@skill-map/cli 0.38.0 → 0.40.0

package/dist/cli.js

@@ -441,8 +441,7 @@ var claudeProvider = {
   id: "claude",
   pluginId: CLAUDE_PLUGIN_ID,
   kind: "provider",
-  version: "1.0.0",
-  description: "Walks Claude Code scope conventions (.claude/{agents,commands,skills}).",
+  description: "Classifies files under `.claude/{agents,commands,skills}` as Claude Code agents, commands, and skills.",
   // Vendor provider: Claude Code only reads its own `.claude/` territory
   // and ignores `.codex/` / Antigravity layouts at runtime. Gating the
   // classifier behind the active lens prevents the walker from inventing
@@ -726,8 +725,7 @@ var atDirectiveExtractor = {
   id: ID,
   pluginId: CLAUDE_PLUGIN_ID,
   kind: "extractor",
-  version: "1.0.0",
-  description: "Detects `@<token>` directives in a node's body using Claude Code interpretation rules. A bare handle (e.g. `@team`) becomes a `mentions` link; a file-flavoured token (e.g. `@docs/api.md`, `@./readme.md`) becomes a `references` link. Gated by `precondition.provider: ['claude']` so Antigravity / Cursor / Codex apply their own at-directive flavours via their own extractors.",
+  description: "Detects `@<token>` directives in a node's body using Claude Code rules. A bare handle (e.g. `@team`) becomes a `mentions` link; a file-flavoured token (e.g. `@docs/api.md`, `@./readme.md`) becomes a `references` link.",
   scope: "body",
   precondition: { provider: ["claude"] },
   // eslint-disable-next-line complexity
@@ -808,15 +806,14 @@ function resolveSourceRelative(sourceDir, bare) {
   return pathPosix.normalize(joined);
 }
 
