@skill-map/cli 0.37.0 → 0.39.0

package/dist/cli.js

@@ -1,5 +1,5 @@
 // cli/entry.ts
-import { existsSync as existsSync33 } from "fs";
+import { existsSync as existsSync30 } from "fs";
 import { Builtins, Cli as Cli2 } from "clipanion";
 
 // kernel/adapters/in-memory-progress.ts
@@ -61,7 +61,7 @@ var DuplicateExtensionError = class extends Error {
   }
 };
 var Registry = class {
-  /** kind → qualifiedId → Extension. */
+  /** kind → qualifiedId → IExtension. */
   #byKind;
   constructor() {
     this.#byKind = new Map(
@@ -429,13 +429,20 @@ var command_schema_default = {
   properties: {}
 };
 
+// plugins/ids.ts
+var CORE_PLUGIN_ID = "core";
+var CLAUDE_PLUGIN_ID = "claude";
+var OPENAI_PLUGIN_ID = "openai";
+var ANTIGRAVITY_PLUGIN_ID = "antigravity";
+var AGENT_SKILLS_PLUGIN_ID = "agent-skills";
+
 // plugins/claude/providers/claude/index.ts
 var claudeProvider = {
   id: "claude",
-  pluginId: "claude",
+  pluginId: CLAUDE_PLUGIN_ID,
   kind: "provider",
   version: "1.0.0",
-  description: "Walks Claude Code scope conventions (.claude/{agents,commands,skills}).",
+  description: "Classifies files under `.claude/{agents,commands,skills}` as Claude Code agents, commands, and skills.",
   // Vendor provider: Claude Code only reads its own `.claude/` territory
   // and ignores `.codex/` / Antigravity layouts at runtime. Gating the
   // classifier behind the active lens prevents the walker from inventing
@@ -657,9 +664,9 @@ function stripFences(input) {
       }
       continue;
     }
-    const open = FENCE_RE.exec(line);
-    if (open?.groups) {
-      openFence = open.groups["fence"];
+    const open2 = FENCE_RE.exec(line);
+    if (open2?.groups) {
+      openFence = open2.groups["fence"];
       out.push(blank(line));
       continue;
     }
@@ -717,10 +724,10 @@ var AT_RE = /(?:^|[^A-Za-z0-9_@])(@(?:\.{1,2}\/|\/)?[a-z0-9](?:[a-z0-9_\-./]*[a-
 var FILE_EXT_RE = /\.(md|mdx|js|jsx|ts|tsx|json|yml|yaml|toml|txt|html|css|scss|less|py|rb|go|rs|java|c|cpp|h|hpp|sh|sql|svg|png|jpg|jpeg|gif|webp|pdf)$/i;
 var atDirectiveExtractor = {
   id: ID,
-  pluginId: "claude",
+  pluginId: CLAUDE_PLUGIN_ID,
   kind: "extractor",
   version: "1.0.0",
-  description: "Detects `@<token>` directives in a node's body using Claude Code interpretation rules. A bare handle (e.g. `@team`) becomes a `mentions` link; a file-flavoured token (e.g. `@docs/api.md`, `@./readme.md`) becomes a `references` link. Gated by `precondition.provider: ['claude']` so Antigravity / Cursor / Codex apply their own at-directive flavours via their own extractors.",
+  description: "Detects `@<token>` directives in a node's body using Claude Code rules. A bare handle (e.g. `@team`) becomes a `mentions` link; a file-flavoured token (e.g. `@docs/api.md`, `@./readme.md`) becomes a `references` link.",
   scope: "body",
   precondition: { provider: ["claude"] },
   // eslint-disable-next-line complexity
@@ -801,15 +808,15 @@ function resolveSourceRelative(sourceDir, bare) {
   return pathPosix.normalize(joined);
 }
 
-// plugins/claude/extractors/slash/index.ts
-var ID2 = "slash";
+// plugins/claude/extractors/slash-command/index.ts
+var ID2 = "slash-command";
 var SLASH_RE = /(?<![A-Za-z0-9_/.:?#=&])(\/[a-z0-9][a-z0-9_-]*(?::[a-z0-9][a-z0-9_-]*)?)/gi;
-var slashExtractor = {
+var slashCommandExtractor = {
   id: ID2,
-  pluginId: "claude",
+  pluginId: CLAUDE_PLUGIN_ID,
   kind: "extractor",
   version: "1.0.0",
-  description: "Detects `/command` invocations in a node's body using Claude Code routing rules and turns each one into an arrow between nodes in the graph. Gated by `precondition.provider: ['claude']` so Antigravity / Cursor / Codex apply their own slash flavours (Antigravity ships subagent and skill panels, Codex deprecated user slash commands, etc.) via their own extractors.",
+  description: "Turns `/command` invocations in a node's body into arrows that point at the resolved slash command or skill, using Claude Code routing rules.",
   scope: "body",
   precondition: { provider: ["claude"] },
   extract(ctx) {
@@ -856,10 +863,10 @@ var slashExtractor = {
 // plugins/antigravity/providers/antigravity/index.ts
 var antigravityProvider = {
   id: "antigravity",
-  pluginId: "antigravity",
+  pluginId: ANTIGRAVITY_PLUGIN_ID,
   kind: "provider",
   version: "1.0.0",
-  description: "Google Antigravity CLI. Replaces the retired Gemini CLI; skills route through the neutral `agent-skills` Provider via `.agents/skills/`. This Provider contributes lens identity and a reserved-name seed catalog.",
+  description: "Declares the Google Antigravity runtime and its reserved built-in names.",
   // Vendor provider: marked gated for the day Antigravity grows its own
   // on-disk kind beyond the open standard. Today `kinds: {}` and
   // `classify` returns `null` for every path, so the flag is inert; the
@@ -889,7 +896,7 @@ var antigravityProvider = {
   // Gemini CLI's. We mirror the full 38-verb Gemini CLI catalog (plus its
   // four documented aliases: `dir`, `?`, `exit`, `bashes`) so a user file
   // that names a skill / command `help`, `clear`, `mcp`, etc. is flagged
-  // immediately by `core/reserved-name` once the lens activates the catalog.
+  // immediately by `core/name-reserved` once the lens activates the catalog.
   //
   // The catalog is INACTIVE today: the analyzer keys on `node.provider`
   // and this Provider's `classify()` returns `null` for every path, so
@@ -1005,10 +1012,10 @@ var agent_schema_default2 = {
 // plugins/openai/providers/openai/index.ts
 var openaiProvider = {
   id: "openai",
-  pluginId: "openai",
+  pluginId: OPENAI_PLUGIN_ID,
   kind: "provider",
   version: "1.0.0",
-  description: "Walks OpenAI Codex CLI scope conventions (.codex/agents/*.toml).",
+  description: "Classifies files under `.codex/agents/*.toml` as OpenAI Codex CLI sub-agents.",
   // Vendor provider: Codex CLI only reads its own `.codex/` territory.
   // Gating the classifier behind the active lens keeps the walker from
   // claiming Codex agents under a `claude` (or any other) lens, where
@@ -1063,10 +1070,10 @@ var skill_schema_default2 = {
 // plugins/agent-skills/providers/agent-skills/index.ts
 var agentSkillsProvider = {
   id: "agent-skills",
-  pluginId: "agent-skills",
+  pluginId: AGENT_SKILLS_PLUGIN_ID,
   kind: "provider",
   version: "1.0.0",
-  description: "Agent Skills open standard. Vendor-neutral path `.agents/skills/<name>/SKILL.md` (Anthropic, OpenAI, Google). See agentskills.io.",
+  description: "Classifies files under `.agents/skills/<name>/SKILL.md` as Agent Skills.",
   read: { extensions: [".md"], parser: "frontmatter-yaml" },
   kinds: {
     skill: {
@@ -1111,10 +1118,10 @@ var markdown_schema_default = {
 // plugins/core/providers/core-markdown/index.ts
 var coreMarkdownProvider = {
   id: "markdown",
-  pluginId: "core",
+  pluginId: CORE_PLUGIN_ID,
   kind: "provider",
   version: "1.0.0",
-  description: "Universal `.md` fallback. Claims any markdown file no vendor-specific Provider classifies.",
+  description: "Universal `.md` fallback. Claims any markdown file that no vendor-specific provider has classified.",
   read: { extensions: [".md"], parser: "frontmatter-yaml" },
   // Per spec § A.6, defaultRefreshAction values MUST be qualified
   // action ids. The summarize-markdown action is not yet implemented
@@ -1162,10 +1169,10 @@ var coreMarkdownProvider = {
 var ID3 = "annotations";
 var annotationsExtractor = {
   id: ID3,
-  pluginId: "core",
+  pluginId: CORE_PLUGIN_ID,
   kind: "extractor",
   version: "1.0.0",
-  description: "Turns the `supersedes` and `supersededBy` entries you write in a node's `.sm` sidecar into the arrows (edges) shown between nodes in the graph.",
+  description: "Turns the `supersedes` and `supersededBy` entries from a node's `.sm` sidecar into arrows between nodes in the graph.",
   scope: "frontmatter",
   extract(ctx) {
     const sourcePath = ctx.node.path;
@@ -1224,10 +1231,10 @@ var URL_RE = /https?:\/\/[^\s<>"'`)\]]+/g;
 var TRAILING_PUNCT = /[.,;:!?]+$/;
 var externalUrlCounterExtractor = {
   id: ID4,
-  pluginId: "core",
+  pluginId: CORE_PLUGIN_ID,
   kind: "extractor",
   version: "1.0.0",
-  description: "Counts the distinct external URLs in a node's body and shows the total on the card.",
+  description: "Counts the distinct external URLs in a node's body and shows the count on the card.",
   scope: "body",
   /**
    * Phase 6 / View contribution system, surface the distinct-URL
@@ -1313,10 +1320,10 @@ var LINK_RE = /(?<!!)\[([^\]]*)\]\(([^)\s]+)(?:\s+"[^"]*")?\)/g;
 var URL_SCHEME_RE = /^[a-z][a-z0-9+.-]*:/i;
 var markdownLinkExtractor = {
   id: ID5,
-  pluginId: "core",
+  pluginId: CORE_PLUGIN_ID,
   kind: "extractor",
   version: "1.0.0",
-  description: "Detects markdown links (`[text](path)`) in a node's body and turns each one into an arrow between nodes in the graph.",
+  description: "Turns markdown links (`[text](path)`) in a node's body into arrows between nodes in the graph.",
   scope: "body",
   extract(ctx) {
     const seen = /* @__PURE__ */ new Set();
@@ -1345,7 +1352,7 @@ var markdownLinkExtractor = {
             // explicitly designates an out-link via the brackets +
             // parentheses pair; there is no inference left to discount.
             // Whether the path resolves to a real node is a separate
-            // concern (the `core/broken-ref` analyzer flags unresolved
+            // concern (the `core/reference-broken` analyzer flags unresolved
             // targets), not a confidence question.
             confidence: 1,
             rationale: "unambiguous markdown link syntax",
@@ -1375,10 +1382,10 @@ var ID6 = "mcp-tools";
 var MCP_PATTERN = /^mcp__([a-z0-9][a-z0-9_-]*)__[a-z0-9_-]+$/i;
 var mcpToolsExtractor = {
   id: ID6,
-  pluginId: "core",
+  pluginId: CORE_PLUGIN_ID,
   kind: "extractor",
   version: "1.0.0",
-  description: "Detects `tools: [mcp__<server>__<tool>]` entries in a node's frontmatter and turns each unique server into an MCP node + a reference edge from the source.",
+  description: "Turns `tools: [mcp__<server>__<tool>]` entries in a node's frontmatter into an MCP node per unique server and an arrow from the source to each one.",
   scope: "frontmatter",
   extract(ctx) {
     const raw = ctx.frontmatter["tools"];
@@ -1432,15 +1439,15 @@ function collectMcpServers(tools) {
   return out;
 }
 
-// plugins/core/extractors/tools-count/index.ts
-var ID7 = "tools-count";
+// plugins/core/extractors/tools-counter/index.ts
+var ID7 = "tools-counter";
 var TOOLTIP_MAX = 255;
-var toolsCountExtractor = {
+var toolsCounterExtractor = {
   id: ID7,
-  pluginId: "core",
+  pluginId: CORE_PLUGIN_ID,
   kind: "extractor",
   version: "1.0.0",
-  description: "Counts the tools an agent declares in its frontmatter and shows the total on the agent card.",
+  description: "Counts the tools an agent declares in its frontmatter and shows the count on the agent card.",
   scope: "frontmatter",
   precondition: { kind: ["claude/agent"] },
   ui: {
@@ -1472,6 +1479,209 @@ function buildTooltip(names) {
   return `${joined.slice(0, TOOLTIP_MAX - 1)}\u2026`;
 }
 
+// plugins/core/analyzers/annotation-field-unknown/index.ts
+import { readFileSync } from "fs";
+import { dirname, resolve } from "path";
+import { createRequire } from "module";
+import { Ajv2020 } from "ajv/dist/2020.js";
+
+// kernel/util/ajv-interop.ts
+import addFormatsModule from "ajv-formats";
+var addFormats = addFormatsModule.default ?? addFormatsModule;
+function applyAjvFormats(ajv) {
+  addFormats(ajv);
+}
+
+// plugins/core/analyzers/annotation-field-unknown/text.ts
+var ANNOTATION_FIELD_UNKNOWN_TEXTS = {
+  /** Key inside `annotations:` is not in the curated catalog. */
+  unknownAnnotationKey: "{{path}}: sidecar annotations contain unknown key '{{key}}' (not in annotations.schema.json catalog).",
+  /** Top-level key is neither reserved, nor a registered plugin namespace, nor a registered root key. */
+  unknownRootKey: "{{path}}: sidecar declares unknown top-level key '{{key}}'; not a reserved block, not a registered plugin namespace, not a registered root contribution.",
+  /** Value under a registered plugin namespace fails the contributed schema. */
+  pluginNamespaceInvalid: "{{path}}: sidecar block '{{pluginId}}.{{key}}' fails the schema contributed by plugin '{{pluginId}}': {{errors}}.",
+  // Tooltips for the per-node view-contribution badges. Singular vs
+  // plural keeps the count grammar correct without a sub-template.
+  alertTooltipSingle: "This node has 1 unknown field in its sidecar. Open the inspector for details.",
+  alertTooltipMany: "This node has {{count}} unknown fields in its sidecar. Open the inspector for details."
+};
+
+// plugins/core/analyzers/annotation-field-unknown/index.ts
+var ID8 = "annotation-field-unknown";
+var RESERVED_ROOT_BLOCKS = /* @__PURE__ */ new Set(["identity", "annotations", "settings", "audit"]);
+var annotationFieldUnknownAnalyzer = {
+  id: ID8,
+  pluginId: CORE_PLUGIN_ID,
+  kind: "analyzer",
+  version: "1.0.0",
+  description: "Flags typos or unrecognized keys in sidecars (`.sm`).",
+  mode: "deterministic",
+  ui: {
+    // Corner badge on the graph card; count omitted when there is a
+    // single unknown field (avoids a noisy "icon + 1" chip).
+    alert: {
+      slot: "graph.node.alert",
+      // Filled warning triangle on the corner, matches the broken-ref
+      // alert's "attention-grabbing solid" pattern; the footer chip
+      // below stays outlined for the quieter counter pairing.
+      icon: "fa-solid fa-triangle-exclamation",
+      emitWhenEmpty: false
+    },
+    // Footer chip on the card, `_counter` shape but rendered icon-only
+    // (the analyzer emits `value: 0` so NodeCounter hides the number
+    // and only the glyph shows). PrimeIcons `pi-question-circle` so the
+    // visual weight matches `annotation-stale`'s `pi-clock` chip
+    // sitting next to it on the same footer row. `emitWhenEmpty: true`
+    // is required: with `value: 0` the slot treats the payload as
+    // empty, so the manifest has to opt in to keep the emission.
+    chip: {
+      slot: "card.footer.right",
+      icon: "pi-question-circle",
+      emitWhenEmpty: true,
+      priority: 30
+    }
+  },
+  // Analyzer body iterates every sidecar root and classifies each
+  // key against three buckets (catalog / plugin namespace / unknown
+  // root). The per-key branching IS the classification table; factoring
+  // it out would rebuild the discriminator elsewhere. Per
+  // `context/lint.md` category 7 (recursive type-discriminator walkers).
+  // eslint-disable-next-line complexity
+  evaluate(ctx) {
+    const sidecarRoots = ctx.sidecarRoots;
+    if (!sidecarRoots || sidecarRoots.size === 0) return [];
+    const knownAnnotationKeys = getKnownAnnotationKeys();
+    const contributions = ctx.annotationContributions ?? [];
+    const namespacedByPlugin = indexNamespacedContributions(contributions);
+    const rootKeys = indexRootContributions(contributions);
+    const knownPluginIds = collectPluginIds(contributions);
+    const issues = [];
+    const perNode = /* @__PURE__ */ new Map();
+    const bump2 = (nodePath) => {
+      perNode.set(nodePath, (perNode.get(nodePath) ?? 0) + 1);
+    };
+    for (const node of ctx.nodes) {
+      const root = sidecarRoots.get(node.path);
+      if (!root) continue;
+      const annotations = root["annotations"];
+      if (annotations !== void 0 && annotations !== null && typeof annotations === "object" && !Array.isArray(annotations)) {
+        for (const key of Object.keys(annotations)) {
+          if (!knownAnnotationKeys.has(key)) {
+            issues.push({
+              analyzerId: ID8,
+              severity: "warn",
+              nodeIds: [node.path],
+              message: tx(ANNOTATION_FIELD_UNKNOWN_TEXTS.unknownAnnotationKey, {
+                path: node.path,
+                key
+              }),
+              data: { surface: "annotations", key }
+            });
+            bump2(node.path);
+          }
+        }
+      }
+      for (const key of Object.keys(root)) {
+        if (RESERVED_ROOT_BLOCKS.has(key)) continue;
+        if (rootKeys.has(key)) continue;
+        if (knownPluginIds.has(key)) {
+          const block = root[key];
+          if (block === null || typeof block !== "object" || Array.isArray(block)) continue;
+          const contribsForPlugin = namespacedByPlugin.get(key);
+          if (!contribsForPlugin) continue;
+          for (const [contribKey, validator] of contribsForPlugin) {
+            const value = block[contribKey];
+            if (value === void 0) continue;
+            if (validator(value)) continue;
+            const errors = (validator.errors ?? []).map((e) => `${e.instancePath || "(root)"} ${e.message ?? e.keyword}`).join("; ");
+            issues.push({
+              analyzerId: ID8,
+              severity: "warn",
+              nodeIds: [node.path],
+              message: tx(ANNOTATION_FIELD_UNKNOWN_TEXTS.pluginNamespaceInvalid, {
+                path: node.path,
+                pluginId: key,
+                key: contribKey,
+                errors
+              }),
+              data: { surface: "plugin-namespace", pluginId: key, key: contribKey }
+            });
+            bump2(node.path);
+          }
+          continue;
+        }
+        issues.push({
+          analyzerId: ID8,
+          severity: "warn",
+          nodeIds: [node.path],
+          message: tx(ANNOTATION_FIELD_UNKNOWN_TEXTS.unknownRootKey, {
+            path: node.path,
+            key
+          }),
+          data: { surface: "root", key }
+        });
+        bump2(node.path);
+      }
+    }
+    for (const [nodePath, count] of perNode) {
+      const tooltip = count === 1 ? ANNOTATION_FIELD_UNKNOWN_TEXTS.alertTooltipSingle : tx(ANNOTATION_FIELD_UNKNOWN_TEXTS.alertTooltipMany, { count });
+      ctx.emitContribution(nodePath, "alert", {
+        icon: "fa-solid fa-triangle-exclamation",
+        severity: "warn",
+        tooltip
+      });
+      ctx.emitContribution(nodePath, "chip", {
+        value: 0,
+        severity: "warn",
+        tooltip
+      });
+    }
+    return issues;
+  }
+};
+var cachedKnownKeys = null;
+function getKnownAnnotationKeys() {
+  if (cachedKnownKeys) return cachedKnownKeys;
+  const require2 = createRequire(import.meta.url);
+  const indexPath = require2.resolve("@skill-map/spec/index.json");
+  const specRoot = dirname(indexPath);
+  const schema = JSON.parse(
+    readFileSync(resolve(specRoot, "schemas/annotations.schema.json"), "utf8")
+  );
+  cachedKnownKeys = new Set(Object.keys(schema.properties ?? {}));
+  return cachedKnownKeys;
+}
+function indexNamespacedContributions(contributions) {
+  const out = /* @__PURE__ */ new Map();
+  const ajv = new Ajv2020({ strict: false, allErrors: true, allowUnionTypes: true });
+  applyAjvFormats(ajv);
+  for (const entry of contributions) {
+    if (entry.location !== "namespaced") continue;
+    let bucket = out.get(entry.pluginId);
+    if (!bucket) {
+      bucket = /* @__PURE__ */ new Map();
+      out.set(entry.pluginId, bucket);
+    }
+    try {
+      bucket.set(entry.key, ajv.compile(entry.schema));
+    } catch {
+    }
+  }
+  return out;
+}
+function indexRootContributions(contributions) {
+  const out = /* @__PURE__ */ new Set();
+  for (const entry of contributions) {
+    if (entry.location === "root") out.add(entry.key);
+  }
+  return out;
+}
+function collectPluginIds(contributions) {
+  const out = /* @__PURE__ */ new Set();
+  for (const entry of contributions) out.add(entry.pluginId);
+  return out;
+}
+
 // plugins/core/analyzers/annotation-orphan/text.ts
 var ANNOTATION_ORPHAN_TEXTS = {
   /** Sidecar `<path>.sm` has no matching `<path>.md`. */
@@ -1479,13 +1689,13 @@ var ANNOTATION_ORPHAN_TEXTS = {
 };
 
 // plugins/core/analyzers/annotation-orphan/index.ts
-var ID8 = "annotation-orphan";
+var ID9 = "annotation-orphan";
 var annotationOrphanAnalyzer = {
-  id: ID8,
-  pluginId: "core",
+  id: ID9,
+  pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   version: "1.0.0",
-  description: "Detects and flags sidecars (`.sm`) whose `.md` no longer exists.",
+  description: "Flags sidecars (`.sm`) whose `.md` file no longer exists.",
   mode: "deterministic",
   evaluate(ctx) {
     const orphans = ctx.orphanSidecars;
@@ -1494,7 +1704,7 @@ var annotationOrphanAnalyzer = {
     for (const orphan of orphans) {
       const expectedMdRelative = orphan.relativePath.endsWith(".sm") ? `${orphan.relativePath.slice(0, -".sm".length)}.md` : `${orphan.relativePath}.md`;
       issues.push({
-        analyzerId: ID8,
+        analyzerId: ID9,
         severity: "warn",
         nodeIds: [expectedMdRelative],
         message: tx(ANNOTATION_ORPHAN_TEXTS.message, {
@@ -1531,17 +1741,17 @@ var ANNOTATION_STALE_TEXTS = {
 };
 
 // plugins/core/analyzers/annotation-stale/index.ts
-var ID9 = "annotation-stale";
+var ID10 = "annotation-stale";
 var annotationStaleAnalyzer = {
-  id: ID9,
-  pluginId: "core",
+  id: ID10,
+  pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   version: "1.0.0",
-  description: "Detects and marks sidecars (`.sm`) out of date of their `.md`.",
+  description: "Marks sidecars (`.sm`) that are out of date with their `.md`.",
   mode: "deterministic",
   // The natural fix is to bump the node: refreshes `for` hashes,
   // increments `annotations.version`, and stamps the audit block. The
-  // UI surfaces `core/bump` in the node inspector under "Recommended
+  // UI surfaces `core/node-bump` in the node inspector under "Recommended
   // for issues" whenever this analyzer fires.
   ui: {
     // A `pi-clock` chip in the footer-right cluster so the operator
@@ -1568,7 +1778,7 @@ var annotationStaleAnalyzer = {
       if (status === "fresh") continue;
       const message = status === "stale-body" ? tx(ANNOTATION_STALE_TEXTS.bodyDrift, { path: node.path }) : status === "stale-frontmatter" ? tx(ANNOTATION_STALE_TEXTS.frontmatterDrift, { path: node.path }) : tx(ANNOTATION_STALE_TEXTS.bothDrift, { path: node.path });
       issues.push({
-        analyzerId: ID9,
+        analyzerId: ID10,
         severity: "warn",
         nodeIds: [node.path],
         message,
@@ -1594,221 +1804,37 @@ function tooltipFor(status) {
   }
 }
 
