2020.js";
-import yaml from "js-yaml";
 
 // kernel/util/ajv-interop.ts
 import addFormatsModule from "ajv-formats";
@@ -220,171 +238,149 @@ function applyAjvFormats(ajv) {
   addFormats(ajv);
 }
 
-// kernel/sidecar/parse.ts
-function readSidecarFor(mdAbsolutePath) {
-  const sidecarPath = sidecarPathFor(mdAbsolutePath);
-  if (!existsSync(sidecarPath)) {
-    return { parsed: null, present: false, issues: [] };
-  }
-  let raw;
-  try {
-    raw = readFileSync(sidecarPath, "utf8");
-  } catch (err) {
-    return {
-      parsed: null,
-      present: true,
-      issues: [{ message: `cannot read ${sidecarPath}: ${err.message}` }]
-    };
-  }
-  let parsedYaml;
-  try {
-    parsedYaml = yaml.load(raw);
-  } catch (err) {
-    return {
-      parsed: null,
-      present: true,
-      issues: [{ message: `malformed YAML in ${sidecarPath}: ${err.message}` }]
-    };
-  }
-  if (!isPlainObject(parsedYaml)) {
-    return {
-      parsed: null,
-      present: true,
-      issues: [{ message: `sidecar root must be a YAML mapping at ${sidecarPath}` }]
-    };
-  }
-  const sidecarValidator = getSidecarValidator();
-  if (!sidecarValidator(parsedYaml)) {
-    const errors = (sidecarValidator.errors ?? []).map((e) => `${e.instancePath || "(root)"} ${e.message ?? e.keyword}`).join("; ");
-    return {
-      parsed: null,
-      present: true,
-      issues: [{ message: `sidecar schema validation failed at ${sidecarPath}: ${errors}` }]
-    };
-  }
-  const root = parsedYaml;
-  const identityBlock = root["identity"];
-  const annotationsRaw = root["annotations"];
-  const annotations = isPlainObject(annotationsRaw) ? Object.keys(annotationsRaw).length === 0 ? null : annotationsRaw : null;
+// kernel/extensions/hook.ts
+var HOOK_TRIGGERS = Object.freeze([
+  "boot",
+  "scan.started",
+  "scan.completed",
+  "extractor.completed",
+  "analyzer.completed",
+  "action.completed",
+  "job.spawning",
+  "job.completed",
+  "job.failed",
+  "shutdown"
+]);
+
+// kernel/adapters/plugin-loader/validation.ts
+var KNOWN_KINDS = /* @__PURE__ */ new Set([
+  "provider",
+  "extractor",
+  "analyzer",
+  "action",
+  "formatter",
+  "hook"
+]);
+var KNOWN_KINDS_LIST = [...KNOWN_KINDS].join(" / ");
+var HOOKABLE_TRIGGERS_LIST = HOOK_TRIGGERS.join(", ");
+
+// kernel/adapters/plugin-loader/storage-schemas.ts
+import { readFileSync } from "fs";
+import { resolve as resolve2 } from "path";
+import { Ajv2020 as Ajv20202 } from "ajv/dist/2020.js";
+
+// kernel/i18n/plugin-store.texts.ts
+var PLUGIN_STORE_TEXTS = {
+  kvValidationFailed: "plugin '{{pluginId}}' ctx.store.set('{{key}}', value): value violates declared schema ({{schemaPath}}): {{errors}}",
+  dedicatedValidationFailed: "plugin '{{pluginId}}' ctx.store.write('{{table}}', row): row violates declared schema ({{schemaPath}}): {{errors}}"
+};
+
+// kernel/adapters/plugin-store.ts
+var KV_SCHEMA_KEY = "__kv__";
+function makeKvStoreWrapper(opts) {
+  const { pluginId, schema, persist } = opts;
   return {
-    parsed: {
-      filePath: sidecarPath,
-      identityBodyHash: String(identityBlock["bodyHash"]),
-      identityFrontmatterHash: String(identityBlock["frontmatterHash"]),
-      identityPath: String(identityBlock["path"]),
-      annotations,
-      raw: root
-    },
-    present: true,
-    issues: []
+    async set(key, value) {
+      if (schema) {
+        if (!schema.validate(value)) {
+          throw new Error(
+            tx(PLUGIN_STORE_TEXTS.kvValidationFailed, {
+              pluginId,
+              schemaPath: schema.schemaPath,
+              key,
+              errors: formatAjvErrors(schema.validate.errors ?? null)
+            })
+          );
+        }
+      }
+      await persist(key, value);
+    }
   };
 }
-function sidecarPathFor(mdAbsolutePath) {
-  if (mdAbsolutePath.endsWith(".md")) {
-    return `${mdAbsolutePath.slice(0, -".md".length)}.sm`;
-  }
-  return `${mdAbsolutePath}.sm`;
-}
-function isPlainObject(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-var cachedSidecarValidator = null;
-function getSidecarValidator() {
-  if (cachedSidecarValidator) return cachedSidecarValidator;
-  const ajv = new Ajv2020({ strict: false, allErrors: true, allowUnionTypes: true });
-  applyAjvFormats(ajv);
-  const specRoot = resolveSpecRoot();
-  const annotationsSchema = JSON.parse(
-    readFileSync(resolve(specRoot, "schemas/annotations.schema.json"), "utf8")
-  );
-  const sidecarSchema = JSON.parse(
-    readFileSync(resolve(specRoot, "schemas/sidecar.schema.json"), "utf8")
-  );
-  ajv.addSchema(annotationsSchema);
-  cachedSidecarValidator = ajv.compile(sidecarSchema);
-  return cachedSidecarValidator;
+function makeDedicatedStoreWrapper(opts) {
+  const { pluginId, schemas, persist } = opts;
+  return {
+    async write(table, row) {
+      const schema = schemas?.[table];
+      if (schema) {
+        if (!schema.validate(row)) {
+          throw new Error(
+            tx(PLUGIN_STORE_TEXTS.dedicatedValidationFailed, {
+              pluginId,
+              table,
+              schemaPath: schema.schemaPath,
+              errors: formatAjvErrors(schema.validate.errors ?? null)
+            })
+          );
+        }
+      }
+      await persist(table, row);
+    }
+  };
 }
-function resolveSpecRoot() {
-  const require2 = createRequire(import.meta.url);
-  try {
-    const indexPath = require2.resolve("@skill-map/spec/index.json");
-    return dirname(indexPath);
-  } catch {
-    throw new Error(
-      "@skill-map/spec not resolvable \u2014 sidecar reader cannot load schemas."
-    );
+function makePluginStore(opts) {
+  const manifest = opts.plugin.manifest;
+  if (!manifest?.storage) return void 0;
+  const storageSchemas = opts.plugin.storageSchemas;
+  if (manifest.storage.mode === "kv") {
+    if (!opts.persistKv) return void 0;
+    const schema = storageSchemas?.[KV_SCHEMA_KEY];
+    return makeKvStoreWrapper({
+      pluginId: manifest.id,
+      schema,
+      persist: opts.persistKv
+    });
   }
-}
-
-// kernel/sidecar/drift.ts
-function computeDriftStatus(args) {
-  const bodyDrift = args.storedBodyHash !== args.liveBodyHash;
-  const fmDrift = args.storedFrontmatterHash !== args.liveFrontmatterHash;
-  if (bodyDrift && fmDrift) return "stale-both";
-  if (bodyDrift) return "stale-body";
-  if (fmDrift) return "stale-frontmatter";
-  return "fresh";
-}
-
-// kernel/sidecar/discover-orphans.ts
-import { existsSync as existsSync2, readdirSync, statSync } from "fs";
-import { join, relative, sep } from "path";
-function discoverOrphanSidecars(roots, shouldSkip) {
-  const out = [];
-  for (const root of roots) {
-    walk(root, root, shouldSkip ?? (() => false), out);
+  if (manifest.storage.mode === "dedicated") {
+    if (!opts.persistDedicated) return void 0;
+    return makeDedicatedStoreWrapper({
+      pluginId: manifest.id,
+      schemas: storageSchemas,
+      persist: opts.persistDedicated
+    });
   }
-  return out;
+  return void 0;
 }
-function walk(root, current, shouldSkip, out) {
-  let entries;
-  try {
-    entries = readdirSync(current, { withFileTypes: true, encoding: "utf8" });
-  } catch {
-    return;
-  }
-  for (const entry of entries) {
-    const full = join(current, entry.name);
-    const rel = relative(root, full).split(sep).join("/");
-    if (shouldSkip(rel)) continue;
-    if (entry.isSymbolicLink()) continue;
-    if (entry.isDirectory()) {
-      walk(root, full, shouldSkip, out);
-      continue;
-    }
-    if (!entry.isFile()) continue;
-    if (!entry.name.endsWith(".sm")) continue;
-    const expectedMd = `${full.slice(0, -".sm".length)}.md`;
-    if (existsSync2(expectedMd) && safeIsFile(expectedMd)) continue;
-    out.push({ sidecarPath: full, relativePath: rel, expectedMdPath: expectedMd });
-  }
+function formatAjvErrors(errors) {
+  if (!errors || errors.length === 0) return "(no AJV details)";
+  return errors.map((e) => `${e.instancePath || "(root)"} ${e.message ?? e.keyword}`).join("; ");
 }
-function safeIsFile(path) {
-  try {
-    return statSync(path).isFile();
-  } catch {
-    return false;
-  }
+
+// kernel/adapters/plugin-loader/index.ts
+function installedSpecVersion() {
+  const require2 = createRequire(import.meta.url);
+  const indexPath = require2.resolve("@skill-map/spec/index.json");
+  const pkgPath = resolve3(indexPath, "..", "package.json");
+  const pkg = JSON.parse(readFileSync2(pkgPath, "utf8"));
+  return pkg.version;
 }
 
-// kernel/sidecar/store.ts
-import { existsSync as existsSync5, readFileSync as readFileSync5, renameSync as renameSync2, writeFileSync as writeFileSync2, unlinkSync as unlinkSync2 } from "fs";
-import { dirname as dirname4, resolve as resolve5 } from "path";
-import { createRequire as createRequire3 } from "module";
+// kernel/adapters/schema-validators.ts
+import { readFileSync as readFileSync3 } from "fs";
+import { dirname, resolve as resolve4 } from "path";
+import { createRequire as createRequire2 } from "module";
 import { Ajv2020 as Ajv20203 } from "ajv/dist/2020.js";
-import yaml2 from "js-yaml";
-
-// core/config/helper.ts
-import { isAbsolute, resolve as resolve4 } from "path";
 
-// kernel/config/loader.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
+// kernel/types/view-catalog.ts
+var ALL_SLOT_NAMES = [
+  "card.title.right",
+  "card.subtitle.left",
+  "card.footer.left",
+  "card.footer.right",
+  "graph.node.alert",
+  "inspector.header.badge.counter",
+  "inspector.header.badge.tag",
+  "inspector.body.panel.breakdown",
+  "inspector.body.panel.records",
+  "inspector.body.panel.tree",
+  "inspector.body.panel.key-values",
+  "inspector.body.panel.link-list",
+  "inspector.body.panel.markdown",
+  "topbar.nav.start"
+];
+var KNOWN_SLOT_NAMES = new Set(ALL_SLOT_NAMES);
 
 // kernel/adapters/schema-validators.ts
-import { readFileSync as readFileSync2 } from "fs";
-import { dirname as dirname2, resolve as resolve2 } from "path";
-import { createRequire as createRequire2 } from "module";
-import { Ajv2020 as Ajv20202 } from "ajv/dist/2020.js";
 var SCHEMA_FILES = {
   node: "schemas/node.schema.json",
   link: "schemas/link.schema.json",
@@ -419,23 +415,23 @@ function loadSchemaValidators() {
   return cachedValidators;
 }
 function buildSchemaValidators() {
-  const specRoot = resolveSpecRoot2();
-  const ajv = new Ajv20202({
+  const specRoot = resolveSpecRoot();
+  const ajv = new Ajv20203({
     strict: false,
     allErrors: true,
     allowUnionTypes: true
   });
   applyAjvFormats(ajv);
   for (const rel of SUPPORTING_SCHEMAS) {
-    const file = resolve2(specRoot, rel);
+    const file = resolve4(specRoot, rel);
     if (!existsSyncSafe(file)) continue;
-    const schema = JSON.parse(readFileSync2(file, "utf8"));
+    const schema = JSON.parse(readFileSync3(file, "utf8"));
     ajv.addSchema(schema);
   }
   const validators = /* @__PURE__ */ new Map();
   for (const [name, rel] of Object.entries(SCHEMA_FILES)) {
-    const file = resolve2(specRoot, rel);
-    const schema = JSON.parse(readFileSync2(file, "utf8"));
+    const file = resolve4(specRoot, rel);
+    const schema = JSON.parse(readFileSync3(file, "utf8"));
     const byId = typeof schema.$id === "string" ? ajv.getSchema(schema.$id) : void 0;
     validators.set(name, byId ?? ajv.compile(schema));
   }
@@ -452,24 +448,8 @@ function buildSchemaValidators() {
   });
   const contributionValidators = /* @__PURE__ */ new Map();
   const VIEW_SLOTS_ID = "https://skill-map.dev/spec/v0/view-slots.schema.json";
-  const KNOWN_SLOTS = /* @__PURE__ */ new Set([
-    "card.title.right",
-    "card.subtitle.left",
-    "card.footer.left",
-    "card.footer.right",
-    "graph.node.alert",
-    "inspector.header.badge.counter",
-    "inspector.header.badge.tag",
-    "inspector.body.panel.breakdown",
-    "inspector.body.panel.records",
-    "inspector.body.panel.tree",
-    "inspector.body.panel.key-values",
-    "inspector.body.panel.link-list",
-    "inspector.body.panel.markdown",
-    "topbar.nav.start"
-  ]);
   function getContributionValidator(slot) {
-    if (!KNOWN_SLOTS.has(slot)) return null;
+    if (!KNOWN_SLOT_NAMES.has(slot)) return null;
     const existing = contributionValidators.get(slot);
     if (existing) return existing;
     const ref = `${VIEW_SLOTS_ID}#/$defs/payloads/${slot}`;
@@ -515,15 +495,15 @@ function buildSchemaValidators() {
   };
 }
 function buildProviderFrontmatterValidator(providers) {
-  const specRoot = resolveSpecRoot2();
-  const ajv = new Ajv20202({
+  const specRoot = resolveSpecRoot();
+  const ajv = new Ajv20203({
     strict: false,
     allErrors: true,
     allowUnionTypes: true
   });
   applyAjvFormats(ajv);
-  const baseFile = resolve2(specRoot, "schemas/frontmatter/base.schema.json");
-  const baseSchema = JSON.parse(readFileSync2(baseFile, "utf8"));
+  const baseFile = resolve4(specRoot, "schemas/frontmatter/base.schema.json");
+  const baseSchema = JSON.parse(readFileSync3(baseFile, "utf8"));
   ajv.addSchema(baseSchema);
   registerProviderAuxiliarySchemas(ajv, providers);
   const compiled = /* @__PURE__ */ new Map();
@@ -560,20 +540,20 @@ function registerProviderAuxiliarySchemas(ajv, providers) {
     }
   }
 }
-function resolveSpecRoot2() {
+function resolveSpecRoot() {
   const require2 = createRequire2(import.meta.url);
   try {
     const indexPath = require2.resolve("@skill-map/spec/index.json");
-    return dirname2(indexPath);
+    return dirname(indexPath);
   } catch {
     throw new Error(
-      "@skill-map/spec not resolvable \u2014 ensure the workspace is linked or the package is installed."
+      "@skill-map/spec not resolvable: ensure the workspace is linked or the package is installed."
