@skill-map/cli 0.32.0 → 0.33.0

package/dist/cli.js

@@ -1,5 +1,5 @@
 // cli/entry.ts
-import { existsSync as existsSync31 } from "fs";
+import { existsSync as existsSync33 } from "fs";
 import { Builtins, Cli as Cli2 } from "clipanion";
 
 // kernel/adapters/in-memory-progress.ts
@@ -494,6 +494,31 @@ var claudeProvider = {
         colorDark: "#34d399",
         icon: { kind: "pi", id: "pi-bolt" }
       }
+    },
+    /**
+     * Phase 5 of the active-lens migration: MCP servers surface as
+     * synthetic / virtual nodes (no filesystem path; identifier is
+     * `mcp://<name>`) derived from a config file (`settings.json`
+     * for Claude). Per-skill / per-agent references appear as
+     * `tools: [mcp__<server>__<tool>, ...]` entries in frontmatter;
+     * the `core/mcp-tools` extractor turns each match into one
+     * MCP node (idempotent dedup by path) plus a `references` link
+     * from the source skill / agent to that node.
+     *
+     * `schema` is provider-agnostic enough that we reuse the skill
+     * schema for now (mcp nodes have `name` + `description` at most,
+     * which the base skill schema accepts). A dedicated schema lands
+     * if MCP nodes grow Claude-specific metadata.
+     */
+    mcp: {
+      schema: "./schemas/skill.schema.json",
+      schemaJson: skill_schema_default,
+      ui: {
+        label: "MCP servers",
+        color: "#8b5cf6",
+        colorDark: "#a78bfa",
+        icon: { kind: "pi", id: "pi-server" }
+      }
     }
   },
   // Auxiliary schemas the per-kind schemas $ref by $id. AJV needs them
@@ -511,6 +536,166 @@ var claudeProvider = {
   }
 };
 
+// kernel/util/strip-code-blocks.ts
+var FENCE_RE = /^(?<indent> {0,3})(?<fence>`{3,}|~{3,})/;
+function stripCodeBlocks(input) {
+  if (!input) return input;
+  const fenceless = stripFences(input);
+  return stripInline(fenceless);
+}
+function stripFences(input) {
+  const out = [];
+  const lines = input.split("\n");
+  let openFence = null;
+  for (const line of lines) {
+    if (openFence) {
+      const closer = matchClosingFence(line, openFence);
+      if (closer) {
+        out.push(blank(line));
+        openFence = null;
+      } else {
+        out.push(blank(line));
+      }
+      continue;
+    }
+    const open = FENCE_RE.exec(line);
+    if (open?.groups) {
+      openFence = open.groups["fence"];
+      out.push(blank(line));
+      continue;
+    }
+    out.push(line);
+  }
+  return out.join("\n");
+}
+function matchClosingFence(line, openFence) {
+  const m = FENCE_RE.exec(line);
+  if (!m?.groups) return false;
+  const fence = m.groups["fence"];
+  return fence[0] === openFence[0] && fence.length >= openFence.length;
+}
+function stripInline(input) {
+  return input.replace(/(`+)([\s\S]*?)\1/g, (_full, ticks, body) => {
+    return ticks.replace(/`/g, " ") + blank(body) + ticks.replace(/`/g, " ");
+  });
+}
+function blank(s) {
+  return s.replace(/[^\s]/g, " ");
+}
+
+// kernel/trigger-normalize.ts
+function normalizeTrigger(source) {
+  let out = source.normalize("NFD");
+  out = out.replace(new RegExp("\\p{Mn}+", "gu"), "");
+  out = out.toLowerCase();
+  out = out.replace(/[-_\s]+/g, " ");
+  out = out.replace(/  +/g, " ");
+  return out.trim();
+}
+
+// plugins/claude/extractors/at-directive/index.ts
+var ID = "at-directive";
+var AT_RE = /(?:^|[^A-Za-z0-9_@])(@(?:\.{1,2}\/|\/)?[a-z0-9](?:[a-z0-9_\-./]*[a-z0-9_])?(?::[a-z0-9][a-z0-9_-]*)?)/gi;
+var FILE_EXT_RE = /\.(md|mdx|js|jsx|ts|tsx|json|yml|yaml|toml|txt|html|css|scss|less|py|rb|go|rs|java|c|cpp|h|hpp|sh|sql|svg|png|jpg|jpeg|gif|webp|pdf)$/i;
+var atDirectiveExtractor = {
+  id: ID,
+  pluginId: "claude",
+  kind: "extractor",
+  version: "1.0.0",
+  description: "Detects `@<token>` directives in a node's body using Claude Code interpretation rules. A bare handle (e.g. `@team`) becomes a `mentions` link; a file-flavoured token (e.g. `@docs/api.md`, `@./readme.md`) becomes a `references` link. Gated by `precondition.provider: ['claude']` so Gemini / Cursor / Codex apply their own at-directive flavours via their own extractors.",
+  scope: "body",
+  precondition: { provider: ["claude"] },
+  extract(ctx) {
+    const seenMentions = /* @__PURE__ */ new Set();
+    const seenReferences = /* @__PURE__ */ new Set();
+    const body = stripCodeBlocks(ctx.body);
+    for (const match of body.matchAll(AT_RE)) {
+      const original = match[1];
+      const bare = original.slice(1);
+      const isReference = bare.startsWith("./") || bare.startsWith("../") || bare.startsWith("/") || FILE_EXT_RE.test(bare);
+      if (isReference) {
+        const target = bare.replace(/^\.\//, "");
+        if (seenReferences.has(target)) continue;
+        seenReferences.add(target);
+        ctx.emitLink({
+          source: ctx.node.path,
+          target,
+          kind: "references",
+          // 0.85: strong file signal (path prefix `./` / `../` / `/` OR
+          // a known file extension on the tail). One degree of inference
+          // (the runtime still resolves the path).
+          confidence: 0.85,
+          sources: [ID],
+          trigger: {
+            originalTrigger: original,
+            normalizedTrigger: target.toLowerCase()
+          }
+        });
+        continue;
+      }
+      const normalized = normalizeTrigger(original);
+      if (seenMentions.has(normalized)) continue;
+      seenMentions.add(normalized);
+      ctx.emitLink({
+        source: ctx.node.path,
+        target: original,
+        kind: "mentions",
+        // 0.5: genuine ambiguity. A bare `@handle` (no extension, no
+        // path prefix) could be an agent, a handle, or generic prose.
+        // The runtime decides at invocation time; the extractor leaves
+        // the question open.
+        confidence: 0.5,
+        sources: [ID],
+        trigger: {
+          originalTrigger: original,
+          normalizedTrigger: normalized
+        }
+      });
+    }
+  }
+};
+
+// plugins/claude/extractors/slash/index.ts
+var ID2 = "slash";
+var SLASH_RE = /(?<![A-Za-z0-9_/.:?#])(\/[a-z0-9][a-z0-9_-]*(?::[a-z0-9][a-z0-9_-]*)?)/gi;
+var slashExtractor = {
+  id: ID2,
+  pluginId: "claude",
+  kind: "extractor",
+  version: "1.0.0",
+  description: "Detects `/command` invocations in a node's body using Claude Code routing rules and turns each one into an arrow between nodes in the graph. Gated by `precondition.provider: ['claude']` so Gemini / Cursor / Codex apply their own slash flavours (Gemini has 4 routing separators, Codex deprecated user slash commands, etc.) via their own extractors.",
+  scope: "body",
+  precondition: { provider: ["claude"] },
+  extract(ctx) {
+    const seen = /* @__PURE__ */ new Set();
+    const body = stripCodeBlocks(ctx.body);
+    for (const match of body.matchAll(SLASH_RE)) {
+      const original = match[1];
+      const endIdx = (match.index ?? 0) + match[0].length;
+      const nextChar = body[endIdx];
+      if (nextChar && /[A-Za-z0-9_/-]/.test(nextChar)) continue;
+      const normalized = normalizeTrigger(original);
+      if (seen.has(normalized)) continue;
+      seen.add(normalized);
+      ctx.emitLink({
+        source: ctx.node.path,
+        target: original,
+        kind: "invokes",
+        // 0.8: clean `/command` match after code-block strip. The
+        // post-match path guard above filters URL / file-path noise,
+        // so a hit is unambiguous syntax. Resolution against the live
+        // skill / command catalog happens downstream.
+        confidence: 0.8,
+        sources: [ID2],
+        trigger: {
+          originalTrigger: original,
+          normalizedTrigger: normalized
+        }
+      });
+    }
+  }
+};
+
 // plugins/gemini/providers/gemini/schemas/agent.schema.json
 var agent_schema_default2 = {
   $schema: "https://json-schema.org/draft/2020-12/schema",
@@ -629,6 +814,86 @@ var geminiProvider = {
   }
 };
 
+// plugins/openai/providers/openai/schemas/agent.schema.json
+var agent_schema_default3 = {
+  $schema: "https://json-schema.org/draft/2020-12/schema",
+  $id: "https://skill-map.dev/providers/openai/v1/frontmatter/agent.schema.json",
+  title: "FrontmatterCodexAgent",
+  description: "Frontmatter shape for nodes classified as `agent` by the OpenAI Codex Provider. Codex sub-agents live as TOML files under `.codex/agents/<name>.toml`; the entire file IS the agent definition (no markdown body). The TOML parser feeds the parsed root object into `frontmatter`, so this schema validates the same shape skill-map's other providers carry on per-kind frontmatter. Mirrors Codex's documented sub-agent fields (https://github.com/openai/codex) with `additionalProperties: true` so future additions flow through unchanged.",
+  allOf: [
+    { $ref: "https://skill-map.dev/spec/v0/frontmatter/base.schema.json" }
+  ],
+  type: "object",
+  additionalProperties: true,
+  properties: {
+    name: {
+      type: "string",
+      minLength: 1,
+      description: "Sub-agent identifier. Conventionally matches the filename stem."
+    },
+    description: {
+      type: "string",
+      description: "Short description of when this sub-agent applies. Codex surfaces this in the agent picker; skill-map mirrors it in the card."
+    },
+    model: {
+      type: "string",
+      description: "Model identifier (`gpt-4o`, `o3-mini`, etc.) the sub-agent runs against."
+    },
+    instructions: {
+      type: "string",
+      description: "Multi-line prompt body (TOML triple-quoted string)."
+    },
+    tools: {
+      type: "array",
+      items: { type: "string" },
+      description: "Tool ids this sub-agent is allowed to call."
+    },
+    mcp_servers: {
+      type: "array",
+      items: { type: "string" },
+      description: "MCP server ids attached to this sub-agent (`tools: [mcp__<server>__*]` follows the same pattern as Claude)."
+    },
+    approval_policy: {
+      type: "string",
+      enum: ["never", "on-request", "untrusted"],
+      description: "Codex approval policy for this sub-agent's destructive operations."
+    },
+    sandbox_mode: {
+      type: "string",
+      enum: ["read-only", "workspace-write", "danger-full-access"],
+      description: "Codex sandbox mode the sub-agent runs under."
+    }
+  }
+};
+
+// plugins/openai/providers/openai/index.ts
+var openaiProvider = {
+  id: "openai",
+  pluginId: "openai",
+  kind: "provider",
+  version: "1.0.0",
+  description: "Walks OpenAI Codex CLI scope conventions (.codex/agents/*.toml).",
+  read: { extensions: [".toml"], parser: "toml" },
+  kinds: {
+    agent: {
+      schema: "./schemas/agent.schema.json",
+      schemaJson: agent_schema_default3,
+      ui: {
+        label: "Codex agents",
+        // Codex green; distinct from claude / gemini palettes.
+        color: "#22c55e",
+        colorDark: "#4ade80",
+        icon: { kind: "pi", id: "pi-bolt" }
+      }
+    }
+  },
+  classify(path) {
+    const lower = path.toLowerCase();
+    if (lower.startsWith(".codex/agents/") && lower.endsWith(".toml")) return "agent";
+    return null;
+  }
+};
+
 // plugins/agent-skills/providers/agent-skills/schemas/skill.schema.json
 var skill_schema_default3 = {
   $schema: "https://json-schema.org/draft/2020-12/schema",
@@ -722,9 +987,9 @@ var coreMarkdownProvider = {
 };
 
