@skill-map/cli 0.36.0 → 0.38.0

package/dist/kernel/index.d.ts

@@ -1,15 +1,15 @@
 /**
  * Extension registry, six kinds, first-class, loaded through a single API.
  *
- * The `Extension` shape is aligned with `spec/schemas/extensions/base.schema.json`.
+ * The `IExtension` shape is aligned with `spec/schemas/extensions/base.schema.json`.
  * Kind-specific manifests (provider / extractor / analyzer / action / formatter /
  * hook) extend this base structurally; the registry stores the base view
  * and each kind's code carries its own fuller type where needed.
  *
  * **Spec § A.6, qualified ids.** Every extension is keyed in the registry
  * by `<pluginId>/<id>` (e.g. `core/annotations`, `core/slash`,
- * `my-plugin/my-extractor`). `Extension.id` carries the **short** id as authored;
- * `Extension.pluginId` carries the namespace; the registry composes the
+ * `my-plugin/my-extractor`). `IExtension.id` carries the **short** id as authored;
+ * `IExtension.pluginId` carries the namespace; the registry composes the
  * qualifier internally and exposes lookup APIs that operate on either form
  * (qualified for direct lookup, kind-scoped listing for enumeration).
  *
@@ -19,7 +19,7 @@
  */
 type ExtensionKind = 'provider' | 'extractor' | 'analyzer' | 'action' | 'formatter' | 'hook';
 declare const EXTENSION_KINDS: readonly ExtensionKind[];
-interface Extension {
+interface IExtension {
     /** Short (unqualified) extension id, injected by the loader from the leaf folder name. */
     id: string;
     /** Owning plugin namespace, injected by the loader from the plugin folder name. */
@@ -42,18 +42,18 @@ declare class DuplicateExtensionError extends Error {
 declare class Registry {
     #private;
     constructor();
-    register(ext: Extension): void;
+    register(ext: IExtension): void;
     /**
      * Lookup by qualified id (`<pluginId>/<id>`). Returns `undefined` when
      * no extension of that kind is registered under the qualifier.
      */
-    get(kind: ExtensionKind, qualifiedId: string): Extension | undefined;
+    get(kind: ExtensionKind, qualifiedId: string): IExtension | undefined;
     /**
      * Convenience wrapper that composes the qualified id for the caller.
      * Equivalent to `get(kind, qualifiedExtensionId(pluginId, id))`.
      */
-    find(kind: ExtensionKind, pluginId: string, id: string): Extension | undefined;
-    all(kind: ExtensionKind): Extension[];
+    find(kind: ExtensionKind, pluginId: string, id: string): IExtension | undefined;
+    all(kind: ExtensionKind): IExtension[];
     count(kind: ExtensionKind): number;
     totalCount(): number;
 }
@@ -207,7 +207,7 @@ interface IRegisteredViewContribution {
 }
 /**
  * Common fields on every setting declaration. The discriminated union
- * `ISettingDeclaration` extends one of these per `type` value.
+ * `TSettingDeclaration` extends one of these per `type` value.
  */
 interface ISettingCommon {
     /** Required. Short human-readable label. English-only. */
@@ -297,7 +297,7 @@ interface ISetting_KeyValueList extends ISettingCommon {
  *
  * Mirror of `input-types.schema.json#/$defs/ISettingDeclaration`.
  */
-type ISettingDeclaration = ISetting_StringList | ISetting_SingleString | ISetting_BooleanFlag | ISetting_Integer | ISetting_EnumPick | ISetting_EnumMultipick | ISetting_PathGlob | ISetting_Regex | ISetting_Secret | ISetting_KeyValueList;
+type TSettingDeclaration = ISetting_StringList | ISetting_SingleString | ISetting_BooleanFlag | ISetting_Integer | ISetting_EnumPick | ISetting_EnumMultipick | ISetting_PathGlob | ISetting_Regex | ISetting_Secret | ISetting_KeyValueList;
 /**
  * Runtime value type for a setting, derived from its declaration. The
  * kernel exposes settings to extractors as `Record<string, TSettingValue>`
@@ -378,7 +378,7 @@ interface IExtensionBase {
      * `ctx.settings.<settingId>`. Settings are read once at extension
      * invocation; changing a setting requires `sm scan` to re-emit.