     );
   }
 }
 function existsSyncSafe(path) {
   try {
-    readFileSync2(path, "utf8");
+    readFileSync3(path, "utf8");
     return true;
   } catch {
     return false;
@@ -585,45 +565,6 @@ function formatErrorMessage(err) {
   return err instanceof Error ? err.message : String(err);
 }
 
-// kernel/util/skill-map-paths.ts
-import { join as join3 } from "path";
-
-// core/paths/db-path.ts
-import { join as join2, resolve as resolve3 } from "path";
-var SKILL_MAP_DIR = ".skill-map";
-var DB_FILENAME = "skill-map.db";
-var LOCAL_SETTINGS_FILENAME = "settings.local.json";
-var DEFAULT_DB_REL = `${SKILL_MAP_DIR}/${DB_FILENAME}`;
-var GITIGNORE_ENTRIES = [
-  `${SKILL_MAP_DIR}/${LOCAL_SETTINGS_FILENAME}`,
-  `${SKILL_MAP_DIR}/${DB_FILENAME}`
-];
-
-// core/config/atomic-write.ts
-import {
-  existsSync as existsSync4,
-  mkdirSync,
-  readFileSync as readFileSync4,
-  renameSync,
-  unlinkSync,
-  writeFileSync
-} from "fs";
-import { dirname as dirname3 } from "path";
-
-// kernel/adapters/in-memory-progress.ts
-var InMemoryProgressEmitter = class {
-  #listeners = /* @__PURE__ */ new Set();
-  emit(event) {
-    for (const listener of this.#listeners) listener(event);
-  }
-  subscribe(listener) {
-    this.#listeners.add(listener);
-    return () => {
-      this.#listeners.delete(listener);
-    };
-  }
-};
-
 // kernel/adapters/silent-logger.ts
 var SilentLogger = class {
   trace() {
@@ -657,606 +598,314 @@ function getActiveLogger() {
   return active;
 }
 
-// kernel/adapters/plugin-loader.ts
-import { createRequire as createRequire4 } from "module";
-import { existsSync as existsSync6, readFileSync as readFileSync6, readdirSync as readdirSync2 } from "fs";
-import { isAbsolute as isAbsolute2, join as join4, relative as relative2, resolve as resolve6 } from "path";
-import { pathToFileURL } from "url";
-import { Ajv2020 as Ajv20204 } from "ajv/dist/2020.js";
-import semver from "semver";
-
-// kernel/i18n/plugin-store.texts.ts
-var PLUGIN_STORE_TEXTS = {
-  kvValidationFailed: "plugin '{{pluginId}}' ctx.store.set('{{key}}', value): value violates declared schema ({{schemaPath}}) \u2014 {{errors}}",
-  dedicatedValidationFailed: "plugin '{{pluginId}}' ctx.store.write('{{table}}', row): row violates declared schema ({{schemaPath}}) \u2014 {{errors}}"
-};
-
-// kernel/adapters/plugin-store.ts
-var KV_SCHEMA_KEY = "__kv__";
-function makeKvStoreWrapper(opts) {
-  const { pluginId, schema, persist } = opts;
-  return {
-    async set(key, value) {
-      if (schema) {
-        if (!schema.validate(value)) {
-          throw new Error(
-            tx(PLUGIN_STORE_TEXTS.kvValidationFailed, {
-              pluginId,
-              schemaPath: schema.schemaPath,
-              key,
-              errors: formatAjvErrors(schema.validate.errors ?? null)
-            })
-          );
-        }
-      }
-      await persist(key, value);
+// kernel/extensions/hook-dispatcher.ts
+function makeHookDispatcher(hooks, emitter) {
+  if (hooks.length === 0) {
+    return { dispatch: async () => {
+    } };
+  }
+  const byTrigger = /* @__PURE__ */ new Map();
+  for (const hook of hooks) {
+    if (hook.mode === "probabilistic") {
+      const qualifiedId = qualifiedExtensionId(hook.pluginId, hook.id);
+      log.warn(
+        `Probabilistic hook ${qualifiedId} deferred to job subsystem (future job subsystem). The hook is registered but will not dispatch in-scan.`,
+        { hookId: qualifiedId, mode: "probabilistic" }
+      );
+      continue;
     }
-  };
-}
-function makeDedicatedStoreWrapper(opts) {
-  const { pluginId, schemas, persist } = opts;
+    for (const trig of hook.triggers) {
+      const bucket = byTrigger.get(trig);
+      if (bucket) bucket.push(hook);
+      else byTrigger.set(trig, [hook]);
+    }
+  }
   return {
-    async write(table, row) {
-      const schema = schemas?.[table];
-      if (schema) {
-        if (!schema.validate(row)) {
-          throw new Error(
-            tx(PLUGIN_STORE_TEXTS.dedicatedValidationFailed, {
-              pluginId,
-              table,
-              schemaPath: schema.schemaPath,
-              errors: formatAjvErrors(schema.validate.errors ?? null)
+    async dispatch(trigger, event) {
+      const subs = byTrigger.get(trigger);
+      if (!subs || subs.length === 0) return;
+      for (const hook of subs) {
+        if (!matchesFilter(hook, event)) continue;
+        const ctx = buildHookContext(hook, trigger, event);
+        try {
+          await hook.on(ctx);
+        } catch (err) {
+          const qualifiedId = qualifiedExtensionId(hook.pluginId, hook.id);
+          const message = formatErrorMessage(err);
+          emitter.emit(
+            makeEvent("extension.error", {
+              kind: "hook-error",
+              extensionId: qualifiedId,
+              trigger,
+              message
             })
           );
         }
       }
-      await persist(table, row);
     }
   };
 }
-function makePluginStore(opts) {
-  const manifest = opts.plugin.manifest;
-  if (!manifest?.storage) return void 0;
-  const storageSchemas = opts.plugin.storageSchemas;
-  if (manifest.storage.mode === "kv") {
-    if (!opts.persistKv) return void 0;
-    const schema = storageSchemas?.[KV_SCHEMA_KEY];
-    return makeKvStoreWrapper({
-      pluginId: manifest.id,
-      schema,
-      persist: opts.persistKv
-    });
-  }
-  if (manifest.storage.mode === "dedicated") {
-    if (!opts.persistDedicated) return void 0;
-    return makeDedicatedStoreWrapper({
-      pluginId: manifest.id,
-      schemas: storageSchemas,
-      persist: opts.persistDedicated
-    });
-  }
-  return void 0;
+function makeEvent(type, data) {
+  return { type, timestamp: (/* @__PURE__ */ new Date()).toISOString(), data };
 }
-function formatAjvErrors(errors) {
-  if (!errors || errors.length === 0) return "(no AJV details)";
-  return errors.map((e) => `${e.instancePath || "(root)"} ${e.message ?? e.keyword}`).join("; ");
+function matchesFilter(hook, event) {
+  if (!hook.filter) return true;
+  const data = event.data ?? {};
+  for (const [key, expected] of Object.entries(hook.filter)) {
+    if (data[key] !== expected) return false;
+  }
+  return true;
 }
-
-// kernel/extensions/hook.ts
-var HOOK_TRIGGERS = Object.freeze([
-  "boot",
-  "scan.started",
-  "scan.completed",
-  "extractor.completed",
-  "analyzer.completed",
-  "action.completed",
-  "job.spawning",
-  "job.completed",
-  "job.failed",
-  "shutdown"
-]);
-
-// kernel/adapters/plugin-loader.ts
-var KNOWN_KINDS = /* @__PURE__ */ new Set(["provider", "extractor", "analyzer", "action", "formatter", "hook"]);
-var KNOWN_KINDS_LIST = [...KNOWN_KINDS].join(" / ");
-var HOOKABLE_TRIGGERS_LIST = HOOK_TRIGGERS.join(", ");
-function installedSpecVersion() {
-  const require2 = createRequire4(import.meta.url);
-  const indexPath = require2.resolve("@skill-map/spec/index.json");
-  const pkgPath = resolve6(indexPath, "..", "package.json");
-  const pkg = JSON.parse(readFileSync6(pkgPath, "utf8"));
-  return pkg.version;
+function buildHookContext(_hook, trigger, event) {
+  const data = event.data ?? {};
+  const ctx = {
+    event: {
+      type: trigger,
+      timestamp: event.timestamp,
+      ...event.runId !== void 0 ? { runId: event.runId } : {},
+      ...event.jobId !== void 0 ? { jobId: event.jobId } : {},
+      data: event.data
+    }
+  };
+  if (typeof data["extractorId"] === "string") ctx.extractorId = data["extractorId"];
+  if (typeof data["analyzerId"] === "string") ctx.analyzerId = data["analyzerId"];
+  if (typeof data["actionId"] === "string") ctx.actionId = data["actionId"];
+  if (data["node"] && typeof data["node"] === "object") {
+    ctx.node = data["node"];
+  }
+  if (data["jobResult"] !== void 0) ctx.jobResult = data["jobResult"];
+  return ctx;
 }
 
 // kernel/i18n/orchestrator.texts.ts
 var ORCHESTRATOR_TEXTS = {
   frontmatterInvalid: "Frontmatter for {{path}} ({{kind}}) failed schema validation: {{errors}}",
-  frontmatterMalformedPasteWithIndent: "Frontmatter fence in {{path}} appears indented; YAML frontmatter MUST start with `---` at column 0. The file was scanned as body-only \u2014 the metadata block was silently lost. Move the `---` lines to the start of the line.",
+  frontmatterMalformedPasteWithIndent: "Frontmatter fence in {{path}} appears indented; YAML frontmatter MUST start with `---` at column 0. The file was scanned as body-only; the metadata block was silently lost. Move the `---` lines to the start of the line.",
   frontmatterMalformedByteOrderMark: "Frontmatter fence in {{path}} is preceded by a UTF-8 byte-order mark (BOM); the file was scanned as body-only. Re-save the file as UTF-8 without BOM. The metadata block was silently lost.",
-  frontmatterMalformedMissingClose: "Frontmatter in {{path}} opens with `---` but never closes \u2014 no matching `---` line at column 0 was found. The file was scanned as body-only and every metadata field was silently lost. Add a closing `---` line below the metadata block.",
+  frontmatterMalformedMissingClose: "Frontmatter in {{path}} opens with `---` but never closes (no matching `---` line at column 0 was found). The file was scanned as body-only and every metadata field was silently lost. Add a closing `---` line below the metadata block.",
   extensionErrorLinkKindNotDeclared: 'Extractor "{{extractorId}}" emitted a link of kind "{{linkKind}}" outside its declared `emitsLinkKinds` set [{{declaredKinds}}]. Link dropped.',
   extensionErrorIssueInvalidSeverity: `Rule "{{analyzerId}}" emitted an issue with invalid severity {{severity}} (allowed: 'error' | 'warn' | 'info'). Issue dropped.`,
   extensionErrorContributionUnknownId: 'Extractor "{{extractorId}}" emitted contribution "{{contributionId}}" on {{nodePath}} but did not declare it in its `viewContributions` map. Contribution dropped.',
   extensionErrorContributionPayloadInvalid: 'Extractor "{{extractorId}}" emitted contribution "{{contributionId}}" on {{nodePath}}; payload failed the "{{slot}}" schema: {{errors}}. Contribution dropped.',
+  extensionErrorRecommendedActionMissing: 'Analyzer "{{analyzerId}}" declares recommendedAction "{{actionId}}" but no Action is registered under that qualified id. The analyzer stays registered; the recommendation will not surface in the inspector.',
   runScanRootEmptyArray: "runScan: roots must contain at least one path (spec requires minItems: 1)",
   runScanRootMissing: "runScan: root path '{{root}}' does not exist or is not a directory"
 };
 
-// kernel/scan/walk-content.ts
-import { readFile, readdir, stat } from "fs/promises";
-import { join as join5, relative as relative3, sep as sep2 } from "path";
-
-// kernel/scan/ignore.ts
-import { existsSync as existsSync7, readFileSync as readFileSync7 } from "fs";
-import { dirname as dirname5, resolve as resolve7 } from "path";
-import { fileURLToPath } from "url";
-import ignoreFactory from "ignore";
-function buildIgnoreFilter(opts = {}) {
-  const ig = ignoreFactory();
-  if (opts.includeDefaults !== false) {
-    ig.add(loadDefaultsText());
-  }
-  if (opts.configIgnore && opts.configIgnore.length > 0) {
-    ig.add(opts.configIgnore);
-  }
-  if (opts.ignoreFileText && opts.ignoreFileText.length > 0) {
-    ig.add(opts.ignoreFileText);
-  }
-  return {
-    ignores(relativePath) {
-      if (relativePath === "" || relativePath === "." || relativePath === "./") {
-        return false;
+// kernel/orchestrator/extractors.ts
+async function runExtractorsForNode(opts) {
+  const internalLinks = [];
+  const externalLinks = [];
+  const enrichmentBuffer = /* @__PURE__ */ new Map();
+  const contributions = [];
+  const validators = loadSchemaValidators();
+  for (const extractor of opts.extractors) {
+    const qualifiedId = qualifiedExtensionId(extractor.pluginId, extractor.id);
+    const emitLink = (link) => {
+      const validated = validateLink(extractor, link, opts.emitter);
+      if (!validated) return;
+      if (isExternalUrlLink(validated)) externalLinks.push(validated);
+      else internalLinks.push(validated);
+    };
+    const enrichNode = (partial) => {
+      const key = `${opts.node.path}\0${qualifiedId}`;
+      const existing = enrichmentBuffer.get(key);
+      if (existing) {
+        existing.value = { ...existing.value, ...partial };
+        existing.enrichedAt = Date.now();
+      } else {
+        enrichmentBuffer.set(key, {
+          nodePath: opts.node.path,
+          extractorId: qualifiedId,
+          bodyHashAtEnrichment: opts.bodyHash,
+          value: { ...partial },
+          enrichedAt: Date.now(),
+          // Extractors are deterministic-only; `is_probabilistic` is
+          // reserved on the row for future Action-issued enrichments.
