@skill-map/cli 0.32.0 → 0.34.0

package/dist/cli.js

@@ -1,5 +1,5 @@
 // cli/entry.ts
-import { existsSync as existsSync31 } from "fs";
+import { existsSync as existsSync33 } from "fs";
 import { Builtins, Cli as Cli2 } from "clipanion";
 
 // kernel/adapters/in-memory-progress.ts
@@ -494,6 +494,31 @@ var claudeProvider = {
         colorDark: "#34d399",
         icon: { kind: "pi", id: "pi-bolt" }
       }
+    },
+    /**
+     * Phase 5 of the active-lens migration: MCP servers surface as
+     * synthetic / virtual nodes (no filesystem path; identifier is
+     * `mcp://<name>`) derived from a config file (`settings.json`
+     * for Claude). Per-skill / per-agent references appear as
+     * `tools: [mcp__<server>__<tool>, ...]` entries in frontmatter;
+     * the `core/mcp-tools` extractor turns each match into one
+     * MCP node (idempotent dedup by path) plus a `references` link
+     * from the source skill / agent to that node.
+     *
+     * `schema` is provider-agnostic enough that we reuse the skill
+     * schema for now (mcp nodes have `name` + `description` at most,
+     * which the base skill schema accepts). A dedicated schema lands
+     * if MCP nodes grow Claude-specific metadata.
+     */
+    mcp: {
+      schema: "./schemas/skill.schema.json",
+      schemaJson: skill_schema_default,
+      ui: {
+        label: "MCP servers",
+        color: "#8b5cf6",
+        colorDark: "#a78bfa",
+        icon: { kind: "pi", id: "pi-server" }
+      }
     }
   },
   // Auxiliary schemas the per-kind schemas $ref by $id. AJV needs them
@@ -506,11 +531,181 @@ var claudeProvider = {
     const lower = path.toLowerCase();
     if (lower.startsWith(".claude/agents/")) return "agent";
     if (lower.startsWith(".claude/commands/")) return "command";
-    if (lower.startsWith(".claude/skills/")) return "skill";
+    if (/^\.claude\/skills\/[^/]+\/skill\.md$/.test(lower)) return "skill";
     return null;
   }
 };
 
+// plugins/claude/extractors/at-directive/index.ts
+import { posix as pathPosix } from "path";
+
+// kernel/util/strip-code-blocks.ts
+var FENCE_RE = /^(?<indent> {0,3})(?<fence>`{3,}|~{3,})/;
+function stripCodeBlocks(input) {
+  if (!input) return input;
+  const fenceless = stripFences(input);
+  return stripInline(fenceless);
+}
+function stripFences(input) {
+  const out = [];
+  const lines = input.split("\n");
+  let openFence = null;
+  for (const line of lines) {
+    if (openFence) {
+      const closer = matchClosingFence(line, openFence);
+      if (closer) {
+        out.push(blank(line));
+        openFence = null;
+      } else {
+        out.push(blank(line));
+      }
+      continue;
+    }
+    const open = FENCE_RE.exec(line);
+    if (open?.groups) {
+      openFence = open.groups["fence"];
+      out.push(blank(line));
+      continue;
+    }
+    out.push(line);
+  }
+  return out.join("\n");
+}
+function matchClosingFence(line, openFence) {
+  const m = FENCE_RE.exec(line);
+  if (!m?.groups) return false;
+  const fence = m.groups["fence"];
+  return fence[0] === openFence[0] && fence.length >= openFence.length;
+}
+function stripInline(input) {
+  return input.replace(/(`+)([\s\S]*?)\1/g, (_full, ticks, body) => {
+    return ticks.replace(/`/g, " ") + blank(body) + ticks.replace(/`/g, " ");
+  });
+}
+function blank(s) {
+  return s.replace(/[^\s]/g, " ");
+}
+
+// kernel/trigger-normalize.ts
+function normalizeTrigger(source) {
+  let out = source.normalize("NFD");
+  out = out.replace(new RegExp("\\p{Mn}+", "gu"), "");
+  out = out.toLowerCase();
+  out = out.replace(/[-_\s]+/g, " ");
+  out = out.replace(/  +/g, " ");
+  return out.trim();
+}
+
+// plugins/claude/extractors/at-directive/index.ts
+var ID = "at-directive";
+var AT_RE = /(?:^|[^A-Za-z0-9_@])(@(?:\.{1,2}\/|\/)?[a-z0-9](?:[a-z0-9_\-./]*[a-z0-9_])?(?::[a-z0-9][a-z0-9_-]*)?)/gi;
+var FILE_EXT_RE = /\.(md|mdx|js|jsx|ts|tsx|json|yml|yaml|toml|txt|html|css|scss|less|py|rb|go|rs|java|c|cpp|h|hpp|sh|sql|svg|png|jpg|jpeg|gif|webp|pdf)$/i;
+var atDirectiveExtractor = {
+  id: ID,
+  pluginId: "claude",
+  kind: "extractor",
+  version: "1.0.0",
+  description: "Detects `@<token>` directives in a node's body using Claude Code interpretation rules. A bare handle (e.g. `@team`) becomes a `mentions` link; a file-flavoured token (e.g. `@docs/api.md`, `@./readme.md`) becomes a `references` link. Gated by `precondition.provider: ['claude']` so Gemini / Cursor / Codex apply their own at-directive flavours via their own extractors.",
+  scope: "body",
+  precondition: { provider: ["claude"] },
+  extract(ctx) {
+    const seenMentions = /* @__PURE__ */ new Set();
+    const seenReferences = /* @__PURE__ */ new Set();
+    const body = stripCodeBlocks(ctx.body);
+    const sourceDir = pathPosix.dirname(ctx.node.path);
+    for (const match of body.matchAll(AT_RE)) {
+      const original = match[1];
+      const bare = original.slice(1);
+      if (bare.startsWith("/")) continue;
+      const isReference = bare.startsWith("./") || bare.startsWith("../") || FILE_EXT_RE.test(bare);
+      if (isReference) {
+        const target = resolveSourceRelative(sourceDir, bare);
+        const dedupKey = target.toLowerCase();
+        if (seenReferences.has(dedupKey)) continue;
+        seenReferences.add(dedupKey);
+        ctx.emitLink({
+          source: ctx.node.path,
+          target,
+          kind: "references",
+          // 0.85: strong file signal (path prefix `./` / `../` OR
+          // a known file extension on the tail). One degree of inference
+          // (the runtime still resolves the path).
+          confidence: 0.85,
+          sources: [ID],
+          trigger: {
+            originalTrigger: original,
+            normalizedTrigger: target
+          }
+        });
+        continue;
+      }
+      const normalized = normalizeTrigger(original);
+      if (seenMentions.has(normalized)) continue;
+      seenMentions.add(normalized);
+      ctx.emitLink({
+        source: ctx.node.path,
+        target: original,
+        kind: "mentions",
+        // 0.5: genuine ambiguity. A bare `@handle` (no extension, no
+        // path prefix) could be an agent, a handle, or generic prose.
+        // The runtime decides at invocation time; the extractor leaves
+        // the question open.
+        confidence: 0.5,
+        sources: [ID],
+        trigger: {
+          originalTrigger: original,
+          normalizedTrigger: normalized
+        }
+      });
+    }
+  }
+};
+function resolveSourceRelative(sourceDir, bare) {
+  const joined = sourceDir === "." ? bare : `${sourceDir}/${bare}`;
+  return pathPosix.normalize(joined);
+}
+
+// plugins/claude/extractors/slash/index.ts
+var ID2 = "slash";
+var SLASH_RE = /(?<![A-Za-z0-9_/.:?#=&])(\/[a-z0-9][a-z0-9_-]*(?::[a-z0-9][a-z0-9_-]*)?)/gi;
+var slashExtractor = {
+  id: ID2,
+  pluginId: "claude",
+  kind: "extractor",
+  version: "1.0.0",
+  description: "Detects `/command` invocations in a node's body using Claude Code routing rules and turns each one into an arrow between nodes in the graph. Gated by `precondition.provider: ['claude']` so Gemini / Cursor / Codex apply their own slash flavours (Gemini has 4 routing separators, Codex deprecated user slash commands, etc.) via their own extractors.",
+  scope: "body",
+  precondition: { provider: ["claude"] },
+  extract(ctx) {
+    const seen = /* @__PURE__ */ new Set();
+    const body = stripCodeBlocks(ctx.body);
+    for (const match of body.matchAll(SLASH_RE)) {
+      const original = match[1];
+      const endIdx = (match.index ?? 0) + match[0].length;
+      const nextChar = body[endIdx];
+      if (nextChar && /[A-Za-z0-9_/-]/.test(nextChar)) continue;
+      const normalized = normalizeTrigger(original);
+      if (seen.has(normalized)) continue;
+      seen.add(normalized);
+      ctx.emitLink({
+        source: ctx.node.path,
+        target: original,
+        kind: "invokes",
+        // 0.8: clean `/command` match after code-block strip. The
+        // post-match path guard above filters URL / file-path noise,
+        // so a hit is unambiguous syntax. Resolution against the live
+        // skill / command catalog happens downstream.
+        confidence: 0.8,
+        sources: [ID2],
+        trigger: {
+          originalTrigger: original,
+          normalizedTrigger: normalized
+        }
+      });
+    }
+  }
+};
+
 // plugins/gemini/providers/gemini/schemas/agent.schema.json
 var agent_schema_default2 = {
   $schema: "https://json-schema.org/draft/2020-12/schema",
@@ -624,7 +819,87 @@ var geminiProvider = {
   classify(path) {
     const lower = path.toLowerCase();
     if (lower.startsWith(".gemini/agents/")) return "agent";
-    if (lower.startsWith(".gemini/skills/")) return "skill";
+    if (/^\.gemini\/skills\/[^/]+\/skill\.md$/.test(lower)) return "skill";
+    return null;
+  }
+};
+
+// plugins/openai/providers/openai/schemas/agent.schema.json
+var agent_schema_default3 = {
+  $schema: "https://json-schema.org/draft/2020-12/schema",
+  $id: "https://skill-map.dev/providers/openai/v1/frontmatter/agent.schema.json",
+  title: "FrontmatterCodexAgent",
+  description: "Frontmatter shape for nodes classified as `agent` by the OpenAI Codex Provider. Codex sub-agents live as TOML files under `.codex/agents/<name>.toml`; the entire file IS the agent definition (no markdown body). The TOML parser feeds the parsed root object into `frontmatter`, so this schema validates the same shape skill-map's other providers carry on per-kind frontmatter. Mirrors Codex's documented sub-agent fields (https://github.com/openai/codex) with `additionalProperties: true` so future additions flow through unchanged.",
+  allOf: [
+    { $ref: "https://skill-map.dev/spec/v0/frontmatter/base.schema.json" }
+  ],
+  type: "object",
+  additionalProperties: true,
+  properties: {
+    name: {
+      type: "string",
+      minLength: 1,
+      description: "Sub-agent identifier. Conventionally matches the filename stem."
+    },
+    description: {
+      type: "string",
+      description: "Short description of when this sub-agent applies. Codex surfaces this in the agent picker; skill-map mirrors it in the card."
+    },
+    model: {
+      type: "string",
+      description: "Model identifier (`gpt-4o`, `o3-mini`, etc.) the sub-agent runs against."
+    },
+    instructions: {
+      type: "string",
+      description: "Multi-line prompt body (TOML triple-quoted string)."
+    },
+    tools: {
+      type: "array",
+      items: { type: "string" },
+      description: "Tool ids this sub-agent is allowed to call."
+    },
+    mcp_servers: {
+      type: "array",
+      items: { type: "string" },
+      description: "MCP server ids attached to this sub-agent (`tools: [mcp__<server>__*]` follows the same pattern as Claude)."
+    },
+    approval_policy: {
+      type: "string",
+      enum: ["never", "on-request", "untrusted"],
+      description: "Codex approval policy for this sub-agent's destructive operations."
+    },
+    sandbox_mode: {
+      type: "string",
+      enum: ["read-only", "workspace-write", "danger-full-access"],
+      description: "Codex sandbox mode the sub-agent runs under."
+    }
+  }
+};
+
+// plugins/openai/providers/openai/index.ts
+var openaiProvider = {
+  id: "openai",
+  pluginId: "openai",
+  kind: "provider",
+  version: "1.0.0",
+  description: "Walks OpenAI Codex CLI scope conventions (.codex/agents/*.toml).",
+  read: { extensions: [".toml"], parser: "toml" },
+  kinds: {
+    agent: {
+      schema: "./schemas/agent.schema.json",
+      schemaJson: agent_schema_default3,
+      ui: {
+        label: "Codex agents",
+        // Codex green; distinct from claude / gemini palettes.
+        color: "#22c55e",
+        colorDark: "#4ade80",
+        icon: { kind: "pi", id: "pi-bolt" }
+      }
+    }
+  },
+  classify(path) {
+    const lower = path.toLowerCase();
+    if (lower.startsWith(".codex/agents/") && lower.endsWith(".toml")) return "agent";
     return null;
   }
 };
@@ -664,7 +939,7 @@ var agentSkillsProvider = {
     }
   },
   classify(path) {
-    if (path.toLowerCase().startsWith(".agents/skills/")) return "skill";
+    if (/^\.agents\/skills\/[^/]+\/skill\.md$/.test(path.toLowerCase())) return "skill";
     return null;
   }
 };
@@ -722,9 +997,9 @@ var coreMarkdownProvider = {
 };
 
 // plugins/core/extractors/annotations/index.ts
-var ID = "annotations";
+var ID3 = "annotations";
 var annotationsExtractor = {
-  id: ID,
+  id: ID3,
   pluginId: "core",
   kind: "extractor",
   version: "1.0.0",
@@ -770,128 +1045,17 @@ function link(source, target) {
     source,
     target,
     kind: "supersedes",
-    confidence: "high",
-    sources: [ID]
+    confidence: 1,
+    sources: [ID3]
   };
 }
 
-// kernel/util/strip-code-blocks.ts
-var FENCE_RE = /^(?<indent> {0,3})(?<fence>`{3,}|~{3,})/;
-function stripCodeBlocks(input) {
-  if (!input) return input;
-  const fenceless = stripFences(input);
-  return stripInline(fenceless);
-}
-function stripFences(input) {
-  const out = [];
-  const lines = input.split("\n");
-  let openFence = null;
-  for (const line of lines) {
-    if (openFence) {
-      const closer = matchClosingFence(line, openFence);
-      if (closer) {
-        out.push(blank(line));
-        openFence = null;
-      } else {
-        out.push(blank(line));
-      }
-      continue;
-    }
-    const open = FENCE_RE.exec(line);
-    if (open?.groups) {
-      openFence = open.groups["fence"];
-      out.push(blank(line));
-      continue;
-    }
-    out.push(line);
-  }
-  return out.join("\n");
-}
-function matchClosingFence(line, openFence) {
-  const m = FENCE_RE.exec(line);
-  if (!m?.groups) return false;
-  const fence = m.groups["fence"];
-  return fence[0] === openFence[0] && fence.length >= openFence.length;
-}
-function stripInline(input) {
-  return input.replace(/(`+)([\s\S]*?)\1/g, (_full, ticks, body) => {
-    return ticks.replace(/`/g, " ") + blank(body) + ticks.replace(/`/g, " ");
-  });
-}
-function blank(s) {
-  return s.replace(/[^\s]/g, " ");
-}
-
-// kernel/trigger-normalize.ts
-function normalizeTrigger(source) {
-  let out = source.normalize("NFD");
-  out = out.replace(new RegExp("\\p{Mn}+", "gu"), "");
-  out = out.toLowerCase();
-  out = out.replace(/[-_\s]+/g, " ");
-  out = out.replace(/  +/g, " ");
-  return out.trim();
-}
-
-// plugins/core/extractors/at-directive/index.ts
-var ID2 = "at-directive";
-var AT_RE = /(?:^|[^A-Za-z0-9_@])(@(?:\.{1,2}\/|\/)?[a-z0-9](?:[a-z0-9_\-./]*[a-z0-9_])?(?::[a-z0-9][a-z0-9_-]*)?)/gi;
-var FILE_EXT_RE = /\.(md|mdx|js|jsx|ts|tsx|json|yml|yaml|toml|txt|html|css|scss|less|py|rb|go|rs|java|c|cpp|h|hpp|sh|sql|svg|png|jpg|jpeg|gif|webp|pdf)$/i;
-var atDirectiveExtractor = {
-  id: ID2,
-  pluginId: "core",
-  kind: "extractor",
-  version: "1.0.0",
-  description: "Detects `@<token>` directives in a node's body. A bare handle (e.g. `@team`) becomes a `mentions` link; a file-flavoured token (e.g. `@docs/api.md`, `@./readme.md`) becomes a `references` link, matching how Claude Code / Gemini CLI / Cursor read the same syntax.",
-  scope: "body",
-  extract(ctx) {
-    const seenMentions = /* @__PURE__ */ new Set();
-    const seenReferences = /* @__PURE__ */ new Set();
-    const body = stripCodeBlocks(ctx.body);
-    for (const match of body.matchAll(AT_RE)) {
-      const original = match[1];
-      const bare = original.slice(1);
-      const isReference = bare.startsWith("./") || bare.startsWith("../") || bare.startsWith("/") || FILE_EXT_RE.test(bare);
-      if (isReference) {
-        const target = bare.replace(/^\.\//, "");
-        if (seenReferences.has(target)) continue;
-        seenReferences.add(target);
-        ctx.emitLink({
-          source: ctx.node.path,
-          target,
-          kind: "references",
-          confidence: "medium",
-          sources: [ID2],
-          trigger: {
-            originalTrigger: original,
-            normalizedTrigger: target.toLowerCase()
-          }
-        });
-        continue;
-      }
-      const normalized = normalizeTrigger(original);
-      if (seenMentions.has(normalized)) continue;
-      seenMentions.add(normalized);
-      ctx.emitLink({
-        source: ctx.node.path,
-        target: original,
-        kind: "mentions",
-        confidence: "medium",
-        sources: [ID2],
-        trigger: {
-          originalTrigger: original,
-          normalizedTrigger: normalized
-        }
-      });
-    }
-  }
-};
-
 // plugins/core/extractors/external-url-counter/index.ts
-var ID3 = "external-url-counter";
+var ID4 = "external-url-counter";
 var URL_RE = /https?:\/\/[^\s<>"'`)\]]+/g;
 var TRAILING_PUNCT = /[.,;:!?]+$/;
 var externalUrlCounterExtractor = {
-  id: ID3,
+  id: ID4,
   pluginId: "core",
   kind: "extractor",
   version: "1.0.0",
@@ -937,8 +1101,8 @@ var externalUrlCounterExtractor = {
         source: ctx.node.path,
         target: normalized,
         kind: "references",
-        confidence: "low",
-        sources: [ID3],
+        confidence: 0.3,
+        sources: [ID4],
         trigger: {
           originalTrigger: original,
           normalizedTrigger: normalized
@@ -984,12 +1148,12 @@ function lineFor(lineStarts, offset) {
 }
 