 // plugins/core/extractors/annotations/index.ts
-var ID = "annotations";
+var ID3 = "annotations";
 var annotationsExtractor = {
-  id: ID,
+  id: ID3,
   pluginId: "core",
   kind: "extractor",
   version: "1.0.0",
@@ -770,128 +1035,17 @@ function link(source, target) {
     source,
     target,
     kind: "supersedes",
-    confidence: "high",
-    sources: [ID]
+    confidence: 1,
+    sources: [ID3]
   };
 }
 
-// kernel/util/strip-code-blocks.ts
-var FENCE_RE = /^(?<indent> {0,3})(?<fence>`{3,}|~{3,})/;
-function stripCodeBlocks(input) {
-  if (!input) return input;
-  const fenceless = stripFences(input);
-  return stripInline(fenceless);
-}
-function stripFences(input) {
-  const out = [];
-  const lines = input.split("\n");
-  let openFence = null;
-  for (const line of lines) {
-    if (openFence) {
-      const closer = matchClosingFence(line, openFence);
-      if (closer) {
-        out.push(blank(line));
-        openFence = null;
-      } else {
-        out.push(blank(line));
-      }
-      continue;
-    }
-    const open = FENCE_RE.exec(line);
-    if (open?.groups) {
-      openFence = open.groups["fence"];
-      out.push(blank(line));
-      continue;
-    }
-    out.push(line);
-  }
-  return out.join("\n");
-}
-function matchClosingFence(line, openFence) {
-  const m = FENCE_RE.exec(line);
-  if (!m?.groups) return false;
-  const fence = m.groups["fence"];
-  return fence[0] === openFence[0] && fence.length >= openFence.length;
-}
-function stripInline(input) {
-  return input.replace(/(`+)([\s\S]*?)\1/g, (_full, ticks, body) => {
-    return ticks.replace(/`/g, " ") + blank(body) + ticks.replace(/`/g, " ");
-  });
-}
-function blank(s) {
-  return s.replace(/[^\s]/g, " ");
-}
-
-// kernel/trigger-normalize.ts
-function normalizeTrigger(source) {
-  let out = source.normalize("NFD");
-  out = out.replace(new RegExp("\\p{Mn}+", "gu"), "");
-  out = out.toLowerCase();
-  out = out.replace(/[-_\s]+/g, " ");
-  out = out.replace(/  +/g, " ");
-  return out.trim();
-}
-
-// plugins/core/extractors/at-directive/index.ts
-var ID2 = "at-directive";
-var AT_RE = /(?:^|[^A-Za-z0-9_@])(@(?:\.{1,2}\/|\/)?[a-z0-9](?:[a-z0-9_\-./]*[a-z0-9_])?(?::[a-z0-9][a-z0-9_-]*)?)/gi;
-var FILE_EXT_RE = /\.(md|mdx|js|jsx|ts|tsx|json|yml|yaml|toml|txt|html|css|scss|less|py|rb|go|rs|java|c|cpp|h|hpp|sh|sql|svg|png|jpg|jpeg|gif|webp|pdf)$/i;
-var atDirectiveExtractor = {
-  id: ID2,
-  pluginId: "core",
-  kind: "extractor",
-  version: "1.0.0",
-  description: "Detects `@<token>` directives in a node's body. A bare handle (e.g. `@team`) becomes a `mentions` link; a file-flavoured token (e.g. `@docs/api.md`, `@./readme.md`) becomes a `references` link, matching how Claude Code / Gemini CLI / Cursor read the same syntax.",
-  scope: "body",
-  extract(ctx) {
-    const seenMentions = /* @__PURE__ */ new Set();
-    const seenReferences = /* @__PURE__ */ new Set();
-    const body = stripCodeBlocks(ctx.body);
-    for (const match of body.matchAll(AT_RE)) {
-      const original = match[1];
-      const bare = original.slice(1);
-      const isReference = bare.startsWith("./") || bare.startsWith("../") || bare.startsWith("/") || FILE_EXT_RE.test(bare);
-      if (isReference) {
-        const target = bare.replace(/^\.\//, "");
-        if (seenReferences.has(target)) continue;
-        seenReferences.add(target);
-        ctx.emitLink({
-          source: ctx.node.path,
-          target,
-          kind: "references",
-          confidence: "medium",
-          sources: [ID2],
-          trigger: {
-            originalTrigger: original,
-            normalizedTrigger: target.toLowerCase()
-          }
-        });
-        continue;
-      }
-      const normalized = normalizeTrigger(original);
-      if (seenMentions.has(normalized)) continue;
-      seenMentions.add(normalized);
-      ctx.emitLink({
-        source: ctx.node.path,
-        target: original,
-        kind: "mentions",
-        confidence: "medium",
-        sources: [ID2],
-        trigger: {
-          originalTrigger: original,
-          normalizedTrigger: normalized
-        }
-      });
-    }
-  }
-};
-
 // plugins/core/extractors/external-url-counter/index.ts
-var ID3 = "external-url-counter";
+var ID4 = "external-url-counter";
 var URL_RE = /https?:\/\/[^\s<>"'`)\]]+/g;
 var TRAILING_PUNCT = /[.,;:!?]+$/;
 var externalUrlCounterExtractor = {
-  id: ID3,
+  id: ID4,
   pluginId: "core",
   kind: "extractor",
   version: "1.0.0",
@@ -937,8 +1091,8 @@ var externalUrlCounterExtractor = {
         source: ctx.node.path,
         target: normalized,
         kind: "references",
-        confidence: "low",
-        sources: [ID3],
+        confidence: 0.3,
+        sources: [ID4],
         trigger: {
           originalTrigger: original,
           normalizedTrigger: normalized
@@ -985,11 +1139,11 @@ function lineFor(lineStarts, offset) {
 
 // plugins/core/extractors/markdown-link/index.ts
 import { posix as pathPosix } from "path";
-var ID4 = "markdown-link";
+var ID5 = "markdown-link";
 var LINK_RE = /(?<!!)\[([^\]]*)\]\(([^)\s]+)(?:\s+"[^"]*")?\)/g;
 var URL_SCHEME_RE = /^[a-z][a-z0-9+.-]*:/i;
 var markdownLinkExtractor = {
-  id: ID4,
+  id: ID5,
   pluginId: "core",
   kind: "extractor",
   version: "1.0.0",
@@ -1010,8 +1164,8 @@ var markdownLinkExtractor = {
         source: ctx.node.path,
         target: resolved,
         kind: "references",
-        confidence: "high",
-        sources: [ID4],
+        confidence: 0.95,
+        sources: [ID5],
         trigger: {
           originalTrigger: original,
           normalizedTrigger: resolved
@@ -1050,47 +1204,61 @@ function lineFor2(lineStarts, offset) {
   return lo + 1;
 }
 
-// plugins/core/extractors/slash/index.ts
-var ID5 = "slash";
-var SLASH_RE = /(?<![A-Za-z0-9_/.:?#])(\/[a-z0-9][a-z0-9_-]*(?::[a-z0-9][a-z0-9_-]*)?)/gi;
-var slashExtractor = {
-  id: ID5,
+// plugins/core/extractors/mcp-tools/index.ts
+var ID6 = "mcp-tools";
+var MCP_PATTERN = /^mcp__([a-z0-9][a-z0-9_-]*)__[a-z0-9_-]+$/i;
+var mcpToolsExtractor = {
+  id: ID6,
   pluginId: "core",
   kind: "extractor",
   version: "1.0.0",
-  description: "Detects `/command` invocations in a node's body and turns each one into an arrow between nodes in the graph.",
-  scope: "body",
+  description: "Detects `tools: [mcp__<server>__<tool>]` entries in a node's frontmatter and turns each unique server into an MCP node + a reference edge from the source.",
+  scope: "frontmatter",
   extract(ctx) {
-    const seen = /* @__PURE__ */ new Set();
-    const body = stripCodeBlocks(ctx.body);
-    for (const match of body.matchAll(SLASH_RE)) {
-      const original = match[1];
-      const endIdx = (match.index ?? 0) + match[0].length;
-      const nextChar = body[endIdx];
-      if (nextChar && /[A-Za-z0-9_/-]/.test(nextChar)) continue;
-      const normalized = normalizeTrigger(original);
-      if (seen.has(normalized)) continue;
-      seen.add(normalized);
+    const raw = ctx.frontmatter["tools"];
+    if (!Array.isArray(raw)) return;
+    const servers = collectMcpServers(raw);
+    if (servers.size === 0) return;
+    for (const server of servers) {
+      const mcpPath = `mcp://${server}`;
+      ctx.emitNode({
+        path: mcpPath,
+        kind: "mcp",
+        virtual: true,
+        provider: ctx.node.provider,
+        derivedFrom: [ctx.node.path],
+        frontmatter: { name: server }
+      });
       ctx.emitLink({
         source: ctx.node.path,
-        target: original,
-        kind: "invokes",
-        confidence: "medium",
-        sources: [ID5],
+        target: mcpPath,
+        kind: "references",
+        confidence: 0.85,
+        sources: [ID6],
         trigger: {
-          originalTrigger: original,
-          normalizedTrigger: normalized
+          originalTrigger: `mcp__${server}__*`,
+          normalizedTrigger: mcpPath
         }
       });
     }
   }
 };
+function collectMcpServers(tools) {
+  const out = /* @__PURE__ */ new Set();
+  for (const t of tools) {
+    if (typeof t !== "string" || t.length === 0) continue;
+    const match = MCP_PATTERN.exec(t);
+    if (!match) continue;
+    out.add(match[1].toLowerCase());
+  }
+  return out;
+}
 