+          isProbabilistic: false
+        });
       }
-      const normalised = relativePath.replace(/^\.\//, "").replace(/\\/g, "/").replace(/^\//, "");
-      if (normalised === "") return false;
-      return ig.ignores(normalised);
-    }
-  };
-}
-var cachedDefaults = null;
-function loadDefaultsText() {
-  if (cachedDefaults !== null) return cachedDefaults;
-  cachedDefaults = readDefaultsFromDisk();
-  return cachedDefaults;
-}
-function readDefaultsFromDisk() {
-  const here = dirname5(fileURLToPath(import.meta.url));
-  const candidates = [
-    resolve7(here, "../../config/defaults/skillmapignore"),
-    // src/kernel/scan/ → src/config/defaults/
-    resolve7(here, "../config/defaults/skillmapignore"),
-    // dist/cli.js → dist/config/defaults/ (siblings)
-    resolve7(here, "config/defaults/skillmapignore")
-  ];
-  for (const candidate of candidates) {
-    if (existsSync7(candidate)) {
-      try {
-        return readFileSync7(candidate, "utf8");
-      } catch {
+    };
+    const declaredContributions = readDeclaredContributions(extractor);
+    const emitContribution = (contributionId, payload) => {
+      const declared = declaredContributions.get(contributionId);
+      if (!declared) {
+        emitExtensionError(opts.emitter, qualifiedId, opts.node.path, {
+          phase: "emitContribution",
+          contributionId,
+          reason: "unknown-contribution-id",
+          message: tx(ORCHESTRATOR_TEXTS.extensionErrorContributionUnknownId, {
+            extractorId: qualifiedId,
+            contributionId,
+            nodePath: opts.node.path
+          })
+        });
+        return;
       }
-    }
-  }
-  return "";
-}
-
-// built-in-plugins/parsers/frontmatter-yaml/index.ts
-import yaml3 from "js-yaml";
-var FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/;
-var FORBIDDEN_FRONTMATTER_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
-var frontmatterYamlParser = {
-  id: "frontmatter-yaml",
-  parse(raw, _path) {
-    const match = FRONTMATTER_RE.exec(raw);
-    if (!match) return { frontmatterRaw: "", frontmatter: {}, body: raw };
-    const frontmatterRaw = match[1];
-    const body = match[2];
-    const parsed = {};
-    try {
-      const doc = yaml3.load(frontmatterRaw, { schema: yaml3.JSON_SCHEMA });
-      if (doc && typeof doc === "object" && !Array.isArray(doc)) {
-        for (const [k, v] of Object.entries(doc)) {
-          if (FORBIDDEN_FRONTMATTER_KEYS.has(k)) continue;
-          parsed[k] = v;
-        }
+      const result = validators.validateContributionPayload(declared.slot, payload);
+      if (!result.ok) {
+        emitExtensionError(opts.emitter, qualifiedId, opts.node.path, {
+          phase: "emitContribution",
+          contributionId,
+          slot: declared.slot,
+          reason: result.errors,
+          message: tx(ORCHESTRATOR_TEXTS.extensionErrorContributionPayloadInvalid, {
+            extractorId: qualifiedId,
+            contributionId,
+            nodePath: opts.node.path,
+            slot: declared.slot,
+            errors: result.errors
+          })
+        });
+        return;
       }
-    } catch {
-    }
-    return { frontmatterRaw, frontmatter: parsed, body };
-  }
-};
-
-// built-in-plugins/parsers/plain/index.ts
-var plainParser = {
-  id: "plain",
-  parse(raw, _path) {
-    return { frontmatter: {}, frontmatterRaw: "", body: raw };
+      contributions.push({
+        pluginId: extractor.pluginId,
+        extensionId: extractor.id,
+        nodePath: opts.node.path,
+        contributionId,
+        slot: declared.slot,
+        payload,
+        emittedAt: Date.now()
+      });
+    };
+    const store = opts.pluginStores?.get(extractor.pluginId);
+    const ctx = buildExtractorContext(
+      extractor,
+      opts.node,
+      opts.body,
+      opts.frontmatter,
+      emitLink,
+      enrichNode,
+      emitContribution,
+      store
+    );
+    await extractor.extract(ctx);
   }
-};
-
-// kernel/scan/parsers/index.ts
-var REGISTRY = /* @__PURE__ */ new Map([
-  [frontmatterYamlParser.id, frontmatterYamlParser],
-  [plainParser.id, plainParser]
-]);
-var FROZEN_IDS = new Set(REGISTRY.keys());
-function getParser(id) {
-  return REGISTRY.get(id);
+  return {
+    internalLinks,
+    externalLinks,
+    enrichments: Array.from(enrichmentBuffer.values()),
+    contributions
+  };
 }
-
-// kernel/scan/walk-content.ts
-var UnknownParserError = class extends Error {
-  constructor(parserId) {
-    super(`Unknown parser id '${parserId}'. Built-in parsers: 'frontmatter-yaml', 'plain'.`);
-    this.name = "UnknownParserError";
+function readDeclaredContributions(extension) {
+  const out = /* @__PURE__ */ new Map();
+  const raw = extension.viewContributions;
+  if (typeof raw !== "object" || raw === null) return out;
+  for (const [id, value] of Object.entries(raw)) {
+    if (typeof value !== "object" || value === null) continue;
+    const slot = value.slot;
+    if (typeof slot !== "string") continue;
+    out.set(id, { slot });
   }
-};
-async function* walkContent(roots, options) {
-  const parser = getParser(options.parser);
-  if (!parser) throw new UnknownParserError(options.parser);
-  const filter = options.ignoreFilter ?? buildIgnoreFilter();
-  const extensions = options.extensions;
-  for (const root of roots) {
-    for await (const file of walkRoot(root, root, filter, extensions)) {
-      const relPath = relative3(root, file).split(sep2).join("/");
-      let raw;
-      try {
-        raw = await readFile(file, "utf8");
-      } catch {
-        continue;
-      }
-      const parsed = parser.parse(raw, relPath);
-      yield {
-        path: relPath,
-        body: parsed.body,
-        frontmatterRaw: parsed.frontmatterRaw,
-        frontmatter: parsed.frontmatter
-      };
-    }
+  return out;
+}
+function emitExtensionError(emitter, qualifiedId, nodePath, data) {
+  emitter.emit(
+    makeEvent("extension.error", {
+      kind: "contribution-rejected",
+      extensionId: qualifiedId,
+      nodePath,
+      ...data
+    })
+  );
+}
+function buildExtractorContext(extractor, node, body, frontmatter, emitLink, enrichNode, emitContribution, store) {
+  const scope = extractor.scope;
+  return {
+    node,
+    body: scope === "frontmatter" ? "" : body,
+    frontmatter: scope === "body" ? {} : frontmatter,
+    emitLink,
+    enrichNode,
+    emitContribution,
+    ...store !== void 0 ? { store } : {}
+  };
+}
+function validateLink(extractor, link, emitter) {
+  if (!extractor.emitsLinkKinds.includes(link.kind)) {
+    const qualifiedId = `${extractor.pluginId}/${extractor.id}`;
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "link-kind-not-declared",
+        extensionId: qualifiedId,
+        linkKind: link.kind,
+        declaredKinds: extractor.emitsLinkKinds,
+        link: { source: link.source, target: link.target, kind: link.kind },
+        message: tx(ORCHESTRATOR_TEXTS.extensionErrorLinkKindNotDeclared, {
+          extractorId: qualifiedId,
+          linkKind: link.kind,
+          declaredKinds: extractor.emitsLinkKinds.join(", ")
+        })
+      })
+    );
+    return null;
   }
+  const confidence = link.confidence ?? extractor.defaultConfidence;
+  return { ...link, confidence };
 }
-async function* walkRoot(root, current, filter, extensions) {
-  let entries;
-  try {
-    entries = await readdir(current, { withFileTypes: true, encoding: "utf8" });
-  } catch {
-    return;
+function recomputeLinkCounts(nodes, links) {
+  const byPath2 = /* @__PURE__ */ new Map();
+  for (const node of nodes) {
+    node.linksOutCount = 0;
+    node.linksInCount = 0;
+    byPath2.set(node.path, node);
   }
-  for (const entry of entries) {
-    const name = entry.name;
-    const full = join5(current, name);
-    const rel = relative3(root, full).split(sep2).join("/");
-    if (filter.ignores(rel)) continue;
-    if (entry.isSymbolicLink()) continue;
-    if (entry.isDirectory()) {
-      yield* walkRoot(root, full, filter, extensions);
-    } else if (entry.isFile() && hasMatchingExtension(name, extensions)) {
-      try {
-        const s = await stat(full);
-        if (s.isFile()) yield full;
-      } catch {
-      }
-    }
+  for (const link of links) {
+    const source = byPath2.get(link.source);
+    if (source) source.linksOutCount += 1;
+    const target = byPath2.get(link.target);
+    if (target) target.linksInCount += 1;
   }
 }
-function hasMatchingExtension(name, extensions) {
-  for (const ext of extensions) {
-    if (name.endsWith(ext)) return true;
+function recomputeExternalRefsCount(nodes, externalLinks, cachedPaths) {
+  const byPath2 = /* @__PURE__ */ new Map();
+  for (const node of nodes) {
+    if (!cachedPaths.has(node.path)) node.externalRefsCount = 0;
+    byPath2.set(node.path, node);
   }
-  return false;
-}
-
-// kernel/extensions/provider.ts
-var DEFAULT_READ_CONFIG = Object.freeze({
-  extensions: Object.freeze([".md"]),
-  parser: "frontmatter-yaml"
-});
-function resolveProviderWalk(provider) {
-  if (provider.walk) {
-    const walk2 = provider.walk.bind(provider);
-    return walk2;
+  for (const link of externalLinks) {
+    const source = byPath2.get(link.source);
+    if (source && !cachedPaths.has(source.path)) source.externalRefsCount += 1;
   }
-  const read = provider.read ?? DEFAULT_READ_CONFIG;
-  return (roots, options) => {
-    const walkOptions = {
-      extensions: read.extensions,
-      parser: read.parser
-    };
-    if (options?.ignoreFilter) walkOptions.ignoreFilter = options.ignoreFilter;
-    return walkContent(roots, walkOptions);
-  };
+}
+var EXTERNAL_URL_SCHEME_RE = /^[a-z][a-z0-9+\-.]+:/i;
+function isExternalUrlLink(link) {
+  return EXTERNAL_URL_SCHEME_RE.test(link.target);
 }
 
-// kernel/extensions/hook-dispatcher.ts
-function makeHookDispatcher(hooks, emitter) {
-  if (hooks.length === 0) {
-    return { dispatch: async () => {
-    } };
-  }
-  const byTrigger = /* @__PURE__ */ new Map();
-  for (const hook of hooks) {
-    if (hook.mode === "probabilistic") {
-      const qualifiedId = qualifiedExtensionId(hook.pluginId, hook.id);
-      log.warn(
-        `Probabilistic hook ${qualifiedId} deferred to job subsystem (future job subsystem). The hook is registered but will not dispatch in-scan.`,
-        { hookId: qualifiedId, mode: "probabilistic" }
-      );
-      continue;
-    }
-    for (const trig of hook.triggers) {
-      const bucket = byTrigger.get(trig);
-      if (bucket) bucket.push(hook);
-      else byTrigger.set(trig, [hook]);
-    }
-  }
-  return {
-    async dispatch(trigger, event) {
-      const subs = byTrigger.get(trigger);
-      if (!subs || subs.length === 0) return;
-      for (const hook of subs) {
-        if (!matchesFilter(hook, event)) continue;
-        const ctx = buildHookContext(hook, trigger, event);
-        try {
-          await hook.on(ctx);
-        } catch (err) {
-          const qualifiedId = qualifiedExtensionId(hook.pluginId, hook.id);
-          const message = formatErrorMessage(err);
-          emitter.emit(
-            makeEvent("extension.error", {
-              kind: "hook-error",
-              extensionId: qualifiedId,
-              trigger,
-              message
-            })
-          );
-        }
-      }
-    }
-  };
-}
-function makeEvent(type, data) {
-  return { type, timestamp: (/* @__PURE__ */ new Date()).toISOString(), data };
-}
-function matchesFilter(hook, event) {
-  if (!hook.filter) return true;
-  const data = event.data ?? {};
-  for (const [key, expected] of Object.entries(hook.filter)) {
-    if (data[key] !== expected) return false;
-  }
-  return true;
-}
-function buildHookContext(_hook, trigger, event) {
-  const data = event.data ?? {};
-  const ctx = {
-    event: {
-      type: trigger,
-      timestamp: event.timestamp,
-      ...event.runId !== void 0 ? { runId: event.runId } : {},
-      ...event.jobId !== void 0 ? { jobId: event.jobId } : {},
-      data: event.data
-    }
-  };
-  if (typeof data["extractorId"] === "string") ctx.extractorId = data["extractorId"];
-  if (typeof data["analyzerId"] === "string") ctx.analyzerId = data["analyzerId"];
-  if (typeof data["actionId"] === "string") ctx.actionId = data["actionId"];
-  if (data["node"] && typeof data["node"] === "object") {
-    ctx.node = data["node"];
-  }
-  if (data["jobResult"] !== void 0) ctx.jobResult = data["jobResult"];
-  return ctx;
-}
-
-// kernel/orchestrator.ts
-var SCANNED_BY = {
-  name: "skill-map",
-  version: package_default.version,
-  specVersion: resolveSpecVersionSafe()
-};
-function resolveSpecVersionSafe() {
-  try {
-    return installedSpecVersion();
-  } catch {
-    return "unknown";
-  }
-}
-async function runScanWithRenames(_kernel, options) {
-  return runScanInternal(_kernel, options);
-}
-async function runScan(_kernel, options) {
-  const { result } = await runScanInternal(_kernel, options);
-  return result;
-}
-async function runScanInternal(_kernel, options) {
-  validateRoots(options.roots);
-  const start = Date.now();
-  const scannedAt = start;
-  const emitter = options.emitter ?? new InMemoryProgressEmitter();
-  const exts = options.extensions ?? { providers: [], extractors: [], analyzers: [] };
-  const hookDispatcher = makeHookDispatcher(exts.hooks ?? [], emitter);
-  const tokenize = options.tokenize !== false;
-  const scope = options.scope ?? "project";
-  const strict = options.strict === true;
-  const encoder = tokenize ? new Tiktoken(cl100k_base) : null;
-  const prior = options.priorSnapshot ?? null;
-  const enableCache = options.enableCache === true;
-  const priorExtractorRuns = options.priorExtractorRuns;
-  const priorIndex = indexPriorSnapshot(prior);
-  const providerFrontmatter = buildProviderFrontmatterValidator(exts.providers);
-  const scanStartedEvent = makeEvent("scan.started", { roots: options.roots });
-  emitter.emit(scanStartedEvent);
-  await hookDispatcher.dispatch("scan.started", scanStartedEvent);
-  const walked = await walkAndExtract({
-    providers: exts.providers,
-    extractors: exts.extractors,
-    roots: options.roots,
-    ...options.ignoreFilter ? { ignoreFilter: options.ignoreFilter } : {},
-    emitter,
-    encoder,
-    strict,
-    enableCache,
-    prior,
-    priorIndex,
-    priorExtractorRuns,
-    providerFrontmatter,
-    pluginStores: options.pluginStores
-  });
-  recomputeLinkCounts(walked.nodes, walked.internalLinks);
-  recomputeExternalRefsCount(walked.nodes, walked.externalLinks, walked.cachedPaths);
-  for (const extractor of exts.extractors) {
-    const extractorId = qualifiedExtensionId(extractor.pluginId, extractor.id);
-    const evt = makeEvent("extractor.completed", { extractorId });
-    emitter.emit(evt);
-    await hookDispatcher.dispatch("extractor.completed", evt);
-  }
-  const analyzerResult = await runAnalyzers(
-    exts.analyzers,
-    walked.nodes,
-    walked.internalLinks,
-    walked.orphanSidecars,
-    walked.sidecarRoots,
-    options.annotationContributions ?? [],
-    options.viewContributions ?? [],
-    options.orphanJobFiles ?? [],
-    options.referenceablePaths,
-    options.cwd,
-    emitter,
-    hookDispatcher
-  );
-  const issues = analyzerResult.issues;
-  for (const c of analyzerResult.contributions) walked.contributions.push(c);
-  for (const analyzer of exts.analyzers ?? []) {
-    if (analyzer.viewContributions === void 0) continue;
-    for (const node of walked.nodes) {
-      walked.freshlyRunTuples.add(`${analyzer.pluginId}\0${analyzer.id}\0${node.path}`);
-    }
-  }
-  for (const issue of walked.frontmatterIssues) issues.push(issue);
-  const renameOps = prior ? detectRenamesAndOrphans(prior, walked.nodes, issues) : [];
-  const stats = {
-    // `filesSkipped` is "files walked but not classified by any Provider".
-    // Today every walked file IS classified by its Provider (the `claude`
-    // Provider's `classify()` always returns a kind, falling back to
-    // `'markdown'`), so this is always 0. Wired now so the field shape is
-    // spec-conformant; meaningful once multiple Providers compete.
-    filesWalked: walked.filesWalked,
-    filesSkipped: 0,
-    nodesCount: walked.nodes.length,
-    linksCount: walked.internalLinks.length,
-    issuesCount: issues.length,
-    durationMs: Date.now() - start
-  };
-  const scanCompletedEvent = makeEvent("scan.completed", { stats });
-  emitter.emit(scanCompletedEvent);
-  await hookDispatcher.dispatch("scan.completed", scanCompletedEvent);
-  return {
-    result: {
-      schemaVersion: 1,
-      scannedAt,
-      scope,
-      roots: options.roots,
-      providers: exts.providers.map((a) => a.id),
-      scannedBy: SCANNED_BY,
-      nodes: walked.nodes,
-      links: walked.internalLinks,
-      issues,
-      stats
-    },
-    renameOps,
-    extractorRuns: walked.extractorRuns,
-    enrichments: walked.enrichments,
-    contributions: walked.contributions,
-    freshlyRunTuples: walked.freshlyRunTuples
-  };
-}
-function validateRoots(roots) {
-  if (roots.length === 0) {
-    throw new Error(ORCHESTRATOR_TEXTS.runScanRootEmptyArray);
-  }
-  for (const root of roots) {
-    if (!existsSync8(root) || !statSync2(root).isDirectory()) {
-      throw new Error(tx(ORCHESTRATOR_TEXTS.runScanRootMissing, { root }));
-    }
-  }
-}
-function indexPriorSnapshot(prior) {
-  const priorNodesByPath = /* @__PURE__ */ new Map();
-  const priorNodePaths = /* @__PURE__ */ new Set();
-  const priorLinksByOriginating = /* @__PURE__ */ new Map();
-  const priorFrontmatterIssuesByNode = /* @__PURE__ */ new Map();
-  if (!prior) {
-    return { priorNodesByPath, priorNodePaths, priorLinksByOriginating, priorFrontmatterIssuesByNode };
-  }
-  for (const node of prior.nodes) {
-    priorNodesByPath.set(node.path, node);
-    priorNodePaths.add(node.path);
-  }
-  for (const link of prior.links) {
-    const key = originatingNodeOf(link, priorNodePaths);
-    const list = priorLinksByOriginating.get(key);
-    if (list) list.push(link);
-    else priorLinksByOriginating.set(key, [link]);
-  }
-  for (const issue of prior.issues) {
-    if (issue.analyzerId !== "frontmatter-invalid" && issue.analyzerId !== "frontmatter-malformed") continue;
-    if (issue.nodeIds.length !== 1) continue;
-    const path = issue.nodeIds[0];
-    const list = priorFrontmatterIssuesByNode.get(path);
-    if (list) list.push(issue);
-    else priorFrontmatterIssuesByNode.set(path, [issue]);
-  }
-  return { priorNodesByPath, priorNodePaths, priorLinksByOriginating, priorFrontmatterIssuesByNode };
-}
-async function runExtractorsForNode(opts) {
-  const internalLinks = [];
-  const externalLinks = [];
-  const enrichmentBuffer = /* @__PURE__ */ new Map();
+// kernel/orchestrator/analyzers.ts
+async function runAnalyzers(analyzers, nodes, internalLinks, orphanSidecars, sidecarRoots, annotationContributions, viewContributions, orphanJobFiles, referenceablePaths, cwd, registeredActionIds, emitter, hookDispatcher) {
+  const issues = [];
   const contributions = [];
   const validators = loadSchemaValidators();
-  for (const extractor of opts.extractors) {
-    const qualifiedId = qualifiedExtensionId(extractor.pluginId, extractor.id);
-    const emitLink = (link) => {
-      const validated = validateLink(extractor, link, opts.emitter);
-      if (!validated) return;
-      if (isExternalUrlLink(validated)) externalLinks.push(validated);
-      else internalLinks.push(validated);
-    };
-    const enrichNode = (partial) => {
-      const key = `${opts.node.path}\0${qualifiedId}`;
-      const existing = enrichmentBuffer.get(key);
-      if (existing) {
-        existing.value = { ...existing.value, ...partial };
-        existing.enrichedAt = Date.now();
-      } else {
-        enrichmentBuffer.set(key, {
-          nodePath: opts.node.path,
-          extractorId: qualifiedId,
-          bodyHashAtEnrichment: opts.bodyHash,
-          value: { ...partial },
-          enrichedAt: Date.now(),
-          // Extractors are deterministic-only; `is_probabilistic` is
-          // reserved on the row for future Action-issued enrichments.