 // plugins/core/extractors/markdown-link/index.ts
-import { posix as pathPosix } from "path";
-var ID4 = "markdown-link";
+import { posix as pathPosix2 } from "path";
+var ID5 = "markdown-link";
 var LINK_RE = /(?<!!)\[([^\]]*)\]\(([^)\s]+)(?:\s+"[^"]*")?\)/g;
 var URL_SCHEME_RE = /^[a-z][a-z0-9+.-]*:/i;
 var markdownLinkExtractor = {
-  id: ID4,
+  id: ID5,
   pluginId: "core",
   kind: "extractor",
   version: "1.0.0",
@@ -998,7 +1162,7 @@ var markdownLinkExtractor = {
   extract(ctx) {
     const seen = /* @__PURE__ */ new Set();
     const lineStarts = computeLineStarts2(ctx.body);
-    const sourceDir = pathPosix.dirname(ctx.node.path);
+    const sourceDir = pathPosix2.dirname(ctx.node.path);
     for (const match of ctx.body.matchAll(LINK_RE)) {
       const original = match[2];
       const resolved = resolveTarget(sourceDir, original);
@@ -1010,8 +1174,8 @@ var markdownLinkExtractor = {
         source: ctx.node.path,
         target: resolved,
         kind: "references",
-        confidence: "high",
-        sources: [ID4],
+        confidence: 0.95,
+        sources: [ID5],
         trigger: {
           originalTrigger: original,
           normalizedTrigger: resolved
@@ -1030,7 +1194,7 @@ function resolveTarget(sourceDir, raw) {
   if (URL_SCHEME_RE.test(trimmed)) return null;
   if (trimmed.startsWith("/")) return null;
   const joined = sourceDir === "." ? trimmed : `${sourceDir}/${trimmed}`;
-  return pathPosix.normalize(joined);
+  return pathPosix2.normalize(joined);
 }
 function computeLineStarts2(body) {
   const starts = [0];
@@ -1050,47 +1214,61 @@ function lineFor2(lineStarts, offset) {
   return lo + 1;
 }
 
-// plugins/core/extractors/slash/index.ts
-var ID5 = "slash";
-var SLASH_RE = /(?<![A-Za-z0-9_/.:?#])(\/[a-z0-9][a-z0-9_-]*(?::[a-z0-9][a-z0-9_-]*)?)/gi;
-var slashExtractor = {
-  id: ID5,
+// plugins/core/extractors/mcp-tools/index.ts
+var ID6 = "mcp-tools";
+var MCP_PATTERN = /^mcp__([a-z0-9][a-z0-9_-]*)__[a-z0-9_-]+$/i;
+var mcpToolsExtractor = {
+  id: ID6,
   pluginId: "core",
   kind: "extractor",
   version: "1.0.0",
-  description: "Detects `/command` invocations in a node's body and turns each one into an arrow between nodes in the graph.",
-  scope: "body",
+  description: "Detects `tools: [mcp__<server>__<tool>]` entries in a node's frontmatter and turns each unique server into an MCP node + a reference edge from the source.",
+  scope: "frontmatter",
   extract(ctx) {
-    const seen = /* @__PURE__ */ new Set();
-    const body = stripCodeBlocks(ctx.body);
-    for (const match of body.matchAll(SLASH_RE)) {
-      const original = match[1];
-      const endIdx = (match.index ?? 0) + match[0].length;
-      const nextChar = body[endIdx];
-      if (nextChar && /[A-Za-z0-9_/-]/.test(nextChar)) continue;
-      const normalized = normalizeTrigger(original);
-      if (seen.has(normalized)) continue;
-      seen.add(normalized);
+    const raw = ctx.frontmatter["tools"];
+    if (!Array.isArray(raw)) return;
+    const servers = collectMcpServers(raw);
+    if (servers.size === 0) return;
+    for (const server of servers) {
+      const mcpPath = `mcp://${server}`;
+      ctx.emitNode({
+        path: mcpPath,
+        kind: "mcp",
+        virtual: true,
+        provider: ctx.node.provider,
+        derivedFrom: [ctx.node.path],
+        frontmatter: { name: server }
+      });
       ctx.emitLink({
         source: ctx.node.path,
-        target: original,
-        kind: "invokes",
-        confidence: "medium",
-        sources: [ID5],
+        target: mcpPath,
+        kind: "references",
+        confidence: 0.85,
+        sources: [ID6],
         trigger: {
-          originalTrigger: original,
-          normalizedTrigger: normalized
+          originalTrigger: `mcp__${server}__*`,
+          normalizedTrigger: mcpPath
         }
       });
     }
   }
 };
+function collectMcpServers(tools) {
+  const out = /* @__PURE__ */ new Set();
+  for (const t of tools) {
+    if (typeof t !== "string" || t.length === 0) continue;
+    const match = MCP_PATTERN.exec(t);
+    if (!match) continue;
+    out.add(match[1].toLowerCase());
+  }
+  return out;
+}
 
 // plugins/core/extractors/tools-count/index.ts
-var ID6 = "tools-count";
+var ID7 = "tools-count";
 var TOOLTIP_MAX = 255;
 var toolsCountExtractor = {
-  id: ID6,
+  id: ID7,
   pluginId: "core",
   kind: "extractor",
   version: "1.0.0",
@@ -1133,9 +1311,9 @@ var ANNOTATION_ORPHAN_TEXTS = {
 };
 
 // plugins/core/analyzers/annotation-orphan/index.ts
-var ID7 = "annotation-orphan";
+var ID8 = "annotation-orphan";
 var annotationOrphanAnalyzer = {
-  id: ID7,
+  id: ID8,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1148,7 +1326,7 @@ var annotationOrphanAnalyzer = {
     for (const orphan of orphans) {
       const expectedMdRelative = orphan.relativePath.endsWith(".sm") ? `${orphan.relativePath.slice(0, -".sm".length)}.md` : `${orphan.relativePath}.md`;
       issues.push({
-        analyzerId: ID7,
+        analyzerId: ID8,
         severity: "warn",
         nodeIds: [expectedMdRelative],
         message: tx(ANNOTATION_ORPHAN_TEXTS.message, {
@@ -1185,9 +1363,9 @@ var ANNOTATION_STALE_TEXTS = {
 };
 
 // plugins/core/analyzers/annotation-stale/index.ts
-var ID8 = "annotation-stale";
+var ID9 = "annotation-stale";
 var annotationStaleAnalyzer = {
-  id: ID8,
+  id: ID9,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1222,7 +1400,7 @@ var annotationStaleAnalyzer = {
       if (status === "fresh") continue;
       const message = status === "stale-body" ? tx(ANNOTATION_STALE_TEXTS.bodyDrift, { path: node.path }) : status === "stale-frontmatter" ? tx(ANNOTATION_STALE_TEXTS.frontmatterDrift, { path: node.path }) : tx(ANNOTATION_STALE_TEXTS.bothDrift, { path: node.path });
       issues.push({
-        analyzerId: ID8,
+        analyzerId: ID9,
         severity: "warn",
         nodeIds: [node.path],
         message,
@@ -1249,7 +1427,7 @@ function tooltipFor(status) {
 }
 
 // plugins/core/analyzers/broken-ref/index.ts
-import { posix as pathPosix2, resolve } from "path";
+import { posix as pathPosix3, resolve } from "path";
 
 // plugins/core/analyzers/broken-ref/text.ts
 var BROKEN_REF_TEXTS = {
@@ -1268,9 +1446,9 @@ var BROKEN_REF_TEXTS = {
 };
 
 // plugins/core/analyzers/broken-ref/index.ts
-var ID9 = "broken-ref";
+var ID10 = "broken-ref";
 var brokenRefAnalyzer = {
-  id: ID9,
+  id: ID10,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1339,7 +1517,7 @@ function buildIssue(link2, hintCandidates = []) {
     trigger: link2.trigger?.normalizedTrigger ?? null
   };
   const issue = {
-    analyzerId: ID9,
+    analyzerId: ID10,
     severity: "warn",
     nodeIds: [link2.source],
     message: tx(BROKEN_REF_TEXTS.message, {
@@ -1388,8 +1566,8 @@ function indexByNormalizedName(nodes) {
   return out;
 }
 function basenameWithoutExt(path) {
-  const base = pathPosix2.basename(path);
-  const ext = pathPosix2.extname(base);
+  const base = pathPosix3.basename(path);
+  const ext = pathPosix3.extname(base);
   return ext ? base.slice(0, -ext.length) : base;
 }
 function indexByBasenameWithoutName(nodes) {
@@ -1433,9 +1611,9 @@ function isPathStyleLink(link2) {
 }
 
 // plugins/core/analyzers/contribution-orphan/index.ts
-var ID10 = "contribution-orphan";
+var ID11 = "contribution-orphan";
 var contributionOrphanAnalyzer = {
-  id: ID10,
+  id: ID11,
   pluginId: "core",
   kind: "analyzer",
   version: "0.0.0",
@@ -1456,9 +1634,9 @@ var JOB_ORPHAN_FILE_TEXTS = {
 };
 
 // plugins/core/analyzers/job-orphan-file/index.ts
-var ID11 = "job-orphan-file";
+var ID12 = "job-orphan-file";
 var jobOrphanFileAnalyzer = {
-  id: ID11,
+  id: ID12,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1470,7 +1648,7 @@ var jobOrphanFileAnalyzer = {
     const issues = [];
     for (const filePath of orphans) {
       issues.push({
-        analyzerId: ID11,
+        analyzerId: ID12,
         severity: "warn",
         nodeIds: [filePath],
         message: tx(JOB_ORPHAN_FILE_TEXTS.message, { filePath }),
@@ -1488,9 +1666,9 @@ var LINK_CONFLICT_TEXTS = {
 };
 
 // plugins/core/analyzers/link-conflict/index.ts
-var ID12 = "link-conflict";
+var ID13 = "link-conflict";
 var linkConflictAnalyzer = {
-  id: ID12,
+  id: ID13,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1538,7 +1716,7 @@ var linkConflictAnalyzer = {
       const [source, target] = key.split("\0");
       const kindList = variants.map((v) => v.kind).join(" / ");
       issues.push({
-        analyzerId: ID12,
+        analyzerId: ID13,
         severity: "warn",
         nodeIds: [source, target],
         message: tx(LINK_CONFLICT_TEXTS.message, {
@@ -1553,14 +1731,7 @@ var linkConflictAnalyzer = {
   }
 };
 function rankConfidence(c) {
-  switch (c) {
-    case "high":
-      return 2;
-    case "medium":
-      return 1;
-    case "low":
-      return 0;
-  }
+  return c;
 }
 
 // kernel/util/trigger-resolve.ts
@@ -1612,9 +1783,9 @@ function resolveLinkTargetToPath(link2, nameIndex) {
 }
 
 // plugins/core/analyzers/link-counts/index.ts
-var ID13 = "link-counts";
+var ID14 = "link-counts";
 var linkCountsAnalyzer = {
-  id: ID13,
+  id: ID14,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1678,11 +1849,11 @@ function formatBreakdown(byKind, direction) {
 }
 
 // plugins/core/analyzers/stability/index.ts
-var ID14 = "stability";
+var ID15 = "stability";
 var EXPERIMENTAL_TOOLTIP = "Experimental: API may change";
 var DEPRECATED_TOOLTIP = "Deprecated: avoid in new code";
 var stabilityAnalyzer = {
-  id: ID14,
+  id: ID15,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1714,7 +1885,7 @@ var stabilityAnalyzer = {
           tooltip: EXPERIMENTAL_TOOLTIP
         });
         issues.push({
-          analyzerId: ID14,
+          analyzerId: ID15,
           severity: "info",
           nodeIds: [node.path],
           message: `Node '${node.path}' is marked experimental: API may change.`,
@@ -1727,7 +1898,7 @@ var stabilityAnalyzer = {
           severity: "warn"
         });
         issues.push({
-          analyzerId: ID14,
+          analyzerId: ID15,
           severity: "warn",
           nodeIds: [node.path],
           message: `Node '${node.path}' is marked deprecated: avoid in new code.`,
@@ -1761,9 +1932,9 @@ var SUPERSEDED_TEXTS = {
 };
 
 // plugins/core/analyzers/superseded/index.ts
-var ID15 = "superseded";
+var ID16 = "superseded";
 var supersededAnalyzer = {
-  id: ID15,
+  id: ID16,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -1775,7 +1946,7 @@ var supersededAnalyzer = {
       const supersededBy = pickSupersededBy(node);
       if (supersededBy === null) continue;
       issues.push({
-        analyzerId: ID15,
+        analyzerId: ID16,
         severity: "info",
         nodeIds: [node.path],
         message: tx(SUPERSEDED_TEXTS.message, {
@@ -1824,14 +1995,14 @@ var TRIGGER_COLLISION_TEXTS = {
 };
 
 // plugins/core/analyzers/trigger-collision/index.ts
-var ID16 = "trigger-collision";
+var ID17 = "trigger-collision";
 var ADVERTISING_KINDS = /* @__PURE__ */ new Set([
   "command",
   "skill",
   "agent"
 ]);
 var triggerCollisionAnalyzer = {
-  id: ID16,
+  id: ID17,
   pluginId: "core",
   kind: "analyzer",
   mode: "deterministic",
@@ -1930,7 +2101,7 @@ function analyzeTriggerBucket(normalized, claims) {
     part: parts[0]
   });
   return {
-    analyzerId: ID16,
+    analyzerId: ID17,
     severity: "error",
     nodeIds,
     message,
@@ -1970,10 +2141,10 @@ var UNKNOWN_FIELD_TEXTS = {
 };
 
 // plugins/core/analyzers/unknown-field/index.ts
-var ID17 = "unknown-field";
+var ID18 = "unknown-field";
 var RESERVED_ROOT_BLOCKS = /* @__PURE__ */ new Set(["identity", "annotations", "settings", "audit"]);
 var unknownFieldAnalyzer = {
-  id: ID17,
+  id: ID18,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -2031,7 +2202,7 @@ var unknownFieldAnalyzer = {
         for (const key of Object.keys(annotations)) {
           if (!knownAnnotationKeys.has(key)) {
             issues.push({
-              analyzerId: ID17,
+              analyzerId: ID18,
               severity: "warn",
               nodeIds: [node.path],
               message: tx(UNKNOWN_FIELD_TEXTS.unknownAnnotationKey, {
@@ -2058,7 +2229,7 @@ var unknownFieldAnalyzer = {
             if (validator(value)) continue;
             const errors = (validator.errors ?? []).map((e) => `${e.instancePath || "(root)"} ${e.message ?? e.keyword}`).join("; ");
             issues.push({
-              analyzerId: ID17,
+              analyzerId: ID18,
               severity: "warn",
               nodeIds: [node.path],
               message: tx(UNKNOWN_FIELD_TEXTS.pluginNamespaceInvalid, {
@@ -2074,7 +2245,7 @@ var unknownFieldAnalyzer = {
           continue;
         }
         issues.push({
-          analyzerId: ID17,
+          analyzerId: ID18,
           severity: "warn",
           nodeIds: [node.path],
           message: tx(UNKNOWN_FIELD_TEXTS.unknownRootKey, {
@@ -2367,9 +2538,9 @@ var VALIDATE_ALL_TEXTS = {
 };
 
 // plugins/core/analyzers/validate-all/index.ts
-var ID18 = "validate-all";
+var ID19 = "validate-all";
 var validateAllAnalyzer = {
-  id: ID18,
+  id: ID19,
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
@@ -2432,7 +2603,7 @@ function collectNodeFindings(v, node, out) {
   const result = v.validate("node", toNodeForSchema(node));
   if (result.ok) return;
   out.push({
-    analyzerId: ID18,
+    analyzerId: ID19,
     severity: "error",
     nodeIds: [node.path],
     message: tx(VALIDATE_ALL_TEXTS.nodeFailure, {
@@ -2451,7 +2622,7 @@ function collectFrontmatterBaseFindings(node, out) {
   if (isMissingStringField(fm, "description")) missing.push("description");
   if (missing.length === 0) return;
   out.push({
-    analyzerId: ID18,
+    analyzerId: ID19,
     // `warn` (not `error`) so the default `sm scan` exit code stays
     // 0 even when nodes are missing frontmatter base fields. Strict
     // mode (`sm scan --strict`) still escalates to exit 1. Matches
@@ -2473,7 +2644,7 @@ function collectLinkFindings(v, link2, out) {
   const result = v.validate("link", toLinkForSchema(link2));
   if (result.ok) return;
   out.push({
-    analyzerId: ID18,
+    analyzerId: ID19,
     severity: "error",
     nodeIds: [link2.source],
     message: tx(VALIDATE_ALL_TEXTS.linkFailure, {
@@ -2541,13 +2712,13 @@ var ASCII_FORMATTER_TEXTS = {
 };
 
 // plugins/core/formatters/ascii/index.ts
-var ID19 = "ascii";
+var ID20 = "ascii";
 var KIND_ORDER = ["agent", "command", "skill", "markdown"];
 var asciiFormatter = {
-  id: ID19,
+  id: ID20,
   pluginId: "core",
   kind: "formatter",
-  formatId: ID19,
+  formatId: ID20,
   version: "1.0.0",
   description: "Renders the scan as plain text, grouped by kind, arrows, and issues. Used by `sm scan --format=ascii`.",
   // ASCII tree formatter, header + per-kind sections + per-issue
@@ -2642,14 +2813,14 @@ function renderSection(out, kind, group) {
 }
 
 // plugins/core/formatters/json/index.ts
-var ID20 = "json";
+var ID21 = "json";
 var jsonFormatter = {
-  id: ID20,
+  id: ID21,
   pluginId: "core",
   kind: "formatter",
   version: "1.0.0",
   description: "Renders the persisted scan as JSON (conforms to `scan-result.schema.json` when the full ScanResult is available). Used by `sm graph --format json` and `GET /api/graph?format=json`.",
-  formatId: ID20,
+  formatId: ID21,
   format(ctx) {
     if (ctx.scanResult !== void 0) {
       return JSON.stringify(ctx.scanResult);
@@ -2788,10 +2959,10 @@ function resolveSpecRoot2() {
 }
 
 // plugins/core/actions/bump/index.ts
-var ID21 = "bump";
+var ID22 = "bump";
 var PLUGIN_ID = "core";
 var bumpAction = {
-  id: ID21,
+  id: ID22,
   pluginId: PLUGIN_ID,
   kind: "action",
   version: "1.0.0",
@@ -2850,10 +3021,10 @@ function pickCurrentVersion(overlay) {
 }
 
 // plugins/core/actions/mark-superseded/index.ts
-var ID22 = "mark-superseded";
+var ID23 = "mark-superseded";
 var PLUGIN_ID2 = "core";
 var markSupersededAction = {
-  id: ID22,
+  id: ID23,
   pluginId: PLUGIN_ID2,
   kind: "action",
   version: "0.0.0",
@@ -2963,7 +3134,7 @@ var UPDATE_CHECK_TEXTS = {
 // package.json
 var package_default = {
   name: "@skill-map/cli",
-  version: "0.32.0",
+  version: "0.34.0",
   description: "skill-map reference implementation \u2014 kernel + CLI + adapters.",
   license: "MIT",
   type: "module",
@@ -3044,6 +3215,7 @@ var package_default = {
     "js-yaml": "4.1.1",
     kysely: "0.28.17",
     semver: "7.7.4",
+    "smol-toml": "1.6.1",
     typanion: "3.14.0",
     ws: "8.20.0"
   },
@@ -3339,14 +3511,16 @@ var updateCheckHook = {
 