-// plugins/core/analyzers/broken-ref/index.ts
-import { posix as pathPosix3, resolve } from "path";
+// plugins/core/analyzers/contribution-orphan/index.ts
+var ID11 = "contribution-orphan";
+var contributionOrphanAnalyzer = {
+  id: ID11,
+  pluginId: CORE_PLUGIN_ID,
+  kind: "analyzer",
+  version: "0.0.0",
+  description: "Warns about plugin data referencing nodes renamed or deleted in the latest scan.",
+  mode: "deterministic",
+  evaluate(_ctx) {
+    return [];
+  }
+};
 
-// plugins/core/analyzers/broken-ref/text.ts
-var BROKEN_REF_TEXTS = {
-  /** `Broken <kind> reference from <source> → <target>` */
-  message: "Broken {{kind}} reference from {{source}} \u2192 {{target}}",
-  // Tooltips for the per-node view-contribution badges. Singular vs
-  // plural keeps the count grammar correct without a sub-template.
-  alertTooltipSingle: "This node has a broken reference. Open the inspector for details.",
-  alertTooltipMany: "This node has {{count}} broken references. Open the inspector for details.",
-  // Fix-summary copy when the broken trigger has a same-named file on
-  // disk that does not advertise `name:` in its frontmatter. Two
-  // variants for single vs multiple candidates; same template family
-  // as the alert tooltips above.
-  hintSummarySingle: "Add `name: {{name}}` to the frontmatter of {{candidate}} so this reference resolves.",
-  hintSummaryMany: "Add `name: {{name}}` to the frontmatter of one of these files so this reference resolves: {{candidates}}."
+// plugins/core/analyzers/job-file-orphan/text.ts
+var JOB_FILE_ORPHAN_TEXTS = {
+  /**
+   * `<path>.md` lives under `.skill-map/jobs/` but no `state_jobs.filePath`
+   * row references it. Run `sm job prune --orphan-files` to remove.
+   */
+  message: "Orphan job file: {{filePath}} is not referenced by any state_jobs row. Run `sm job prune --orphan-files` to remove it."
 };
 
-// plugins/core/analyzers/broken-ref/index.ts
-var ID10 = "broken-ref";
-var brokenRefAnalyzer = {
-  id: ID10,
-  pluginId: "core",
+// plugins/core/analyzers/job-file-orphan/index.ts
+var ID12 = "job-file-orphan";
+var jobFileOrphanAnalyzer = {
+  id: ID12,
+  pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   version: "1.0.0",
-  description: "Detects and flags arrows pointing at a node not part of the current scan.",
-  mode: "deterministic",
-  ui: {
-    // Corner badge on the graph card; count omitted when there is a
-    // single broken ref (avoids a noisy "icon + 1" chip).
-    alert: {
-      slot: "graph.node.alert",
-      icon: "fa-solid fa-circle-xmark",
-      emitWhenEmpty: false
-    },
-    // Footer chip on the card. `_counter` shape, `value` always shows,
-    // so the operator sees "how many" at a glance. Renders OUTLINED
-    // (`fa-regular`) so the corner alert (filled, attention-grabbing)
-    // and the footer chip (quieter, paired with a number) read as two
-    // beats of the same signal rather than two identical glyphs.
-    chip: {
-      slot: "card.footer.right",
-      icon: "fa-regular fa-circle-xmark",
-      emitWhenEmpty: false,
-      priority: 40
-    }
-  },
-  // The resolver, the reference-paths escape hatch, the per-source
-  // aggregation, and the dual-slot emit (with single/plural tooltip and
-  // optional count) all live in one flow because they share the per-link
-  // loop. Splitting them would re-walk `ctx.links` three times.
-  // eslint-disable-next-line complexity
-  evaluate(ctx) {
-    const byPath3 = new Set(ctx.nodes.map((n) => n.path));
-    const byNormalizedName = indexByNormalizedName(ctx.nodes);
-    const byBasenameWithoutName = indexByBasenameWithoutName(ctx.nodes);
-    const refIndex = ctx.referenceablePaths && ctx.referenceablePaths.size > 0 && ctx.cwd ? { paths: ctx.referenceablePaths, cwd: ctx.cwd } : null;
-    const issues = [];
-    const perNode = /* @__PURE__ */ new Map();
-    for (const link of ctx.links) {
-      if (isResolved(link, byPath3, byNormalizedName)) continue;
-      if (refIndex && resolvesViaReferencePaths(link, refIndex)) continue;
-      const candidates = findHintCandidates(link, byBasenameWithoutName);
-      issues.push(buildIssue(link, candidates));
-      perNode.set(link.source, (perNode.get(link.source) ?? 0) + 1);
-    }
-    for (const [nodePath, count] of perNode) {
-      const tooltip = count === 1 ? BROKEN_REF_TEXTS.alertTooltipSingle : tx(BROKEN_REF_TEXTS.alertTooltipMany, { count });
-      const capped = Math.min(count, 99);
-      ctx.emitContribution(nodePath, "alert", {
-        icon: "fa-solid fa-circle-xmark",
-        severity: "danger",
-        tooltip
-      });
-      ctx.emitContribution(nodePath, "chip", {
-        value: capped,
-        severity: "danger",
-        tooltip
-      });
-    }
-    return issues;
-  }
-};
-function buildIssue(link, hintCandidates = []) {
-  const data = {
-    target: link.target,
-    kind: link.kind,
-    trigger: link.trigger?.normalizedTrigger ?? null
-  };
-  const issue = {
-    analyzerId: ID10,
-    severity: "warn",
-    nodeIds: [link.source],
-    message: tx(BROKEN_REF_TEXTS.message, {
-      kind: link.kind,
-      source: link.source,
-      target: link.target
-    }),
-    data
-  };
-  if (hintCandidates.length > 0) {
-    const suggestedName = (link.trigger?.normalizedTrigger ?? "").replace(/^[/@]/, "").trim();
-    const candidatePaths = hintCandidates.map((n) => n.path);
-    data["hint"] = {
-      kind: "missing-frontmatter-name",
-      suggestedName,
-      candidates: candidatePaths
-    };
-    issue.fix = {
-      summary: candidatePaths.length === 1 ? tx(BROKEN_REF_TEXTS.hintSummarySingle, {
-        name: suggestedName,
-        candidate: candidatePaths[0]
-      }) : tx(BROKEN_REF_TEXTS.hintSummaryMany, {
-        name: suggestedName,
-        candidates: candidatePaths.join(", ")
-      }),
-      autofixable: false
-    };
-  }
-  return issue;
-}
-function resolvesViaReferencePaths(link, refIndex) {
-  if (!isPathStyleLink(link)) return false;
-  return refIndex.paths.has(resolve(refIndex.cwd, link.target));
-}
-function indexByNormalizedName(nodes) {
-  const out = /* @__PURE__ */ new Map();
-  for (const node of nodes) {
-    const raw = node.frontmatter?.["name"];
-    const name = typeof raw === "string" ? raw : "";
-    if (!name) continue;
-    const key = normalizeTrigger(name);
-    const bucket = out.get(key) ?? [];
-    bucket.push(node);
-    out.set(key, bucket);
-  }
-  return out;
-}
-function basenameWithoutExt(path) {
-  const base = pathPosix3.basename(path);
-  const ext = pathPosix3.extname(base);
-  return ext ? base.slice(0, -ext.length) : base;
-}
-function indexByBasenameWithoutName(nodes) {
-  const out = /* @__PURE__ */ new Map();
-  for (const node of nodes) {
-    const raw = node.frontmatter?.["name"];
-    const name = typeof raw === "string" ? raw : "";
-    if (name) continue;
-    const bare = basenameWithoutExt(node.path);
-    if (!bare) continue;
-    const key = normalizeTrigger(bare);
-    if (!key) continue;
-    const bucket = out.get(key) ?? [];
-    bucket.push(node);
-    out.set(key, bucket);
-  }
-  return out;
-}
-function findHintCandidates(link, idx) {
-  const normalized = link.trigger?.normalizedTrigger;
-  if (!normalized) return [];
-  const sigil = normalized.charAt(0);
-  if (sigil !== "/" && sigil !== "@") return [];
-  const withoutSigil = normalized.slice(1).trim();
-  if (!withoutSigil) return [];
-  return idx.get(withoutSigil) ?? [];
-}
-function isResolved(link, byPath3, byNormalizedName) {
-  const normalized = link.trigger?.normalizedTrigger;
-  if (normalized) {
-    const withoutSigil = normalized.replace(/^[/@]/, "").trim();
-    if (byNormalizedName.has(withoutSigil)) return true;
-  }
-  if (byPath3.has(link.target)) return true;
-  return false;
-}
-function isPathStyleLink(link) {
-  const sigil = link.trigger?.normalizedTrigger?.charAt(0);
-  if (sigil === "/" || sigil === "@") return false;
-  return true;
-}
-
-// plugins/core/analyzers/contribution-orphan/index.ts
-var ID11 = "contribution-orphan";
-var contributionOrphanAnalyzer = {
-  id: ID11,
-  pluginId: "core",
-  kind: "analyzer",
-  version: "0.0.0",
-  description: "Detects and warns about plugin data referencing nodes renamed or deleted in the latest scan.",
-  mode: "deterministic",
-  evaluate(_ctx) {
-    return [];
-  }
-};
-
-// plugins/core/analyzers/job-orphan-file/text.ts
-var JOB_ORPHAN_FILE_TEXTS = {
-  /**
-   * `<path>.md` lives under `.skill-map/jobs/` but no `state_jobs.filePath`
-   * row references it. Run `sm job prune --orphan-files` to remove.
-   */
-  message: "Orphan job file: {{filePath}} is not referenced by any state_jobs row. Run `sm job prune --orphan-files` to remove it."
-};
-
-// plugins/core/analyzers/job-orphan-file/index.ts
-var ID12 = "job-orphan-file";
-var jobOrphanFileAnalyzer = {
-  id: ID12,
-  pluginId: "core",
-  kind: "analyzer",
-  version: "1.0.0",
-  description: "Detects and flags leftover job result files (no live job references them). Cleanup via `sm job prune --orphan-files`.",
+  description: "Flags leftover job result files (no live job references them). Clean up via `sm job prune --orphan-files`.",
   mode: "deterministic",
   evaluate(ctx) {
     const orphans = ctx.orphanJobFiles;
@@ -1819,7 +1845,7 @@ var jobOrphanFileAnalyzer = {
         analyzerId: ID12,
         severity: "warn",
         nodeIds: [filePath],
-        message: tx(JOB_ORPHAN_FILE_TEXTS.message, { filePath }),
+        message: tx(JOB_FILE_ORPHAN_TEXTS.message, { filePath }),
         data: { filePath }
       });
     }
@@ -1840,7 +1866,7 @@ var linkConflictAnalyzer = {
   pluginId: "core",
   kind: "analyzer",
   version: "1.0.0",
-  description: 'Detects and flags conflicting arrow meanings between extractors (e.g. "references" vs "invokes").',
+  description: "Flags conflicting arrow meanings between extractors (e.g. `references` vs `invokes`).",
   mode: "deterministic",
   // Bucket links by (source, target), then per-bucket detect distinct
   // kinds. The branching is intrinsic to the per-bucket conflict
@@ -1950,11 +1976,11 @@ function resolveLinkTargetToPath(link, nameIndex) {
   return resolved ?? raw;
 }
 
-// plugins/core/analyzers/link-counts/index.ts
-var ID14 = "link-counts";
-var linkCountsAnalyzer = {
+// plugins/core/analyzers/link-counter/index.ts
+var ID14 = "link-counter";
+var linkCounterAnalyzer = {
   id: ID14,
-  pluginId: "core",
+  pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   version: "1.0.0",
   description: "Counts incoming and outgoing links per node.",
@@ -2017,163 +2043,73 @@ function formatBreakdown(byKind, direction) {
   return [direction, ...lines].join("\n");
 }
 
-// plugins/core/analyzers/redundant-target-reference/text.ts
-var REDUNDANT_TARGET_REFERENCE_TEXTS = {
+// plugins/core/analyzers/link-self-loop/text.ts
+var LINK_SELF_LOOP_TEXTS = {
   /**
-   * Multi-form / multi-occurrence reference message. Lists each
-   * occurrence (trigger + line) so the operator sees the full
-   * authorial surface without having to grep the body.
+   * Per-edge warn: a node body references itself via the slash /
+   * at-directive / markdown-link surface (most commonly because the
+   * file's heading IS the invocation token, e.g. `# /deploy` inside
+   * `commands/deploy.md`). The link is structurally valid but rarely
+   * the operator's intent; UI consumers MAY hide it by default and
+   * surface a count.
    */
-  message: "{{source}} references {{resolvedTarget}} via {{count}} occurrences: {{occurrences}}. Consider consolidating to a single form to reduce maintenance surface and avoid duplicate inlining at runtime.",
-  /** Inline separator between occurrences in the message. */
-  occurrenceSeparator: ", ",
-  /** Per-occurrence formatting (trigger + line). */
-  occurrence: "`{{trigger}}` ({{kind}}, line {{line}})",
-  /** Per-occurrence formatting when the extractor did not record a line. */
-  occurrenceUnknownLine: "`{{trigger}}` ({{kind}}, unknown line)"
+  message: "{{source}} references itself via `{{trigger}}` ({{kind}}). Self-loops typically come from the file's own heading or label and are noise rather than intent. Either remove the in-body token or treat this finding as expected and acknowledged."
 };
 
-// plugins/core/analyzers/redundant-target-reference/index.ts
-var ID15 = "redundant-target-reference";
-var redundantTargetReferenceAnalyzer = {
+// plugins/core/analyzers/link-self-loop/index.ts
+var ID15 = "link-self-loop";
+var linkSelfLoopAnalyzer = {
   id: ID15,
-  pluginId: "core",
+  pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   version: "1.0.0",
-  description: "Flags when one node references the same resolved target via two or more syntactic surfaces (cross-extractor multi-form OR cross-kind multi-edge). Emits a warn on the source listing every occurrence (kind + trigger + line). Helps consolidate authorial redundancy and avoid duplicate runtime inlining.",
+  description: "Flags links whose source is also their own resolved target (e.g. a body heading like `# /deploy` inside the file that defines `/deploy`).",
   mode: "deterministic",
   evaluate(ctx) {
     if (ctx.links.length === 0) return [];
-    const byPath3 = /* @__PURE__ */ new Map();
-    for (const node of ctx.nodes) byPath3.set(node.path, node);
-    const byName = buildNameIndex2(ctx.nodes);
-    const groups = /* @__PURE__ */ new Map();
-    for (const link of ctx.links) {
-      const resolved = resolveTargetPath(link, byPath3, byName);
-      if (!resolved) continue;
-      const key = `${link.source}\0${resolved}`;
-      const bucket = groups.get(key);
-      if (bucket) bucket.push(link);
-      else groups.set(key, [link]);
-    }
     const issues = [];
-    for (const [key, links] of groups) {
-      const totalOccurrences = links.reduce((acc, l) => acc + (l.occurrences?.length ?? 1), 0);
-      if (totalOccurrences < 2) continue;
-      const [source, resolvedTarget] = key.split("\0");
-      const flat = flattenOccurrences(links);
+    for (const link of ctx.links) {
+      if (!isSelfLoop(link)) continue;
       issues.push({
         analyzerId: ID15,
         severity: "warn",
-        nodeIds: [source],
-        message: tx(REDUNDANT_TARGET_REFERENCE_TEXTS.message, {
-          source,
-          resolvedTarget,
-          count: flat.length,
-          occurrences: flat.map(formatOccurrence).join(REDUNDANT_TARGET_REFERENCE_TEXTS.occurrenceSeparator)
+        nodeIds: [link.source],
+        message: tx(LINK_SELF_LOOP_TEXTS.message, {
+          source: link.source,
+          trigger: link.trigger?.originalTrigger ?? link.target,
+          kind: link.kind
         }),
         data: {
-          target: resolvedTarget,
-          resolvedTarget,
-          occurrences: flat.map((o) => ({
-            kind: o.kind,
-            trigger: o.originalTrigger,
-            line: o.line ?? null,
-            extractor: o.extractor
-          }))
+          target: link.target,
+          resolvedTarget: link.resolvedTarget ?? link.target,
+          kind: link.kind,
+          // Mark explicitly so UI / downstream consumers can read this
+          // single field instead of re-computing the `source === target`
+          // predicate themselves.
+          selfLoop: true
         }
       });
     }
     return issues;
   }
 };
-function flattenOccurrences(links) {
+function isSelfLoop(link) {
+  if (link.source === link.target) return true;
+  if (link.resolvedTarget && link.source === link.resolvedTarget) return true;
+  return false;
+}
+
+// kernel/orchestrator/node-identifiers.ts
+import { posix as pathPosix3 } from "path";
+function deriveNodeIdentifiers(node, kindDescriptor) {
+  const sources = kindDescriptor?.identifiers;
+  if (!sources || sources.length === 0) return [];
   const out = [];
-  for (const link of links) {
-    if (link.occurrences && link.occurrences.length > 0) {
-      for (const occ of link.occurrences) {
-        out.push({
-          kind: link.kind,
-          originalTrigger: occ.originalTrigger,
-          extractor: occ.extractor,
-          line: occ.location?.line ?? null
-        });
-      }
-      continue;
-    }
-    const trigger = link.trigger?.originalTrigger ?? link.target;
-    out.push({
-      kind: link.kind,
-      originalTrigger: trigger,
-      extractor: link.sources[0] ?? "unknown",
-      line: link.location?.line ?? null
-    });
-  }
-  out.sort((a, b) => {
-    const la = a.line ?? Number.MAX_SAFE_INTEGER;
-    const lb = b.line ?? Number.MAX_SAFE_INTEGER;
-    if (la !== lb) return la - lb;
-    return a.originalTrigger.localeCompare(b.originalTrigger);
-  });
-  return out;
-}
-function formatOccurrence(occ) {
-  if (occ.line === null) {
-    return tx(REDUNDANT_TARGET_REFERENCE_TEXTS.occurrenceUnknownLine, { trigger: occ.originalTrigger, kind: occ.kind });
-  }
-  return tx(REDUNDANT_TARGET_REFERENCE_TEXTS.occurrence, { trigger: occ.originalTrigger, kind: occ.kind, line: occ.line });
-}
-function buildNameIndex2(nodes) {
-  const out = /* @__PURE__ */ new Map();
-  for (const node of nodes) {
-    for (const candidate of collectIdentifiers(node)) {
-      const normalised = normalizeTrigger(candidate);
-      if (!normalised) continue;
-      const bucket = out.get(normalised);
-      if (bucket) bucket.push(node.path);
-      else out.set(normalised, [node.path]);
-    }
-  }
-  return out;
-}
-function collectIdentifiers(node) {
-  const out = [];
-  const fmName = node.frontmatter?.["name"];
-  if (typeof fmName === "string" && fmName.length > 0) out.push(fmName);
-  const segs = node.path.split("/");
-  const last = segs[segs.length - 1] ?? "";
-  if (last) {
-    const stem = last.replace(/\.[^.]+$/, "");
-    if (stem) out.push(stem);
-  }
-  if (segs.length >= 2) {
-    const dirBase = segs[segs.length - 2];
-    if (dirBase) out.push(dirBase);
-  }
-  return out;
-}
-function resolveTargetPath(link, byPath3, byName) {
-  if (byPath3.has(link.target)) return link.target;
-  const trigger = link.trigger?.normalizedTrigger;
-  if (!trigger) return null;
-  const stripped = trigger.replace(/^[/@]/, "").trim();
-  if (!stripped) return null;
-  const candidates = byName.get(stripped);
-  if (!candidates || candidates.length === 0) return null;
-  return candidates[0] ?? null;
-}
-
-// kernel/orchestrator/node-identifiers.ts
-import { posix as pathPosix4 } from "path";
-function deriveNodeIdentifiers(node, kindDescriptor) {
-  const sources = kindDescriptor?.identifiers;
-  if (!sources || sources.length === 0) return [];
-  const out = [];
-  for (const source of sources) {
-    const raw = readIdentifier(source, node);
-    if (!raw) continue;
-    const normalised = normalizeTrigger(raw);
-    if (normalised) out.push(normalised);
+  for (const source of sources) {
+    const raw = readIdentifier(source, node);
+    if (!raw) continue;
+    const normalised = normalizeTrigger(raw);
+    if (normalised) out.push(normalised);
   }
   return out;
 }
@@ -2188,16 +2124,16 @@ function readFrontmatterName(node) {
   return raw.length > 0 ? raw : null;
 }
 function readFilenameBasename(node) {
-  const base = pathPosix4.basename(node.path);
+  const base = pathPosix3.basename(node.path);
   if (!base) return null;
-  const ext = pathPosix4.extname(base);
+  const ext = pathPosix3.extname(base);
   const stem = ext ? base.slice(0, -ext.length) : base;
   return stem.length > 0 ? stem : null;
 }
 function readDirname(node) {
-  const dir = pathPosix4.dirname(node.path);
+  const dir = pathPosix3.dirname(node.path);
   if (!dir || dir === "." || dir === "/") return null;
-  const base = pathPosix4.basename(dir);
+  const base = pathPosix3.basename(dir);
   return base.length > 0 ? base : null;
 }
 
@@ -2266,8 +2202,8 @@ function kindKey(node) {
   return `${node.provider}/${node.kind}`;
 }
 
-// plugins/core/analyzers/reserved-name/text.ts
-var RESERVED_NAME_TEXTS = {
+// plugins/core/analyzers/name-reserved/text.ts
+var NAME_RESERVED_TEXTS = {
   /**
    * Target-side message: emitted on the user file that collides with
    * a runtime built-in. Same wording skill-map shipped before the
@@ -2284,14 +2220,14 @@ var RESERVED_NAME_TEXTS = {
   linkMessage: "Link `{{kind}} {{target}}` resolves to a name reserved by the {{provider}} runtime ({{reservedKind}} `{{reservedPath}}`). The runtime shadows the user file, so this edge is downgraded to confidence {{confidence}} instead of 1.0. Rename the target file or its `frontmatter.name` to a non-reserved value."
 };
 
-// plugins/core/analyzers/reserved-name/index.ts
-var ID16 = "reserved-name";
-var reservedNameAnalyzer = {
+// plugins/core/analyzers/name-reserved/index.ts
+var ID16 = "name-reserved";
+var nameReservedAnalyzer = {
   id: ID16,
-  pluginId: "core",
+  pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   version: "1.0.0",
-  description: "Flags reserved-name collisions on two surfaces. Target side: a user file whose name collides with a Provider runtime's built-in invocable (the runtime shadows the file silently). Source side: a link that resolves to a reserved name, which the post-walk lift transform downgrades to the sentinel `RESERVED_TARGET_CONFIDENCE` (0.1). The two findings share the analyzer id so consumers can group by root cause; the source-side issue carries `data.target` matching the link so UIs can correlate per-row.",
+  description: "Flags two kinds of reserved-name collision: a file whose name shadows a built-in command of the active runtime, and a link that resolves to one of those reserved names.",
   mode: "deterministic",
   // eslint-disable-next-line complexity
   evaluate(ctx) {
@@ -2307,7 +2243,7 @@ var reservedNameAnalyzer = {
         analyzerId: ID16,
         severity: "warn",
         nodeIds: [node.path],
-        message: tx(RESERVED_NAME_TEXTS.message, {
+        message: tx(NAME_RESERVED_TEXTS.message, {
           path: node.path,
           provider: node.provider,
           kind: node.kind
@@ -2323,7 +2259,7 @@ var reservedNameAnalyzer = {
         analyzerId: ID16,
         severity: "warn",
         nodeIds: [link.source],
-        message: tx(RESERVED_NAME_TEXTS.linkMessage, {
+        message: tx(NAME_RESERVED_TEXTS.linkMessage, {
           kind: link.kind,
           target: link.target,
           provider: reservedNode.provider,
@@ -2380,206 +2316,16 @@ function normaliseId(raw) {
   return raw.normalize("NFD").replace(new RegExp("\\p{Mn}+", "gu"), "").toLowerCase().replace(/[-_\s]+/g, " ").replace(/  +/g, " ").trim();
 }
 