-          isProbabilistic: false
-        });
-      }
-    };
-    const declaredContributions = readDeclaredContributions(extractor);
-    const emitContribution = (contributionId, payload) => {
+  validateRecommendedActions(analyzers, registeredActionIds, emitter);
+  const analyzerOrphans = orphanSidecars.map((o) => ({
+    relativePath: o.relativePath,
+    expectedMdPath: o.expectedMdPath
+  }));
+  for (const analyzer of analyzers) {
+    const qualifiedId = qualifiedExtensionId(analyzer.pluginId, analyzer.id);
+    const declaredContributions = readDeclaredContributions(analyzer);
+    const emitContribution = (nodePath, contributionId, payload) => {
       const declared = declaredContributions.get(contributionId);
       if (!declared) {
-        emitExtensionError(opts.emitter, qualifiedId, opts.node.path, {
+        emitExtensionError(emitter, qualifiedId, nodePath, {
           phase: "emitContribution",
           contributionId,
           reason: "unknown-contribution-id",
           message: tx(ORCHESTRATOR_TEXTS.extensionErrorContributionUnknownId, {
             extractorId: qualifiedId,
             contributionId,
-            nodePath: opts.node.path
+            nodePath
           })
         });
         return;
       }
       const result = validators.validateContributionPayload(declared.slot, payload);
       if (!result.ok) {
-        emitExtensionError(opts.emitter, qualifiedId, opts.node.path, {
+        emitExtensionError(emitter, qualifiedId, nodePath, {
           phase: "emitContribution",
           contributionId,
           slot: declared.slot,
@@ -1264,7 +913,7 @@ async function runExtractorsForNode(opts) {
           message: tx(ORCHESTRATOR_TEXTS.extensionErrorContributionPayloadInvalid, {
             extractorId: qualifiedId,
             contributionId,
-            nodePath: opts.node.path,
+            nodePath,
             slot: declared.slot,
             errors: result.errors
           })
@@ -1272,56 +921,133 @@ async function runExtractorsForNode(opts) {
         return;
       }
       contributions.push({
-        pluginId: extractor.pluginId,
-        extensionId: extractor.id,
-        nodePath: opts.node.path,
+        pluginId: analyzer.pluginId,
+        extensionId: analyzer.id,
+        nodePath,
         contributionId,
         slot: declared.slot,
         payload,
         emittedAt: Date.now()
       });
     };
-    const store = opts.pluginStores?.get(extractor.pluginId);
-    const ctx = buildExtractorContext(
-      extractor,
-      opts.node,
-      opts.body,
-      opts.frontmatter,
-      emitLink,
-      enrichNode,
-      emitContribution,
-      store
+    const emitted = await analyzer.evaluate({
+      nodes,
+      links: internalLinks,
+      orphanSidecars: analyzerOrphans,
+      sidecarRoots,
+      annotationContributions,
+      viewContributions,
+      orphanJobFiles,
+      ...referenceablePaths ? { referenceablePaths } : {},
+      ...cwd ? { cwd } : {},
+      emitContribution
+    });
+    for (const issue of emitted) {
+      const validated = validateIssue(analyzer, issue, emitter);
+      if (validated) issues.push(validated);
+    }
+    const evt = makeEvent("analyzer.completed", { analyzerId: qualifiedId });
+    emitter.emit(evt);
+    await hookDispatcher.dispatch("analyzer.completed", evt);
+  }
+  return { issues, contributions };
+}
+function validateRecommendedActions(analyzers, registeredActionIds, emitter) {
+  for (const analyzer of analyzers) {
+    const refs = analyzer.recommendedActions;
+    if (refs === void 0 || refs.length === 0) continue;
+    const analyzerId = qualifiedExtensionId(analyzer.pluginId, analyzer.id);
+    for (const actionId of refs) {
+      if (registeredActionIds.has(actionId)) continue;
+      emitter.emit(
+        makeEvent("extension.error", {
+          kind: "recommended-action-missing",
+          extensionId: analyzerId,
+          actionId,
+          message: tx(ORCHESTRATOR_TEXTS.extensionErrorRecommendedActionMissing, {
+            analyzerId,
+            actionId
+          })
+        })
+      );
+    }
+  }
+}
+function validateIssue(analyzer, issue, emitter) {
+  const severity = issue.severity;
+  if (severity !== "error" && severity !== "warn" && severity !== "info") {
+    const qualifiedId = `${analyzer.pluginId}/${analyzer.id}`;
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "issue-invalid-severity",
+        extensionId: qualifiedId,
+        severity,
+        issue: { analyzerId: issue.analyzerId || analyzer.id, message: issue.message, nodeIds: issue.nodeIds },
+        message: tx(ORCHESTRATOR_TEXTS.extensionErrorIssueInvalidSeverity, {
+          analyzerId: qualifiedId,
+          severity: JSON.stringify(severity)
+        })
+      })
     );
-    await extractor.extract(ctx);
+    return null;
   }
-  return {
-    internalLinks,
-    externalLinks,
-    enrichments: Array.from(enrichmentBuffer.values()),
-    contributions
-  };
+  return { ...issue, analyzerId: issue.analyzerId || analyzer.id };
 }
-function readDeclaredContributions(extension) {
-  const out = /* @__PURE__ */ new Map();
-  const raw = extension.viewContributions;
-  if (typeof raw !== "object" || raw === null) return out;
-  for (const [id, value] of Object.entries(raw)) {
-    if (typeof value !== "object" || value === null) continue;
-    const slot = value.slot;
-    if (typeof slot !== "string") continue;
-    out.set(id, { slot });
+
+// kernel/orchestrator/cache.ts
+function indexPriorSnapshot(prior) {
+  const priorNodesByPath = /* @__PURE__ */ new Map();
+  const priorNodePaths = /* @__PURE__ */ new Set();
+  const priorLinksByOriginating = /* @__PURE__ */ new Map();
+  const priorFrontmatterIssuesByNode = /* @__PURE__ */ new Map();
+  if (!prior) {
+    return { priorNodesByPath, priorNodePaths, priorLinksByOriginating, priorFrontmatterIssuesByNode };
   }
-  return out;
+  indexPriorNodes(prior.nodes, priorNodesByPath, priorNodePaths);
+  indexPriorLinks(prior.links, priorNodePaths, priorLinksByOriginating);
+  indexPriorFrontmatterIssues(prior.issues, priorFrontmatterIssuesByNode);
+  return { priorNodesByPath, priorNodePaths, priorLinksByOriginating, priorFrontmatterIssuesByNode };
 }
-function emitExtensionError(emitter, qualifiedId, nodePath, data) {
-  emitter.emit(
-    makeEvent("extension.error", {
-      kind: "contribution-rejected",
-      extensionId: qualifiedId,
-      nodePath,
-      ...data
-    })
-  );
+function indexPriorNodes(nodes, byPath2, paths) {
+  for (const node of nodes) {
+    byPath2.set(node.path, node);
+    paths.add(node.path);
+  }
+}
+function indexPriorLinks(links, priorNodePaths, byOriginating) {
+  for (const link of links) {
+    const key = originatingNodeOf(link, priorNodePaths);
+    const list = byOriginating.get(key);
+    if (list) list.push(link);
+    else byOriginating.set(key, [link]);
+  }
+}
+var FRONTMATTER_ISSUE_ANALYZERS = /* @__PURE__ */ new Set([
+  "frontmatter-invalid",
+  "frontmatter-malformed",
+  // Audit L1: parser parse-error is emitted by
+  // `buildFreshNodeAndValidateFrontmatter` from `raw.parseIssues`. The
+  // raw.parseIssues only flows through the non-cache path; a cached
+  // node skips the rebuild, so the prior issue MUST survive the
+  // incremental scan or the warning silently disappears on a clean
+  // re-scan of an unchanged file.
+  "frontmatter-parse-error"
+]);
+function indexPriorFrontmatterIssues(issues, byNode) {
+  for (const issue of issues) {
+    if (!FRONTMATTER_ISSUE_ANALYZERS.has(issue.analyzerId)) continue;
+    if (issue.nodeIds.length !== 1) continue;
+    const path = issue.nodeIds[0];
+    const list = byNode.get(path);
+    if (list) list.push(issue);
+    else byNode.set(path, [issue]);
+  }
+}
+function originatingNodeOf(link, priorNodePaths) {
+  if (link.kind === "supersedes" && !priorNodePaths.has(link.source)) {
+    return link.target;
+  }
+  return link.source;
 }
 function computeCacheDecision(opts) {
   const applicableExtractors = opts.extractors.filter(
@@ -1330,35 +1056,39 @@ function computeCacheDecision(opts) {
   const applicableQualifiedIds = new Set(
     applicableExtractors.map((ex) => qualifiedExtensionId(ex.pluginId, ex.id))
   );
+  const split = opts.priorExtractorRuns === void 0 ? splitLegacy(applicableExtractors, applicableQualifiedIds, opts.nodeHashCacheEligible) : splitFineGrained(applicableExtractors, opts);
+  return {
+    applicableExtractors,
+    applicableQualifiedIds,
+    cachedQualifiedIds: split.cachedQualifiedIds,
+    missingExtractors: split.missingExtractors,
+    fullCacheHit: opts.nodeHashCacheEligible && split.missingExtractors.length === 0
+  };
+}
+function splitLegacy(applicableExtractors, applicableQualifiedIds, nodeHashCacheEligible) {
   const cachedQualifiedIds = /* @__PURE__ */ new Set();
   const missingExtractors = [];
-  if (opts.priorExtractorRuns === void 0) {
-    if (opts.nodeHashCacheEligible) {
-      for (const id of applicableQualifiedIds) cachedQualifiedIds.add(id);
-    } else {
-      for (const ex of applicableExtractors) missingExtractors.push(ex);
-    }
+  if (nodeHashCacheEligible) {
+    for (const id of applicableQualifiedIds) cachedQualifiedIds.add(id);
   } else {
-    const priorRunsForNode = opts.priorExtractorRuns.get(opts.nodePath) ?? /* @__PURE__ */ new Map();
-    for (const ex of applicableExtractors) {
-      const qualified = qualifiedExtensionId(ex.pluginId, ex.id);
-      const prior = priorRunsForNode.get(qualified);
-      const bodyMatch = prior !== void 0 && prior.bodyHash === opts.bodyHash;
-      const sidecarOk = prior !== void 0 && prior.sidecarAnnotationsHash === opts.sidecarAnnotationsHash;
-      if (opts.nodeHashCacheEligible && bodyMatch && sidecarOk) {
-        cachedQualifiedIds.add(qualified);
-      } else {
-        missingExtractors.push(ex);
-      }
+    for (const ex of applicableExtractors) missingExtractors.push(ex);
+  }
+  return { cachedQualifiedIds, missingExtractors };
+}
+function splitFineGrained(applicableExtractors, opts) {
+  const cachedQualifiedIds = /* @__PURE__ */ new Set();
+  const missingExtractors = [];
+  const priorRunsForNode = opts.priorExtractorRuns.get(opts.nodePath) ?? /* @__PURE__ */ new Map();
+  for (const ex of applicableExtractors) {
+    const qualified = qualifiedExtensionId(ex.pluginId, ex.id);
+    const prior = priorRunsForNode.get(qualified);
+    if (opts.nodeHashCacheEligible && prior !== void 0 && prior.bodyHash === opts.bodyHash && prior.sidecarAnnotationsHash === opts.sidecarAnnotationsHash) {
+      cachedQualifiedIds.add(qualified);
+    } else {
+      missingExtractors.push(ex);
     }
   }
-  return {
-    applicableExtractors,
-    applicableQualifiedIds,
-    cachedQualifiedIds,
-    missingExtractors,
-    fullCacheHit: opts.nodeHashCacheEligible && missingExtractors.length === 0
-  };
+  return { cachedQualifiedIds, missingExtractors };
 }
 function cloneNodeAndReshapeLinks(opts) {
   const node = { ...opts.priorNode, bytes: { ...opts.priorNode.bytes } };
@@ -1396,467 +1126,645 @@ function reusePriorNode(opts) {
   }
   return { ...base, extractorRuns };
 }
-function buildFreshNodeAndValidateFrontmatter(opts) {
-  const node = buildNode({
-    path: opts.raw.path,
-    kind: opts.kind,
-    providerId: opts.provider.id,
-    frontmatterRaw: opts.raw.frontmatterRaw,
-    body: opts.raw.body,
-    frontmatter: opts.raw.frontmatter,
-    bodyHash: opts.bodyHash,
-    frontmatterHash: opts.frontmatterHash,
-    encoder: opts.encoder
-  });
-  const frontmatterIssues = [];
-  if (opts.raw.frontmatterRaw.length > 0) {
-    const fmIssue = validateFrontmatter(
-      opts.providerFrontmatter,
-      opts.provider,
-      opts.kind,
-      opts.raw.frontmatter,
-      opts.raw.path,
-      opts.strict
+function reuseCachedLink(link, shortIdToQualified, cachedQualifiedIds, applicableQualifiedIds) {
+  if (!Array.isArray(link.sources) || link.sources.length === 0) return null;
+  const partition = partitionLinkSources(
+    link.sources,
+    shortIdToQualified,
+    cachedQualifiedIds,
+    applicableQualifiedIds
+  );
+  if (partition.hasMissing) return null;
+  if (partition.cached.length === 0) return null;
+  if (partition.obsolete.length === 0) return link;
+  return { ...link, sources: partition.cached };
+}
+function partitionLinkSources(sources, shortIdToQualified, cachedQualifiedIds, applicableQualifiedIds) {
+  const cached = [];
+  const obsolete = [];
+  let hasMissing = false;
+  for (const source of sources) {
+    const category = classifyLinkSource(
+      source,
+      shortIdToQualified,
+      cachedQualifiedIds,
+      applicableQualifiedIds
     );
-    if (fmIssue) frontmatterIssues.push(fmIssue);
-  } else {
-    const malformed = detectMalformedFrontmatter(opts.raw.body, opts.raw.path, opts.strict);
-    if (malformed) frontmatterIssues.push(malformed);
+    if (category === "cached") cached.push(source);
+    else if (category === "missing") hasMissing = true;
+    else obsolete.push(source);
   }
-  return { node, frontmatterIssues };
+  return { cached, obsolete, hasMissing };
 }
-async function walkAndExtract(opts) {
-  const {
-    providers,
-    extractors,
-    roots,
-    ignoreFilter,
-    emitter,
-    encoder,
-    strict,
-    enableCache,
-    prior,
-    priorIndex,
-    priorExtractorRuns,
-    providerFrontmatter,
-    pluginStores
-  } = opts;
-  const { priorNodesByPath, priorLinksByOriginating, priorFrontmatterIssuesByNode } = priorIndex;
