@skill-map/cli 0.31.0 → 0.33.0

package/dist/cli.js

@@ -1,5 +1,5 @@
 // cli/entry.ts
-import { existsSync as existsSync30 } from "fs";
+import { existsSync as existsSync33 } from "fs";
 import { Builtins, Cli as Cli2 } from "clipanion";
 
 // kernel/adapters/in-memory-progress.ts
@@ -494,6 +494,31 @@ var claudeProvider = {
         colorDark: "#34d399",
         icon: { kind: "pi", id: "pi-bolt" }
       }
+    },
+    /**
+     * Phase 5 of the active-lens migration: MCP servers surface as
+     * synthetic / virtual nodes (no filesystem path; identifier is
+     * `mcp://<name>`) derived from a config file (`settings.json`
+     * for Claude). Per-skill / per-agent references appear as
+     * `tools: [mcp__<server>__<tool>, ...]` entries in frontmatter;
+     * the `core/mcp-tools` extractor turns each match into one
+     * MCP node (idempotent dedup by path) plus a `references` link
+     * from the source skill / agent to that node.
+     *
+     * `schema` is provider-agnostic enough that we reuse the skill
+     * schema for now (mcp nodes have `name` + `description` at most,
+     * which the base skill schema accepts). A dedicated schema lands
+     * if MCP nodes grow Claude-specific metadata.
+     */
+    mcp: {
+      schema: "./schemas/skill.schema.json",
+      schemaJson: skill_schema_default,
+      ui: {
+        label: "MCP servers",
+        color: "#8b5cf6",
+        colorDark: "#a78bfa",
+        icon: { kind: "pi", id: "pi-server" }
+      }
     }
   },
   // Auxiliary schemas the per-kind schemas $ref by $id. AJV needs them
@@ -511,6 +536,166 @@ var claudeProvider = {
   }
 };
 
+// kernel/util/strip-code-blocks.ts
+var FENCE_RE = /^(?<indent> {0,3})(?<fence>`{3,}|~{3,})/;
+function stripCodeBlocks(input) {
+  if (!input) return input;
+  const fenceless = stripFences(input);
+  return stripInline(fenceless);
+}
+function stripFences(input) {
+  const out = [];
+  const lines = input.split("\n");
+  let openFence = null;
+  for (const line of lines) {
+    if (openFence) {
+      const closer = matchClosingFence(line, openFence);
+      if (closer) {
+        out.push(blank(line));
+        openFence = null;
+      } else {
+        out.push(blank(line));
+      }
+      continue;
+    }
+    const open = FENCE_RE.exec(line);
+    if (open?.groups) {
+      openFence = open.groups["fence"];
+      out.push(blank(line));
+      continue;
+    }
+    out.push(line);
+  }
+  return out.join("\n");
+}
+function matchClosingFence(line, openFence) {
+  const m = FENCE_RE.exec(line);
+  if (!m?.groups) return false;
+  const fence = m.groups["fence"];
+  return fence[0] === openFence[0] && fence.length >= openFence.length;
+}
+function stripInline(input) {
+  return input.replace(/(`+)([\s\S]*?)\1/g, (_full, ticks, body) => {
+    return ticks.replace(/`/g, " ") + blank(body) + ticks.replace(/`/g, " ");
+  });
+}
+function blank(s) {
+  return s.replace(/[^\s]/g, " ");
+}
+
+// kernel/trigger-normalize.ts
+function normalizeTrigger(source) {
+  let out = source.normalize("NFD");
+  out = out.replace(new RegExp("\\p{Mn}+", "gu"), "");
+  out = out.toLowerCase();
+  out = out.replace(/[-_\s]+/g, " ");
+  out = out.replace(/  +/g, " ");
+  return out.trim();
+}
+
+// plugins/claude/extractors/at-directive/index.ts
+var ID = "at-directive";
+var AT_RE = /(?:^|[^A-Za-z0-9_@])(@(?:\.{1,2}\/|\/)?[a-z0-9](?:[a-z0-9_\-./]*[a-z0-9_])?(?::[a-z0-9][a-z0-9_-]*)?)/gi;
+var FILE_EXT_RE = /\.(md|mdx|js|jsx|ts|tsx|json|yml|yaml|toml|txt|html|css|scss|less|py|rb|go|rs|java|c|cpp|h|hpp|sh|sql|svg|png|jpg|jpeg|gif|webp|pdf)$/i;
+var atDirectiveExtractor = {
+  id: ID,
+  pluginId: "claude",
+  kind: "extractor",
+  version: "1.0.0",
+  description: "Detects `@<token>` directives in a node's body using Claude Code interpretation rules. A bare handle (e.g. `@team`) becomes a `mentions` link; a file-flavoured token (e.g. `@docs/api.md`, `@./readme.md`) becomes a `references` link. Gated by `precondition.provider: ['claude']` so Gemini / Cursor / Codex apply their own at-directive flavours via their own extractors.",
+  scope: "body",
+  precondition: { provider: ["claude"] },
+  extract(ctx) {
+    const seenMentions = /* @__PURE__ */ new Set();
+    const seenReferences = /* @__PURE__ */ new Set();
+    const body = stripCodeBlocks(ctx.body);
+    for (const match of body.matchAll(AT_RE)) {
+      const original = match[1];
+      const bare = original.slice(1);
+      const isReference = bare.startsWith("./") || bare.startsWith("../") || bare.startsWith("/") || FILE_EXT_RE.test(bare);
+      if (isReference) {
+        const target = bare.replace(/^\.\//, "");
+        if (seenReferences.has(target)) continue;
+        seenReferences.add(target);
+        ctx.emitLink({
+          source: ctx.node.path,
+          target,
+          kind: "references",
+          // 0.85: strong file signal (path prefix `./` / `../` / `/` OR
+          // a known file extension on the tail). One degree of inference
+          // (the runtime still resolves the path).
+          confidence: 0.85,
+          sources: [ID],
+          trigger: {
+            originalTrigger: original,
+            normalizedTrigger: target.toLowerCase()
+          }
+        });
+        continue;
+      }
+      const normalized = normalizeTrigger(original);
+      if (seenMentions.has(normalized)) continue;
+      seenMentions.add(normalized);
+      ctx.emitLink({
+        source: ctx.node.path,
+        target: original,
+        kind: "mentions",
+        // 0.5: genuine ambiguity. A bare `@handle` (no extension, no
+        // path prefix) could be an agent, a handle, or generic prose.
+        // The runtime decides at invocation time; the extractor leaves
+        // the question open.
+        confidence: 0.5,
+        sources: [ID],
+        trigger: {
+          originalTrigger: original,
+          normalizedTrigger: normalized
+        }
+      });
+    }
+  }
+};
+
+// plugins/claude/extractors/slash/index.ts
+var ID2 = "slash";
+var SLASH_RE = /(?<![A-Za-z0-9_/.:?#])(\/[a-z0-9][a-z0-9_-]*(?::[a-z0-9][a-z0-9_-]*)?)/gi;
+var slashExtractor = {
+  id: ID2,
+  pluginId: "claude",
+  kind: "extractor",
+  version: "1.0.0",
+  description: "Detects `/command` invocations in a node's body using Claude Code routing rules and turns each one into an arrow between nodes in the graph. Gated by `precondition.provider: ['claude']` so Gemini / Cursor / Codex apply their own slash flavours (Gemini has 4 routing separators, Codex deprecated user slash commands, etc.) via their own extractors.",
+  scope: "body",
+  precondition: { provider: ["claude"] },
+  extract(ctx) {
+    const seen = /* @__PURE__ */ new Set();
+    const body = stripCodeBlocks(ctx.body);
+    for (const match of body.matchAll(SLASH_RE)) {
+      const original = match[1];
+      const endIdx = (match.index ?? 0) + match[0].length;
+      const nextChar = body[endIdx];
+      if (nextChar && /[A-Za-z0-9_/-]/.test(nextChar)) continue;
+      const normalized = normalizeTrigger(original);
+      if (seen.has(normalized)) continue;
+      seen.add(normalized);
+      ctx.emitLink({
+        source: ctx.node.path,
+        target: original,
+        kind: "invokes",
+        // 0.8: clean `/command` match after code-block strip. The
+        // post-match path guard above filters URL / file-path noise,
+        // so a hit is unambiguous syntax. Resolution against the live
+        // skill / command catalog happens downstream.
+        confidence: 0.8,
+        sources: [ID2],
+        trigger: {
+          originalTrigger: original,
+          normalizedTrigger: normalized
+        }
+      });
+    }
+  }
+};
+
 // plugins/gemini/providers/gemini/schemas/agent.schema.json
 var agent_schema_default2 = {
   $schema: "https://json-schema.org/draft/2020-12/schema",
@@ -629,6 +814,86 @@ var geminiProvider = {
   }
 };
 
+// plugins/openai/providers/openai/schemas/agent.schema.json
+var agent_schema_default3 = {
+  $schema: "https://json-schema.org/draft/2020-12/schema",
+  $id: "https://skill-map.dev/providers/openai/v1/frontmatter/agent.schema.json",
+  title: "FrontmatterCodexAgent",
+  description: "Frontmatter shape for nodes classified as `agent` by the OpenAI Codex Provider. Codex sub-agents live as TOML files under `.codex/agents/<name>.toml`; the entire file IS the agent definition (no markdown body). The TOML parser feeds the parsed root object into `frontmatter`, so this schema validates the same shape skill-map's other providers carry on per-kind frontmatter. Mirrors Codex's documented sub-agent fields (https://github.com/openai/codex) with `additionalProperties: true` so future additions flow through unchanged.",
+  allOf: [
+    { $ref: "https://skill-map.dev/spec/v0/frontmatter/base.schema.json" }
+  ],
+  type: "object",
+  additionalProperties: true,
+  properties: {
+    name: {
+      type: "string",
+      minLength: 1,
+      description: "Sub-agent identifier. Conventionally matches the filename stem."
+    },
+    description: {
+      type: "string",
+      description: "Short description of when this sub-agent applies. Codex surfaces this in the agent picker; skill-map mirrors it in the card."
+    },
+    model: {
+      type: "string",
+      description: "Model identifier (`gpt-4o`, `o3-mini`, etc.) the sub-agent runs against."
+    },
+    instructions: {
+      type: "string",
+      description: "Multi-line prompt body (TOML triple-quoted string)."
+    },
+    tools: {
+      type: "array",
+      items: { type: "string" },
+      description: "Tool ids this sub-agent is allowed to call."
+    },
+    mcp_servers: {
+      type: "array",
+      items: { type: "string" },
+      description: "MCP server ids attached to this sub-agent (`tools: [mcp__<server>__*]` follows the same pattern as Claude)."
+    },
+    approval_policy: {
+      type: "string",
+      enum: ["never", "on-request", "untrusted"],
+      description: "Codex approval policy for this sub-agent's destructive operations."
+    },
+    sandbox_mode: {
+      type: "string",
+      enum: ["read-only", "workspace-write", "danger-full-access"],
+      description: "Codex sandbox mode the sub-agent runs under."
+    }
+  }
+};
+
+// plugins/openai/providers/openai/index.ts
+var openaiProvider = {
+  id: "openai",
+  pluginId: "openai",
+  kind: "provider",
+  version: "1.0.0",
+  description: "Walks OpenAI Codex CLI scope conventions (.codex/agents/*.toml).",
+  read: { extensions: [".toml"], parser: "toml" },
+  kinds: {
+    agent: {
+      schema: "./schemas/agent.schema.json",
+      schemaJson: agent_schema_default3,
+      ui: {
+        label: "Codex agents",
+        // Codex green; distinct from claude / gemini palettes.
+        color: "#22c55e",
+        colorDark: "#4ade80",
+        icon: { kind: "pi", id: "pi-bolt" }
+      }
+    }
+  },
+  classify(path) {
+    const lower = path.toLowerCase();
+    if (lower.startsWith(".codex/agents/") && lower.endsWith(".toml")) return "agent";
+    return null;
+  }
+};
+
 // plugins/agent-skills/providers/agent-skills/schemas/skill.schema.json
 var skill_schema_default3 = {
   $schema: "https://json-schema.org/draft/2020-12/schema",
@@ -722,9 +987,9 @@ var coreMarkdownProvider = {
 };
 
 // plugins/core/extractors/annotations/index.ts
-var ID = "annotations";
+var ID3 = "annotations";
 var annotationsExtractor = {
-  id: ID,
+  id: ID3,
   pluginId: "core",
   kind: "extractor",
   version: "1.0.0",
@@ -751,147 +1016,36 @@ function processBlock(block, sourcePath, emit) {
   if (typeof supersededBy === "string" && supersededBy.length > 0) {
     emit(supersededBy, sourcePath);
   }
-}
-function pickAnnotations(node) {
-  const sidecar = node.sidecar;
-  if (!sidecar || sidecar.present !== true) return null;
-  const ann = sidecar.annotations;
-  if (ann && typeof ann === "object" && !Array.isArray(ann)) {
-    return ann;
-  }
-  return null;
-}
-function stringArray(value) {
-  if (!Array.isArray(value)) return [];
-  return value.filter((v) => typeof v === "string" && v.length > 0);
-}
-function link(source, target) {
-  return {
-    source,
-    target,
-    kind: "supersedes",
-    confidence: "high",
-    sources: [ID]
-  };
-}
-
-// kernel/util/strip-code-blocks.ts
-var FENCE_RE = /^(?<indent> {0,3})(?<fence>`{3,}|~{3,})/;
-function stripCodeBlocks(input) {
-  if (!input) return input;
-  const fenceless = stripFences(input);
-  return stripInline(fenceless);
-}
-function stripFences(input) {
-  const out = [];
-  const lines = input.split("\n");
-  let openFence = null;
-  for (const line of lines) {
-    if (openFence) {
-      const closer = matchClosingFence(line, openFence);
-      if (closer) {
-        out.push(blank(line));
-        openFence = null;
-      } else {
-        out.push(blank(line));
-      }
-      continue;
-    }
-    const open = FENCE_RE.exec(line);
-    if (open?.groups) {
-      openFence = open.groups["fence"];
-      out.push(blank(line));
-      continue;
-    }
-    out.push(line);
-  }
-  return out.join("\n");
-}
-function matchClosingFence(line, openFence) {
-  const m = FENCE_RE.exec(line);
-  if (!m?.groups) return false;
-  const fence = m.groups["fence"];
-  return fence[0] === openFence[0] && fence.length >= openFence.length;
-}
-function stripInline(input) {
-  return input.replace(/(`+)([\s\S]*?)\1/g, (_full, ticks, body) => {
-    return ticks.replace(/`/g, " ") + blank(body) + ticks.replace(/`/g, " ");
-  });
-}
-function blank(s) {
-  return s.replace(/[^\s]/g, " ");
-}
-
-// kernel/trigger-normalize.ts
-function normalizeTrigger(source) {
-  let out = source.normalize("NFD");
-  out = out.replace(new RegExp("\\p{Mn}+", "gu"), "");
-  out = out.toLowerCase();
-  out = out.replace(/[-_\s]+/g, " ");
-  out = out.replace(/  +/g, " ");
-  return out.trim();
-}
-
-// plugins/core/extractors/at-directive/index.ts
-var ID2 = "at-directive";
-var AT_RE = /(?:^|[^A-Za-z0-9_@])(@(?:\.{1,2}\/|\/)?[a-z0-9](?:[a-z0-9_\-./]*[a-z0-9_])?(?::[a-z0-9][a-z0-9_-]*)?)/gi;
-var FILE_EXT_RE = /\.(md|mdx|js|jsx|ts|tsx|json|yml|yaml|toml|txt|html|css|scss|less|py|rb|go|rs|java|c|cpp|h|hpp|sh|sql|svg|png|jpg|jpeg|gif|webp|pdf)$/i;
-var atDirectiveExtractor = {
-  id: ID2,
-  pluginId: "core",
-  kind: "extractor",
-  version: "1.0.0",
-  description: "Detects `@<token>` directives in a node's body. A bare handle (e.g. `@team`) becomes a `mentions` link; a file-flavoured token (e.g. `@docs/api.md`, `@./readme.md`) becomes a `references` link, matching how Claude Code / Gemini CLI / Cursor read the same syntax.",
-  scope: "body",
-  extract(ctx) {
-    const seenMentions = /* @__PURE__ */ new Set();
-    const seenReferences = /* @__PURE__ */ new Set();
-    const body = stripCodeBlocks(ctx.body);
-    for (const match of body.matchAll(AT_RE)) {
-      const original = match[1];
-      const bare = original.slice(1);
-      const isReference = bare.startsWith("./") || bare.startsWith("../") || bare.startsWith("/") || FILE_EXT_RE.test(bare);
-      if (isReference) {
-        const target = bare.replace(/^\.\//, "");
-        if (seenReferences.has(target)) continue;
-        seenReferences.add(target);
-        ctx.emitLink({
-          source: ctx.node.path,
-          target,
-          kind: "references",
-          confidence: "medium",
-          sources: [ID2],
-          trigger: {
-            originalTrigger: original,
-            normalizedTrigger: target.toLowerCase()
-          }
-        });
-        continue;
-      }
-      const normalized = normalizeTrigger(original);
-      if (seenMentions.has(normalized)) continue;
-      seenMentions.add(normalized);
-      ctx.emitLink({
-        source: ctx.node.path,
-        target: original,
-        kind: "mentions",
-        confidence: "medium",
-        sources: [ID2],
-        trigger: {
-          originalTrigger: original,
-          normalizedTrigger: normalized
-        }
-      });
-    }
-  }
-};
+}
+function pickAnnotations(node) {
+  const sidecar = node.sidecar;
+  if (!sidecar || sidecar.present !== true) return null;
+  const ann = sidecar.annotations;
+  if (ann && typeof ann === "object" && !Array.isArray(ann)) {
+    return ann;
+  }
+  return null;
+}
+function stringArray(value) {
+  if (!Array.isArray(value)) return [];
+  return value.filter((v) => typeof v === "string" && v.length > 0);
+}
+function link(source, target) {
+  return {
+    source,
+    target,
+    kind: "supersedes",
+    confidence: 1,
+    sources: [ID3]
+  };
+}
 