 // plugins/core/extractors/tools-count/index.ts
-var ID6 = "tools-count";
+var ID7 = "tools-count";
 var TOOLTIP_MAX = 255;
 var toolsCountExtractor = {
-  id: ID6,
+  id: ID7,
   pluginId: "core",
   kind: "extractor",
   version: "1.0.0",
@@ -1133,9 +1301,9 @@ var ANNOTATION_ORPHAN_TEXTS = {
 };
 
 // plugins/core/analyzers/annotation-orphan/index.ts
-var ID7 = "annotation-orphan";
+var ID8 = "annotation-orphan";
 var annotationOrphanAnalyzer = {
-  id: ID7,
+  id: ID8,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1148,7 +1316,7 @@ var annotationOrphanAnalyzer = {
     for (const orphan of orphans) {
       const expectedMdRelative = orphan.relativePath.endsWith(".sm") ? `${orphan.relativePath.slice(0, -".sm".length)}.md` : `${orphan.relativePath}.md`;
       issues.push({
-        analyzerId: ID7,
+        analyzerId: ID8,
         severity: "warn",
         nodeIds: [expectedMdRelative],
         message: tx(ANNOTATION_ORPHAN_TEXTS.message, {
@@ -1185,9 +1353,9 @@ var ANNOTATION_STALE_TEXTS = {
 };
 
 // plugins/core/analyzers/annotation-stale/index.ts
-var ID8 = "annotation-stale";
+var ID9 = "annotation-stale";
 var annotationStaleAnalyzer = {
-  id: ID8,
+  id: ID9,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1222,7 +1390,7 @@ var annotationStaleAnalyzer = {
       if (status === "fresh") continue;
       const message = status === "stale-body" ? tx(ANNOTATION_STALE_TEXTS.bodyDrift, { path: node.path }) : status === "stale-frontmatter" ? tx(ANNOTATION_STALE_TEXTS.frontmatterDrift, { path: node.path }) : tx(ANNOTATION_STALE_TEXTS.bothDrift, { path: node.path });
       issues.push({
-        analyzerId: ID8,
+        analyzerId: ID9,
         severity: "warn",
         nodeIds: [node.path],
         message,
@@ -1268,9 +1436,9 @@ var BROKEN_REF_TEXTS = {
 };
 
 // plugins/core/analyzers/broken-ref/index.ts
-var ID9 = "broken-ref";
+var ID10 = "broken-ref";
 var brokenRefAnalyzer = {
-  id: ID9,
+  id: ID10,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1339,7 +1507,7 @@ function buildIssue(link2, hintCandidates = []) {
     trigger: link2.trigger?.normalizedTrigger ?? null
   };
   const issue = {
-    analyzerId: ID9,
+    analyzerId: ID10,
     severity: "warn",
     nodeIds: [link2.source],
     message: tx(BROKEN_REF_TEXTS.message, {
@@ -1433,9 +1601,9 @@ function isPathStyleLink(link2) {
 }
 
 // plugins/core/analyzers/contribution-orphan/index.ts
-var ID10 = "contribution-orphan";
+var ID11 = "contribution-orphan";
 var contributionOrphanAnalyzer = {
-  id: ID10,
+  id: ID11,
   pluginId: "core",
   kind: "analyzer",
   version: "0.0.0",
@@ -1456,9 +1624,9 @@ var JOB_ORPHAN_FILE_TEXTS = {
 };
 
 // plugins/core/analyzers/job-orphan-file/index.ts
-var ID11 = "job-orphan-file";
+var ID12 = "job-orphan-file";
 var jobOrphanFileAnalyzer = {
-  id: ID11,
+  id: ID12,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1470,7 +1638,7 @@ var jobOrphanFileAnalyzer = {
     const issues = [];
     for (const filePath of orphans) {
       issues.push({
-        analyzerId: ID11,
+        analyzerId: ID12,
         severity: "warn",
         nodeIds: [filePath],
         message: tx(JOB_ORPHAN_FILE_TEXTS.message, { filePath }),
@@ -1488,9 +1656,9 @@ var LINK_CONFLICT_TEXTS = {
 };
 
 // plugins/core/analyzers/link-conflict/index.ts
-var ID12 = "link-conflict";
+var ID13 = "link-conflict";
 var linkConflictAnalyzer = {
-  id: ID12,
+  id: ID13,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1538,7 +1706,7 @@ var linkConflictAnalyzer = {
       const [source, target] = key.split("\0");
       const kindList = variants.map((v) => v.kind).join(" / ");
       issues.push({
-        analyzerId: ID12,
+        analyzerId: ID13,
         severity: "warn",
         nodeIds: [source, target],
         message: tx(LINK_CONFLICT_TEXTS.message, {
@@ -1553,14 +1721,7 @@ var linkConflictAnalyzer = {
   }
 };
 function rankConfidence(c) {
-  switch (c) {
-    case "high":
-      return 2;
-    case "medium":
-      return 1;
-    case "low":
-      return 0;
-  }
+  return c;
 }
 
 // kernel/util/trigger-resolve.ts
@@ -1612,9 +1773,9 @@ function resolveLinkTargetToPath(link2, nameIndex) {
 }
 
 // plugins/core/analyzers/link-counts/index.ts
-var ID13 = "link-counts";
+var ID14 = "link-counts";
 var linkCountsAnalyzer = {
-  id: ID13,
+  id: ID14,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1678,11 +1839,11 @@ function formatBreakdown(byKind, direction) {
 }
 
 // plugins/core/analyzers/stability/index.ts
-var ID14 = "stability";
+var ID15 = "stability";
 var EXPERIMENTAL_TOOLTIP = "Experimental: API may change";
 var DEPRECATED_TOOLTIP = "Deprecated: avoid in new code";
 var stabilityAnalyzer = {
-  id: ID14,
+  id: ID15,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1714,7 +1875,7 @@ var stabilityAnalyzer = {
           tooltip: EXPERIMENTAL_TOOLTIP
         });
         issues.push({
-          analyzerId: ID14,
+          analyzerId: ID15,
           severity: "info",
           nodeIds: [node.path],
           message: `Node '${node.path}' is marked experimental: API may change.`,
@@ -1727,7 +1888,7 @@ var stabilityAnalyzer = {
           severity: "warn"
         });
         issues.push({
-          analyzerId: ID14,
+          analyzerId: ID15,
           severity: "warn",
           nodeIds: [node.path],
           message: `Node '${node.path}' is marked deprecated: avoid in new code.`,
@@ -1761,9 +1922,9 @@ var SUPERSEDED_TEXTS = {
 };
 
 // plugins/core/analyzers/superseded/index.ts
-var ID15 = "superseded";
+var ID16 = "superseded";
 var supersededAnalyzer = {
-  id: ID15,
+  id: ID16,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1775,7 +1936,7 @@ var supersededAnalyzer = {
       const supersededBy = pickSupersededBy(node);
       if (supersededBy === null) continue;
       issues.push({
-        analyzerId: ID15,
+        analyzerId: ID16,
         severity: "info",
         nodeIds: [node.path],
         message: tx(SUPERSEDED_TEXTS.message, {
@@ -1824,14 +1985,14 @@ var TRIGGER_COLLISION_TEXTS = {
 };
 
 // plugins/core/analyzers/trigger-collision/index.ts
-var ID16 = "trigger-collision";
+var ID17 = "trigger-collision";
 var ADVERTISING_KINDS = /* @__PURE__ */ new Set([
   "command",
   "skill",
   "agent"
 ]);
 var triggerCollisionAnalyzer = {
-  id: ID16,
+  id: ID17,
   pluginId: "core",
   kind: "analyzer",
   mode: "deterministic",
@@ -1930,7 +2091,7 @@ function analyzeTriggerBucket(normalized, claims) {
     part: parts[0]
   });
   return {
-    analyzerId: ID16,
+    analyzerId: ID17,
     severity: "error",
     nodeIds,
     message,
@@ -1970,10 +2131,10 @@ var UNKNOWN_FIELD_TEXTS = {
 };
 
 // plugins/core/analyzers/unknown-field/index.ts
-var ID17 = "unknown-field";
+var ID18 = "unknown-field";
 var RESERVED_ROOT_BLOCKS = /* @__PURE__ */ new Set(["identity", "annotations", "settings", "audit"]);
 var unknownFieldAnalyzer = {
-  id: ID17,
+  id: ID18,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -2031,7 +2192,7 @@ var unknownFieldAnalyzer = {
         for (const key of Object.keys(annotations)) {
           if (!knownAnnotationKeys.has(key)) {
             issues.push({
-              analyzerId: ID17,
+              analyzerId: ID18,
               severity: "warn",
               nodeIds: [node.path],
               message: tx(UNKNOWN_FIELD_TEXTS.unknownAnnotationKey, {
@@ -2058,7 +2219,7 @@ var unknownFieldAnalyzer = {
             if (validator(value)) continue;
             const errors = (validator.errors ?? []).map((e) => `${e.instancePath || "(root)"} ${e.message ?? e.keyword}`).join("; ");
             issues.push({
-              analyzerId: ID17,
+              analyzerId: ID18,
               severity: "warn",
               nodeIds: [node.path],
               message: tx(UNKNOWN_FIELD_TEXTS.pluginNamespaceInvalid, {
@@ -2074,7 +2235,7 @@ var unknownFieldAnalyzer = {
           continue;
         }
         issues.push({
-          analyzerId: ID17,
+          analyzerId: ID18,
           severity: "warn",
           nodeIds: [node.path],
           message: tx(UNKNOWN_FIELD_TEXTS.unknownRootKey, {
@@ -2367,9 +2528,9 @@ var VALIDATE_ALL_TEXTS = {
 };
 
 // plugins/core/analyzers/validate-all/index.ts
-var ID18 = "validate-all";
+var ID19 = "validate-all";
 var validateAllAnalyzer = {
-  id: ID18,
+  id: ID19,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -2432,7 +2593,7 @@ function collectNodeFindings(v, node, out) {
   const result = v.validate("node", toNodeForSchema(node));
   if (result.ok) return;
   out.push({
-    analyzerId: ID18,
+    analyzerId: ID19,
     severity: "error",
     nodeIds: [node.path],
     message: tx(VALIDATE_ALL_TEXTS.nodeFailure, {
@@ -2451,7 +2612,7 @@ function collectFrontmatterBaseFindings(node, out) {
   if (isMissingStringField(fm, "description")) missing.push("description");
   if (missing.length === 0) return;
   out.push({
-    analyzerId: ID18,
+    analyzerId: ID19,
     // `warn` (not `error`) so the default `sm scan` exit code stays
     // 0 even when nodes are missing frontmatter base fields. Strict
     // mode (`sm scan --strict`) still escalates to exit 1. Matches
@@ -2473,7 +2634,7 @@ function collectLinkFindings(v, link2, out) {
   const result = v.validate("link", toLinkForSchema(link2));
   if (result.ok) return;
   out.push({
-    analyzerId: ID18,
+    analyzerId: ID19,
     severity: "error",
     nodeIds: [link2.source],
     message: tx(VALIDATE_ALL_TEXTS.linkFailure, {
@@ -2541,13 +2702,13 @@ var ASCII_FORMATTER_TEXTS = {
 };
 