-// plugins/claude/extractors/slash/index.ts
-var ID2 = "slash";
+// plugins/claude/extractors/slash-command/index.ts
+var ID2 = "slash-command";
 var SLASH_RE = /(?<![A-Za-z0-9_/.:?#=&])(\/[a-z0-9][a-z0-9_-]*(?::[a-z0-9][a-z0-9_-]*)?)/gi;
-var slashExtractor = {
+var slashCommandExtractor = {
   id: ID2,
   pluginId: CLAUDE_PLUGIN_ID,
   kind: "extractor",
-  version: "1.0.0",
-  description: "Detects `/command` invocations in a node's body using Claude Code routing rules and turns each one into an arrow between nodes in the graph. Gated by `precondition.provider: ['claude']` so Antigravity / Cursor / Codex apply their own slash flavours (Antigravity ships subagent and skill panels, Codex deprecated user slash commands, etc.) via their own extractors.",
+  description: "Turns `/command` invocations in a node's body into arrows that point at the resolved slash command or skill, using Claude Code routing rules.",
   scope: "body",
   precondition: { provider: ["claude"] },
   extract(ctx) {
@@ -865,8 +862,7 @@ var antigravityProvider = {
   id: "antigravity",
   pluginId: ANTIGRAVITY_PLUGIN_ID,
   kind: "provider",
-  version: "1.0.0",
-  description: "Google Antigravity CLI. Replaces the retired Gemini CLI; skills route through the neutral `agent-skills` Provider via `.agents/skills/`. This Provider contributes lens identity and a reserved-name seed catalog.",
+  description: "Declares the Google Antigravity runtime and its reserved built-in names.",
   // Vendor provider: marked gated for the day Antigravity grows its own
   // on-disk kind beyond the open standard. Today `kinds: {}` and
   // `classify` returns `null` for every path, so the flag is inert; the
@@ -896,7 +892,7 @@ var antigravityProvider = {
   // Gemini CLI's. We mirror the full 38-verb Gemini CLI catalog (plus its
   // four documented aliases: `dir`, `?`, `exit`, `bashes`) so a user file
   // that names a skill / command `help`, `clear`, `mcp`, etc. is flagged
-  // immediately by `core/reserved-name` once the lens activates the catalog.
+  // immediately by `core/name-reserved` once the lens activates the catalog.
   //
   // The catalog is INACTIVE today: the analyzer keys on `node.provider`
   // and this Provider's `classify()` returns `null` for every path, so
@@ -1014,8 +1010,7 @@ var openaiProvider = {
   id: "openai",
   pluginId: OPENAI_PLUGIN_ID,
   kind: "provider",
-  version: "1.0.0",
-  description: "Walks OpenAI Codex CLI scope conventions (.codex/agents/*.toml).",
+  description: "Classifies files under `.codex/agents/*.toml` as OpenAI Codex CLI sub-agents.",
   // Vendor provider: Codex CLI only reads its own `.codex/` territory.
   // Gating the classifier behind the active lens keeps the walker from
   // claiming Codex agents under a `claude` (or any other) lens, where
@@ -1072,8 +1067,7 @@ var agentSkillsProvider = {
   id: "agent-skills",
   pluginId: AGENT_SKILLS_PLUGIN_ID,
   kind: "provider",
-  version: "1.0.0",
-  description: "Agent Skills open standard. Vendor-neutral path `.agents/skills/<name>/SKILL.md` (Anthropic, OpenAI, Google). See agentskills.io.",
+  description: "Classifies files under `.agents/skills/<name>/SKILL.md` as Agent Skills.",
   read: { extensions: [".md"], parser: "frontmatter-yaml" },
   kinds: {
     skill: {
@@ -1120,8 +1114,7 @@ var coreMarkdownProvider = {
   id: "markdown",
   pluginId: CORE_PLUGIN_ID,
   kind: "provider",
-  version: "1.0.0",
-  description: "Universal `.md` fallback. Claims any markdown file no vendor-specific Provider classifies.",
+  description: "Universal `.md` fallback. Claims any markdown file that no vendor-specific provider has classified.",
   read: { extensions: [".md"], parser: "frontmatter-yaml" },
   // Per spec § A.6, defaultRefreshAction values MUST be qualified
   // action ids. The summarize-markdown action is not yet implemented
@@ -1156,10 +1149,14 @@ var coreMarkdownProvider = {
   },
   // No `resolution`: `core/markdown` is the universal fallback Provider,
   // it does not declare an invocation surface of its own. Mentions /
-  // slashes sourced from markdown bodies still resolve via OTHER
-  // Providers' resolution maps (the lookup keys on the source node's
-  // Provider id, not on `core/markdown`). Leaving the field absent keeps
-  // the contract narrow.
+  // slashes sourced from markdown bodies are still resolved by the
+  // post-walk transform, the lookup keys on the ACTIVE PROVIDER LENS
+  // (per `spec/architecture.md` §Provider · resolution rules), mirroring
+  // the extractor gate that authorised the emission in the first place.
+  // Leaving this field absent therefore has no resolver-side impact
+  // under any lens that DOES declare a resolution map; it would only
+  // matter the day `markdown` itself becomes a lens (which is not on
+  // the roadmap, the format is provider-agnostic by design).
   classify() {
     return "markdown";
   }
@@ -1171,8 +1168,7 @@ var annotationsExtractor = {
   id: ID3,
   pluginId: CORE_PLUGIN_ID,
   kind: "extractor",
-  version: "1.0.0",
-  description: "Turns the `supersedes` and `supersededBy` entries you write in a node's `.sm` sidecar into the arrows (edges) shown between nodes in the graph.",
+  description: "Turns the `supersedes` and `supersededBy` entries from a node's `.sm` sidecar into arrows between nodes in the graph.",
   scope: "frontmatter",
   extract(ctx) {
     const sourcePath = ctx.node.path;
@@ -1233,8 +1229,7 @@ var externalUrlCounterExtractor = {
   id: ID4,
   pluginId: CORE_PLUGIN_ID,
   kind: "extractor",
-  version: "1.0.0",
-  description: "Counts the distinct external URLs in a node's body and shows the total on the card.",
+  description: "Counts the distinct external URLs in a node's body and shows the count on the card.",
   scope: "body",
   /**
    * Phase 6 / View contribution system, surface the distinct-URL
@@ -1322,8 +1317,7 @@ var markdownLinkExtractor = {
   id: ID5,
   pluginId: CORE_PLUGIN_ID,
   kind: "extractor",
-  version: "1.0.0",
-  description: "Detects markdown links (`[text](path)`) in a node's body and turns each one into an arrow between nodes in the graph.",
+  description: "Turns markdown links (`[text](path)`) in a node's body into arrows between nodes in the graph.",
   scope: "body",
   extract(ctx) {
     const seen = /* @__PURE__ */ new Set();
@@ -1352,7 +1346,7 @@ var markdownLinkExtractor = {
             // explicitly designates an out-link via the brackets +
             // parentheses pair; there is no inference left to discount.
             // Whether the path resolves to a real node is a separate
-            // concern (the `core/broken-ref` analyzer flags unresolved
+            // concern (the `core/reference-broken` analyzer flags unresolved
             // targets), not a confidence question.
             confidence: 1,
             rationale: "unambiguous markdown link syntax",
@@ -1384,8 +1378,7 @@ var mcpToolsExtractor = {
   id: ID6,
   pluginId: CORE_PLUGIN_ID,
   kind: "extractor",
-  version: "1.0.0",
-  description: "Detects `tools: [mcp__<server>__<tool>]` entries in a node's frontmatter and turns each unique server into an MCP node + a reference edge from the source.",
+  description: "Turns `tools: [mcp__<server>__<tool>]` entries in a node's frontmatter into an MCP node per unique server and an arrow from the source to each one.",
   scope: "frontmatter",
   extract(ctx) {
     const raw = ctx.frontmatter["tools"];
@@ -1439,15 +1432,14 @@ function collectMcpServers(tools) {
   return out;
 }
 