 // plugins/core/extractors/external-url-counter/index.ts
-var ID3 = "external-url-counter";
+var ID4 = "external-url-counter";
 var URL_RE = /https?:\/\/[^\s<>"'`)\]]+/g;
 var TRAILING_PUNCT = /[.,;:!?]+$/;
 var externalUrlCounterExtractor = {
-  id: ID3,
+  id: ID4,
   pluginId: "core",
   kind: "extractor",
   version: "1.0.0",
@@ -937,8 +1091,8 @@ var externalUrlCounterExtractor = {
         source: ctx.node.path,
         target: normalized,
         kind: "references",
-        confidence: "low",
-        sources: [ID3],
+        confidence: 0.3,
+        sources: [ID4],
         trigger: {
           originalTrigger: original,
           normalizedTrigger: normalized
@@ -985,11 +1139,11 @@ function lineFor(lineStarts, offset) {
 
 // plugins/core/extractors/markdown-link/index.ts
 import { posix as pathPosix } from "path";
-var ID4 = "markdown-link";
+var ID5 = "markdown-link";
 var LINK_RE = /(?<!!)\[([^\]]*)\]\(([^)\s]+)(?:\s+"[^"]*")?\)/g;
 var URL_SCHEME_RE = /^[a-z][a-z0-9+.-]*:/i;
 var markdownLinkExtractor = {
-  id: ID4,
+  id: ID5,
   pluginId: "core",
   kind: "extractor",
   version: "1.0.0",
@@ -1010,8 +1164,8 @@ var markdownLinkExtractor = {
         source: ctx.node.path,
         target: resolved,
         kind: "references",
-        confidence: "high",
-        sources: [ID4],
+        confidence: 0.95,
+        sources: [ID5],
         trigger: {
           originalTrigger: original,
           normalizedTrigger: resolved
@@ -1050,47 +1204,61 @@ function lineFor2(lineStarts, offset) {
   return lo + 1;
 }
 
-// plugins/core/extractors/slash/index.ts
-var ID5 = "slash";
-var SLASH_RE = /(?<![A-Za-z0-9_/.:?#])(\/[a-z0-9][a-z0-9_-]*(?::[a-z0-9][a-z0-9_-]*)?)/gi;
-var slashExtractor = {
-  id: ID5,
+// plugins/core/extractors/mcp-tools/index.ts
+var ID6 = "mcp-tools";
+var MCP_PATTERN = /^mcp__([a-z0-9][a-z0-9_-]*)__[a-z0-9_-]+$/i;
+var mcpToolsExtractor = {
+  id: ID6,
   pluginId: "core",
   kind: "extractor",
   version: "1.0.0",
-  description: "Detects `/command` invocations in a node's body and turns each one into an arrow between nodes in the graph.",
-  scope: "body",
+  description: "Detects `tools: [mcp__<server>__<tool>]` entries in a node's frontmatter and turns each unique server into an MCP node + a reference edge from the source.",
+  scope: "frontmatter",
   extract(ctx) {
-    const seen = /* @__PURE__ */ new Set();
-    const body = stripCodeBlocks(ctx.body);
-    for (const match of body.matchAll(SLASH_RE)) {
-      const original = match[1];
-      const endIdx = (match.index ?? 0) + match[0].length;
-      const nextChar = body[endIdx];
-      if (nextChar && /[A-Za-z0-9_/-]/.test(nextChar)) continue;
-      const normalized = normalizeTrigger(original);
-      if (seen.has(normalized)) continue;
-      seen.add(normalized);
+    const raw = ctx.frontmatter["tools"];
+    if (!Array.isArray(raw)) return;
+    const servers = collectMcpServers(raw);
+    if (servers.size === 0) return;
+    for (const server of servers) {
+      const mcpPath = `mcp://${server}`;
+      ctx.emitNode({
+        path: mcpPath,
+        kind: "mcp",
+        virtual: true,
+        provider: ctx.node.provider,
+        derivedFrom: [ctx.node.path],
+        frontmatter: { name: server }
+      });
       ctx.emitLink({
         source: ctx.node.path,
-        target: original,
-        kind: "invokes",
-        confidence: "medium",
-        sources: [ID5],
+        target: mcpPath,
+        kind: "references",
+        confidence: 0.85,
+        sources: [ID6],
         trigger: {
-          originalTrigger: original,
-          normalizedTrigger: normalized
+          originalTrigger: `mcp__${server}__*`,
+          normalizedTrigger: mcpPath
         }
       });
     }
   }
 };
+function collectMcpServers(tools) {
+  const out = /* @__PURE__ */ new Set();
+  for (const t of tools) {
+    if (typeof t !== "string" || t.length === 0) continue;
+    const match = MCP_PATTERN.exec(t);
+    if (!match) continue;
+    out.add(match[1].toLowerCase());
+  }
+  return out;
+}
 
 // plugins/core/extractors/tools-count/index.ts
-var ID6 = "tools-count";
+var ID7 = "tools-count";
 var TOOLTIP_MAX = 255;
 var toolsCountExtractor = {
-  id: ID6,
+  id: ID7,
   pluginId: "core",
   kind: "extractor",
   version: "1.0.0",
@@ -1133,9 +1301,9 @@ var ANNOTATION_ORPHAN_TEXTS = {
 };
 
 // plugins/core/analyzers/annotation-orphan/index.ts
-var ID7 = "annotation-orphan";
+var ID8 = "annotation-orphan";
 var annotationOrphanAnalyzer = {
-  id: ID7,
+  id: ID8,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1148,7 +1316,7 @@ var annotationOrphanAnalyzer = {
     for (const orphan of orphans) {
       const expectedMdRelative = orphan.relativePath.endsWith(".sm") ? `${orphan.relativePath.slice(0, -".sm".length)}.md` : `${orphan.relativePath}.md`;
       issues.push({
-        analyzerId: ID7,
+        analyzerId: ID8,
         severity: "warn",
         nodeIds: [expectedMdRelative],
         message: tx(ANNOTATION_ORPHAN_TEXTS.message, {
@@ -1185,9 +1353,9 @@ var ANNOTATION_STALE_TEXTS = {
 };
 
 // plugins/core/analyzers/annotation-stale/index.ts
-var ID8 = "annotation-stale";
+var ID9 = "annotation-stale";
 var annotationStaleAnalyzer = {
-  id: ID8,
+  id: ID9,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1222,7 +1390,7 @@ var annotationStaleAnalyzer = {
       if (status === "fresh") continue;
       const message = status === "stale-body" ? tx(ANNOTATION_STALE_TEXTS.bodyDrift, { path: node.path }) : status === "stale-frontmatter" ? tx(ANNOTATION_STALE_TEXTS.frontmatterDrift, { path: node.path }) : tx(ANNOTATION_STALE_TEXTS.bothDrift, { path: node.path });
       issues.push({
-        analyzerId: ID8,
+        analyzerId: ID9,
         severity: "warn",
         nodeIds: [node.path],
         message,
@@ -1268,9 +1436,9 @@ var BROKEN_REF_TEXTS = {
 };
 
 // plugins/core/analyzers/broken-ref/index.ts
-var ID9 = "broken-ref";
+var ID10 = "broken-ref";
 var brokenRefAnalyzer = {
-  id: ID9,
+  id: ID10,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1339,7 +1507,7 @@ function buildIssue(link2, hintCandidates = []) {
     trigger: link2.trigger?.normalizedTrigger ?? null
   };
   const issue = {
-    analyzerId: ID9,
+    analyzerId: ID10,
     severity: "warn",
     nodeIds: [link2.source],
     message: tx(BROKEN_REF_TEXTS.message, {
@@ -1433,9 +1601,9 @@ function isPathStyleLink(link2) {
 }
 
 // plugins/core/analyzers/contribution-orphan/index.ts
-var ID10 = "contribution-orphan";
+var ID11 = "contribution-orphan";
 var contributionOrphanAnalyzer = {
-  id: ID10,
+  id: ID11,
   pluginId: "core",
   kind: "analyzer",
   version: "0.0.0",
@@ -1456,9 +1624,9 @@ var JOB_ORPHAN_FILE_TEXTS = {
 };
 
 // plugins/core/analyzers/job-orphan-file/index.ts
-var ID11 = "job-orphan-file";
+var ID12 = "job-orphan-file";
 var jobOrphanFileAnalyzer = {
-  id: ID11,
+  id: ID12,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1470,7 +1638,7 @@ var jobOrphanFileAnalyzer = {
     const issues = [];
     for (const filePath of orphans) {
       issues.push({
-        analyzerId: ID11,
+        analyzerId: ID12,
         severity: "warn",
         nodeIds: [filePath],
         message: tx(JOB_ORPHAN_FILE_TEXTS.message, { filePath }),
@@ -1488,9 +1656,9 @@ var LINK_CONFLICT_TEXTS = {
 };
 
 // plugins/core/analyzers/link-conflict/index.ts
-var ID12 = "link-conflict";
+var ID13 = "link-conflict";
 var linkConflictAnalyzer = {
-  id: ID12,
+  id: ID13,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1538,7 +1706,7 @@ var linkConflictAnalyzer = {
       const [source, target] = key.split("\0");
       const kindList = variants.map((v) => v.kind).join(" / ");
       issues.push({
-        analyzerId: ID12,
+        analyzerId: ID13,
         severity: "warn",
         nodeIds: [source, target],
         message: tx(LINK_CONFLICT_TEXTS.message, {
@@ -1553,14 +1721,7 @@ var linkConflictAnalyzer = {
   }
 };
 function rankConfidence(c) {
-  switch (c) {
-    case "high":
-      return 2;
-    case "medium":
-      return 1;
-    case "low":
-      return 0;
-  }
+  return c;
 }
 
 // kernel/util/trigger-resolve.ts
@@ -1612,9 +1773,9 @@ function resolveLinkTargetToPath(link2, nameIndex) {
 }
 
 // plugins/core/analyzers/link-counts/index.ts
-var ID13 = "link-counts";
+var ID14 = "link-counts";
 var linkCountsAnalyzer = {
-  id: ID13,
+  id: ID14,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1678,11 +1839,11 @@ function formatBreakdown(byKind, direction) {
 }
 
 // plugins/core/analyzers/stability/index.ts
-var ID14 = "stability";
+var ID15 = "stability";
 var EXPERIMENTAL_TOOLTIP = "Experimental: API may change";
 var DEPRECATED_TOOLTIP = "Deprecated: avoid in new code";
 var stabilityAnalyzer = {
-  id: ID14,
+  id: ID15,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1714,7 +1875,7 @@ var stabilityAnalyzer = {
           tooltip: EXPERIMENTAL_TOOLTIP
         });
         issues.push({
-          analyzerId: ID14,
+          analyzerId: ID15,
           severity: "info",
           nodeIds: [node.path],
           message: `Node '${node.path}' is marked experimental: API may change.`,
@@ -1727,7 +1888,7 @@ var stabilityAnalyzer = {
           severity: "warn"
         });
         issues.push({
-          analyzerId: ID14,
+          analyzerId: ID15,
           severity: "warn",
           nodeIds: [node.path],
           message: `Node '${node.path}' is marked deprecated: avoid in new code.`,
@@ -1761,9 +1922,9 @@ var SUPERSEDED_TEXTS = {
 };
 
 // plugins/core/analyzers/superseded/index.ts
-var ID15 = "superseded";
+var ID16 = "superseded";
 var supersededAnalyzer = {
-  id: ID15,
+  id: ID16,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1775,7 +1936,7 @@ var supersededAnalyzer = {
       const supersededBy = pickSupersededBy(node);
       if (supersededBy === null) continue;
       issues.push({
-        analyzerId: ID15,
+        analyzerId: ID16,
         severity: "info",
         nodeIds: [node.path],
         message: tx(SUPERSEDED_TEXTS.message, {
@@ -1824,14 +1985,14 @@ var TRIGGER_COLLISION_TEXTS = {
 };
 
 // plugins/core/analyzers/trigger-collision/index.ts
-var ID16 = "trigger-collision";
+var ID17 = "trigger-collision";
 var ADVERTISING_KINDS = /* @__PURE__ */ new Set([
   "command",
   "skill",
   "agent"
 ]);
 var triggerCollisionAnalyzer = {
-  id: ID16,
+  id: ID17,
   pluginId: "core",
   kind: "analyzer",
   mode: "deterministic",
@@ -1930,7 +2091,7 @@ function analyzeTriggerBucket(normalized, claims) {
     part: parts[0]
   });
   return {
-    analyzerId: ID16,
+    analyzerId: ID17,
     severity: "error",
     nodeIds,
     message,
@@ -1970,10 +2131,10 @@ var UNKNOWN_FIELD_TEXTS = {
 };
 
 // plugins/core/analyzers/unknown-field/index.ts
-var ID17 = "unknown-field";
+var ID18 = "unknown-field";
 var RESERVED_ROOT_BLOCKS = /* @__PURE__ */ new Set(["identity", "annotations", "settings", "audit"]);
 var unknownFieldAnalyzer = {
-  id: ID17,
+  id: ID18,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -2031,7 +2192,7 @@ var unknownFieldAnalyzer = {
         for (const key of Object.keys(annotations)) {
           if (!knownAnnotationKeys.has(key)) {
             issues.push({
-              analyzerId: ID17,
+              analyzerId: ID18,
               severity: "warn",
               nodeIds: [node.path],
               message: tx(UNKNOWN_FIELD_TEXTS.unknownAnnotationKey, {
@@ -2058,7 +2219,7 @@ var unknownFieldAnalyzer = {
             if (validator(value)) continue;
             const errors = (validator.errors ?? []).map((e) => `${e.instancePath || "(root)"} ${e.message ?? e.keyword}`).join("; ");
             issues.push({
-              analyzerId: ID17,
+              analyzerId: ID18,
               severity: "warn",
               nodeIds: [node.path],
               message: tx(UNKNOWN_FIELD_TEXTS.pluginNamespaceInvalid, {
@@ -2074,7 +2235,7 @@ var unknownFieldAnalyzer = {
           continue;
         }
         issues.push({
-          analyzerId: ID17,
+          analyzerId: ID18,
           severity: "warn",
           nodeIds: [node.path],
           message: tx(UNKNOWN_FIELD_TEXTS.unknownRootKey, {
@@ -2367,9 +2528,9 @@ var VALIDATE_ALL_TEXTS = {
 };
 