 // plugins/core/formatters/ascii/index.ts
-var ID19 = "ascii";
+var ID20 = "ascii";
 var KIND_ORDER = ["agent", "command", "skill", "markdown"];
 var asciiFormatter = {
-  id: ID19,
+  id: ID20,
   pluginId: "core",
   kind: "formatter",
-  formatId: ID19,
+  formatId: ID20,
   version: "1.0.0",
   description: "Renders the scan as plain text, grouped by kind, arrows, and issues. Used by `sm scan --format=ascii`.",
   // ASCII tree formatter, header + per-kind sections + per-issue
@@ -2642,14 +2803,14 @@ function renderSection(out, kind, group) {
 }
 
 // plugins/core/formatters/json/index.ts
-var ID20 = "json";
+var ID21 = "json";
 var jsonFormatter = {
-  id: ID20,
+  id: ID21,
   pluginId: "core",
   kind: "formatter",
   version: "1.0.0",
   description: "Renders the persisted scan as JSON (conforms to `scan-result.schema.json` when the full ScanResult is available). Used by `sm graph --format json` and `GET /api/graph?format=json`.",
-  formatId: ID20,
+  formatId: ID21,
   format(ctx) {
     if (ctx.scanResult !== void 0) {
       return JSON.stringify(ctx.scanResult);
@@ -2788,10 +2949,10 @@ function resolveSpecRoot2() {
 }
 
 // plugins/core/actions/bump/index.ts
-var ID21 = "bump";
+var ID22 = "bump";
 var PLUGIN_ID = "core";
 var bumpAction = {
-  id: ID21,
+  id: ID22,
   pluginId: PLUGIN_ID,
   kind: "action",
   version: "1.0.0",
@@ -2850,10 +3011,10 @@ function pickCurrentVersion(overlay) {
 }
 
 // plugins/core/actions/mark-superseded/index.ts
-var ID22 = "mark-superseded";
+var ID23 = "mark-superseded";
 var PLUGIN_ID2 = "core";
 var markSupersededAction = {
-  id: ID22,
+  id: ID23,
   pluginId: PLUGIN_ID2,
   kind: "action",
   version: "0.0.0",
@@ -2963,7 +3124,7 @@ var UPDATE_CHECK_TEXTS = {
 // package.json
 var package_default = {
   name: "@skill-map/cli",
-  version: "0.32.0",
+  version: "0.33.0",
   description: "skill-map reference implementation \u2014 kernel + CLI + adapters.",
   license: "MIT",
   type: "module",
@@ -3044,6 +3205,7 @@ var package_default = {
     "js-yaml": "4.1.1",
     kysely: "0.28.17",
     semver: "7.7.4",
+    "smol-toml": "1.6.1",
     typanion: "3.14.0",
     ws: "8.20.0"
   },
@@ -3339,14 +3501,16 @@ var updateCheckHook = {
 
 // plugins/built-ins.ts
 var claudeProvider2 = { ...claudeProvider, pluginId: "claude" };
+var atDirectiveExtractor2 = { ...atDirectiveExtractor, pluginId: "claude" };
+var slashExtractor2 = { ...slashExtractor, pluginId: "claude" };
 var geminiProvider2 = { ...geminiProvider, pluginId: "gemini" };
+var openaiProvider2 = { ...openaiProvider, pluginId: "openai" };
 var agentSkillsProvider2 = { ...agentSkillsProvider, pluginId: "agent-skills" };
 var coreMarkdownProvider2 = { ...coreMarkdownProvider, pluginId: "core" };
 var annotationsExtractor2 = { ...annotationsExtractor, pluginId: "core" };
-var atDirectiveExtractor2 = { ...atDirectiveExtractor, pluginId: "core" };
 var externalUrlCounterExtractor2 = { ...externalUrlCounterExtractor, pluginId: "core" };
 var markdownLinkExtractor2 = { ...markdownLinkExtractor, pluginId: "core" };
-var slashExtractor2 = { ...slashExtractor, pluginId: "core" };
+var mcpToolsExtractor2 = { ...mcpToolsExtractor, pluginId: "core" };
 var toolsCountExtractor2 = { ...toolsCountExtractor, pluginId: "core" };
 var annotationOrphanAnalyzer2 = { ...annotationOrphanAnalyzer, pluginId: "core" };
 var annotationStaleAnalyzer2 = { ...annotationStaleAnalyzer, pluginId: "core" };
@@ -3371,7 +3535,9 @@ var builtInBundles = [
     granularity: "bundle",
     description: "Claude Code platform integration. Classifies files under `.claude/{agents,commands,skills}` and parses Claude-flavored frontmatter.",
     extensions: [
-      claudeProvider2
+      claudeProvider2,
+      atDirectiveExtractor2,
+      slashExtractor2
     ]
   },
   {
@@ -3382,6 +3548,14 @@ var builtInBundles = [
       geminiProvider2
     ]
   },
+  {
+    id: "openai",
+    granularity: "bundle",
+    description: "OpenAI Codex CLI platform integration. Classifies TOML sub-agent definitions under `.codex/agents/*.toml` and (future) walks the hierarchical AGENTS.md cascade. Provider for the active-lens `openai` runtime.",
+    extensions: [
+      openaiProvider2
+    ]
+  },
   {
     id: "agent-skills",
     granularity: "bundle",
@@ -3397,10 +3571,9 @@ var builtInBundles = [
     extensions: [
       coreMarkdownProvider2,
       annotationsExtractor2,
-      atDirectiveExtractor2,
       externalUrlCounterExtractor2,
       markdownLinkExtractor2,
-      slashExtractor2,
+      mcpToolsExtractor2,
       toolsCountExtractor2,
       annotationOrphanAnalyzer2,
       annotationStaleAnalyzer2,
@@ -5945,11 +6118,6 @@ var LINK_KIND_VALUES = Object.freeze([
   "mentions",
   "supersedes"
 ]);
-var CONFIDENCE_VALUES = Object.freeze([
-  "high",
-  "medium",
-  "low"
-]);
 var SEVERITY_VALUES = Object.freeze([
   "error",
   "warn",
@@ -5981,7 +6149,7 @@ function isLinkKind(s) {
   return typeof s === "string" && LINK_KIND_VALUES.includes(s);
 }
 function isConfidence(s) {
-  return typeof s === "string" && CONFIDENCE_VALUES.includes(s);
+  return typeof s === "number" && Number.isFinite(s) && s >= 0 && s <= 1;
 }
 function isSeverity(s) {
   return typeof s === "string" && SEVERITY_VALUES.includes(s);
@@ -5995,7 +6163,7 @@ function parseLinkKind(s, ctx) {
 function parseConfidence(s, ctx) {
   if (isConfidence(s)) return s;
   throw new Error(
-    `Invalid Confidence value ${formatValue(s)} at ${ctx}. Allowed: ${CONFIDENCE_VALUES.join(" | ")}.`
+    `Invalid Confidence value ${formatValue(s)} at ${ctx}. Expected a finite number in [0..1].`
   );
 }
 function parseSeverity(s, ctx) {
@@ -8794,10 +8962,45 @@ var plainParser = {
   }
 };
 
+// plugins/core/parsers/toml/index.ts
+import { parse as parseToml } from "smol-toml";
+var tomlParser = {
+  id: "toml",
+  parse(raw, _path) {
+    let parsed = {};
+    const issues = [];
+    try {
+      const doc = parseToml(raw);
+      if (doc && typeof doc === "object" && !Array.isArray(doc)) {
+        parsed = stripPrototypePollution(doc);
+      }
+    } catch (err) {
+      issues.push({
+        code: "frontmatter-parse-error",
+        message: sanitiseParseErrorMessage2(err)
+      });
+    }
+    const out = {
+      frontmatterRaw: raw,
+      frontmatter: parsed,
+      body: ""
+    };
+    if (issues.length > 0) {
+      return { ...out, issues };
+    }
+    return out;
+  }
+};
+function sanitiseParseErrorMessage2(err) {
+  const raw = err instanceof Error ? err.message : String(err);
+  return raw.replace(/[-]+/g, " ").replace(/\s+/g, " ").trim();
+}
+
 // kernel/scan/parsers/index.ts
 var REGISTRY = /* @__PURE__ */ new Map([
   [frontmatterYamlParser.id, frontmatterYamlParser],
-  [plainParser.id, plainParser]
+  [plainParser.id, plainParser],
+  [tomlParser.id, tomlParser]
 ]);
 var FROZEN_IDS = new Set(REGISTRY.keys());
 function getParser(id) {
@@ -9469,6 +9672,42 @@ function relativeIfBelow(path, cwd) {
   return rel;
 }
 