-// plugins/core/analyzers/self-loop/text.ts
-var SELF_LOOP_TEXTS = {
-  /**
-   * Per-edge warn: a node body references itself via the slash /
-   * at-directive / markdown-link surface (most commonly because the
-   * file's heading IS the invocation token, e.g. `# /deploy` inside
-   * `commands/deploy.md`). The link is structurally valid but rarely
-   * the operator's intent; UI consumers MAY hide it by default and
-   * surface a count.
-   */
-  message: "{{source}} references itself via `{{trigger}}` ({{kind}}). Self-loops typically come from the file's own heading or label and are noise rather than intent. Either remove the in-body token or treat this finding as expected and acknowledged."
-};
-
-// plugins/core/analyzers/self-loop/index.ts
-var ID17 = "self-loop";
-var selfLoopAnalyzer = {
-  id: ID17,
-  pluginId: "core",
-  kind: "analyzer",
-  version: "1.0.0",
-  description: "Flags links whose source is its own resolved target (a body heading like `# /deploy` inside the file that defines `/deploy`). One warn per self-looping link, attached to the source. UI consumers hide self-loops by default; this analyzer is the authoritative detector.",
-  mode: "deterministic",
-  evaluate(ctx) {
-    if (ctx.links.length === 0) return [];
-    const issues = [];
-    for (const link of ctx.links) {
-      if (!isSelfLoop(link)) continue;
-      issues.push({
-        analyzerId: ID17,
-        severity: "warn",
-        nodeIds: [link.source],
-        message: tx(SELF_LOOP_TEXTS.message, {
-          source: link.source,
-          trigger: link.trigger?.originalTrigger ?? link.target,
-          kind: link.kind
-        }),
-        data: {
-          target: link.target,
-          resolvedTarget: link.resolvedTarget ?? link.target,
-          kind: link.kind,
-          // Mark explicitly so UI / downstream consumers can read this
-          // single field instead of re-computing the `source === target`
-          // predicate themselves.
-          selfLoop: true
-        }
-      });
-    }
-    return issues;
-  }
-};
-function isSelfLoop(link) {
-  if (link.source === link.target) return true;
-  if (link.resolvedTarget && link.source === link.resolvedTarget) return true;
-  return false;
-}
-
-// plugins/core/analyzers/signal-collision/text.ts
-var SIGNAL_COLLISION_TEXTS = {
-  /**
-   * Per-Signal warn issue: two extractors detected something at
-   * overlapping byte ranges within the same node and the resolver
-   * dropped the loser. Surfaces WHO lost, WHO won, and the tiebreak
-   * reason so the operator can understand why a candidate edge did NOT
-   * become a Link.
-   *
-   * Placeholders are deliberately verbose because this is one of the
-   * few diagnostic surfaces where the operator may need to disambiguate
-   * a confusing graph (e.g. a `[link](path)` followed by `@path` inside
-   * the same paragraph, the markdown-link wins and the at-directive
-   * silently disappears without this warning).
-   */
-  message: "{{loserExtractor}} detected `{{loserRaw}}` at offset {{loserRange}} but {{winnerExtractor}}'s detection at {{winnerRange}} won the overlap collision ({{reason}}). The graph shows the winning edge only; the loser is not persisted.",
-  /**
-   * Same warn but for the rare case the resolver rejected a Signal
-   * because the operator disabled its extractor via
-   * `plugins.<id>.extensions.<extId>.enabled`. Phase 4+ stub: today the
-   * filter is not wired so this template is unreachable from the
-   * resolver; documented now so the analyzer stays forward-compatible
-   * with the upcoming filter pass.
-   */
-  messageExtractorDisabled: "Extension `{{extractorId}}` is disabled; its detection `{{loserRaw}}` (offset {{loserRange}}) did not produce a Link. Re-enable the extension in Settings or via `sm plugins enable` to surface its edges.",
-  /**
-   * Same warn but for the future confidence floor case. Phase 4+ stub:
-   * today the resolver materialises every winning candidate regardless
-   * of confidence, so this template is unreachable; documented for
-   * forward compatibility.
-   */
-  messageBelowFloor: "Detection `{{loserRaw}}` (offset {{loserRange}}, confidence {{confidence}}) fell below the configured threshold {{threshold}} and was dropped."
-};
-
-// plugins/core/analyzers/signal-collision/index.ts
-var ID18 = "signal-collision";
-var signalCollisionAnalyzer = {
-  id: ID18,
-  pluginId: "core",
-  kind: "analyzer",
-  version: "1.0.0",
-  description: "Surfaces Signal IR resolver rejections (range-overlap losers, disabled extractors, below-floor candidates) as warn issues attached to the Signal's source node.",
-  mode: "deterministic",
-  evaluate(ctx) {
-    const signals = ctx.signals;
-    if (!signals || signals.length === 0) return [];
-    const issues = [];
-    for (const signal of signals) {
-      const issue = makeIssue(signal);
-      if (issue) issues.push(issue);
-    }
-    return issues;
-  }
-};
-function makeIssue(signal) {
-  const resolution = signal.resolution;
-  if (!resolution || resolution.outcome !== "rejected") return null;
-  if (resolution.rejectedBy) {
-    const winner = resolution.rejectedBy;
-    const winnerCandidate = signal.candidates[resolution.winnerIndex ?? 0];
-    const loserRange = signal.range ? `${signal.range.start}-${signal.range.end}` : "unknown";
-    const winnerRange = `${winner.range.start}-${winner.range.end}`;
-    return {
-      analyzerId: ID18,
-      severity: "warn",
-      nodeIds: [signal.source],
-      message: tx(SIGNAL_COLLISION_TEXTS.message, {
-        loserExtractor: winnerCandidate.extractorId,
-        loserRaw: signal.raw,
-        loserRange,
-        winnerExtractor: winner.extractorId,
-        winnerRange,
-        reason: winner.reason
-      }),
-      data: {
-        loser: {
-          extractorId: winnerCandidate.extractorId,
-          raw: signal.raw,
-          range: signal.range ?? null,
-          candidate: {
-            kind: winnerCandidate.kind,
-            target: winnerCandidate.target,
-            confidence: winnerCandidate.confidence
-          }
-        },
-        winner: {
-          extractorId: winner.extractorId,
-          range: winner.range
-        },
-        reason: winner.reason
-      }
-    };
-  }
-  if (resolution.extractorDisabled) {
-    const loserRange = signal.range ? `${signal.range.start}-${signal.range.end}` : "unknown";
-    return {
-      analyzerId: ID18,
-      severity: "warn",
-      nodeIds: [signal.source],
-      message: tx(SIGNAL_COLLISION_TEXTS.messageExtractorDisabled, {
-        extractorId: resolution.extractorDisabled.extractorId,
-        loserRaw: signal.raw,
-        loserRange
-      }),
-      data: {
-        extractorDisabled: resolution.extractorDisabled,
-        raw: signal.raw,
-        range: signal.range ?? null
-      }
-    };
-  }
-  if (resolution.belowFloor) {
-    const loserRange = signal.range ? `${signal.range.start}-${signal.range.end}` : "unknown";
-    const topCandidate = signal.candidates[0];
-    return {
-      analyzerId: ID18,
-      severity: "warn",
-      nodeIds: [signal.source],
-      message: tx(SIGNAL_COLLISION_TEXTS.messageBelowFloor, {
-        loserRaw: signal.raw,
-        loserRange,
-        confidence: topCandidate.confidence,
-        threshold: resolution.belowFloor.threshold
-      }),
-      data: {
-        belowFloor: resolution.belowFloor,
-        raw: signal.raw,
-        range: signal.range ?? null
-      }
-    };
-  }
-  return null;
-}
-
-// plugins/core/analyzers/stability/index.ts
-var ID19 = "stability";
+// plugins/core/analyzers/node-stability/index.ts
+var ID17 = "node-stability";
 var EXPERIMENTAL_TOOLTIP = "Experimental: API may change";
 var DEPRECATED_TOOLTIP = "Deprecated: avoid in new code";
-var stabilityAnalyzer = {
-  id: ID19,
-  pluginId: "core",
+var nodeStabilityAnalyzer = {
+  id: ID17,
+  pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   version: "1.0.0",
-  description: "Reports node lifecycle stage (`experimental`, `deprecated`) on the card.",
+  description: "Reports a node's stability stage (`experimental`, `deprecated`) on the card.",
   mode: "deterministic",
   ui: {
     experimental: {
@@ -2607,7 +2353,7 @@ var stabilityAnalyzer = {
           tooltip: EXPERIMENTAL_TOOLTIP
         });
         issues.push({
-          analyzerId: ID19,
+          analyzerId: ID17,
           severity: "info",
           nodeIds: [node.path],
           message: `Node '${node.path}' is marked experimental: API may change.`,
@@ -2620,7 +2366,7 @@ var stabilityAnalyzer = {
           severity: "warn"
         });
         issues.push({
-          analyzerId: ID19,
+          analyzerId: ID17,
           severity: "warn",
           nodeIds: [node.path],
           message: `Node '${node.path}' is marked deprecated: avoid in new code.`,
@@ -2647,20 +2393,20 @@ function isStability(value) {
   return value === "experimental" || value === "deprecated" || value === "stable";
 }
 
-// plugins/core/analyzers/superseded/text.ts
-var SUPERSEDED_TEXTS = {
+// plugins/core/analyzers/node-superseded/text.ts
+var NODE_SUPERSEDED_TEXTS = {
   /** `<path> is superseded by <supersededBy>` */
   message: "{{path}} is superseded by {{supersededBy}}"
 };
 
-// plugins/core/analyzers/superseded/index.ts
-var ID20 = "superseded";
-var supersededAnalyzer = {
-  id: ID20,
-  pluginId: "core",
+// plugins/core/analyzers/node-superseded/index.ts
+var ID18 = "node-superseded";
+var nodeSupersededAnalyzer = {
+  id: ID18,
+  pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   version: "1.0.0",
-  description: "Detects and marks nodes replaced by a newer one via `supersededBy`.",
+  description: "Marks nodes replaced by a newer one via `supersededBy`.",
   mode: "deterministic",
   evaluate(ctx) {
     const issues = [];
@@ -2668,10 +2414,10 @@ var supersededAnalyzer = {
       const supersededBy = pickSupersededBy(node);
       if (supersededBy === null) continue;
       issues.push({
-        analyzerId: ID20,
+        analyzerId: ID18,
         severity: "info",
         nodeIds: [node.path],
-        message: tx(SUPERSEDED_TEXTS.message, {
+        message: tx(NODE_SUPERSEDED_TEXTS.message, {
           path: node.path,
           supersededBy
         }),
@@ -2691,351 +2437,334 @@ function pickSupersededBy(node) {
   return value;
 }
 
-// plugins/core/analyzers/trigger-collision/text.ts
-var TRIGGER_COLLISION_TEXTS = {
-  /**
-   * Top-level message when `analyzeTriggerBucket` accumulated exactly one
-   * cause part. Used for the advertiser-ambiguous-only, invocation-
-   * ambiguous-only, and cross-kind-only branches.
-   */
-  messageOnePart: 'Trigger "{{normalized}}" has {{part}}.',
-  /**
-   * Top-level message when `analyzeTriggerBucket` accumulated two cause
-   * parts (advertiser-ambiguous AND invocation-ambiguous fire together).
-   * The joiner lives inside the template so future locales can adapt it
-   * (e.g. `'; y '` in Spanish) without touching the rule code.
-   */
-  messageTwoParts: 'Trigger "{{normalized}}" has {{first}}; and {{second}}.',
-  /** `<n> nodes advertise it: <list>` part, fires on the advertiser-ambiguous branch. */
-  partAdvertisers: "{{count}} nodes advertise it: {{paths}}",
-  /** `<n> distinct invocation forms: <list>` part, fires on the invocation-ambiguous branch. */
-  partInvocations: "{{count}} distinct invocation forms: {{forms}}",
-  /** Singular cross-kind cause: `non-canonical invocation <form> against advertiser <path>`. */
-  partNonCanonicalSingular: "non-canonical invocation {{forms}} against advertiser {{advertiser}}",
-  /** Plural cross-kind cause: `non-canonical invocations <forms> against advertiser <path>`. */
-  partNonCanonicalPlural: "non-canonical invocations {{forms}} against advertiser {{advertiser}}"
-};
-
-// plugins/core/analyzers/trigger-collision/index.ts
-var ID21 = "trigger-collision";
-var ADVERTISING_KINDS = /* @__PURE__ */ new Set([
-  "command",
-  "skill",
-  "agent"
-]);
-var triggerCollisionAnalyzer = {
-  id: ID21,
-  pluginId: "core",
-  kind: "analyzer",
-  mode: "deterministic",
-  version: "1.0.0",
-  description: "Detects and flags two or more nodes claiming the same `/command` or `@agent` name.",
-  // Two claim-collection passes (advertisement + invocation) feeding
-  // the bucket map. Per-bucket analysis lives in `analyzeTriggerBucket`.
-  // eslint-disable-next-line complexity
-  evaluate(ctx) {
-    const buckets = /* @__PURE__ */ new Map();
-    const push = (key, claim) => {
-      const bucket = buckets.get(key) ?? [];
-      bucket.push(claim);
-      buckets.set(key, bucket);
-    };
-    for (const node of ctx.nodes) {
-      if (!ADVERTISING_KINDS.has(node.kind)) continue;
-      const raw = node.frontmatter?.["name"];
-      if (typeof raw !== "string" || raw.length === 0) continue;
-      const normalized = `/${normalizeTrigger(raw)}`;
-      if (normalized === "/") continue;
-      push(normalized, {
-        kind: "advertiser",
-        token: node.path,
-        nodeId: node.path,
-        canonicalForm: `/${raw}`
-      });
-    }
-    for (const link of ctx.links) {
-      const normalized = link.trigger?.normalizedTrigger;
-      if (!normalized) continue;
-      push(normalized, {
-        kind: "invocation",
-        token: link.target,
-        nodeId: link.source
-      });
-    }
-    const issues = [];
-    for (const [normalized, claims] of buckets) {
-      const issue = analyzeTriggerBucket(normalized, claims);
-      if (issue) issues.push(issue);
-    }
-    return issues;
-  }
-};
-function analyzeTriggerBucket(normalized, claims) {
-  const advertiserPaths = [
-    ...new Set(claims.filter((c) => c.kind === "advertiser").map((c) => c.token))
-  ].sort();
-  const invocationTargets = [
-    ...new Set(claims.filter((c) => c.kind === "invocation").map((c) => c.token))
-  ].sort();
-  const advertisers = claims.filter(
-    (c) => c.kind === "advertiser"
-  );
-  const advertiserAmbiguous = advertiserPaths.length >= 2;
-  const invocationAmbiguous = invocationTargets.length >= 2;
-  const canonicalForms = new Set(advertisers.map((a) => a.canonicalForm));
-  const nonCanonicalInvocations = invocationTargets.filter((t) => !canonicalForms.has(t));
-  const crossKindAmbiguous = advertiserPaths.length === 1 && nonCanonicalInvocations.length >= 1;
-  if (!advertiserAmbiguous && !invocationAmbiguous && !crossKindAmbiguous) {
-    return null;
-  }
-  const nodeIds = [...new Set(claims.map((c) => c.nodeId))].sort();
-  const parts = [];
-  if (advertiserAmbiguous) {
-    parts.push(
-      tx(TRIGGER_COLLISION_TEXTS.partAdvertisers, {
-        count: advertiserPaths.length,
-        paths: advertiserPaths.join(", ")
-      })
-    );
-  }
-  if (invocationAmbiguous) {
-    parts.push(
-      tx(TRIGGER_COLLISION_TEXTS.partInvocations, {
-        count: invocationTargets.length,
-        forms: invocationTargets.join(", ")
-      })
-    );
-  } else if (crossKindAmbiguous) {
-    const template = nonCanonicalInvocations.length > 1 ? TRIGGER_COLLISION_TEXTS.partNonCanonicalPlural : TRIGGER_COLLISION_TEXTS.partNonCanonicalSingular;
-    parts.push(
-      tx(template, {
-        forms: nonCanonicalInvocations.join(", "),
-        advertiser: advertiserPaths[0]
-      })
-    );
-  }
-  const message = parts.length === 2 ? tx(TRIGGER_COLLISION_TEXTS.messageTwoParts, {
-    normalized,
-    first: parts[0],
-    second: parts[1]
-  }) : tx(TRIGGER_COLLISION_TEXTS.messageOnePart, {
-    normalized,
-    part: parts[0]
-  });
-  return {
-    analyzerId: ID21,
-    severity: "error",
-    nodeIds,
-    message,
-    data: {
-      normalizedTrigger: normalized,
-      invocationTargets,
-      advertiserPaths
-    }
-  };
-}
-
-// plugins/core/analyzers/unknown-field/index.ts
-import { readFileSync } from "fs";
-import { dirname, resolve as resolve3 } from "path";
-import { createRequire } from "module";
-import { Ajv2020 } from "ajv/dist/2020.js";
-
-// kernel/util/ajv-interop.ts
-import addFormatsModule from "ajv-formats";
-var addFormats = addFormatsModule.default ?? addFormatsModule;
-function applyAjvFormats(ajv) {
-  addFormats(ajv);
-}
+// plugins/core/analyzers/reference-broken/index.ts
+import { posix as pathPosix4, resolve as resolve3 } from "path";
 
-// plugins/core/analyzers/unknown-field/text.ts
-var UNKNOWN_FIELD_TEXTS = {
-  /** Key inside `annotations:` is not in the curated catalog. */
-  unknownAnnotationKey: "{{path}}: sidecar annotations contain unknown key '{{key}}' (not in annotations.schema.json catalog).",
-  /** Top-level key is neither reserved, nor a registered plugin namespace, nor a registered root key. */
-  unknownRootKey: "{{path}}: sidecar declares unknown top-level key '{{key}}'; not a reserved block, not a registered plugin namespace, not a registered root contribution.",
-  /** Value under a registered plugin namespace fails the contributed schema. */
-  pluginNamespaceInvalid: "{{path}}: sidecar block '{{pluginId}}.{{key}}' fails the schema contributed by plugin '{{pluginId}}': {{errors}}.",
+// plugins/core/analyzers/reference-broken/text.ts
+var REFERENCE_BROKEN_TEXTS = {
+  /** `Broken <kind> reference from <source> → <target>` */
+  message: "Broken {{kind}} reference from {{source}} \u2192 {{target}}",
   // Tooltips for the per-node view-contribution badges. Singular vs
   // plural keeps the count grammar correct without a sub-template.
-  alertTooltipSingle: "This node has 1 unknown field in its sidecar. Open the inspector for details.",
-  alertTooltipMany: "This node has {{count}} unknown fields in its sidecar. Open the inspector for details."
+  alertTooltipSingle: "This node has a broken reference. Open the inspector for details.",
+  alertTooltipMany: "This node has {{count}} broken references. Open the inspector for details.",
+  // Fix-summary copy when the broken trigger has a same-named file on
+  // disk that does not advertise `name:` in its frontmatter. Two
+  // variants for single vs multiple candidates; same template family
+  // as the alert tooltips above.
+  hintSummarySingle: "Add `name: {{name}}` to the frontmatter of {{candidate}} so this reference resolves.",
+  hintSummaryMany: "Add `name: {{name}}` to the frontmatter of one of these files so this reference resolves: {{candidates}}."
 };
 