 // plugins/core/analyzers/validate-all/index.ts
-var ID18 = "validate-all";
+var ID19 = "validate-all";
 var validateAllAnalyzer = {
-  id: ID18,
+  id: ID19,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -2432,7 +2593,7 @@ function collectNodeFindings(v, node, out) {
   const result = v.validate("node", toNodeForSchema(node));
   if (result.ok) return;
   out.push({
-    analyzerId: ID18,
+    analyzerId: ID19,
     severity: "error",
     nodeIds: [node.path],
     message: tx(VALIDATE_ALL_TEXTS.nodeFailure, {
@@ -2451,7 +2612,7 @@ function collectFrontmatterBaseFindings(node, out) {
   if (isMissingStringField(fm, "description")) missing.push("description");
   if (missing.length === 0) return;
   out.push({
-    analyzerId: ID18,
+    analyzerId: ID19,
     // `warn` (not `error`) so the default `sm scan` exit code stays
     // 0 even when nodes are missing frontmatter base fields. Strict
     // mode (`sm scan --strict`) still escalates to exit 1. Matches
@@ -2473,7 +2634,7 @@ function collectLinkFindings(v, link2, out) {
   const result = v.validate("link", toLinkForSchema(link2));
   if (result.ok) return;
   out.push({
-    analyzerId: ID18,
+    analyzerId: ID19,
     severity: "error",
     nodeIds: [link2.source],
     message: tx(VALIDATE_ALL_TEXTS.linkFailure, {
@@ -2541,13 +2702,13 @@ var ASCII_FORMATTER_TEXTS = {
 };
 
 // plugins/core/formatters/ascii/index.ts
-var ID19 = "ascii";
+var ID20 = "ascii";
 var KIND_ORDER = ["agent", "command", "skill", "markdown"];
 var asciiFormatter = {
-  id: ID19,
+  id: ID20,
   pluginId: "core",
   kind: "formatter",
-  formatId: ID19,
+  formatId: ID20,
   version: "1.0.0",
   description: "Renders the scan as plain text, grouped by kind, arrows, and issues. Used by `sm scan --format=ascii`.",
   // ASCII tree formatter, header + per-kind sections + per-issue
@@ -2642,14 +2803,14 @@ function renderSection(out, kind, group) {
 }
 
 // plugins/core/formatters/json/index.ts
-var ID20 = "json";
+var ID21 = "json";
 var jsonFormatter = {
-  id: ID20,
+  id: ID21,
   pluginId: "core",
   kind: "formatter",
   version: "1.0.0",
   description: "Renders the persisted scan as JSON (conforms to `scan-result.schema.json` when the full ScanResult is available). Used by `sm graph --format json` and `GET /api/graph?format=json`.",
-  formatId: ID20,
+  formatId: ID21,
   format(ctx) {
     if (ctx.scanResult !== void 0) {
       return JSON.stringify(ctx.scanResult);
@@ -2788,10 +2949,10 @@ function resolveSpecRoot2() {
 }
 
 // plugins/core/actions/bump/index.ts
-var ID21 = "bump";
+var ID22 = "bump";
 var PLUGIN_ID = "core";
 var bumpAction = {
-  id: ID21,
+  id: ID22,
   pluginId: PLUGIN_ID,
   kind: "action",
   version: "1.0.0",
@@ -2850,10 +3011,10 @@ function pickCurrentVersion(overlay) {
 }
 
 // plugins/core/actions/mark-superseded/index.ts
-var ID22 = "mark-superseded";
+var ID23 = "mark-superseded";
 var PLUGIN_ID2 = "core";
 var markSupersededAction = {
-  id: ID22,
+  id: ID23,
   pluginId: PLUGIN_ID2,
   kind: "action",
   version: "0.0.0",
@@ -2963,7 +3124,7 @@ var UPDATE_CHECK_TEXTS = {
 // package.json
 var package_default = {
   name: "@skill-map/cli",
-  version: "0.31.0",
+  version: "0.33.0",
   description: "skill-map reference implementation \u2014 kernel + CLI + adapters.",
   license: "MIT",
   type: "module",
@@ -3044,6 +3205,7 @@ var package_default = {
     "js-yaml": "4.1.1",
     kysely: "0.28.17",
     semver: "7.7.4",
+    "smol-toml": "1.6.1",
     typanion: "3.14.0",
     ws: "8.20.0"
   },
@@ -3339,14 +3501,16 @@ var updateCheckHook = {
 
 // plugins/built-ins.ts
 var claudeProvider2 = { ...claudeProvider, pluginId: "claude" };
+var atDirectiveExtractor2 = { ...atDirectiveExtractor, pluginId: "claude" };
+var slashExtractor2 = { ...slashExtractor, pluginId: "claude" };
 var geminiProvider2 = { ...geminiProvider, pluginId: "gemini" };
+var openaiProvider2 = { ...openaiProvider, pluginId: "openai" };
 var agentSkillsProvider2 = { ...agentSkillsProvider, pluginId: "agent-skills" };
 var coreMarkdownProvider2 = { ...coreMarkdownProvider, pluginId: "core" };
 var annotationsExtractor2 = { ...annotationsExtractor, pluginId: "core" };
-var atDirectiveExtractor2 = { ...atDirectiveExtractor, pluginId: "core" };
 var externalUrlCounterExtractor2 = { ...externalUrlCounterExtractor, pluginId: "core" };
 var markdownLinkExtractor2 = { ...markdownLinkExtractor, pluginId: "core" };
-var slashExtractor2 = { ...slashExtractor, pluginId: "core" };
+var mcpToolsExtractor2 = { ...mcpToolsExtractor, pluginId: "core" };
 var toolsCountExtractor2 = { ...toolsCountExtractor, pluginId: "core" };
 var annotationOrphanAnalyzer2 = { ...annotationOrphanAnalyzer, pluginId: "core" };
 var annotationStaleAnalyzer2 = { ...annotationStaleAnalyzer, pluginId: "core" };
@@ -3371,7 +3535,9 @@ var builtInBundles = [
     granularity: "bundle",
     description: "Claude Code platform integration. Classifies files under `.claude/{agents,commands,skills}` and parses Claude-flavored frontmatter.",
     extensions: [
-      claudeProvider2
+      claudeProvider2,
+      atDirectiveExtractor2,
+      slashExtractor2
     ]
   },
   {
@@ -3382,6 +3548,14 @@ var builtInBundles = [
       geminiProvider2
     ]
   },
+  {
+    id: "openai",
+    granularity: "bundle",
+    description: "OpenAI Codex CLI platform integration. Classifies TOML sub-agent definitions under `.codex/agents/*.toml` and (future) walks the hierarchical AGENTS.md cascade. Provider for the active-lens `openai` runtime.",
+    extensions: [
+      openaiProvider2
+    ]
+  },
   {
     id: "agent-skills",
     granularity: "bundle",
@@ -3397,10 +3571,9 @@ var builtInBundles = [
     extensions: [
       coreMarkdownProvider2,
       annotationsExtractor2,
-      atDirectiveExtractor2,
       externalUrlCounterExtractor2,
       markdownLinkExtractor2,
-      slashExtractor2,
+      mcpToolsExtractor2,
       toolsCountExtractor2,
       annotationOrphanAnalyzer2,
       annotationStaleAnalyzer2,
@@ -3893,7 +4066,6 @@ var defaults_default = {
     watch: {
       debounceMs: 300
     },
-    extraFolders: [],
     referencePaths: []
   },
   plugins: {},
@@ -3919,7 +4091,6 @@ var defaults_default = {
 // kernel/config/loader.ts
 var PROJECT_LOCAL_ONLY_KEYS = /* @__PURE__ */ new Set([
   "allowEditSmFiles",
-  "scan.extraFolders",
   "scan.referencePaths"
 ]);
 var DEFAULTS = defaults_default;
@@ -4258,7 +4429,6 @@ function writeJsonAtomic(path, content) {
 
 // core/config/helper.ts
 var PRIVACY_SENSITIVE_KEYS = /* @__PURE__ */ new Set([
-  "scan.extraFolders",
   "scan.referencePaths"
 ]);
 var ProjectLocalOnlyKeyError = class extends Error {
@@ -4330,19 +4500,17 @@ var ConfigValidationError = class extends Error {
 function projectPathExposure(inputs) {
   const empty = { expandsSurface: false, exposedPaths: [] };
   if (!PRIVACY_SENSITIVE_KEYS.has(inputs.key)) return empty;
-  if (inputs.key === "scan.extraFolders" || inputs.key === "scan.referencePaths") {
-    if (!Array.isArray(inputs.value)) return empty;
-    const before = readConfigValue(inputs.key, {
-      cwd: inputs.cwd,
-      default: []
-    }) ?? [];
-    const beforeSet = new Set(before);
-    const added = inputs.value.filter((entry) => typeof entry === "string").filter((entry) => !beforeSet.has(entry));
-    const exposed = added.map((entry) => resolveScanPathForExposure(entry, inputs.cwd)).filter((abs) => abs !== null && !isUnderProject(abs, inputs.cwd));
-    if (exposed.length === 0) return empty;
-    return { expandsSurface: true, exposedPaths: exposed };
-  }
-  return empty;
+  if (inputs.key !== "scan.referencePaths") return empty;
+  if (!Array.isArray(inputs.value)) return empty;
+  const before = readConfigValue(inputs.key, {
+    cwd: inputs.cwd,
+    default: []
+  }) ?? [];
+  const beforeSet = new Set(before);
+  const added = inputs.value.filter((entry) => typeof entry === "string").filter((entry) => !beforeSet.has(entry));
+  const exposed = added.map((entry) => resolveScanPathForExposure(entry, inputs.cwd)).filter((abs) => abs !== null && !isUnderProject(abs, inputs.cwd));
+  if (exposed.length === 0) return empty;
+  return { expandsSurface: true, exposedPaths: exposed };
 }
 function resolveScanPathForExposure(raw, cwd) {
   if (raw.startsWith("~/")) return resolve6(join4(osHomedir(), raw.slice(2)));
@@ -4890,7 +5058,7 @@ var AsyncMutex = class {
       this.#locked = true;
       return;
     }
-    await new Promise((resolve37) => this.#waiters.push(resolve37));
+    await new Promise((resolve38) => this.#waiters.push(resolve38));
     this.#locked = true;
   }
   unlock() {
@@ -5950,11 +6118,6 @@ var LINK_KIND_VALUES = Object.freeze([
   "mentions",
   "supersedes"
 ]);
-var CONFIDENCE_VALUES = Object.freeze([
-  "high",
-  "medium",
-  "low"
-]);
 var SEVERITY_VALUES = Object.freeze([
   "error",
   "warn",
@@ -5986,7 +6149,7 @@ function isLinkKind(s) {
   return typeof s === "string" && LINK_KIND_VALUES.includes(s);
 }
 function isConfidence(s) {
-  return typeof s === "string" && CONFIDENCE_VALUES.includes(s);
+  return typeof s === "number" && Number.isFinite(s) && s >= 0 && s <= 1;
 }
 function isSeverity(s) {
   return typeof s === "string" && SEVERITY_VALUES.includes(s);
@@ -6000,7 +6163,7 @@ function parseLinkKind(s, ctx) {
 function parseConfidence(s, ctx) {
   if (isConfidence(s)) return s;
   throw new Error(
-    `Invalid Confidence value ${formatValue(s)} at ${ctx}. Allowed: ${CONFIDENCE_VALUES.join(" | ")}.`
+    `Invalid Confidence value ${formatValue(s)} at ${ctx}. Expected a finite number in [0..1].`
   );
 }
 function parseSeverity(s, ctx) {
@@ -8081,9 +8244,9 @@ function providerKindFailure(opts, status, fileName, errDescription) {
     }
   };
 }
-function isDirectorySafe(path, statSync12) {
+function isDirectorySafe(path, statSync13) {
   try {
-    return statSync12(path).isDirectory();
+    return statSync13(path).isDirectory();
   } catch {
     return false;
   }
@@ -8799,10 +8962,45 @@ var plainParser = {
   }
 };
 
+// plugins/core/parsers/toml/index.ts
+import { parse as parseToml } from "smol-toml";
+var tomlParser = {
+  id: "toml",
+  parse(raw, _path) {
+    let parsed = {};
+    const issues = [];
+    try {
+      const doc = parseToml(raw);
+      if (doc && typeof doc === "object" && !Array.isArray(doc)) {
+        parsed = stripPrototypePollution(doc);
+      }
+    } catch (err) {
+      issues.push({
+        code: "frontmatter-parse-error",
+        message: sanitiseParseErrorMessage2(err)
+      });
+    }
+    const out = {
+      frontmatterRaw: raw,
+      frontmatter: parsed,
+      body: ""
+    };
+    if (issues.length > 0) {
+      return { ...out, issues };
+    }
+    return out;
+  }
+};
+function sanitiseParseErrorMessage2(err) {
+  const raw = err instanceof Error ? err.message : String(err);
+  return raw.replace(/[-]+/g, " ").replace(/\s+/g, " ").trim();
+}
+
 // kernel/scan/parsers/index.ts
 var REGISTRY = /* @__PURE__ */ new Map([
   [frontmatterYamlParser.id, frontmatterYamlParser],
-  [plainParser.id, plainParser]
+  [plainParser.id, plainParser],
+  [tomlParser.id, tomlParser]
 ]);
 var FROZEN_IDS = new Set(REGISTRY.keys());
 function getParser(id) {
@@ -9474,6 +9672,42 @@ function relativeIfBelow(path, cwd) {
   return rel;
 }
 