+// cli/util/scan-zone-drop.ts
+import { DatabaseSync as DatabaseSync4 } from "node:sqlite";
+
+// cli/commands/db/shared.ts
+var SAFE_SQL_IDENTIFIER_RE = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
+function assertSafeIdentifier(name) {
+  if (!SAFE_SQL_IDENTIFIER_RE.test(name)) {
+    throw new Error(`refusing to operate on non-identifier table name: ${JSON.stringify(name)}`);
+  }
+}
+
+// cli/util/scan-zone-drop.ts
+function dropScanZone(dbPath) {
+  const db = new DatabaseSync4(dbPath);
+  try {
+    const rows = db.prepare(
+      "SELECT name FROM sqlite_master WHERE type='table' AND name LIKE 'scan\\_%' ESCAPE '\\'"
+    ).all();
+    for (const r of rows) assertSafeIdentifier(r.name);
+    if (rows.length === 0) {
+      return { tableCount: 0, droppedTables: [] };
+    }
+    db.exec("BEGIN");
+    for (const { name } of rows) {
+      db.exec(`DELETE FROM "${name}"`);
+    }
+    db.exec("COMMIT");
+    return {
+      tableCount: rows.length,
+      droppedTables: rows.map((r) => r.name)
+    };
+  } finally {
+    db.close();
+  }
+}
+
 // cli/i18n/config.texts.ts
 var CONFIG_TEXTS = {
   unknownKey: "{{glyph}}  Unknown config key: {{key}}\n",
@@ -9511,6 +9750,20 @@ var CONFIG_TEXTS = {
    * screen what they just opted into.
    */
   privacyGateConfirmed: '{{glyph}}  Opening disk access for "{{key}}":\n{{paths}}\n',
+  /**
+   * Confirmation printed after `sm config set activeProvider <id>`
+   * succeeds. The lens change atomically drops the scan_* zone (per
+   * `architecture.md` §Active Provider Lens) so the persisted graph
+   * never carries stale node / link rows from the previous lens. We
+   * surface what was cleared so the operator knows their state was
+   * touched and what to do next.
+   */
+  lensSwitchedCleared: "{{glyph}}  Lens switched. Cleared {{tableCount}} scan table(s): {{tableNames}}.\n   {{hint}}\n",
+  lensSwitchedClearedHint: "Run `sm scan` to repopulate the graph under the new lens.",
+  /** Same lens-switch announcement when the DB was empty (no rows to clear). */
+  lensSwitchedEmpty: "{{glyph}}  Lens switched. Scan zone was already empty.\n   {{hint}}\n",
+  /** Lens switch happened before any `sm scan` ran (no DB file on disk yet). */
+  lensSwitchedNoDb: "{{glyph}}  Lens switched. Run `sm scan` to populate the graph under the new lens.\n",
   // --- list verb (sectioned human renderer) ----------------------------
   /** Section heading: `  General`, `  Scan`, … rendered before its rows. */
   listSectionHeader: "  {{title}}\n",
@@ -9962,8 +10215,44 @@ var ConfigSetCommand = class extends SmCommand {
         )
       })
     );
+    if (this.key === "activeProvider") {
+      this.announceLensSwitch(ctx.cwd, ansi);
+    }
     return ExitCode.Ok;
   }
+  /**
+   * Side effect of `sm config set activeProvider <id>`, atomically
+   * drops the `scan_*` zone so the persisted graph never reflects the
+   * wrong lens (see `architecture.md` §Active Provider Lens). The drop
+   * is non-destructive of `state_*` / `config_*` rows; the operator
+   * runs `sm scan` next to repopulate.
+   *
+   * Silent when no DB file exists on disk yet (fresh project that has
+   * never run `sm scan`), the lens just gets set and the next scan
+   * uses it.
+   */
+  announceLensSwitch(cwd, ansi) {
+    const dbPath = resolveDbPath({ db: void 0, cwd });
+    const okGlyph = ansi.green("\u2713");
+    if (!existsSync14(dbPath)) {
+      this.printer.info(tx(CONFIG_TEXTS.lensSwitchedNoDb, { glyph: okGlyph }));
+      return;
+    }
+    const result = dropScanZone(dbPath);
+    const hint = ansi.dim(CONFIG_TEXTS.lensSwitchedClearedHint);
+    if (result.tableCount === 0) {
+      this.printer.info(tx(CONFIG_TEXTS.lensSwitchedEmpty, { glyph: okGlyph, hint }));
+      return;
+    }
+    this.printer.info(
+      tx(CONFIG_TEXTS.lensSwitchedCleared, {
+        glyph: okGlyph,
+        tableCount: result.tableCount,
+        tableNames: result.droppedTables.join(", "),
+        hint
+      })
+    );
+  }
 };
 var ConfigResetCommand = class extends SmCommand {
   static paths = [["config", "reset"]];
@@ -11001,18 +11290,8 @@ var DbRestoreCommand = class extends SmCommand {
 
 // cli/commands/db/reset.ts
 import { rm as rm2 } from "fs/promises";
-import { DatabaseSync as DatabaseSync4 } from "node:sqlite";
+import { DatabaseSync as DatabaseSync5 } from "node:sqlite";
 import { Command as Command8, Option as Option8 } from "clipanion";
-
-// cli/commands/db/shared.ts
-var SAFE_SQL_IDENTIFIER_RE = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
-function assertSafeIdentifier(name) {
-  if (!SAFE_SQL_IDENTIFIER_RE.test(name)) {
-    throw new Error(`refusing to operate on non-identifier table name: ${JSON.stringify(name)}`);
-  }
-}
-
-// cli/commands/db/reset.ts
 var DbResetCommand = class extends SmCommand {
   static paths = [["db", "reset"]];
   static usage = Command8.Usage({
@@ -11094,7 +11373,7 @@ var DbResetCommand = class extends SmCommand {
         return ExitCode.Error;
       }
     }
-    const db = new DatabaseSync4(path);
+    const db = new DatabaseSync5(path);
     try {
       const rows = db.prepare(
         "SELECT name FROM sqlite_master WHERE type='table' AND (name LIKE 'scan\\_%' ESCAPE '\\'" + (this.state ? " OR name LIKE 'state\\_%' ESCAPE '\\'" : "") + ")"
@@ -11237,7 +11516,7 @@ var DbBrowserCommand = class extends SmCommand {
 };
 
 // cli/commands/db/dump.ts
-import { DatabaseSync as DatabaseSync5 } from "node:sqlite";
+import { DatabaseSync as DatabaseSync6 } from "node:sqlite";
 import { Command as Command11, Option as Option10 } from "clipanion";
 var DbDumpCommand = class extends SmCommand {
   static paths = [["db", "dump"]];
@@ -11279,7 +11558,7 @@ var DbDumpCommand = class extends SmCommand {
   }
 };
 function dumpDatabaseToStream(dbPath, out, tables) {
-  const db = new DatabaseSync5(dbPath, { readOnly: true });
+  const db = new DatabaseSync6(dbPath, { readOnly: true });
   try {
     out.write("PRAGMA foreign_keys=OFF;\n");
     out.write("BEGIN TRANSACTION;\n");
@@ -12745,12 +13024,22 @@ var ORCHESTRATOR_TEXTS = {
   runScanRootMissing: "runScan: root path '{{root}}' does not exist or is not a directory"
 };
 
+// kernel/types.ts
+var ConfidenceTier = Object.freeze({
+  HIGH: 0.9,
+  MEDIUM: 0.6,
+  LOW: 0.3
+});
+
 // kernel/orchestrator/extractors.ts
 async function runExtractorsForNode(opts) {
   const internalLinks = [];
   const externalLinks = [];
   const enrichmentBuffer = /* @__PURE__ */ new Map();
   const contributions = [];
+  const signals = [];
+  const virtualNodes = [];
+  const virtualNodePaths = /* @__PURE__ */ new Set();
   const validators = loadSchemaValidators();
   for (const extractor of opts.extractors) {
     const qualifiedId2 = qualifiedExtensionId(extractor.pluginId, extractor.id);
@@ -12822,6 +13111,18 @@ async function runExtractorsForNode(opts) {
         emittedAt: Date.now()
       });
     };
+    const emitSignal = (signal) => {
+      const validated = validateSignal(extractor, signal, opts.emitter);
+      if (!validated) return;
+      signals.push(validated);
+    };
+    const emitNode = (emitted) => {
+      if (virtualNodePaths.has(emitted.path)) return;
+      const node = buildVirtualNode(extractor, emitted, opts.emitter);
+      if (!node) return;
+      virtualNodePaths.add(node.path);
+      virtualNodes.push(node);
+    };
     const store = opts.pluginStores?.get(extractor.pluginId);
     const ctx = buildExtractorContext(
       extractor,
@@ -12831,6 +13132,8 @@ async function runExtractorsForNode(opts) {
       emitLink,
       enrichNode,
       emitContribution,
+      emitSignal,
+      emitNode,
       store
     );
     await extractor.extract(ctx);
@@ -12839,7 +13142,9 @@ async function runExtractorsForNode(opts) {
     internalLinks,
     externalLinks,
     enrichments: Array.from(enrichmentBuffer.values()),
-    contributions
+    contributions,
+    signals,
+    virtualNodes
   };
 }
 function readDeclaredContributions(extension) {
@@ -12864,7 +13169,7 @@ function emitExtensionError(emitter, qualifiedId2, nodePath, data) {
     })
   );
 }
-function buildExtractorContext(extractor, node, body, frontmatter, emitLink, enrichNode, emitContribution, store) {
+function buildExtractorContext(extractor, node, body, frontmatter, emitLink, enrichNode, emitContribution, emitSignal, emitNode, store) {
   const scope = extractor.scope ?? "both";
   const settings = extractor.resolvedSettings ?? {};
   return {
@@ -12875,9 +13180,62 @@ function buildExtractorContext(extractor, node, body, frontmatter, emitLink, enr
     emitLink,
     enrichNode,
     emitContribution,
+    emitSignal,
+    emitNode,
     ...store !== void 0 ? { store } : {}
   };
 }
+var VIRTUAL_NODE_PLACEHOLDER_HASH = "0".repeat(64);
+function buildVirtualNode(extractor, emitted, emitter) {
+  const qualifiedId2 = qualifiedExtensionId(extractor.pluginId, extractor.id);
+  if (typeof emitted.path !== "string" || emitted.path.length === 0) {
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "virtual-node-missing-path",
+        extensionId: qualifiedId2,
+        message: `Extractor ${qualifiedId2} emitted a virtual node with no path; dropped.`
+      })
+    );
+    return null;
+  }
+  if (typeof emitted.kind !== "string" || emitted.kind.length === 0) {
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "virtual-node-missing-kind",
+        extensionId: qualifiedId2,
+        virtualPath: emitted.path,
+        message: `Extractor ${qualifiedId2} emitted a virtual node at '${emitted.path}' with no kind; dropped.`
+      })
+    );
+    return null;
+  }
+  if (!Array.isArray(emitted.derivedFrom) || emitted.derivedFrom.length === 0) {
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "virtual-node-missing-derived-from",
+        extensionId: qualifiedId2,
+        virtualPath: emitted.path,
+        message: `Extractor ${qualifiedId2} emitted a virtual node at '${emitted.path}' with empty derivedFrom; dropped.`
+      })
+    );
+    return null;
+  }
+  const node = {
+    path: emitted.path,
+    kind: emitted.kind,
+    provider: emitted.provider,
+    bodyHash: VIRTUAL_NODE_PLACEHOLDER_HASH,
+    frontmatterHash: VIRTUAL_NODE_PLACEHOLDER_HASH,
+    bytes: { frontmatter: 0, body: 0, total: 0 },
+    linksOutCount: 0,
+    linksInCount: 0,
+    externalRefsCount: 0,
+    virtual: true,
+    derivedFrom: [...emitted.derivedFrom]
+  };
+  if (emitted.frontmatter) node.frontmatter = emitted.frontmatter;
+  return node;
+}
 function validateLink(extractor, link2, emitter) {
   const knownKinds = ["invokes", "references", "mentions", "supersedes"];
   if (!knownKinds.includes(link2.kind)) {
@@ -12898,9 +13256,68 @@ function validateLink(extractor, link2, emitter) {
     );
     return null;
   }
-  const confidence = link2.confidence ?? "medium";
+  const c = link2.confidence;
+  if (c !== void 0 && (typeof c !== "number" || !Number.isFinite(c) || c < 0 || c > 1)) {
+    const qualifiedId2 = `${extractor.pluginId}/${extractor.id}`;
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "link-confidence-out-of-range",
+        extensionId: qualifiedId2,
+        confidence: c,
+        message: `Extractor ${qualifiedId2} emitted a Link with confidence ${String(c)} outside [0..1]; dropped.`
+      })
+    );
+    return null;
+  }
+  const confidence = c ?? ConfidenceTier.MEDIUM;
   return { ...link2, confidence };
 }
+var KNOWN_LINK_KINDS = ["invokes", "references", "mentions", "supersedes"];
+function validateSignal(extractor, signal, emitter) {
+  const qualifiedId2 = qualifiedExtensionId(extractor.pluginId, extractor.id);
+  if (!Array.isArray(signal.candidates) || signal.candidates.length === 0) {
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "signal-no-candidates",
+        extensionId: qualifiedId2,
+        signal: { source: signal.source, scope: signal.scope },
+        message: `Extractor ${qualifiedId2} emitted a Signal with no candidates; dropped.`
+      })
+    );
+    return null;
+  }
+  for (const candidate of signal.candidates) {
+    if (!isValidSignalCandidate(qualifiedId2, candidate, emitter)) return null;
+  }
+  return signal;
+}
+function isValidSignalCandidate(qualifiedId2, candidate, emitter) {
+  if (!KNOWN_LINK_KINDS.includes(candidate.kind)) {
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "signal-candidate-kind-not-declared",
+        extensionId: qualifiedId2,
+        candidateKind: candidate.kind,
+        declaredKinds: KNOWN_LINK_KINDS,
+        message: `Extractor ${qualifiedId2} emitted a Signal candidate with off-enum kind '${String(candidate.kind)}'; dropped.`
+      })
+    );
+    return false;
+  }
+  const c = candidate.confidence;
+  if (typeof c !== "number" || !Number.isFinite(c) || c < 0 || c > 1) {
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "signal-candidate-confidence-out-of-range",
+        extensionId: qualifiedId2,
+        confidence: candidate.confidence,
+        message: `Extractor ${qualifiedId2} emitted a Signal candidate with confidence ${String(c)} outside [0..1]; dropped.`
+      })
+    );
+    return false;
+  }
+  return true;
+}
 function dedupeLinks(links) {
   const out = /* @__PURE__ */ new Map();
   for (const link2 of links) {
@@ -12947,7 +13364,9 @@ function recomputeExternalRefsCount(nodes, externalLinks, cachedPaths) {
   }
 }
 var EXTERNAL_URL_SCHEME_RE = /^[a-z][a-z0-9+\-.]+:/i;
+var VIRTUAL_NODE_SCHEME_RE = /^mcp:\/\//i;
 function isExternalUrlLink(link2) {
+  if (VIRTUAL_NODE_SCHEME_RE.test(link2.target)) return false;
   return EXTERNAL_URL_SCHEME_RE.test(link2.target);
 }
 