-// plugins/core/analyzers/unknown-field/index.ts
-var ID22 = "unknown-field";
-var RESERVED_ROOT_BLOCKS = /* @__PURE__ */ new Set(["identity", "annotations", "settings", "audit"]);
-var unknownFieldAnalyzer = {
-  id: ID22,
-  pluginId: "core",
+// plugins/core/analyzers/reference-broken/index.ts
+var ID19 = "reference-broken";
+var referenceBrokenAnalyzer = {
+  id: ID19,
+  pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   version: "1.0.0",
-  description: "Detects and flags typos or unrecognized keys in sidecars (`.sm`).",
+  description: "Flags arrows pointing at a node not part of the current scan.",
   mode: "deterministic",
   ui: {
     // Corner badge on the graph card; count omitted when there is a
-    // single unknown field (avoids a noisy "icon + 1" chip).
+    // single broken ref (avoids a noisy "icon + 1" chip).
     alert: {
       slot: "graph.node.alert",
-      // Filled warning triangle on the corner, matches the broken-ref
-      // alert's "attention-grabbing solid" pattern; the footer chip
-      // below stays outlined for the quieter counter pairing.
-      icon: "fa-solid fa-triangle-exclamation",
+      icon: "fa-solid fa-circle-xmark",
       emitWhenEmpty: false
     },
-    // Footer chip on the card, `_counter` shape but rendered icon-only
-    // (the analyzer emits `value: 0` so NodeCounter hides the number
-    // and only the glyph shows). PrimeIcons `pi-question-circle` so the
-    // visual weight matches `annotation-stale`'s `pi-clock` chip
-    // sitting next to it on the same footer row. `emitWhenEmpty: true`
-    // is required: with `value: 0` the slot treats the payload as
-    // empty, so the manifest has to opt in to keep the emission.
+    // Footer chip on the card. `_counter` shape, `value` always shows,
+    // so the operator sees "how many" at a glance. Renders OUTLINED
+    // (`fa-regular`) so the corner alert (filled, attention-grabbing)
+    // and the footer chip (quieter, paired with a number) read as two
+    // beats of the same signal rather than two identical glyphs.
     chip: {
       slot: "card.footer.right",
-      icon: "pi-question-circle",
-      emitWhenEmpty: true,
-      priority: 30
+      icon: "fa-regular fa-circle-xmark",
+      emitWhenEmpty: false,
+      priority: 40
     }
   },
-  // Analyzer body iterates every sidecar root and classifies each
-  // key against three buckets (catalog / plugin namespace / unknown
-  // root). The per-key branching IS the classification table; factoring
-  // it out would rebuild the discriminator elsewhere. Per
-  // `context/lint.md` category 7 (recursive type-discriminator walkers).
+  // The resolver, the reference-paths escape hatch, the per-source
+  // aggregation, and the dual-slot emit (with single/plural tooltip and
+  // optional count) all live in one flow because they share the per-link
+  // loop. Splitting them would re-walk `ctx.links` three times.
   // eslint-disable-next-line complexity
   evaluate(ctx) {
-    const sidecarRoots = ctx.sidecarRoots;
-    if (!sidecarRoots || sidecarRoots.size === 0) return [];
-    const knownAnnotationKeys = getKnownAnnotationKeys();
-    const contributions = ctx.annotationContributions ?? [];
-    const namespacedByPlugin = indexNamespacedContributions(contributions);
-    const rootKeys = indexRootContributions(contributions);
-    const knownPluginIds = collectPluginIds(contributions);
+    const byPath3 = new Set(ctx.nodes.map((n) => n.path));
+    const byNormalizedName = indexByNormalizedName(ctx.nodes);
+    const byBasenameWithoutName = indexByBasenameWithoutName(ctx.nodes);
+    const refIndex = ctx.referenceablePaths && ctx.referenceablePaths.size > 0 && ctx.cwd ? { paths: ctx.referenceablePaths, cwd: ctx.cwd } : null;
     const issues = [];
     const perNode = /* @__PURE__ */ new Map();
-    const bump2 = (nodePath) => {
-      perNode.set(nodePath, (perNode.get(nodePath) ?? 0) + 1);
+    for (const link of ctx.links) {
+      if (isResolved(link, byPath3, byNormalizedName)) continue;
+      if (refIndex && resolvesViaReferencePaths(link, refIndex)) continue;
+      const candidates = findHintCandidates(link, byBasenameWithoutName);
+      issues.push(buildIssue(link, candidates));
+      perNode.set(link.source, (perNode.get(link.source) ?? 0) + 1);
+    }
+    for (const [nodePath, count] of perNode) {
+      const tooltip = count === 1 ? REFERENCE_BROKEN_TEXTS.alertTooltipSingle : tx(REFERENCE_BROKEN_TEXTS.alertTooltipMany, { count });
+      const capped = Math.min(count, 99);
+      ctx.emitContribution(nodePath, "alert", {
+        icon: "fa-solid fa-circle-xmark",
+        severity: "danger",
+        tooltip
+      });
+      ctx.emitContribution(nodePath, "chip", {
+        value: capped,
+        severity: "danger",
+        tooltip
+      });
+    }
+    return issues;
+  }
+};
+function buildIssue(link, hintCandidates = []) {
+  const data = {
+    target: link.target,
+    kind: link.kind,
+    trigger: link.trigger?.normalizedTrigger ?? null
+  };
+  const issue = {
+    analyzerId: ID19,
+    severity: "warn",
+    nodeIds: [link.source],
+    message: tx(REFERENCE_BROKEN_TEXTS.message, {
+      kind: link.kind,
+      source: link.source,
+      target: link.target
+    }),
+    data
+  };
+  if (hintCandidates.length > 0) {
+    const suggestedName = (link.trigger?.normalizedTrigger ?? "").replace(/^[/@]/, "").trim();
+    const candidatePaths = hintCandidates.map((n) => n.path);
+    data["hint"] = {
+      kind: "missing-frontmatter-name",
+      suggestedName,
+      candidates: candidatePaths
     };
-    for (const node of ctx.nodes) {
-      const root = sidecarRoots.get(node.path);
-      if (!root) continue;
-      const annotations = root["annotations"];
-      if (annotations !== void 0 && annotations !== null && typeof annotations === "object" && !Array.isArray(annotations)) {
-        for (const key of Object.keys(annotations)) {
-          if (!knownAnnotationKeys.has(key)) {
-            issues.push({
-              analyzerId: ID22,
-              severity: "warn",
-              nodeIds: [node.path],
-              message: tx(UNKNOWN_FIELD_TEXTS.unknownAnnotationKey, {
-                path: node.path,
-                key
-              }),
-              data: { surface: "annotations", key }
-            });
-            bump2(node.path);
-          }
-        }
-      }
-      for (const key of Object.keys(root)) {
-        if (RESERVED_ROOT_BLOCKS.has(key)) continue;
-        if (rootKeys.has(key)) continue;
-        if (knownPluginIds.has(key)) {
-          const block = root[key];
-          if (block === null || typeof block !== "object" || Array.isArray(block)) continue;
-          const contribsForPlugin = namespacedByPlugin.get(key);
-          if (!contribsForPlugin) continue;
-          for (const [contribKey, validator] of contribsForPlugin) {
-            const value = block[contribKey];
-            if (value === void 0) continue;
-            if (validator(value)) continue;
-            const errors = (validator.errors ?? []).map((e) => `${e.instancePath || "(root)"} ${e.message ?? e.keyword}`).join("; ");
-            issues.push({
-              analyzerId: ID22,
-              severity: "warn",
-              nodeIds: [node.path],
-              message: tx(UNKNOWN_FIELD_TEXTS.pluginNamespaceInvalid, {
-                path: node.path,
-                pluginId: key,
-                key: contribKey,
-                errors
-              }),
-              data: { surface: "plugin-namespace", pluginId: key, key: contribKey }
-            });
-            bump2(node.path);
-          }
-          continue;
-        }
-        issues.push({
-          analyzerId: ID22,
-          severity: "warn",
-          nodeIds: [node.path],
-          message: tx(UNKNOWN_FIELD_TEXTS.unknownRootKey, {
-            path: node.path,
-            key
-          }),
-          data: { surface: "root", key }
-        });
-        bump2(node.path);
-      }
+    issue.fix = {
+      summary: candidatePaths.length === 1 ? tx(REFERENCE_BROKEN_TEXTS.hintSummarySingle, {
+        name: suggestedName,
+        candidate: candidatePaths[0]
+      }) : tx(REFERENCE_BROKEN_TEXTS.hintSummaryMany, {
+        name: suggestedName,
+        candidates: candidatePaths.join(", ")
+      }),
+      autofixable: false
+    };
+  }
+  return issue;
+}
+function resolvesViaReferencePaths(link, refIndex) {
+  if (!isPathStyleLink(link)) return false;
+  return refIndex.paths.has(resolve3(refIndex.cwd, link.target));
+}
+function indexByNormalizedName(nodes) {
+  const out = /* @__PURE__ */ new Map();
+  for (const node of nodes) {
+    const raw = node.frontmatter?.["name"];
+    const name = typeof raw === "string" ? raw : "";
+    if (!name) continue;
+    const key = normalizeTrigger(name);
+    const bucket = out.get(key) ?? [];
+    bucket.push(node);
+    out.set(key, bucket);
+  }
+  return out;
+}
+function basenameWithoutExt(path) {
+  const base = pathPosix4.basename(path);
+  const ext = pathPosix4.extname(base);
+  return ext ? base.slice(0, -ext.length) : base;
+}
+function indexByBasenameWithoutName(nodes) {
+  const out = /* @__PURE__ */ new Map();
+  for (const node of nodes) {
+    const raw = node.frontmatter?.["name"];
+    const name = typeof raw === "string" ? raw : "";
+    if (name) continue;
+    const bare = basenameWithoutExt(node.path);
+    if (!bare) continue;
+    const key = normalizeTrigger(bare);
+    if (!key) continue;
+    const bucket = out.get(key) ?? [];
+    bucket.push(node);
+    out.set(key, bucket);
+  }
+  return out;
+}
+function findHintCandidates(link, idx) {
+  const normalized = link.trigger?.normalizedTrigger;
+  if (!normalized) return [];
+  const sigil = normalized.charAt(0);
+  if (sigil !== "/" && sigil !== "@") return [];
+  const withoutSigil = normalized.slice(1).trim();
+  if (!withoutSigil) return [];
+  return idx.get(withoutSigil) ?? [];
+}
+function isResolved(link, byPath3, byNormalizedName) {
+  const normalized = link.trigger?.normalizedTrigger;
+  if (normalized) {
+    const withoutSigil = normalized.replace(/^[/@]/, "").trim();
+    if (byNormalizedName.has(withoutSigil)) return true;
+  }
+  if (byPath3.has(link.target)) return true;
+  return false;
+}
+function isPathStyleLink(link) {
+  const sigil = link.trigger?.normalizedTrigger?.charAt(0);
+  if (sigil === "/" || sigil === "@") return false;
+  return true;
+}
+
+// plugins/core/analyzers/reference-redundant/text.ts
+var REFERENCE_REDUNDANT_TEXTS = {
+  /**
+   * Multi-form / multi-occurrence reference message. Lists each
+   * occurrence (trigger + line) so the operator sees the full
+   * authorial surface without having to grep the body.
+   */
+  message: "{{source}} references {{resolvedTarget}} via {{count}} occurrences: {{occurrences}}. Consider consolidating to a single form to reduce maintenance surface and avoid duplicate inlining at runtime.",
+  /** Inline separator between occurrences in the message. */
+  occurrenceSeparator: ", ",
+  /** Per-occurrence formatting (trigger + line). */
+  occurrence: "`{{trigger}}` ({{kind}}, line {{line}})",
+  /** Per-occurrence formatting when the extractor did not record a line. */
+  occurrenceUnknownLine: "`{{trigger}}` ({{kind}}, unknown line)"
+};
+
+// plugins/core/analyzers/reference-redundant/index.ts
+var ID20 = "reference-redundant";
+var referenceRedundantAnalyzer = {
+  id: ID20,
+  pluginId: CORE_PLUGIN_ID,
+  kind: "analyzer",
+  version: "1.0.0",
+  description: "Flags when one node references the same target through two or more different links (e.g. a markdown link plus a `references:` entry).",
+  mode: "deterministic",
+  evaluate(ctx) {
+    if (ctx.links.length === 0) return [];
+    const byPath3 = /* @__PURE__ */ new Map();
+    for (const node of ctx.nodes) byPath3.set(node.path, node);
+    const byName = buildNameIndex2(ctx.nodes);
+    const groups = /* @__PURE__ */ new Map();
+    for (const link of ctx.links) {
+      const resolved = resolveTargetPath(link, byPath3, byName);
+      if (!resolved) continue;
+      const key = `${link.source}\0${resolved}`;
+      const bucket = groups.get(key);
+      if (bucket) bucket.push(link);
+      else groups.set(key, [link]);
     }
-    for (const [nodePath, count] of perNode) {
-      const tooltip = count === 1 ? UNKNOWN_FIELD_TEXTS.alertTooltipSingle : tx(UNKNOWN_FIELD_TEXTS.alertTooltipMany, { count });
-      ctx.emitContribution(nodePath, "alert", {
-        icon: "fa-solid fa-triangle-exclamation",
-        severity: "warn",
-        tooltip
-      });
-      ctx.emitContribution(nodePath, "chip", {
-        value: 0,
+    const issues = [];
+    for (const [key, links] of groups) {
+      const totalOccurrences = links.reduce((acc, l) => acc + (l.occurrences?.length ?? 1), 0);
+      if (totalOccurrences < 2) continue;
+      const [source, resolvedTarget] = key.split("\0");
+      const flat = flattenOccurrences(links);
+      issues.push({
+        analyzerId: ID20,
         severity: "warn",
-        tooltip
+        nodeIds: [source],
+        message: tx(REFERENCE_REDUNDANT_TEXTS.message, {
+          source,
+          resolvedTarget,
+          count: flat.length,
+          occurrences: flat.map(formatOccurrence).join(REFERENCE_REDUNDANT_TEXTS.occurrenceSeparator)
+        }),
+        data: {
+          target: resolvedTarget,
+          resolvedTarget,
+          occurrences: flat.map((o) => ({
+            kind: o.kind,
+            trigger: o.originalTrigger,
+            line: o.line ?? null,
+            extractor: o.extractor
+          }))
+        }
       });
     }
     return issues;
   }
 };
-var cachedKnownKeys = null;
-function getKnownAnnotationKeys() {
-  if (cachedKnownKeys) return cachedKnownKeys;
-  const require2 = createRequire(import.meta.url);
-  const indexPath = require2.resolve("@skill-map/spec/index.json");
-  const specRoot = dirname(indexPath);
-  const schema = JSON.parse(
-    readFileSync(resolve3(specRoot, "schemas/annotations.schema.json"), "utf8")
-  );
-  cachedKnownKeys = new Set(Object.keys(schema.properties ?? {}));
-  return cachedKnownKeys;
+function flattenOccurrences(links) {
+  const out = [];
+  for (const link of links) {
+    if (link.occurrences && link.occurrences.length > 0) {
+      for (const occ of link.occurrences) {
+        out.push({
+          kind: link.kind,
+          originalTrigger: occ.originalTrigger,
+          extractor: occ.extractor,
+          line: occ.location?.line ?? null
+        });
+      }
+      continue;
+    }
+    const trigger = link.trigger?.originalTrigger ?? link.target;
+    out.push({
+      kind: link.kind,
+      originalTrigger: trigger,
+      extractor: link.sources[0] ?? "unknown",
+      line: link.location?.line ?? null
+    });
+  }
+  out.sort((a, b) => {
+    const la = a.line ?? Number.MAX_SAFE_INTEGER;
+    const lb = b.line ?? Number.MAX_SAFE_INTEGER;
+    if (la !== lb) return la - lb;
+    return a.originalTrigger.localeCompare(b.originalTrigger);
+  });
+  return out;
 }
-function indexNamespacedContributions(contributions) {
+function formatOccurrence(occ) {
+  if (occ.line === null) {
+    return tx(REFERENCE_REDUNDANT_TEXTS.occurrenceUnknownLine, { trigger: occ.originalTrigger, kind: occ.kind });
+  }
+  return tx(REFERENCE_REDUNDANT_TEXTS.occurrence, { trigger: occ.originalTrigger, kind: occ.kind, line: occ.line });
+}
+function buildNameIndex2(nodes) {
   const out = /* @__PURE__ */ new Map();
-  const ajv = new Ajv2020({ strict: false, allErrors: true, allowUnionTypes: true });
-  applyAjvFormats(ajv);
-  for (const entry of contributions) {
-    if (entry.location !== "namespaced") continue;
-    let bucket = out.get(entry.pluginId);
-    if (!bucket) {
-      bucket = /* @__PURE__ */ new Map();
-      out.set(entry.pluginId, bucket);
-    }
-    try {
-      bucket.set(entry.key, ajv.compile(entry.schema));
-    } catch {
+  for (const node of nodes) {
+    for (const candidate of collectIdentifiers(node)) {
+      const normalised = normalizeTrigger(candidate);
+      if (!normalised) continue;
+      const bucket = out.get(normalised);
+      if (bucket) bucket.push(node.path);
+      else out.set(normalised, [node.path]);
     }
   }
   return out;
 }
-function indexRootContributions(contributions) {
-  const out = /* @__PURE__ */ new Set();
-  for (const entry of contributions) {
-    if (entry.location === "root") out.add(entry.key);
+function collectIdentifiers(node) {
+  const out = [];
+  const fmName = node.frontmatter?.["name"];
+  if (typeof fmName === "string" && fmName.length > 0) out.push(fmName);
+  const segs = node.path.split("/");
+  const last = segs[segs.length - 1] ?? "";
+  if (last) {
+    const stem = last.replace(/\.[^.]+$/, "");
+    if (stem) out.push(stem);
+  }
+  if (segs.length >= 2) {
+    const dirBase = segs[segs.length - 2];
+    if (dirBase) out.push(dirBase);
   }
   return out;
 }
-function collectPluginIds(contributions) {
-  const out = /* @__PURE__ */ new Set();
-  for (const entry of contributions) out.add(entry.pluginId);
-  return out;
+function resolveTargetPath(link, byPath3, byName) {
+  if (byPath3.has(link.target)) return link.target;
+  const trigger = link.trigger?.normalizedTrigger;
+  if (!trigger) return null;
+  const stripped = trigger.replace(/^[/@]/, "").trim();
+  if (!stripped) return null;
+  const candidates = byName.get(stripped);
+  if (!candidates || candidates.length === 0) return null;
+  return candidates[0] ?? null;
 }
 
 // kernel/adapters/schema-validators.ts
@@ -3224,185 +2953,463 @@ function registerProviderAuxiliarySchemas(ajv, providers) {
       ajv.addSchema(aux);
     }
   }
-}
-function resolveSpecRoot() {
-  const require2 = createRequire2(import.meta.url);
-  try {
-    const indexPath = require2.resolve("@skill-map/spec/index.json");
-    return dirname2(indexPath);
-  } catch {
-    throw new Error(
-      "@skill-map/spec not resolvable: ensure the workspace is linked or the package is installed."
-    );
+}
+function resolveSpecRoot() {
+  const require2 = createRequire2(import.meta.url);
+  try {
+    const indexPath = require2.resolve("@skill-map/spec/index.json");
+    return dirname2(indexPath);
+  } catch {
+    throw new Error(
+      "@skill-map/spec not resolvable: ensure the workspace is linked or the package is installed."
+    );
+  }
+}
+function existsSyncSafe(path) {
+  try {
+    readFileSync2(path, "utf8");
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// plugins/core/analyzers/schema-violation/text.ts
+var SCHEMA_VIOLATION_TEXTS = {
+  /** `Node <path> failed schema validation: <errors>` */
+  nodeFailure: "Node {{path}} failed schema validation: {{errors}}",
+  /** `Link <source> → <target> failed schema validation: <errors>` */
+  linkFailure: "Link {{source}} \u2192 {{target}} failed schema validation: {{errors}}",
+  /** `Node <path> is missing required frontmatter fields: <missing>` */
+  frontmatterBaseFailure: "Node {{path}} is missing required frontmatter fields: {{missing}}.",
+  /** Singular tooltip on the alert / chip when a node has exactly one validation failure. */
+  alertTooltipSingle: "Frontmatter or schema validation failed.",
+  /** Plural tooltip; `{{count}}` capped at 99 in the chip badge but the tooltip text shows the raw count. */
+  alertTooltipMany: "{{count}} schema validation issues on this node."
+};
+
+// plugins/core/analyzers/schema-violation/index.ts
+var ID21 = "schema-violation";
+var schemaViolationAnalyzer = {
+  id: ID21,
+  pluginId: CORE_PLUGIN_ID,
+  kind: "analyzer",
+  version: "1.0.0",
+  description: "Flags nodes or links that violate the project schemas.",
+  mode: "deterministic",
+  ui: {
+    // Corner badge on the graph card; surfaces when the node body /
+    // frontmatter fails schema validation (parse error, missing
+    // `name`/`description`, malformed YAML, etc.). Same visual
+    // chassis as `core/reference-broken`, danger severity.
+    alert: {
+      slot: "graph.node.alert",
+      icon: "fa-solid fa-triangle-exclamation",
+      emitWhenEmpty: false
+    },
+    // Footer chip that mirrors the corner alert with the actual
+    // count so the operator can scan the cards and prioritise.
+    // Outlined (vs the filled corner alert) per the broken-ref
+    // pattern: two beats of the same signal.
+    chip: {
+      slot: "card.footer.right",
+      icon: "fa-regular fa-triangle-exclamation",
+      emitWhenEmpty: false,
+      priority: 35
+    }
+  },
+  evaluate(ctx) {
+    const validators = loadSchemaValidators();
+    const findings = [];
+    const perNode = /* @__PURE__ */ new Map();
+    for (const node of ctx.nodes) {
+      const before = findings.length;
+      collectNodeFindings(validators, node, findings);
+      collectFrontmatterBaseFindings(node, findings);
+      if (findings.length > before) {
+        perNode.set(node.path, (perNode.get(node.path) ?? 0) + (findings.length - before));
+      }
+    }
+    for (const link of ctx.links) {
+      collectLinkFindings(validators, link, findings);
+    }
+    for (const [nodePath, count] of perNode) {
+      const tooltip = count === 1 ? SCHEMA_VIOLATION_TEXTS.alertTooltipSingle : tx(SCHEMA_VIOLATION_TEXTS.alertTooltipMany, { count });
+      const capped = Math.min(count, 99);
+      ctx.emitContribution(nodePath, "alert", {
+        icon: "fa-solid fa-triangle-exclamation",
+        severity: "danger",
+        tooltip
+      });
+      ctx.emitContribution(nodePath, "chip", {
+        value: capped,
+        severity: "danger",
+        tooltip
+      });
+    }
+    return findings;
+  }
+};
+function collectNodeFindings(v, node, out) {
+  const result = v.validate("node", toNodeForSchema(node));
+  if (result.ok) return;
+  out.push({
+    analyzerId: ID21,
+    severity: "error",
+    nodeIds: [node.path],
+    message: tx(SCHEMA_VIOLATION_TEXTS.nodeFailure, {
+      path: node.path,
+      errors: result.errors
+    }),
+    data: { target: "node", path: node.path }
+  });
+}
+function collectFrontmatterBaseFindings(node, out) {
+  if (node.provider === "markdown") return;
+  if (node.bytes.frontmatter === 0) return;
+  const fm = node.frontmatter ?? {};
+  const missing = [];
+  if (isMissingStringField(fm, "name")) missing.push("name");
+  if (isMissingStringField(fm, "description")) missing.push("description");
+  if (missing.length === 0) return;
+  out.push({
+    analyzerId: ID21,
+    // `warn` (not `error`) so the default `sm scan` exit code stays
+    // 0 even when nodes are missing frontmatter base fields. Strict
+    // mode (`sm scan --strict`) still escalates to exit 1. Matches
+    // the `frontmatter-invalid` severity policy of the orchestrator.
+    severity: "warn",
+    nodeIds: [node.path],
+    message: tx(SCHEMA_VIOLATION_TEXTS.frontmatterBaseFailure, {
+      path: node.path,
+      missing: missing.join(", ")
+    }),
+    data: { target: "frontmatter", path: node.path, missing }
+  });
+}
+function isMissingStringField(fm, field) {
+  const v = fm[field];
+  return typeof v !== "string" || v.length === 0;
+}
+function collectLinkFindings(v, link, out) {
+  const result = v.validate("link", toLinkForSchema(link));
+  if (result.ok) return;
+  out.push({
+    analyzerId: ID21,
+    severity: "error",
+    nodeIds: [link.source],
+    message: tx(SCHEMA_VIOLATION_TEXTS.linkFailure, {
+      source: link.source,
+      target: link.target,
+      errors: result.errors
+    }),
+    data: { target: "link", source: link.source, to: link.target }
+  });
+}
+function toNodeForSchema(node) {
+  return {
+    path: node.path,
+    kind: node.kind,
+    provider: node.provider,
+    bodyHash: node.bodyHash,
+    frontmatterHash: node.frontmatterHash,
+    bytes: node.bytes,
+    tokens: node.tokens ?? void 0,
+    linksOutCount: node.linksOutCount,
+    linksInCount: node.linksInCount,
+    externalRefsCount: node.externalRefsCount,
+    frontmatter: node.frontmatter ?? {},
+    sidecar: node.sidecar ?? void 0
+  };
+}
+function toLinkForSchema(link) {
+  return {
+    source: link.source,
+    target: link.target,
+    kind: link.kind,
+    confidence: link.confidence,
+    sources: link.sources,
+    trigger: link.trigger ?? void 0,
+    location: link.location ?? void 0,
+    raw: link.raw ?? void 0
+  };
+}
+
+// plugins/core/analyzers/signal-collision/text.ts
+var SIGNAL_COLLISION_TEXTS = {
+  /**
+   * Per-Signal warn issue: two extractors detected something at
+   * overlapping byte ranges within the same node and the resolver
+   * dropped the loser. Surfaces WHO lost, WHO won, and the tiebreak
+   * reason so the operator can understand why a candidate edge did NOT
+   * become a Link.
+   *
+   * Placeholders are deliberately verbose because this is one of the
+   * few diagnostic surfaces where the operator may need to disambiguate
+   * a confusing graph (e.g. a `[link](path)` followed by `@path` inside
+   * the same paragraph, the markdown-link wins and the at-directive
+   * silently disappears without this warning).
+   */
+  message: "{{loserExtractor}} detected `{{loserRaw}}` at offset {{loserRange}} but {{winnerExtractor}}'s detection at {{winnerRange}} won the overlap collision ({{reason}}). The graph shows the winning edge only; the loser is not persisted.",
+  /**
+   * Same warn but for the rare case the resolver rejected a Signal
+   * because the operator disabled its extractor via
+   * `plugins.<id>.extensions.<extId>.enabled`. Phase 4+ stub: today the
+   * filter is not wired so this template is unreachable from the
+   * resolver; documented now so the analyzer stays forward-compatible
+   * with the upcoming filter pass.
+   */
+  messageExtractorDisabled: "Extension `{{extractorId}}` is disabled; its detection `{{loserRaw}}` (offset {{loserRange}}) did not produce a Link. Re-enable the extension in Settings or via `sm plugins enable` to surface its edges.",
+  /**
+   * Same warn but for the future confidence floor case. Phase 4+ stub:
+   * today the resolver materialises every winning candidate regardless
+   * of confidence, so this template is unreachable; documented for
+   * forward compatibility.
+   */
+  messageBelowFloor: "Detection `{{loserRaw}}` (offset {{loserRange}}, confidence {{confidence}}) fell below the configured threshold {{threshold}} and was dropped."
+};
+
+// plugins/core/analyzers/signal-collision/index.ts
+var ID22 = "signal-collision";
+var signalCollisionAnalyzer = {
+  id: ID22,
+  pluginId: CORE_PLUGIN_ID,
+  kind: "analyzer",
+  version: "1.0.0",
+  description: "Reports when two extractors fight over the same span of body text, or when a candidate link is dropped (extractor disabled, confidence too low) before it reaches the graph.",
+  mode: "deterministic",
+  evaluate(ctx) {
+    const signals = ctx.signals;
+    if (!signals || signals.length === 0) return [];
+    const issues = [];
+    for (const signal of signals) {
+      const issue = makeIssue(signal);
+      if (issue) issues.push(issue);
+    }
+    return issues;
+  }
+};
+function makeIssue(signal) {
+  const resolution = signal.resolution;
+  if (!resolution || resolution.outcome !== "rejected") return null;
+  if (resolution.rejectedBy) {
+    const winner = resolution.rejectedBy;
+    const winnerCandidate = signal.candidates[resolution.winnerIndex ?? 0];
+    const loserRange = signal.range ? `${signal.range.start}-${signal.range.end}` : "unknown";
+    const winnerRange = `${winner.range.start}-${winner.range.end}`;
+    return {
+      analyzerId: ID22,
+      severity: "warn",
+      nodeIds: [signal.source],
+      message: tx(SIGNAL_COLLISION_TEXTS.message, {
+        loserExtractor: winnerCandidate.extractorId,
+        loserRaw: signal.raw,
+        loserRange,
+        winnerExtractor: winner.extractorId,
+        winnerRange,
+        reason: winner.reason
+      }),
+      data: {
+        loser: {
+          extractorId: winnerCandidate.extractorId,
+          raw: signal.raw,
+          range: signal.range ?? null,
+          candidate: {
+            kind: winnerCandidate.kind,
+            target: winnerCandidate.target,
+            confidence: winnerCandidate.confidence
+          }
+        },
+        winner: {
+          extractorId: winner.extractorId,
+          range: winner.range
+        },
+        reason: winner.reason
+      }
+    };
+  }
+  if (resolution.extractorDisabled) {
+    const loserRange = signal.range ? `${signal.range.start}-${signal.range.end}` : "unknown";
+    return {
+      analyzerId: ID22,
+      severity: "warn",
+      nodeIds: [signal.source],
+      message: tx(SIGNAL_COLLISION_TEXTS.messageExtractorDisabled, {
+        extractorId: resolution.extractorDisabled.extractorId,
+        loserRaw: signal.raw,
+        loserRange
+      }),
+      data: {
+        extractorDisabled: resolution.extractorDisabled,
+        raw: signal.raw,
+        range: signal.range ?? null
+      }
+    };
   }
-}
-function existsSyncSafe(path) {
-  try {
-    readFileSync2(path, "utf8");
-    return true;
-  } catch {
-    return false;
+  if (resolution.belowFloor) {
+    const loserRange = signal.range ? `${signal.range.start}-${signal.range.end}` : "unknown";
+    const topCandidate = signal.candidates[0];
+    return {
+      analyzerId: ID22,
+      severity: "warn",
+      nodeIds: [signal.source],
+      message: tx(SIGNAL_COLLISION_TEXTS.messageBelowFloor, {
+        loserRaw: signal.raw,
+        loserRange,
+        confidence: topCandidate.confidence,
+        threshold: resolution.belowFloor.threshold
+      }),
+      data: {
+        belowFloor: resolution.belowFloor,
+        raw: signal.raw,
+        range: signal.range ?? null
+      }
+    };
   }
+  return null;
 }
 