+// cli/util/scan-zone-drop.ts
+import { DatabaseSync as DatabaseSync4 } from "node:sqlite";
+
+// cli/commands/db/shared.ts
+var SAFE_SQL_IDENTIFIER_RE = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
+function assertSafeIdentifier(name) {
+  if (!SAFE_SQL_IDENTIFIER_RE.test(name)) {
+    throw new Error(`refusing to operate on non-identifier table name: ${JSON.stringify(name)}`);
+  }
+}
+
+// cli/util/scan-zone-drop.ts
+function dropScanZone(dbPath) {
+  const db = new DatabaseSync4(dbPath);
+  try {
+    const rows = db.prepare(
+      "SELECT name FROM sqlite_master WHERE type='table' AND name LIKE 'scan\\_%' ESCAPE '\\'"
+    ).all();
+    for (const r of rows) assertSafeIdentifier(r.name);
+    if (rows.length === 0) {
+      return { tableCount: 0, droppedTables: [] };
+    }
+    db.exec("BEGIN");
+    for (const { name } of rows) {
+      db.exec(`DELETE FROM "${name}"`);
+    }
+    db.exec("COMMIT");
+    return {
+      tableCount: rows.length,
+      droppedTables: rows.map((r) => r.name)
+    };
+  } finally {
+    db.close();
+  }
+}
+
 // cli/i18n/config.texts.ts
 var CONFIG_TEXTS = {
   unknownKey: "{{glyph}}  Unknown config key: {{key}}\n",
@@ -9516,6 +9750,20 @@ var CONFIG_TEXTS = {
    * screen what they just opted into.
    */
   privacyGateConfirmed: '{{glyph}}  Opening disk access for "{{key}}":\n{{paths}}\n',
+  /**
+   * Confirmation printed after `sm config set activeProvider <id>`
+   * succeeds. The lens change atomically drops the scan_* zone (per
+   * `architecture.md` §Active Provider Lens) so the persisted graph
+   * never carries stale node / link rows from the previous lens. We
+   * surface what was cleared so the operator knows their state was
+   * touched and what to do next.
+   */
+  lensSwitchedCleared: "{{glyph}}  Lens switched. Cleared {{tableCount}} scan table(s): {{tableNames}}.\n   {{hint}}\n",
+  lensSwitchedClearedHint: "Run `sm scan` to repopulate the graph under the new lens.",
+  /** Same lens-switch announcement when the DB was empty (no rows to clear). */
+  lensSwitchedEmpty: "{{glyph}}  Lens switched. Scan zone was already empty.\n   {{hint}}\n",
+  /** Lens switch happened before any `sm scan` ran (no DB file on disk yet). */
+  lensSwitchedNoDb: "{{glyph}}  Lens switched. Run `sm scan` to populate the graph under the new lens.\n",
   // --- list verb (sectioned human renderer) ----------------------------
   /** Section heading: `  General`, `  Scan`, … rendered before its rows. */
   listSectionHeader: "  {{title}}\n",
@@ -9879,7 +10127,7 @@ var ConfigSetCommand = class extends SmCommand {
   key = Option4.String({ required: true });
   value = Option4.String({ required: true });
   yes = Option4.Boolean("--yes", false, {
-    description: "Confirm a privacy-sensitive write that opens disk access outside the project (scan.extraFolders / scan.referencePaths)."
+    description: "Confirm a privacy-sensitive write that opens disk access outside the project (scan.referencePaths)."
   });
   // CLI orchestrator: each branch is one validation gate (forbidden
   // segment / privacy guard / schema violation) or output dispatch.
@@ -9967,8 +10215,44 @@ var ConfigSetCommand = class extends SmCommand {
         )
       })
     );
+    if (this.key === "activeProvider") {
+      this.announceLensSwitch(ctx.cwd, ansi);
+    }
     return ExitCode.Ok;
   }
+  /**
+   * Side effect of `sm config set activeProvider <id>`, atomically
+   * drops the `scan_*` zone so the persisted graph never reflects the
+   * wrong lens (see `architecture.md` §Active Provider Lens). The drop
+   * is non-destructive of `state_*` / `config_*` rows; the operator
+   * runs `sm scan` next to repopulate.
+   *
+   * Silent when no DB file exists on disk yet (fresh project that has
+   * never run `sm scan`), the lens just gets set and the next scan
+   * uses it.
+   */
+  announceLensSwitch(cwd, ansi) {
+    const dbPath = resolveDbPath({ db: void 0, cwd });
+    const okGlyph = ansi.green("\u2713");
+    if (!existsSync14(dbPath)) {
+      this.printer.info(tx(CONFIG_TEXTS.lensSwitchedNoDb, { glyph: okGlyph }));
+      return;
+    }
+    const result = dropScanZone(dbPath);
+    const hint = ansi.dim(CONFIG_TEXTS.lensSwitchedClearedHint);
+    if (result.tableCount === 0) {
+      this.printer.info(tx(CONFIG_TEXTS.lensSwitchedEmpty, { glyph: okGlyph, hint }));
+      return;
+    }
+    this.printer.info(
+      tx(CONFIG_TEXTS.lensSwitchedCleared, {
+        glyph: okGlyph,
+        tableCount: result.tableCount,
+        tableNames: result.droppedTables.join(", "),
+        hint
+      })
+    );
+  }
 };
 var ConfigResetCommand = class extends SmCommand {
   static paths = [["config", "reset"]];
@@ -11006,18 +11290,8 @@ var DbRestoreCommand = class extends SmCommand {
 
 // cli/commands/db/reset.ts
 import { rm as rm2 } from "fs/promises";
-import { DatabaseSync as DatabaseSync4 } from "node:sqlite";
+import { DatabaseSync as DatabaseSync5 } from "node:sqlite";
 import { Command as Command8, Option as Option8 } from "clipanion";
-
-// cli/commands/db/shared.ts
-var SAFE_SQL_IDENTIFIER_RE = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
-function assertSafeIdentifier(name) {
-  if (!SAFE_SQL_IDENTIFIER_RE.test(name)) {
-    throw new Error(`refusing to operate on non-identifier table name: ${JSON.stringify(name)}`);
-  }
-}
-
-// cli/commands/db/reset.ts
 var DbResetCommand = class extends SmCommand {
   static paths = [["db", "reset"]];
   static usage = Command8.Usage({
@@ -11099,7 +11373,7 @@ var DbResetCommand = class extends SmCommand {
         return ExitCode.Error;
       }
     }
-    const db = new DatabaseSync4(path);
+    const db = new DatabaseSync5(path);
     try {
       const rows = db.prepare(
         "SELECT name FROM sqlite_master WHERE type='table' AND (name LIKE 'scan\\_%' ESCAPE '\\'" + (this.state ? " OR name LIKE 'state\\_%' ESCAPE '\\'" : "") + ")"
@@ -11242,7 +11516,7 @@ var DbBrowserCommand = class extends SmCommand {
 };
 
 // cli/commands/db/dump.ts
-import { DatabaseSync as DatabaseSync5 } from "node:sqlite";
+import { DatabaseSync as DatabaseSync6 } from "node:sqlite";
 import { Command as Command11, Option as Option10 } from "clipanion";
 var DbDumpCommand = class extends SmCommand {
   static paths = [["db", "dump"]];
@@ -11284,7 +11558,7 @@ var DbDumpCommand = class extends SmCommand {
   }
 };
 function dumpDatabaseToStream(dbPath, out, tables) {
-  const db = new DatabaseSync5(dbPath, { readOnly: true });
+  const db = new DatabaseSync6(dbPath, { readOnly: true });
   try {
     out.write("PRAGMA foreign_keys=OFF;\n");
     out.write("BEGIN TRANSACTION;\n");
@@ -12750,12 +13024,22 @@ var ORCHESTRATOR_TEXTS = {
   runScanRootMissing: "runScan: root path '{{root}}' does not exist or is not a directory"
 };
 
+// kernel/types.ts
+var ConfidenceTier = Object.freeze({
+  HIGH: 0.9,
+  MEDIUM: 0.6,
+  LOW: 0.3
+});
+
 // kernel/orchestrator/extractors.ts
 async function runExtractorsForNode(opts) {
   const internalLinks = [];
   const externalLinks = [];
   const enrichmentBuffer = /* @__PURE__ */ new Map();
   const contributions = [];
+  const signals = [];
+  const virtualNodes = [];
+  const virtualNodePaths = /* @__PURE__ */ new Set();
   const validators = loadSchemaValidators();
   for (const extractor of opts.extractors) {
     const qualifiedId2 = qualifiedExtensionId(extractor.pluginId, extractor.id);
@@ -12827,6 +13111,18 @@ async function runExtractorsForNode(opts) {
         emittedAt: Date.now()
       });
     };
+    const emitSignal = (signal) => {
+      const validated = validateSignal(extractor, signal, opts.emitter);
+      if (!validated) return;
+      signals.push(validated);
+    };
+    const emitNode = (emitted) => {
+      if (virtualNodePaths.has(emitted.path)) return;
+      const node = buildVirtualNode(extractor, emitted, opts.emitter);
+      if (!node) return;
+      virtualNodePaths.add(node.path);
+      virtualNodes.push(node);
+    };
     const store = opts.pluginStores?.get(extractor.pluginId);
     const ctx = buildExtractorContext(
       extractor,
@@ -12836,6 +13132,8 @@ async function runExtractorsForNode(opts) {
       emitLink,
       enrichNode,
       emitContribution,
+      emitSignal,
+      emitNode,
       store
     );
     await extractor.extract(ctx);
@@ -12844,7 +13142,9 @@ async function runExtractorsForNode(opts) {
     internalLinks,
     externalLinks,
     enrichments: Array.from(enrichmentBuffer.values()),
-    contributions
+    contributions,
+    signals,
+    virtualNodes
   };
 }
 function readDeclaredContributions(extension) {
@@ -12869,7 +13169,7 @@ function emitExtensionError(emitter, qualifiedId2, nodePath, data) {
     })
   );
 }
-function buildExtractorContext(extractor, node, body, frontmatter, emitLink, enrichNode, emitContribution, store) {
+function buildExtractorContext(extractor, node, body, frontmatter, emitLink, enrichNode, emitContribution, emitSignal, emitNode, store) {
   const scope = extractor.scope ?? "both";
   const settings = extractor.resolvedSettings ?? {};
   return {
@@ -12880,9 +13180,62 @@ function buildExtractorContext(extractor, node, body, frontmatter, emitLink, enr
     emitLink,
     enrichNode,
     emitContribution,
+    emitSignal,
+    emitNode,
     ...store !== void 0 ? { store } : {}
   };
 }
+var VIRTUAL_NODE_PLACEHOLDER_HASH = "0".repeat(64);
+function buildVirtualNode(extractor, emitted, emitter) {
+  const qualifiedId2 = qualifiedExtensionId(extractor.pluginId, extractor.id);
+  if (typeof emitted.path !== "string" || emitted.path.length === 0) {
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "virtual-node-missing-path",
+        extensionId: qualifiedId2,
+        message: `Extractor ${qualifiedId2} emitted a virtual node with no path; dropped.`
+      })
+    );
+    return null;
+  }
+  if (typeof emitted.kind !== "string" || emitted.kind.length === 0) {
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "virtual-node-missing-kind",
+        extensionId: qualifiedId2,
+        virtualPath: emitted.path,
+        message: `Extractor ${qualifiedId2} emitted a virtual node at '${emitted.path}' with no kind; dropped.`
+      })
+    );
+    return null;
+  }
+  if (!Array.isArray(emitted.derivedFrom) || emitted.derivedFrom.length === 0) {
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "virtual-node-missing-derived-from",
+        extensionId: qualifiedId2,
+        virtualPath: emitted.path,
+        message: `Extractor ${qualifiedId2} emitted a virtual node at '${emitted.path}' with empty derivedFrom; dropped.`
+      })
+    );
+    return null;
+  }
+  const node = {
+    path: emitted.path,
+    kind: emitted.kind,
+    provider: emitted.provider,
+    bodyHash: VIRTUAL_NODE_PLACEHOLDER_HASH,
+    frontmatterHash: VIRTUAL_NODE_PLACEHOLDER_HASH,
+    bytes: { frontmatter: 0, body: 0, total: 0 },
+    linksOutCount: 0,
+    linksInCount: 0,
+    externalRefsCount: 0,
+    virtual: true,
+    derivedFrom: [...emitted.derivedFrom]
+  };
+  if (emitted.frontmatter) node.frontmatter = emitted.frontmatter;
+  return node;
+}
 function validateLink(extractor, link2, emitter) {
   const knownKinds = ["invokes", "references", "mentions", "supersedes"];
   if (!knownKinds.includes(link2.kind)) {
@@ -12903,9 +13256,68 @@ function validateLink(extractor, link2, emitter) {
     );
     return null;
   }
-  const confidence = link2.confidence ?? "medium";
+  const c = link2.confidence;
+  if (c !== void 0 && (typeof c !== "number" || !Number.isFinite(c) || c < 0 || c > 1)) {
+    const qualifiedId2 = `${extractor.pluginId}/${extractor.id}`;
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "link-confidence-out-of-range",
+        extensionId: qualifiedId2,
+        confidence: c,
+        message: `Extractor ${qualifiedId2} emitted a Link with confidence ${String(c)} outside [0..1]; dropped.`
+      })
+    );
+    return null;
+  }
+  const confidence = c ?? ConfidenceTier.MEDIUM;
   return { ...link2, confidence };
 }
+var KNOWN_LINK_KINDS = ["invokes", "references", "mentions", "supersedes"];
+function validateSignal(extractor, signal, emitter) {
+  const qualifiedId2 = qualifiedExtensionId(extractor.pluginId, extractor.id);
+  if (!Array.isArray(signal.candidates) || signal.candidates.length === 0) {
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "signal-no-candidates",
+        extensionId: qualifiedId2,
+        signal: { source: signal.source, scope: signal.scope },
+        message: `Extractor ${qualifiedId2} emitted a Signal with no candidates; dropped.`
+      })
+    );
+    return null;
+  }
+  for (const candidate of signal.candidates) {
+    if (!isValidSignalCandidate(qualifiedId2, candidate, emitter)) return null;
+  }
+  return signal;
+}
+function isValidSignalCandidate(qualifiedId2, candidate, emitter) {
+  if (!KNOWN_LINK_KINDS.includes(candidate.kind)) {
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "signal-candidate-kind-not-declared",
+        extensionId: qualifiedId2,
+        candidateKind: candidate.kind,
+        declaredKinds: KNOWN_LINK_KINDS,
+        message: `Extractor ${qualifiedId2} emitted a Signal candidate with off-enum kind '${String(candidate.kind)}'; dropped.`
+      })
+    );
+    return false;
+  }
+  const c = candidate.confidence;
+  if (typeof c !== "number" || !Number.isFinite(c) || c < 0 || c > 1) {
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "signal-candidate-confidence-out-of-range",
+        extensionId: qualifiedId2,
+        confidence: candidate.confidence,
+        message: `Extractor ${qualifiedId2} emitted a Signal candidate with confidence ${String(c)} outside [0..1]; dropped.`
+      })
+    );
+    return false;
+  }
+  return true;
+}
 function dedupeLinks(links) {
   const out = /* @__PURE__ */ new Map();
   for (const link2 of links) {
@@ -12952,7 +13364,9 @@ function recomputeExternalRefsCount(nodes, externalLinks, cachedPaths) {
   }
 }
 var EXTERNAL_URL_SCHEME_RE = /^[a-z][a-z0-9+\-.]+:/i;
+var VIRTUAL_NODE_SCHEME_RE = /^mcp:\/\//i;
 function isExternalUrlLink(link2) {
+  if (VIRTUAL_NODE_SCHEME_RE.test(link2.target)) return false;
   return EXTERNAL_URL_SCHEME_RE.test(link2.target);
 }
 