      */
-    settings?: Record<string, ISettingDeclaration>;
+    settings?: Record<string, TSettingDeclaration>;
     /**
      * Resolved values of the settings declared above, populated by the
      * orchestrator from project config + user overrides. Runtime-only,
@@ -552,6 +552,55 @@ interface LinkLocation {
     column?: number;
     offset?: number;
 }
+/**
+ * One syntactic site in the source node's body that contributed to a
+ * `Link`. Multiple occurrences accumulate when the same edge is detected
+ * by more than one extractor (e.g. `@./foo.md` from `at-directive` and
+ * `[label](./foo.md)` from `markdown-link` both resolve to the same
+ * target), or when the same extractor walks an extractor-internal
+ * dedup boundary. Today the merged edge's `trigger` / `location`
+ * mirror the FIRST occurrence; the array carries every site so the
+ * `core/redundant-target-reference` analyzer can flag multi-form
+ * references and rename operations can find every author surface.
+ */
+interface LinkOccurrence {
+    /**
+     * Extractor id that observed this occurrence. Matches an entry of
+     * the parent `Link.sources[]` (extractor + occurrence are not 1:1,
+     * the same extractor can produce multiple occurrences when the
+     * intra-extractor dedup is relaxed in the future).
+     */
+    extractor: string;
+    /**
+     * Original substring as it appeared in the body (`@./real-agent.md`,
+     * `[deploy](./deploy.md)`, `/help`, `@team-lead`). Preserves author
+     * casing and the leading sigil so the analyzer can surface it
+     * verbatim in fix-up messages.
+     */
+    originalTrigger: string;
+    /**
+     * Position of the occurrence in the body. Optional, an extractor
+     * that does not track line numbers yet (legacy emit paths) omits
+     * this field; the analyzer falls back to "unknown line" in messages.
+     */
+    location?: LinkLocation | null;
+}
+/**
+ * External URL referenced from a node's body. Populated by the
+ * `core/external-url-counter` extractor and surfaced on the node so
+ * the inspector can list every outgoing http(s) reference without
+ * re-walking the body. Distinct from internal `Link` (which connects
+ * nodes inside the graph), external refs are leaf metadata: no
+ * counterparty node, no resolution.
+ */
+interface IExternalRef {
+    /** Normalised URL (lowercased host, fragment stripped). */
+    url: string;
+    /** 1-indexed line of the occurrence in the source body, when known. */
+    line?: number;
+    /** Verbatim author substring (sigil-free; usually equals `url`). */
+    originalTrigger?: string;
+}
 interface Node {
     path: string;
     /**
@@ -570,6 +619,15 @@ interface Node {
     linksOutCount: number;
     linksInCount: number;
     externalRefsCount: number;
+    /**
+     * Distinct external URLs referenced from this node's body, in
+     * extractor-order (first-seen wins, dedup is by normalised URL).
+     * Empty / absent when the body has no http(s) URLs. The denormalised
+     * `externalRefsCount` MUST equal `externalRefs.length` whenever
+     * both are present. Surfaced via `/api/nodes` so the inspector can
+     * list each URL without an extra round-trip.
+     */
+    externalRefs?: IExternalRef[];
     frontmatter?: Record<string, unknown>;
     tokens?: TripleSplit;
     /**
@@ -657,6 +715,30 @@ interface Link {
     sources: string[];
     trigger?: LinkTrigger | null;
     location?: LinkLocation | null;
+    /**
+     * Every syntactic site in the source body that contributed to this
+     * edge. Populated by extractors at emit time (one entry per emission)
+     * and accumulated by `dedupeLinks` when two extractors converge on the
+     * same `(source, target, kind, normalizedTrigger)` key. Empty / absent
+     * for legacy emits or for synthetic links (frontmatter-driven
+     * references, sidecar annotations) that have no body position. The
+     * `core/redundant-target-reference` analyzer walks this array to
+     * detect multi-form references to the same target from one body.
+     */
+    occurrences?: LinkOccurrence[];
+    /**
+     * Node path the link resolves to, when the post-walk
+     * `liftResolvedLinkConfidence` transform succeeded in matching the
+     * (trigger-style or path-style) target against the live graph. Equal
+     * to `link.target` for path-style links that hit a node directly;
+     * different from `link.target` for trigger-style links (a Claude
+     * `@real-agent` mention resolves to `.claude/agents/real-agent.md`,
+     * but `link.target` keeps the authored trigger). Absent when the
+     * link is unresolved (broken). The BFF `/api/links?to=<path>` uses
+     * this field to surface incoming edges that reach the node by name,
+     * not just by literal path.