-// plugins/core/analyzers/validate-all/text.ts
-var VALIDATE_ALL_TEXTS = {
-  /** `Node <path> failed schema validation: <errors>` */
-  nodeFailure: "Node {{path}} failed schema validation: {{errors}}",
-  /** `Link <source> → <target> failed schema validation: <errors>` */
-  linkFailure: "Link {{source}} \u2192 {{target}} failed schema validation: {{errors}}",
-  /** `Node <path> is missing required frontmatter fields: <missing>` */
-  frontmatterBaseFailure: "Node {{path}} is missing required frontmatter fields: {{missing}}.",
-  /** Singular tooltip on the alert / chip when a node has exactly one validation failure. */
-  alertTooltipSingle: "Frontmatter or schema validation failed.",
-  /** Plural tooltip; `{{count}}` capped at 99 in the chip badge but the tooltip text shows the raw count. */
-  alertTooltipMany: "{{count}} schema validation issues on this node."
+// plugins/core/analyzers/trigger-collision/text.ts
+var TRIGGER_COLLISION_TEXTS = {
+  /**
+   * Top-level message when `analyzeTriggerBucket` accumulated exactly one
+   * cause part. Used for the advertiser-ambiguous-only, invocation-
+   * ambiguous-only, and cross-kind-only branches.
+   */
+  messageOnePart: 'Trigger "{{normalized}}" has {{part}}.',
+  /**
+   * Top-level message when `analyzeTriggerBucket` accumulated two cause
+   * parts (advertiser-ambiguous AND invocation-ambiguous fire together).
+   * The joiner lives inside the template so future locales can adapt it
+   * (e.g. `'; y '` in Spanish) without touching the rule code.
+   */
+  messageTwoParts: 'Trigger "{{normalized}}" has {{first}}; and {{second}}.',
+  /** `<n> nodes advertise it: <list>` part, fires on the advertiser-ambiguous branch. */
+  partAdvertisers: "{{count}} nodes advertise it: {{paths}}",
+  /** `<n> distinct invocation forms: <list>` part, fires on the invocation-ambiguous branch. */
+  partInvocations: "{{count}} distinct invocation forms: {{forms}}",
+  /** Singular cross-kind cause: `non-canonical invocation <form> against advertiser <path>`. */
+  partNonCanonicalSingular: "non-canonical invocation {{forms}} against advertiser {{advertiser}}",
+  /** Plural cross-kind cause: `non-canonical invocations <forms> against advertiser <path>`. */
+  partNonCanonicalPlural: "non-canonical invocations {{forms}} against advertiser {{advertiser}}"
 };
 
-// plugins/core/analyzers/validate-all/index.ts
-var ID23 = "validate-all";
-var validateAllAnalyzer = {
+// plugins/core/analyzers/trigger-collision/index.ts
+var ID23 = "trigger-collision";
+var ADVERTISING_KINDS = /* @__PURE__ */ new Set([
+  "command",
+  "skill",
+  "agent"
+]);
+var triggerCollisionAnalyzer = {
   id: ID23,
-  pluginId: "core",
+  pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
-  version: "1.0.0",
-  description: "Detects and flags nodes or links violating the project schemas.",
   mode: "deterministic",
-  ui: {
-    // Corner badge on the graph card; surfaces when the node body /
-    // frontmatter fails schema validation (parse error, missing
-    // `name`/`description`, malformed YAML, etc.). Same visual
-    // chassis as `core/broken-ref`, danger severity.
-    alert: {
-      slot: "graph.node.alert",
-      icon: "fa-solid fa-triangle-exclamation",
-      emitWhenEmpty: false
-    },
-    // Footer chip that mirrors the corner alert with the actual
-    // count so the operator can scan the cards and prioritise.
-    // Outlined (vs the filled corner alert) per the broken-ref
-    // pattern: two beats of the same signal.
-    chip: {
-      slot: "card.footer.right",
-      icon: "fa-regular fa-triangle-exclamation",
-      emitWhenEmpty: false,
-      priority: 35
-    }
-  },
+  version: "1.0.0",
+  description: "Flags two or more nodes that claim the same `/command` or `@agent` name.",
+  // Two claim-collection passes (advertisement + invocation) feeding
+  // the bucket map. Per-bucket analysis lives in `analyzeTriggerBucket`.
+  // eslint-disable-next-line complexity
   evaluate(ctx) {
-    const validators = loadSchemaValidators();
-    const findings = [];
-    const perNode = /* @__PURE__ */ new Map();
+    const buckets = /* @__PURE__ */ new Map();
+    const push = (key, claim) => {
+      const bucket = buckets.get(key) ?? [];
+      bucket.push(claim);
+      buckets.set(key, bucket);
+    };
     for (const node of ctx.nodes) {
-      const before = findings.length;
-      collectNodeFindings(validators, node, findings);
-      collectFrontmatterBaseFindings(node, findings);
-      if (findings.length > before) {
-        perNode.set(node.path, (perNode.get(node.path) ?? 0) + (findings.length - before));
-      }
+      if (!ADVERTISING_KINDS.has(node.kind)) continue;
+      const raw = node.frontmatter?.["name"];
+      if (typeof raw !== "string" || raw.length === 0) continue;
+      const normalized = `/${normalizeTrigger(raw)}`;
+      if (normalized === "/") continue;
+      push(normalized, {
+        kind: "advertiser",
+        token: node.path,
+        nodeId: node.path,
+        canonicalForm: `/${raw}`
+      });
     }
     for (const link of ctx.links) {
-      collectLinkFindings(validators, link, findings);
-    }
-    for (const [nodePath, count] of perNode) {
-      const tooltip = count === 1 ? VALIDATE_ALL_TEXTS.alertTooltipSingle : tx(VALIDATE_ALL_TEXTS.alertTooltipMany, { count });
-      const capped = Math.min(count, 99);
-      ctx.emitContribution(nodePath, "alert", {
-        icon: "fa-solid fa-triangle-exclamation",
-        severity: "danger",
-        tooltip
-      });
-      ctx.emitContribution(nodePath, "chip", {
-        value: capped,
-        severity: "danger",
-        tooltip
+      const normalized = link.trigger?.normalizedTrigger;
+      if (!normalized) continue;
+      push(normalized, {
+        kind: "invocation",
+        token: link.target,
+        nodeId: link.source
       });
     }
-    return findings;
+    const issues = [];
+    for (const [normalized, claims] of buckets) {
+      const issue = analyzeTriggerBucket(normalized, claims);
+      if (issue) issues.push(issue);
+    }
+    return issues;
   }
 };
-function collectNodeFindings(v, node, out) {
-  const result = v.validate("node", toNodeForSchema(node));
-  if (result.ok) return;
-  out.push({
-    analyzerId: ID23,
-    severity: "error",
-    nodeIds: [node.path],
-    message: tx(VALIDATE_ALL_TEXTS.nodeFailure, {
-      path: node.path,
-      errors: result.errors
-    }),
-    data: { target: "node", path: node.path }
-  });
-}
-function collectFrontmatterBaseFindings(node, out) {
-  if (node.provider === "markdown") return;
-  if (node.bytes.frontmatter === 0) return;
-  const fm = node.frontmatter ?? {};
-  const missing = [];
-  if (isMissingStringField(fm, "name")) missing.push("name");
-  if (isMissingStringField(fm, "description")) missing.push("description");
-  if (missing.length === 0) return;
-  out.push({
-    analyzerId: ID23,
-    // `warn` (not `error`) so the default `sm scan` exit code stays
-    // 0 even when nodes are missing frontmatter base fields. Strict
-    // mode (`sm scan --strict`) still escalates to exit 1. Matches
-    // the `frontmatter-invalid` severity policy of the orchestrator.
-    severity: "warn",
-    nodeIds: [node.path],
-    message: tx(VALIDATE_ALL_TEXTS.frontmatterBaseFailure, {
-      path: node.path,
-      missing: missing.join(", ")
-    }),
-    data: { target: "frontmatter", path: node.path, missing }
+function analyzeTriggerBucket(normalized, claims) {
+  const advertiserPaths = [
+    ...new Set(claims.filter((c) => c.kind === "advertiser").map((c) => c.token))
+  ].sort();
+  const invocationTargets = [
+    ...new Set(claims.filter((c) => c.kind === "invocation").map((c) => c.token))
+  ].sort();
+  const advertisers = claims.filter(
+    (c) => c.kind === "advertiser"
+  );
+  const advertiserAmbiguous = advertiserPaths.length >= 2;
+  const invocationAmbiguous = invocationTargets.length >= 2;
+  const canonicalForms = new Set(advertisers.map((a) => a.canonicalForm));
+  const nonCanonicalInvocations = invocationTargets.filter((t) => !canonicalForms.has(t));
+  const crossKindAmbiguous = advertiserPaths.length === 1 && nonCanonicalInvocations.length >= 1;
+  if (!advertiserAmbiguous && !invocationAmbiguous && !crossKindAmbiguous) {
+    return null;
+  }
+  const nodeIds = [...new Set(claims.map((c) => c.nodeId))].sort();
+  const parts = [];
+  if (advertiserAmbiguous) {
+    parts.push(
+      tx(TRIGGER_COLLISION_TEXTS.partAdvertisers, {
+        count: advertiserPaths.length,
+        paths: advertiserPaths.join(", ")
+      })
+    );
+  }
+  if (invocationAmbiguous) {
+    parts.push(
+      tx(TRIGGER_COLLISION_TEXTS.partInvocations, {
+        count: invocationTargets.length,
+        forms: invocationTargets.join(", ")
+      })
+    );
+  } else if (crossKindAmbiguous) {
+    const template = nonCanonicalInvocations.length > 1 ? TRIGGER_COLLISION_TEXTS.partNonCanonicalPlural : TRIGGER_COLLISION_TEXTS.partNonCanonicalSingular;
+    parts.push(
+      tx(template, {
+        forms: nonCanonicalInvocations.join(", "),
+        advertiser: advertiserPaths[0]
+      })
+    );
+  }
+  const message = parts.length === 2 ? tx(TRIGGER_COLLISION_TEXTS.messageTwoParts, {
+    normalized,
+    first: parts[0],
+    second: parts[1]
+  }) : tx(TRIGGER_COLLISION_TEXTS.messageOnePart, {
+    normalized,
+    part: parts[0]
   });
-}
-function isMissingStringField(fm, field) {
-  const v = fm[field];
-  return typeof v !== "string" || v.length === 0;
-}
-function collectLinkFindings(v, link, out) {
-  const result = v.validate("link", toLinkForSchema(link));
-  if (result.ok) return;
-  out.push({
+  return {
     analyzerId: ID23,
     severity: "error",
-    nodeIds: [link.source],
-    message: tx(VALIDATE_ALL_TEXTS.linkFailure, {
-      source: link.source,
-      target: link.target,
-      errors: result.errors
-    }),
-    data: { target: "link", source: link.source, to: link.target }
-  });
-}
-function toNodeForSchema(node) {
-  return {
-    path: node.path,
-    kind: node.kind,
-    provider: node.provider,
-    bodyHash: node.bodyHash,
-    frontmatterHash: node.frontmatterHash,
-    bytes: node.bytes,
-    tokens: node.tokens ?? void 0,
-    linksOutCount: node.linksOutCount,
-    linksInCount: node.linksInCount,
-    externalRefsCount: node.externalRefsCount,
-    frontmatter: node.frontmatter ?? {},
-    sidecar: node.sidecar ?? void 0
-  };
-}
-function toLinkForSchema(link) {
-  return {
-    source: link.source,
-    target: link.target,
-    kind: link.kind,
-    confidence: link.confidence,
-    sources: link.sources,
-    trigger: link.trigger ?? void 0,
-    location: link.location ?? void 0,
-    raw: link.raw ?? void 0
+    nodeIds,
+    message,
+    data: {
+      normalizedTrigger: normalized,
+      invocationTargets,
+      advertiserPaths
+    }
   };
 }
 
@@ -3438,11 +3445,11 @@ var ID24 = "ascii";
 var KIND_ORDER = ["agent", "command", "skill", "markdown"];
 var asciiFormatter = {
   id: ID24,
-  pluginId: "core",
+  pluginId: CORE_PLUGIN_ID,
   kind: "formatter",
   formatId: ID24,
   version: "1.0.0",
-  description: "Renders the scan as plain text, grouped by kind, arrows, and issues. Used by `sm scan --format=ascii`.",
+  description: "Renders the scan as plain text in three sections: nodes (grouped by kind), arrows, and issues. Used by `sm scan --format ascii`.",
   // ASCII tree formatter, header + per-kind sections + per-issue
   // section. Each section iterates and renders; splitting per section
   // would multiply the for-loop boilerplate.
@@ -3538,10 +3545,10 @@ function renderSection(out, kind, group) {
 var ID25 = "json";
 var jsonFormatter = {
   id: ID25,
-  pluginId: "core",
+  pluginId: CORE_PLUGIN_ID,
   kind: "formatter",
   version: "1.0.0",
-  description: "Renders the persisted scan as JSON (conforms to `scan-result.schema.json` when the full ScanResult is available). Used by `sm graph --format json` and `GET /api/graph?format=json`.",
+  description: "Renders the persisted scan as JSON (conforms to `scan-result.schema.json`). Used by `sm graph --format json` and `GET /api/graph?format=json`.",
   formatId: ID25,
   format(ctx) {
     if (ctx.scanResult !== void 0) {
@@ -3680,15 +3687,14 @@ function resolveSpecRoot2() {
   }
 }
 
-// plugins/core/actions/bump/index.ts
-var ID26 = "bump";
-var PLUGIN_ID = "core";
-var bumpAction = {
+// plugins/core/actions/node-bump/index.ts
+var ID26 = "node-bump";
+var nodeBumpAction = {
   id: ID26,
-  pluginId: PLUGIN_ID,
+  pluginId: CORE_PLUGIN_ID,
   kind: "action",
   version: "1.0.0",
-  description: "Marks a node as updated: bumps version, refreshes sidecar hashes, records the timestamp.",
+  description: "Marks a node as updated: bumps `annotations.version`, refreshes sidecar hashes, and records the timestamp.",
   mode: "deterministic",
   // The runtime contract uses generic <TInput, TReport>; bump narrows
   // both. The cast is the standard pattern for built-ins that want
@@ -3742,15 +3748,14 @@ function pickCurrentVersion(overlay) {
   return typeof v === "number" && Number.isFinite(v) ? v : 0;
 }
 
-// plugins/core/actions/mark-superseded/index.ts
-var ID27 = "mark-superseded";
-var PLUGIN_ID2 = "core";
-var markSupersededAction = {
+// plugins/core/actions/node-supersede/index.ts
+var ID27 = "node-supersede";
+var nodeSupersedeAction = {
   id: ID27,
-  pluginId: PLUGIN_ID2,
+  pluginId: CORE_PLUGIN_ID,
   kind: "action",
   version: "0.0.0",
-  description: "Declares the current node as superseded by another (writes `supersededBy` to the sidecar). Paired with the `core/superseded` analyzer.",
+  description: "Declares the current node as superseded by another (writes `supersededBy` to the sidecar).",
   mode: "deterministic",
   invoke(_input, _ctx) {
     const report = { ok: true, noop: true };
@@ -3856,7 +3861,7 @@ var UPDATE_CHECK_TEXTS = {
 // package.json
 var package_default = {
   name: "@skill-map/cli",
-  version: "0.37.0",
+  version: "0.39.0",
   description: "skill-map reference implementation \u2014 kernel + CLI + adapters.",
   license: "MIT",
   type: "module",
@@ -3939,7 +3944,7 @@ var package_default = {
     semver: "7.7.4",
     "smol-toml": "1.6.1",
     typanion: "3.14.0",
-    ws: "8.20.0"
+    ws: "8.21.0"
   },
   devDependencies: {
     "@eslint/js": "10.0.1",
@@ -4006,10 +4011,67 @@ function ansiFor(opts) {
 }
 
 // cli/util/user-settings-store.ts
-import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync4, writeFileSync } from "fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync5 } from "fs";
 import { homedir } from "os";
 import { join as join2 } from "path";
 
+// core/config/atomic-write.ts
+import {
+  closeSync,
+  constants as fsConstants,
+  existsSync as existsSync2,
+  mkdirSync,
+  openSync,
+  readFileSync as readFileSync4,
+  renameSync,
+  unlinkSync,
+  writeSync
+} from "fs";
+import { randomBytes } from "crypto";
+import { dirname as dirname4 } from "path";
+function readJsonObjectOrEmpty(path) {
+  if (!existsSync2(path)) return {};
+  try {
+    const raw = JSON.parse(readFileSync4(path, "utf8"));
+    if (raw && typeof raw === "object" && !Array.isArray(raw)) {
+      return raw;
+    }
+  } catch {
+  }
+  return {};
+}
+function writeFileAtomicExclusive(path, content, mode = 384) {
+  const tmp = `${path}.tmp.${process.pid}.${randomBytes(8).toString("hex")}`;
+  let fd = null;
+  try {
+    fd = openSync(
+      tmp,
+      fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL | fsConstants.O_NOFOLLOW,
+      mode
+    );
+    writeSync(fd, content);
+    closeSync(fd);
+    fd = null;
+    renameSync(tmp, path);
+  } catch (err) {
+    if (fd !== null) {
+      try {
+        closeSync(fd);
+      } catch {
+      }
+    }
+    try {
+      unlinkSync(tmp);
+    } catch {
+    }
+    throw err;
+  }
+}
+function writeJsonAtomic(path, content) {
+  mkdirSync(dirname4(path), { recursive: true });
+  writeFileAtomicExclusive(path, JSON.stringify(content, null, 2) + "\n");
+}
+
 // core/paths/db-path.ts
 import { join, resolve as resolve6 } from "path";
 var SKILL_MAP_DIR = ".skill-map";
@@ -4067,9 +4129,9 @@ function readUserSettings() {
 }
 function readParsedFile() {
   const path = userSettingsFilePath();
-  if (!existsSync2(path)) return null;
+  if (!existsSync3(path)) return null;
   try {
-    const parsed = JSON.parse(readFileSync4(path, "utf8"));
+    const parsed = JSON.parse(readFileSync5(path, "utf8"));
     if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
       return null;
     }
@@ -4102,8 +4164,8 @@ function writeUserSettings(patch) {
       const result = validators.validate("user-settings", merged);
       if (!result.ok) return;
     }
-    mkdirSync(dir, { recursive: true });
-    writeFileSync(path, JSON.stringify(merged, null, 2) + "\n");
+    mkdirSync2(dir, { recursive: true, mode: 448 });
+    writeFileAtomicExclusive(path, JSON.stringify(merged, null, 2) + "\n");
   } catch {
   }
 }
@@ -4214,10 +4276,10 @@ ${footer}
 // plugins/core/hooks/update-check/index.ts
 var updateCheckHook = {
   id: "update-check",
-  pluginId: "core",
+  pluginId: CORE_PLUGIN_ID,
   kind: "hook",
   version: "1.0.0",
-  description: "Checks daily for a newer skill-map version on npm. Shows an `update available` banner when one is found.",
+  description: "Checks daily for a newer `skill-map` version on npm. Shows an `update available` banner when one is found.",
   triggers: ["boot"],
   async on(ctx) {
     const payload = ctx.event.data ?? {};
@@ -4234,7 +4296,7 @@ var updateCheckHook = {
 // plugins/built-ins.ts
 var claudeProvider2 = { ...claudeProvider, pluginId: "claude" };
 var atDirectiveExtractor2 = { ...atDirectiveExtractor, pluginId: "claude" };
-var slashExtractor2 = { ...slashExtractor, pluginId: "claude" };
+var slashCommandExtractor2 = { ...slashCommandExtractor, pluginId: "claude" };
 var antigravityProvider2 = { ...antigravityProvider, pluginId: "antigravity" };
 var openaiProvider2 = { ...openaiProvider, pluginId: "openai" };
 var agentSkillsProvider2 = { ...agentSkillsProvider, pluginId: "agent-skills" };
@@ -4243,43 +4305,43 @@ var annotationsExtractor2 = { ...annotationsExtractor, pluginId: "core" };
 var externalUrlCounterExtractor2 = { ...externalUrlCounterExtractor, pluginId: "core" };
 var markdownLinkExtractor2 = { ...markdownLinkExtractor, pluginId: "core" };
 var mcpToolsExtractor2 = { ...mcpToolsExtractor, pluginId: "core" };
-var toolsCountExtractor2 = { ...toolsCountExtractor, pluginId: "core" };
+var toolsCounterExtractor2 = { ...toolsCounterExtractor, pluginId: "core" };
+var annotationFieldUnknownAnalyzer2 = { ...annotationFieldUnknownAnalyzer, pluginId: "core" };
 var annotationOrphanAnalyzer2 = { ...annotationOrphanAnalyzer, pluginId: "core" };
 var annotationStaleAnalyzer2 = { ...annotationStaleAnalyzer, pluginId: "core" };
-var brokenRefAnalyzer2 = { ...brokenRefAnalyzer, pluginId: "core" };
 var contributionOrphanAnalyzer2 = { ...contributionOrphanAnalyzer, pluginId: "core" };
-var jobOrphanFileAnalyzer2 = { ...jobOrphanFileAnalyzer, pluginId: "core" };
+var jobFileOrphanAnalyzer2 = { ...jobFileOrphanAnalyzer, pluginId: "core" };
 var linkConflictAnalyzer2 = { ...linkConflictAnalyzer, pluginId: "core" };
-var linkCountsAnalyzer2 = { ...linkCountsAnalyzer, pluginId: "core" };
-var redundantTargetReferenceAnalyzer2 = { ...redundantTargetReferenceAnalyzer, pluginId: "core" };
-var reservedNameAnalyzer2 = { ...reservedNameAnalyzer, pluginId: "core" };
-var selfLoopAnalyzer2 = { ...selfLoopAnalyzer, pluginId: "core" };
+var linkCounterAnalyzer2 = { ...linkCounterAnalyzer, pluginId: "core" };
+var linkSelfLoopAnalyzer2 = { ...linkSelfLoopAnalyzer, pluginId: "core" };
+var nameReservedAnalyzer2 = { ...nameReservedAnalyzer, pluginId: "core" };
+var nodeStabilityAnalyzer2 = { ...nodeStabilityAnalyzer, pluginId: "core" };
+var nodeSupersededAnalyzer2 = { ...nodeSupersededAnalyzer, pluginId: "core" };
+var referenceBrokenAnalyzer2 = { ...referenceBrokenAnalyzer, pluginId: "core" };
+var referenceRedundantAnalyzer2 = { ...referenceRedundantAnalyzer, pluginId: "core" };
+var schemaViolationAnalyzer2 = { ...schemaViolationAnalyzer, pluginId: "core" };
 var signalCollisionAnalyzer2 = { ...signalCollisionAnalyzer, pluginId: "core" };
-var stabilityAnalyzer2 = { ...stabilityAnalyzer, pluginId: "core" };
-var supersededAnalyzer2 = { ...supersededAnalyzer, pluginId: "core" };
 var triggerCollisionAnalyzer2 = { ...triggerCollisionAnalyzer, pluginId: "core" };
-var unknownFieldAnalyzer2 = { ...unknownFieldAnalyzer, pluginId: "core" };
-var validateAllAnalyzer2 = { ...validateAllAnalyzer, pluginId: "core" };
 var asciiFormatter2 = { ...asciiFormatter, pluginId: "core" };
 var jsonFormatter2 = { ...jsonFormatter, pluginId: "core" };
-var bumpAction2 = { ...bumpAction, pluginId: "core" };
-var markSupersededAction2 = { ...markSupersededAction, pluginId: "core" };
+var nodeBumpAction2 = { ...nodeBumpAction, pluginId: "core" };
+var nodeSupersedeAction2 = { ...nodeSupersedeAction, pluginId: "core" };
 var updateCheckHook2 = { ...updateCheckHook, pluginId: "core" };
 var builtInBundles = [
   {
     id: "claude",
     granularity: "bundle",
-    description: "Claude Code platform integration. Classifies files under `.claude/{agents,commands,skills}` and parses Claude-flavored frontmatter.",
+    description: "Claude Code platform integration. Classifies files under `.claude/{agents,commands,skills}` and detects Claude-flavored slash commands and at-directives in their bodies.",
     extensions: [
       claudeProvider2,
       atDirectiveExtractor2,
-      slashExtractor2
+      slashCommandExtractor2
     ]
   },
   {
     id: "antigravity",
     granularity: "bundle",
-    description: "Google Antigravity CLI platform integration (released 2026-05-19, replaces the retired Gemini CLI). Antigravity adopted the open-standard `.agents/` layout, so skills are classified by the neutral `agent-skills` Provider; this bundle contributes lens identity + a reserved-name seed catalog for future Antigravity built-in invocables.",
+    description: "Google Antigravity CLI platform integration (replaces the retired Gemini CLI). Antigravity adopted the open-standard `.agents/` layout, so skills are classified by the neutral `agent-skills` provider; this plugin contributes the Antigravity runtime identity and a seed list of reserved built-in names.",
     extensions: [
       antigravityProvider2
     ]
@@ -4287,7 +4349,7 @@ var builtInBundles = [
   {
     id: "openai",
     granularity: "bundle",
-    description: "OpenAI Codex CLI platform integration. Classifies TOML sub-agent definitions under `.codex/agents/*.toml` and (future) walks the hierarchical AGENTS.md cascade. Provider for the active-lens `openai` runtime.",
+    description: "OpenAI Codex CLI platform integration. Classifies TOML sub-agent definitions under `.codex/agents/*.toml`.",
     extensions: [
       openaiProvider2
     ]
@@ -4295,7 +4357,7 @@ var builtInBundles = [
   {
     id: "agent-skills",
     granularity: "bundle",
-    description: "Agent Skills open standard. Vendor-neutral path `.agents/skills/<name>/SKILL.md` (Anthropic, OpenAI, Google). See agentskills.io.",
+    description: "Open-standard Agent Skills layout. Classifies skills under the vendor-neutral path `.agents/skills/<name>/SKILL.md` (adopted by Anthropic, OpenAI, Google). See agentskills.io.",
     extensions: [
       agentSkillsProvider2
     ]
@@ -4303,34 +4365,34 @@ var builtInBundles = [
   {
     id: "core",
     granularity: "extension",
-    description: "Core extensions shared across providers: extractors, analyzers, formatters, the bump action, and the universal `.md` fallback Provider.",
+    description: "Core extensions shared across providers: parsers, extractors, analyzers, actions, hooks, formatters, and the universal `.md` fallback provider.",
     extensions: [
       coreMarkdownProvider2,
       annotationsExtractor2,
       externalUrlCounterExtractor2,
       markdownLinkExtractor2,
       mcpToolsExtractor2,
-      toolsCountExtractor2,
+      toolsCounterExtractor2,
+      annotationFieldUnknownAnalyzer2,
       annotationOrphanAnalyzer2,
       annotationStaleAnalyzer2,
-      brokenRefAnalyzer2,
       contributionOrphanAnalyzer2,
-      jobOrphanFileAnalyzer2,
+      jobFileOrphanAnalyzer2,
       linkConflictAnalyzer2,
-      linkCountsAnalyzer2,
-      redundantTargetReferenceAnalyzer2,
-      reservedNameAnalyzer2,
-      selfLoopAnalyzer2,
+      linkCounterAnalyzer2,
+      linkSelfLoopAnalyzer2,
+      nameReservedAnalyzer2,
+      nodeStabilityAnalyzer2,
+      nodeSupersededAnalyzer2,
+      referenceBrokenAnalyzer2,
+      referenceRedundantAnalyzer2,
+      schemaViolationAnalyzer2,
       signalCollisionAnalyzer2,
-      stabilityAnalyzer2,
-      supersededAnalyzer2,
       triggerCollisionAnalyzer2,
-      unknownFieldAnalyzer2,
-      validateAllAnalyzer2,
       asciiFormatter2,
       jsonFormatter2,
-      bumpAction2,
-      markSupersededAction2,
+      nodeBumpAction2,
+      nodeSupersedeAction2,
       updateCheckHook2
     ]
   }
@@ -4457,21 +4519,42 @@ function localTimeFromIso(iso) {
   const ss = String(d.getSeconds()).padStart(2, "0");
   return `${hh}:${mm}:${ss}`;
 }
-var defaultFormat = (record) => {
+function paintLevelPrefix(level, ansi) {
+  const label = level.toUpperCase().padEnd(5);
+  switch (level) {
+    case "error":
+      return `${ansi.red("\u2715")} ${ansi.red(label)}`;
+    case "warn":
+      return `${ansi.yellow("\u26A0")} ${ansi.yellow(label)}`;
+    case "info":
+      return `${ansi.cyan("\u2139")} ${ansi.cyan(label)}`;
+    case "debug":
+    case "trace":
+      return `${ansi.dim("\xB7")} ${ansi.dim(label)}`;
+  }
+}
+var defaultFormat = (record, ansi) => {
   const time = localTimeFromIso(record.timestamp);
-  const level = record.level.toUpperCase().padEnd(5);
-  const ctx = record.context && Object.keys(record.context).length > 0 ? ` | ${JSON.stringify(record.context)}` : "";
-  return `${time} | ${level} | ${record.message}${ctx}
+  const prefix = paintLevelPrefix(record.level, ansi);
+  const ctx = record.context && Object.keys(record.context).length > 0 ? ` ${ansi.dim("|")} ${ansi.dim(JSON.stringify(record.context))}` : "";
+  return `${ansi.dim(time)}  ${prefix}  ${record.message}${ctx}
 `;
 };
 var Logger = class {
   #level;
   #stream;
   #format;
+  #ansi;
   constructor(opts) {
     this.#level = opts.level;
     this.#stream = opts.stream;
     this.#format = opts.format ?? defaultFormat;
+    const streamTty = opts.stream;
+    this.#ansi = ansiFor({
+      isTTY: streamTty.isTTY === true,
+      noColorFlag: opts.noColorFlag === true,
+      ...opts.env !== void 0 ? { env: opts.env } : {}
+    });
   }
   setLevel(level) {
     this.#level = level;
@@ -4502,7 +4585,7 @@ var Logger = class {
       message,
       ...context !== void 0 ? { context } : {}
     };
-    this.#stream.write(this.#format(record));
+    this.#stream.write(this.#format(record, this.#ansi));
   }
 };
 function resolveLogLevel(opts) {
@@ -4546,7 +4629,7 @@ function extractLogLevelFlag(argv) {
 var LOGGER_ENV_VAR = ENV_VAR;
 