@@ -13111,13 +13525,9 @@ function originatingNodeOf(link2, priorNodePaths) {
 }
 function computeCacheDecision(opts) {
   const applicableExtractors = opts.extractors.filter((ex) => {
-    const kinds = ex.precondition?.kind;
-    if (!kinds || kinds.length === 0) return true;
-    return kinds.some((qualified) => {
-      const slashIdx = qualified.indexOf("/");
-      const kindOnly = slashIdx === -1 ? qualified : qualified.slice(slashIdx + 1);
-      return kindOnly === opts.kind;
-    });
+    if (!matchesKindPrecondition(ex, opts.kind)) return false;
+    if (!matchesProviderPrecondition(ex, opts.provider)) return false;
+    return true;
   });
   const applicableQualifiedIds = new Set(
     applicableExtractors.map((ex) => qualifiedExtensionId(ex.pluginId, ex.id))
@@ -13131,6 +13541,20 @@ function computeCacheDecision(opts) {
     fullCacheHit: opts.nodeHashCacheEligible && split.missingExtractors.length === 0
   };
 }
+function matchesKindPrecondition(ex, kind) {
+  const kinds = ex.precondition?.kind;
+  if (!kinds || kinds.length === 0) return true;
+  return kinds.some((qualified) => {
+    const slashIdx = qualified.indexOf("/");
+    const kindOnly = slashIdx === -1 ? qualified : qualified.slice(slashIdx + 1);
+    return kindOnly === kind;
+  });
+}
+function matchesProviderPrecondition(ex, provider) {
+  const providers = ex.precondition?.provider;
+  if (!providers || providers.length === 0) return true;
+  return providers.includes(provider);
+}
 function splitLegacy(applicableExtractors, applicableQualifiedIds, nodeHashCacheEligible) {
   const cachedQualifiedIds = /* @__PURE__ */ new Set();
   const missingExtractors = [];
@@ -13240,7 +13664,7 @@ function findHighConfidenceRenames(opts) {
       if (opts.claimedNew.has(toPath)) continue;
       const toNode = opts.currentByPath.get(toPath);
       if (toNode.bodyHash === fromNode.bodyHash) {
-        ops.push({ from: fromPath, to: toPath, confidence: "high" });
+        ops.push({ from: fromPath, to: toPath, confidence: ConfidenceTier.HIGH });
         opts.claimedDeleted.add(fromPath);
         opts.claimedNew.add(toPath);
         break;
@@ -13275,13 +13699,13 @@ function claimSingletonRenames(opts) {
     const remaining = candidates.filter((p) => !opts.claimedDeleted.has(p));
     if (remaining.length === 1) {
       const fromPath = remaining[0];
-      ops.push({ from: fromPath, to: toPath, confidence: "medium" });
+      ops.push({ from: fromPath, to: toPath, confidence: ConfidenceTier.MEDIUM });
       opts.issues.push({
         analyzerId: "auto-rename-medium",
         severity: "warn",
         nodeIds: [toPath],
         message: `Auto-rename (medium confidence): ${fromPath} \u2192 ${toPath}`,
-        data: { from: fromPath, to: toPath, confidence: "medium" }
+        data: { from: fromPath, to: toPath, confidence: ConfidenceTier.MEDIUM }
       });
       opts.claimedDeleted.add(fromPath);
       opts.claimedNew.add(toPath);
@@ -13719,6 +14143,7 @@ async function processRawNode(raw, provider, wctx, accum, claimedPaths, nextInde
   const cacheDecision = computeCacheDecision({
     extractors: wctx.opts.extractors,
     kind,
+    provider: provider.id,
     nodePath: raw.path,
     bodyHash,
     sidecarAnnotationsHash,
@@ -13821,6 +14246,10 @@ function mergeExtractResult(extractResult, accum) {
     accum.enrichmentBuffer.set(`${enr.nodePath}\0${enr.extractorId}`, enr);
   }
   for (const c of extractResult.contributions) accum.contributionsBuffer.push(c);
+  for (const vn of extractResult.virtualNodes) {
+    if (accum.nodes.some((n) => n.path === vn.path)) continue;
+    accum.nodes.push(vn);
+  }
 }
 function isPartialCacheHit(ctx) {
   return ctx.nodeHashCacheEligible && ctx.cacheDecision.cachedQualifiedIds.size > 0 && ctx.priorNode !== void 0;
@@ -14345,13 +14774,7 @@ var SCAN_RUNNER_TEXTS = {
    * DB-resident prior `ScanResult` fails `scan-result.schema.json`
    * validation.
    */
-  priorSchemaValidationFailed: "prior scan-result loaded from DB failed schema validation: {{errors}}. Run `sm db backup` then re-scan without --strict to rebuild from disk.",
-  /**
-   * Honest disclosure when the scan surface expanded beyond the cwd
-   * via `scan.extraFolders`. The list of paths makes it obvious which
-   * extra folders the operator just opted into.
-   */
-  includingExtraFoldersAdvisory: "Including extra folders: {{paths}}",
+  priorSchemaValidationFailed: "prior scan-result loaded from DB failed schema validation: {{errors}}. Run `sm db backup` then re-scan without --strict to rebuild from disk.",
   /**
    * Reference-paths walker hit `REFERENCE_WALK_MAX_FILES` and stopped
    * early. The set may be incomplete for link validation; `core/broken-ref`
@@ -14366,6 +14789,14 @@ var SCAN_RUNNER_TEXTS = {
   referenceWalkMissingRoot: 'scan.referencePaths: configured path "{{path}}" does not exist; skipped.'
 };
 
+// core/runtime/scan-roots.ts
+function resolveScanRoots(inputs) {
+  if (inputs.positionalRoots.length > 0) {
+    return inputs.positionalRoots.slice();
+  }
+  return ["."];
+}
+
 // core/runtime/reference-paths-walker.ts
 import { readdirSync as readdirSync9, statSync as statSync9 } from "fs";
 import { homedir as osHomedir2 } from "os";
@@ -14427,26 +14858,6 @@ function safeStat(path) {
   }
 }
 
-// core/runtime/scan-roots.ts
-function resolveScanRoots(inputs) {
-  if (inputs.positionalRoots.length > 0) {
-    return {
-      roots: inputs.positionalRoots.slice(),
-      fromExtra: []
-    };
-  }
-  const cwdRoot = ".";
-  const extra = inputs.extraFolders.map((r) => resolveScanPath(r, inputs.cwd));
-  const seen = /* @__PURE__ */ new Set();
-  const out = [cwdRoot];
-  for (const root of extra) {
-    if (seen.has(root)) continue;
-    seen.add(root);
-    out.push(root);
-  }
-  return { roots: out, fromExtra: extra };
-}
-
 // core/runtime/scan-runner.ts
 async function runScanForCommand(opts) {
   const ctx = opts.ctx ?? defaultRuntimeContext();
@@ -14464,13 +14875,7 @@ async function runScanForCommand(opts) {
   const strict = opts.strict || cfg.scan.strict === true;
   let effectiveRoots;
   try {
-    const resolution = resolveScanRoots({
-      positionalRoots: opts.roots,
-      cwd: ctx.cwd,
-      extraFolders: cfg.scan.extraFolders
-    });
-    effectiveRoots = resolution.roots;
-    emitRootsAdvisory(resolution.fromExtra, opts);
+    effectiveRoots = resolveScanRoots({ positionalRoots: opts.roots });
   } catch (err) {
     return { kind: "config-error", message: formatErrorMessage(err) };
   }
@@ -14495,12 +14900,6 @@ async function runScanForCommand(opts) {
   const willPersist = !opts.noBuiltIns && !opts.dryRun;
   return willPersist ? runPersistPath(opts, dbPath, jobsDir, strict, loadPrior, runScanWith, extensions) : runEphemeralPath(opts, dbPath, strict, loadPrior, runScanWith);
 }
-function emitRootsAdvisory(fromExtra, opts) {
-  if (fromExtra.length === 0) return;
-  opts.printer.info(
-    tx(SCAN_RUNNER_TEXTS.includingExtraFoldersAdvisory, { paths: fromExtra.join(", ") }) + "\n"
-  );
-}
 function emitReferenceWalkAdvisory(walk2, opts) {
   if (walk2.truncated) {
     opts.printer.warn(SCAN_RUNNER_TEXTS.referenceWalkTruncated);
@@ -18518,6 +18917,13 @@ function createWatcherRuntime(opts) {
         strict,
         emitter
       };
+      if (cfg.scan.referencePaths.length > 0) {
+        const walk2 = walkReferencePaths(cfg.scan.referencePaths, cwd);
+        if (walk2.paths.size > 0) {
+          runOptions.referenceablePaths = walk2.paths;
+          runOptions.cwd = cwd;
+        }
+      }
       if (composed) runOptions.extensions = composed;
       if (priorState) {
         runOptions.priorSnapshot = priorState.snapshot;
@@ -18952,12 +19358,11 @@ var ScanCommand = class extends SmCommand {
       the prior snapshot from the DB, reuse unchanged nodes, and only
       reprocess new / modified files.
 
-      Scans honour scan.extraFolders (append extra dirs verbatim, the
-      only way to extend the scan beyond cwd) and scan.referencePaths
-      (walk the configured dirs for link-validation only; files there
-      are not indexed). Both are
+      Scans honour scan.referencePaths (walk the configured dirs for
+      link-validation only; files there are not indexed). The key is
       privacy-sensitive; see "sm config set --help" for the --yes
-      gate.
+      gate. To extend the indexed scan beyond cwd, pass extra roots
+      positionally.
     `,
     examples: [
       ["Scan the current directory", "$0 scan"],
@@ -19418,7 +19823,7 @@ function renderDeltaIssues(issues) {
 
 // cli/commands/serve.ts
 import { spawn as spawn2 } from "child_process";
-import { existsSync as existsSync27 } from "fs";
+import { existsSync as existsSync30 } from "fs";
 import { Command as Command33, Option as Option31 } from "clipanion";
 
 // cli/util/browser-launch.ts
@@ -19440,7 +19845,7 @@ import { WebSocketServer } from "ws";
 // server/app.ts
 import { Hono } from "hono";
 import { bodyLimit } from "hono/body-limit";
-import { HTTPException as HTTPException13 } from "hono/http-exception";
+import { HTTPException as HTTPException15 } from "hono/http-exception";
 
 // core/config/service.ts
 var ConfigService = class {
@@ -19682,13 +20087,60 @@ var SERVER_TEXTS = {
   // silently widen the scan surface.
   projectPrefsBodyNotJson: "Request body must be valid JSON.",
   projectPrefsBodyNotObject: "Request body must be a JSON object.",
-  projectPrefsBodyEmpty: "Request body must contain a `scan` block with at least one of `extraFolders`, `referencePaths`.",
+  projectPrefsBodyEmpty: "Request body must contain a `scan` block with `referencePaths`.",
   projectPrefsConfirmNotBoolean: "`confirm` must be a boolean.",
-  projectPrefsScanNotObject: '`scan` must be an object (e.g. `{"scan": {"extraFolders": ["~/.claude/agents"]}}`).',
+  projectPrefsScanNotObject: '`scan` must be an object (e.g. `{"scan": {"referencePaths": ["~/Documents"]}}`).',
   projectPrefsListNotArray: "`{{key}}` must be an array of strings.",
   projectPrefsListEntryNotString: "`{{key}}` entries must be strings.",
   projectPrefsConfirmRequired: "This change opens disk access outside the project: {{paths}}. Re-issue the request with `confirm: true` to proceed.",
   projectPrefsPersistFailed: "Could not persist `{{key}}`: {{message}}",
+  // Returned for every NEW entry that does not resolve to an existing
+  // directory on disk. The list is comma-separated; pre-existing
+  // entries are not re-validated.
+  projectPrefsPathNotFound: "These folders do not exist on disk: {{paths}}. Add only paths that already exist.",
+  // AJV `pattern` violation, an entry contains a comma. The UI rejects
+  // comma input client-side; this message is the server-side safety
+  // net (defense in depth).
+  projectPrefsEntryHasComma: "Folder entries must not contain commas. Add one folder per entry.",
+  // Server-stderr advisories emitted by `PATCH /api/project-preferences`
+  // after a successful write. The operator running `sm serve` sees
+  // each add / remove on the console without opening the config file.
+  // `{{detail}}` is composed in JS (see `formatPathDetail`) so the
+  // single template covers all three path shapes (home / relative /
+  // absolute) without a template explosion.
+  projectPrefsPathAdded: "project-prefs: + {{key}} {{detail}}",
+  projectPrefsPathRemoved: "project-prefs: - {{key}} {{detail}}",
+  // `PATCH /api/project-preferences` mutated `scan.*` and the
+  // post-write `watcherService.restart()` call threw. The on-disk
+  // write itself succeeded; the operator sees this advisory and
+  // restarts the server to pick up the new root list manually.
+  projectPrefsWatcherRestartFailed: "project-prefs: watcher restart after scan-config write failed ({{message}}). Restart `sm serve` to pick up the new roots.",
+  // ---- project-ignore route (routes/project-ignore.ts) -------------------
+  //
+  // GET / PATCH /api/project-ignore. Backing is the project-root
+  // `.skillmapignore` file (gitignore-syntax). Comments and blank
+  // lines are preserved on write; only the active pattern list is
+  // exchanged over the wire. No privacy gate, the patterns narrow the
+  // scan surface and never widen disk access.
+  projectIgnoreBodyNotJson: "Request body must be valid JSON.",
+  projectIgnoreBodyNotObject: "Request body must be a JSON object.",
+  projectIgnoreBodyEmpty: "Request body must contain a `patterns` array.",
+  projectIgnoreListNotArray: "`patterns` must be an array of strings.",
+  projectIgnoreEntryNotString: "`patterns` entries must be strings.",
+  // AJV `minLength: 1` on each pattern after the route trims server-side;
+  // surfaces when the operator sends `"   "` or an empty string.
+  projectIgnorePatternEmpty: "Pattern entries must not be empty or whitespace-only.",
+  // AJV `pattern` violation: a single pattern carried a newline,
+  // carriage return, or other ASCII control character. The UI rejects
+  // these client-side; this message is the server-side safety net.
+  projectIgnorePatternHasControlChar: "Pattern entries must be a single line without control characters.",
+  // Duplicate detection runs after trim; the UI rejects duplicates
+  // client-side, this is the server-side safety net.
+  projectIgnorePatternDuplicate: 'Duplicate pattern: "{{pattern}}". Each pattern must be unique.',
+  projectIgnorePersistFailed: "Could not persist `.skillmapignore`: {{message}}",
+  projectIgnorePatternAdded: "project-ignore: + {{pattern}}",
+  projectIgnorePatternRemoved: "project-ignore: - {{pattern}}",
+  projectIgnoreWatcherRestartFailed: "project-ignore: watcher restart after `.skillmapignore` write failed ({{message}}). Restart `sm serve` to pick up the new filter.",
   // A connected client's outbound buffer exceeded the backpressure
   // threshold. The broadcaster closes the client with code 1009 and
   // unregisters it. Logged so operators can spot a wedged consumer.
@@ -19701,7 +20153,20 @@ var SERVER_TEXTS = {
   // is a synthetic `emitter.error` event; v14.4.a does not yet route
   // it through the broadcaster (would re-enter the same stringify
   // path), so we degrade to a logged warning.
-  wsBroadcastSerializeFailed: "skill-map server: ws broadcast dropped, failed to serialize event: {{message}}.\n"
+  wsBroadcastSerializeFailed: "skill-map server: ws broadcast dropped, failed to serialize event: {{message}}.\n",
+  // ---- active-provider route (routes/active-provider.ts) -----------
+  //
+  // GET / PUT /api/active-provider. The active provider lens selects
+  // which provider's extractors / classifiers / resolution rules apply
+  // to the whole project (see `architecture.md` §Active Provider Lens).
+  // Changing the lens drops the `scan_*` zone atomically and prompts
+  // the user to re-scan; `state_*` and `config_*` survive.
+  activeProviderBodyNotJson: "Request body must be valid JSON.",
+  activeProviderBodyNotObject: "Request body must be a JSON object.",
+  activeProviderBodyMissing: "Request body must include `activeProvider` (a non-empty string).",
+  activeProviderValueNotString: "`activeProvider` must be a string.",
+  activeProviderValueEmpty: "`activeProvider` cannot be the empty string. Send the id of an enabled provider.",
+  activeProviderPersistFailed: "Could not persist activeProvider: {{message}}"
 };
 
 // server/loopback-gate.ts
@@ -20588,11 +21053,6 @@ function registerPluginsRoute(app, deps) {
         message: tx(SERVER_TEXTS.pluginsUnknown, { id: bundleId })
       });
     }
-    if (granularityOf(handle) !== "extension") {
-      throw new HTTPException8(400, {
-        message: tx(SERVER_TEXTS.pluginsGranularityBundleExpected, { id: bundleId })
-      });
-    }
     if (!hasExtension(handle, extensionId)) {
       throw new HTTPException8(404, {
         message: tx(SERVER_TEXTS.pluginsExtensionUnknown, { bundleId, extensionId })
@@ -20633,7 +21093,7 @@ function buildBuiltInItems(resolveEnabled) {
   return builtInBundles.map((bundle) => {
     const bundleEnabled = resolveEnabled(bundle.id);
     const bundleLocked = isPluginLocked(bundle.id);
-    const extensions = bundle.granularity === "extension" ? bundle.extensions.map((ext) => {
+    const extensions = bundle.extensions.map((ext) => {
       const qualified = qualifiedExtensionId(bundle.id, ext.id);
       const extLocked = bundleLocked || isPluginLocked(qualified);
       return {
@@ -20644,7 +21104,7 @@ function buildBuiltInItems(resolveEnabled) {
         ...ext.description ? { description: ext.description } : {},
         ...extLocked ? { locked: true } : {}
       };
-    }) : void 0;
+    });
     return {
       id: bundle.id,
       version: firstVersion(bundle.extensions),
@@ -20654,7 +21114,7 @@ function buildBuiltInItems(resolveEnabled) {
       source: "built-in",
       granularity: bundle.granularity,
       description: bundle.description,
-      ...extensions ? { extensions } : {},
+      ...extensions.length > 0 ? { extensions } : {},
       ...bundleLocked ? { locked: true } : {}
     };
   });
@@ -20687,8 +21147,8 @@ function optionalDiscoveredFields(plugin, extensions) {
   if (extensions) out.extensions = extensions;
   return out;
 }
-function projectExtensionRows(plugin, granularity, resolveEnabled, bundleLocked) {
-  if (granularity !== "extension" || !plugin.extensions) return void 0;
+function projectExtensionRows(plugin, _granularity, resolveEnabled, bundleLocked) {
+  if (!plugin.extensions || plugin.extensions.length === 0) return void 0;
   return plugin.extensions.map((ext) => {
     const description = readInstanceDescription(ext.instance);
     const qualified = qualifiedExtensionId(plugin.id, ext.id);
@@ -20805,13 +21265,6 @@ function validateBulkChange(change, deps) {
       message: tx(SERVER_TEXTS.pluginsUnknown, { id: bundleId })
     };
   }
-  if (granularityOf(handle) !== "extension") {
-    return {
-      status: 400,
-      code: "bad-query",
-      message: tx(SERVER_TEXTS.pluginsGranularityBundleExpected, { id: bundleId })
-    };
-  }
   if (!hasExtension(handle, extensionId)) {
     return {
       status: 404,
@@ -20922,26 +21375,203 @@ var parsePatchBody2 = makeBodyValidator(PATCH_BODY_SCHEMA, {
   }
 });
 