@@ -13106,13 +13525,9 @@ function originatingNodeOf(link2, priorNodePaths) {
 }
 function computeCacheDecision(opts) {
   const applicableExtractors = opts.extractors.filter((ex) => {
-    const kinds = ex.precondition?.kind;
-    if (!kinds || kinds.length === 0) return true;
-    return kinds.some((qualified) => {
-      const slashIdx = qualified.indexOf("/");
-      const kindOnly = slashIdx === -1 ? qualified : qualified.slice(slashIdx + 1);
-      return kindOnly === opts.kind;
-    });
+    if (!matchesKindPrecondition(ex, opts.kind)) return false;
+    if (!matchesProviderPrecondition(ex, opts.provider)) return false;
+    return true;
   });
   const applicableQualifiedIds = new Set(
     applicableExtractors.map((ex) => qualifiedExtensionId(ex.pluginId, ex.id))
@@ -13126,6 +13541,20 @@ function computeCacheDecision(opts) {
     fullCacheHit: opts.nodeHashCacheEligible && split.missingExtractors.length === 0
   };
 }
+function matchesKindPrecondition(ex, kind) {
+  const kinds = ex.precondition?.kind;
+  if (!kinds || kinds.length === 0) return true;
+  return kinds.some((qualified) => {
+    const slashIdx = qualified.indexOf("/");
+    const kindOnly = slashIdx === -1 ? qualified : qualified.slice(slashIdx + 1);
+    return kindOnly === kind;
+  });
+}
+function matchesProviderPrecondition(ex, provider) {
+  const providers = ex.precondition?.provider;
+  if (!providers || providers.length === 0) return true;
+  return providers.includes(provider);
+}
 function splitLegacy(applicableExtractors, applicableQualifiedIds, nodeHashCacheEligible) {
   const cachedQualifiedIds = /* @__PURE__ */ new Set();
   const missingExtractors = [];
@@ -13235,7 +13664,7 @@ function findHighConfidenceRenames(opts) {
       if (opts.claimedNew.has(toPath)) continue;
       const toNode = opts.currentByPath.get(toPath);
       if (toNode.bodyHash === fromNode.bodyHash) {
-        ops.push({ from: fromPath, to: toPath, confidence: "high" });
+        ops.push({ from: fromPath, to: toPath, confidence: ConfidenceTier.HIGH });
         opts.claimedDeleted.add(fromPath);
         opts.claimedNew.add(toPath);
         break;
@@ -13270,13 +13699,13 @@ function claimSingletonRenames(opts) {
     const remaining = candidates.filter((p) => !opts.claimedDeleted.has(p));
     if (remaining.length === 1) {
       const fromPath = remaining[0];
-      ops.push({ from: fromPath, to: toPath, confidence: "medium" });
+      ops.push({ from: fromPath, to: toPath, confidence: ConfidenceTier.MEDIUM });
       opts.issues.push({
         analyzerId: "auto-rename-medium",
         severity: "warn",
         nodeIds: [toPath],
         message: `Auto-rename (medium confidence): ${fromPath} \u2192 ${toPath}`,
-        data: { from: fromPath, to: toPath, confidence: "medium" }
+        data: { from: fromPath, to: toPath, confidence: ConfidenceTier.MEDIUM }
       });
       opts.claimedDeleted.add(fromPath);
       opts.claimedNew.add(toPath);
@@ -13714,6 +14143,7 @@ async function processRawNode(raw, provider, wctx, accum, claimedPaths, nextInde
   const cacheDecision = computeCacheDecision({
     extractors: wctx.opts.extractors,
     kind,
+    provider: provider.id,
     nodePath: raw.path,
     bodyHash,
     sidecarAnnotationsHash,
@@ -13816,6 +14246,10 @@ function mergeExtractResult(extractResult, accum) {
     accum.enrichmentBuffer.set(`${enr.nodePath}\0${enr.extractorId}`, enr);
   }
   for (const c of extractResult.contributions) accum.contributionsBuffer.push(c);
+  for (const vn of extractResult.virtualNodes) {
+    if (accum.nodes.some((n) => n.path === vn.path)) continue;
+    accum.nodes.push(vn);
+  }
 }
 function isPartialCacheHit(ctx) {
   return ctx.nodeHashCacheEligible && ctx.cacheDecision.cachedQualifiedIds.size > 0 && ctx.priorNode !== void 0;
@@ -19389,7 +19823,7 @@ function renderDeltaIssues(issues) {
 
 // cli/commands/serve.ts
 import { spawn as spawn2 } from "child_process";
-import { existsSync as existsSync28 } from "fs";
+import { existsSync as existsSync30 } from "fs";
 import { Command as Command33, Option as Option31 } from "clipanion";
 
 // cli/util/browser-launch.ts
@@ -19411,7 +19845,7 @@ import { WebSocketServer } from "ws";
 // server/app.ts
 import { Hono } from "hono";
 import { bodyLimit } from "hono/body-limit";
-import { HTTPException as HTTPException14 } from "hono/http-exception";
+import { HTTPException as HTTPException15 } from "hono/http-exception";
 
 // core/config/service.ts
 var ConfigService = class {
@@ -19719,7 +20153,20 @@ var SERVER_TEXTS = {
   // is a synthetic `emitter.error` event; v14.4.a does not yet route
   // it through the broadcaster (would re-enter the same stringify
   // path), so we degrade to a logged warning.
-  wsBroadcastSerializeFailed: "skill-map server: ws broadcast dropped, failed to serialize event: {{message}}.\n"
+  wsBroadcastSerializeFailed: "skill-map server: ws broadcast dropped, failed to serialize event: {{message}}.\n",
+  // ---- active-provider route (routes/active-provider.ts) -----------
+  //
+  // GET / PUT /api/active-provider. The active provider lens selects
+  // which provider's extractors / classifiers / resolution rules apply
+  // to the whole project (see `architecture.md` §Active Provider Lens).
+  // Changing the lens drops the `scan_*` zone atomically and prompts
+  // the user to re-scan; `state_*` and `config_*` survive.
+  activeProviderBodyNotJson: "Request body must be valid JSON.",
+  activeProviderBodyNotObject: "Request body must be a JSON object.",
+  activeProviderBodyMissing: "Request body must include `activeProvider` (a non-empty string).",
+  activeProviderValueNotString: "`activeProvider` must be a string.",
+  activeProviderValueEmpty: "`activeProvider` cannot be the empty string. Send the id of an enabled provider.",
+  activeProviderPersistFailed: "Could not persist activeProvider: {{message}}"
 };
 
 // server/loopback-gate.ts
@@ -20606,11 +21053,6 @@ function registerPluginsRoute(app, deps) {
         message: tx(SERVER_TEXTS.pluginsUnknown, { id: bundleId })
       });
     }
-    if (granularityOf(handle) !== "extension") {
-      throw new HTTPException8(400, {
-        message: tx(SERVER_TEXTS.pluginsGranularityBundleExpected, { id: bundleId })
-      });
-    }
     if (!hasExtension(handle, extensionId)) {
       throw new HTTPException8(404, {
         message: tx(SERVER_TEXTS.pluginsExtensionUnknown, { bundleId, extensionId })
@@ -20651,7 +21093,7 @@ function buildBuiltInItems(resolveEnabled) {
   return builtInBundles.map((bundle) => {
     const bundleEnabled = resolveEnabled(bundle.id);
     const bundleLocked = isPluginLocked(bundle.id);
-    const extensions = bundle.granularity === "extension" ? bundle.extensions.map((ext) => {
+    const extensions = bundle.extensions.map((ext) => {
       const qualified = qualifiedExtensionId(bundle.id, ext.id);
       const extLocked = bundleLocked || isPluginLocked(qualified);
       return {
@@ -20662,7 +21104,7 @@ function buildBuiltInItems(resolveEnabled) {
         ...ext.description ? { description: ext.description } : {},
         ...extLocked ? { locked: true } : {}
       };
-    }) : void 0;
+    });
     return {
       id: bundle.id,
       version: firstVersion(bundle.extensions),
@@ -20672,7 +21114,7 @@ function buildBuiltInItems(resolveEnabled) {
       source: "built-in",
       granularity: bundle.granularity,
       description: bundle.description,
-      ...extensions ? { extensions } : {},
+      ...extensions.length > 0 ? { extensions } : {},
       ...bundleLocked ? { locked: true } : {}
     };
   });
@@ -20705,8 +21147,8 @@ function optionalDiscoveredFields(plugin, extensions) {
   if (extensions) out.extensions = extensions;
   return out;
 }
-function projectExtensionRows(plugin, granularity, resolveEnabled, bundleLocked) {
-  if (granularity !== "extension" || !plugin.extensions) return void 0;
+function projectExtensionRows(plugin, _granularity, resolveEnabled, bundleLocked) {
+  if (!plugin.extensions || plugin.extensions.length === 0) return void 0;
   return plugin.extensions.map((ext) => {
     const description = readInstanceDescription(ext.instance);
     const qualified = qualifiedExtensionId(plugin.id, ext.id);
@@ -20823,13 +21265,6 @@ function validateBulkChange(change, deps) {
       message: tx(SERVER_TEXTS.pluginsUnknown, { id: bundleId })
     };
   }
-  if (granularityOf(handle) !== "extension") {
-    return {
-      status: 400,
-      code: "bad-query",
-      message: tx(SERVER_TEXTS.pluginsGranularityBundleExpected, { id: bundleId })
-    };
-  }
   if (!hasExtension(handle, extensionId)) {
     return {
       status: 404,
@@ -21309,9 +21744,106 @@ var parsePatchBody4 = makeBodyValidator(PATCH_BODY_SCHEMA3, {
   }
 });
 