+     */
+    resolvedTarget?: string | null;
     raw?: string | null;
 }
 /**
@@ -677,11 +759,16 @@ type SignalScope = 'body' | 'frontmatter' | 'sidecar';
 type SignalContext = 'code-block' | 'inline-code' | 'escaped';
 /**
  * Byte-range location for a body-scope `Signal`. `start` is inclusive,
- * `end` is exclusive (one past the last char).
+ * `end` is exclusive (one past the last char). `line` is the optional
+ * 1-indexed line number containing `start`, populated by extractors
+ * that already compute line tracking via `computeLineStarts` so the
+ * resolver's materialised `Link` preserves `link.location.line`
+ * without re-walking the body.
  */
 interface SignalRange {
     start: number;
     end: number;
+    line?: number;
 }
 /**
  * One alternative interpretation of a `Signal`. The resolver picks the
@@ -735,6 +822,59 @@ interface Signal {
     context?: SignalContext | null;
     /** One or more alternative interpretations. At least one. */
     candidates: SignalCandidate[];
+    /**
+     * Resolver outcome annotation, populated by `resolveSignals`. Absent on
+     * raw extractor emissions (before the resolver runs). When
+     * `outcome === 'materialised'`, `winnerIndex` points into `candidates[]`
+     * of the candidate the resolver chose; a corresponding `Link` was added
+     * to the graph. When `outcome === 'rejected'`, one of `rejectedBy` /
+     * `extractorDisabled` / `belowFloor` is set and no Link materialised.
+     * Both materialised and rejected Signals remain on
+     * `IAnalyzerContext.signals` so the `core/signal-collision` analyzer can
+     * surface losers as `warn` issues. Mirrors
+     * `signal.schema.json#/properties/resolution`.
+     */
+    resolution?: ISignalResolution;
+}
+/**
+ * Why the resolver chose to materialise or reject a `Signal`. Populated by
+ * `resolveSignals`; carries no meaning before that pass.
+ */
+interface ISignalResolution {
+    outcome: 'materialised' | 'rejected';
+    /** Index into `Signal.candidates[]` of the winner. Set when `outcome === 'materialised'`. */
+    winnerIndex?: number;
+    /**
+     * Set when the Signal lost a cross-extractor range-overlap collision
+     * against another Signal at the same `source`. Names the winning Signal
+     * so an analyzer (or the operator drilling into the sidecar) can see WHO
+     * won and WHY.
+     */
+    rejectedBy?: {
+        source: string;
+        range: SignalRange;
+        /** Qualified id (`<plugin>/<extractor>`) of the winning candidate's extractor. */
+        extractorId: string;
+        reason: 'kind-priority' | 'higher-confidence' | 'longer-range' | 'earlier-declaration';
+    };
+    /**
+     * Phase 4+ stub: populated when every candidate of this Signal came from
+     * an extractor the operator disabled via
+     * `plugins.<id>.extensions.<extId>.enabled`. Today the resolver never
+     * sets this; documented so analyzer surfaces can be built when the filter
+     * lands.
+     */
+    extractorDisabled?: {
+        extractorId: string;
+    };
+    /**
+     * Phase 4+ stub: populated when every candidate's `confidence` fell below
+     * the configured floor. Today the resolver materialises every Signal that
+     * survives overlap regardless of confidence.
+     */
+    belowFloor?: {
+        threshold: number;
+    };
 }
 interface IssueFix {
     summary?: string;
@@ -1162,7 +1302,7 @@ interface IKvStoreWrapper {
  * `write(table, row)`. Plugin authors narrow at the call site based on
  * the storage mode declared in their `plugin.json`.