 // plugins/built-ins.ts
 var claudeProvider2 = { ...claudeProvider, pluginId: "claude" };
+var atDirectiveExtractor2 = { ...atDirectiveExtractor, pluginId: "claude" };
+var slashExtractor2 = { ...slashExtractor, pluginId: "claude" };
 var geminiProvider2 = { ...geminiProvider, pluginId: "gemini" };
+var openaiProvider2 = { ...openaiProvider, pluginId: "openai" };
 var agentSkillsProvider2 = { ...agentSkillsProvider, pluginId: "agent-skills" };
 var coreMarkdownProvider2 = { ...coreMarkdownProvider, pluginId: "core" };
 var annotationsExtractor2 = { ...annotationsExtractor, pluginId: "core" };
-var atDirectiveExtractor2 = { ...atDirectiveExtractor, pluginId: "core" };
 var externalUrlCounterExtractor2 = { ...externalUrlCounterExtractor, pluginId: "core" };
 var markdownLinkExtractor2 = { ...markdownLinkExtractor, pluginId: "core" };
-var slashExtractor2 = { ...slashExtractor, pluginId: "core" };
+var mcpToolsExtractor2 = { ...mcpToolsExtractor, pluginId: "core" };
 var toolsCountExtractor2 = { ...toolsCountExtractor, pluginId: "core" };
 var annotationOrphanAnalyzer2 = { ...annotationOrphanAnalyzer, pluginId: "core" };
 var annotationStaleAnalyzer2 = { ...annotationStaleAnalyzer, pluginId: "core" };
@@ -3371,7 +3545,9 @@ var builtInBundles = [
     granularity: "bundle",
     description: "Claude Code platform integration. Classifies files under `.claude/{agents,commands,skills}` and parses Claude-flavored frontmatter.",
     extensions: [
-      claudeProvider2
+      claudeProvider2,
+      atDirectiveExtractor2,
+      slashExtractor2
     ]
   },
   {
@@ -3382,6 +3558,14 @@ var builtInBundles = [
       geminiProvider2
     ]
   },
+  {
+    id: "openai",
+    granularity: "bundle",
+    description: "OpenAI Codex CLI platform integration. Classifies TOML sub-agent definitions under `.codex/agents/*.toml` and (future) walks the hierarchical AGENTS.md cascade. Provider for the active-lens `openai` runtime.",
+    extensions: [
+      openaiProvider2
+    ]
+  },
   {
     id: "agent-skills",
     granularity: "bundle",
@@ -3397,10 +3581,9 @@ var builtInBundles = [
     extensions: [
       coreMarkdownProvider2,
       annotationsExtractor2,
-      atDirectiveExtractor2,
       externalUrlCounterExtractor2,
       markdownLinkExtractor2,
-      slashExtractor2,
+      mcpToolsExtractor2,
       toolsCountExtractor2,
       annotationOrphanAnalyzer2,
       annotationStaleAnalyzer2,
@@ -4885,7 +5068,7 @@ var AsyncMutex = class {
       this.#locked = true;
       return;
     }
-    await new Promise((resolve38) => this.#waiters.push(resolve38));
+    await new Promise((resolve39) => this.#waiters.push(resolve39));
     this.#locked = true;
   }
   unlock() {
@@ -5945,11 +6128,6 @@ var LINK_KIND_VALUES = Object.freeze([
   "mentions",
   "supersedes"
 ]);
-var CONFIDENCE_VALUES = Object.freeze([
-  "high",
-  "medium",
-  "low"
-]);
 var SEVERITY_VALUES = Object.freeze([
   "error",
   "warn",
@@ -5981,7 +6159,7 @@ function isLinkKind(s) {
   return typeof s === "string" && LINK_KIND_VALUES.includes(s);
 }
 function isConfidence(s) {
-  return typeof s === "string" && CONFIDENCE_VALUES.includes(s);
+  return typeof s === "number" && Number.isFinite(s) && s >= 0 && s <= 1;
 }
 function isSeverity(s) {
   return typeof s === "string" && SEVERITY_VALUES.includes(s);
@@ -5995,7 +6173,7 @@ function parseLinkKind(s, ctx) {
 function parseConfidence(s, ctx) {
   if (isConfidence(s)) return s;
   throw new Error(
-    `Invalid Confidence value ${formatValue(s)} at ${ctx}. Allowed: ${CONFIDENCE_VALUES.join(" | ")}.`
+    `Invalid Confidence value ${formatValue(s)} at ${ctx}. Expected a finite number in [0..1].`
   );
 }
 function parseSeverity(s, ctx) {
@@ -8794,10 +8972,45 @@ var plainParser = {
   }
 };
 
+// plugins/core/parsers/toml/index.ts
+import { parse as parseToml } from "smol-toml";
+var tomlParser = {
+  id: "toml",
+  parse(raw, _path) {
+    let parsed = {};
+    const issues = [];
+    try {
+      const doc = parseToml(raw);
+      if (doc && typeof doc === "object" && !Array.isArray(doc)) {
+        parsed = stripPrototypePollution(doc);
+      }
+    } catch (err) {
+      issues.push({
+        code: "frontmatter-parse-error",
+        message: sanitiseParseErrorMessage2(err)
+      });
+    }
+    const out = {
+      frontmatterRaw: raw,
+      frontmatter: parsed,
+      body: ""
+    };
+    if (issues.length > 0) {
+      return { ...out, issues };
+    }
+    return out;
+  }
+};
+function sanitiseParseErrorMessage2(err) {
+  const raw = err instanceof Error ? err.message : String(err);
+  return raw.replace(/[-]+/g, " ").replace(/\s+/g, " ").trim();
+}
+
 // kernel/scan/parsers/index.ts
 var REGISTRY = /* @__PURE__ */ new Map([
   [frontmatterYamlParser.id, frontmatterYamlParser],
-  [plainParser.id, plainParser]
+  [plainParser.id, plainParser],
+  [tomlParser.id, tomlParser]
 ]);
 var FROZEN_IDS = new Set(REGISTRY.keys());
 function getParser(id) {
@@ -9457,9 +9670,42 @@ function trimRedundantPath(message, primary) {
 }
 
 // cli/commands/config.ts
-import { existsSync as existsSync14 } from "fs";
+import { existsSync as existsSync15 } from "fs";
 import { Command as Command4, Option as Option4 } from "clipanion";
 
+// core/config/active-provider.ts
+import { existsSync as existsSync14 } from "fs";
+import { join as join10 } from "path";
+var DETECTION_RULES = [
+  { providerId: "claude", marker: ".claude" },
+  { providerId: "gemini", marker: ".gemini" },
+  { providerId: "openai", marker: ".codex" },
+  { providerId: "openai", marker: "AGENTS.md" },
+  { providerId: "cursor", marker: ".cursor" }
+];
+function resolveActiveProvider(cwd) {
+  const detected = detectProvidersFromFilesystem(cwd);
+  const fromConfig = readConfigValue("activeProvider", { cwd });
+  if (typeof fromConfig === "string" && fromConfig.length > 0) {
+    return { resolved: fromConfig, source: "config", detected };
+  }
+  if (detected.length > 0) {
+    return { resolved: detected[0], source: "autodetect", detected };
+  }
+  return { resolved: null, source: "none", detected };
+}
+function detectProvidersFromFilesystem(cwd) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const rule of DETECTION_RULES) {
+    if (seen.has(rule.providerId)) continue;
+    if (!existsSync14(join10(cwd, rule.marker))) continue;
+    seen.add(rule.providerId);
+    out.push(rule.providerId);
+  }
+  return out;
+}
+
 // cli/util/path-display.ts
 import { isAbsolute as isAbsolute4, relative as pathRelative } from "path";
 function relativeIfBelow(path, cwd) {
@@ -9469,6 +9715,42 @@ function relativeIfBelow(path, cwd) {
   return rel;
 }
 
+// cli/util/scan-zone-drop.ts
+import { DatabaseSync as DatabaseSync4 } from "node:sqlite";
+
+// cli/commands/db/shared.ts
+var SAFE_SQL_IDENTIFIER_RE = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
+function assertSafeIdentifier(name) {
+  if (!SAFE_SQL_IDENTIFIER_RE.test(name)) {
+    throw new Error(`refusing to operate on non-identifier table name: ${JSON.stringify(name)}`);
+  }
+}
+
+// cli/util/scan-zone-drop.ts
+function dropScanZone(dbPath) {
+  const db = new DatabaseSync4(dbPath);
+  try {
+    const rows = db.prepare(
+      "SELECT name FROM sqlite_master WHERE type='table' AND name LIKE 'scan\\_%' ESCAPE '\\'"
+    ).all();
+    for (const r of rows) assertSafeIdentifier(r.name);
+    if (rows.length === 0) {
+      return { tableCount: 0, droppedTables: [] };
+    }
+    db.exec("BEGIN");
+    for (const { name } of rows) {
+      db.exec(`DELETE FROM "${name}"`);
+    }
+    db.exec("COMMIT");
+    return {
+      tableCount: rows.length,
+      droppedTables: rows.map((r) => r.name)
+    };
+  } finally {
+    db.close();
+  }
+}
+
 // cli/i18n/config.texts.ts
 var CONFIG_TEXTS = {
   unknownKey: "{{glyph}}  Unknown config key: {{key}}\n",
@@ -9511,6 +9793,20 @@ var CONFIG_TEXTS = {
    * screen what they just opted into.
    */
   privacyGateConfirmed: '{{glyph}}  Opening disk access for "{{key}}":\n{{paths}}\n',
+  /**
+   * Confirmation printed after `sm config set activeProvider <id>`
+   * succeeds. The lens change atomically drops the scan_* zone (per
+   * `architecture.md` §Active Provider Lens) so the persisted graph
+   * never carries stale node / link rows from the previous lens. We
+   * surface what was cleared so the operator knows their state was
+   * touched and what to do next.
+   */
+  lensSwitchedCleared: "{{glyph}}  Lens switched. Cleared {{tableCount}} scan table(s): {{tableNames}}.\n   {{hint}}\n",
+  lensSwitchedClearedHint: "Run `sm scan` to repopulate the graph under the new lens.",
+  /** Same lens-switch announcement when the DB was empty (no rows to clear). */
+  lensSwitchedEmpty: "{{glyph}}  Lens switched. Scan zone was already empty.\n   {{hint}}\n",
+  /** Lens switch happened before any `sm scan` ran (no DB file on disk yet). */
+  lensSwitchedNoDb: "{{glyph}}  Lens switched. Run `sm scan` to populate the graph under the new lens.\n",
   // --- list verb (sectioned human renderer) ----------------------------
   /** Section heading: `  General`, `  Scan`, … rendered before its rows. */
   listSectionHeader: "  {{title}}\n",
@@ -9548,6 +9844,9 @@ function suggestConfigKey(effective, typed, ansi) {
     hint: ansi.dim(tx(CONFIG_TEXTS.unknownKeySuggestionHint, { suggestions: formatted }))
   });
 }
+var KNOWN_DEFAULTLESS_KEY_RESOLVERS = {
+  activeProvider: (cwd) => resolveActiveProvider(cwd).resolved
+};
 function parseCliValue(raw) {
   try {
     return JSON.parse(raw);
@@ -9720,6 +10019,11 @@ function formatValueListHuman(value, ansi) {
   }
   return String(value);
 }
+function resolveConfigGetValue(lookupValue, key, cwd) {
+  if (lookupValue !== void 0) return lookupValue;
+  const runtimeResolver = KNOWN_DEFAULTLESS_KEY_RESOLVERS[key];
+  return runtimeResolver ? runtimeResolver(cwd) : void 0;
+}
 var ConfigGetCommand = class extends SmCommand {
   static paths = [["config", "get"]];
   static usage = Command4.Usage({
@@ -9734,16 +10038,14 @@ var ConfigGetCommand = class extends SmCommand {
   strict = Option4.Boolean("--strict", false);
   emitElapsed = false;
   async run() {
-    const result = tryLoadConfig(
-      { strict: this.strict, ...defaultRuntimeContext() },
-      this.context.stderr
-    );
+    const ctx = defaultRuntimeContext();
+    const result = tryLoadConfig({ strict: this.strict, ...ctx }, this.context.stderr);
     if (!result.ok) return result.exitCode;
     const { effective, warnings } = result.loaded;
     for (const w of warnings) this.printer.info(w + "\n");
     const lookup = safeGetAtPath(effective, this.key, this.context.stderr);
     if (!lookup.ok) return lookup.exitCode;
-    const { value } = lookup;
+    const value = resolveConfigGetValue(lookup.value, this.key, ctx.cwd);
     if (value === void 0) {
       const ansi = this.ansiFor("stderr");
       this.printer.info(
@@ -9783,10 +10085,8 @@ var ConfigShowCommand = class extends SmCommand {
   // the value it gates.
   // eslint-disable-next-line complexity
   async run() {
-    const result = tryLoadConfig(
-      { strict: this.strict, ...defaultRuntimeContext() },
-      this.context.stderr
-    );
+    const ctx = defaultRuntimeContext();
+    const result = tryLoadConfig({ strict: this.strict, ...ctx }, this.context.stderr);
     if (!result.ok) return result.exitCode;
     const { effective, sources, warnings } = result.loaded;
     for (const w of warnings) this.printer.info(w + "\n");
@@ -9809,6 +10109,12 @@ var ConfigShowCommand = class extends SmCommand {
       }
       throw err;
     }
+    if (value === void 0) {
+      const runtimeResolver = KNOWN_DEFAULTLESS_KEY_RESOLVERS[this.key];
+      if (runtimeResolver) {
+        value = runtimeResolver(ctx.cwd);
+      }
+    }
     if (value === void 0) {
       this.printer.info(tx(CONFIG_TEXTS.unknownKey, { glyph: errGlyphShow, key: this.key }));
       return ExitCode.NotFound;
@@ -9962,8 +10268,44 @@ var ConfigSetCommand = class extends SmCommand {
         )
       })
     );
+    if (this.key === "activeProvider") {
+      this.announceLensSwitch(ctx.cwd, ansi);
+    }
     return ExitCode.Ok;
   }
+  /**
+   * Side effect of `sm config set activeProvider <id>`, atomically
+   * drops the `scan_*` zone so the persisted graph never reflects the
+   * wrong lens (see `architecture.md` §Active Provider Lens). The drop
+   * is non-destructive of `state_*` / `config_*` rows; the operator
+   * runs `sm scan` next to repopulate.
+   *
+   * Silent when no DB file exists on disk yet (fresh project that has
+   * never run `sm scan`), the lens just gets set and the next scan
+   * uses it.
+   */
+  announceLensSwitch(cwd, ansi) {
+    const dbPath = resolveDbPath({ db: void 0, cwd });
+    const okGlyph = ansi.green("\u2713");
+    if (!existsSync15(dbPath)) {
+      this.printer.info(tx(CONFIG_TEXTS.lensSwitchedNoDb, { glyph: okGlyph }));
+      return;
+    }
+    const result = dropScanZone(dbPath);
+    const hint = ansi.dim(CONFIG_TEXTS.lensSwitchedClearedHint);
+    if (result.tableCount === 0) {
+      this.printer.info(tx(CONFIG_TEXTS.lensSwitchedEmpty, { glyph: okGlyph, hint }));
+      return;
+    }
+    this.printer.info(
+      tx(CONFIG_TEXTS.lensSwitchedCleared, {
+        glyph: okGlyph,
+        tableCount: result.tableCount,
+        tableNames: result.droppedTables.join(", "),
+        hint
+      })
+    );
+  }
 };
 var ConfigResetCommand = class extends SmCommand {
   static paths = [["config", "reset"]];
@@ -9985,7 +10327,7 @@ var ConfigResetCommand = class extends SmCommand {
     const path = targetSettingsPath2(target, ctx.cwd);
     const ansi = this.ansiFor("stdout");
     const okGlyph = ansi.green("\u2713");
-    if (!existsSync14(path)) {
+    if (!existsSync15(path)) {
       this.printer.data(
         tx(CONFIG_TEXTS.unsetNoOverride, {
           glyph: okGlyph,
@@ -10060,16 +10402,16 @@ var CONFIG_COMMANDS = [
 ];
 
 // cli/commands/conformance.ts
-import { existsSync as existsSync17, readFileSync as readFileSync15 } from "fs";
+import { existsSync as existsSync18, readFileSync as readFileSync15 } from "fs";
 import { dirname as dirname12, resolve as resolve21 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 import { Command as Command5, Option as Option5 } from "clipanion";
 
 // conformance/index.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import { cpSync, existsSync as existsSync15, mkdtempSync, readdirSync as readdirSync5, readFileSync as readFileSync14, rmSync, statSync as statSync3 } from "fs";
+import { cpSync, existsSync as existsSync16, mkdtempSync, readdirSync as readdirSync5, readFileSync as readFileSync14, rmSync, statSync as statSync3 } from "fs";
 import { tmpdir } from "os";
-import { isAbsolute as isAbsolute5, join as join10, relative as relative3, resolve as resolve19 } from "path";
+import { isAbsolute as isAbsolute5, join as join11, relative as relative3, resolve as resolve19 } from "path";
 
 // conformance/i18n/runner.texts.ts
 var CONFORMANCE_RUNNER_TEXTS = {
@@ -10105,9 +10447,9 @@ function disableEnv(setup) {
 function runConformanceCase(options) {
   const raw = readFileSync14(options.casePath, "utf8");
   const c = JSON.parse(raw);
-  const fixturesRoot = options.fixturesRoot ?? join10(options.specRoot, "conformance", "fixtures");
+  const fixturesRoot = options.fixturesRoot ?? join11(options.specRoot, "conformance", "fixtures");
   const safeId = c.id.replace(/[^a-zA-Z0-9_-]/g, "_").slice(0, 32);
-  const scope = mkdtempSync(join10(tmpdir(), `sm-conformance-${safeId}-`));
+  const scope = mkdtempSync(join11(tmpdir(), `sm-conformance-${safeId}-`));
   const setupEnv = disableEnv(c.setup);
   try {
     const priorFailure = runPriorScansSetup(c, options, scope, fixturesRoot, setupEnv);
@@ -10179,9 +10521,9 @@ function replaceFixture(scope, fixturesRoot, fixture) {
   assertContained2(fixturesRoot, fixture, "fixture");
   for (const entry of readdirSync5(scope)) {
     if (entry === KERNEL_SKILL_MAP_DIR) continue;
-    rmSync(join10(scope, entry), { recursive: true, force: true });
+    rmSync(join11(scope, entry), { recursive: true, force: true });
   }
-  const src = join10(fixturesRoot, fixture);
+  const src = join11(fixturesRoot, fixture);
   cpSync(src, scope, { recursive: true });
 }
 function assertContained2(root, rel, label) {
@@ -10218,7 +10560,7 @@ function evaluateAssertion(a, ctx) {
         return { ok: false, type: a.type, reason: formatErrorMessage(err) };
       }
       const abs = resolve19(ctx.scope, a.path);
-      return existsSync15(abs) ? { ok: true, type: a.type } : {
+      return existsSync16(abs) ? { ok: true, type: a.type } : {
         ok: false,
         type: a.type,
         reason: tx(CONFORMANCE_RUNNER_TEXTS.fileNotFound, { path: a.path })
@@ -10231,9 +10573,9 @@ function evaluateAssertion(a, ctx) {
       } catch (err) {
         return { ok: false, type: a.type, reason: formatErrorMessage(err) };
       }
-      const fixturePath = join10(ctx.fixturesRoot, a.fixture);
+      const fixturePath = join11(ctx.fixturesRoot, a.fixture);
       const targetPath = resolve19(ctx.scope, a.path);
-      if (!existsSync15(targetPath)) {
+      if (!existsSync16(targetPath)) {
         return {
           ok: false,
           type: a.type,
@@ -10414,7 +10756,7 @@ var CONFORMANCE_TEXTS = {
 };
 