-// server/routes/project-preferences.ts
+// server/routes/project-ignore.ts
 import { HTTPException as HTTPException10 } from "hono/http-exception";
-function registerProjectPreferencesRoute(app, deps) {
-  app.get("/api/project-preferences", (c) => {
+
+// server/util/skillmapignore-io.ts
+import { existsSync as existsSync25, readFileSync as readFileSync19, writeFileSync as writeFileSync4 } from "fs";
+import { resolve as resolve33 } from "path";
+var IGNORE_FILENAME2 = ".skillmapignore";
+function readPatterns(cwd) {
+  const path = resolve33(cwd, IGNORE_FILENAME2);
+  if (!existsSync25(path)) return [];
+  let raw;
+  try {
+    raw = readFileSync19(path, "utf8");
+  } catch {
+    return [];
+  }
+  return raw.split(/\r?\n/).map((l) => l.trim()).filter((l) => l.length > 0 && !l.startsWith("#"));
+}
+function writePatterns(cwd, nextPatterns) {
+  const path = resolve33(cwd, IGNORE_FILENAME2);
+  const prior = existsSync25(path) ? safeRead(path) : "";
+  const content = buildContent(prior, nextPatterns);
+  writeFileSync4(path, content, "utf8");
+}
+function safeRead(path) {
+  try {
+    return readFileSync19(path, "utf8");
+  } catch {
+    return "";
+  }
+}
+function buildContent(prior, nextPatterns) {
+  const wanted = new Set(nextPatterns);
+  const kept = /* @__PURE__ */ new Set();
+  const outLines = [];
+  for (const line of splitLines(prior)) {
+    pushPriorLine(line, wanted, kept, outLines);
+  }
+  appendNewPatterns(nextPatterns, kept, outLines);
+  return outLines.length === 0 ? "" : outLines.join("\n") + "\n";
+}
+function splitLines(prior) {
+  if (prior.length === 0) return [];
+  const lines = prior.split(/\r?\n/);
+  if (lines[lines.length - 1] === "") lines.pop();
+  return lines;
+}
+function pushPriorLine(line, wanted, kept, outLines) {
+  const trimmed = line.trim();
+  if (trimmed.length === 0 || trimmed.startsWith("#")) {
+    outLines.push(line);
+    return;
+  }
+  if (wanted.has(trimmed)) {
+    outLines.push(trimmed);
+    kept.add(trimmed);
+  }
+}
+function appendNewPatterns(nextPatterns, kept, outLines) {
+  for (const p of nextPatterns) {
+    if (kept.has(p)) continue;
+    outLines.push(p);
+    kept.add(p);
+  }
+}
+
+// server/routes/project-ignore.ts
+function registerProjectIgnoreRoute(app, deps) {
+  app.get("/api/project-ignore", (c) => {
     return c.json(buildEnvelope2(deps));
   });
-  app.patch("/api/project-preferences", async (c) => {
+  app.patch("/api/project-ignore", async (c) => {
     const body = await parsePatchBody3(c.req.raw);
-    applyPatch2(deps, body);
+    await applyPatch2(deps, body);
     return c.json(buildEnvelope2(deps));
   });
 }
 function buildEnvelope2(deps) {
+  const cwd = deps.runtimeContext.cwd;
+  return { patterns: readPatterns(cwd) };
+}
+async function applyPatch2(deps, body) {
+  const cwd = deps.runtimeContext.cwd;
+  const trimmed = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const raw of body.patterns) {
+    const t = raw.trim();
+    if (t.length === 0) {
+      throw new HTTPException10(400, {
+        message: SERVER_TEXTS.projectIgnorePatternEmpty
+      });
+    }
+    if (seen.has(t)) {
+      throw new HTTPException10(400, {
+        message: tx(SERVER_TEXTS.projectIgnorePatternDuplicate, { pattern: t })
+      });
+    }
+    seen.add(t);
+    trimmed.push(t);
+  }
+  const before = readPatterns(cwd);
+  try {
+    writePatterns(cwd, trimmed);
+  } catch (err) {
+    throw new HTTPException10(400, {
+      message: tx(SERVER_TEXTS.projectIgnorePersistFailed, {
+        message: formatErrorMessage(err)
+      })
+    });
+  }
+  logPatternChanges(before, trimmed);
+  if (arrayChanged(before, trimmed)) await maybeRestartWatcher(deps);
+}
+function arrayChanged(before, next) {
+  if (before.length !== next.length) return true;
+  const beforeSet = new Set(before);
+  for (const p of next) {
+    if (!beforeSet.has(p)) return true;
+  }
+  return false;
+}
+function logPatternChanges(before, next) {
+  const beforeSet = new Set(before);
+  const nextSet = new Set(next);
+  for (const p of next) {
+    if (beforeSet.has(p)) continue;
+    log.warn(
+      tx(SERVER_TEXTS.projectIgnorePatternAdded, {
+        pattern: sanitizeForTerminal(p)
+      })
+    );
+  }
+  for (const p of before) {
+    if (nextSet.has(p)) continue;
+    log.warn(
+      tx(SERVER_TEXTS.projectIgnorePatternRemoved, {
+        pattern: sanitizeForTerminal(p)
+      })
+    );
+  }
+}
+async function maybeRestartWatcher(deps) {
+  const watcher = deps.watcherHolder.current;
+  if (!watcher) return;
+  try {
+    await watcher.restart();
+  } catch (err) {
+    log.warn(
+      tx(SERVER_TEXTS.projectIgnoreWatcherRestartFailed, {
+        message: formatErrorMessage(err)
+      })
+    );
+  }
+}
+var PATCH_BODY_SCHEMA2 = {
+  type: "object",
+  additionalProperties: false,
+  required: ["patterns"],
+  properties: {
+    patterns: {
+      type: "array",
+      items: {
+        type: "string",
+        pattern: "^[^\\n\\r\\x00-\\x1F\\x7F]+$"
+      }
+    }
+  }
+};
+var parsePatchBody3 = makeBodyValidator(PATCH_BODY_SCHEMA2, {
+  notJson: SERVER_TEXTS.projectIgnoreBodyNotJson,
+  notObject: SERVER_TEXTS.projectIgnoreBodyNotObject,
+  invalid: SERVER_TEXTS.projectIgnoreBodyEmpty,
+  mapping: {
+    "/patterns:required": SERVER_TEXTS.projectIgnoreBodyEmpty,
+    "/patterns:type:array": SERVER_TEXTS.projectIgnoreListNotArray,
+    "/patterns/*:type:string": SERVER_TEXTS.projectIgnoreEntryNotString,
+    "/patterns/*:pattern": SERVER_TEXTS.projectIgnorePatternHasControlChar
+  }
+});
+
+// server/routes/project-preferences.ts
+import { statSync as statSync10 } from "fs";
+import { HTTPException as HTTPException11 } from "hono/http-exception";
+function registerProjectPreferencesRoute(app, deps) {
+  app.get("/api/project-preferences", (c) => {
+    return c.json(buildEnvelope3(deps));
+  });
+  app.patch("/api/project-preferences", async (c) => {
+    const body = await parsePatchBody4(c.req.raw);
+    await applyPatch3(deps, body);
+    return c.json(buildEnvelope3(deps));
+  });
+}
+function buildEnvelope3(deps) {
   const cwd = deps.runtimeContext.cwd;
   return {
     scan: {
-      extraFolders: readConfigValue("scan.extraFolders", {
-        cwd,
-        default: []
-      }) ?? [],
       referencePaths: readConfigValue("scan.referencePaths", {
         cwd,
         default: []
@@ -20949,46 +21579,138 @@ function buildEnvelope2(deps) {
     }
   };
 }
-function applyPatch2(deps, body) {
+async function applyPatch3(deps, body) {
   const writes = collectWrites(body);
   if (writes.length === 0) return;
   const cwd = deps.runtimeContext.cwd;
+  const missingPaths = collectMissingPaths(writes, cwd);
+  if (missingPaths.length > 0) {
+    throw new HTTPException11(400, {
+      message: tx(SERVER_TEXTS.projectPrefsPathNotFound, {
+        paths: missingPaths.join(", ")
+      })
+    });
+  }
   const exposures = writes.map((w) => projectPathExposure({ key: w.key, value: w.value, cwd })).filter((e) => e.expandsSurface);
   if (exposures.length > 0 && body.confirm !== true) {
     const exposed = exposures.flatMap((e) => e.exposedPaths);
-    throw new HTTPException10(412, {
+    throw new HTTPException11(412, {
       message: tx(SERVER_TEXTS.projectPrefsConfirmRequired, {
         paths: exposed.join(", ")
       })
     });
   }
+  let scanSurfaceMutated = false;
   for (const w of writes) {
-    try {
-      writeConfigValue(w.key, w.value, { target: "project-local", cwd });
-    } catch (err) {
-      const status = err instanceof ConfigValidationError ? 400 : 400;
-      throw new HTTPException10(status, {
-        message: tx(SERVER_TEXTS.projectPrefsPersistFailed, {
-          key: w.key,
-          message: formatErrorMessage(err)
-        })
-      });
-    }
+    if (runWrite(w, cwd)) scanSurfaceMutated = true;
   }
+  if (scanSurfaceMutated) await maybeRestartWatcher2(deps);
   deps.configService.reload();
 }
 function collectWrites(body) {
   if (!body.scan) return [];
   const out = [];
-  if (Array.isArray(body.scan.extraFolders)) {
-    out.push({ key: "scan.extraFolders", value: body.scan.extraFolders });
-  }
   if (Array.isArray(body.scan.referencePaths)) {
     out.push({ key: "scan.referencePaths", value: body.scan.referencePaths });
   }
   return out;
 }
-var PATCH_BODY_SCHEMA2 = {
+function collectMissingPaths(writes, cwd) {
+  const missing = [];
+  for (const w of writes) {
+    if (!Array.isArray(w.value)) continue;
+    const current = readConfigValue(w.key, { cwd, default: [] }) ?? [];
+    const currentSet = new Set(current);
+    for (const entry of w.value) {
+      if (currentSet.has(entry)) continue;
+      if (!isExistingDirectory(entry, cwd)) missing.push(entry);
+    }
+  }
+  return missing;
+}
+async function maybeRestartWatcher2(deps) {
+  const watcher = deps.watcherHolder.current;
+  if (!watcher) return;
+  try {
+    await watcher.restart();
+  } catch (err) {
+    log.warn(
+      tx(SERVER_TEXTS.projectPrefsWatcherRestartFailed, {
+        message: formatErrorMessage(err)
+      })
+    );
+  }
+}
+function runWrite(w, cwd) {
+  const before = readConfigValue(w.key, { cwd, default: [] }) ?? [];
+  try {
+    writeConfigValue(w.key, w.value, { target: "project-local", cwd });
+  } catch (err) {
+    throw new HTTPException11(400, {
+      message: tx(SERVER_TEXTS.projectPrefsPersistFailed, {
+        key: w.key,
+        message: formatErrorMessage(err)
+      })
+    });
+  }
+  logPathChanges(w.key, before, w.value, cwd);
+  return arrayChanged2(before, w.value);
+}
+function arrayChanged2(before, nextValue) {
+  if (!Array.isArray(nextValue)) return false;
+  const next = nextValue;
+  if (before.length !== next.length) return true;
+  const beforeSet = new Set(before);
+  for (const p of next) {
+    if (!beforeSet.has(p)) return true;
+  }
+  return false;
+}
+function logPathChanges(key, before, nextValue, cwd) {
+  if (!Array.isArray(nextValue)) return;
+  const next = nextValue;
+  const beforeSet = new Set(before);
+  const nextSet = new Set(next);
+  for (const path of next) {
+    if (beforeSet.has(path)) continue;
+    log.warn(
+      tx(SERVER_TEXTS.projectPrefsPathAdded, {
+        key,
+        detail: formatPathDetail(path, cwd)
+      })
+    );
+  }
+  for (const path of before) {
+    if (nextSet.has(path)) continue;
+    log.warn(
+      tx(SERVER_TEXTS.projectPrefsPathRemoved, {
+        key,
+        detail: formatPathDetail(path, cwd)
+      })
+    );
+  }
+}
+function formatPathDetail(path, cwd) {
+  const safePath = sanitizeForTerminal(path);
+  if (path.startsWith("~/") || path === "~") {
+    const abs2 = sanitizeForTerminal(resolveScanPath(path, cwd));
+    return `${safePath} (home) \u2192 ${abs2}`;
+  }
+  if (path.startsWith("/")) {
+    return `${safePath} (absolute)`;
+  }
+  const abs = sanitizeForTerminal(resolveScanPath(path, cwd));
+  return `${safePath} (relative) \u2192 ${abs}`;
+}
+function isExistingDirectory(entry, cwd) {
+  const abs = resolveScanPath(entry, cwd);
+  try {
+    return statSync10(abs).isDirectory();
+  } catch {
+    return false;
+  }
+}
+var PATCH_BODY_SCHEMA3 = {
   type: "object",
   additionalProperties: false,
   required: ["scan"],
@@ -20999,13 +21721,15 @@ var PATCH_BODY_SCHEMA2 = {
       additionalProperties: false,
       minProperties: 1,
       properties: {
-        extraFolders: { type: "array", items: { type: "string" } },
-        referencePaths: { type: "array", items: { type: "string" } }
+        referencePaths: {
+          type: "array",
+          items: { type: "string", pattern: "^[^,]+$" }
+        }
       }
     }
   }
 };
-var parsePatchBody3 = makeBodyValidator(PATCH_BODY_SCHEMA2, {
+var parsePatchBody4 = makeBodyValidator(PATCH_BODY_SCHEMA3, {
   notJson: SERVER_TEXTS.projectPrefsBodyNotJson,
   notObject: SERVER_TEXTS.projectPrefsBodyNotObject,
   invalid: SERVER_TEXTS.projectPrefsBodyEmpty,
@@ -21014,15 +21738,111 @@ var parsePatchBody3 = makeBodyValidator(PATCH_BODY_SCHEMA2, {
     "/scan:minProperties": SERVER_TEXTS.projectPrefsBodyEmpty,
     "/scan:type:object": SERVER_TEXTS.projectPrefsScanNotObject,
     "/confirm:type:boolean": SERVER_TEXTS.projectPrefsConfirmNotBoolean,
-    "/scan/extraFolders:type:array": tx(SERVER_TEXTS.projectPrefsListNotArray, { key: "scan.extraFolders" }),
     "/scan/referencePaths:type:array": tx(SERVER_TEXTS.projectPrefsListNotArray, { key: "scan.referencePaths" }),
-    "/scan/extraFolders/*:type:string": tx(SERVER_TEXTS.projectPrefsListEntryNotString, { key: "scan.extraFolders" }),
-    "/scan/referencePaths/*:type:string": tx(SERVER_TEXTS.projectPrefsListEntryNotString, { key: "scan.referencePaths" })
+    "/scan/referencePaths/*:type:string": tx(SERVER_TEXTS.projectPrefsListEntryNotString, { key: "scan.referencePaths" }),
+    "/scan/referencePaths/*:pattern": SERVER_TEXTS.projectPrefsEntryHasComma
+  }
+});
+
+// server/routes/active-provider.ts
+import { existsSync as existsSync27 } from "fs";
+import { HTTPException as HTTPException12 } from "hono/http-exception";
+
+// core/config/active-provider.ts
+import { existsSync as existsSync26 } from "fs";
+import { join as join17 } from "path";
+var DETECTION_RULES = [
+  { providerId: "claude", marker: ".claude" },
+  { providerId: "gemini", marker: ".gemini" },
+  { providerId: "openai", marker: ".codex" },
+  { providerId: "openai", marker: "AGENTS.md" },
+  { providerId: "cursor", marker: ".cursor" }
+];
+function resolveActiveProvider(cwd) {
+  const detected = detectProvidersFromFilesystem(cwd);
+  const fromConfig = readConfigValue("activeProvider", { cwd });
+  if (typeof fromConfig === "string" && fromConfig.length > 0) {
+    return { resolved: fromConfig, source: "config", detected };
+  }
+  if (detected.length > 0) {
+    return { resolved: detected[0], source: "autodetect", detected };
+  }
+  return { resolved: null, source: "none", detected };
+}
+function detectProvidersFromFilesystem(cwd) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const rule of DETECTION_RULES) {
+    if (seen.has(rule.providerId)) continue;
+    if (!existsSync26(join17(cwd, rule.marker))) continue;
+    seen.add(rule.providerId);
+    out.push(rule.providerId);
+  }
+  return out;
+}
+
+// server/routes/active-provider.ts
+function registerActiveProviderRoute(app, deps) {
+  app.get("/api/active-provider", (c) => {
+    return c.json(buildEnvelope4(deps));
+  });
+  app.patch("/api/active-provider", async (c) => {
+    const body = await parsePatchBody5(c.req.raw);
+    const result = applyLensSwitch(deps, body.activeProvider);
+    deps.configService.reload();
+    return c.json({ ...buildEnvelope4(deps), switch: result });
+  });
+}
+function buildEnvelope4(deps) {
+  const r = resolveActiveProvider(deps.runtimeContext.cwd);
+  return {
+    activeProvider: r.resolved,
+    detected: r.detected,
+    source: r.source
+  };
+}
+function applyLensSwitch(deps, newValue) {
+  const cwd = deps.runtimeContext.cwd;
+  try {
+    writeConfigValue("activeProvider", newValue, { target: "project", cwd });
+  } catch (err) {
+    throw new HTTPException12(400, {
+      message: tx(SERVER_TEXTS.activeProviderPersistFailed, {
+        message: formatErrorMessage(err)
+      })
+    });
+  }
+  const dbPath = resolveDbPath({ db: void 0, cwd });
+  if (!existsSync27(dbPath)) return { dropped: null };
+  const dropResult = dropScanZone(dbPath);
+  return {
+    dropped: {
+      tableCount: dropResult.tableCount,
+      tableNames: dropResult.droppedTables
+    }
+  };
+}
+var PATCH_BODY_SCHEMA4 = {
+  type: "object",
+  additionalProperties: false,
+  required: ["activeProvider"],
+  properties: {
+    activeProvider: { type: "string", minLength: 1 }
+  }
+};
+var parsePatchBody5 = makeBodyValidator(PATCH_BODY_SCHEMA4, {
+  notJson: SERVER_TEXTS.activeProviderBodyNotJson,
+  notObject: SERVER_TEXTS.activeProviderBodyNotObject,
+  invalid: SERVER_TEXTS.activeProviderBodyMissing,
+  mapping: {
+    ":required": SERVER_TEXTS.activeProviderBodyMissing,
+    "/activeProvider:type:string": SERVER_TEXTS.activeProviderValueNotString,
+    "/activeProvider:minLength": SERVER_TEXTS.activeProviderValueEmpty
   }
 });
 