  */
-type IPluginStore = IKvStoreWrapper | IDedicatedStoreWrapper;
+type TPluginStore = IKvStoreWrapper | IDedicatedStoreWrapper;
 declare function makeKvStoreWrapper(opts: {
     pluginId: string;
     schema: IPluginStorageSchema | undefined;
@@ -1198,7 +1338,7 @@ declare function makePluginStore(opts: {
     plugin: IDiscoveredPlugin;
     persistKv?: IKvStorePersist;
     persistDedicated?: IDedicatedStorePersist;
-}): IPluginStore | undefined;
+}): TPluginStore | undefined;
 
 /**
  * Row-level filter for `port.scans.findNodes(...)` (driven by
@@ -1328,6 +1468,14 @@ interface IIssueRow {
  *   - `nodePath`, keeps issues whose `nodeIds` JSON array contains the
  *     given path (correlated EXISTS over `json_each`). Absent / null
  *     skips the filter.
+ *   - `nodePaths`, multi-node variant of `nodePath`: keeps issues
+ *     whose `nodeIds` JSON array intersects the given set (correlated
+ *     EXISTS over `json_each` with an `IN(...)` predicate). Used by
+ *     the linked-nodes panel to fetch issues for the focused node +
+ *     its neighbours in one round-trip instead of pulling the whole
+ *     table. Empty array matches zero rows; absent skips the filter.
+ *     Combines with `nodePath` (intersection); when both are set, the
+ *     `nodePath` predicate is AND-ed with `nodePaths`.
  *
  * Pagination is mandatory; the route layer fills the defaults via
  * `parsePagination`. `total` in `IIssueListResult` reports the total
@@ -1345,6 +1493,7 @@ interface IIssueListFilter {
     severities?: readonly string[];
     analyzerIds?: readonly string[];
     nodePath?: string | null;
+    nodePaths?: readonly string[];
     offset: number;
     limit: number;
 }
@@ -1969,6 +2118,34 @@ interface IProvider extends IExtensionBase {
      * confidence-lift contract, which runs against the merged Link graph.
      */
     resolution?: Record<string, string[]>;
+    /**
+     * Lens gating flag for vendor providers. When `true`, this Provider's
+     * `classify()` only runs (and the walker only iterates its territory)
+     * if `provider.id === activeProvider` (the project's active lens).
+     * When `false` or omitted (default), the Provider is universal and
+     * classifies unconditionally, regardless of the active lens.
+     *
+     * Vendor providers (`claude`, `openai`, `antigravity`) MUST set this
+     * to `true`: the actual runtimes never read each other's on-disk
+     * formats (Claude Code does not consume `.codex/`; Codex CLI does not
+     * consume `.claude/`), and offering every file to every provider
+     * fabricates cross-vendor graph edges the runtimes themselves reject.
+     *
+     * Universal providers (the open-standard `agent-skills`, the markdown
+     * fallback `core/markdown`, any future format-based fallback) keep
+     * this `false`: their territory is consumed by every vendor and they
+     * MUST run on every scan, regardless of the active lens.
+     *
+     * When `activeProvider === null` (no lens resolved, e.g. a project
+     * with no provider markers), the walker bypasses the gate entirely
+     * and every gated Provider runs, mirroring the permissive
+     * extractor-side fallback for unlensed projects.
+     *
+     * Default `undefined` ≡ `false` ≡ universal. The field affects
+     * classification ONLY; extractors continue to filter via their own
+     * `precondition.provider` allowlist and are unaffected by this flag.
+     */
+    gatedByActiveLens?: boolean;
     /**
      * Reserved invocation names this Provider's runtime owns for each
      * kind. Maps a `node.kind` to the set of normalised names the runtime
@@ -2004,6 +2181,44 @@ interface IProvider extends IExtensionBase {
      * consumes.
      */
     reservedNames?: Record<string, readonly string[]>;
+    /**
+     * Per-Provider ranking hints consumed by the Signal IR **resolver
+     * phase** (kernel `resolveSignals`). Drives intra-Signal candidate
+     * selection AND cross-Signal range-overlap tiebreaks.
+     *
+     * Optional, when absent the resolver uses the default tiebreak chain:
+     * `confidence` DESC → `range` length DESC → extractor declaration
+     * order. Most Providers do not need to declare this; the default chain
+     * is correct unless the Provider has a kind-specific preference (e.g.
+     * "treat `invokes` edges as more important than `mentions` of the
+     * same range").
+     *
+     * Distinct from the `resolution` field above: `resolverRules` ranks
+     * candidates INSIDE the Signal IR (the candidate that becomes a Link
+     * in the first place); `resolution` ranks Links AFTER they exist
+     * (confidence lift on already-emitted edges). The two surfaces share
+     * no mechanism and intentionally do not compose.