 // cli/util/db-path.ts
-import { existsSync as existsSync3 } from "fs";
+import { existsSync as existsSync4 } from "fs";
 
 // cli/i18n/util.texts.ts
 var UTIL_TEXTS = {
@@ -4589,7 +4672,7 @@ var ExitCode = {
 
 // cli/util/db-path.ts
 function assertDbExists(path, stderr) {
-  if (path === ":memory:" || existsSync3(path)) return true;
+  if (path === ":memory:" || existsSync4(path)) return true;
   const stderrTty = stderr;
   const ansi = ansiFor({ isTTY: stderrTty.isTTY === true, noColorFlag: false });
   stderr.write(
@@ -4784,10 +4867,10 @@ import { Command as Command2, Option as Option2 } from "clipanion";
 
 // core/config/helper.ts
 import { homedir as osHomedir } from "os";
-import { isAbsolute, join as join4, resolve as resolve7 } from "path";
+import { isAbsolute, join as join4, resolve as resolve7, sep } from "path";
 
 // kernel/config/loader.ts
-import { existsSync as existsSync4, readFileSync as readFileSync5 } from "fs";
+import { existsSync as existsSync5, readFileSync as readFileSync6 } from "fs";
 
 // kernel/i18n/config-loader.texts.ts
 var CONFIG_LOADER_TEXTS = {
@@ -4869,7 +4952,7 @@ function loadConfig(opts) {
     { path: kernelLocalSettingsPath(cwd), layer: "project-local" }
   ];
   for (const { path, layer } of filePairs) {
-    if (!existsSync4(path)) continue;
+    if (!existsSync5(path)) continue;
     const partial = readJsonSafe(path, layer, warnings, strict);
     if (partial === null) continue;
     const cleaned = validateAndStrip(validators, partial, layer, warnings, strict);
@@ -4890,7 +4973,7 @@ function loadConfig(opts) {
 function readJsonSafe(path, layer, warnings, strict) {
   let text;
   try {
-    text = readFileSync5(path, "utf8");
+    text = readFileSync6(path, "utf8");
   } catch (err) {
     return reportAndSkip(
       tx(CONFIG_LOADER_TEXTS.readFailure, { layer, path, message: formatErrorMessage(err) }),
@@ -5132,63 +5215,6 @@ function enumerateConfigPaths(obj, prefix = "") {
   return out;
 }
 
-// core/config/atomic-write.ts
-import {
-  closeSync,
-  constants as fsConstants,
-  existsSync as existsSync5,
-  mkdirSync as mkdirSync2,
-  openSync,
-  readFileSync as readFileSync6,
-  renameSync,
-  unlinkSync,
-  writeSync
-} from "fs";
-import { randomBytes } from "crypto";
-import { dirname as dirname4 } from "path";
-function readJsonObjectOrEmpty(path) {
-  if (!existsSync5(path)) return {};
-  try {
-    const raw = JSON.parse(readFileSync6(path, "utf8"));
-    if (raw && typeof raw === "object" && !Array.isArray(raw)) {
-      return raw;
-    }
-  } catch {
-  }
-  return {};
-}
-function writeFileAtomicExclusive(path, content, mode = 384) {
-  const tmp = `${path}.tmp.${process.pid}.${randomBytes(8).toString("hex")}`;
-  let fd = null;
-  try {
-    fd = openSync(
-      tmp,
-      fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL | fsConstants.O_NOFOLLOW,
-      mode
-    );
-    writeSync(fd, content);
-    closeSync(fd);
-    fd = null;
-    renameSync(tmp, path);
-  } catch (err) {
-    if (fd !== null) {
-      try {
-        closeSync(fd);
-      } catch {
-      }
-    }
-    try {
-      unlinkSync(tmp);
-    } catch {
-    }
-    throw err;
-  }
-}
-function writeJsonAtomic(path, content) {
-  mkdirSync2(dirname4(path), { recursive: true });
-  writeFileAtomicExclusive(path, JSON.stringify(content, null, 2) + "\n");
-}
-
 // core/config/helper.ts
 var PRIVACY_SENSITIVE_KEYS = /* @__PURE__ */ new Set([
   "scan.referencePaths"
@@ -5282,7 +5308,7 @@ function resolveScanPathForExposure(raw, cwd) {
 }
 function isUnderProject(absPath, cwd) {
   const projectRoot = resolve7(cwd);
-  return absPath === projectRoot || absPath.startsWith(`${projectRoot}/`);
+  return absPath === projectRoot || absPath.startsWith(`${projectRoot}${sep}`);
 }
 
 // core/config/sidecar-consent.ts
@@ -5674,7 +5700,11 @@ var SmCommand = class extends Command {
     this.printer = createPrinter({
       stdout: this.context.stdout,
       stderr: this.context.stderr,
-      quietInfo: this.quiet
+      // `--json` suppresses info banners even on stderr: users piping
+      // JSON through `jq` (or asserting machine output in tests) don't
+      // want decorative lines polluting either channel. Aligns CLI
+      // behaviour with the printer docstring.
+      quietInfo: this.quiet || this.json
     });
     try {
       return await this.run();
@@ -7237,9 +7267,9 @@ async function sweepPerTupleContributions(trx, contributions, freshlyRunTuples)
   const bufferKeys = buildContributionsBufferKeys(contributions);
   const tuplesByPluginExt = groupFreshlyRunTuplesByPluginExt(freshlyRunTuples);
   for (const [pe, nodes] of tuplesByPluginExt) {
-    const sep6 = pe.indexOf("\0");
-    if (sep6 < 0) continue;
-    await deleteStaleTupleRows(trx, pe.slice(0, sep6), pe.slice(sep6 + 1), [...nodes], bufferKeys);
+    const sep8 = pe.indexOf("\0");
+    if (sep8 < 0) continue;
+    await deleteStaleTupleRows(trx, pe.slice(0, sep8), pe.slice(sep8 + 1), [...nodes], bufferKeys);
   }
 }
 function buildContributionsBufferKeys(contributions) {
@@ -8018,8 +8048,24 @@ function applyIssueFilters(query, filter) {
       )
     );
   }
+  if (filter.nodePaths !== void 0) {
+    q = applyNodePathsFilter(q, filter.nodePaths);
+  }
   return q;
 }
+function applyNodePathsFilter(query, nodePaths) {
+  if (nodePaths.length === 0) {
+    return query.where(sql3`0`, "=", 1);
+  }
+  const targets = [...nodePaths];
+  return query.where(
+    ({ exists, selectFrom }) => exists(
+      selectFrom(
+        sql3`json_each(scan_issues.node_ids_json)`.as("je")
+      ).select(sql3`1`.as("one")).where(sql3.ref("je.value"), "in", targets)
+    )
+  );
+}
 async function findActiveIssues(db, predicate) {
   const rows = await db.selectFrom("scan_issues").selectAll().execute();
   const out = [];
@@ -8308,15 +8354,32 @@ async function tryWithSqlite(options, fn) {
 import { resolve as resolve14 } from "path";
 
 // core/paths/path-guard.ts
-import { isAbsolute as isAbsolute2, resolve as resolve13, sep } from "path";
+import { lstatSync } from "fs";
+import { isAbsolute as isAbsolute2, resolve as resolve13, sep as sep2 } from "path";
 function assertContained(cwd, rel) {
   if (isAbsolute2(rel)) {
     throw new Error(`node path is absolute, refusing to read: ${rel}`);
   }
   const abs = resolve13(cwd, rel);
-  if (abs !== cwd && !abs.startsWith(cwd + sep)) {
+  if (abs !== cwd && !abs.startsWith(cwd + sep2)) {
     throw new Error(`node path escapes repo root: ${rel}`);
   }
+  let isSymlink;
+  try {
+    isSymlink = lstatSync(abs).isSymbolicLink();
+  } catch (err) {
+    if (isAllowedLstatError(err)) return;
+    throw err;
+  }
+  if (isSymlink) {
+    throw new Error(`node path is a symlink, refusing to dereference: ${rel}`);
+  }
+}
+var ALLOWED_LSTAT_ERROR_CODES = /* @__PURE__ */ new Set(["ENOENT", "ENOTDIR"]);
+function isAllowedLstatError(err) {
+  if (err === null || typeof err !== "object") return false;
+  const code = err.code;
+  return typeof code === "string" && ALLOWED_LSTAT_ERROR_CODES.has(code);
 }
 
 // cli/commands/bump-plan.ts
@@ -8364,12 +8427,12 @@ function planOne(node, options) {
   };
 }
 function invokeBumpFor(node, absPath, force) {
-  if (!bumpAction.invoke) {
+  if (!nodeBumpAction.invoke) {
     throw new Error("built-in bump action is missing its invoke()");
   }
   const input = {};
   if (force) input.force = true;
-  return bumpAction.invoke(input, {
+  return nodeBumpAction.invoke(input, {
     node,
     nodeAbsolutePath: absPath,
     invoker: "cli",
@@ -8385,7 +8448,7 @@ var BumpCommand = class extends SmCommand {
     category: "Actions",
     description: "Bump a node's sidecar (`<basename>.sm`): increment annotations.version, refresh hashes, stamp audit.",
     details: `
-      Wraps the built-in deterministic \`core/bump\` Action. Single-node
+      Wraps the built-in deterministic \`core/node-bump\` Action. Single-node
       mode bumps one path; \`--pending\` walks every node whose sidecar
       overlay reports drift and bumps them all.
 
@@ -9259,9 +9322,9 @@ function providerKindFailure(opts, status, fileName, errDescription) {
     }
   };
 }
-function isDirectorySafe(path, statSync13) {
+function isDirectorySafe(path, statSync12) {
   try {
-    return statSync13(path).isDirectory();
+    return statSync12(path).isDirectory();
   } catch {
     return false;
   }
@@ -9781,14 +9844,14 @@ var LOCKED_PLUGIN_IDS = /* @__PURE__ */ new Set([
   // unreachable from CLI / BFF / UI. Re-evaluate if a third-party ever
   // ships a competing supersession extractor.
   "core/annotations",
-  // `core/validate-all` validates every scanned Node against
+  // `core/schema-violation` validates every scanned Node against
   // `node.schema.json` and every Link against `link.schema.json` (the
   // authoritative @skill-map/spec). Disabling it makes the system
   // persist non-conformant content silently, breaking the spec
   // invariant "what reaches the DB conforms to the spec". The check is
   // foundational, not advisory; lock it on so the guarantee holds
   // regardless of user / DB / settings hand-edits.
-  "core/validate-all",
+  "core/schema-violation",
   // `core/ascii` is the only built-in Formatter today and the default
   // for `sm graph` (`--format ascii`). Disabling it breaks the verb
   // entirely (`composeFormatters` returns the empty list, the CLI
@@ -9824,7 +9887,8 @@ function isBuiltInExtensionEnabled(bundle, ext, resolveEnabled) {
 }
 function isBundleEntryEnabled(bundle, extId, resolveEnabled) {
   if (bundle.granularity === "bundle") {
-    return resolveEnabled(bundle.id);
+    if (!resolveEnabled(bundle.id)) return false;
+    return resolveEnabled(qualifiedExtensionId(bundle.id, extId));
   }
   return resolveEnabled(qualifiedExtensionId(bundle.id, extId));
 }
@@ -9837,7 +9901,10 @@ function buildGranularityMap(discovered) {
 }
 function isPluginExtensionEnabled(ext, granularityMap, resolveEnabled) {
   const granularity = granularityMap.get(ext.pluginId) ?? "bundle";
-  if (granularity === "bundle") return resolveEnabled(ext.pluginId);
+  if (granularity === "bundle") {
+    if (!resolveEnabled(ext.pluginId)) return false;
+    return resolveEnabled(qualifiedExtensionId(ext.pluginId, ext.id));
+  }
   return resolveEnabled(qualifiedExtensionId(ext.pluginId, ext.id));
 }
 async function buildEnabledResolver(ctx) {
@@ -9855,7 +9922,7 @@ async function buildEnabledResolver(ctx) {
 
 // kernel/scan/walk-content.ts
 import { readFile, readdir, lstat } from "fs/promises";
-import { join as join9, relative as relative2, sep as sep2 } from "path";
+import { join as join9, relative as relative2, sep as sep3 } from "path";
 
 // kernel/scan/ignore.ts
 import { existsSync as existsSync13, readFileSync as readFileSync13 } from "fs";
@@ -10036,7 +10103,7 @@ async function* walkContent(roots, options) {
   const extensions = options.extensions;
   for (const root of roots) {
     for await (const file of walkRoot(root, root, filter, extensions)) {
-      const relPath = relative2(root, file).split(sep2).join("/");
+      const relPath = relative2(root, file).split(sep3).join("/");
       let raw;
       try {
         raw = await readFile(file, "utf8");
@@ -10068,7 +10135,7 @@ async function* walkRoot(root, current, filter, extensions) {
   for (const entry of entries) {
     const name = entry.name;
     const full = join9(current, name);
-    const rel = relative2(root, full).split(sep2).join("/");
+    const rel = relative2(root, full).split(sep3).join("/");
     if (filter.ignores(rel)) continue;
     if (entry.isSymbolicLink()) continue;
     if (entry.isDirectory()) {
@@ -10508,7 +10575,7 @@ var CheckCommand = class extends SmCommand {
       ["Print every current issue", "$0 check"],
       ["Machine-readable issue list", "$0 check --json"],
       ["Restrict to a single node", "$0 check -n .claude/agents/architect.md"],
-      ["Restrict to specific rules", "$0 check --analyzers core/broken-ref,core/validate-all"],
+      ["Restrict to specific rules", "$0 check --analyzers core/reference-broken,core/schema-violation"],
       ["Opt in to probabilistic analyzers (stub until Step 10)", "$0 check --include-prob"],
       ["Use a non-default DB file", "$0 check --db /path/to/skill-map.db"]
     ]
@@ -11489,6 +11556,52 @@ function disableEnv(setup) {
   if (setup?.disableAllAnalyzers) env["SKILL_MAP_DISABLE_ALL_ANALYZERS"] = "1";
   return env;
 }
+var SAFE_CONFORMANCE_ENV_KEYS = [
+  "PATH",
+  "HOME",
+  "USERPROFILE",
+  "TMPDIR",
+  "TMP",
+  "TEMP",
+  "SystemRoot",
+  "SystemDrive",
+  "OS",
+  "COMSPEC",
+  "PATHEXT",
+  "NODE_OPTIONS",
+  "NODE_PATH",
+  "NODE_NO_WARNINGS",
+  "NODE_DEBUG",
+  "LANG",
+  "TERM",
+  "COLORTERM",
+  "NO_COLOR",
+  "FORCE_COLOR",
+  "CI"
+];
+var SAFE_CONFORMANCE_ENV_PREFIXES = [
+  "LC_",
+  "SKILL_MAP_",
+  "SM_"
+];
+function pickSafeEnv(source) {
+  const out = {};
+  for (const key of SAFE_CONFORMANCE_ENV_KEYS) {
+    const value = source[key];
+    if (value !== void 0) out[key] = value;
+  }
+  for (const key of Object.keys(source)) {
+    if (out[key] !== void 0) continue;
+    for (const prefix of SAFE_CONFORMANCE_ENV_PREFIXES) {
+      if (key.startsWith(prefix)) {
+        const value = source[key];
+        if (value !== void 0) out[key] = value;
+        break;
+      }
+    }
+  }
+  return out;
+}
 function runConformanceCase(options) {
   const raw = readFileSync14(options.casePath, "utf8");
   const c = JSON.parse(raw);
@@ -11508,7 +11621,7 @@ function runConformanceCase(options) {
     if (c.invoke.flags) argv.push(...c.invoke.flags);
     const child = spawnSync2(process.execPath, [options.binary, ...argv], {
       cwd: scope,
-      env: { ...process.env, ...options.env, ...setupEnv },
+      env: { ...pickSafeEnv(process.env), ...options.env, ...setupEnv },
       encoding: "utf8"
     });
     const stdout = child.stdout ?? "";
@@ -11536,7 +11649,7 @@ function runPriorScansSetup(c, options, scope, fixturesRoot, setupEnv) {
     const stepArgv = ["scan", ...step.flags ?? []];
     const stepChild = spawnSync2(process.execPath, [options.binary, ...stepArgv], {
       cwd: scope,
-      env: { ...process.env, ...options.env, ...setupEnv },
+      env: { ...pickSafeEnv(process.env), ...options.env, ...setupEnv },
       encoding: "utf8"
     });
     if ((stepChild.status ?? 0) !== 0) {
@@ -14035,14 +14148,7 @@ function registeredVerbPaths(cli2) {
 }
 
 // cli/commands/hooks.ts
-import {
-  chmodSync,
-  existsSync as existsSync19,
-  mkdirSync as mkdirSync5,
-  readFileSync as readFileSync17,
-  statSync as statSync5,
-  writeFileSync as writeFileSync2
-} from "fs";
+import { chmod as chmod2, mkdir as mkdir3, readFile as readFile2, stat as stat2, writeFile } from "fs/promises";
 import { dirname as dirname16, resolve as resolve27 } from "path";
 import { Command as Command16, Option as Option15 } from "clipanion";
 