 // server/routes/scan.ts
-import { HTTPException as HTTPException11 } from "hono/http-exception";
+import { HTTPException as HTTPException13 } from "hono/http-exception";
 
 // server/scan-mutex.ts
 var inFlight = null;
@@ -21030,14 +21850,14 @@ async function withScanMutex(fn) {
   if (inFlight !== null) {
     throw new ScanBusyError();
   }
-  let resolve37;
+  let resolve38;
   inFlight = new Promise((r) => {
-    resolve37 = r;
+    resolve38 = r;
   });
   try {
     return await fn();
   } finally {
-    resolve37();
+    resolve38();
     inFlight = null;
   }
 }
@@ -21077,61 +21897,80 @@ function buildWatcherErrorEvent(data) {
 }
 
 // server/watcher.ts
-var WATCH_ROOT = ".";
 function createWatcherService(opts) {
-  const runtimeOpts = {
-    dbPath: opts.options.dbPath,
-    roots: [WATCH_ROOT],
-    runtimeContext: opts.runtimeContext,
-    noBuiltIns: opts.options.noBuiltIns,
-    noPlugins: opts.options.noPlugins,
-    emitterFactory: () => buildBroadcasterEmitter(opts.broadcaster),
-    runInitialBatch: true,
-    // BFF ordering: subscribe first so edits arriving during the initial
-    // scan queue against the armed chokidar and fire a follow-up batch.
-    subscribeBeforeInitial: true,
-    failOnInitialBatchError: false,
-    events: {
-      onBatch: (outcome) => {
-        if (outcome.kind === "error") {
+  let currentRuntime = null;
+  const buildRuntimeOpts = () => {
+    const runtimeOpts = {
+      dbPath: opts.options.dbPath,
+      roots: ["."],
+      runtimeContext: opts.runtimeContext,
+      noBuiltIns: opts.options.noBuiltIns,
+      noPlugins: opts.options.noPlugins,
+      emitterFactory: () => buildBroadcasterEmitter(opts.broadcaster),
+      runInitialBatch: true,
+      // BFF ordering: subscribe first so edits arriving during the
+      // initial scan queue against the armed chokidar and fire a
+      // follow-up batch.
+      subscribeBeforeInitial: true,
+      failOnInitialBatchError: false,
+      events: {
+        onBatch: (outcome) => {
+          if (outcome.kind === "error") {
+            log.warn(
+              tx(SERVER_TEXTS.watcherBatchFailed, {
+                message: sanitizeForTerminal(outcome.message)
+              })
+            );
+          }
+        },
+        onWatcherError: (message) => {
           log.warn(
-            tx(SERVER_TEXTS.watcherBatchFailed, {
-              message: sanitizeForTerminal(outcome.message)
+            tx(SERVER_TEXTS.watcherError, {
+              message: sanitizeForTerminal(message)
+            })
+          );
+          opts.broadcaster.broadcast(buildWatcherErrorEvent({ message }));
+        },
+        onPluginWarning: (message) => {
+          log.warn(sanitizeForTerminal(message));
+        },
+        onReady: (info) => {
+          opts.broadcaster.broadcast(
+            buildWatcherStartedEvent({ roots: info.roots, debounceMs: info.debounceMs })
+          );
+          log.info(
+            tx(SERVER_TEXTS.watcherReady, {
+              roots: info.roots.join(","),
+              debounceMs: String(info.debounceMs)
             })
           );
         }
-      },
-      onWatcherError: (message) => {
-        log.warn(
-          tx(SERVER_TEXTS.watcherError, {
-            message: sanitizeForTerminal(message)
-          })
-        );
-        opts.broadcaster.broadcast(buildWatcherErrorEvent({ message }));
-      },
-      onPluginWarning: (message) => {
-        log.warn(sanitizeForTerminal(message));
-      },
-      onReady: (info) => {
-        opts.broadcaster.broadcast(
-          buildWatcherStartedEvent({ roots: info.roots, debounceMs: info.debounceMs })
-        );
-        log.info(
-          tx(SERVER_TEXTS.watcherReady, {
-            roots: info.roots.join(","),
-            debounceMs: String(info.debounceMs)
-          })
-        );
       }
+    };
+    if (opts.debounceMsOverride !== void 0) {
+      runtimeOpts.debounceMsOverride = opts.debounceMsOverride;
     }
+    return runtimeOpts;
   };
-  if (opts.debounceMsOverride !== void 0) {
-    runtimeOpts.debounceMsOverride = opts.debounceMsOverride;
-  }
-  const handle = createWatcherRuntime(runtimeOpts);
   return {
-    start: handle.start,
-    stop: handle.stop
+    async start() {
+      currentRuntime = createWatcherRuntime(buildRuntimeOpts());
+      await currentRuntime.start();
+    },
+    async stop() {
+      if (currentRuntime) {
+        await currentRuntime.stop();
+        currentRuntime = null;
+      }
+    },
+    async restart() {
+      if (currentRuntime) {
+        await currentRuntime.stop();
+        currentRuntime = null;
+      }
+      currentRuntime = createWatcherRuntime(buildRuntimeOpts());
+      await currentRuntime.start();
+    }
   };
 }
 function buildBroadcasterEmitter(broadcaster) {
@@ -21158,7 +21997,7 @@ function registerScanRoute(app, deps) {
 }
 async function runPersistedScan(c, deps) {
   if (deps.options.noBuiltIns || deps.options.noPlugins) {
-    throw new HTTPException11(400, { message: SERVER_TEXTS.scanPostRequiresFullPipeline });
+    throw new HTTPException13(400, { message: SERVER_TEXTS.scanPostRequiresFullPipeline });
   }
   const dbExists = await tryWithSqlite(
     { databasePath: deps.options.dbPath, autoBackup: false },
@@ -21187,7 +22026,7 @@ async function runPersistedScan(c, deps) {
         emitterFactory: () => buildBroadcasterEmitter(deps.broadcaster)
       });
       if (outcome.kind !== "ok") {
-        throw new HTTPException11(500, {
+        throw new HTTPException13(500, {
           message: outcome.kind === "guard-trip" ? tx(SERVER_TEXTS.scanGuardTrip, { existing: outcome.existing }) : outcome.message
         });
       }
@@ -21195,7 +22034,7 @@ async function runPersistedScan(c, deps) {
     });
   } catch (err) {
     if (err instanceof ScanBusyError) {
-      throw new HTTPException11(409, { message: SERVER_TEXTS.scanPostBusy });
+      throw new HTTPException13(409, { message: SERVER_TEXTS.scanPostBusy });
     }
     throw err;
   }
@@ -21259,7 +22098,7 @@ function groupTagsBySource2(rows) {
 }
 async function runFreshScan(deps) {
   if (deps.options.noBuiltIns || deps.options.noPlugins) {
-    throw new HTTPException11(400, { message: SERVER_TEXTS.freshScanRequiresPipeline });
+    throw new HTTPException13(400, { message: SERVER_TEXTS.freshScanRequiresPipeline });
   }
   const resolveEnabledOverride = await buildBffResolverOverride(deps);
   const outcome = await runScanForCommand({
@@ -21288,7 +22127,7 @@ async function runFreshScan(deps) {
     printer: bffScanRunnerPrinter
   });
   if (outcome.kind !== "ok") {
-    throw new HTTPException11(500, {
+    throw new HTTPException13(500, {
       message: outcome.kind === "guard-trip" ? tx(SERVER_TEXTS.freshScanGuardTrip, { existing: outcome.existing }) : outcome.message
     });
   }
@@ -21322,8 +22161,8 @@ function emptyScanResult() {
 }
 
 // server/routes/sidecar.ts
-import { HTTPException as HTTPException12 } from "hono/http-exception";
-import { resolve as resolve33 } from "path";
+import { HTTPException as HTTPException14 } from "hono/http-exception";
+import { resolve as resolve34 } from "path";
 var STATUS_FRESH = "fresh";
 var ENVELOPE_KIND2 = "sidecar.bumped";
 var BUMP_BODY_SCHEMA = {
@@ -21357,13 +22196,13 @@ function registerSidecarRoutes(app, deps) {
     let absPath;
     try {
       assertContained(deps.runtimeContext.cwd, node.path);
-      absPath = resolve33(deps.runtimeContext.cwd, node.path);
+      absPath = resolve34(deps.runtimeContext.cwd, node.path);
     } catch (err) {
-      throw new HTTPException12(500, { message: formatErrorMessage(err) });
+      throw new HTTPException14(500, { message: formatErrorMessage(err) });
     }
     const result = invokeBump2(node, absPath, body);
     if (result.report.ok === false && result.report.reason === "fresh") {
-      throw new HTTPException12(409, { message: SERVER_TEXTS.sidecarFreshRefusal });
+      throw new HTTPException14(409, { message: SERVER_TEXTS.sidecarFreshRefusal });
     }
     if (result.report.ok === true && result.report.noop === true) {
       const envelope2 = {
@@ -21390,7 +22229,7 @@ function registerSidecarRoutes(app, deps) {
       }
     } catch (err) {
       if (err instanceof EConsentRequiredError) throw err;
-      throw new HTTPException12(500, { message: formatErrorMessage(err) });
+      throw new HTTPException14(500, { message: formatErrorMessage(err) });
     }
     if (body.confirm === true) {
       deps.configService.reload();
@@ -21427,7 +22266,7 @@ async function loadNode(deps, nodePath) {
   );
   const node = persisted?.nodes.find((n) => n.path === nodePath);
   if (!node) {
-    throw new HTTPException12(404, {
+    throw new HTTPException14(404, {
       message: tx(SERVER_TEXTS.nodeNotFound, { path: sanitizeForTerminal(nodePath) })
     });
   }
@@ -21435,7 +22274,7 @@ async function loadNode(deps, nodePath) {
 }
 function invokeBump2(node, absPath, body) {
   if (!bumpAction.invoke) {
-    throw new HTTPException12(500, { message: SERVER_TEXTS.sidecarBumpInvokeMissing });
+    throw new HTTPException14(500, { message: SERVER_TEXTS.sidecarBumpInvokeMissing });
   }
   const input = {};
   if (body.force === true) input.force = true;
@@ -21481,9 +22320,9 @@ function registerUpdateStatusRoute(app, deps) {
 }
 
 // server/static.ts
-import { existsSync as existsSync25 } from "fs";
+import { existsSync as existsSync28 } from "fs";
 import { readFile as readFile5 } from "fs/promises";
-import { extname, join as join17 } from "path";
+import { extname, join as join18 } from "path";
 import { serveStatic } from "@hono/node-server/serve-static";
 var INDEX_HTML = "index.html";
 var PLACEHOLDER_HTML = `<!doctype html>
@@ -21535,8 +22374,8 @@ function createSpaFallback(opts) {
   return async (c, _next) => {
     if (c.req.method !== "GET" && c.req.method !== "HEAD") return c.notFound();
     if (opts.uiDist === null) return htmlResponse(c, placeholder);
-    const indexPath = join17(opts.uiDist, INDEX_HTML);
-    if (!existsSync25(indexPath)) return htmlResponse(c, placeholder);
+    const indexPath = join18(opts.uiDist, INDEX_HTML);
+    if (!existsSync28(indexPath)) return htmlResponse(c, placeholder);
     return fileResponse(c, indexPath);
   };
 }
@@ -21622,13 +22461,13 @@ function attachBroadcasterRoute(app, broadcaster) {
 