+     */
+    resolverRules?: IResolverRules;
+}
+/**
+ * Per-Provider Signal IR resolver ranking hints. Mirrors
+ * `extensions/provider.schema.json#/properties/resolverRules`.
+ */
+interface IResolverRules {
+    /**
+     * When present, the resolver ranks candidates whose `kind` appears
+     * earlier in this array ABOVE candidates whose `kind` appears later.
+     * Candidates whose `kind` is absent from the array drop to the end
+     * (after every listed kind). Ties inside the same `kindPriority`
+     * bucket fall through to the `confidence` → range-length → declaration
+     * order tiebreaks.
+     *
+     * Example: a Provider that wants `invokes` edges to win against
+     * `mentions` / `references` of the same byte range declares
+     * `['invokes', 'references', 'mentions']`.
+     */
+    kindPriority?: readonly LinkKind[];
 }
 /**
  * Declarative read config a Provider declares via `IProvider.read`.
@@ -2786,7 +3001,7 @@ declare function runExtractorsForNode(opts: {
      * don't track plugin storage can omit it; the resulting `ctx.store`
      * stays `undefined` (the existing contract).
      */
-    pluginStores?: ReadonlyMap<string, IPluginStore>;
+    pluginStores?: ReadonlyMap<string, TPluginStore>;
 }): Promise<{
     internalLinks: Link[];
     externalLinks: Link[];
@@ -3051,7 +3266,7 @@ interface RunScanOptions {
      * its own persist callback) and lets tests inject a captured-call
      * mock without spinning up a DB.
      */
-    pluginStores?: ReadonlyMap<string, IPluginStore>;
+    pluginStores?: ReadonlyMap<string, TPluginStore>;
     /**
      * Pre-computed absolute paths of orphan job MD files (files under
      * `.skill-map/jobs/` whose absolute path appears nowhere in
@@ -4092,4 +4307,4 @@ interface Kernel {
 }
 declare function createKernel(): Kernel;
 
-export { type Confidence, DuplicateExtensionError, EXTENSION_KINDS, type ExecutionFailureReason, type ExecutionKind, type ExecutionRecord, type ExecutionRunner, type ExecutionStatus, ExportQueryError, type Extension, type ExtensionKind, type FilesystemPort, HOOK_TRIGGERS, type HistoryStats, type HistoryStatsErrorRates, type HistoryStatsExecutionsPerPeriod, type HistoryStatsPerActionRate, type HistoryStatsTokensPerAction, type HistoryStatsTopNode, type HistoryStatsTotals, type IAction, type IActionContext, type IActionPrecondition, type IActionResult, type IAnalyzer, type IAnalyzerContext, type IAnnotationContribution, type ICreateFsWatcherOptions, type IDedicatedStorePersist, type IDedicatedStoreWrapper, type IDiscoveredPlugin, type IEnrichmentRecord, type IExportQuery, type IExportSubset, type IExtensionBase, type IExtractor, type IExtractorCallbacks, type IExtractorContext, type IExtractorRunRecord, type IFormatter, type IFormatterContext, type IFsWatcher, type IHook, type IHookContext, type IHookDispatcher, type IIssueRow, type IKvStorePersist, type IKvStoreWrapper, type ILoadedExtension, type INodeBundle, type INodeChange, type INodeCounts, type INodeFilter, type IPersistOptions, type IPersistedEnrichment, type IPluginManifest, type IPluginStorageSchema, type IPluginStore, type IProvider, type IRawNode, type IRegisteredAnnotationKey, type IRegisteredViewContribution, type IRunOptions, type IRunResult, type IScanDelta, type ISettingDeclaration, type ITransactionalStorage, type IViewContribution, type IWalkOptions, type IWatchBatch, type IWatchEvent, InMemoryProgressEmitter, type Issue, type IssueFix, KV_SCHEMA_KEY, type Kernel, LOG_LEVELS, type Link, type LinkKind, type LinkLocation, type LinkTrigger, type LogRecord, type LoggerPort, type Node, type NodeKind, type NodeStat, type PluginLoaderPort, type ProgressEmitterPort, type ProgressEvent, Registry, type RenameOp, type RunScanOptions, type