@@ -14136,7 +14242,7 @@ var HooksInstallCommand = class extends SmCommand {
       return ExitCode.Error;
     }
     const ctx = defaultRuntimeContext();
-    const repoRoot = findGitRepoRoot(ctx.cwd);
+    const repoRoot = await findGitRepoRoot(ctx.cwd);
     if (repoRoot === null) {
       this.printer.error(
         tx(HOOKS_TEXTS.notInGitRepo, {
@@ -14148,7 +14254,7 @@ var HooksInstallCommand = class extends SmCommand {
     }
     const hooksDir = resolve27(repoRoot, ".git", "hooks");
     const hookPath = resolve27(hooksDir, "pre-commit");
-    const existing = existsSync19(hookPath) ? readFileSync17(hookPath, "utf8") : null;
+    const existing = await pathExists(hookPath) ? await readFile2(hookPath, "utf8") : null;
     const planned2 = computePlannedHookContent(existing);
     if (planned2.kind === "already-installed") {
       this.printer.info(tx(HOOKS_TEXTS.alreadyInstalled, { glyph: okGlyph, hookPath }));
@@ -14174,9 +14280,9 @@ var HooksInstallCommand = class extends SmCommand {
       return ExitCode.Ok;
     }
     try {
-      if (!existsSync19(hooksDir)) mkdirSync5(hooksDir, { recursive: true });
-      writeFileSync2(hookPath, planned2.content, { encoding: "utf8" });
-      ensureExecutableBit(hookPath);
+      if (!await pathExists(hooksDir)) await mkdir3(hooksDir, { recursive: true });
+      await writeFile(hookPath, planned2.content, { encoding: "utf8" });
+      await ensureExecutableBit(hookPath);
     } catch (err) {
       this.printer.error(
         tx(HOOKS_TEXTS.installFailed, { glyph: errGlyph, message: formatErrorMessage(err) })
@@ -14202,10 +14308,10 @@ var HooksInstallCommand = class extends SmCommand {
     return ExitCode.Ok;
   }
 };
-function findGitRepoRoot(cwd) {
+async function findGitRepoRoot(cwd) {
   let current = cwd;
   while (true) {
-    if (existsSync19(resolve27(current, ".git"))) return current;
+    if (await pathExists(resolve27(current, ".git"))) return current;
     const parent = dirname16(current);
     if (parent === current) return null;
     current = parent;
@@ -14216,22 +14322,22 @@ function computePlannedHookContent(existing) {
   if (existing.includes(SKILL_MAP_MARKER)) {
     return { kind: "already-installed", content: existing };
   }
-  const sep6 = existing.endsWith("\n") ? "" : "\n";
-  return { kind: "chained", content: existing + sep6 + "\n" + SKILL_MAP_BLOCK };
+  const sep8 = existing.endsWith("\n") ? "" : "\n";
+  return { kind: "chained", content: existing + sep8 + "\n" + SKILL_MAP_BLOCK };
 }
-function ensureExecutableBit(path) {
-  const mode = statSync5(path).mode;
-  chmodSync(path, mode | 73);
+async function ensureExecutableBit(path) {
+  const mode = (await stat2(path)).mode;
+  await chmod2(path, mode | 73);
 }
 var HOOKS_COMMANDS = [HooksInstallCommand];
 
 // cli/commands/init.ts
-import { mkdir as mkdir3, readFile as readFile2, unlink, writeFile } from "fs/promises";
+import { mkdir as mkdir4, readFile as readFile3, unlink, writeFile as writeFile2 } from "fs/promises";
 import { join as join17 } from "path";
 import { Command as Command17, Option as Option16 } from "clipanion";
 
 // kernel/orchestrator/index.ts
-import { existsSync as existsSync22, statSync as statSync7 } from "fs";
+import { existsSync as existsSync21, statSync as statSync6 } from "fs";
 import { isAbsolute as isAbsolute7, resolve as resolve28 } from "path";
 import { Tiktoken as Tiktoken2 } from "js-tiktoken/lite";
 import cl100k_base from "js-tiktoken/ranks/cl100k_base";
@@ -14592,7 +14698,8 @@ function recomputeLinkCounts(nodes, links) {
   for (const link of links) {
     const source = byPath3.get(link.source);
     if (source) source.linksOutCount += 1;
-    const target = byPath3.get(link.target);
+    const targetKey = link.resolvedTarget ?? link.target;
+    const target = byPath3.get(targetKey);
     if (target) target.linksInCount += 1;
   }
 }
@@ -15265,8 +15372,8 @@ function computeDriftStatus(args2) {
 }
 
 // kernel/sidecar/discover-orphans.ts
-import { existsSync as existsSync20, readdirSync as readdirSync7, statSync as statSync6 } from "fs";
-import { join as join13, relative as relative4, sep as sep3 } from "path";
+import { existsSync as existsSync19, readdirSync as readdirSync7, statSync as statSync5 } from "fs";
+import { join as join13, relative as relative4, sep as sep4 } from "path";
 function discoverOrphanSidecars(roots, shouldSkip) {
   const out = [];
   for (const root of roots) {
@@ -15283,7 +15390,7 @@ function walk(root, current, shouldSkip, out) {
   }
   for (const entry of entries) {
     const full = join13(current, entry.name);
-    const rel = relative4(root, full).split(sep3).join("/");
+    const rel = relative4(root, full).split(sep4).join("/");
     if (shouldSkip(rel)) continue;
     if (entry.isSymbolicLink()) continue;
     if (entry.isDirectory()) {
@@ -15293,13 +15400,13 @@ function walk(root, current, shouldSkip, out) {
     if (!entry.isFile()) continue;
     if (!entry.name.endsWith(".sm")) continue;
     const expectedMd = `${full.slice(0, -".sm".length)}.md`;
-    if (existsSync20(expectedMd) && safeIsFile(expectedMd)) continue;
+    if (existsSync19(expectedMd) && safeIsFile(expectedMd)) continue;
     out.push({ sidecarPath: full, relativePath: rel, expectedMdPath: expectedMd });
   }
 }
 function safeIsFile(path) {
   try {
-    return statSync6(path).isFile();
+    return statSync5(path).isFile();
   } catch {
     return false;
   }
@@ -15307,7 +15414,7 @@ function safeIsFile(path) {
 
 // kernel/orchestrator/node-build.ts
 import { createHash } from "crypto";
-import { existsSync as existsSync21 } from "fs";
+import { existsSync as existsSync20 } from "fs";
 import { isAbsolute as isAbsolute6, resolve as resolvePath } from "path";
 import "js-tiktoken/lite";
 import yaml4 from "js-yaml";
@@ -15471,11 +15578,11 @@ function resolveSidecarOverlay(relativePath2, nodePathForIssue, roots, liveBodyH
 }
 function resolveAbsoluteMdPath(relativePath2, roots) {
   if (isAbsolute6(relativePath2)) {
-    return existsSync21(relativePath2) ? relativePath2 : null;
+    return existsSync20(relativePath2) ? relativePath2 : null;
   }
   for (const root of roots) {
     const candidate = resolvePath(root, relativePath2);
-    if (existsSync21(candidate)) return candidate;
+    if (existsSync20(candidate)) return candidate;
   }
   return null;
 }
@@ -16016,7 +16123,7 @@ function validateRoots(roots) {
     throw new Error(ORCHESTRATOR_TEXTS.runScanRootEmptyArray);
   }
   for (const root of roots) {
-    if (!existsSync22(root) || !statSync7(root).isDirectory()) {
+    if (!existsSync21(root) || !statSync6(root).isDirectory()) {
       throw new Error(tx(ORCHESTRATOR_TEXTS.runScanRootMissing, { root }));
     }
   }
@@ -16025,7 +16132,7 @@ function resolveActiveProviderOption(optionValue, roots) {
   if (optionValue !== void 0) return optionValue;
   for (const root of roots) {
     const absRoot = isAbsolute7(root) ? root : resolve28(root);
-    if (!existsSync22(absRoot)) continue;
+    if (!existsSync21(absRoot)) continue;
     const detected = resolveActiveProvider(absRoot).resolved;
     if (detected !== null) return detected;
   }
@@ -16033,7 +16140,7 @@ function resolveActiveProviderOption(optionValue, roots) {
 }
 
 // kernel/scan/watcher.ts
-import { resolve as resolve29, relative as relative5, sep as sep4 } from "path";
+import { resolve as resolve29, relative as relative5, sep as sep5 } from "path";
 import chokidar from "chokidar";
 function createChokidarWatcher(opts) {
   const absRoots = opts.roots.map((r) => resolve29(opts.cwd, r));
@@ -16131,8 +16238,8 @@ function relativePathFromRoots2(absolute, absRoots) {
   for (const root of absRoots) {
     const rel = relative5(root, absolute);
     if (rel === "" || rel === ".") return "";
-    if (!rel.startsWith("..") && !rel.startsWith(`..${sep4}`)) {
-      return rel.split(sep4).join("/");
+    if (!rel.startsWith("..") && !rel.startsWith(`..${sep5}`)) {
+      return rel.split(sep5).join("/");
     }
   }
   return null;
@@ -16254,13 +16361,13 @@ function createKernel() {
 }
 
 // kernel/jobs/orphan-files.ts
-import { readdirSync as readdirSync8, statSync as statSync8 } from "fs";
+import { readdirSync as readdirSync8, statSync as statSync7 } from "fs";
 import { join as join14, resolve as resolve30 } from "path";
 function findOrphanJobFiles(jobsDir, referencedPaths) {
   let entries;
   try {
-    const stat2 = statSync8(jobsDir);
-    if (!stat2.isDirectory()) {
+    const stat3 = statSync7(jobsDir);
+    if (!stat3.isDirectory()) {
       return { orphanFilePaths: [], referencedCount: referencedPaths.size };
     }
     entries = readdirSync8(jobsDir, { withFileTypes: true });
@@ -16328,7 +16435,7 @@ var SCAN_RUNNER_TEXTS = {
   priorSchemaValidationFailed: "prior scan-result loaded from DB failed schema validation: {{errors}}. Run `sm db backup` then re-scan without --strict to rebuild from disk.",
   /**
    * Reference-paths walker hit `REFERENCE_WALK_MAX_FILES` and stopped
-   * early. The set may be incomplete for link validation; `core/broken-ref`
+   * early. The set may be incomplete for link validation; `core/reference-broken`
    * still works against whatever made it in.
    */
   referenceWalkTruncated: "scan.referencePaths: walker truncated at the 50000-file safety cap. Some link targets may flag as broken even though they exist on disk. Trim the configured paths to dirs you actually need to validate against.",
@@ -16422,7 +16529,7 @@ function resolveScanRoots(inputs) {
 }
 
 // core/runtime/reference-paths-walker.ts
-import { readdirSync as readdirSync9, statSync as statSync9 } from "fs";
+import { readdirSync as readdirSync9, statSync as statSync8 } from "fs";
 import { homedir as osHomedir2 } from "os";
 import { isAbsolute as isAbsolute8, join as join15, resolve as resolve31 } from "path";
 var REFERENCE_WALK_MAX_FILES = 5e4;
@@ -16444,8 +16551,8 @@ function walkReferencePaths(rawRoots, cwd) {
   for (const raw of rawRoots) {
     if (truncated) break;
     const root = resolveScanPath(raw, cwd);
-    const stat2 = safeStat(root);
-    if (!stat2 || !stat2.isDirectory()) {
+    const stat3 = safeStat(root);
+    if (!stat3 || !stat3.isDirectory()) {
       missingRoots.push(root);
       continue;
     }
@@ -16476,7 +16583,7 @@ function walkInto(dir, out) {
 }
 function safeStat(path) {
   try {
-    return statSync9(path);
+    return statSync8(path);
   } catch {
     return null;
   }
@@ -16979,7 +17086,7 @@ var InitCommand = class extends SmCommand {
     const printer = this.printer ?? createPrinter({
       stdout: this.context.stdout,
       stderr: this.context.stderr,
-      quietInfo: this.quiet
+      quietInfo: this.quiet || this.json
     });
     if (this.dryRun) {
       await writeDryRunPlan(printer, {
@@ -16994,7 +17101,7 @@ var InitCommand = class extends SmCommand {
       });
       return ExitCode.Ok;
     }
-    await mkdir3(skillMapDir, { recursive: true });
+    await mkdir4(skillMapDir, { recursive: true });
     writeFileAtomicExclusive(settingsPath, JSON.stringify({ schemaVersion: 1 }, null, 2) + "\n");
     if (!await pathExists(localPath) || this.force) {
       writeFileAtomicExclusive(localPath, "{}\n");
@@ -17168,7 +17275,7 @@ async function runFirstScan(scopeRoot, strict, printer, stderr, stdin, ansi) {
 }
 async function previewGitignoreEntries(scopeRoot, entries) {
   const path = join17(scopeRoot, ".gitignore");
-  const body = await pathExists(path) ? await readFile2(path, "utf8") : "";
+  const body = await pathExists(path) ? await readFile3(path, "utf8") : "";
   const present = new Set(
     body.split("\n").map((line) => line.trim()).filter((line) => line.length > 0 && !line.startsWith("#"))
   );
@@ -17178,7 +17285,7 @@ async function ensureGitignoreEntries(scopeRoot, entries) {
   const path = join17(scopeRoot, ".gitignore");
   let body = "";
   if (await pathExists(path)) {
-    body = await readFile2(path, "utf8");
+    body = await readFile3(path, "utf8");
   }
   const present = new Set(
     body.split("\n").map((line) => line.trim()).filter((line) => line.length > 0 && !line.startsWith("#"))
@@ -17192,7 +17299,7 @@ async function ensureGitignoreEntries(scopeRoot, entries) {
     present.add(entry);
     changed = true;
   }
-  if (changed) await writeFile(path, body);
+  if (changed) await writeFile2(path, body);
   return changed;
 }
 
@@ -18894,6 +19001,27 @@ var PLUGINS_TEXTS = {
   slotsListTipText: "Tip: full spec at spec/view-slots.md and spec/input-types.md."
 };
 
+// plugins/presentation-order.ts
+var BUILT_IN_BUNDLE_PRESENTATION_ORDER = [
+  "core",
+  "claude",
+  "antigravity",
+  "openai",
+  "agent-skills"
+];
+function sortBundlesForPresentation(bundles) {
+  const orderIndex = (id) => {
+    const idx = BUILT_IN_BUNDLE_PRESENTATION_ORDER.indexOf(id);
+    return idx >= 0 ? idx : BUILT_IN_BUNDLE_PRESENTATION_ORDER.length;
+  };
+  return [...bundles].sort((a, b) => {
+    const ai = orderIndex(a.id);
+    const bi = orderIndex(b.id);
+    if (ai !== bi) return ai - bi;
+    return a.id.localeCompare(b.id);
+  });
+}
+
 // cli/commands/plugins/shared.ts
 import { resolve as resolve32 } from "path";
 function resolveSearchPaths2(opts, cwd) {
@@ -18923,7 +19051,7 @@ async function loadAll(opts) {
   return loader.discoverAndLoadAll();
 }
 function builtInRows(resolveEnabled) {
-  return builtInBundles.map((bundle) => {
+  return sortBundlesForPresentation(builtInBundles).map((bundle) => {
     const bundleEnabled = resolveEnabled(bundle.id);
     const extensions = bundle.extensions.map((ext) => extensionRowFromBuiltIn(ext, bundle, bundleEnabled, resolveEnabled));
     const manifestSummary = bundle.extensions.map((ext) => `${ext.kind}:${qualifiedExtensionId(bundle.id, ext.id)}@${ext.version}`).join(", ");
@@ -18938,11 +19066,12 @@ function builtInRows(resolveEnabled) {
   });
 }
 function extensionRowFromBuiltIn(ext, bundle, bundleEnabled, resolveEnabled) {
+  const qualifiedEnabled = resolveEnabled(qualifiedExtensionId(bundle.id, ext.id));
   const row = {
     id: ext.id,
     kind: ext.kind,
     version: ext.version,
-    enabled: bundle.granularity === "bundle" ? bundleEnabled : resolveEnabled(qualifiedExtensionId(bundle.id, ext.id)),
+    enabled: bundle.granularity === "bundle" ? bundleEnabled && qualifiedEnabled : qualifiedEnabled,
     description: ext.description ?? ""
   };
   if (ext.entry !== void 0) row.entry = ext.entry;
@@ -19058,10 +19187,10 @@ function pluginToListRow(p) {
 }
 function wrapNames(names, indent, maxWidth) {
   const out = [];
-  const sep6 = ", ";
+  const sep8 = ", ";
   let current = "";
   for (const name of names) {
-    const candidate = current === "" ? name : `${current}${sep6}${name}`;
+    const candidate = current === "" ? name : `${current}${sep8}${name}`;
     if (indent.length + candidate.length > maxWidth && current !== "") {
       out.push(`${current},`);
       current = name;
@@ -19629,10 +19758,13 @@ function extensionInstance(ext) {
 }
 function collectKnownKinds(plugins) {
   const known = /* @__PURE__ */ new Set();
-  forEachProviderInstance(plugins, ({ instance }) => {
+  forEachProviderInstance(plugins, ({ pluginId, instance }) => {
     const map = instance["kinds"];
     if (map === null || typeof map !== "object") return;
-    for (const k of Object.keys(map)) known.add(k);
+    for (const k of Object.keys(map)) {
+      known.add(k);
+      known.add(qualifiedExtensionId(pluginId, k));
+    }
   });
   return known;
 }
@@ -19881,7 +20013,7 @@ var TogglePluginsBase = class extends SmCommand {
    * the plugin's `scan_contributions` rows immediately (matches the
    * BFF route, see `server/routes/plugins.ts:applyChangeToAdapter`).
    * `targets` carries either a bare bundle id (e.g. `claude`) or a
-   * qualified `<bundle>/<ext>` (e.g. `core/slash`); the split mirrors
+   * qualified `<bundle>/<ext>` (e.g. `core/slash-command`); the split mirrors
    * how the catalog sweep groups rows.
    */
   async #persistTargets(targets, enabled) {
@@ -20066,7 +20198,7 @@ function resolveBareToggle(id, catalogue, verb, ansi) {
 }
 
 // cli/commands/plugins/create.ts
-import { existsSync as existsSync23, mkdirSync as mkdirSync6, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync22, mkdirSync as mkdirSync5, writeFileSync } from "fs";
 import { join as join18, resolve as resolve33 } from "path";
 import { Command as Command26, Option as Option25 } from "clipanion";
 var PluginsCreateCommand = class extends SmCommand {
@@ -20095,7 +20227,7 @@ var PluginsCreateCommand = class extends SmCommand {
     const ctx = defaultRuntimeContext();
     const baseDir = defaultProjectPluginsDir(ctx);
     const targetDir = this.at ? resolve33(this.at) : join18(baseDir, this.pluginId);
-    if (existsSync23(targetDir) && !this.force) {
+    if (existsSync22(targetDir) && !this.force) {
       this.printer.error(
         tx(PLUGINS_TEXTS.createRefuseOverwrite, {
           glyph: errGlyph,
@@ -20106,7 +20238,7 @@ var PluginsCreateCommand = class extends SmCommand {
       return ExitCode.Error;
     }
     const extractorName = `${this.pluginId}-extractor`;
-    mkdirSync6(join18(targetDir, "extractors", extractorName), { recursive: true });
+    mkdirSync5(join18(targetDir, "extractors", extractorName), { recursive: true });
     const specVersion = installedSpecVersion();
     const manifest = {
       id: this.pluginId,
@@ -20125,15 +20257,15 @@ var PluginsCreateCommand = class extends SmCommand {
         }
       }
     };
-    writeFileSync3(
+    writeFileSync(
       join18(targetDir, "plugin.json"),
       JSON.stringify(manifest, null, 2) + "\n"
     );
-    writeFileSync3(
+    writeFileSync(
       join18(targetDir, "extractors", extractorName, "index.js"),
       scaffolderExtractorStub(extractorName)
     );
-    writeFileSync3(join18(targetDir, "README.md"), scaffolderReadme(this.pluginId));
+    writeFileSync(join18(targetDir, "README.md"), scaffolderReadme(this.pluginId));
     this.printer.data(
       tx(PLUGINS_TEXTS.createSuccess, {
         targetDir: sanitizeForTerminal(targetDir),
@@ -20335,7 +20467,7 @@ var PLUGIN_COMMANDS = [
 ];
 
 // cli/commands/refresh.ts
-import { readFile as readFile3 } from "fs/promises";
+import { readFile as readFile4 } from "fs/promises";
 import { resolve as resolve34 } from "path";
 import { Command as Command29, Option as Option27 } from "clipanion";
 
@@ -20642,7 +20774,7 @@ var RefreshCommand = class extends SmCommand {
       let body;
       try {
         assertContained(cwd, node.path);
-        const raw = await readFile3(resolve34(cwd, node.path), "utf8");
+        const raw = await readFile4(resolve34(cwd, node.path), "utf8");
         body = stripFrontmatterFence(raw);
       } catch (err) {
         if (!this.json) {
@@ -21491,7 +21623,7 @@ var ScanCommand = class extends SmCommand {
     }
     return null;
   }
-  /** Render the failure branch of `IScanRunResult` to stderr. */
+  /** Render the failure branch of `TScanRunResult` to stderr. */
   renderFailure(outcome) {
     const ansi = this.ansiFor("stderr");
     const errGlyph = ansi.red("\u2715");
@@ -21570,7 +21702,7 @@ var ScanCommand = class extends SmCommand {
         this.printer.info(
           tx(SCAN_TEXTS.jsonSelfValidationFailed, {
             glyph: ansi.red("\u2715"),
-            errors: validation.errors
+            errors: JSON.stringify(validation.errors, null, 2)
           })
         );
         return ExitCode.Error;
@@ -21591,7 +21723,7 @@ function plural(count, word) {
 }
 
 // cli/commands/scan-compare.ts
-import { existsSync as existsSync24, readFileSync as readFileSync18 } from "fs";
+import { access, readFile as readFile5 } from "fs/promises";
 import { Command as Command32, Option as Option30 } from "clipanion";
 var ScanCompareCommand = class extends SmCommand {
   static paths = [["scan", "compare-with"]];
@@ -21644,7 +21776,7 @@ var ScanCompareCommand = class extends SmCommand {
     const roots = this.roots.length > 0 ? this.roots : ["."];
     let prior;
     try {
-      prior = loadAndValidateDump(this.dump);
+      prior = await loadAndValidateDump(this.dump);
     } catch (err) {
       const message = formatErrorMessage(err);
       this.printer.info(tx(SCAN_TEXTS.compareErrorPrefix, { message }));
@@ -21702,13 +21834,15 @@ var ScanCompareCommand = class extends SmCommand {
     return exitCode2;
   }
 };
-function loadAndValidateDump(path) {
-  if (!existsSync24(path)) {
+async function loadAndValidateDump(path) {
+  try {
+    await access(path);
+  } catch {
     throw new Error(tx(SCAN_TEXTS.compareDumpNotFound, { path }));
   }
   let raw;
   try {
-    raw = readFileSync18(path, "utf8");
+    raw = await readFile5(path, "utf8");
   } catch (err) {
     const message = formatErrorMessage(err);
     throw new Error(tx(SCAN_TEXTS.compareDumpReadFailed, { path, message }), { cause: err });
@@ -21833,9 +21967,21 @@ function renderDeltaIssues(issues) {
 
 // cli/commands/serve.ts
 import { spawn as spawn2 } from "child_process";
-import { existsSync as existsSync30 } from "fs";
+import { existsSync as existsSync28 } from "fs";
 import { Command as Command33, Option as Option31 } from "clipanion";
 
+// kernel/util/dev-mode.ts
+import { sep as sep6 } from "path";
+import { fileURLToPath as fileURLToPath5 } from "url";
+var SELF_PATH = fileURLToPath5(import.meta.url);
+var IS_DEV_BUILD = isDevBuildFromPath(SELF_PATH, sep6);
+function isDevBuildFromPath(filePath, separator = sep6) {
+  return !filePath.includes(`${separator}node_modules${separator}`);
+}
+function isDevBuild() {
+  return IS_DEV_BUILD;
+}
+
 // cli/util/browser-launch.ts
 function validateBrowserUrl(url) {
   if (typeof url !== "string" || url.length === 0) return false;
@@ -22459,7 +22605,7 @@ function registerFavoritesRoutes(app, deps) {
     );
     if (!result || !result.found) {
       throw new HTTPException4(404, {
-        message: tx(SERVER_TEXTS.nodeNotFound, { path: nodePath })
+        message: tx(SERVER_TEXTS.nodeNotFound, { path: sanitizeForTerminal(nodePath) })
       });
     }
     return c.body(null, 204);
@@ -22546,17 +22692,21 @@ function contentTypeFor(format) {
 }
 
 // server/health.ts
-import { existsSync as existsSync25 } from "fs";
+import { existsSync as existsSync23 } from "fs";
 var FALLBACK_SCHEMA_VERSION = "1";
 function buildHealth(deps) {
+  const dev = isDevBuild();
   return {
     ok: true,
     schemaVersion: FALLBACK_SCHEMA_VERSION,
     specVersion: deps.specVersion,
     implVersion: VERSION,
-    db: existsSync25(deps.dbPath) ? "present" : "missing",
+    db: existsSync23(deps.dbPath) ? "present" : "missing",
     cwd: deps.cwd,
-    dbPath: deps.dbPath
+    dbPath: deps.dbPath,
+    // Only emit when truthy so a published install keeps the wire
+    // shape lean and consumers branch on presence alone.
+    ...dev ? { dev: true } : {}
   };
 }
 var cachedSpecVersion = null;
@@ -22586,47 +22736,60 @@ function registerHealthRoute(app, deps) {
   });
 }
 