 // server/app.ts
 var BODY_LIMIT_BYTES = 1024 * 1024;
-var DbMissingError = class extends HTTPException13 {
+var DbMissingError = class extends HTTPException15 {
   constructor(message) {
     super(500, { message });
     this.name = "DbMissingError";
   }
 };
-var BulkValidationError = class extends HTTPException13 {
+var BulkValidationError = class extends HTTPException15 {
   id;
   code;
   constructor(init) {
@@ -21638,7 +22477,7 @@ var BulkValidationError = class extends HTTPException13 {
     this.code = init.code;
   }
 };
-var LoopbackGateError = class extends HTTPException13 {
+var LoopbackGateError = class extends HTTPException15 {
   code;
   constructor(init) {
     super(403, { message: init.message });
@@ -21658,7 +22497,7 @@ function createApp(deps) {
     bodyLimit({
       maxSize: BODY_LIMIT_BYTES,
       onError: () => {
-        throw new HTTPException13(413, { message: tx(SERVER_TEXTS.bodyTooLarge, { maxBytes: String(BODY_LIMIT_BYTES) }) });
+        throw new HTTPException15(413, { message: tx(SERVER_TEXTS.bodyTooLarge, { maxBytes: String(BODY_LIMIT_BYTES) }) });
       }
     })
   );
@@ -21682,7 +22521,8 @@ function createApp(deps) {
     kindRegistry: deps.kindRegistry,
     contributionsRegistry: deps.contributionsRegistry,
     pluginRuntime: deps.pluginRuntime,
-    configService
+    configService,
+    watcherHolder: deps.watcherHolder
   };
   registerScanRoute(app, { ...routeDeps, broadcaster: deps.broadcaster });
   registerNodesRoutes(app, routeDeps);
@@ -21698,8 +22538,10 @@ function createApp(deps) {
   registerUpdateStatusRoute(app, routeDeps);
   registerPreferencesRoute(app, routeDeps);
   registerProjectPreferencesRoute(app, routeDeps);
+  registerActiveProviderRoute(app, routeDeps);
+  registerProjectIgnoreRoute(app, routeDeps);
   app.all("/api/*", (c) => {
-    throw new HTTPException13(404, {
+    throw new HTTPException15(404, {
       message: tx(SERVER_TEXTS.unknownApiEndpoint, { path: sanitizeForTerminal(c.req.path) })
     });
   });
@@ -21707,7 +22549,7 @@ function createApp(deps) {
   app.use("*", createStaticHandler({ uiDist: deps.options.uiDist, noUi: deps.options.noUi }));
   app.get("*", createSpaFallback({ uiDist: deps.options.uiDist, noUi: deps.options.noUi }));
   app.notFound((c) => {
-    throw new HTTPException13(404, {
+    throw new HTTPException15(404, {
       message: tx(SERVER_TEXTS.unknownPath, { path: sanitizeForTerminal(c.req.path) })
     });
   });
@@ -21762,7 +22604,7 @@ function formatError2(err, c) {
     };
     return c.json(envelope, 403);
   }
-  if (err instanceof HTTPException13) {
+  if (err instanceof HTTPException15) {
     const status = err.status;
     const envelope = {
       ok: false,
@@ -22105,10 +22947,10 @@ function validateNoUi(noUi, uiDist) {
 }
 
 // server/paths.ts
-import { existsSync as existsSync26, statSync as statSync10 } from "fs";
-import { dirname as dirname18, isAbsolute as isAbsolute9, join as join18, resolve as resolve34 } from "path";
+import { existsSync as existsSync29, statSync as statSync11 } from "fs";
+import { dirname as dirname18, isAbsolute as isAbsolute9, join as join19, resolve as resolve35 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
-var DEFAULT_UI_REL = join18("ui", "dist", "ui", "browser");
+var DEFAULT_UI_REL = join19("ui", "dist", "ui", "browser");
 var PACKAGE_UI_REL = "ui";
 var INDEX_HTML2 = "index.html";
 function resolveDefaultUiDist(ctx) {
@@ -22117,13 +22959,13 @@ function resolveDefaultUiDist(ctx) {
   return walkUpForUi(ctx.cwd);
 }
 function resolveExplicitUiDist(ctx, raw) {
-  return isAbsolute9(raw) ? raw : resolve34(ctx.cwd, raw);
+  return isAbsolute9(raw) ? raw : resolve35(ctx.cwd, raw);
 }
 function isUiBundleDir(path) {
-  if (!existsSync26(path)) return false;
+  if (!existsSync29(path)) return false;
   try {
-    if (!statSync10(path).isDirectory()) return false;
-    return existsSync26(join18(path, INDEX_HTML2));
+    if (!statSync11(path).isDirectory()) return false;
+    return existsSync29(join19(path, INDEX_HTML2));
   } catch {
     return false;
   }
@@ -22140,9 +22982,9 @@ function resolvePackageBundledUi() {
 function resolvePackageBundledUiFrom(here) {
   let current = here;
   for (let i = 0; i < 8; i++) {
-    const candidate = join18(current, PACKAGE_UI_REL);
+    const candidate = join19(current, PACKAGE_UI_REL);
     if (isUiBundleDir(candidate)) return candidate;
-    const distHere = join18(current, "dist", PACKAGE_UI_REL);
+    const distHere = join19(current, "dist", PACKAGE_UI_REL);
     if (isUiBundleDir(distHere)) return distHere;
     const parent = dirname18(current);
     if (parent === current) return null;
@@ -22151,9 +22993,9 @@ function resolvePackageBundledUiFrom(here) {
   return null;
 }
 function walkUpForUi(startDir) {
-  let current = resolve34(startDir);
+  let current = resolve35(startDir);
   for (let i = 0; i < 64; i++) {
-    const candidate = join18(current, DEFAULT_UI_REL);
+    const candidate = join19(current, DEFAULT_UI_REL);
     if (isUiBundleDir(candidate)) return candidate;
     const parent = dirname18(current);
     if (parent === current) return null;
@@ -22169,6 +23011,7 @@ async function createServer(options, extra = {}) {
   const broadcaster = new WsBroadcaster();
   const { pluginRuntime, kindRegistry } = await assemblePluginRuntime(options, runtimeContext);
   const { kernel, contributionsRegistry } = assembleKernel(pluginRuntime, options.noBuiltIns);
+  const watcherHolder = { current: null };
   const app = createApp({
     options,
     specVersion,
@@ -22177,6 +23020,7 @@ async function createServer(options, extra = {}) {
     kindRegistry,
     contributionsRegistry,
     pluginRuntime,
+    watcherHolder,
     kernel
   });
   const wss = new WebSocketServer({ noServer: true });
@@ -22196,6 +23040,7 @@ async function createServer(options, extra = {}) {
     try {
       await candidate.start();
       watcherService = candidate;
+      watcherHolder.current = candidate;
     } catch (err) {
       const message = formatErrorMessage(err);
       log.warn(
@@ -22390,7 +23235,8 @@ function renderBanner(input) {
     dbDisplay,
     pathDisplay: formatCwdPath(input.cwd),
     browserLine,
-    colorEnabled: input.colorEnabled
+    colorEnabled: input.colorEnabled,
+    referencePaths: input.referencePaths ?? []
   });
 }
 function resolveColorEnabled(opts) {
@@ -22447,11 +23293,23 @@ function renderFiglet(input) {
   lines.push(`  ${dimOpen}Server${dimClose}   ${greenUnderline}${input.url}${greenUnderlineClose}`);
   lines.push(`  ${dimOpen}Path${dimClose}     ${input.pathDisplay}`);
   lines.push(`  ${dimOpen}DB${dimClose}       ${input.dbDisplay}`);
+  lines.push(...renderListRows("Refs", input.referencePaths, dimOpen, dimClose));
   lines.push("");
   lines.push(`  ${dimOpen}${input.browserLine}${dimClose}`);
   lines.push("");
   return lines.join("\n") + "\n";
 }
+function renderListRows(label, values, dimOpen, dimClose) {
+  if (values.length === 0) return [];
+  const out = [];
+  const labelPad = " ".repeat(Math.max(1, 9 - label.length));
+  const continuationPad = " ".repeat(11);
+  out.push(`  ${dimOpen}${label}${dimClose}${labelPad}${sanitizeForTerminal(values[0])}`);
+  for (let i = 1; i < values.length; i += 1) {
+    out.push(`${continuationPad}${sanitizeForTerminal(values[i])}`);
+  }
+  return out;
+}
 var EMPTY_ANSI = {
   dimOpen: "",
   dimClose: "",
@@ -22571,7 +23429,7 @@ var ServeCommand = class extends SmCommand {
       return ExitCode.Error;
     }
     const dbPath = resolveDbPath({ db: this.db, ...runtimeCtx });
-    if (this.db !== void 0 && !existsSync27(dbPath)) {
+    if (this.db !== void 0 && !existsSync30(dbPath)) {
       this.printer.info(
         tx(SERVE_TEXTS.dbNotFound, { path: sanitizeForTerminal(dbPath) })
       );
@@ -22647,6 +23505,12 @@ var ServeCommand = class extends SmCommand {
       noColorFlag: this.noColor,
       env: process.env
     });
+    let referencePaths = [];
+    try {
+      const cfg = loadConfig({ cwd: runtimeCtx.cwd }).effective;
+      referencePaths = cfg.scan.referencePaths;
+    } catch {
+    }
     this.printer.info(
       renderBanner({
         version: VERSION,
@@ -22656,7 +23520,8 @@ var ServeCommand = class extends SmCommand {
         cwd: runtimeCtx.cwd,
         openBrowser: validation.options.open,
         isTTY,
-        colorEnabled
+        colorEnabled,
+        referencePaths
       })
     );
     if (validation.options.open) {
@@ -22975,22 +23840,27 @@ function renderLinksSection(direction, links, ansi) {
   const aggregated = aggregateLinks(links, projectField);
   const headerTpl = direction === "out" ? SHOW_TEXTS.linksOutSection : SHOW_TEXTS.linksInSection;
   const kindWidth = Math.max(...aggregated.map((g) => g.kind.length));
-  const confWidth = Math.max(...aggregated.map((g) => g.confidence.length));
+  const confLabels = aggregated.map((g) => formatConfidence(g.confidence));
+  const confWidth = Math.max(...confLabels.map((l) => l.length));
   const lines = [tx(headerTpl, { count: links.length })];
-  for (const grp of aggregated) {
+  aggregated.forEach((grp, idx) => {
     const dup = grp.rowCount > 1 ? ansi.dim(tx(SHOW_TEXTS.linkDup, { count: grp.rowCount })) : "";
     lines.push(
       tx(SHOW_TEXTS.linkRow, {
         arrow: ansi.dim(arrow),
         kind: sanitizeForTerminal(grp.kind).padEnd(kindWidth),
-        confidence: ansi.dim(grp.confidence.padEnd(confWidth)),
+        confidence: ansi.dim(confLabels[idx].padEnd(confWidth)),
         endpoint: sanitizeForTerminal(grp.endpoint),
         dup
       })
     );
-  }
+  });
   return lines.join("");
 }
+function formatConfidence(c) {
+  if (typeof c !== "number" || !Number.isFinite(c)) return "?";
+  return `${Math.round(c * 100)}%`;
+}
 function renderIssuesSection(issues, nodePath, ansi) {
   const lines = [tx(SHOW_TEXTS.issuesSection, { count: issues.length })];
   const analyzerWidth = Math.max(
@@ -23057,18 +23927,13 @@ function aggregateLinks(links, endpointSide) {
     return a.kind.localeCompare(b.kind);
   });
 }
-var CONFIDENCE_RANK = {
-  high: 2,
-  medium: 1,
-  low: 0
-};
 function rankConfidenceForGrouping(c) {
-  return CONFIDENCE_RANK[c];
+  return c;
 }
 
 // cli/commands/sidecar.ts
-import { existsSync as existsSync28, unlinkSync as unlinkSync2 } from "fs";
-import { resolve as resolve35 } from "path";
+import { existsSync as existsSync31, unlinkSync as unlinkSync2 } from "fs";
+import { resolve as resolve36 } from "path";
 import { Command as Command35, Option as Option33 } from "clipanion";
 
 // cli/i18n/sidecar.texts.ts
@@ -23219,7 +24084,7 @@ var SidecarRefreshCommand = class extends SmCommand {
     let absPath;
     try {
       assertContained(ctx.cwd, node.path);
-      absPath = resolve35(ctx.cwd, node.path);
+      absPath = resolve36(ctx.cwd, node.path);
     } catch (err) {
       this.printer.error(
         tx(SIDECAR_TEXTS.refreshFailed, { glyph: errGlyph, message: formatErrorMessage(err) })
@@ -23500,7 +24365,7 @@ var SidecarAnnotateCommand = class extends SmCommand {
     let absPath;
     try {
       assertContained(ctx.cwd, node.path);
-      absPath = resolve35(ctx.cwd, node.path);
+      absPath = resolve36(ctx.cwd, node.path);
     } catch (err) {
       this.printer.error(
         tx(SIDECAR_TEXTS.annotateFailed, { glyph: errGlyph, message: formatErrorMessage(err) })
@@ -23508,7 +24373,7 @@ var SidecarAnnotateCommand = class extends SmCommand {
       return ExitCode.Error;
     }
     const sidecarAbsPath = sidecarPathFor(absPath);
-    if (existsSync28(sidecarAbsPath) && this.force !== true) {
+    if (existsSync31(sidecarAbsPath) && this.force !== true) {
       this.printer.error(
         tx(SIDECAR_TEXTS.annotateExists, {
           glyph: errGlyph,
@@ -23518,7 +24383,7 @@ var SidecarAnnotateCommand = class extends SmCommand {
       );
       return ExitCode.Error;
     }
-    if (existsSync28(sidecarAbsPath) && this.force === true) {
+    if (existsSync31(sidecarAbsPath) && this.force === true) {
       try {
         unlinkSync2(sidecarAbsPath);
       } catch (err) {
@@ -23748,8 +24613,8 @@ var STUB_COMMANDS = [
 ];
 
 // cli/commands/tutorial.ts
-import { cpSync as cpSync2, existsSync as existsSync29, mkdirSync as mkdirSync7, rmSync as rmSync2, statSync as statSync11 } from "fs";
-import { dirname as dirname19, join as join19, resolve as resolve36 } from "path";
+import { cpSync as cpSync2, existsSync as existsSync32, mkdirSync as mkdirSync7, rmSync as rmSync2, statSync as statSync12 } from "fs";
+import { dirname as dirname19, join as join20, resolve as resolve37 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
 import { Command as Command37, Option as Option35 } from "clipanion";
 
@@ -23845,9 +24710,9 @@ var TutorialCommand = class extends SmCommand {
     }
     const variant = rawVariant ?? DEFAULT_VARIANT;
     const spec = VARIANT_SPECS[variant];
-    const targetDir = join19(ctx.cwd, ".claude", "skills", spec.slug);
+    const targetDir = join20(ctx.cwd, ".claude", "skills", spec.slug);
     const targetDisplay = `.claude/skills/${spec.slug}/`;
-    if (existsSync29(targetDir) && !this.force) {
+    if (existsSync32(targetDir) && !this.force) {
       this.printer.error(
         tx(TUTORIAL_TEXTS.alreadyExists, {
           glyph: errGlyph,
@@ -23923,14 +24788,14 @@ function resolveSkillSourceDir(variant) {
   const here = dirname19(fileURLToPath6(import.meta.url));
   const candidates = [
     // dev: src/cli/commands/ → repo-root .claude/skills/<slug>/
-    resolve36(here, "../../..", spec.sourceDir),
+    resolve37(here, "../../..", spec.sourceDir),
     // bundled: dist/cli.js → dist/cli/tutorial/<slug> (sibling)
-    resolve36(here, "cli/tutorial", spec.slug),
+    resolve37(here, "cli/tutorial", spec.slug),
     // bundled fallback: any-depth → cli/tutorial/<slug>
-    resolve36(here, "../cli/tutorial", spec.slug)
+    resolve37(here, "../cli/tutorial", spec.slug)
   ];
   for (const candidate of candidates) {
-    if (existsSync29(candidate) && statSync11(candidate).isDirectory()) {
+    if (existsSync32(candidate) && statSync12(candidate).isDirectory()) {
       cachedSourceDirs.set(variant, candidate);
       return candidate;
     }
@@ -24107,7 +24972,7 @@ await lifecycleDispatcher.dispatch(
 process.exit(exitCode);
 function resolveBareDefault() {
   const ctx = defaultRuntimeContext();
-  if (existsSync30(defaultProjectDbPath(ctx))) {
+  if (existsSync33(defaultProjectDbPath(ctx))) {
     return ["serve"];
   }
   process.stderr.write(tx(ENTRY_TEXTS.bareNoProject, { cwd: ctx.cwd }));