-  const nodes = [];
-  const internalLinks = [];
-  const externalLinks = [];
-  const cachedPaths = /* @__PURE__ */ new Set();
-  const frontmatterIssues = [];
-  const enrichmentBuffer = /* @__PURE__ */ new Map();
-  const contributionsBuffer = [];
-  const freshlyRunTuples = /* @__PURE__ */ new Set();
-  const extractorRuns = [];
-  const sidecarRoots = /* @__PURE__ */ new Map();
-  let filesWalked = 0;
-  let index = 0;
-  const walkOptions = ignoreFilter ? { ignoreFilter } : {};
-  const shortIdToQualified = /* @__PURE__ */ new Map();
-  for (const ex of extractors) {
-    const qualified = qualifiedExtensionId(ex.pluginId, ex.id);
-    const list = shortIdToQualified.get(ex.id);
-    if (list) list.push(qualified);
-    else shortIdToQualified.set(ex.id, [qualified]);
-  }
-  const claimedPaths = /* @__PURE__ */ new Set();
-  for (const provider of providers) {
-    for await (const raw of resolveProviderWalk(provider)(roots, walkOptions)) {
-      filesWalked += 1;
-      if (claimedPaths.has(raw.path)) continue;
-      const bodyHash = sha256(raw.body);
-      const frontmatterHash = sha256(canonicalFrontmatter(raw.frontmatter, raw.frontmatterRaw));
-      const priorNode = priorNodesByPath.get(raw.path);
-      const nodeHashCacheEligible = enableCache && prior !== null && priorNode !== void 0 && priorNode.bodyHash === bodyHash && priorNode.frontmatterHash === frontmatterHash;
-      const kind = provider.classify(raw.path, raw.frontmatter);
-      if (kind === null) {
-        continue;
-      }
-      claimedPaths.add(raw.path);
-      index += 1;
-      const sidecarResolution = resolveSidecarOverlay(
-        raw.path,
-        raw.path,
-        roots,
-        bodyHash,
-        frontmatterHash
-      );
-      const sidecarAnnotationsHash = sha256(
-        canonicalSidecarAnnotations(sidecarResolution.overlay.annotations)
-      );
-      const cacheDecision = computeCacheDecision({
-        extractors,
-        kind,
-        nodePath: raw.path,
-        bodyHash,
-        sidecarAnnotationsHash,
-        nodeHashCacheEligible,
-        priorExtractorRuns
-      });
-      const {
-        applicableExtractors,
-        applicableQualifiedIds,
-        cachedQualifiedIds,
-        missingExtractors,
-        fullCacheHit
-      } = cacheDecision;
-      const attachSidecar = (node2) => {
-        node2.sidecar = sidecarResolution.overlay;
-        if (sidecarResolution.parsedRoot !== null) {
-          sidecarRoots.set(node2.path, sidecarResolution.parsedRoot);
-        }
-        return sidecarResolution.issues.map(
-          (i) => i.nodeIds.length > 0 ? i : { ...i, nodeIds: [node2.path] }
-        );
-      };
-      if (fullCacheHit && priorNode) {
-        const reused = reusePriorNode({
-          priorNode,
-          bodyHash,
-          sidecarAnnotationsHash,
-          strict,
-          cachedQualifiedIds,
-          applicableQualifiedIds,
-          shortIdToQualified,
-          priorLinksByOriginating,
-          priorFrontmatterIssuesByNode
-        });
-        const reusedSidecarIssues = attachSidecar(reused.node);
-        nodes.push(reused.node);
-        cachedPaths.add(reused.node.path);
-        for (const link of reused.internalLinks) internalLinks.push(link);
-        for (const issue of reused.frontmatterIssues) frontmatterIssues.push(issue);
-        for (const issue of reusedSidecarIssues) frontmatterIssues.push(issue);
-        for (const run of reused.extractorRuns) extractorRuns.push(run);
-        emitter.emit(makeEvent("scan.progress", { index, path: raw.path, kind, cached: true }));
-        continue;
-      }
-      let node;
-      const partialCacheHit = nodeHashCacheEligible && cachedQualifiedIds.size > 0 && priorNode !== void 0;
-      if (partialCacheHit && priorNode) {
-        const partial = cloneNodeAndReshapeLinks({
-          priorNode,
-          strict,
-          cachedQualifiedIds,
-          applicableQualifiedIds,
-          shortIdToQualified,
-          priorLinksByOriginating,
-          priorFrontmatterIssuesByNode
-        });
-        node = partial.node;
-        for (const link of partial.internalLinks) internalLinks.push(link);
-        for (const issue of partial.frontmatterIssues) frontmatterIssues.push(issue);
-        nodes.push(node);
-      } else {
-        const fresh = buildFreshNodeAndValidateFrontmatter({
-          raw,
-          kind,
-          provider,
-          bodyHash,
-          frontmatterHash,
-          encoder,
-          providerFrontmatter,
-          strict
-        });
-        node = fresh.node;
-        nodes.push(node);
-        for (const issue of fresh.frontmatterIssues) frontmatterIssues.push(issue);
-      }
-      const sidecarIssues = attachSidecar(node);
-      for (const issue of sidecarIssues) frontmatterIssues.push(issue);
-      emitter.emit(makeEvent("scan.progress", {
-        index,
-        path: raw.path,
-        kind,
-        cached: false,
-        ...partialCacheHit ? { partialCache: true } : {}
-      }));
-      const extractorsToRun = partialCacheHit ? missingExtractors : applicableExtractors;
-      for (const ex of extractorsToRun) {
-        freshlyRunTuples.add(`${ex.pluginId}\0${ex.id}\0${node.path}`);
-      }
-      const extractResult = await runExtractorsForNode({
-        extractors: extractorsToRun,
-        node,
-        body: raw.body,
-        frontmatter: raw.frontmatter,
-        bodyHash,
-        emitter,
-        ...pluginStores ? { pluginStores } : {}
-      });
-      for (const link of extractResult.internalLinks) internalLinks.push(link);
-      for (const link of extractResult.externalLinks) externalLinks.push(link);
-      for (const enr of extractResult.enrichments) {
-        enrichmentBuffer.set(`${enr.nodePath}\0${enr.extractorId}`, enr);
-      }
-      for (const c of extractResult.contributions) contributionsBuffer.push(c);
-      const ranAt = Date.now();
-      for (const ex of applicableExtractors) {
-        const qualified = qualifiedExtensionId(ex.pluginId, ex.id);
-        extractorRuns.push({
-          nodePath: node.path,
-          extractorId: qualified,
-          bodyHashAtRun: bodyHash,
-          ranAt,
-          sidecarAnnotationsHashAtRun: sidecarAnnotationsHash
-        });
+function classifyLinkSource(source, shortIdToQualified, cachedQualifiedIds, applicableQualifiedIds) {
+  const candidates = shortIdToQualified.get(source);
+  if (!candidates || candidates.length === 0) return "obsolete";
+  if (candidates.some((q) => cachedQualifiedIds.has(q))) return "cached";
+  if (candidates.some((q) => applicableQualifiedIds.has(q))) return "missing";
+  return "obsolete";
+}
+
+// kernel/orchestrator/renames.ts
+function findHighConfidenceRenames(opts) {
+  const ops = [];
+  for (const fromPath of opts.deletedPaths) {
+    if (opts.claimedDeleted.has(fromPath)) continue;
+    const fromNode = opts.priorByPath.get(fromPath);
+    for (const toPath of opts.newPaths) {
+      if (opts.claimedNew.has(toPath)) continue;
+      const toNode = opts.currentByPath.get(toPath);
+      if (toNode.bodyHash === fromNode.bodyHash) {
+        ops.push({ from: fromPath, to: toPath, confidence: "high" });
+        opts.claimedDeleted.add(fromPath);
+        opts.claimedNew.add(toPath);
+        break;
       }
     }
   }
-  const orphanSidecars = discoverOrphanSidecars(roots);
-  return {
-    nodes,
-    internalLinks,
-    externalLinks,
-    cachedPaths,
-    frontmatterIssues,
-    filesWalked,
-    enrichments: [...enrichmentBuffer.values()],
-    extractorRuns,
-    contributions: contributionsBuffer,
-    freshlyRunTuples,
-    orphanSidecars,
-    sidecarRoots
-  };
+  return ops;
 }
-function reuseCachedLink(link, shortIdToQualified, cachedQualifiedIds, applicableQualifiedIds) {
-  if (!Array.isArray(link.sources) || link.sources.length === 0) return null;
-  const cachedSources = [];
-  const obsoleteSources = [];
-  let hasMissing = false;
-  for (const source of link.sources) {
-    const candidates = shortIdToQualified.get(source);
-    if (!candidates || candidates.length === 0) {
-      obsoleteSources.push(source);
-      continue;
-    }
-    if (candidates.some((q) => cachedQualifiedIds.has(q))) {
-      cachedSources.push(source);
-      continue;
-    }
-    if (candidates.some((q) => applicableQualifiedIds.has(q))) {
-      hasMissing = true;
-      continue;
+function buildFrontmatterRenameCandidates(opts) {
+  const candidatesByNew = /* @__PURE__ */ new Map();
+  for (const toPath of opts.newPaths) {
+    if (opts.claimedNew.has(toPath)) continue;
+    const toNode = opts.currentByPath.get(toPath);
+    const matches = [];
+    for (const fromPath of opts.deletedPaths) {
+      if (opts.claimedDeleted.has(fromPath)) continue;
+      const fromNode = opts.priorByPath.get(fromPath);
+      if (toNode.frontmatterHash === fromNode.frontmatterHash) {
+        matches.push(fromPath);
+      }
     }
-    obsoleteSources.push(source);
+    if (matches.length > 0) candidatesByNew.set(toPath, matches);
   }
-  if (hasMissing) return null;
-  if (cachedSources.length === 0) return null;
-  if (obsoleteSources.length === 0) return link;
-  return { ...link, sources: cachedSources };
+  return candidatesByNew;
 }
-async function runAnalyzers(analyzers, nodes, internalLinks, orphanSidecars, sidecarRoots, annotationContributions, viewContributions, orphanJobFiles, referenceablePaths, cwd, emitter, hookDispatcher) {
-  const issues = [];
-  const contributions = [];
-  const validators = loadSchemaValidators();
-  const analyzerOrphans = orphanSidecars.map((o) => ({
-    relativePath: o.relativePath,
-    expectedMdPath: o.expectedMdPath
+function claimSingletonRenames(opts) {
+  const ops = [];
+  for (const toPath of opts.newPaths) {
+    if (opts.claimedNew.has(toPath)) continue;
+    const candidates = opts.candidatesByNew.get(toPath);
+    if (!candidates) continue;
+    const remaining = candidates.filter((p) => !opts.claimedDeleted.has(p));
+    if (remaining.length === 1) {
+      const fromPath = remaining[0];
+      ops.push({ from: fromPath, to: toPath, confidence: "medium" });
+      opts.issues.push({
+        analyzerId: "auto-rename-medium",
+        severity: "warn",
+        nodeIds: [toPath],
+        message: `Auto-rename (medium confidence): ${fromPath} \u2192 ${toPath}`,
+        data: { from: fromPath, to: toPath, confidence: "medium" }
+      });
+      opts.claimedDeleted.add(fromPath);
+      opts.claimedNew.add(toPath);
+    }
+  }
+  return ops;
+}
+function flagAmbiguousRenames(opts) {
+  for (const toPath of opts.newPaths) {
+    if (opts.claimedNew.has(toPath)) continue;
+    const candidates = opts.candidatesByNew.get(toPath);
+    if (!candidates) continue;
+    const remaining = candidates.filter((p) => !opts.claimedDeleted.has(p));
+    if (remaining.length > 1) {
+      opts.issues.push({
+        analyzerId: "auto-rename-ambiguous",
+        severity: "warn",
+        nodeIds: [toPath],
+        message: `Auto-rename ambiguous: ${toPath} matches ${remaining.length} prior frontmatters; pick one with \`sm orphans undo-rename ${toPath} --from <old.path>\`.`,
+        data: { to: toPath, candidates: remaining }
+      });
+    }
+  }
+}
+function flagOrphans(opts) {
+  for (const fromPath of opts.deletedPaths) {
+    if (opts.claimedDeleted.has(fromPath)) continue;
+    opts.issues.push({
+      analyzerId: "orphan",
+      severity: "info",
+      nodeIds: [fromPath],
+      message: `Orphan history: ${fromPath} was deleted; no rename match found.`,
+      data: { path: fromPath }
+    });
+  }
+}
+function detectRenamesAndOrphans(prior, current, issues) {
+  const priorByPath = /* @__PURE__ */ new Map();
+  for (const n of prior.nodes) priorByPath.set(n.path, n);
+  const currentByPath = /* @__PURE__ */ new Map();
+  for (const n of current) currentByPath.set(n.path, n);
+  const deletedPaths = [...priorByPath.keys()].filter((p) => !currentByPath.has(p)).sort();
+  const newPaths = [...currentByPath.keys()].filter((p) => !priorByPath.has(p)).sort();
+  const claimedDeleted = /* @__PURE__ */ new Set();
+  const claimedNew = /* @__PURE__ */ new Set();
+  const ops = [];
+  ops.push(...findHighConfidenceRenames({
+    deletedPaths,
+    newPaths,
+    priorByPath,
+    currentByPath,
+    claimedDeleted,
+    claimedNew
   }));
-  for (const analyzer of analyzers) {
-    const qualifiedId = qualifiedExtensionId(analyzer.pluginId, analyzer.id);
-    const declaredContributions = readDeclaredContributions(analyzer);
-    const emitContribution = (nodePath, contributionId, payload) => {
-      const declared = declaredContributions.get(contributionId);
-      if (!declared) {
-        emitExtensionError(emitter, qualifiedId, nodePath, {
-          phase: "emitContribution",
-          contributionId,
-          reason: "unknown-contribution-id",
-          message: tx(ORCHESTRATOR_TEXTS.extensionErrorContributionUnknownId, {
-            extractorId: qualifiedId,
-            contributionId,
-            nodePath
-          })
-        });
-        return;
+  const candidatesByNew = buildFrontmatterRenameCandidates({
+    deletedPaths,
+    newPaths,
+    priorByPath,
+    currentByPath,
+    claimedDeleted,
+    claimedNew
+  });
+  ops.push(...claimSingletonRenames({
+    newPaths,
+    candidatesByNew,
+    claimedDeleted,
+    claimedNew,
+    issues
+  }));