-// server/routes/scan.ts
+// server/routes/active-provider.ts
+import { existsSync as existsSync27 } from "fs";
 import { HTTPException as HTTPException12 } from "hono/http-exception";
 
+// core/config/active-provider.ts
+import { existsSync as existsSync26 } from "fs";
+import { join as join17 } from "path";
+var DETECTION_RULES = [
+  { providerId: "claude", marker: ".claude" },
+  { providerId: "gemini", marker: ".gemini" },
+  { providerId: "openai", marker: ".codex" },
+  { providerId: "openai", marker: "AGENTS.md" },
+  { providerId: "cursor", marker: ".cursor" }
+];
+function resolveActiveProvider(cwd) {
+  const detected = detectProvidersFromFilesystem(cwd);
+  const fromConfig = readConfigValue("activeProvider", { cwd });
+  if (typeof fromConfig === "string" && fromConfig.length > 0) {
+    return { resolved: fromConfig, source: "config", detected };
+  }
+  if (detected.length > 0) {
+    return { resolved: detected[0], source: "autodetect", detected };
+  }
+  return { resolved: null, source: "none", detected };
+}
+function detectProvidersFromFilesystem(cwd) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const rule of DETECTION_RULES) {
+    if (seen.has(rule.providerId)) continue;
+    if (!existsSync26(join17(cwd, rule.marker))) continue;
+    seen.add(rule.providerId);
+    out.push(rule.providerId);
+  }
+  return out;
+}
+
+// server/routes/active-provider.ts
+function registerActiveProviderRoute(app, deps) {
+  app.get("/api/active-provider", (c) => {
+    return c.json(buildEnvelope4(deps));
+  });
+  app.patch("/api/active-provider", async (c) => {
+    const body = await parsePatchBody5(c.req.raw);
+    const result = applyLensSwitch(deps, body.activeProvider);
+    deps.configService.reload();
+    return c.json({ ...buildEnvelope4(deps), switch: result });
+  });
+}
+function buildEnvelope4(deps) {
+  const r = resolveActiveProvider(deps.runtimeContext.cwd);
+  return {
+    activeProvider: r.resolved,
+    detected: r.detected,
+    source: r.source
+  };
+}
+function applyLensSwitch(deps, newValue) {
+  const cwd = deps.runtimeContext.cwd;
+  try {
+    writeConfigValue("activeProvider", newValue, { target: "project", cwd });
+  } catch (err) {
+    throw new HTTPException12(400, {
+      message: tx(SERVER_TEXTS.activeProviderPersistFailed, {
+        message: formatErrorMessage(err)
+      })
+    });
+  }
+  const dbPath = resolveDbPath({ db: void 0, cwd });
+  if (!existsSync27(dbPath)) return { dropped: null };
+  const dropResult = dropScanZone(dbPath);
+  return {
+    dropped: {
+      tableCount: dropResult.tableCount,
+      tableNames: dropResult.droppedTables
+    }
+  };
+}
+var PATCH_BODY_SCHEMA4 = {
+  type: "object",
+  additionalProperties: false,
+  required: ["activeProvider"],
+  properties: {
+    activeProvider: { type: "string", minLength: 1 }
+  }
+};
+var parsePatchBody5 = makeBodyValidator(PATCH_BODY_SCHEMA4, {
+  notJson: SERVER_TEXTS.activeProviderBodyNotJson,
+  notObject: SERVER_TEXTS.activeProviderBodyNotObject,
+  invalid: SERVER_TEXTS.activeProviderBodyMissing,
+  mapping: {
+    ":required": SERVER_TEXTS.activeProviderBodyMissing,
+    "/activeProvider:type:string": SERVER_TEXTS.activeProviderValueNotString,
+    "/activeProvider:minLength": SERVER_TEXTS.activeProviderValueEmpty
+  }
+});
+
+// server/routes/scan.ts
+import { HTTPException as HTTPException13 } from "hono/http-exception";
+
 // server/scan-mutex.ts
 var inFlight = null;
 async function withScanMutex(fn) {
@@ -21465,7 +21997,7 @@ function registerScanRoute(app, deps) {
 }
 async function runPersistedScan(c, deps) {
   if (deps.options.noBuiltIns || deps.options.noPlugins) {
-    throw new HTTPException12(400, { message: SERVER_TEXTS.scanPostRequiresFullPipeline });
+    throw new HTTPException13(400, { message: SERVER_TEXTS.scanPostRequiresFullPipeline });
   }
   const dbExists = await tryWithSqlite(
     { databasePath: deps.options.dbPath, autoBackup: false },
@@ -21494,7 +22026,7 @@ async function runPersistedScan(c, deps) {
         emitterFactory: () => buildBroadcasterEmitter(deps.broadcaster)
       });
       if (outcome.kind !== "ok") {
-        throw new HTTPException12(500, {
+        throw new HTTPException13(500, {
           message: outcome.kind === "guard-trip" ? tx(SERVER_TEXTS.scanGuardTrip, { existing: outcome.existing }) : outcome.message
         });
       }
@@ -21502,7 +22034,7 @@ async function runPersistedScan(c, deps) {
     });
   } catch (err) {
     if (err instanceof ScanBusyError) {
-      throw new HTTPException12(409, { message: SERVER_TEXTS.scanPostBusy });
+      throw new HTTPException13(409, { message: SERVER_TEXTS.scanPostBusy });
     }
     throw err;
   }
@@ -21566,7 +22098,7 @@ function groupTagsBySource2(rows) {
 }
 async function runFreshScan(deps) {
   if (deps.options.noBuiltIns || deps.options.noPlugins) {
-    throw new HTTPException12(400, { message: SERVER_TEXTS.freshScanRequiresPipeline });
+    throw new HTTPException13(400, { message: SERVER_TEXTS.freshScanRequiresPipeline });
   }
   const resolveEnabledOverride = await buildBffResolverOverride(deps);
   const outcome = await runScanForCommand({
@@ -21595,7 +22127,7 @@ async function runFreshScan(deps) {
     printer: bffScanRunnerPrinter
   });
   if (outcome.kind !== "ok") {
-    throw new HTTPException12(500, {
+    throw new HTTPException13(500, {
       message: outcome.kind === "guard-trip" ? tx(SERVER_TEXTS.freshScanGuardTrip, { existing: outcome.existing }) : outcome.message
     });
   }
@@ -21629,7 +22161,7 @@ function emptyScanResult() {
 }
 
 // server/routes/sidecar.ts
-import { HTTPException as HTTPException13 } from "hono/http-exception";
+import { HTTPException as HTTPException14 } from "hono/http-exception";
 import { resolve as resolve34 } from "path";
 var STATUS_FRESH = "fresh";
 var ENVELOPE_KIND2 = "sidecar.bumped";
@@ -21666,11 +22198,11 @@ function registerSidecarRoutes(app, deps) {
       assertContained(deps.runtimeContext.cwd, node.path);
       absPath = resolve34(deps.runtimeContext.cwd, node.path);
     } catch (err) {
-      throw new HTTPException13(500, { message: formatErrorMessage(err) });
+      throw new HTTPException14(500, { message: formatErrorMessage(err) });
     }
     const result = invokeBump2(node, absPath, body);
     if (result.report.ok === false && result.report.reason === "fresh") {
-      throw new HTTPException13(409, { message: SERVER_TEXTS.sidecarFreshRefusal });
+      throw new HTTPException14(409, { message: SERVER_TEXTS.sidecarFreshRefusal });
     }
     if (result.report.ok === true && result.report.noop === true) {
       const envelope2 = {
@@ -21697,7 +22229,7 @@ function registerSidecarRoutes(app, deps) {
       }
     } catch (err) {
       if (err instanceof EConsentRequiredError) throw err;
-      throw new HTTPException13(500, { message: formatErrorMessage(err) });
+      throw new HTTPException14(500, { message: formatErrorMessage(err) });
     }
     if (body.confirm === true) {
       deps.configService.reload();
@@ -21734,7 +22266,7 @@ async function loadNode(deps, nodePath) {
   );
   const node = persisted?.nodes.find((n) => n.path === nodePath);
   if (!node) {
-    throw new HTTPException13(404, {
+    throw new HTTPException14(404, {
       message: tx(SERVER_TEXTS.nodeNotFound, { path: sanitizeForTerminal(nodePath) })
     });
   }
@@ -21742,7 +22274,7 @@ async function loadNode(deps, nodePath) {
 }
 function invokeBump2(node, absPath, body) {
   if (!bumpAction.invoke) {
-    throw new HTTPException13(500, { message: SERVER_TEXTS.sidecarBumpInvokeMissing });
+    throw new HTTPException14(500, { message: SERVER_TEXTS.sidecarBumpInvokeMissing });
   }
   const input = {};
   if (body.force === true) input.force = true;
@@ -21788,9 +22320,9 @@ function registerUpdateStatusRoute(app, deps) {
 }
 
 // server/static.ts
-import { existsSync as existsSync26 } from "fs";
+import { existsSync as existsSync28 } from "fs";
 import { readFile as readFile5 } from "fs/promises";
-import { extname, join as join17 } from "path";
+import { extname, join as join18 } from "path";
 import { serveStatic } from "@hono/node-server/serve-static";
 var INDEX_HTML = "index.html";
 var PLACEHOLDER_HTML = `<!doctype html>
@@ -21842,8 +22374,8 @@ function createSpaFallback(opts) {
   return async (c, _next) => {
     if (c.req.method !== "GET" && c.req.method !== "HEAD") return c.notFound();
     if (opts.uiDist === null) return htmlResponse(c, placeholder);
-    const indexPath = join17(opts.uiDist, INDEX_HTML);
-    if (!existsSync26(indexPath)) return htmlResponse(c, placeholder);
+    const indexPath = join18(opts.uiDist, INDEX_HTML);
+    if (!existsSync28(indexPath)) return htmlResponse(c, placeholder);
     return fileResponse(c, indexPath);
   };
 }
@@ -21929,13 +22461,13 @@ function attachBroadcasterRoute(app, broadcaster) {
 