 // cli/util/conformance-scopes.ts
-import { existsSync as existsSync16, readdirSync as readdirSync6, statSync as statSync4 } from "fs";
+import { existsSync as existsSync17, readdirSync as readdirSync6, statSync as statSync4 } from "fs";
 import { dirname as dirname11, resolve as resolve20 } from "path";
 import { createRequire as createRequire6 } from "module";
 import { fileURLToPath as fileURLToPath3 } from "url";
@@ -10434,7 +10776,7 @@ function resolveCliWorkspaceRoot() {
   let cursor = here;
   for (let depth = 0; depth < 6; depth += 1) {
     const candidate = resolve20(cursor, "plugins");
-    if (existsSync16(candidate) && statSync4(candidate).isDirectory()) {
+    if (existsSync17(candidate) && statSync4(candidate).isDirectory()) {
       return cursor;
     }
     const parent = dirname11(cursor);
@@ -10454,7 +10796,7 @@ function collectProviderScopes(specRoot) {
     return out;
   }
   const pluginsRoot = resolve20(workspaceRoot, "plugins");
-  if (!existsSync16(pluginsRoot)) return out;
+  if (!existsSync17(pluginsRoot)) return out;
   for (const bundleEntry of readdirSync6(pluginsRoot)) {
     const bundleDir = resolve20(pluginsRoot, bundleEntry);
     if (!isDir(bundleDir)) continue;
@@ -10466,7 +10808,7 @@ function collectProviderScopes(specRoot) {
 }
 function isDir(path) {
   try {
-    return existsSync16(path) && statSync4(path).isDirectory();
+    return existsSync17(path) && statSync4(path).isDirectory();
   } catch {
     return false;
   }
@@ -10476,10 +10818,10 @@ function collectBundleProviderScopes(providersRoot, specRoot, out) {
     const providerDir = resolve20(providersRoot, entry);
     if (!isDir(providerDir)) continue;
     const conformanceDir = resolve20(providerDir, "conformance");
-    if (!existsSync16(conformanceDir)) continue;
+    if (!existsSync17(conformanceDir)) continue;
     const casesDir = resolve20(conformanceDir, "cases");
     const fixturesDir = resolve20(conformanceDir, "fixtures");
-    if (!existsSync16(casesDir) || !existsSync16(fixturesDir)) continue;
+    if (!existsSync17(casesDir) || !existsSync17(fixturesDir)) continue;
     out.push({
       id: `provider:${entry}`,
       kind: "provider",
@@ -10517,7 +10859,7 @@ function selectConformanceScopes(scope) {
   return [match];
 }
 function listCaseFiles(scope) {
-  if (!existsSync16(scope.casesDir)) return [];
+  if (!existsSync17(scope.casesDir)) return [];
   return readdirSync6(scope.casesDir).filter((entry) => entry.endsWith(".json")).sort().map((entry) => resolve20(scope.casesDir, entry));
 }
 
@@ -10536,7 +10878,7 @@ function resolveBinary() {
   let cursor = here;
   for (let depth = 0; depth < 6; depth += 1) {
     const candidate = resolve21(cursor, "bin", "sm.js");
-    if (existsSync17(candidate)) return candidate;
+    if (existsSync18(candidate)) return candidate;
     const parent = dirname12(cursor);
     if (parent === cursor) break;
     cursor = parent;
@@ -10602,7 +10944,7 @@ var ConformanceRunCommand = class extends SmCommand {
       return ExitCode.Error;
     }
     const binary = resolveBinary();
-    if (!existsSync17(binary)) {
+    if (!existsSync18(binary)) {
       if (this.json) {
         this.#emitJsonError(
           "internal",
@@ -10794,7 +11136,7 @@ function writeStreamSnippet(stream, header, text) {
 var CONFORMANCE_COMMANDS = [ConformanceRunCommand];
 
 // cli/commands/db/backup.ts
-import { dirname as dirname13, join as join11, resolve as resolve22 } from "path";
+import { dirname as dirname13, join as join12, resolve as resolve22 } from "path";
 import { Command as Command6, Option as Option6 } from "clipanion";
 
 // cli/i18n/db.texts.ts
@@ -10880,7 +11222,7 @@ var DbBackupCommand = class extends SmCommand {
     const exit = requireDbOrExit(path, this.context.stderr);
     if (exit !== null) return exit;
     const ts = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-    const outPath = this.out ? resolve22(this.out) : join11(dirname13(path), "backups", `${ts}.db`);
+    const outPath = this.out ? resolve22(this.out) : join12(dirname13(path), "backups", `${ts}.db`);
     await withSqlite({ databasePath: path, autoMigrate: false }, async (storage) => {
       storage.migrations.writeBackup(outPath);
     });
@@ -10991,28 +11333,18 @@ var DbRestoreCommand = class extends SmCommand {
     this.printer.data(
       tx(DB_TEXTS.restoreDone, {
         glyph: ansi.green("\u2713"),
-        sourcePath: relativeIfBelow(sourcePath, cwd),
-        target: relativeIfBelow(target, cwd)
-      })
-    );
-    return ExitCode.Ok;
-  }
-};
-
-// cli/commands/db/reset.ts
-import { rm as rm2 } from "fs/promises";
-import { DatabaseSync as DatabaseSync4 } from "node:sqlite";
-import { Command as Command8, Option as Option8 } from "clipanion";
-
-// cli/commands/db/shared.ts
-var SAFE_SQL_IDENTIFIER_RE = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
-function assertSafeIdentifier(name) {
-  if (!SAFE_SQL_IDENTIFIER_RE.test(name)) {
-    throw new Error(`refusing to operate on non-identifier table name: ${JSON.stringify(name)}`);
+        sourcePath: relativeIfBelow(sourcePath, cwd),
+        target: relativeIfBelow(target, cwd)
+      })
+    );
+    return ExitCode.Ok;
   }
-}
+};
 
 // cli/commands/db/reset.ts
+import { rm as rm2 } from "fs/promises";
+import { DatabaseSync as DatabaseSync5 } from "node:sqlite";
+import { Command as Command8, Option as Option8 } from "clipanion";
 var DbResetCommand = class extends SmCommand {
   static paths = [["db", "reset"]];
   static usage = Command8.Usage({
@@ -11094,7 +11426,7 @@ var DbResetCommand = class extends SmCommand {
         return ExitCode.Error;
       }
     }
-    const db = new DatabaseSync4(path);
+    const db = new DatabaseSync5(path);
     try {
       const rows = db.prepare(
         "SELECT name FROM sqlite_master WHERE type='table' AND (name LIKE 'scan\\_%' ESCAPE '\\'" + (this.state ? " OR name LIKE 'state\\_%' ESCAPE '\\'" : "") + ")"
@@ -11237,7 +11569,7 @@ var DbBrowserCommand = class extends SmCommand {
 };
 
 // cli/commands/db/dump.ts
-import { DatabaseSync as DatabaseSync5 } from "node:sqlite";
+import { DatabaseSync as DatabaseSync6 } from "node:sqlite";
 import { Command as Command11, Option as Option10 } from "clipanion";
 var DbDumpCommand = class extends SmCommand {
   static paths = [["db", "dump"]];
@@ -11279,7 +11611,7 @@ var DbDumpCommand = class extends SmCommand {
   }
 };
 function dumpDatabaseToStream(dbPath, out, tables) {
-  const db = new DatabaseSync5(dbPath, { readOnly: true });
+  const db = new DatabaseSync6(dbPath, { readOnly: true });
   try {
     out.write("PRAGMA foreign_keys=OFF;\n");
     out.write("BEGIN TRANSACTION;\n");
@@ -12544,7 +12876,7 @@ function registeredVerbPaths(cli2) {
 // cli/commands/hooks.ts
 import {
   chmodSync,
-  existsSync as existsSync18,
+  existsSync as existsSync19,
   mkdirSync as mkdirSync5,
   readFileSync as readFileSync17,
   statSync as statSync5,
@@ -12643,7 +12975,7 @@ var HooksInstallCommand = class extends SmCommand {
     }
     const hooksDir = resolve26(repoRoot, ".git", "hooks");
     const hookPath = resolve26(hooksDir, "pre-commit");
-    const existing = existsSync18(hookPath) ? readFileSync17(hookPath, "utf8") : null;
+    const existing = existsSync19(hookPath) ? readFileSync17(hookPath, "utf8") : null;
     const planned2 = computePlannedHookContent(existing);
     if (planned2.kind === "already-installed") {
       this.printer.info(tx(HOOKS_TEXTS.alreadyInstalled, { glyph: okGlyph, hookPath }));
@@ -12669,7 +13001,7 @@ var HooksInstallCommand = class extends SmCommand {
       return ExitCode.Ok;
     }
     try {
-      if (!existsSync18(hooksDir)) mkdirSync5(hooksDir, { recursive: true });
+      if (!existsSync19(hooksDir)) mkdirSync5(hooksDir, { recursive: true });
       writeFileSync2(hookPath, planned2.content, { encoding: "utf8" });
       ensureExecutableBit(hookPath);
     } catch (err) {
@@ -12700,7 +13032,7 @@ var HooksInstallCommand = class extends SmCommand {
 function findGitRepoRoot(cwd) {
   let current = cwd;
   while (true) {
-    if (existsSync18(resolve26(current, ".git"))) return current;
+    if (existsSync19(resolve26(current, ".git"))) return current;
     const parent = dirname16(current);
     if (parent === current) return null;
     current = parent;
@@ -12722,11 +13054,12 @@ var HOOKS_COMMANDS = [HooksInstallCommand];
 
 // cli/commands/init.ts
 import { mkdir as mkdir3, readFile as readFile2, writeFile } from "fs/promises";
-import { join as join15 } from "path";
+import { join as join17 } from "path";
 import { Command as Command17, Option as Option16 } from "clipanion";
 
 // kernel/orchestrator/index.ts
-import { existsSync as existsSync21, statSync as statSync7 } from "fs";
+import { existsSync as existsSync22, statSync as statSync7 } from "fs";
+import { isAbsolute as isAbsolute7, resolve as resolve27 } from "path";
 import { Tiktoken as Tiktoken2 } from "js-tiktoken/lite";
 import cl100k_base from "js-tiktoken/ranks/cl100k_base";
 
@@ -12745,12 +13078,22 @@ var ORCHESTRATOR_TEXTS = {
   runScanRootMissing: "runScan: root path '{{root}}' does not exist or is not a directory"
 };
 
+// kernel/types.ts
+var ConfidenceTier = Object.freeze({
+  HIGH: 0.9,
+  MEDIUM: 0.6,
+  LOW: 0.3
+});
+
 // kernel/orchestrator/extractors.ts
 async function runExtractorsForNode(opts) {
   const internalLinks = [];
   const externalLinks = [];
   const enrichmentBuffer = /* @__PURE__ */ new Map();
   const contributions = [];
+  const signals = [];
+  const virtualNodes = [];
+  const virtualNodePaths = /* @__PURE__ */ new Set();
   const validators = loadSchemaValidators();
   for (const extractor of opts.extractors) {
     const qualifiedId2 = qualifiedExtensionId(extractor.pluginId, extractor.id);
@@ -12822,6 +13165,18 @@ async function runExtractorsForNode(opts) {
         emittedAt: Date.now()
       });
     };
+    const emitSignal = (signal) => {
+      const validated = validateSignal(extractor, signal, opts.emitter);
+      if (!validated) return;
+      signals.push(validated);
+    };
+    const emitNode = (emitted) => {
+      if (virtualNodePaths.has(emitted.path)) return;
+      const node = buildVirtualNode(extractor, emitted, opts.emitter);
+      if (!node) return;
+      virtualNodePaths.add(node.path);
+      virtualNodes.push(node);
+    };
     const store = opts.pluginStores?.get(extractor.pluginId);
     const ctx = buildExtractorContext(
       extractor,
@@ -12831,6 +13186,8 @@ async function runExtractorsForNode(opts) {
       emitLink,
       enrichNode,
       emitContribution,
+      emitSignal,
+      emitNode,
       store
     );
     await extractor.extract(ctx);
@@ -12839,7 +13196,9 @@ async function runExtractorsForNode(opts) {
     internalLinks,
     externalLinks,
     enrichments: Array.from(enrichmentBuffer.values()),
-    contributions
+    contributions,
+    signals,
+    virtualNodes
   };
 }
 function readDeclaredContributions(extension) {
@@ -12864,7 +13223,7 @@ function emitExtensionError(emitter, qualifiedId2, nodePath, data) {
     })
   );
 }
-function buildExtractorContext(extractor, node, body, frontmatter, emitLink, enrichNode, emitContribution, store) {
+function buildExtractorContext(extractor, node, body, frontmatter, emitLink, enrichNode, emitContribution, emitSignal, emitNode, store) {
   const scope = extractor.scope ?? "both";
   const settings = extractor.resolvedSettings ?? {};
   return {
@@ -12875,9 +13234,62 @@ function buildExtractorContext(extractor, node, body, frontmatter, emitLink, enr
     emitLink,
     enrichNode,
     emitContribution,
+    emitSignal,
+    emitNode,
     ...store !== void 0 ? { store } : {}
   };
 }
+var VIRTUAL_NODE_PLACEHOLDER_HASH = "0".repeat(64);
+function buildVirtualNode(extractor, emitted, emitter) {
+  const qualifiedId2 = qualifiedExtensionId(extractor.pluginId, extractor.id);
+  if (typeof emitted.path !== "string" || emitted.path.length === 0) {
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "virtual-node-missing-path",
+        extensionId: qualifiedId2,
+        message: `Extractor ${qualifiedId2} emitted a virtual node with no path; dropped.`
+      })
+    );
+    return null;
+  }
+  if (typeof emitted.kind !== "string" || emitted.kind.length === 0) {
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "virtual-node-missing-kind",
+        extensionId: qualifiedId2,
+        virtualPath: emitted.path,
+        message: `Extractor ${qualifiedId2} emitted a virtual node at '${emitted.path}' with no kind; dropped.`
+      })
+    );
+    return null;
+  }
+  if (!Array.isArray(emitted.derivedFrom) || emitted.derivedFrom.length === 0) {
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "virtual-node-missing-derived-from",
+        extensionId: qualifiedId2,
+        virtualPath: emitted.path,
+        message: `Extractor ${qualifiedId2} emitted a virtual node at '${emitted.path}' with empty derivedFrom; dropped.`
+      })
+    );
+    return null;
+  }
+  const node = {
+    path: emitted.path,
+    kind: emitted.kind,
+    provider: emitted.provider,
+    bodyHash: VIRTUAL_NODE_PLACEHOLDER_HASH,
+    frontmatterHash: VIRTUAL_NODE_PLACEHOLDER_HASH,
+    bytes: { frontmatter: 0, body: 0, total: 0 },
+    linksOutCount: 0,
+    linksInCount: 0,
+    externalRefsCount: 0,
+    virtual: true,
+    derivedFrom: [...emitted.derivedFrom]
+  };
+  if (emitted.frontmatter) node.frontmatter = emitted.frontmatter;
+  return node;
+}
 function validateLink(extractor, link2, emitter) {
   const knownKinds = ["invokes", "references", "mentions", "supersedes"];
   if (!knownKinds.includes(link2.kind)) {
@@ -12898,9 +13310,68 @@ function validateLink(extractor, link2, emitter) {
     );
     return null;
   }
-  const confidence = link2.confidence ?? "medium";
+  const c = link2.confidence;
+  if (c !== void 0 && (typeof c !== "number" || !Number.isFinite(c) || c < 0 || c > 1)) {
+    const qualifiedId2 = `${extractor.pluginId}/${extractor.id}`;
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "link-confidence-out-of-range",
+        extensionId: qualifiedId2,
+        confidence: c,
+        message: `Extractor ${qualifiedId2} emitted a Link with confidence ${String(c)} outside [0..1]; dropped.`
+      })
+    );
+    return null;
+  }
+  const confidence = c ?? ConfidenceTier.MEDIUM;
   return { ...link2, confidence };
 }
+var KNOWN_LINK_KINDS = ["invokes", "references", "mentions", "supersedes"];
+function validateSignal(extractor, signal, emitter) {
+  const qualifiedId2 = qualifiedExtensionId(extractor.pluginId, extractor.id);
+  if (!Array.isArray(signal.candidates) || signal.candidates.length === 0) {
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "signal-no-candidates",
+        extensionId: qualifiedId2,
+        signal: { source: signal.source, scope: signal.scope },
+        message: `Extractor ${qualifiedId2} emitted a Signal with no candidates; dropped.`
+      })
+    );
+    return null;
+  }
+  for (const candidate of signal.candidates) {
+    if (!isValidSignalCandidate(qualifiedId2, candidate, emitter)) return null;
+  }
+  return signal;
+}
+function isValidSignalCandidate(qualifiedId2, candidate, emitter) {
+  if (!KNOWN_LINK_KINDS.includes(candidate.kind)) {
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "signal-candidate-kind-not-declared",
+        extensionId: qualifiedId2,
+        candidateKind: candidate.kind,
+        declaredKinds: KNOWN_LINK_KINDS,
+        message: `Extractor ${qualifiedId2} emitted a Signal candidate with off-enum kind '${String(candidate.kind)}'; dropped.`
+      })
+    );
+    return false;
+  }
+  const c = candidate.confidence;
+  if (typeof c !== "number" || !Number.isFinite(c) || c < 0 || c > 1) {
+    emitter.emit(
+      makeEvent("extension.error", {
+        kind: "signal-candidate-confidence-out-of-range",
+        extensionId: qualifiedId2,
+        confidence: candidate.confidence,
+        message: `Extractor ${qualifiedId2} emitted a Signal candidate with confidence ${String(c)} outside [0..1]; dropped.`
+      })
+    );
+    return false;
+  }
+  return true;
+}
 function dedupeLinks(links) {
   const out = /* @__PURE__ */ new Map();
   for (const link2 of links) {
@@ -12915,6 +13386,9 @@ function dedupeLinks(links) {
           existing.sources = [...existing.sources, src];
         }
       }
+      if (link2.confidence > existing.confidence) {
+        existing.confidence = link2.confidence;
+      }
       continue;
     }
     out.set(key, link2);
@@ -12947,7 +13421,9 @@ function recomputeExternalRefsCount(nodes, externalLinks, cachedPaths) {
   }
 }
 var EXTERNAL_URL_SCHEME_RE = /^[a-z][a-z0-9+\-.]+:/i;
+var VIRTUAL_NODE_SCHEME_RE = /^mcp:\/\//i;
 function isExternalUrlLink(link2) {
+  if (VIRTUAL_NODE_SCHEME_RE.test(link2.target)) return false;
   return EXTERNAL_URL_SCHEME_RE.test(link2.target);
 }
 