+  flagAmbiguousRenames({ newPaths, candidatesByNew, claimedDeleted, claimedNew, issues });
+  flagOrphans({ deletedPaths, claimedDeleted, issues });
+  return ops;
+}
+
+// kernel/scan/walk-content.ts
+import { readFile, readdir, lstat } from "fs/promises";
+import { join as join2, relative as relative2, sep } from "path";
+
+// kernel/scan/ignore.ts
+import { existsSync as existsSync2, readFileSync as readFileSync4 } from "fs";
+import { dirname as dirname2, resolve as resolve5 } from "path";
+import { fileURLToPath } from "url";
+import ignoreFactory from "ignore";
+function buildIgnoreFilter(opts = {}) {
+  const ig = ignoreFactory();
+  if (opts.includeDefaults !== false) {
+    ig.add(loadDefaultsText());
+  }
+  if (opts.configIgnore && opts.configIgnore.length > 0) {
+    ig.add(opts.configIgnore);
+  }
+  if (opts.ignoreFileText && opts.ignoreFileText.length > 0) {
+    ig.add(opts.ignoreFileText);
+  }
+  return {
+    ignores(relativePath) {
+      if (relativePath === "" || relativePath === "." || relativePath === "./") {
+        return false;
       }
-      const result = validators.validateContributionPayload(declared.slot, payload);
-      if (!result.ok) {
-        emitExtensionError(emitter, qualifiedId, nodePath, {
-          phase: "emitContribution",
-          contributionId,
-          slot: declared.slot,
-          reason: result.errors,
-          message: tx(ORCHESTRATOR_TEXTS.extensionErrorContributionPayloadInvalid, {
-            extractorId: qualifiedId,
-            contributionId,
-            nodePath,
-            slot: declared.slot,
-            errors: result.errors
-          })
-        });
-        return;
+      const normalised = relativePath.replace(/^\.\//, "").replace(/\\/g, "/").replace(/^\//, "");
+      if (normalised === "") return false;
+      return ig.ignores(normalised);
+    }
+  };
+}
+var cachedDefaults = null;
+function loadDefaultsText() {
+  if (cachedDefaults !== null) return cachedDefaults;
+  cachedDefaults = readDefaultsFromDisk();
+  return cachedDefaults;
+}
+function readDefaultsFromDisk() {
+  const here = dirname2(fileURLToPath(import.meta.url));
+  const candidates = [
+    resolve5(here, "../../config/defaults/skillmapignore"),
+    // src/kernel/scan/ → src/config/defaults/
+    resolve5(here, "../config/defaults/skillmapignore"),
+    // dist/cli.js → dist/config/defaults/ (siblings)
+    resolve5(here, "config/defaults/skillmapignore")
+  ];
+  for (const candidate of candidates) {
+    if (existsSync2(candidate)) {
+      try {
+        return readFileSync4(candidate, "utf8");
+      } catch {
       }
-      contributions.push({
-        pluginId: analyzer.pluginId,
-        extensionId: analyzer.id,
-        nodePath,
-        contributionId,
-        slot: declared.slot,
-        payload,
-        emittedAt: Date.now()
+    }
+  }
+  return "";
+}
+
+// built-in-plugins/parsers/frontmatter-yaml/index.ts
+import yaml from "js-yaml";
+
+// kernel/util/strip-prototype-pollution.ts
+var FORBIDDEN_KEYS = /* @__PURE__ */ new Set([
+  "__proto__",
+  "constructor",
+  "prototype"
+]);
+function stripPrototypePollution(value) {
+  return strip(value);
+}
+function strip(value) {
+  if (value === null || value === void 0) return value;
+  if (typeof value !== "object") return value;
+  if (Array.isArray(value)) return value.map(strip);
+  const out = {};
+  for (const [k, v] of Object.entries(value)) {
+    if (FORBIDDEN_KEYS.has(k)) continue;
+    out[k] = strip(v);
+  }
+  return out;
+}
+
+// built-in-plugins/parsers/frontmatter-yaml/index.ts
+var FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---\r?\n?([\s\S]*)$/;
+var frontmatterYamlParser = {
+  id: "frontmatter-yaml",
+  parse(raw, _path) {
+    const match = FRONTMATTER_RE.exec(raw);
+    if (!match) return { frontmatterRaw: "", frontmatter: {}, body: raw };
+    const frontmatterRaw = match[1];
+    const body = match[2];
+    let parsed = {};
+    const issues = [];
+    try {
+      const doc = yaml.load(frontmatterRaw, { schema: yaml.JSON_SCHEMA });
+      if (doc && typeof doc === "object" && !Array.isArray(doc)) {
+        parsed = stripPrototypePollution(doc);
+      }
+    } catch (err) {
+      issues.push({
+        code: "frontmatter-parse-error",
+        message: sanitiseParseErrorMessage(err)
       });
-    };
-    const emitted = await analyzer.evaluate({
-      nodes,
-      links: internalLinks,
-      orphanSidecars: analyzerOrphans,
-      sidecarRoots,
-      annotationContributions,
-      viewContributions,
-      orphanJobFiles,
-      ...referenceablePaths ? { referenceablePaths } : {},
-      ...cwd ? { cwd } : {},
-      emitContribution
-    });
-    for (const issue of emitted) {
-      const validated = validateIssue(analyzer, issue, emitter);
-      if (validated) issues.push(validated);
     }
-    const evt = makeEvent("analyzer.completed", { analyzerId: qualifiedId });
-    emitter.emit(evt);
-    await hookDispatcher.dispatch("analyzer.completed", evt);
+    const out = { frontmatterRaw, frontmatter: parsed, body };
+    if (issues.length > 0) {
+      return { ...out, issues };
+    }
+    return out;
   }
-  return { issues, contributions };
+};
+function sanitiseParseErrorMessage(err) {
+  const raw = err instanceof Error ? err.message : String(err);
+  return raw.replace(/[-]+/g, " ").replace(/\s+/g, " ").trim();
 }
-function originatingNodeOf(link, priorNodePaths) {
-  if (link.kind === "supersedes" && !priorNodePaths.has(link.source)) {
-    return link.target;
+
+// built-in-plugins/parsers/plain/index.ts
+var plainParser = {
+  id: "plain",
+  parse(raw, _path) {
+    return { frontmatter: {}, frontmatterRaw: "", body: raw };
   }
-  return link.source;
+};
+
+// kernel/scan/parsers/index.ts
+var REGISTRY = /* @__PURE__ */ new Map([
+  [frontmatterYamlParser.id, frontmatterYamlParser],
+  [plainParser.id, plainParser]
+]);
+var FROZEN_IDS = new Set(REGISTRY.keys());
+function getParser(id) {
+  return REGISTRY.get(id);
 }
-function findHighConfidenceRenames(opts) {
-  const ops = [];
-  for (const fromPath of opts.deletedPaths) {
-    if (opts.claimedDeleted.has(fromPath)) continue;
-    const fromNode = opts.priorByPath.get(fromPath);
-    for (const toPath of opts.newPaths) {
-      if (opts.claimedNew.has(toPath)) continue;
-      const toNode = opts.currentByPath.get(toPath);
-      if (toNode.bodyHash === fromNode.bodyHash) {
-        ops.push({ from: fromPath, to: toPath, confidence: "high" });
-        opts.claimedDeleted.add(fromPath);
-        opts.claimedNew.add(toPath);
-        break;
+
+// kernel/scan/walk-content.ts
+var UnknownParserError = class extends Error {
+  constructor(parserId) {
+    super(`Unknown parser id '${parserId}'. Built-in parsers: 'frontmatter-yaml', 'plain'.`);
+    this.name = "UnknownParserError";
+  }
+};
+async function* walkContent(roots, options) {
+  const parser = getParser(options.parser);
+  if (!parser) throw new UnknownParserError(options.parser);
+  const filter = options.ignoreFilter ?? buildIgnoreFilter();
+  const extensions = options.extensions;
+  for (const root of roots) {
+    for await (const file of walkRoot(root, root, filter, extensions)) {
+      const relPath = relative2(root, file).split(sep).join("/");
+      let raw;
+      try {
+        raw = await readFile(file, "utf8");
+      } catch {
+        continue;
+      }
+      const parsed = parser.parse(raw, relPath);
+      yield {
+        path: relPath,
+        body: parsed.body,
+        frontmatterRaw: parsed.frontmatterRaw,
+        frontmatter: parsed.frontmatter,
+        // Audit L1: forward parser diagnostics (e.g. malformed YAML)
+        // through the IRawNode surface so the orchestrator can
+        // convert them into warn-level kernel `Issue` rows. Omitted
+        // when the parser reported no issues (happy path).
+        ...parsed.issues && parsed.issues.length > 0 ? { parseIssues: parsed.issues } : {}
+      };
+    }
+  }
+}
+async function* walkRoot(root, current, filter, extensions) {
+  let entries;
+  try {
+    entries = await readdir(current, { withFileTypes: true, encoding: "utf8" });
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    const name = entry.name;
+    const full = join2(current, name);
+    const rel = relative2(root, full).split(sep).join("/");
+    if (filter.ignores(rel)) continue;
+    if (entry.isSymbolicLink()) continue;
+    if (entry.isDirectory()) {
+      yield* walkRoot(root, full, filter, extensions);
+    } else if (entry.isFile() && hasMatchingExtension(name, extensions)) {
+      try {
+        const s = await lstat(full);
+        if (s.isFile()) yield full;
+      } catch {
       }
     }
   }
-  return ops;
 }
-function buildFrontmatterRenameCandidates(opts) {
-  const candidatesByNew = /* @__PURE__ */ new Map();
-  for (const toPath of opts.newPaths) {
-    if (opts.claimedNew.has(toPath)) continue;
-    const toNode = opts.currentByPath.get(toPath);
-    const matches = [];
-    for (const fromPath of opts.deletedPaths) {
-      if (opts.claimedDeleted.has(fromPath)) continue;
-      const fromNode = opts.priorByPath.get(fromPath);
-      if (toNode.frontmatterHash === fromNode.frontmatterHash) {
-        matches.push(fromPath);
-      }
-    }
-    if (matches.length > 0) candidatesByNew.set(toPath, matches);
+function hasMatchingExtension(name, extensions) {
+  for (const ext of extensions) {
+    if (name.endsWith(ext)) return true;
+  }
+  return false;
+}
+
+// kernel/extensions/provider.ts
+var DEFAULT_READ_CONFIG = Object.freeze({
+  extensions: Object.freeze([".md"]),
+  parser: "frontmatter-yaml"
+});
+function resolveProviderWalk(provider) {
+  if (provider.walk) {
+    const walk2 = provider.walk.bind(provider);
+    return walk2;
+  }
+  const read = provider.read ?? DEFAULT_READ_CONFIG;
+  return (roots, options) => {
+    const walkOptions = {
+      extensions: read.extensions,
+      parser: read.parser
+    };
+    if (options?.ignoreFilter) walkOptions.ignoreFilter = options.ignoreFilter;
+    return walkContent(roots, walkOptions);
+  };
+}
+
+// kernel/sidecar/parse.ts
+import { existsSync as existsSync3, readFileSync as readFileSync5 } from "fs";
+import { dirname as dirname3, resolve as resolve6 } from "path";
+import { createRequire as createRequire3 } from "module";
+import { Ajv2020 as Ajv20204 } from "ajv/dist/2020.js";
+import yaml2 from "js-yaml";
+function readSidecarFor(mdAbsolutePath) {
+  const sidecarPath = sidecarPathFor(mdAbsolutePath);
+  if (!existsSync3(sidecarPath)) {
+    return { parsed: null, present: false, issues: [] };
+  }
+  let raw;
+  try {
+    raw = readFileSync5(sidecarPath, "utf8");
+  } catch (err) {
+    return {
+      parsed: null,
+      present: true,
+      issues: [{ message: `cannot read ${sidecarPath}: ${err.message}` }]
+    };
+  }
+  let parsedYaml;
+  try {
+    parsedYaml = yaml2.load(raw);
+  } catch (err) {
+    return {
+      parsed: null,
+      present: true,
+      issues: [{ message: `malformed YAML in ${sidecarPath}: ${err.message}` }]
+    };
+  }
+  parsedYaml = stripPrototypePollution(parsedYaml);
+  if (!isPlainObject(parsedYaml)) {
+    return {
+      parsed: null,
+      present: true,
+      issues: [{ message: `sidecar root must be a YAML mapping at ${sidecarPath}` }]
+    };
+  }
+  const sidecarValidator = getSidecarValidator();
+  if (!sidecarValidator(parsedYaml)) {
+    const errors = (sidecarValidator.errors ?? []).map((e) => `${e.instancePath || "(root)"} ${e.message ?? e.keyword}`).join("; ");
+    return {
+      parsed: null,
+      present: true,
+      issues: [{ message: `sidecar schema validation failed at ${sidecarPath}: ${errors}` }]
+    };
+  }
+  const root = parsedYaml;
+  const identityBlock = root["identity"];
+  const annotationsRaw = root["annotations"];
+  const annotations = isPlainObject(annotationsRaw) ? Object.keys(annotationsRaw).length === 0 ? null : annotationsRaw : null;
+  return {
+    parsed: {
+      filePath: sidecarPath,
+      identityBodyHash: String(identityBlock["bodyHash"]),
+      identityFrontmatterHash: String(identityBlock["frontmatterHash"]),
+      identityPath: String(identityBlock["path"]),
+      annotations,
+      raw: root
+    },
+    present: true,
+    issues: []
+  };
+}
+function sidecarPathFor(mdAbsolutePath) {
+  if (mdAbsolutePath.endsWith(".md")) {
+    return `${mdAbsolutePath.slice(0, -".md".length)}.sm`;
+  }
+  return `${mdAbsolutePath}.sm`;
+}
+function isPlainObject(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+var cachedSidecarValidator = null;
+function getSidecarValidator() {
+  if (cachedSidecarValidator) return cachedSidecarValidator;
+  const ajv = new Ajv20204({ strict: false, allErrors: true, allowUnionTypes: true });
+  applyAjvFormats(ajv);
+  const specRoot = resolveSpecRoot2();
+  const annotationsSchema = JSON.parse(
+    readFileSync5(resolve6(specRoot, "schemas/annotations.schema.json"), "utf8")
+  );
+  const sidecarSchema = JSON.parse(
+    readFileSync5(resolve6(specRoot, "schemas/sidecar.schema.json"), "utf8")
+  );
+  ajv.addSchema(annotationsSchema);
+  cachedSidecarValidator = ajv.compile(sidecarSchema);
+  return cachedSidecarValidator;
+}
+function resolveSpecRoot2() {
+  const require2 = createRequire3(import.meta.url);
+  try {
+    const indexPath = require2.resolve("@skill-map/spec/index.json");
+    return dirname3(indexPath);
+  } catch {
+    throw new Error(
+      "@skill-map/spec not resolvable: sidecar reader cannot load schemas."