 // server/app.ts
 var BODY_LIMIT_BYTES = 1024 * 1024;
-var DbMissingError = class extends HTTPException14 {
+var DbMissingError = class extends HTTPException15 {
   constructor(message) {
     super(500, { message });
     this.name = "DbMissingError";
   }
 };
-var BulkValidationError = class extends HTTPException14 {
+var BulkValidationError = class extends HTTPException15 {
   id;
   code;
   constructor(init) {
@@ -21945,7 +22477,7 @@ var BulkValidationError = class extends HTTPException14 {
     this.code = init.code;
   }
 };
-var LoopbackGateError = class extends HTTPException14 {
+var LoopbackGateError = class extends HTTPException15 {
   code;
   constructor(init) {
     super(403, { message: init.message });
@@ -21965,7 +22497,7 @@ function createApp(deps) {
     bodyLimit({
       maxSize: BODY_LIMIT_BYTES,
       onError: () => {
-        throw new HTTPException14(413, { message: tx(SERVER_TEXTS.bodyTooLarge, { maxBytes: String(BODY_LIMIT_BYTES) }) });
+        throw new HTTPException15(413, { message: tx(SERVER_TEXTS.bodyTooLarge, { maxBytes: String(BODY_LIMIT_BYTES) }) });
       }
     })
   );
@@ -22006,9 +22538,10 @@ function createApp(deps) {
   registerUpdateStatusRoute(app, routeDeps);
   registerPreferencesRoute(app, routeDeps);
   registerProjectPreferencesRoute(app, routeDeps);
+  registerActiveProviderRoute(app, routeDeps);
   registerProjectIgnoreRoute(app, routeDeps);
   app.all("/api/*", (c) => {
-    throw new HTTPException14(404, {
+    throw new HTTPException15(404, {
       message: tx(SERVER_TEXTS.unknownApiEndpoint, { path: sanitizeForTerminal(c.req.path) })
     });
   });
@@ -22016,7 +22549,7 @@ function createApp(deps) {
   app.use("*", createStaticHandler({ uiDist: deps.options.uiDist, noUi: deps.options.noUi }));
   app.get("*", createSpaFallback({ uiDist: deps.options.uiDist, noUi: deps.options.noUi }));
   app.notFound((c) => {
-    throw new HTTPException14(404, {
+    throw new HTTPException15(404, {
       message: tx(SERVER_TEXTS.unknownPath, { path: sanitizeForTerminal(c.req.path) })
     });
   });
@@ -22071,7 +22604,7 @@ function formatError2(err, c) {
     };
     return c.json(envelope, 403);
   }
-  if (err instanceof HTTPException14) {
+  if (err instanceof HTTPException15) {
     const status = err.status;
     const envelope = {
       ok: false,
@@ -22414,10 +22947,10 @@ function validateNoUi(noUi, uiDist) {
 }
 
 // server/paths.ts
-import { existsSync as existsSync27, statSync as statSync11 } from "fs";
-import { dirname as dirname18, isAbsolute as isAbsolute9, join as join18, resolve as resolve35 } from "path";
+import { existsSync as existsSync29, statSync as statSync11 } from "fs";
+import { dirname as dirname18, isAbsolute as isAbsolute9, join as join19, resolve as resolve35 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
-var DEFAULT_UI_REL = join18("ui", "dist", "ui", "browser");
+var DEFAULT_UI_REL = join19("ui", "dist", "ui", "browser");
 var PACKAGE_UI_REL = "ui";
 var INDEX_HTML2 = "index.html";
 function resolveDefaultUiDist(ctx) {
@@ -22429,10 +22962,10 @@ function resolveExplicitUiDist(ctx, raw) {
   return isAbsolute9(raw) ? raw : resolve35(ctx.cwd, raw);
 }
 function isUiBundleDir(path) {
-  if (!existsSync27(path)) return false;
+  if (!existsSync29(path)) return false;
   try {
     if (!statSync11(path).isDirectory()) return false;
-    return existsSync27(join18(path, INDEX_HTML2));
+    return existsSync29(join19(path, INDEX_HTML2));
   } catch {
     return false;
   }
@@ -22449,9 +22982,9 @@ function resolvePackageBundledUi() {
 function resolvePackageBundledUiFrom(here) {
   let current = here;
   for (let i = 0; i < 8; i++) {
-    const candidate = join18(current, PACKAGE_UI_REL);
+    const candidate = join19(current, PACKAGE_UI_REL);
     if (isUiBundleDir(candidate)) return candidate;
-    const distHere = join18(current, "dist", PACKAGE_UI_REL);
+    const distHere = join19(current, "dist", PACKAGE_UI_REL);
     if (isUiBundleDir(distHere)) return distHere;
     const parent = dirname18(current);
     if (parent === current) return null;
@@ -22462,7 +22995,7 @@ function resolvePackageBundledUiFrom(here) {
 function walkUpForUi(startDir) {
   let current = resolve35(startDir);
   for (let i = 0; i < 64; i++) {
-    const candidate = join18(current, DEFAULT_UI_REL);
+    const candidate = join19(current, DEFAULT_UI_REL);
     if (isUiBundleDir(candidate)) return candidate;
     const parent = dirname18(current);
     if (parent === current) return null;
@@ -22896,7 +23429,7 @@ var ServeCommand = class extends SmCommand {
       return ExitCode.Error;
     }
     const dbPath = resolveDbPath({ db: this.db, ...runtimeCtx });
-    if (this.db !== void 0 && !existsSync28(dbPath)) {
+    if (this.db !== void 0 && !existsSync30(dbPath)) {
       this.printer.info(
         tx(SERVE_TEXTS.dbNotFound, { path: sanitizeForTerminal(dbPath) })
       );
@@ -23307,22 +23840,27 @@ function renderLinksSection(direction, links, ansi) {
   const aggregated = aggregateLinks(links, projectField);
   const headerTpl = direction === "out" ? SHOW_TEXTS.linksOutSection : SHOW_TEXTS.linksInSection;
   const kindWidth = Math.max(...aggregated.map((g) => g.kind.length));
-  const confWidth = Math.max(...aggregated.map((g) => g.confidence.length));
+  const confLabels = aggregated.map((g) => formatConfidence(g.confidence));
+  const confWidth = Math.max(...confLabels.map((l) => l.length));
   const lines = [tx(headerTpl, { count: links.length })];
-  for (const grp of aggregated) {
+  aggregated.forEach((grp, idx) => {
     const dup = grp.rowCount > 1 ? ansi.dim(tx(SHOW_TEXTS.linkDup, { count: grp.rowCount })) : "";
     lines.push(
       tx(SHOW_TEXTS.linkRow, {
         arrow: ansi.dim(arrow),
         kind: sanitizeForTerminal(grp.kind).padEnd(kindWidth),
-        confidence: ansi.dim(grp.confidence.padEnd(confWidth)),
+        confidence: ansi.dim(confLabels[idx].padEnd(confWidth)),
         endpoint: sanitizeForTerminal(grp.endpoint),
         dup
       })
     );
-  }
+  });
   return lines.join("");
 }
+function formatConfidence(c) {
+  if (typeof c !== "number" || !Number.isFinite(c)) return "?";
+  return `${Math.round(c * 100)}%`;
+}
 function renderIssuesSection(issues, nodePath, ansi) {
   const lines = [tx(SHOW_TEXTS.issuesSection, { count: issues.length })];
   const analyzerWidth = Math.max(
@@ -23389,17 +23927,12 @@ function aggregateLinks(links, endpointSide) {
     return a.kind.localeCompare(b.kind);
   });
 }
-var CONFIDENCE_RANK = {
-  high: 2,
-  medium: 1,
-  low: 0
-};
 function rankConfidenceForGrouping(c) {
-  return CONFIDENCE_RANK[c];
+  return c;
 }
 
 // cli/commands/sidecar.ts
-import { existsSync as existsSync29, unlinkSync as unlinkSync2 } from "fs";
+import { existsSync as existsSync31, unlinkSync as unlinkSync2 } from "fs";
 import { resolve as resolve36 } from "path";
 import { Command as Command35, Option as Option33 } from "clipanion";
 
@@ -23840,7 +24373,7 @@ var SidecarAnnotateCommand = class extends SmCommand {
       return ExitCode.Error;
     }
     const sidecarAbsPath = sidecarPathFor(absPath);
-    if (existsSync29(sidecarAbsPath) && this.force !== true) {
+    if (existsSync31(sidecarAbsPath) && this.force !== true) {
       this.printer.error(
         tx(SIDECAR_TEXTS.annotateExists, {
           glyph: errGlyph,
@@ -23850,7 +24383,7 @@ var SidecarAnnotateCommand = class extends SmCommand {
       );
       return ExitCode.Error;
     }
-    if (existsSync29(sidecarAbsPath) && this.force === true) {
+    if (existsSync31(sidecarAbsPath) && this.force === true) {
       try {
         unlinkSync2(sidecarAbsPath);
       } catch (err) {
@@ -24080,8 +24613,8 @@ var STUB_COMMANDS = [
 ];
 
 // cli/commands/tutorial.ts
-import { cpSync as cpSync2, existsSync as existsSync30, mkdirSync as mkdirSync7, rmSync as rmSync2, statSync as statSync12 } from "fs";
-import { dirname as dirname19, join as join19, resolve as resolve37 } from "path";
+import { cpSync as cpSync2, existsSync as existsSync32, mkdirSync as mkdirSync7, rmSync as rmSync2, statSync as statSync12 } from "fs";
+import { dirname as dirname19, join as join20, resolve as resolve37 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
 import { Command as Command37, Option as Option35 } from "clipanion";
 
@@ -24177,9 +24710,9 @@ var TutorialCommand = class extends SmCommand {
     }
     const variant = rawVariant ?? DEFAULT_VARIANT;
     const spec = VARIANT_SPECS[variant];
-    const targetDir = join19(ctx.cwd, ".claude", "skills", spec.slug);
+    const targetDir = join20(ctx.cwd, ".claude", "skills", spec.slug);
     const targetDisplay = `.claude/skills/${spec.slug}/`;
-    if (existsSync30(targetDir) && !this.force) {
+    if (existsSync32(targetDir) && !this.force) {
       this.printer.error(
         tx(TUTORIAL_TEXTS.alreadyExists, {
           glyph: errGlyph,
@@ -24262,7 +24795,7 @@ function resolveSkillSourceDir(variant) {
     resolve37(here, "../cli/tutorial", spec.slug)
   ];
   for (const candidate of candidates) {
-    if (existsSync30(candidate) && statSync12(candidate).isDirectory()) {
+    if (existsSync32(candidate) && statSync12(candidate).isDirectory()) {
       cachedSourceDirs.set(variant, candidate);
       return candidate;
     }
@@ -24439,7 +24972,7 @@ await lifecycleDispatcher.dispatch(
 process.exit(exitCode);
 function resolveBareDefault() {
   const ctx = defaultRuntimeContext();
-  if (existsSync31(defaultProjectDbPath(ctx))) {
+  if (existsSync33(defaultProjectDbPath(ctx))) {
     return ["serve"];
   }
   process.stderr.write(tx(ENTRY_TEXTS.bareNoProject, { cwd: ctx.cwd }));