RunnerPort, type ScanResult, type ScanScannedBy, type ScanStats, type Severity, SilentLogger, type Stability, type StoragePort, type TActionWrite, type TExecutionMode, type TGranularity, type THookFilter, type THookTrigger, type TInputTypeName, type TLogLevel, type TLogMethodLevel, type TNodeChangeReason, type TPluginLoadStatus, type TPluginStorage, type TProgressListener, type TSettingValue, type TSeverity, type TSlotName, type TWatchEventKind, type TripleSplit, applyExportQuery, computeScanDelta, configureLogger, createChokidarWatcher, createKernel, detectRenamesAndOrphans, getActiveLogger, isEmptyDelta, isLogLevel, log, logLevelRank, makeDedicatedStoreWrapper, makeEvent, makeHookDispatcher, makeKvStoreWrapper, makePluginStore, mergeNodeWithEnrichments, parseExportQuery, parseLogLevel, qualifiedExtensionId, resetLogger, runExtractorsForNode, runScan, runScanWithRenames };
+export { type Confidence, DuplicateExtensionError, EXTENSION_KINDS, type ExecutionFailureReason, type ExecutionKind, type ExecutionRecord, type ExecutionRunner, type ExecutionStatus, ExportQueryError, type ExtensionKind, type FilesystemPort, HOOK_TRIGGERS, type HistoryStats, type HistoryStatsErrorRates, type HistoryStatsExecutionsPerPeriod, type HistoryStatsPerActionRate, type HistoryStatsTokensPerAction, type HistoryStatsTopNode, type HistoryStatsTotals, type IAction, type IActionContext, type IActionPrecondition, type IActionResult, type IAnalyzer, type IAnalyzerContext, type IAnnotationContribution, type ICreateFsWatcherOptions, type IDedicatedStorePersist, type IDedicatedStoreWrapper, type IDiscoveredPlugin, type IEnrichmentRecord, type IExportQuery, type IExportSubset, type IExtension, type IExtensionBase, type IExternalRef, type IExtractor, type IExtractorCallbacks, type IExtractorContext, type IExtractorRunRecord, type IFormatter, type IFormatterContext, type IFsWatcher, type IHook, type IHookContext, type IHookDispatcher, type IIssueRow, type IKvStorePersist, type IKvStoreWrapper, type ILoadedExtension, type INodeBundle, type INodeChange, type INodeCounts, type INodeFilter, type IPersistOptions, type IPersistedEnrichment, type IPluginManifest, type IPluginStorageSchema, type IProvider, type IRawNode, type IRegisteredAnnotationKey, type IRegisteredViewContribution, type IRunOptions, type IRunResult, type IScanDelta, type ITransactionalStorage, type IViewContribution, type IWalkOptions, type IWatchBatch, type IWatchEvent, InMemoryProgressEmitter, type Issue, type IssueFix, KV_SCHEMA_KEY, type Kernel, LOG_LEVELS, type Link, type LinkKind, type LinkLocation, type LinkOccurrence, type LinkTrigger, type LogRecord, type LoggerPort, type Node, type NodeKind, type NodeStat, type PluginLoaderPort, type ProgressEmitterPort, type ProgressEvent, Registry, type RenameOp, type RunScanOptions, type RunnerPort, type ScanResult, type ScanScannedBy, type ScanStats, type Severity, SilentLogger, type Stability, type StoragePort, type TActionWrite, type TExecutionMode, type TGranularity, type THookFilter, type THookTrigger, type TInputTypeName, type TLogLevel, type TLogMethodLevel, type TNodeChangeReason, type TPluginLoadStatus, type TPluginStorage, type TPluginStore, type TProgressListener, type TSettingDeclaration, type TSettingValue, type TSeverity, type TSlotName, type TWatchEventKind, type TripleSplit, applyExportQuery, computeScanDelta, configureLogger, createChokidarWatcher, createKernel, detectRenamesAndOrphans, getActiveLogger, isEmptyDelta, isLogLevel, log, logLevelRank, makeDedicatedStoreWrapper, makeEvent, makeHookDispatcher, makeKvStoreWrapper, makePluginStore, mergeNodeWithEnrichments, parseExportQuery, parseLogLevel, qualifiedExtensionId, resetLogger, runExtractorsForNode, runScan, runScanWithRenames };