+    );
+  }
+}
+
+// kernel/sidecar/drift.ts
+function computeDriftStatus(args) {
+  const bodyDrift = args.storedBodyHash !== args.liveBodyHash;
+  const fmDrift = args.storedFrontmatterHash !== args.liveFrontmatterHash;
+  if (bodyDrift && fmDrift) return "stale-both";
+  if (bodyDrift) return "stale-body";
+  if (fmDrift) return "stale-frontmatter";
+  return "fresh";
+}
+
+// kernel/sidecar/discover-orphans.ts
+import { existsSync as existsSync4, readdirSync as readdirSync2, statSync } from "fs";
+import { join as join3, relative as relative3, sep as sep2 } from "path";
+function discoverOrphanSidecars(roots, shouldSkip) {
+  const out = [];
+  for (const root of roots) {
+    walk(root, root, shouldSkip ?? (() => false), out);
+  }
+  return out;
+}
+function walk(root, current, shouldSkip, out) {
+  let entries;
+  try {
+    entries = readdirSync2(current, { withFileTypes: true, encoding: "utf8" });
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    const full = join3(current, entry.name);
+    const rel = relative3(root, full).split(sep2).join("/");
+    if (shouldSkip(rel)) continue;
+    if (entry.isSymbolicLink()) continue;
+    if (entry.isDirectory()) {
+      walk(root, full, shouldSkip, out);
+      continue;
+    }
+    if (!entry.isFile()) continue;
+    if (!entry.name.endsWith(".sm")) continue;
+    const expectedMd = `${full.slice(0, -".sm".length)}.md`;
+    if (existsSync4(expectedMd) && safeIsFile(expectedMd)) continue;
+    out.push({ sidecarPath: full, relativePath: rel, expectedMdPath: expectedMd });
+  }
+}
+function safeIsFile(path) {
+  try {
+    return statSync(path).isFile();
+  } catch {
+    return false;
   }
-  return candidatesByNew;
 }
-function claimSingletonRenames(opts) {
-  const ops = [];
-  for (const toPath of opts.newPaths) {
-    if (opts.claimedNew.has(toPath)) continue;
-    const candidates = opts.candidatesByNew.get(toPath);
-    if (!candidates) continue;
-    const remaining = candidates.filter((p) => !opts.claimedDeleted.has(p));
-    if (remaining.length === 1) {
-      const fromPath = remaining[0];
-      ops.push({ from: fromPath, to: toPath, confidence: "medium" });
-      opts.issues.push({
-        analyzerId: "auto-rename-medium",
-        severity: "warn",
-        nodeIds: [toPath],
-        message: `Auto-rename (medium confidence): ${fromPath} \u2192 ${toPath}`,
-        data: { from: fromPath, to: toPath, confidence: "medium" }
-      });
-      opts.claimedDeleted.add(fromPath);
-      opts.claimedNew.add(toPath);
+
+// kernel/sidecar/store.ts
+import { existsSync as existsSync7, readFileSync as readFileSync8 } from "fs";
+import { dirname as dirname5, resolve as resolve9 } from "path";
+import { createRequire as createRequire4 } from "module";
+import { Ajv2020 as Ajv20205 } from "ajv/dist/2020.js";
+import yaml3 from "js-yaml";
+
+// core/config/atomic-write.ts
+import {
+  closeSync,
+  constants as fsConstants,
+  existsSync as existsSync5,
+  mkdirSync,
+  openSync,
+  readFileSync as readFileSync6,
+  renameSync,
+  unlinkSync,
+  writeSync
+} from "fs";
+import { randomBytes } from "crypto";
+import { dirname as dirname4 } from "path";
+
+// core/config/helper.ts
+import { isAbsolute as isAbsolute2, resolve as resolve8 } from "path";
+
+// kernel/config/loader.ts
+import { existsSync as existsSync6, readFileSync as readFileSync7 } from "fs";
+
+// kernel/util/skill-map-paths.ts
+import { join as join5 } from "path";
+
+// core/paths/db-path.ts
+import { join as join4, resolve as resolve7 } from "path";
+var SKILL_MAP_DIR = ".skill-map";
+var DB_FILENAME = "skill-map.db";
+var LOCAL_SETTINGS_FILENAME = "settings.local.json";
+var DEFAULT_DB_REL = `${SKILL_MAP_DIR}/${DB_FILENAME}`;
+var GITIGNORE_ENTRIES = [
+  `${SKILL_MAP_DIR}/${LOCAL_SETTINGS_FILENAME}`,
+  `${SKILL_MAP_DIR}/${DB_FILENAME}`
+];
+
+// kernel/orchestrator/node-build.ts
+import { createHash } from "crypto";
+import { existsSync as existsSync8 } from "fs";
+import { isAbsolute as isAbsolute3, resolve as resolvePath } from "path";
+import "js-tiktoken/lite";
+import yaml4 from "js-yaml";
+
+// kernel/orchestrator/frontmatter.ts
+function validateFrontmatter(providerFrontmatter, provider, kind, frontmatter, path, strict) {
+  const result = providerFrontmatter.validate(provider, kind, frontmatter);
+  if (result.ok) return null;
+  return {
+    analyzerId: "frontmatter-invalid",
+    severity: strict ? "error" : "warn",
+    nodeIds: [path],
+    message: tx(ORCHESTRATOR_TEXTS.frontmatterInvalid, { path, kind, errors: result.errors }),
+    data: { kind, errors: result.errors }
+  };
+}
+function detectMalformedFrontmatter(body, path, strict) {
+  const hint = classifyMalformedFrontmatter(body);
+  if (!hint) return null;
+  return {
+    analyzerId: "frontmatter-malformed",
+    severity: strict ? "error" : "warn",
+    nodeIds: [path],
+    message: malformedMessage(hint, path),
+    data: { hint }
+  };
+}
+function classifyMalformedFrontmatter(body) {
+  if (body.startsWith("\uFEFF")) {
+    if (/^---\r?\n[\s\S]*?[A-Za-z0-9_-]+\s*:/.test(body)) {
+      return "byte-order-mark";
     }
   }
-  return ops;
-}
-function flagAmbiguousRenames(opts) {
-  for (const toPath of opts.newPaths) {
-    if (opts.claimedNew.has(toPath)) continue;
-    const candidates = opts.candidatesByNew.get(toPath);
-    if (!candidates) continue;
-    const remaining = candidates.filter((p) => !opts.claimedDeleted.has(p));
-    if (remaining.length > 1) {
-      opts.issues.push({
-        analyzerId: "auto-rename-ambiguous",
-        severity: "warn",
-        nodeIds: [toPath],
-        message: `Auto-rename ambiguous: ${toPath} matches ${remaining.length} prior frontmatters \u2014 pick one with \`sm orphans undo-rename ${toPath} --from <old.path>\`.`,
-        data: { to: toPath, candidates: remaining }
-      });
+  if (/^[ \t]+---\r?\n[ \t]*[A-Za-z0-9_-]+\s*:/.test(body)) {
+    return "paste-with-indent";
+  }
+  if (/^---\r?\n[ \t]*[A-Za-z0-9_-]+\s*:/.test(body)) {
+    const hasCloseFence = /\r?\n---(?:\r?\n|$)/.test(body);
+    if (!hasCloseFence) {
+      return "missing-close";
     }
   }
+  return null;
 }
-function flagOrphans(opts) {
-  for (const fromPath of opts.deletedPaths) {
-    if (opts.claimedDeleted.has(fromPath)) continue;
-    opts.issues.push({
-      analyzerId: "orphan",
-      severity: "info",
-      nodeIds: [fromPath],
-      message: `Orphan history: ${fromPath} was deleted; no rename match found.`,
-      data: { path: fromPath }
-    });
+function malformedMessage(hint, path) {
+  switch (hint) {
+    case "paste-with-indent":
+      return tx(ORCHESTRATOR_TEXTS.frontmatterMalformedPasteWithIndent, { path });
+    case "byte-order-mark":
+      return tx(ORCHESTRATOR_TEXTS.frontmatterMalformedByteOrderMark, { path });
+    case "missing-close":
+      return tx(ORCHESTRATOR_TEXTS.frontmatterMalformedMissingClose, { path });
   }
 }
-function detectRenamesAndOrphans(prior, current, issues) {
-  const priorByPath = /* @__PURE__ */ new Map();
-  for (const n of prior.nodes) priorByPath.set(n.path, n);
-  const currentByPath = /* @__PURE__ */ new Map();
-  for (const n of current) currentByPath.set(n.path, n);
-  const deletedPaths = [...priorByPath.keys()].filter((p) => !currentByPath.has(p)).sort();
-  const newPaths = [...currentByPath.keys()].filter((p) => !priorByPath.has(p)).sort();
-  const claimedDeleted = /* @__PURE__ */ new Set();
-  const claimedNew = /* @__PURE__ */ new Set();
-  const ops = [];
-  ops.push(...findHighConfidenceRenames({
-    deletedPaths,
-    newPaths,
-    priorByPath,
-    currentByPath,
-    claimedDeleted,
-    claimedNew
-  }));
-  const candidatesByNew = buildFrontmatterRenameCandidates({
-    deletedPaths,
-    newPaths,
-    priorByPath,
-    currentByPath,
-    claimedDeleted,
-    claimedNew
-  });
-  ops.push(...claimSingletonRenames({
-    newPaths,
-    candidatesByNew,
-    claimedDeleted,
-    claimedNew,
-    issues
-  }));
-  flagAmbiguousRenames({ newPaths, candidatesByNew, claimedDeleted, claimedNew, issues });
-  flagOrphans({ deletedPaths, claimedDeleted, issues });
-  return ops;
-}
-var EXTERNAL_URL_SCHEME_RE = /^[a-z][a-z0-9+\-.]+:/i;
-function isExternalUrlLink(link) {
-  return EXTERNAL_URL_SCHEME_RE.test(link.target);
-}
+
+// kernel/orchestrator/node-build.ts
 function buildNode(args) {
   const bytesFrontmatter = Buffer.byteLength(args.frontmatterRaw, "utf8");
   const bytesBody = Buffer.byteLength(args.body, "utf8");
@@ -1946,11 +1854,11 @@ function resolveSidecarOverlay(relativePath, nodePathForIssue, roots, liveBodyHa
     liveFrontmatterHash
   });
   return {
-    // R15 closure (2026-05-07) — surface the full parsed root on the
+    // R15 closure (2026-05-07), surface the full parsed root on the
     // overlay so BFF consumers (UI inspector audit / plugin-contributions
     // / debug panels) can read `for.*`, `audit.*`, `settings.*`, and
     // plugin-namespaced sub-keys without re-reading the file. The
-    // `annotations` field above stays — it duplicates `root.annotations`
+    // `annotations` field above stays, it duplicates `root.annotations`
     // by design so existing consumers keep working unchanged.
     overlay: {
       present: true,
@@ -1981,157 +1889,460 @@ function relativePathFromRoots(absolutePath, roots) {
   }
   return absolutePath;
 }
-function buildExtractorContext(extractor, node, body, frontmatter, emitLink, enrichNode, emitContribution, store) {
-  const scope = extractor.scope;
-  return {
-    node,
-    body: scope === "frontmatter" ? "" : body,
-    frontmatter: scope === "body" ? {} : frontmatter,
-    emitLink,
-    enrichNode,
-    emitContribution,
-    ...store !== void 0 ? { store } : {}
-  };
-}
-function validateLink(extractor, link, emitter) {
-  if (!extractor.emitsLinkKinds.includes(link.kind)) {
-    const qualifiedId = `${extractor.pluginId}/${extractor.id}`;
-    emitter.emit(
-      makeEvent("extension.error", {
-        kind: "link-kind-not-declared",
-        extensionId: qualifiedId,
-        linkKind: link.kind,
-        declaredKinds: extractor.emitsLinkKinds,
-        link: { source: link.source, target: link.target, kind: link.kind },
-        message: tx(ORCHESTRATOR_TEXTS.extensionErrorLinkKindNotDeclared, {
-          extractorId: qualifiedId,
-          linkKind: link.kind,
-          declaredKinds: extractor.emitsLinkKinds.join(", ")
-        })
-      })
+function buildFreshNodeAndValidateFrontmatter(opts) {
+  const node = buildNode({
+    path: opts.raw.path,
+    kind: opts.kind,
+    providerId: opts.provider.id,
+    frontmatterRaw: opts.raw.frontmatterRaw,
+    body: opts.raw.body,
+    frontmatter: opts.raw.frontmatter,
+    bodyHash: opts.bodyHash,
+    frontmatterHash: opts.frontmatterHash,
+    encoder: opts.encoder
+  });
+  const frontmatterIssues = [];
+  if (opts.raw.parseIssues && opts.raw.parseIssues.length > 0) {
+    for (const pi of opts.raw.parseIssues) {
+      frontmatterIssues.push({
+        analyzerId: pi.code,
+        severity: opts.strict ? "error" : "warn",
+        nodeIds: [opts.raw.path],
+        message: pi.message
+      });
+    }
+  }
+  if (opts.raw.frontmatterRaw.length > 0) {
+    const fmIssue = validateFrontmatter(
+      opts.providerFrontmatter,
+      opts.provider,
+      opts.kind,
+      opts.raw.frontmatter,
+      opts.raw.path,
+      opts.strict
     );
-    return null;
+    if (fmIssue) frontmatterIssues.push(fmIssue);
+  } else {
+    const malformed = detectMalformedFrontmatter(opts.raw.body, opts.raw.path, opts.strict);
+    if (malformed) frontmatterIssues.push(malformed);
+  }
+  return { node, frontmatterIssues };
+}
+function mergeNodeWithEnrichments(node, enrichments, opts = {}) {
+  const includeStale = opts.includeStale === true;
+  const applicable = enrichments.filter((e) => e.nodePath === node.path).filter((e) => includeStale || !e.stale).sort((a, b) => a.enrichedAt - b.enrichedAt);
+  const base = {};
+  assignSafe(base, node.frontmatter ?? {});
+  for (const row of applicable) {
+    assignSafe(base, row.value);
   }
-  const confidence = link.confidence ?? extractor.defaultConfidence;
-  return { ...link, confidence };
+  return base;
 }
-function validateFrontmatter(providerFrontmatter, provider, kind, frontmatter, path, strict) {
-  const result = providerFrontmatter.validate(provider, kind, frontmatter);
-  if (result.ok) return null;
+function assignSafe(target, source) {
+  const safe = stripPrototypePollution(source);
+  for (const [k, v] of Object.entries(safe)) {
+    target[k] = v;
+  }
+}
+
+// kernel/orchestrator/walk.ts
+async function walkAndExtract(opts) {
+  const accum = createWalkAccumulators();
+  const wctx = buildWalkContext(opts);
+  const claimedPaths = /* @__PURE__ */ new Set();
+  const walkOptions = opts.ignoreFilter ? { ignoreFilter: opts.ignoreFilter } : {};
+  let filesWalked = 0;
+  let index = 0;
+  for (const provider of opts.providers) {
+    for await (const raw of resolveProviderWalk(provider)(opts.roots, walkOptions)) {
+      filesWalked += 1;
+      if (claimedPaths.has(raw.path)) continue;
+      const advanced = await processRawNode(raw, provider, wctx, accum, claimedPaths, index + 1);
+      if (advanced) index += 1;
+    }
+  }
+  const orphanSidecars = discoverOrphanSidecars(opts.roots);
   return {
-    analyzerId: "frontmatter-invalid",
-    severity: strict ? "error" : "warn",
-    nodeIds: [path],
-    message: tx(ORCHESTRATOR_TEXTS.frontmatterInvalid, { path, kind, errors: result.errors }),
-    data: { kind, errors: result.errors }
+    nodes: accum.nodes,
+    internalLinks: accum.internalLinks,
+    externalLinks: accum.externalLinks,
+    cachedPaths: accum.cachedPaths,
+    frontmatterIssues: accum.frontmatterIssues,
+    filesWalked,
+    enrichments: [...accum.enrichmentBuffer.values()],
+    extractorRuns: accum.extractorRuns,
+    contributions: accum.contributionsBuffer,
+    freshlyRunTuples: accum.freshlyRunTuples,
+    orphanSidecars,
+    sidecarRoots: accum.sidecarRoots
   };
 }
-function detectMalformedFrontmatter(body, path, strict) {
-  const hint = classifyMalformedFrontmatter(body);
-  if (!hint) return null;
+function createWalkAccumulators() {
   return {
-    analyzerId: "frontmatter-malformed",
-    severity: strict ? "error" : "warn",
-    nodeIds: [path],
-    message: malformedMessage(hint, path),
-    data: { hint }
+    nodes: [],
+    internalLinks: [],
+    externalLinks: [],
+    cachedPaths: /* @__PURE__ */ new Set(),
+    frontmatterIssues: [],
+    enrichmentBuffer: /* @__PURE__ */ new Map(),
+    contributionsBuffer: [],
+    freshlyRunTuples: /* @__PURE__ */ new Set(),
+    extractorRuns: [],
+    sidecarRoots: /* @__PURE__ */ new Map()
   };
 }
-function classifyMalformedFrontmatter(body) {
-  if (body.startsWith("\uFEFF")) {
-    if (/^---\r?\n[\s\S]*?[A-Za-z0-9_-]+\s*:/.test(body)) {
-      return "byte-order-mark";
-    }
+function buildWalkContext(opts) {
+  const { priorNodesByPath, priorLinksByOriginating, priorFrontmatterIssuesByNode } = opts.priorIndex;
+  const shortIdToQualified = /* @__PURE__ */ new Map();
+  for (const ex of opts.extractors) {
+    const qualified = qualifiedExtensionId(ex.pluginId, ex.id);
+    const list = shortIdToQualified.get(ex.id);
+    if (list) list.push(qualified);
+    else shortIdToQualified.set(ex.id, [qualified]);
   }
-  if (/^[ \t]+---\r?\n[ \t]*[A-Za-z0-9_-]+\s*:/.test(body)) {
-    return "paste-with-indent";
+  return { opts, priorNodesByPath, priorLinksByOriginating, priorFrontmatterIssuesByNode, shortIdToQualified };
+}
+async function processRawNode(raw, provider, wctx, accum, claimedPaths, nextIndex) {
+  const bodyHash = sha256(raw.body);
+  const frontmatterHash = sha256(canonicalFrontmatter(raw.frontmatter, raw.frontmatterRaw));
+  const kind = provider.classify(raw.path, raw.frontmatter);
+  if (kind === null) {
+    return false;
   }
-  if (/^---\r?\n[ \t]*[A-Za-z0-9_-]+\s*:/.test(body)) {
-    const hasCloseFence = /\r?\n---(?:\r?\n|$)/.test(body);
-    if (!hasCloseFence) {