@@ -13106,13 +13582,9 @@ function originatingNodeOf(link2, priorNodePaths) {
 }
 function computeCacheDecision(opts) {
   const applicableExtractors = opts.extractors.filter((ex) => {
-    const kinds = ex.precondition?.kind;
-    if (!kinds || kinds.length === 0) return true;
-    return kinds.some((qualified) => {
-      const slashIdx = qualified.indexOf("/");
-      const kindOnly = slashIdx === -1 ? qualified : qualified.slice(slashIdx + 1);
-      return kindOnly === opts.kind;
-    });
+    if (!matchesKindPrecondition(ex, opts.kind)) return false;
+    if (!matchesProviderPrecondition(ex, opts.provider, opts.activeProvider)) return false;
+    return true;
   });
   const applicableQualifiedIds = new Set(
     applicableExtractors.map((ex) => qualifiedExtensionId(ex.pluginId, ex.id))
@@ -13126,6 +13598,22 @@ function computeCacheDecision(opts) {
     fullCacheHit: opts.nodeHashCacheEligible && split.missingExtractors.length === 0
   };
 }
+function matchesKindPrecondition(ex, kind) {
+  const kinds = ex.precondition?.kind;
+  if (!kinds || kinds.length === 0) return true;
+  return kinds.some((qualified) => {
+    const slashIdx = qualified.indexOf("/");
+    const kindOnly = slashIdx === -1 ? qualified : qualified.slice(slashIdx + 1);
+    return kindOnly === kind;
+  });
+}
+function matchesProviderPrecondition(ex, nodeProvider, activeProvider) {
+  const providers = ex.precondition?.provider;
+  if (!providers || providers.length === 0) return true;
+  if (!providers.includes(nodeProvider)) return false;
+  if (activeProvider === null) return false;
+  return providers.includes(activeProvider);
+}
 function splitLegacy(applicableExtractors, applicableQualifiedIds, nodeHashCacheEligible) {
   const cachedQualifiedIds = /* @__PURE__ */ new Set();
   const missingExtractors = [];
@@ -13225,6 +13713,65 @@ function classifyLinkSource(source, shortIdToQualified, cachedQualifiedIds, appl
   return "obsolete";
 }
 
+// kernel/orchestrator/lift-mention-confidence.ts
+function liftMentionConfidence(links, nodes) {
+  if (!links.some((l) => l.kind === "mentions")) return;
+  const byPath3 = /* @__PURE__ */ new Set();
+  for (const node of nodes) byPath3.add(node.path);
+  const byNormalizedName = indexByNormalizedName2(nodes);
+  for (const link2 of links) {
+    if (link2.kind !== "mentions") continue;
+    if (isResolved2(link2, byPath3, byNormalizedName)) {
+      link2.confidence = 1;
+    }
+  }
+}
+function isResolved2(link2, byPath3, byNormalizedName) {
+  const normalized = link2.trigger?.normalizedTrigger;
+  if (normalized) {
+    const withoutSigil = normalized.replace(/^[/@]/, "").trim();
+    if (byNormalizedName.has(withoutSigil)) return true;
+  }
+  if (byPath3.has(link2.target)) return true;
+  return false;
+}
+function indexByNormalizedName2(nodes) {
+  const out = /* @__PURE__ */ new Map();
+  for (const node of nodes) {
+    const raw = node.frontmatter?.["name"];
+    const name = typeof raw === "string" ? raw : "";
+    if (!name) continue;
+    out.set(normalizeTrigger(name), true);
+  }
+  return out;
+}
+
+// kernel/orchestrator/post-walk-transforms.ts
+var POST_WALK_TRANSFORMS = [
+  {
+    id: "dedupe-links",
+    description: "Collapse identical (source, target, kind, normalizedTrigger) edges across extractors; union sources[] and pick max confidence on merge.",
+    run(links) {
+      return dedupeLinks(links);
+    }
+  },
+  {
+    id: "lift-mention-confidence",
+    description: "Bump resolved `mentions` links to confidence 1.0 once the full node graph is known (post-merge polish).",
+    run(links, nodes) {
+      liftMentionConfidence(links, nodes);
+    }
+  }
+];
+function applyPostWalkTransforms(links, nodes, transforms = POST_WALK_TRANSFORMS) {
+  let current = links;
+  for (const transform of transforms) {
+    const next = transform.run(current, nodes);
+    if (next) current = next;
+  }
+  return current;
+}
+
 // kernel/orchestrator/renames.ts
 function findHighConfidenceRenames(opts) {
   const ops = [];
@@ -13235,7 +13782,7 @@ function findHighConfidenceRenames(opts) {
       if (opts.claimedNew.has(toPath)) continue;
       const toNode = opts.currentByPath.get(toPath);
       if (toNode.bodyHash === fromNode.bodyHash) {
-        ops.push({ from: fromPath, to: toPath, confidence: "high" });
+        ops.push({ from: fromPath, to: toPath, confidence: ConfidenceTier.HIGH });
         opts.claimedDeleted.add(fromPath);
         opts.claimedNew.add(toPath);
         break;
@@ -13270,13 +13817,13 @@ function claimSingletonRenames(opts) {
     const remaining = candidates.filter((p) => !opts.claimedDeleted.has(p));
     if (remaining.length === 1) {
       const fromPath = remaining[0];
-      ops.push({ from: fromPath, to: toPath, confidence: "medium" });
+      ops.push({ from: fromPath, to: toPath, confidence: ConfidenceTier.MEDIUM });
       opts.issues.push({
         analyzerId: "auto-rename-medium",
         severity: "warn",
         nodeIds: [toPath],
         message: `Auto-rename (medium confidence): ${fromPath} \u2192 ${toPath}`,
-        data: { from: fromPath, to: toPath, confidence: "medium" }
+        data: { from: fromPath, to: toPath, confidence: ConfidenceTier.MEDIUM }
       });
       opts.claimedDeleted.add(fromPath);
       opts.claimedNew.add(toPath);
@@ -13368,8 +13915,8 @@ function computeDriftStatus(args2) {
 }
 
 // kernel/sidecar/discover-orphans.ts
-import { existsSync as existsSync19, readdirSync as readdirSync7, statSync as statSync6 } from "fs";
-import { join as join12, relative as relative4, sep as sep3 } from "path";
+import { existsSync as existsSync20, readdirSync as readdirSync7, statSync as statSync6 } from "fs";
+import { join as join13, relative as relative4, sep as sep3 } from "path";
 function discoverOrphanSidecars(roots, shouldSkip) {
   const out = [];
   for (const root of roots) {
@@ -13385,7 +13932,7 @@ function walk(root, current, shouldSkip, out) {
     return;
   }
   for (const entry of entries) {
-    const full = join12(current, entry.name);
+    const full = join13(current, entry.name);
     const rel = relative4(root, full).split(sep3).join("/");
     if (shouldSkip(rel)) continue;
     if (entry.isSymbolicLink()) continue;
@@ -13396,7 +13943,7 @@ function walk(root, current, shouldSkip, out) {
     if (!entry.isFile()) continue;
     if (!entry.name.endsWith(".sm")) continue;
     const expectedMd = `${full.slice(0, -".sm".length)}.md`;
-    if (existsSync19(expectedMd) && safeIsFile(expectedMd)) continue;
+    if (existsSync20(expectedMd) && safeIsFile(expectedMd)) continue;
     out.push({ sidecarPath: full, relativePath: rel, expectedMdPath: expectedMd });
   }
 }
@@ -13410,7 +13957,7 @@ function safeIsFile(path) {
 
 // kernel/orchestrator/node-build.ts
 import { createHash } from "crypto";
-import { existsSync as existsSync20 } from "fs";
+import { existsSync as existsSync21 } from "fs";
 import { isAbsolute as isAbsolute6, resolve as resolvePath } from "path";
 import "js-tiktoken/lite";
 import yaml4 from "js-yaml";
@@ -13574,11 +14121,11 @@ function resolveSidecarOverlay(relativePath2, nodePathForIssue, roots, liveBodyH
 }
 function resolveAbsoluteMdPath(relativePath2, roots) {
   if (isAbsolute6(relativePath2)) {
-    return existsSync20(relativePath2) ? relativePath2 : null;
+    return existsSync21(relativePath2) ? relativePath2 : null;
   }
   for (const root of roots) {
     const candidate = resolvePath(root, relativePath2);
-    if (existsSync20(candidate)) return candidate;
+    if (existsSync21(candidate)) return candidate;
   }
   return null;
 }
@@ -13714,6 +14261,8 @@ async function processRawNode(raw, provider, wctx, accum, claimedPaths, nextInde
   const cacheDecision = computeCacheDecision({
     extractors: wctx.opts.extractors,
     kind,
+    provider: provider.id,
+    activeProvider: wctx.opts.activeProvider,
     nodePath: raw.path,
     bodyHash,
     sidecarAnnotationsHash,
@@ -13816,6 +14365,10 @@ function mergeExtractResult(extractResult, accum) {
     accum.enrichmentBuffer.set(`${enr.nodePath}\0${enr.extractorId}`, enr);
   }
   for (const c of extractResult.contributions) accum.contributionsBuffer.push(c);
+  for (const vn of extractResult.virtualNodes) {
+    if (accum.nodes.some((n) => n.path === vn.path)) continue;
+    accum.nodes.push(vn);
+  }
 }
 function isPartialCacheHit(ctx) {
   return ctx.nodeHashCacheEligible && ctx.cacheDecision.cachedQualifiedIds.size > 0 && ctx.priorNode !== void 0;
@@ -13923,9 +14476,10 @@ async function runScanInternal(_kernel, options) {
     priorIndex: setup.priorIndex,
     priorExtractorRuns: setup.priorExtractorRuns,
     providerFrontmatter: setup.providerFrontmatter,
-    pluginStores: options.pluginStores
+    pluginStores: options.pluginStores,
+    activeProvider: resolveActiveProviderOption(options.activeProvider, options.roots)
   });
-  walked.internalLinks = dedupeLinks(walked.internalLinks);
+  walked.internalLinks = applyPostWalkTransforms(walked.internalLinks, walked.nodes);
   recomputeLinkCounts(walked.nodes, walked.internalLinks);
   recomputeExternalRefsCount(walked.nodes, walked.externalLinks, walked.cachedPaths);
   await dispatchExtractorCompleted(exts.extractors, emitter, hookDispatcher);
@@ -14041,17 +14595,27 @@ function validateRoots(roots) {
     throw new Error(ORCHESTRATOR_TEXTS.runScanRootEmptyArray);
   }
   for (const root of roots) {
-    if (!existsSync21(root) || !statSync7(root).isDirectory()) {
+    if (!existsSync22(root) || !statSync7(root).isDirectory()) {
       throw new Error(tx(ORCHESTRATOR_TEXTS.runScanRootMissing, { root }));
     }
   }
 }
+function resolveActiveProviderOption(optionValue, roots) {
+  if (optionValue !== void 0) return optionValue;
+  for (const root of roots) {
+    const absRoot = isAbsolute7(root) ? root : resolve27(root);
+    if (!existsSync22(absRoot)) continue;
+    const detected = resolveActiveProvider(absRoot).resolved;
+    if (detected !== null) return detected;
+  }
+  return null;
+}
 
 // kernel/scan/watcher.ts
-import { resolve as resolve27, relative as relative5, sep as sep4 } from "path";
+import { resolve as resolve28, relative as relative5, sep as sep4 } from "path";
 import chokidar from "chokidar";
 function createChokidarWatcher(opts) {
-  const absRoots = opts.roots.map((r) => resolve27(opts.cwd, r));
+  const absRoots = opts.roots.map((r) => resolve28(opts.cwd, r));
   const ignoreFilterOpt = opts.ignoreFilter;
   const getFilter = ignoreFilterOpt === void 0 ? void 0 : typeof ignoreFilterOpt === "function" ? ignoreFilterOpt : () => ignoreFilterOpt;
   const ignored = getFilter ? (path) => {
@@ -14270,7 +14834,7 @@ function createKernel() {
 
 // kernel/jobs/orphan-files.ts
 import { readdirSync as readdirSync8, statSync as statSync8 } from "fs";
-import { join as join13, resolve as resolve28 } from "path";
+import { join as join14, resolve as resolve29 } from "path";
 function findOrphanJobFiles(jobsDir, referencedPaths) {
   let entries;
   try {
@@ -14288,7 +14852,7 @@ function findOrphanJobFiles(jobsDir, referencedPaths) {
     if (!entry.isFile()) continue;
     const name = entry.name;
     if (!name.endsWith(".md")) continue;
-    const abs = resolve28(join13(jobsDir, name));
+    const abs = resolve29(join14(jobsDir, name));
     if (!referencedPaths.has(abs)) orphans.push(abs);
   }
   orphans.sort();
@@ -14352,7 +14916,48 @@ var SCAN_RUNNER_TEXTS = {
    * does not exist on disk. Surfaced once per missing root so the
    * operator notices a typo without the walker silently swallowing it.
    */
-  referenceWalkMissingRoot: 'scan.referencePaths: configured path "{{path}}" does not exist; skipped.'
+  referenceWalkMissingRoot: 'scan.referencePaths: configured path "{{path}}" does not exist; skipped.',
+  /**
+   * Active-provider bootstrap: filesystem auto-detect found no
+   * markers (`.claude/`, `.gemini/`, `.codex/`, `AGENTS.md`, `.cursor/`)
+   * anywhere under cwd or the effective scan roots. Plain-markdown
+   * projects keep scanning fine; provider-specific extractors silently
+   * no-op for this scan.
+   */
+  activeProviderNoMarkerWarning: "No provider markers detected (.claude/, .gemini/, .codex/, AGENTS.md, .cursor/). Scanning as universal markdown only; provider-specific link types (e.g. claude @-directives, /-commands) will not appear in the graph. Set `activeProvider` in .skill-map/settings.json or install a provider plugin to enable them.",
+  /**
+   * Active-provider bootstrap: filesystem auto-detect found exactly
+   * one marker and persisted the detected id to project settings.
+   */
+  activeProviderAutodetected: "Auto-detected activeProvider = {{id}} from filesystem markers; persisted to .skill-map/settings.json.",
+  /**
+   * Active-provider bootstrap: persistence of the auto-detected id
+   * failed (permission, disk full, etc). Non-fatal; the scan
+   * continues with the value in memory for this run.
+   */
+  activeProviderPersistFailed: "Auto-detected activeProvider = {{id}}, but persisting to .skill-map/settings.json failed: {{message}}. Run `sm config set activeProvider {{id}}` manually to make the choice sticky.",
+  /**
+   * Active-provider bootstrap: ambiguous detection (2+ markers
+   * present), interactive prompt header. Followed by one
+   * `activeProviderPromptOption` per detected provider id.
+   */
+  activeProviderPromptHeader: "Multiple provider markers detected. Pick the active lens for this project:",
+  activeProviderPromptOption: "  {{index}}) {{id}}",
+  activeProviderPromptInput: "Enter the number or provider id: ",
+  /**
+   * Active-provider bootstrap: ambiguous detection under `--yes`. The
+   * caller exits non-zero; this message names the candidates and how
+   * to resolve.
+   */
+  activeProviderAmbiguousUnderYes: "Multiple provider markers detected ({{candidates}}) and --yes is set. Set the lens explicitly with `sm config set activeProvider <id>` and re-run.",
+  /**
+   * Active lens points at a bundle the operator has disabled (via
+   * `sm plugins disable <id>` or the Settings UI). Classification keeps
+   * running because it's provider-driven, but the lens-gated extractors
+   * for the disabled bundle silently no-op. Without this warning the
+   * graph quietly differs from what the lens implies.
+   */
+  activeProviderBundleDisabledWarning: 'activeProvider = "{{id}}" but the "{{id}}" plugin bundle is currently disabled; provider-specific extractors will not run. Re-enable the bundle with `sm plugins enable {{id}}` or switch the lens with `sm config set activeProvider <id>` to silence this warning.'
 };
 
 // core/runtime/scan-roots.ts
@@ -14366,7 +14971,7 @@ function resolveScanRoots(inputs) {
 // core/runtime/reference-paths-walker.ts
 import { readdirSync as readdirSync9, statSync as statSync9 } from "fs";
 import { homedir as osHomedir2 } from "os";
-import { isAbsolute as isAbsolute7, join as join14, resolve as resolve29 } from "path";
+import { isAbsolute as isAbsolute8, join as join15, resolve as resolve30 } from "path";
 var REFERENCE_WALK_MAX_FILES = 5e4;
 var SKIPPED_DIR_NAMES = /* @__PURE__ */ new Set([
   "node_modules",
@@ -14374,10 +14979,10 @@ var SKIPPED_DIR_NAMES = /* @__PURE__ */ new Set([
   SKILL_MAP_DIR
 ]);
 function resolveScanPath(raw, cwd) {
-  if (raw.startsWith("~/")) return resolve29(join14(osHomedir2(), raw.slice(2)));
-  if (raw === "~") return resolve29(osHomedir2());
-  if (isAbsolute7(raw)) return resolve29(raw);
-  return resolve29(cwd, raw);
+  if (raw.startsWith("~/")) return resolve30(join15(osHomedir2(), raw.slice(2)));
+  if (raw === "~") return resolve30(osHomedir2());
+  if (isAbsolute8(raw)) return resolve30(raw);
+  return resolve30(cwd, raw);
 }
 function walkReferencePaths(rawRoots, cwd) {
   const paths = /* @__PURE__ */ new Set();
@@ -14406,7 +15011,7 @@ function walkInto(dir, out) {
   for (const entry of entries) {
     if (out.size >= REFERENCE_WALK_MAX_FILES) return true;
     if (entry.isSymbolicLink()) continue;
-    const full = join14(dir, entry.name);
+    const full = join15(dir, entry.name);
     if (entry.isDirectory()) {
       if (SKIPPED_DIR_NAMES.has(entry.name)) continue;
       if (walkInto(full, out)) return true;
@@ -14424,6 +15029,101 @@ function safeStat(path) {
   }
 }
 