-// server/routes/issues.ts
+// server/limits.ts
 var DEFAULT_LIMIT = 100;
 var MAX_LIMIT = 1e3;
+var BFF_MAX_BULK_CONTRIBUTIONS = 200;
+
+// server/routes/issues.ts
 function registerIssuesRoute(app, deps) {
   app.get("/api/issues", async (c) => {
-    const severityFilter = parseCsv(c.req.query("severity"));
-    const analyzerFilter = parseCsv(c.req.query("analyzerId"));
-    const nodePath = c.req.query("node") ?? null;
-    const { offset, limit } = parsePagination(c.req.query(), {
-      limit: DEFAULT_LIMIT,
-      max: MAX_LIMIT
-    });
+    const inputs = parseIssuesQuery(c.req.query());
     const result = await tryWithSqlite(
       { databasePath: deps.options.dbPath, autoBackup: false },
-      (adapter) => adapter.issues.list({
-        severities: severityFilter,
-        analyzerIds: analyzerFilter,
-        nodePath,
-        offset,
-        limit
-      })
+      (adapter) => adapter.issues.list(inputs.filter)
     );
-    const items = result?.items ?? [];
-    const total = result?.total ?? 0;
     return c.json(
       buildListEnvelope({
         kind: "issues",
-        items,
-        filters: {
-          severity: severityFilter.length > 0 ? severityFilter : null,
-          analyzerId: analyzerFilter.length > 0 ? analyzerFilter : null,
-          node: nodePath
-        },
-        total,
-        page: { offset, limit },
+        items: result?.items ?? [],
+        filters: inputs.echo,
+        total: result?.total ?? 0,
+        page: { offset: inputs.filter.offset, limit: inputs.filter.limit },
         kindRegistry: deps.kindRegistry,
         contributionsRegistry: deps.contributionsRegistry
       })
     );
   });
 }
+function parseIssuesQuery(query) {
+  const severityFilter = parseCsv(query["severity"]);
+  const analyzerFilter = parseCsv(query["analyzerId"]);
+  const nodePath = query["node"] ?? null;
+  const nodesRaw = parseCsv(query["nodes"]);
+  const nodesFilter = nodesRaw.length > 0 ? nodesRaw : null;
+  const { offset, limit } = parsePagination(query, {
+    limit: DEFAULT_LIMIT,
+    max: MAX_LIMIT
+  });
+  const filter = {
+    severities: severityFilter,
+    analyzerIds: analyzerFilter,
+    nodePath,
+    offset,
+    limit
+  };
+  if (nodesFilter) filter.nodePaths = nodesFilter;
+  return {
+    filter,
+    echo: {
+      severity: severityFilter.length > 0 ? severityFilter : null,
+      analyzerId: analyzerFilter.length > 0 ? analyzerFilter : null,
+      node: nodePath,
+      nodes: nodesFilter
+    }
+  };
+}
 
 // server/routes/links.ts
 function registerLinksRoute(app, deps) {
@@ -22666,22 +22829,30 @@ function registerLinksRoute(app, deps) {
 import { HTTPException as HTTPException6 } from "hono/http-exception";
 
 // server/node-body.ts
-import { readFile as readFile4 } from "fs/promises";
-import { isAbsolute as isAbsolute10, resolve as resolvePath2, relative as relativePath, sep as sep5 } from "path";
+import { constants as fsConstants2 } from "fs";
+import { open } from "fs/promises";
+import { isAbsolute as isAbsolute10, resolve as resolvePath2, relative as relativePath, sep as sep7 } from "path";
 async function readNodeBody(cwd, relPath) {
   if (isAbsolute10(relPath)) return null;
   const absRoot = resolvePath2(cwd);
   const absFile = resolvePath2(absRoot, relPath);
   const rel = relativePath(absRoot, absFile);
-  if (rel.startsWith("..") || rel.startsWith(sep5) || rel.length === 0) {
+  if (rel.startsWith("..") || rel.startsWith(sep7) || rel.length === 0) {
     return null;
   }
   let raw;
+  let handle = null;
   try {
-    raw = await readFile4(absFile, "utf-8");
+    handle = await open(absFile, fsConstants2.O_RDONLY | fsConstants2.O_NOFOLLOW);
+    raw = await handle.readFile("utf-8");
   } catch (err) {
     if (isExpectedFsError(err)) return null;
     throw err;
+  } finally {
+    if (handle !== null) {
+      await handle.close().catch(() => {
+      });
+    }
   }
   return stripFrontmatter(raw);
 }
@@ -22691,7 +22862,16 @@ function stripFrontmatter(raw) {
   if (!match) return raw;
   return raw.slice(match[0].length);
 }
-var EXPECTED_FS_ERROR_CODES = /* @__PURE__ */ new Set(["ENOENT", "EACCES", "EISDIR", "ENOTDIR"]);
+var EXPECTED_FS_ERROR_CODES = /* @__PURE__ */ new Set([
+  "ENOENT",
+  "EACCES",
+  "EISDIR",
+  "ENOTDIR",
+  // `O_NOFOLLOW` opens fail with `ELOOP` on Linux / macOS when the
+  // leaf is a symlink. Treat the same as "body unavailable" so the
+  // BFF returns null, not a 500.
+  "ELOOP"
+]);
 function isExpectedFsError(err) {
   if (err === null || typeof err !== "object") return false;
   const code = err.code;
@@ -22749,9 +22929,6 @@ function splitCsv(raw) {
 }
 
 // server/routes/nodes.ts
-var DEFAULT_LIMIT2 = 100;
-var MAX_LIMIT2 = 1e3;
-var BFF_MAX_BULK_CONTRIBUTIONS = 200;
 function registerNodesRoutes(app, deps) {
   app.get("/api/nodes/:pathB64", async (c) => {
     const pathB64 = c.req.param("pathB64");
@@ -22813,8 +22990,8 @@ function registerNodesRoutes(app, deps) {
     const params = new URL(c.req.url).searchParams;
     const { query, filters } = urlParamsToExportQuery(params);
     const { offset, limit } = parsePagination(c.req.query(), {
-      limit: DEFAULT_LIMIT2,
-      max: MAX_LIMIT2
+      limit: DEFAULT_LIMIT,
+      max: MAX_LIMIT
     });
     const opened = await tryWithSqlite(
       { databasePath: deps.options.dbPath, autoBackup: false },
@@ -23100,7 +23277,7 @@ function listItems(deps, resolveEnabled) {
   ];
 }
 function buildBuiltInItems(resolveEnabled) {
-  return builtInBundles.map((bundle) => {
+  return sortBundlesForPresentation(builtInBundles).map((bundle) => {
     const bundleEnabled = resolveEnabled(bundle.id);
     const bundleLocked = isPluginLocked(bundle.id);
     const extensions = bundle.extensions.map((ext) => {
@@ -23389,15 +23566,15 @@ var parsePatchBody2 = makeBodyValidator(PATCH_BODY_SCHEMA, {
 import { HTTPException as HTTPException10 } from "hono/http-exception";
 
 // server/util/skillmapignore-io.ts
-import { existsSync as existsSync26, readFileSync as readFileSync19, writeFileSync as writeFileSync4 } from "fs";
+import { existsSync as existsSync24, readFileSync as readFileSync17, writeFileSync as writeFileSync2 } from "fs";
 import { resolve as resolve35 } from "path";
 var IGNORE_FILENAME2 = ".skillmapignore";
 function readPatterns(cwd) {
   const path = resolve35(cwd, IGNORE_FILENAME2);
-  if (!existsSync26(path)) return [];
+  if (!existsSync24(path)) return [];
   let raw;
   try {
-    raw = readFileSync19(path, "utf8");
+    raw = readFileSync17(path, "utf8");
   } catch {
     return [];
   }
@@ -23405,13 +23582,13 @@ function readPatterns(cwd) {
 }
 function writePatterns(cwd, nextPatterns) {
   const path = resolve35(cwd, IGNORE_FILENAME2);
-  const prior = existsSync26(path) ? safeRead(path) : "";
+  const prior = existsSync24(path) ? safeRead(path) : "";
   const content = buildContent(prior, nextPatterns);
-  writeFileSync4(path, content, "utf8");
+  writeFileSync2(path, content, "utf8");
 }
 function safeRead(path) {
   try {
-    return readFileSync19(path, "utf8");
+    return readFileSync17(path, "utf8");
   } catch {
     return "";
   }
@@ -23566,7 +23743,7 @@ var parsePatchBody3 = makeBodyValidator(PATCH_BODY_SCHEMA2, {
 });
 
 // server/routes/project-preferences.ts
-import { statSync as statSync10 } from "fs";
+import { statSync as statSync9 } from "fs";
 import { HTTPException as HTTPException11 } from "hono/http-exception";
 function registerProjectPreferencesRoute(app, deps) {
   app.get("/api/project-preferences", (c) => {
@@ -23715,7 +23892,7 @@ function formatPathDetail(path, cwd) {
 function isExistingDirectory(entry, cwd) {
   const abs = resolveScanPath(entry, cwd);
   try {
-    return statSync10(abs).isDirectory();
+    return statSync9(abs).isDirectory();
   } catch {
     return false;
   }
@@ -23755,7 +23932,7 @@ var parsePatchBody4 = makeBodyValidator(PATCH_BODY_SCHEMA3, {
 });
 
 // server/routes/active-provider.ts
-import { existsSync as existsSync27 } from "fs";
+import { existsSync as existsSync25 } from "fs";
 import { HTTPException as HTTPException12 } from "hono/http-exception";
 function registerActiveProviderRoute(app, deps) {
   app.get("/api/active-provider", (c) => {
@@ -23788,7 +23965,7 @@ function applyLensSwitch(deps, newValue) {
     });
   }
   const dbPath = resolveDbPath({ db: void 0, cwd });
-  if (!existsSync27(dbPath)) return { dropped: null };
+  if (!existsSync25(dbPath)) return { dropped: null };
   const dropResult = dropScanZone(dbPath);
   return {
     dropped: {
@@ -24180,7 +24357,7 @@ function registerSidecarRoutes(app, deps) {
       assertContained(deps.runtimeContext.cwd, node.path);
       absPath = resolve36(deps.runtimeContext.cwd, node.path);
     } catch (err) {
-      throw new HTTPException14(500, { message: formatErrorMessage(err) });
+      throw new HTTPException14(400, { message: formatErrorMessage(err) });
     }
     const result = invokeBump2(node, absPath, body);
     if (result.report.ok === false && result.report.reason === "fresh") {
@@ -24255,12 +24432,12 @@ async function loadNode(deps, nodePath) {
   return node;
 }
 function invokeBump2(node, absPath, body) {
-  if (!bumpAction.invoke) {
+  if (!nodeBumpAction.invoke) {
     throw new HTTPException14(500, { message: SERVER_TEXTS.sidecarBumpInvokeMissing });
   }
   const input = {};
   if (body.force === true) input.force = true;
-  return bumpAction.invoke(input, {
+  return nodeBumpAction.invoke(input, {
     node,
     nodeAbsolutePath: absPath,
     invoker: "ui",
@@ -24302,8 +24479,8 @@ function registerUpdateStatusRoute(app, deps) {
 }
 
 // server/static.ts
-import { existsSync as existsSync28 } from "fs";
-import { readFile as readFile5 } from "fs/promises";
+import { existsSync as existsSync26 } from "fs";
+import { readFile as readFile6 } from "fs/promises";
 import { extname, join as join19 } from "path";
 import { serveStatic } from "@hono/node-server/serve-static";
 var INDEX_HTML = "index.html";
@@ -24357,7 +24534,7 @@ function createSpaFallback(opts) {
     if (c.req.method !== "GET" && c.req.method !== "HEAD") return c.notFound();
     if (opts.uiDist === null) return htmlResponse(c, placeholder);
     const indexPath = join19(opts.uiDist, INDEX_HTML);
-    if (!existsSync28(indexPath)) return htmlResponse(c, placeholder);
+    if (!existsSync26(indexPath)) return htmlResponse(c, placeholder);
     return fileResponse(c, indexPath);
   };
 }
@@ -24399,7 +24576,7 @@ function htmlResponse(c, html) {
   return c.body(html, 200, { "content-type": "text/html; charset=UTF-8" });
 }
 async function fileResponse(c, absPath) {
-  const buf = await readFile5(absPath);
+  const buf = await readFile6(absPath);
   return c.body(buf, 200, { "content-type": mimeFor(absPath) });
 }
 
@@ -24929,9 +25106,9 @@ function validateNoUi(noUi, uiDist) {
 }
 
 // server/paths.ts
-import { existsSync as existsSync29, statSync as statSync11 } from "fs";
+import { existsSync as existsSync27, statSync as statSync10 } from "fs";
 import { dirname as dirname18, isAbsolute as isAbsolute11, join as join20, resolve as resolve37 } from "path";
-import { fileURLToPath as fileURLToPath5 } from "url";
+import { fileURLToPath as fileURLToPath6 } from "url";
 var DEFAULT_UI_REL = join20("ui", "dist", "ui", "browser");
 var PACKAGE_UI_REL = "ui";
 var INDEX_HTML2 = "index.html";
@@ -24944,10 +25121,10 @@ function resolveExplicitUiDist(ctx, raw) {
   return isAbsolute11(raw) ? raw : resolve37(ctx.cwd, raw);
 }
 function isUiBundleDir(path) {
-  if (!existsSync29(path)) return false;
+  if (!existsSync27(path)) return false;
   try {
-    if (!statSync11(path).isDirectory()) return false;
-    return existsSync29(join20(path, INDEX_HTML2));
+    if (!statSync10(path).isDirectory()) return false;
+    return existsSync27(join20(path, INDEX_HTML2));
   } catch {
     return false;
   }
@@ -24955,7 +25132,7 @@ function isUiBundleDir(path) {
 function resolvePackageBundledUi() {
   let here;
   try {
-    here = dirname18(fileURLToPath5(import.meta.url));
+    here = dirname18(fileURLToPath6(import.meta.url));
   } catch {
     return null;
   }
@@ -25247,7 +25424,9 @@ var ESC2 = {
   /** 256-color violet (xterm 141). */
   violet: "\x1B[38;5;141m",
   /** 256-color green (xterm 42). */
-  green: "\x1B[38;5;42m"
+  green: "\x1B[38;5;42m",
+  /** 256-color yellow (xterm 214), matches `cli/util/ansi.ts:yellow`. */
+  yellow: "\x1B[38;5;214m"
 };
 var LOGO_LINES = [
   "  ____  _    _ _ _   __  __             ",
@@ -25267,7 +25446,8 @@ function renderBanner(input) {
       host: input.host,
       port: input.port,
       dbPath: input.dbPath,
-      openBrowser: input.openBrowser
+      openBrowser: input.openBrowser,
+      dev: input.dev === true
     });
   }
   return renderFiglet({
@@ -25277,7 +25457,8 @@ function renderBanner(input) {
     pathDisplay: formatCwdPath(input.cwd),
     browserLine,
     colorEnabled: input.colorEnabled,
-    referencePaths: input.referencePaths ?? []
+    referencePaths: input.referencePaths ?? [],
+    dev: input.dev === true
   });
 }
 function resolveColorEnabled(opts) {
@@ -25292,8 +25473,9 @@ function renderFlat(input) {
   const safeHost = sanitizeForTerminal(input.host);
   const safeDb = sanitizeForTerminal(input.dbPath);
   const url = `http://${safeHost}:${input.port}`;
+  const devSuffix = input.dev ? " [dev]" : "";
   const linesOut = [];
-  linesOut.push(`sm serve: listening on ${url} (db=${safeDb})`);
+  linesOut.push(`sm serve${devSuffix}: listening on ${url} (db=${safeDb})`);
   if (input.openBrowser) {
     linesOut.push(`sm serve: opening ${url}/ in your browser. Press Ctrl+C to stop.`);
   } else {
@@ -25320,12 +25502,16 @@ function renderFiglet(input) {
     greenUnderline,
     greenUnderlineClose,
     violetOpen,
-    violetClose
+    violetClose,
+    yellowOpen,
+    yellowClose
   } = resolveAnsi(input.colorEnabled);
   const logoLines = LOGO_LINES.map((line) => `${violetOpen}${line}${violetClose}`);
   const versionText = `v${input.version}`;
-  const versionPad = Math.max(0, LOGO_WIDTH - versionText.length);
-  const versionLine = `${" ".repeat(versionPad)}${dimOpen}${versionText}${dimClose}`;
+  const devText = "[dev]";
+  const versionWidth = input.dev ? devText.length : versionText.length;
+  const versionPad = Math.max(0, LOGO_WIDTH - versionWidth);
+  const versionLine = input.dev ? `${" ".repeat(versionPad)}${yellowOpen}${devText}${yellowClose}` : `${" ".repeat(versionPad)}${dimOpen}${versionText}${dimClose}`;
   const lines = [];
   lines.push(...logoLines);
   lines.push("");
@@ -25357,7 +25543,9 @@ var EMPTY_ANSI = {
   greenUnderline: "",
   greenUnderlineClose: "",
   violetOpen: "",
-  violetClose: ""
+  violetClose: "",
+  yellowOpen: "",
+  yellowClose: ""
 };
 var ENABLED_ANSI = {
   dimOpen: ESC2.dim,
@@ -25365,7 +25553,9 @@ var ENABLED_ANSI = {
   greenUnderline: `${ESC2.green}${ESC2.underline}`,
   greenUnderlineClose: ESC2.reset,
   violetOpen: ESC2.violet,
-  violetClose: ESC2.reset
+  violetClose: ESC2.reset,
+  yellowOpen: ESC2.yellow,
+  yellowClose: ESC2.reset
 };
 function resolveAnsi(colorEnabled) {
   return colorEnabled ? ENABLED_ANSI : EMPTY_ANSI;
@@ -25478,7 +25668,7 @@ var ServeCommand = class extends SmCommand {
       return ExitCode.Error;
     }
     const dbPath = resolveDbPath({ db: this.db, ...runtimeCtx });
-    if (this.db !== void 0 && !existsSync30(dbPath)) {
+    if (this.db !== void 0 && !existsSync28(dbPath)) {
       this.printer.info(
         tx(SERVE_TEXTS.dbNotFound, {
           glyph: errGlyph,
@@ -25586,7 +25776,8 @@ var ServeCommand = class extends SmCommand {
         openBrowser: validation.options.open,
         isTTY,
         colorEnabled,
-        referencePaths
+        referencePaths,
+        dev: isDevBuild()
       })
     );
     if (validation.options.open) {
@@ -26028,7 +26219,7 @@ function rankConfidenceForGrouping(c) {
 }
 
 // cli/commands/sidecar.ts
-import { existsSync as existsSync31, unlinkSync as unlinkSync2 } from "fs";
+import { unlink as unlink3 } from "fs/promises";
 import { resolve as resolve38 } from "path";
 import { Command as Command35, Option as Option33 } from "clipanion";
 
@@ -26320,7 +26511,7 @@ var SidecarPruneCommand = class extends SmCommand {
         continue;
       }
       try {
-        unlinkSync2(orphan.sidecarPath);
+        await unlink3(orphan.sidecarPath);
         items.push({
           sidecarPath: orphan.sidecarPath,
           expectedMd: orphan.expectedMdPath,
@@ -26477,7 +26668,8 @@ var SidecarAnnotateCommand = class extends SmCommand {
       return ExitCode.Error;
     }
     const sidecarAbsPath = sidecarPathFor(absPath);
-    if (existsSync31(sidecarAbsPath) && this.force !== true) {
+    const sidecarExists = await pathExists(sidecarAbsPath);
+    if (sidecarExists && this.force !== true) {
       this.printer.error(
         tx(SIDECAR_TEXTS.annotateExists, {
           glyph: errGlyph,
@@ -26487,9 +26679,9 @@ var SidecarAnnotateCommand = class extends SmCommand {
       );
       return ExitCode.Error;
     }
-    if (existsSync31(sidecarAbsPath) && this.force === true) {
+    if (sidecarExists && this.force === true) {
       try {
-        unlinkSync2(sidecarAbsPath);
+        await unlink3(sidecarAbsPath);
       } catch (err) {
         this.printer.error(
           tx(SIDECAR_TEXTS.annotateFailed, { glyph: errGlyph, message: formatErrorMessage(err) })
@@ -26717,9 +26909,9 @@ var STUB_COMMANDS = [
 ];
 
 // cli/commands/tutorial.ts
-import { cpSync as cpSync2, existsSync as existsSync32, mkdirSync as mkdirSync7, rmSync as rmSync2, statSync as statSync12 } from "fs";
+import { cpSync as cpSync2, existsSync as existsSync29, mkdirSync as mkdirSync6, rmSync as rmSync2, statSync as statSync11 } from "fs";
 import { dirname as dirname19, join as join21, resolve as resolve39 } from "path";
-import { fileURLToPath as fileURLToPath6 } from "url";
+import { fileURLToPath as fileURLToPath7 } from "url";
 import { Command as Command37, Option as Option35 } from "clipanion";
 
 // cli/i18n/tutorial.texts.ts
@@ -26816,7 +27008,7 @@ var TutorialCommand = class extends SmCommand {
     const spec = VARIANT_SPECS[variant];
     const targetDir = join21(ctx.cwd, ".claude", "skills", spec.slug);
     const targetDisplay = `.claude/skills/${spec.slug}/`;
-    if (existsSync32(targetDir) && !this.force) {
+    if (existsSync29(targetDir) && !this.force) {
       this.printer.error(
         tx(TUTORIAL_TEXTS.alreadyExists, {
           glyph: errGlyph,
@@ -26842,7 +27034,7 @@ var TutorialCommand = class extends SmCommand {
     }
     try {
       rmSync2(targetDir, { recursive: true, force: true });
-      mkdirSync7(dirname19(targetDir), { recursive: true });
+      mkdirSync6(dirname19(targetDir), { recursive: true });
       cpSync2(sourceDir, targetDir, { recursive: true });
     } catch (err) {
       this.printer.error(
@@ -26889,7 +27081,7 @@ function resolveSkillSourceDir(variant) {
   const cached = cachedSourceDirs.get(variant);
   if (cached !== void 0) return cached;
   const spec = VARIANT_SPECS[variant];
-  const here = dirname19(fileURLToPath6(import.meta.url));
+  const here = dirname19(fileURLToPath7(import.meta.url));
   const candidates = [
     // dev: src/cli/commands/ → repo-root .claude/skills/<slug>/
     resolve39(here, "../../..", spec.sourceDir),
@@ -26899,7 +27091,7 @@ function resolveSkillSourceDir(variant) {
     resolve39(here, "../cli/tutorial", spec.slug)
   ];
   for (const candidate of candidates) {
-    if (existsSync32(candidate) && statSync12(candidate).isDirectory()) {
+    if (existsSync29(candidate) && statSync11(candidate).isDirectory()) {
       cachedSourceDirs.set(variant, candidate);
       return candidate;
     }
@@ -26937,6 +27129,7 @@ var VersionCommand = class extends SmCommand {
     const kernelVersion = VERSION;
     const specVersion = await resolveSpecVersion3();
     const dbSchema = await resolveDbSchemaVersion();
+    const dev = isDevBuild();
     if (this.json) {
       const payload = {
         sm: VERSION,
@@ -26944,17 +27137,19 @@ var VersionCommand = class extends SmCommand {
         spec: specVersion,
         dbSchema
       };
+      if (dev) payload["dev"] = true;
       this.printer.data(JSON.stringify(payload) + "\n");
       return ExitCode.Ok;
     }
+    const ansi = this.ansiFor("stdout");
+    const smValue = dev ? `${VERSION} ${ansi.yellow("[dev]")}` : VERSION;
     const lines = [
-      ["sm", VERSION],
+      ["sm", smValue],
       ["kernel", kernelVersion],
       ["spec", specVersion],
       ["runtime", runtime],
       ["db-schema", dbSchema]
     ];
-    const ansi = this.ansiFor("stdout");
     const pad = Math.max(...lines.map(([k]) => k.length));
     for (const [k, v] of lines) {
       this.printer.data(
@@ -27076,7 +27271,7 @@ await lifecycleDispatcher.dispatch(
 process.exit(exitCode);
 function resolveBareDefault() {
   const ctx = defaultRuntimeContext();
-  if (existsSync33(defaultProjectDbPath(ctx))) {
+  if (existsSync30(defaultProjectDbPath(ctx))) {
     return ["serve"];
   }
   const stderr = process.stderr;