-      return "missing-close";
-    }
+  claimedPaths.add(raw.path);
+  const priorNode = wctx.priorNodesByPath.get(raw.path);
+  const nodeHashCacheEligible = wctx.opts.enableCache && wctx.opts.prior !== null && priorNode !== void 0 && priorNode.bodyHash === bodyHash && priorNode.frontmatterHash === frontmatterHash;
+  const sidecarResolution = resolveSidecarOverlay(
+    raw.path,
+    raw.path,
+    wctx.opts.roots,
+    bodyHash,
+    frontmatterHash
+  );
+  const sidecarAnnotationsHash = sha256(
+    canonicalSidecarAnnotations(sidecarResolution.overlay.annotations)
+  );
+  const cacheDecision = computeCacheDecision({
+    extractors: wctx.opts.extractors,
+    kind,
+    nodePath: raw.path,
+    bodyHash,
+    sidecarAnnotationsHash,
+    nodeHashCacheEligible,
+    priorExtractorRuns: wctx.opts.priorExtractorRuns
+  });
+  const ctx = {
+    raw,
+    provider,
+    kind,
+    bodyHash,
+    frontmatterHash,
+    sidecarResolution,
+    sidecarAnnotationsHash,
+    nodeHashCacheEligible,
+    cacheDecision,
+    priorNode,
+    index: nextIndex
+  };
+  if (cacheDecision.fullCacheHit && priorNode) {
+    applyFullCacheHit(ctx, wctx, accum);
+  } else {
+    await applyExtractPath(ctx, wctx, accum);
   }
-  return null;
+  return true;
 }
-function malformedMessage(hint, path) {
-  switch (hint) {
-    case "paste-with-indent":
-      return tx(ORCHESTRATOR_TEXTS.frontmatterMalformedPasteWithIndent, { path });
-    case "byte-order-mark":
-      return tx(ORCHESTRATOR_TEXTS.frontmatterMalformedByteOrderMark, { path });
-    case "missing-close":
-      return tx(ORCHESTRATOR_TEXTS.frontmatterMalformedMissingClose, { path });
+function attachSidecar(node, resolution, sidecarRoots) {
+  node.sidecar = resolution.overlay;
+  if (resolution.parsedRoot !== null) {
+    sidecarRoots.set(node.path, resolution.parsedRoot);
   }
+  return resolution.issues.map(
+    (i) => i.nodeIds.length > 0 ? i : { ...i, nodeIds: [node.path] }
+  );
 }
-function validateIssue(analyzer, issue, emitter) {
-  const severity = issue.severity;
-  if (severity !== "error" && severity !== "warn" && severity !== "info") {
-    const qualifiedId = `${analyzer.pluginId}/${analyzer.id}`;
-    emitter.emit(
-      makeEvent("extension.error", {
-        kind: "issue-invalid-severity",
-        extensionId: qualifiedId,
-        severity,
-        issue: { analyzerId: issue.analyzerId || analyzer.id, message: issue.message, nodeIds: issue.nodeIds },
-        message: tx(ORCHESTRATOR_TEXTS.extensionErrorIssueInvalidSeverity, {
-          analyzerId: qualifiedId,
-          severity: JSON.stringify(severity)
-        })
-      })
-    );
-    return null;
-  }
-  return { ...issue, analyzerId: issue.analyzerId || analyzer.id };
+function applyFullCacheHit(ctx, wctx, accum) {
+  const reused = reusePriorNode({
+    priorNode: ctx.priorNode,
+    bodyHash: ctx.bodyHash,
+    sidecarAnnotationsHash: ctx.sidecarAnnotationsHash,
+    strict: wctx.opts.strict,
+    cachedQualifiedIds: ctx.cacheDecision.cachedQualifiedIds,
+    applicableQualifiedIds: ctx.cacheDecision.applicableQualifiedIds,
+    shortIdToQualified: wctx.shortIdToQualified,
+    priorLinksByOriginating: wctx.priorLinksByOriginating,
+    priorFrontmatterIssuesByNode: wctx.priorFrontmatterIssuesByNode
+  });
+  const reusedSidecarIssues = attachSidecar(reused.node, ctx.sidecarResolution, accum.sidecarRoots);
+  accum.nodes.push(reused.node);
+  accum.cachedPaths.add(reused.node.path);
+  for (const link of reused.internalLinks) accum.internalLinks.push(link);
+  for (const issue of reused.frontmatterIssues) accum.frontmatterIssues.push(issue);
+  for (const issue of reusedSidecarIssues) accum.frontmatterIssues.push(issue);
+  for (const run of reused.extractorRuns) accum.extractorRuns.push(run);
+  wctx.opts.emitter.emit(makeEvent("scan.progress", {
+    index: ctx.index,
+    path: ctx.raw.path,
+    kind: ctx.kind,
+    cached: true
+  }));
 }
-function recomputeLinkCounts(nodes, links) {
-  const byPath2 = /* @__PURE__ */ new Map();
-  for (const node of nodes) {
-    node.linksOutCount = 0;
-    node.linksInCount = 0;
-    byPath2.set(node.path, node);
-  }
-  for (const link of links) {
-    const source = byPath2.get(link.source);
-    if (source) source.linksOutCount += 1;
-    const target = byPath2.get(link.target);
-    if (target) target.linksInCount += 1;
+async function applyExtractPath(ctx, wctx, accum) {
+  const node = buildOrReuseNode(ctx, wctx, accum);
+  const sidecarIssues = attachSidecar(node, ctx.sidecarResolution, accum.sidecarRoots);
+  for (const issue of sidecarIssues) accum.frontmatterIssues.push(issue);
+  const partialCacheHit = isPartialCacheHit(ctx);
+  emitExtractProgress(ctx, wctx, partialCacheHit);
+  const extractorsToRun = partialCacheHit ? ctx.cacheDecision.missingExtractors : ctx.cacheDecision.applicableExtractors;
+  recordFreshlyRunTuples(extractorsToRun, node.path, accum);
+  const extractResult = await runExtractorsForNode({
+    extractors: extractorsToRun,
+    node,
+    body: ctx.raw.body,
+    frontmatter: ctx.raw.frontmatter,
+    bodyHash: ctx.bodyHash,
+    emitter: wctx.opts.emitter,
+    ...wctx.opts.pluginStores ? { pluginStores: wctx.opts.pluginStores } : {}
+  });
+  mergeExtractResult(extractResult, accum);
+  recordExtractorRuns(node.path, ctx, accum);
+}
+function emitExtractProgress(ctx, wctx, partialCacheHit) {
+  wctx.opts.emitter.emit(makeEvent("scan.progress", {
+    index: ctx.index,
+    path: ctx.raw.path,
+    kind: ctx.kind,
+    cached: false,
+    ...partialCacheHit ? { partialCache: true } : {}
+  }));
+}
+function recordFreshlyRunTuples(extractors, nodePath, accum) {
+  for (const ex of extractors) {
+    accum.freshlyRunTuples.add(`${ex.pluginId}\0${ex.id}\0${nodePath}`);
+  }
+}
+function mergeExtractResult(extractResult, accum) {
+  for (const link of extractResult.internalLinks) accum.internalLinks.push(link);
+  for (const link of extractResult.externalLinks) accum.externalLinks.push(link);
+  for (const enr of extractResult.enrichments) {
+    accum.enrichmentBuffer.set(`${enr.nodePath}\0${enr.extractorId}`, enr);
+  }
+  for (const c of extractResult.contributions) accum.contributionsBuffer.push(c);
+}
+function isPartialCacheHit(ctx) {
+  return ctx.nodeHashCacheEligible && ctx.cacheDecision.cachedQualifiedIds.size > 0 && ctx.priorNode !== void 0;
+}
+function buildOrReuseNode(ctx, wctx, accum) {
+  if (isPartialCacheHit(ctx) && ctx.priorNode) {
+    const partial = cloneNodeAndReshapeLinks({
+      priorNode: ctx.priorNode,
+      strict: wctx.opts.strict,
+      cachedQualifiedIds: ctx.cacheDecision.cachedQualifiedIds,
+      applicableQualifiedIds: ctx.cacheDecision.applicableQualifiedIds,
+      shortIdToQualified: wctx.shortIdToQualified,
+      priorLinksByOriginating: wctx.priorLinksByOriginating,
+      priorFrontmatterIssuesByNode: wctx.priorFrontmatterIssuesByNode
+    });
+    for (const link of partial.internalLinks) accum.internalLinks.push(link);
+    for (const issue of partial.frontmatterIssues) accum.frontmatterIssues.push(issue);
+    accum.nodes.push(partial.node);
+    return partial.node;
+  }
+  const fresh = buildFreshNodeAndValidateFrontmatter({
+    raw: ctx.raw,
+    kind: ctx.kind,
+    provider: ctx.provider,
+    bodyHash: ctx.bodyHash,
+    frontmatterHash: ctx.frontmatterHash,
+    encoder: wctx.opts.encoder,
+    providerFrontmatter: wctx.opts.providerFrontmatter,
+    strict: wctx.opts.strict
+  });
+  accum.nodes.push(fresh.node);
+  for (const issue of fresh.frontmatterIssues) accum.frontmatterIssues.push(issue);
+  return fresh.node;
+}
+function recordExtractorRuns(nodePath, ctx, accum) {
+  const ranAt = Date.now();
+  for (const ex of ctx.cacheDecision.applicableExtractors) {
+    accum.extractorRuns.push({
+      nodePath,
+      extractorId: qualifiedExtensionId(ex.pluginId, ex.id),
+      bodyHashAtRun: ctx.bodyHash,
+      ranAt,
+      sidecarAnnotationsHashAtRun: ctx.sidecarAnnotationsHash
+    });
   }
 }
-function recomputeExternalRefsCount(nodes, externalLinks, cachedPaths) {
-  const byPath2 = /* @__PURE__ */ new Map();
-  for (const node of nodes) {
-    if (!cachedPaths.has(node.path)) node.externalRefsCount = 0;
-    byPath2.set(node.path, node);
+
+// kernel/orchestrator/index.ts
+var SCANNED_BY = {
+  name: "skill-map",
+  version: package_default.version,
+  specVersion: resolveSpecVersionSafe()
+};
+function resolveSpecVersionSafe() {
+  try {
+    return installedSpecVersion();
+  } catch {
+    return "unknown";
   }
-  for (const link of externalLinks) {
-    const source = byPath2.get(link.source);
-    if (source && !cachedPaths.has(source.path)) source.externalRefsCount += 1;
+}
+async function runScanWithRenames(_kernel, options) {
+  return runScanInternal(_kernel, options);
+}
+async function runScan(_kernel, options) {
+  const { result } = await runScanInternal(_kernel, options);
+  return result;
+}
+async function runScanInternal(_kernel, options) {
+  validateRoots(options.roots);
+  const setup = buildScanSetup(options);
+  const { emitter, exts, hookDispatcher, encoder, prior, start } = setup;
+  const scanStartedEvent = makeEvent("scan.started", { roots: options.roots });
+  emitter.emit(scanStartedEvent);
+  await hookDispatcher.dispatch("scan.started", scanStartedEvent);
+  const walked = await walkAndExtract({
+    providers: exts.providers,
+    extractors: exts.extractors,
+    roots: options.roots,
+    ...options.ignoreFilter ? { ignoreFilter: options.ignoreFilter } : {},
+    emitter,
+    encoder,
+    strict: setup.strict,
+    enableCache: setup.enableCache,
+    prior,
+    priorIndex: setup.priorIndex,
+    priorExtractorRuns: setup.priorExtractorRuns,
+    providerFrontmatter: setup.providerFrontmatter,
+    pluginStores: options.pluginStores
+  });
+  recomputeLinkCounts(walked.nodes, walked.internalLinks);
+  recomputeExternalRefsCount(walked.nodes, walked.externalLinks, walked.cachedPaths);
+  await dispatchExtractorCompleted(exts.extractors, emitter, hookDispatcher);
+  const registeredActionIds = new Set(
+    _kernel.registry.all("action").map((a) => qualifiedExtensionId(a.pluginId, a.id))
+  );
+  const analyzerResult = await runAnalyzers(
+    exts.analyzers,
+    walked.nodes,
+    walked.internalLinks,
+    walked.orphanSidecars,
+    walked.sidecarRoots,
+    options.annotationContributions ?? [],
+    options.viewContributions ?? [],
+    options.orphanJobFiles ?? [],
+    options.referenceablePaths,
+    options.cwd,
+    registeredActionIds,
+    emitter,
+    hookDispatcher
+  );
+  mergeAnalyzerEmissions(walked, analyzerResult, exts.analyzers);
+  const issues = analyzerResult.issues;
+  for (const issue of walked.frontmatterIssues) issues.push(issue);
+  const renameOps = prior ? detectRenamesAndOrphans(prior, walked.nodes, issues) : [];
+  const stats = buildScanStats(walked, issues, start);
+  const scanCompletedEvent = makeEvent("scan.completed", { stats });
+  emitter.emit(scanCompletedEvent);
+  await hookDispatcher.dispatch("scan.completed", scanCompletedEvent);
+  return buildScanReturn(walked, issues, renameOps, stats, options, setup);
+}
+function buildScanSetup(options) {
+  const start = Date.now();
+  const emitter = options.emitter ?? new InMemoryProgressEmitter();
+  const exts = options.extensions ?? { providers: [], extractors: [], analyzers: [] };
+  const hookDispatcher = makeHookDispatcher(exts.hooks ?? [], emitter);
+  const tokenize = options.tokenize !== false;
+  const encoder = tokenize ? new Tiktoken2(cl100k_base) : null;
+  const prior = options.priorSnapshot ?? null;
+  const priorIndex = indexPriorSnapshot(prior);
+  const providerFrontmatter = buildProviderFrontmatterValidator(exts.providers);
+  return {
+    start,
+    scannedAt: start,
+    emitter,
+    exts,
+    hookDispatcher,
+    encoder,
+    prior,
+    priorIndex,
+    priorExtractorRuns: options.priorExtractorRuns,
+    providerFrontmatter,
+    scope: options.scope ?? "project",
+    strict: options.strict === true,
+    enableCache: options.enableCache === true
+  };
+}
+async function dispatchExtractorCompleted(extractors, emitter, hookDispatcher) {
+  for (const extractor of extractors) {
+    const extractorId = qualifiedExtensionId(extractor.pluginId, extractor.id);
+    const evt = makeEvent("extractor.completed", { extractorId });
+    emitter.emit(evt);
+    await hookDispatcher.dispatch("extractor.completed", evt);
   }
 }
-function mergeNodeWithEnrichments(node, enrichments, opts = {}) {
-  const includeStale = opts.includeStale === true;
-  const applicable = enrichments.filter((e) => e.nodePath === node.path).filter((e) => includeStale || !e.stale).sort((a, b) => a.enrichedAt - b.enrichedAt);
-  const base = {};
-  assignSafe(base, node.frontmatter ?? {});
-  for (const row of applicable) {
-    assignSafe(base, row.value);
+function mergeAnalyzerEmissions(walked, analyzerResult, analyzers) {
+  for (const c of analyzerResult.contributions) walked.contributions.push(c);
+  for (const analyzer of analyzers ?? []) {
+    if (analyzer.viewContributions === void 0) continue;
+    for (const node of walked.nodes) {
+      walked.freshlyRunTuples.add(`${analyzer.pluginId}\0${analyzer.id}\0${node.path}`);
+    }
   }
-  return base;
 }
-var FORBIDDEN_MERGE_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
-function assignSafe(target, source) {
-  for (const [k, v] of Object.entries(source)) {
-    if (FORBIDDEN_MERGE_KEYS.has(k)) continue;
-    target[k] = v;
+function buildScanStats(walked, issues, start) {
+  return {
+    // `filesSkipped` is "files walked but not classified by any
+    // Provider". Today every walked file IS classified by its Provider
+    // (the `claude` Provider's `classify()` always returns a kind,
+    // falling back to `'markdown'`), so this is always 0. Wired now
+    // so the field shape is spec-conformant; meaningful once multiple
+    // Providers compete.
+    filesWalked: walked.filesWalked,
+    filesSkipped: 0,
+    nodesCount: walked.nodes.length,
+    linksCount: walked.internalLinks.length,
+    issuesCount: issues.length,
+    durationMs: Date.now() - start
+  };
+}
+function buildScanReturn(walked, issues, renameOps, stats, options, setup) {
+  return {
+    result: {
+      schemaVersion: 1,
+      scannedAt: setup.scannedAt,
+      scope: setup.scope,
+      roots: options.roots,
+      providers: setup.exts.providers.map((a) => a.id),
+      scannedBy: SCANNED_BY,
+      nodes: walked.nodes,
+      links: walked.internalLinks,
+      issues,
+      stats
+    },
+    renameOps,
+    extractorRuns: walked.extractorRuns,
+    enrichments: walked.enrichments,
+    contributions: walked.contributions,
+    freshlyRunTuples: walked.freshlyRunTuples
+  };
+}
+function validateRoots(roots) {
+  if (roots.length === 0) {
+    throw new Error(ORCHESTRATOR_TEXTS.runScanRootEmptyArray);
+  }
+  for (const root of roots) {
+    if (!existsSync9(root) || !statSync2(root).isDirectory()) {
+      throw new Error(tx(ORCHESTRATOR_TEXTS.runScanRootMissing, { root }));
+    }
   }
 }
 
 // kernel/scan/watcher.ts
-import { resolve as resolve8, relative as relative4, sep as sep3 } from "path";
+import { resolve as resolve10, relative as relative4, sep as sep3 } from "path";
 import chokidar from "chokidar";
 function createChokidarWatcher(opts) {
-  const absRoots = opts.roots.map((r) => resolve8(opts.cwd, r));
+  const absRoots = opts.roots.map((r) => resolve10(opts.cwd, r));
   const ignoreFilterOpt = opts.ignoreFilter;
   const getFilter = ignoreFilterOpt === void 0 ? void 0 : typeof ignoreFilterOpt === "function" ? ignoreFilterOpt : () => ignoreFilterOpt;
   const ignored = getFilter ? (path) => {
@@ -2144,7 +2355,8 @@ function createChokidarWatcher(opts) {
   const watcher = chokidar.watch(absRoots, {
     ignoreInitial: true,
     persistent: true,
-    ...ignored ? { ignored } : {}
+    ...ignored ? { ignored } : {},
+    ...opts.depth !== void 0 ? { depth: opts.depth } : {}
   });
   let pending = [];
   let timer = null;