+// core/runtime/active-provider-bootstrap.ts
+import { createInterface as createInterface2 } from "readline";
+import { isAbsolute as isAbsolute9, join as join16 } from "path";
+async function bootstrapActiveProvider(opts) {
+  const fromCwd = resolveActiveProvider(opts.cwd);
+  if (fromCwd.source === "config") {
+    return { kind: "ok", activeProvider: fromCwd.resolved, source: "config" };
+  }
+  const detected = aggregateDetected(opts.cwd, opts.effectiveRoots, fromCwd.detected);
+  if (detected.length === 0) {
+    opts.printer.warn(SCAN_RUNNER_TEXTS.activeProviderNoMarkerWarning);
+    return { kind: "ok", activeProvider: null, source: "none" };
+  }
+  if (detected.length === 1) {
+    const picked2 = detected[0];
+    persistActiveProvider(opts.cwd, picked2, opts.printer);
+    return { kind: "ok", activeProvider: picked2, source: "autodetect" };
+  }
+  if (opts.yes) {
+    return { kind: "ambiguous", detected };
+  }
+  const picked = await promptForLens(detected, opts.stdin, opts.stderr);
+  if (picked === null) {
+    return { kind: "ambiguous", detected };
+  }
+  persistActiveProvider(opts.cwd, picked, opts.printer);
+  return { kind: "ok", activeProvider: picked, source: "autodetect" };
+}
+function aggregateDetected(cwd, effectiveRoots, cwdDetected) {
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const id of cwdDetected) {
+    if (seen.has(id)) continue;
+    seen.add(id);
+    out.push(id);
+  }
+  for (const root of effectiveRoots) {
+    const absRoot = isAbsolute9(root) ? root : join16(cwd, root);
+    const r = resolveActiveProvider(absRoot);
+    for (const id of r.detected) {
+      if (seen.has(id)) continue;
+      seen.add(id);
+      out.push(id);
+    }
+  }
+  return out;
+}
+function persistActiveProvider(cwd, id, printer) {
+  try {
+    writeConfigValue("activeProvider", id, { target: "project", cwd });
+    printer.info(tx(SCAN_RUNNER_TEXTS.activeProviderAutodetected, { id }));
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    printer.warn(
+      tx(SCAN_RUNNER_TEXTS.activeProviderPersistFailed, { id, message })
+    );
+  }
+}
+function warnIfLensBundleDisabled(args2) {
+  if (args2.activeProvider === null) return;
+  if (args2.resolveEnabled(args2.activeProvider)) return;
+  args2.printer.warn(
+    tx(SCAN_RUNNER_TEXTS.activeProviderBundleDisabledWarning, {
+      id: args2.activeProvider
+    })
+  );
+}
+async function promptForLens(detected, stdin, stderr) {
+  const lines = [SCAN_RUNNER_TEXTS.activeProviderPromptHeader];
+  for (let i = 0; i < detected.length; i += 1) {
+    lines.push(
+      tx(SCAN_RUNNER_TEXTS.activeProviderPromptOption, {
+        index: i + 1,
+        id: detected[i]
+      })
+    );
+  }
+  stderr.write(lines.join("\n") + "\n");
+  const rl = createInterface2({ input: stdin, output: stderr });
+  try {
+    const answer = await new Promise(
+      (resolveP) => rl.question(SCAN_RUNNER_TEXTS.activeProviderPromptInput, resolveP)
+    );
+    const trimmed = answer.trim();
+    const asNumber = Number.parseInt(trimmed, 10);
+    if (!Number.isNaN(asNumber) && asNumber >= 1 && asNumber <= detected.length) {
+      return detected[asNumber - 1];
+    }
+    const asId = detected.find((d) => d.toLowerCase() === trimmed.toLowerCase());
+    return asId ?? null;
+  } finally {
+    rl.close();
+  }
+}
+
 // core/runtime/scan-runner.ts
 async function runScanForCommand(opts) {
   const ctx = opts.ctx ?? defaultRuntimeContext();
@@ -14431,20 +15131,9 @@ async function runScanForCommand(opts) {
   const kernel = createKernel();
   const pluginRuntime = await preparePluginRuntime(opts, opts.printer);
   const extensions = registerExtensions(kernel, pluginRuntime, opts);
-  let cfg;
-  try {
-    cfg = loadConfig({ strict: opts.strict, ...ctx }).effective;
-  } catch (err) {
-    return { kind: "config-error", message: formatErrorMessage(err) };
-  }
-  const ignoreFilter = buildScanIgnoreFilter(cfg, ctx.cwd);
-  const strict = opts.strict || cfg.scan.strict === true;
-  let effectiveRoots;
-  try {
-    effectiveRoots = resolveScanRoots({ positionalRoots: opts.roots });
-  } catch (err) {
-    return { kind: "config-error", message: formatErrorMessage(err) };
-  }
+  const scanInputs = loadScanInputs(opts, ctx);
+  if ("kind" in scanInputs) return scanInputs;
+  const { cfg, ignoreFilter, strict, effectiveRoots } = scanInputs;
   let referenceablePaths;
   if (cfg.scan.referencePaths.length > 0) {
     const walk2 = walkReferencePaths(cfg.scan.referencePaths, ctx.cwd);
@@ -14453,6 +15142,9 @@ async function runScanForCommand(opts) {
   }
   const loadPrior = makePriorLoader(opts.noBuiltIns, strict);
   const jobsDir = defaultProjectJobsDir(ctx);
+  const lens = await resolveActiveLens(opts, ctx, effectiveRoots, pluginRuntime);
+  if (lens.kind === "ambiguous-provider") return lens;
+  const activeProvider = lens.activeProvider;
   const runScanWith = makeScanRunner(
     kernel,
     opts,
@@ -14461,11 +15153,37 @@ async function runScanForCommand(opts) {
     strict,
     extensions,
     referenceablePaths,
-    ctx.cwd
+    ctx.cwd,
+    activeProvider
   );
   const willPersist = !opts.noBuiltIns && !opts.dryRun;
   return willPersist ? runPersistPath(opts, dbPath, jobsDir, strict, loadPrior, runScanWith, extensions) : runEphemeralPath(opts, dbPath, strict, loadPrior, runScanWith);
 }
+async function resolveActiveLens(opts, ctx, effectiveRoots, pluginRuntime) {
+  const bootstrap = await bootstrapActiveProvider({
+    cwd: ctx.cwd,
+    effectiveRoots,
+    yes: opts.yes ?? false,
+    stdin: opts.stdin ?? process.stdin,
+    stderr: opts.stderr,
+    printer: opts.printer
+  });
+  if (bootstrap.kind === "ambiguous") {
+    return {
+      kind: "ambiguous-provider",
+      detected: bootstrap.detected,
+      message: tx(SCAN_RUNNER_TEXTS.activeProviderAmbiguousUnderYes, {
+        candidates: bootstrap.detected.join(", ")
+      })
+    };
+  }
+  warnIfLensBundleDisabled({
+    activeProvider: bootstrap.activeProvider,
+    resolveEnabled: opts.resolveEnabledOverride ?? pluginRuntime.resolveEnabled,
+    printer: opts.printer
+  });
+  return { kind: "ok", activeProvider: bootstrap.activeProvider };
+}
 function emitReferenceWalkAdvisory(walk2, opts) {
   if (walk2.truncated) {
     opts.printer.warn(SCAN_RUNNER_TEXTS.referenceWalkTruncated);
@@ -14499,6 +15217,17 @@ function registerExtensions(kernel, pluginRuntime, opts) {
   registerEnabledExtensions(kernel, pluginRuntime, registerOpts);
   return extensions;
 }
+function loadScanInputs(opts, ctx) {
+  try {
+    const cfg = loadConfig({ strict: opts.strict, ...ctx }).effective;
+    const ignoreFilter = buildScanIgnoreFilter(cfg, ctx.cwd);
+    const strict = opts.strict || cfg.scan.strict === true;
+    const effectiveRoots = resolveScanRoots({ positionalRoots: opts.roots });
+    return { cfg, ignoreFilter, strict, effectiveRoots };
+  } catch (err) {
+    return { kind: "config-error", message: formatErrorMessage(err) };
+  }
+}
 function buildScanIgnoreFilter(cfg, cwd) {
   const ignoreFileText = readIgnoreFileText(cwd);
   const ignoreFilterOpts = {};
@@ -14521,7 +15250,7 @@ function makePriorLoader(noBuiltIns, strict) {
     return loaded;
   };
 }
-function makeScanRunner(kernel, opts, effectiveRoots, ignoreFilter, strict, extensions, referenceablePaths, scanCwd) {
+function makeScanRunner(kernel, opts, effectiveRoots, ignoreFilter, strict, extensions, referenceablePaths, scanCwd, activeProvider) {
   return async (prior, priorExtractorRuns, orphanJobFiles) => {
     if (opts.changed && prior === null) {
       opts.stderr.write(SCAN_RUNNER_TEXTS.changedNoPriorWarning);
@@ -14535,6 +15264,7 @@ function makeScanRunner(kernel, opts, effectiveRoots, ignoreFilter, strict, exte
       referenceablePaths,
       cwd: scanCwd,
       prior,
+      activeProvider,
       ...priorExtractorRuns ? { priorExtractorRuns } : {},
       ...orphanJobFiles ? { orphanJobFiles } : {}
     });
@@ -14555,7 +15285,8 @@ function buildRunScanOptions(args2) {
     // visible from this caller" (legacy behaviour). The orchestrator
     // defaults to `[]` when the field is absent; we always pass the
     // array (possibly empty) to keep the wiring uniform.
-    orphanJobFiles: orphanJobFiles ?? []
+    orphanJobFiles: orphanJobFiles ?? [],
+    activeProvider: args2.activeProvider
   };
   if (args2.extensions) runOptions.extensions = args2.extensions;
   if (prior) {
@@ -14698,7 +15429,7 @@ var InitCommand = class extends SmCommand {
   async run() {
     const ctx = defaultRuntimeContext();
     const scopeRoot = ctx.cwd;
-    const skillMapDir = join15(scopeRoot, SKILL_MAP_DIR);
+    const skillMapDir = join17(scopeRoot, SKILL_MAP_DIR);
     const settingsPath = defaultSettingsPath(scopeRoot);
     const localPath = defaultLocalSettingsPath(scopeRoot);
     const ignorePath = defaultIgnoreFilePath(scopeRoot);
@@ -14744,7 +15475,7 @@ var InitCommand = class extends SmCommand {
     const okGlyph = ansi.green("\u2713");
     const updated = await ensureGitignoreEntries(scopeRoot, GITIGNORE_ENTRIES);
     if (updated) {
-      const gitignorePath = join15(scopeRoot, ".gitignore");
+      const gitignorePath = join17(scopeRoot, ".gitignore");
       printer.info(
         GITIGNORE_ENTRIES.length === 1 ? tx(INIT_TEXTS.gitignoreUpdatedSingular, { glyph: okGlyph, path: gitignorePath }) : tx(INIT_TEXTS.gitignoreUpdatedPlural, {
           glyph: okGlyph,
@@ -14783,7 +15514,7 @@ async function dryRunFileMessage(path) {
 }
 async function writeDryRunGitignorePlan(printer, scopeRoot) {
   const wouldAdd = await previewGitignoreEntries(scopeRoot, GITIGNORE_ENTRIES);
-  const gitignorePath = join15(scopeRoot, ".gitignore");
+  const gitignorePath = join17(scopeRoot, ".gitignore");
   if (wouldAdd.length === 0) {
     printer.info(tx(INIT_TEXTS.dryRunWouldLeaveGitignoreUnchanged, { path: gitignorePath }));
   } else if (wouldAdd.length === 1) {
@@ -14822,7 +15553,14 @@ async function runFirstScan(scopeRoot, strict, printer, stderr, ansi) {
     strict,
     stderr,
     printer,
-    ctx: { cwd: scopeRoot }
+    ctx: { cwd: scopeRoot },
+    // Init's first scan is a provisioning step, not the user's
+    // primary "show me my graph" call. Don't block waiting for the
+    // operator to disambiguate the lens here; let init complete with
+    // `activeProvider` unset and let the FIRST explicit `sm scan`
+    // surface the prompt. Treat the `ambiguous-provider` outcome below
+    // as a soft hint, not a failure.
+    yes: true
   });
   const errGlyph = ansi.red("\u2715");
   if (outcome.kind === "config-error") {
@@ -14842,6 +15580,10 @@ async function runFirstScan(scopeRoot, strict, printer, stderr, ansi) {
     );
     return ExitCode.Error;
   }
+  if (outcome.kind === "ambiguous-provider") {
+    printer.warn(outcome.message);
+    return ExitCode.Ok;
+  }
   const result = outcome.result;
   const hasErrors = result.issues.some((i) => i.severity === "error");
   printer.info(
@@ -14858,7 +15600,7 @@ async function runFirstScan(scopeRoot, strict, printer, stderr, ansi) {
   return hasErrors ? ExitCode.Issues : ExitCode.Ok;
 }
 async function previewGitignoreEntries(scopeRoot, entries) {
-  const path = join15(scopeRoot, ".gitignore");
+  const path = join17(scopeRoot, ".gitignore");
   const body = await pathExists(path) ? await readFile2(path, "utf8") : "";
   const present = new Set(
     body.split("\n").map((line) => line.trim()).filter((line) => line.length > 0 && !line.startsWith("#"))
@@ -14866,7 +15608,7 @@ async function previewGitignoreEntries(scopeRoot, entries) {
   return entries.filter((entry) => !present.has(entry));
 }
 async function ensureGitignoreEntries(scopeRoot, entries) {
-  const path = join15(scopeRoot, ".gitignore");
+  const path = join17(scopeRoot, ".gitignore");
   let body = "";
   if (await pathExists(path)) {
     body = await readFile2(path, "utf8");
@@ -16431,8 +17173,8 @@ var PLUGINS_TEXTS = {
   doctorIssueEntry: "    {{glyph}}  {{id}}  {{status}}\n",
   doctorIssueBody: "       {{line}}\n",
   // --- enable / disable -----------------------------------------------
-  toggleBothIdAndAll: "{{glyph}}  Pass either an <id> or --all, not both.\n",
-  toggleNeitherIdNorAll: "{{glyph}}  Pass <id> or --all.\n",
+  toggleBothIdAndAll: "{{glyph}}  Pass either one or more <id> arguments or --all, not both.\n",
+  toggleNeitherIdNorAll: "{{glyph}}  Pass one or more <id> arguments, or --all.\n",
   toggleResolveError: "{{error}}",
   toggleAppliedSingle: "{{verbPast}}: {{id}}\n",
   toggleAppliedManyHeader: "{{verbPast}}: {{count}} plugin(s)\n",
@@ -16534,9 +17276,9 @@ var PLUGINS_TEXTS = {
 };
 
 // cli/commands/plugins/shared.ts
-import { resolve as resolve30 } from "path";
+import { resolve as resolve31 } from "path";
 function resolveSearchPaths2(opts, cwd) {
-  if (opts.pluginDir) return [resolve30(opts.pluginDir)];
+  if (opts.pluginDir) return [resolve31(opts.pluginDir)];
   return [defaultProjectPluginsDir({ cwd })];
 }
 async function buildResolver() {
@@ -17418,7 +18160,7 @@ function buildDoctorJsonEnvelope(args2) {
 import { Command as Command25, Option as Option24 } from "clipanion";
 var TogglePluginsBase = class extends SmCommand {
   all = Option24.Boolean("--all", false);
-  id = Option24.String({ required: false });
+  ids = Option24.Rest({ name: "ids" });
   async toggle(enabled) {
     const verb = enabled ? "enable" : "disable";
     const stderrAnsi = this.ansiFor("stderr");
@@ -17437,23 +18179,24 @@ var TogglePluginsBase = class extends SmCommand {
     return ExitCode.Ok;
   }
   /**
-   * `--all` vs `<id>` mutex check. The two are mutually exclusive and
-   * one must be present; surfaces a directed error on misuse.
+   * `--all` vs `<id>...` mutex check. The two are mutually exclusive
+   * and one must be present; surfaces a directed error on misuse.
+   * Variadic positional accepts one or more ids.
    */
   #validateArgs(ansi) {
     const errGlyph = ansi.red("\u2715");
-    if (this.all && this.id) {
+    if (this.all && this.ids.length > 0) {
       this.printer.error(tx(PLUGINS_TEXTS.toggleBothIdAndAll, { glyph: errGlyph }));
       return ExitCode.Error;
     }
-    if (!this.all && !this.id) {
+    if (!this.all && this.ids.length === 0) {
       this.printer.error(tx(PLUGINS_TEXTS.toggleNeitherIdNorAll, { glyph: errGlyph }));
       return ExitCode.Error;
     }
     return null;
   }
   /**
-   * Resolve `<id>` against the catalogue or fan out via `--all`.
+   * Resolve `<id>...` against the catalogue or fan out via `--all`.
    * Returns the target list on success, or the exit code on a
    * directed-error path (unknown id, granularity mismatch).
    *
@@ -17464,25 +18207,35 @@ var TogglePluginsBase = class extends SmCommand {
    * the directed error message when they try the bundle id directly,
    * so `--all` skips them here too and the real "disable every core
    * extension" intent is served by `--no-built-ins` on `sm scan`.
+   *
+   * Variadic mode is all-or-nothing: the first bad id aborts the
+   * batch before any DB write, so the user never lands in a partial
+   * state. Repeated ids in the same call are deduped.
    */
   #pickTargets(catalogue, verb, ansi) {
     if (this.all) {
       return catalogue.filter((b) => b.granularity === "bundle").map((b) => b.id);
     }
-    const resolved = resolveToggleTarget(this.id, catalogue, verb, ansi);
-    if ("error" in resolved) {
-      this.printer.error(tx(PLUGINS_TEXTS.toggleResolveError, { error: resolved.error }));
-      return ExitCode.NotFound;
+    const keys = [];
+    for (const rawId of this.ids) {
+      const resolved = resolveToggleTarget(rawId, catalogue, verb, ansi);
+      if ("error" in resolved) {
+        this.printer.error(tx(PLUGINS_TEXTS.toggleResolveError, { error: resolved.error }));
+        return ExitCode.NotFound;
+      }
+      keys.push(resolved.key);
     }
-    return [resolved.key];
+    return [...new Set(keys)];
   }
   /**
-   * Host lock, see `src/kernel/config/locked-plugins.ts`. `--all`
-   * silently skips locked targets so the user can still toggle the
-   * rest. Single-id mode surfaces a directed exit-5 message.
+   * Host lock, see `src/kernel/config/locked-plugins.ts`. Bulk modes
+   * (`--all` or an explicit batch of >1 ids) silently skip locked
+   * targets so the user can still toggle the rest. Single-id mode
+   * surfaces a directed exit-5 message so the user knows their one
+   * intended target was refused.
    */
   #applyLockGate(targets, ansi) {
-    if (this.all) return targets.filter((id) => !isPluginLocked(id));
+    if (this.all || this.ids.length > 1) return targets.filter((id) => !isPluginLocked(id));
     const lockedHit = targets.find((id) => isPluginLocked(id));
     if (!lockedHit) return targets;
     this.printer.error(
@@ -17538,12 +18291,19 @@ var PluginsEnableCommand = class extends TogglePluginsBase {
   static paths = [["plugins", "enable"]];
   static usage = Command25.Usage({
     category: "Plugins",
-    description: "Enable a plugin (or --all). Persists in config_plugins.",
+    description: "Enable one or more plugins (or --all). Persists in config_plugins.",
     details: `
-      Writes a row to config_plugins with enabled=1. Takes precedence
-      over the team-shared baseline at settings.json#/plugins/<id>/enabled.
-      Use sm plugins disable to flip; sm config reset plugins.<id>.enabled
-      drops the settings.json baseline.
+      Writes a row to config_plugins with enabled=1 per id. Takes
+      precedence over the team-shared baseline at
+      settings.json#/plugins/<id>/enabled. Use sm plugins disable to
+      flip; sm config reset plugins.<id>.enabled drops the settings.json
+      baseline.
+
+      Accepts one or more ids in one call, e.g.
+      'sm plugins enable claude gemini openai'. Batches are
+      all-or-nothing: a single unknown / mismatched id aborts before
+      any write. Repeated ids are deduped. Locked plugins inside a
+      batch are silently skipped.
 
       Granularity: a bundle-granularity plugin (default for user plugins,
       and the built-in 'claude' bundle) accepts only the bundle id. An
@@ -17560,12 +18320,18 @@ var PluginsDisableCommand = class extends TogglePluginsBase {
   static paths = [["plugins", "disable"]];
   static usage = Command25.Usage({
     category: "Plugins",
-    description: "Disable a plugin (or --all). Persists in config_plugins; does not delete files.",
+    description: "Disable one or more plugins (or --all). Persists in config_plugins; does not delete files.",
     details: `
-      Writes a row to config_plugins with enabled=0. Discovery still
-      surfaces the plugin in sm plugins list, but with status=disabled;
-      its extensions are not imported and the kernel will not run
-      them.
+      Writes a row to config_plugins with enabled=0 per id. Discovery
+      still surfaces the plugin in sm plugins list, but with
+      status=disabled; its extensions are not imported and the kernel
+      will not run them.
+
+      Accepts one or more ids in one call, e.g.
+      'sm plugins disable gemini openai agent-skills'. Batches are
+      all-or-nothing: a single unknown / mismatched id aborts before
+      any write. Repeated ids are deduped. Locked plugins inside a
+      batch are silently skipped.
 
       Granularity: a bundle-granularity plugin (default for user plugins,
       and the built-in 'claude' bundle) accepts only the bundle id. An
@@ -17671,8 +18437,8 @@ function resolveBareToggle(id, catalogue, verb, ansi) {
 }
 
 // cli/commands/plugins/create.ts
-import { existsSync as existsSync22, mkdirSync as mkdirSync6, writeFileSync as writeFileSync3 } from "fs";
-import { join as join16, resolve as resolve31 } from "path";
+import { existsSync as existsSync23, mkdirSync as mkdirSync6, writeFileSync as writeFileSync3 } from "fs";
+import { join as join18, resolve as resolve32 } from "path";
 import { Command as Command26, Option as Option25 } from "clipanion";
 var PluginsCreateCommand = class extends SmCommand {
   static paths = [["plugins", "create"]];
@@ -17698,8 +18464,8 @@ var PluginsCreateCommand = class extends SmCommand {
     }
     const ctx = defaultRuntimeContext();
     const baseDir = defaultProjectPluginsDir(ctx);
-    const targetDir = this.at ? resolve31(this.at) : join16(baseDir, this.pluginId);
-    if (existsSync22(targetDir) && !this.force) {
+    const targetDir = this.at ? resolve32(this.at) : join18(baseDir, this.pluginId);
+    if (existsSync23(targetDir) && !this.force) {
       this.printer.error(
         tx(PLUGINS_TEXTS.createRefuseOverwrite, {
           glyph: errGlyph,
@@ -17709,7 +18475,7 @@ var PluginsCreateCommand = class extends SmCommand {
       return ExitCode.Error;
     }
     const extractorName = `${this.pluginId}-extractor`;
-    mkdirSync6(join16(targetDir, "extractors", extractorName), { recursive: true });
+    mkdirSync6(join18(targetDir, "extractors", extractorName), { recursive: true });
     const specVersion = installedSpecVersion();
     const manifest = {
       id: this.pluginId,
@@ -17729,14 +18495,14 @@ var PluginsCreateCommand = class extends SmCommand {
       }
     };
     writeFileSync3(
-      join16(targetDir, "plugin.json"),
+      join18(targetDir, "plugin.json"),
       JSON.stringify(manifest, null, 2) + "\n"
     );
     writeFileSync3(
-      join16(targetDir, "extractors", extractorName, "index.js"),
+      join18(targetDir, "extractors", extractorName, "index.js"),
       scaffolderExtractorStub(extractorName)
     );
-    writeFileSync3(join16(targetDir, "README.md"), scaffolderReadme(this.pluginId));
+    writeFileSync3(join18(targetDir, "README.md"), scaffolderReadme(this.pluginId));
     this.printer.data(
       tx(PLUGINS_TEXTS.createSuccess, {
         targetDir: sanitizeForTerminal(targetDir),
@@ -17939,7 +18705,7 @@ var PLUGIN_COMMANDS = [
 
 // cli/commands/refresh.ts
 import { readFile as readFile3 } from "fs/promises";
-import { resolve as resolve32 } from "path";
+import { resolve as resolve33 } from "path";
 import { Command as Command29, Option as Option27 } from "clipanion";
 
 // cli/i18n/refresh.texts.ts
@@ -18223,7 +18989,7 @@ var RefreshCommand = class extends SmCommand {
       let body;
       try {
         assertContained(cwd, node.path);
-        const raw = await readFile3(resolve32(cwd, node.path), "utf8");
+        const raw = await readFile3(resolve33(cwd, node.path), "utf8");
         body = stripFrontmatterFence(raw);
       } catch (err) {
         if (!this.json) {
@@ -18964,6 +19730,9 @@ var ScanCommand = class extends SmCommand {
   watch = Option29.Boolean("--watch", false, {
     description: "Long-running mode: watch the roots and trigger an incremental scan after each debounced batch of filesystem events. Alias of `sm watch`."
   });
+  yes = Option29.Boolean("--yes", false, {
+    description: "Non-interactive mode for ambiguous activeProvider auto-detect. With `--yes`, multiple provider markers (.claude/, .gemini/, .codex/, AGENTS.md, .cursor/) under the scan tree exit non-zero instead of prompting the operator. Set the lens manually via `sm config set activeProvider <id>` and re-run."
+  });
   // Each branch in the orchestrator maps to one validation gate
   // (--watch alias / --changed mutex / -g mutex / dispatch).
   // Splitting per branch scatters the gate from the value it gates.
@@ -18992,9 +19761,11 @@ var ScanCommand = class extends SmCommand {
       allowEmpty: this.allowEmpty,
       strict: this.strict,
       stderr: this.context.stderr,
+      stdin: this.context.stdin,
       printer: this.printer,
       killSwitches: readConformanceKillSwitches(),
-      colorEnabled
+      colorEnabled,
+      yes: this.yes
     });
     return outcome.kind === "ok" ? this.renderOutcome(outcome.result, outcome.persistedTo, outcome.dbPath, outcome.strict) : this.renderFailure(outcome);
   }
@@ -19065,6 +19836,12 @@ var ScanCommand = class extends SmCommand {
       );
       return ExitCode.Error;
     }
+    if (outcome.kind === "ambiguous-provider") {
+      this.printer.info(
+        tx(SCAN_TEXTS.scanFailure, { glyph: errGlyph, message: outcome.message })
+      );
+      return ExitCode.Error;
+    }
     this.printer.info(
       tx(SCAN_TEXTS.scanFailure, { glyph: errGlyph, message: outcome.message })
     );
@@ -19147,7 +19924,7 @@ function plural(count, word) {
 }
 
 // cli/commands/scan-compare.ts
-import { existsSync as existsSync23, readFileSync as readFileSync18 } from "fs";
+import { existsSync as existsSync24, readFileSync as readFileSync18 } from "fs";
 import { Command as Command32, Option as Option30 } from "clipanion";
 var ScanCompareCommand = class extends SmCommand {
   static paths = [["scan", "compare-with"]];
@@ -19259,7 +20036,7 @@ var ScanCompareCommand = class extends SmCommand {
   }
 };
 function loadAndValidateDump(path) {
-  if (!existsSync23(path)) {
+  if (!existsSync24(path)) {
     throw new Error(tx(SCAN_TEXTS.compareDumpNotFound, { path }));
   }
   let raw;
@@ -19389,7 +20166,7 @@ function renderDeltaIssues(issues) {
 
 // cli/commands/serve.ts
 import { spawn as spawn2 } from "child_process";
-import { existsSync as existsSync28 } from "fs";
+import { existsSync as existsSync30 } from "fs";
 import { Command as Command33, Option as Option31 } from "clipanion";
 
 // cli/util/browser-launch.ts
@@ -19411,7 +20188,7 @@ import { WebSocketServer } from "ws";
 // server/app.ts
 import { Hono } from "hono";
 import { bodyLimit } from "hono/body-limit";
-import { HTTPException as HTTPException14 } from "hono/http-exception";
+import { HTTPException as HTTPException15 } from "hono/http-exception";
 
 // core/config/service.ts
 var ConfigService = class {
@@ -19719,7 +20496,20 @@ var SERVER_TEXTS = {
   // is a synthetic `emitter.error` event; v14.4.a does not yet route
   // it through the broadcaster (would re-enter the same stringify
   // path), so we degrade to a logged warning.
-  wsBroadcastSerializeFailed: "skill-map server: ws broadcast dropped, failed to serialize event: {{message}}.\n"
+  wsBroadcastSerializeFailed: "skill-map server: ws broadcast dropped, failed to serialize event: {{message}}.\n",
+  // ---- active-provider route (routes/active-provider.ts) -----------
+  //
+  // GET / PUT /api/active-provider. The active provider lens selects
+  // which provider's extractors / classifiers / resolution rules apply
+  // to the whole project (see `architecture.md` §Active Provider Lens).
+  // Changing the lens drops the `scan_*` zone atomically and prompts
+  // the user to re-scan; `state_*` and `config_*` survive.
+  activeProviderBodyNotJson: "Request body must be valid JSON.",
+  activeProviderBodyNotObject: "Request body must be a JSON object.",
+  activeProviderBodyMissing: "Request body must include `activeProvider` (a non-empty string).",
+  activeProviderValueNotString: "`activeProvider` must be a string.",
+  activeProviderValueEmpty: "`activeProvider` cannot be the empty string. Send the id of an enabled provider.",
+  activeProviderPersistFailed: "Could not persist activeProvider: {{message}}"
 };
 
 // server/loopback-gate.ts
@@ -20089,7 +20879,7 @@ function contentTypeFor(format) {
 }
 
 // server/health.ts
-import { existsSync as existsSync24 } from "fs";
+import { existsSync as existsSync25 } from "fs";
 var FALLBACK_SCHEMA_VERSION = "1";
 function buildHealth(deps) {
   return {
@@ -20097,7 +20887,7 @@ function buildHealth(deps) {
     schemaVersion: FALLBACK_SCHEMA_VERSION,
     specVersion: deps.specVersion,
     implVersion: VERSION,
-    db: existsSync24(deps.dbPath) ? "present" : "missing",
+    db: existsSync25(deps.dbPath) ? "present" : "missing",
     cwd: deps.cwd,
     dbPath: deps.dbPath
   };
@@ -20210,9 +21000,9 @@ import { HTTPException as HTTPException6 } from "hono/http-exception";
 
 // server/node-body.ts
 import { readFile as readFile4 } from "fs/promises";
-import { isAbsolute as isAbsolute8, resolve as resolvePath2, relative as relativePath, sep as sep5 } from "path";
+import { isAbsolute as isAbsolute10, resolve as resolvePath2, relative as relativePath, sep as sep5 } from "path";
 async function readNodeBody(cwd, relPath) {
-  if (isAbsolute8(relPath)) return null;
+  if (isAbsolute10(relPath)) return null;
   const absRoot = resolvePath2(cwd);
   const absFile = resolvePath2(absRoot, relPath);
   const rel = relativePath(absRoot, absFile);
@@ -20606,11 +21396,6 @@ function registerPluginsRoute(app, deps) {
         message: tx(SERVER_TEXTS.pluginsUnknown, { id: bundleId })
       });
     }
-    if (granularityOf(handle) !== "extension") {
-      throw new HTTPException8(400, {
-        message: tx(SERVER_TEXTS.pluginsGranularityBundleExpected, { id: bundleId })
-      });
-    }
     if (!hasExtension(handle, extensionId)) {
       throw new HTTPException8(404, {
         message: tx(SERVER_TEXTS.pluginsExtensionUnknown, { bundleId, extensionId })
@@ -20651,7 +21436,7 @@ function buildBuiltInItems(resolveEnabled) {
   return builtInBundles.map((bundle) => {
     const bundleEnabled = resolveEnabled(bundle.id);
     const bundleLocked = isPluginLocked(bundle.id);
-    const extensions = bundle.granularity === "extension" ? bundle.extensions.map((ext) => {
+    const extensions = bundle.extensions.map((ext) => {
       const qualified = qualifiedExtensionId(bundle.id, ext.id);
       const extLocked = bundleLocked || isPluginLocked(qualified);
       return {
@@ -20662,7 +21447,7 @@ function buildBuiltInItems(resolveEnabled) {
         ...ext.description ? { description: ext.description } : {},
         ...extLocked ? { locked: true } : {}
       };
-    }) : void 0;
+    });
     return {
       id: bundle.id,
       version: firstVersion(bundle.extensions),
@@ -20672,7 +21457,7 @@ function buildBuiltInItems(resolveEnabled) {
       source: "built-in",
       granularity: bundle.granularity,
       description: bundle.description,
-      ...extensions ? { extensions } : {},
+      ...extensions.length > 0 ? { extensions } : {},
       ...bundleLocked ? { locked: true } : {}
     };
   });
@@ -20705,8 +21490,8 @@ function optionalDiscoveredFields(plugin, extensions) {
   if (extensions) out.extensions = extensions;
   return out;
 }
-function projectExtensionRows(plugin, granularity, resolveEnabled, bundleLocked) {
-  if (granularity !== "extension" || !plugin.extensions) return void 0;
+function projectExtensionRows(plugin, _granularity, resolveEnabled, bundleLocked) {
+  if (!plugin.extensions || plugin.extensions.length === 0) return void 0;
   return plugin.extensions.map((ext) => {
     const description = readInstanceDescription(ext.instance);
     const qualified = qualifiedExtensionId(plugin.id, ext.id);
@@ -20823,13 +21608,6 @@ function validateBulkChange(change, deps) {
       message: tx(SERVER_TEXTS.pluginsUnknown, { id: bundleId })
     };
   }
-  if (granularityOf(handle) !== "extension") {
-    return {
-      status: 400,
-      code: "bad-query",
-      message: tx(SERVER_TEXTS.pluginsGranularityBundleExpected, { id: bundleId })
-    };
-  }
   if (!hasExtension(handle, extensionId)) {
     return {
       status: 404,
@@ -20944,12 +21722,12 @@ var parsePatchBody2 = makeBodyValidator(PATCH_BODY_SCHEMA, {
 import { HTTPException as HTTPException10 } from "hono/http-exception";
 
 // server/util/skillmapignore-io.ts
-import { existsSync as existsSync25, readFileSync as readFileSync19, writeFileSync as writeFileSync4 } from "fs";
-import { resolve as resolve33 } from "path";
+import { existsSync as existsSync26, readFileSync as readFileSync19, writeFileSync as writeFileSync4 } from "fs";
+import { resolve as resolve34 } from "path";
 var IGNORE_FILENAME2 = ".skillmapignore";
 function readPatterns(cwd) {
-  const path = resolve33(cwd, IGNORE_FILENAME2);
-  if (!existsSync25(path)) return [];
+  const path = resolve34(cwd, IGNORE_FILENAME2);
+  if (!existsSync26(path)) return [];
   let raw;
   try {
     raw = readFileSync19(path, "utf8");
@@ -20959,8 +21737,8 @@ function readPatterns(cwd) {
   return raw.split(/\r?\n/).map((l) => l.trim()).filter((l) => l.length > 0 && !l.startsWith("#"));
 }
 function writePatterns(cwd, nextPatterns) {
-  const path = resolve33(cwd, IGNORE_FILENAME2);
-  const prior = existsSync25(path) ? safeRead(path) : "";
+  const path = resolve34(cwd, IGNORE_FILENAME2);
+  const prior = existsSync26(path) ? safeRead(path) : "";
   const content = buildContent(prior, nextPatterns);
   writeFileSync4(path, content, "utf8");
 }
@@ -21309,8 +22087,70 @@ var parsePatchBody4 = makeBodyValidator(PATCH_BODY_SCHEMA3, {
   }
 });
 
-// server/routes/scan.ts
+// server/routes/active-provider.ts
+import { existsSync as existsSync27 } from "fs";
 import { HTTPException as HTTPException12 } from "hono/http-exception";
+function registerActiveProviderRoute(app, deps) {
+  app.get("/api/active-provider", (c) => {
+    return c.json(buildEnvelope4(deps));
+  });
+  app.patch("/api/active-provider", async (c) => {
+    const body = await parsePatchBody5(c.req.raw);
+    const result = applyLensSwitch(deps, body.activeProvider);
+    deps.configService.reload();
+    return c.json({ ...buildEnvelope4(deps), switch: result });
+  });
+}
+function buildEnvelope4(deps) {
+  const r = resolveActiveProvider(deps.runtimeContext.cwd);
+  return {
+    activeProvider: r.resolved,
+    detected: r.detected,
+    source: r.source
+  };
+}
+function applyLensSwitch(deps, newValue) {
+  const cwd = deps.runtimeContext.cwd;
+  try {
+    writeConfigValue("activeProvider", newValue, { target: "project", cwd });
+  } catch (err) {
+    throw new HTTPException12(400, {
+      message: tx(SERVER_TEXTS.activeProviderPersistFailed, {
+        message: formatErrorMessage(err)
+      })
+    });
+  }
+  const dbPath = resolveDbPath({ db: void 0, cwd });
+  if (!existsSync27(dbPath)) return { dropped: null };
+  const dropResult = dropScanZone(dbPath);
+  return {
+    dropped: {
+      tableCount: dropResult.tableCount,
+      tableNames: dropResult.droppedTables
+    }
+  };
+}
+var PATCH_BODY_SCHEMA4 = {
+  type: "object",
+  additionalProperties: false,
+  required: ["activeProvider"],
+  properties: {
+    activeProvider: { type: "string", minLength: 1 }
+  }
+};
+var parsePatchBody5 = makeBodyValidator(PATCH_BODY_SCHEMA4, {
+  notJson: SERVER_TEXTS.activeProviderBodyNotJson,
+  notObject: SERVER_TEXTS.activeProviderBodyNotObject,
+  invalid: SERVER_TEXTS.activeProviderBodyMissing,
+  mapping: {
+    ":required": SERVER_TEXTS.activeProviderBodyMissing,
+    "/activeProvider:type:string": SERVER_TEXTS.activeProviderValueNotString,
+    "/activeProvider:minLength": SERVER_TEXTS.activeProviderValueEmpty
+  }
+});
+
+// server/routes/scan.ts
+import { HTTPException as HTTPException13 } from "hono/http-exception";
 
 // server/scan-mutex.ts
 var inFlight = null;
@@ -21318,14 +22158,14 @@ async function withScanMutex(fn) {
   if (inFlight !== null) {
     throw new ScanBusyError();
   }
-  let resolve38;
+  let resolve39;
   inFlight = new Promise((r) => {
-    resolve38 = r;
+    resolve39 = r;
   });
   try {
     return await fn();
   } finally {
-    resolve38();
+    resolve39();
     inFlight = null;
   }
 }
@@ -21465,7 +22305,7 @@ function registerScanRoute(app, deps) {
 }
 async function runPersistedScan(c, deps) {
   if (deps.options.noBuiltIns || deps.options.noPlugins) {
-    throw new HTTPException12(400, { message: SERVER_TEXTS.scanPostRequiresFullPipeline });
+    throw new HTTPException13(400, { message: SERVER_TEXTS.scanPostRequiresFullPipeline });
   }
   const dbExists = await tryWithSqlite(
     { databasePath: deps.options.dbPath, autoBackup: false },
@@ -21491,10 +22331,14 @@ async function runPersistedScan(c, deps) {
         pluginRuntime: deps.pluginRuntime,
         resolveEnabledOverride,
         printer: bffScanRunnerPrinter,
-        emitterFactory: () => buildBroadcasterEmitter(deps.broadcaster)
+        emitterFactory: () => buildBroadcasterEmitter(deps.broadcaster),
+        // BFF has no TTY; ambiguous activeProvider must be resolved by
+        // the operator via the Settings UI (PATCH /api/active-provider)
+        // before the scan, not via interactive prompt here.
+        yes: true
       });
       if (outcome.kind !== "ok") {
-        throw new HTTPException12(500, {
+        throw new HTTPException13(500, {
           message: outcome.kind === "guard-trip" ? tx(SERVER_TEXTS.scanGuardTrip, { existing: outcome.existing }) : outcome.message
         });
       }
@@ -21502,7 +22346,7 @@ async function runPersistedScan(c, deps) {
     });
   } catch (err) {
     if (err instanceof ScanBusyError) {
-      throw new HTTPException12(409, { message: SERVER_TEXTS.scanPostBusy });
+      throw new HTTPException13(409, { message: SERVER_TEXTS.scanPostBusy });
     }
     throw err;
   }
@@ -21566,7 +22410,7 @@ function groupTagsBySource2(rows) {
 }
 async function runFreshScan(deps) {
   if (deps.options.noBuiltIns || deps.options.noPlugins) {
-    throw new HTTPException12(400, { message: SERVER_TEXTS.freshScanRequiresPipeline });
+    throw new HTTPException13(400, { message: SERVER_TEXTS.freshScanRequiresPipeline });
   }
   const resolveEnabledOverride = await buildBffResolverOverride(deps);
   const outcome = await runScanForCommand({
@@ -21592,10 +22436,13 @@ async function runFreshScan(deps) {
     // fallback. The fresh-scan response body IS the ScanResult JSON,
     // so `data` is never used here; warn/info/error route through
     // `log.warn` (same surface the rest of the BFF uses).
-    printer: bffScanRunnerPrinter
+    printer: bffScanRunnerPrinter,
+    // BFF has no TTY; ambiguous activeProvider is the operator's
+    // problem to resolve via the Settings UI, not via prompt here.
+    yes: true
   });
   if (outcome.kind !== "ok") {
-    throw new HTTPException12(500, {
+    throw new HTTPException13(500, {
       message: outcome.kind === "guard-trip" ? tx(SERVER_TEXTS.freshScanGuardTrip, { existing: outcome.existing }) : outcome.message
     });
   }
@@ -21629,8 +22476,8 @@ function emptyScanResult() {
 }
 
 // server/routes/sidecar.ts
-import { HTTPException as HTTPException13 } from "hono/http-exception";
-import { resolve as resolve34 } from "path";
+import { HTTPException as HTTPException14 } from "hono/http-exception";
+import { resolve as resolve35 } from "path";
 var STATUS_FRESH = "fresh";
 var ENVELOPE_KIND2 = "sidecar.bumped";
 var BUMP_BODY_SCHEMA = {
@@ -21664,13 +22511,13 @@ function registerSidecarRoutes(app, deps) {
     let absPath;
     try {
       assertContained(deps.runtimeContext.cwd, node.path);
-      absPath = resolve34(deps.runtimeContext.cwd, node.path);
+      absPath = resolve35(deps.runtimeContext.cwd, node.path);
     } catch (err) {
-      throw new HTTPException13(500, { message: formatErrorMessage(err) });
+      throw new HTTPException14(500, { message: formatErrorMessage(err) });
     }
     const result = invokeBump2(node, absPath, body);
     if (result.report.ok === false && result.report.reason === "fresh") {
-      throw new HTTPException13(409, { message: SERVER_TEXTS.sidecarFreshRefusal });
+      throw new HTTPException14(409, { message: SERVER_TEXTS.sidecarFreshRefusal });
     }
     if (result.report.ok === true && result.report.noop === true) {
       const envelope2 = {
@@ -21697,7 +22544,7 @@ function registerSidecarRoutes(app, deps) {
       }
     } catch (err) {
       if (err instanceof EConsentRequiredError) throw err;
-      throw new HTTPException13(500, { message: formatErrorMessage(err) });
+      throw new HTTPException14(500, { message: formatErrorMessage(err) });
     }
     if (body.confirm === true) {
       deps.configService.reload();
@@ -21734,7 +22581,7 @@ async function loadNode(deps, nodePath) {
   );
   const node = persisted?.nodes.find((n) => n.path === nodePath);
   if (!node) {
-    throw new HTTPException13(404, {
+    throw new HTTPException14(404, {
       message: tx(SERVER_TEXTS.nodeNotFound, { path: sanitizeForTerminal(nodePath) })
     });
   }
@@ -21742,7 +22589,7 @@ async function loadNode(deps, nodePath) {
 }
 function invokeBump2(node, absPath, body) {
   if (!bumpAction.invoke) {
-    throw new HTTPException13(500, { message: SERVER_TEXTS.sidecarBumpInvokeMissing });
+    throw new HTTPException14(500, { message: SERVER_TEXTS.sidecarBumpInvokeMissing });
   }
   const input = {};
   if (body.force === true) input.force = true;
@@ -21788,9 +22635,9 @@ function registerUpdateStatusRoute(app, deps) {
 }
 
 // server/static.ts
-import { existsSync as existsSync26 } from "fs";
+import { existsSync as existsSync28 } from "fs";
 import { readFile as readFile5 } from "fs/promises";
-import { extname, join as join17 } from "path";
+import { extname, join as join19 } from "path";
 import { serveStatic } from "@hono/node-server/serve-static";
 var INDEX_HTML = "index.html";
 var PLACEHOLDER_HTML = `<!doctype html>
@@ -21842,8 +22689,8 @@ function createSpaFallback(opts) {
   return async (c, _next) => {
     if (c.req.method !== "GET" && c.req.method !== "HEAD") return c.notFound();
     if (opts.uiDist === null) return htmlResponse(c, placeholder);
-    const indexPath = join17(opts.uiDist, INDEX_HTML);
-    if (!existsSync26(indexPath)) return htmlResponse(c, placeholder);
+    const indexPath = join19(opts.uiDist, INDEX_HTML);
+    if (!existsSync28(indexPath)) return htmlResponse(c, placeholder);
     return fileResponse(c, indexPath);
   };
 }
@@ -21929,13 +22776,13 @@ function attachBroadcasterRoute(app, broadcaster) {
 
 // server/app.ts
 var BODY_LIMIT_BYTES = 1024 * 1024;
-var DbMissingError = class extends HTTPException14 {
+var DbMissingError = class extends HTTPException15 {
   constructor(message) {
     super(500, { message });
     this.name = "DbMissingError";
   }
 };
-var BulkValidationError = class extends HTTPException14 {
+var BulkValidationError = class extends HTTPException15 {
   id;
   code;
   constructor(init) {
@@ -21945,7 +22792,7 @@ var BulkValidationError = class extends HTTPException14 {
     this.code = init.code;
   }
 };
-var LoopbackGateError = class extends HTTPException14 {
+var LoopbackGateError = class extends HTTPException15 {
   code;
   constructor(init) {
     super(403, { message: init.message });
@@ -21965,7 +22812,7 @@ function createApp(deps) {
     bodyLimit({
       maxSize: BODY_LIMIT_BYTES,
       onError: () => {
-        throw new HTTPException14(413, { message: tx(SERVER_TEXTS.bodyTooLarge, { maxBytes: String(BODY_LIMIT_BYTES) }) });
+        throw new HTTPException15(413, { message: tx(SERVER_TEXTS.bodyTooLarge, { maxBytes: String(BODY_LIMIT_BYTES) }) });
       }
     })
   );
@@ -22006,9 +22853,10 @@ function createApp(deps) {
   registerUpdateStatusRoute(app, routeDeps);
   registerPreferencesRoute(app, routeDeps);
   registerProjectPreferencesRoute(app, routeDeps);
+  registerActiveProviderRoute(app, routeDeps);
   registerProjectIgnoreRoute(app, routeDeps);
   app.all("/api/*", (c) => {
-    throw new HTTPException14(404, {
+    throw new HTTPException15(404, {
       message: tx(SERVER_TEXTS.unknownApiEndpoint, { path: sanitizeForTerminal(c.req.path) })
     });
   });
@@ -22016,7 +22864,7 @@ function createApp(deps) {
   app.use("*", createStaticHandler({ uiDist: deps.options.uiDist, noUi: deps.options.noUi }));
   app.get("*", createSpaFallback({ uiDist: deps.options.uiDist, noUi: deps.options.noUi }));
   app.notFound((c) => {
-    throw new HTTPException14(404, {
+    throw new HTTPException15(404, {
       message: tx(SERVER_TEXTS.unknownPath, { path: sanitizeForTerminal(c.req.path) })
     });
   });
@@ -22071,7 +22919,7 @@ function formatError2(err, c) {
     };
     return c.json(envelope, 403);
   }
-  if (err instanceof HTTPException14) {
+  if (err instanceof HTTPException15) {
     const status = err.status;
     const envelope = {
       ok: false,
@@ -22414,10 +23262,10 @@ function validateNoUi(noUi, uiDist) {
 }
 
 // server/paths.ts
-import { existsSync as existsSync27, statSync as statSync11 } from "fs";
-import { dirname as dirname18, isAbsolute as isAbsolute9, join as join18, resolve as resolve35 } from "path";
+import { existsSync as existsSync29, statSync as statSync11 } from "fs";
+import { dirname as dirname18, isAbsolute as isAbsolute11, join as join20, resolve as resolve36 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
-var DEFAULT_UI_REL = join18("ui", "dist", "ui", "browser");
+var DEFAULT_UI_REL = join20("ui", "dist", "ui", "browser");
 var PACKAGE_UI_REL = "ui";
 var INDEX_HTML2 = "index.html";
 function resolveDefaultUiDist(ctx) {
@@ -22426,13 +23274,13 @@ function resolveDefaultUiDist(ctx) {
   return walkUpForUi(ctx.cwd);
 }
 function resolveExplicitUiDist(ctx, raw) {
-  return isAbsolute9(raw) ? raw : resolve35(ctx.cwd, raw);
+  return isAbsolute11(raw) ? raw : resolve36(ctx.cwd, raw);
 }
 function isUiBundleDir(path) {
-  if (!existsSync27(path)) return false;
+  if (!existsSync29(path)) return false;
   try {
     if (!statSync11(path).isDirectory()) return false;
-    return existsSync27(join18(path, INDEX_HTML2));
+    return existsSync29(join20(path, INDEX_HTML2));
   } catch {
     return false;
   }
@@ -22449,9 +23297,9 @@ function resolvePackageBundledUi() {
 function resolvePackageBundledUiFrom(here) {
   let current = here;
   for (let i = 0; i < 8; i++) {
-    const candidate = join18(current, PACKAGE_UI_REL);
+    const candidate = join20(current, PACKAGE_UI_REL);
     if (isUiBundleDir(candidate)) return candidate;
-    const distHere = join18(current, "dist", PACKAGE_UI_REL);
+    const distHere = join20(current, "dist", PACKAGE_UI_REL);
     if (isUiBundleDir(distHere)) return distHere;
     const parent = dirname18(current);
     if (parent === current) return null;
@@ -22460,9 +23308,9 @@ function resolvePackageBundledUiFrom(here) {
   return null;
 }
 function walkUpForUi(startDir) {
-  let current = resolve35(startDir);
+  let current = resolve36(startDir);
   for (let i = 0; i < 64; i++) {
-    const candidate = join18(current, DEFAULT_UI_REL);
+    const candidate = join20(current, DEFAULT_UI_REL);
     if (isUiBundleDir(candidate)) return candidate;
     const parent = dirname18(current);
     if (parent === current) return null;
@@ -22664,7 +23512,7 @@ var SERVE_TEXTS = {
 };
 
 // cli/util/serve-banner.ts
-import { relative as relative7, isAbsolute as isAbsolute10 } from "path";
+import { relative as relative7, isAbsolute as isAbsolute12 } from "path";
 var ESC2 = {
   reset: "\x1B[0m",
   bold: "\x1B[1m",
@@ -22798,9 +23646,9 @@ function resolveAnsi(colorEnabled) {
 }
 function formatDbPath(dbPath, cwd) {
   const safe = sanitizeForTerminal(dbPath);
-  if (!isAbsolute10(safe)) return safe;
+  if (!isAbsolute12(safe)) return safe;
   const rel = relative7(cwd, safe);
-  if (rel === "" || rel.startsWith("..") || isAbsolute10(rel)) {
+  if (rel === "" || rel.startsWith("..") || isAbsolute12(rel)) {
     return safe;
   }
   return rel;
@@ -22896,7 +23744,7 @@ var ServeCommand = class extends SmCommand {
       return ExitCode.Error;
     }
     const dbPath = resolveDbPath({ db: this.db, ...runtimeCtx });
-    if (this.db !== void 0 && !existsSync28(dbPath)) {
+    if (this.db !== void 0 && !existsSync30(dbPath)) {
       this.printer.info(
         tx(SERVE_TEXTS.dbNotFound, { path: sanitizeForTerminal(dbPath) })
       );
@@ -23307,22 +24155,27 @@ function renderLinksSection(direction, links, ansi) {
   const aggregated = aggregateLinks(links, projectField);
   const headerTpl = direction === "out" ? SHOW_TEXTS.linksOutSection : SHOW_TEXTS.linksInSection;
   const kindWidth = Math.max(...aggregated.map((g) => g.kind.length));
-  const confWidth = Math.max(...aggregated.map((g) => g.confidence.length));
+  const confLabels = aggregated.map((g) => formatConfidence(g.confidence));
+  const confWidth = Math.max(...confLabels.map((l) => l.length));
   const lines = [tx(headerTpl, { count: links.length })];
-  for (const grp of aggregated) {
+  aggregated.forEach((grp, idx) => {
     const dup = grp.rowCount > 1 ? ansi.dim(tx(SHOW_TEXTS.linkDup, { count: grp.rowCount })) : "";
     lines.push(
       tx(SHOW_TEXTS.linkRow, {
         arrow: ansi.dim(arrow),
         kind: sanitizeForTerminal(grp.kind).padEnd(kindWidth),
-        confidence: ansi.dim(grp.confidence.padEnd(confWidth)),
+        confidence: ansi.dim(confLabels[idx].padEnd(confWidth)),
         endpoint: sanitizeForTerminal(grp.endpoint),
         dup
       })
     );
-  }
+  });
   return lines.join("");
 }
+function formatConfidence(c) {
+  if (typeof c !== "number" || !Number.isFinite(c)) return "?";
+  return `${Math.round(c * 100)}%`;
+}
 function renderIssuesSection(issues, nodePath, ansi) {
   const lines = [tx(SHOW_TEXTS.issuesSection, { count: issues.length })];
   const analyzerWidth = Math.max(
@@ -23389,18 +24242,13 @@ function aggregateLinks(links, endpointSide) {
     return a.kind.localeCompare(b.kind);
   });
 }
-var CONFIDENCE_RANK = {
-  high: 2,
-  medium: 1,
-  low: 0
-};
 function rankConfidenceForGrouping(c) {
-  return CONFIDENCE_RANK[c];
+  return c;
 }
 
 // cli/commands/sidecar.ts
-import { existsSync as existsSync29, unlinkSync as unlinkSync2 } from "fs";
-import { resolve as resolve36 } from "path";
+import { existsSync as existsSync31, unlinkSync as unlinkSync2 } from "fs";
+import { resolve as resolve37 } from "path";
 import { Command as Command35, Option as Option33 } from "clipanion";
 
 // cli/i18n/sidecar.texts.ts
@@ -23551,7 +24399,7 @@ var SidecarRefreshCommand = class extends SmCommand {
     let absPath;
     try {
       assertContained(ctx.cwd, node.path);
-      absPath = resolve36(ctx.cwd, node.path);
+      absPath = resolve37(ctx.cwd, node.path);
     } catch (err) {
       this.printer.error(
         tx(SIDECAR_TEXTS.refreshFailed, { glyph: errGlyph, message: formatErrorMessage(err) })
@@ -23832,7 +24680,7 @@ var SidecarAnnotateCommand = class extends SmCommand {
     let absPath;
     try {
       assertContained(ctx.cwd, node.path);
-      absPath = resolve36(ctx.cwd, node.path);
+      absPath = resolve37(ctx.cwd, node.path);
     } catch (err) {
       this.printer.error(
         tx(SIDECAR_TEXTS.annotateFailed, { glyph: errGlyph, message: formatErrorMessage(err) })
@@ -23840,7 +24688,7 @@ var SidecarAnnotateCommand = class extends SmCommand {
       return ExitCode.Error;
     }
     const sidecarAbsPath = sidecarPathFor(absPath);
-    if (existsSync29(sidecarAbsPath) && this.force !== true) {
+    if (existsSync31(sidecarAbsPath) && this.force !== true) {
       this.printer.error(
         tx(SIDECAR_TEXTS.annotateExists, {
           glyph: errGlyph,
@@ -23850,7 +24698,7 @@ var SidecarAnnotateCommand = class extends SmCommand {
       );
       return ExitCode.Error;
     }
-    if (existsSync29(sidecarAbsPath) && this.force === true) {
+    if (existsSync31(sidecarAbsPath) && this.force === true) {
       try {
         unlinkSync2(sidecarAbsPath);
       } catch (err) {
@@ -24080,8 +24928,8 @@ var STUB_COMMANDS = [
 ];
 
 // cli/commands/tutorial.ts
-import { cpSync as cpSync2, existsSync as existsSync30, mkdirSync as mkdirSync7, rmSync as rmSync2, statSync as statSync12 } from "fs";
-import { dirname as dirname19, join as join19, resolve as resolve37 } from "path";
+import { cpSync as cpSync2, existsSync as existsSync32, mkdirSync as mkdirSync7, rmSync as rmSync2, statSync as statSync12 } from "fs";
+import { dirname as dirname19, join as join21, resolve as resolve38 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
 import { Command as Command37, Option as Option35 } from "clipanion";
 
@@ -24177,9 +25025,9 @@ var TutorialCommand = class extends SmCommand {
     }
     const variant = rawVariant ?? DEFAULT_VARIANT;
     const spec = VARIANT_SPECS[variant];
-    const targetDir = join19(ctx.cwd, ".claude", "skills", spec.slug);
+    const targetDir = join21(ctx.cwd, ".claude", "skills", spec.slug);
     const targetDisplay = `.claude/skills/${spec.slug}/`;
-    if (existsSync30(targetDir) && !this.force) {
+    if (existsSync32(targetDir) && !this.force) {
       this.printer.error(
         tx(TUTORIAL_TEXTS.alreadyExists, {
           glyph: errGlyph,
@@ -24255,14 +25103,14 @@ function resolveSkillSourceDir(variant) {
   const here = dirname19(fileURLToPath6(import.meta.url));
   const candidates = [
     // dev: src/cli/commands/ → repo-root .claude/skills/<slug>/
-    resolve37(here, "../../..", spec.sourceDir),
+    resolve38(here, "../../..", spec.sourceDir),
     // bundled: dist/cli.js → dist/cli/tutorial/<slug> (sibling)
-    resolve37(here, "cli/tutorial", spec.slug),
+    resolve38(here, "cli/tutorial", spec.slug),
     // bundled fallback: any-depth → cli/tutorial/<slug>
-    resolve37(here, "../cli/tutorial", spec.slug)
+    resolve38(here, "../cli/tutorial", spec.slug)
   ];
   for (const candidate of candidates) {
-    if (existsSync30(candidate) && statSync12(candidate).isDirectory()) {
+    if (existsSync32(candidate) && statSync12(candidate).isDirectory()) {
       cachedSourceDirs.set(variant, candidate);
       return candidate;
     }
@@ -24439,7 +25287,7 @@ await lifecycleDispatcher.dispatch(
 process.exit(exitCode);
 function resolveBareDefault() {
   const ctx = defaultRuntimeContext();
-  if (existsSync31(defaultProjectDbPath(ctx))) {
+  if (existsSync33(defaultProjectDbPath(ctx))) {
     return ["serve"];
   }
   process.stderr.write(tx(ENTRY_TEXTS.bareNoProject, { cwd: ctx.cwd }));