-// plugins/core/extractors/tools-count/index.ts
-var ID7 = "tools-count";
+// plugins/core/extractors/tools-counter/index.ts
+var ID7 = "tools-counter";
 var TOOLTIP_MAX = 255;
-var toolsCountExtractor = {
+var toolsCounterExtractor = {
   id: ID7,
   pluginId: CORE_PLUGIN_ID,
   kind: "extractor",
-  version: "1.0.0",
-  description: "Counts the tools an agent declares in its frontmatter and shows the total on the agent card.",
+  description: "Counts the tools an agent declares in its frontmatter and shows the count on the agent card.",
   scope: "frontmatter",
   precondition: { kind: ["claude/agent"] },
   ui: {
@@ -1479,6 +1471,178 @@ function buildTooltip(names) {
   return `${joined.slice(0, TOOLTIP_MAX - 1)}\u2026`;
 }
 
+// plugins/core/analyzers/annotation-field-unknown/index.ts
+import { readFileSync } from "fs";
+import { dirname, resolve } from "path";
+import { createRequire } from "module";
+import { Ajv2020 } from "ajv/dist/2020.js";
+
+// kernel/util/ajv-interop.ts
+import addFormatsModule from "ajv-formats";
+var addFormats = addFormatsModule.default ?? addFormatsModule;
+function applyAjvFormats(ajv) {
+  addFormats(ajv);
+}
+
+// plugins/core/analyzers/annotation-field-unknown/text.ts
+var ANNOTATION_FIELD_UNKNOWN_TEXTS = {
+  /** Key inside `annotations:` is not in the curated catalog. */
+  unknownAnnotationKey: "{{path}}: sidecar annotations contain unknown key '{{key}}' (not in annotations.schema.json catalog).",
+  /** Top-level key is neither reserved, nor a registered plugin namespace, nor a registered root key. */
+  unknownRootKey: "{{path}}: sidecar declares unknown top-level key '{{key}}'; not a reserved block, not a registered plugin namespace, not a registered root contribution.",
+  /** Value under a registered plugin namespace fails the contributed schema. */
+  pluginNamespaceInvalid: "{{path}}: sidecar block '{{pluginId}}.{{key}}' fails the schema contributed by plugin '{{pluginId}}': {{errors}}.",
+  // Tooltips for the per-node view-contribution badges. Singular vs
+  // plural keeps the count grammar correct without a sub-template.
+  alertTooltipSingle: "This node has 1 unknown field in its sidecar. Open the inspector for details.",
+  alertTooltipMany: "This node has {{count}} unknown fields in its sidecar. Open the inspector for details."
+};
+
+// plugins/core/analyzers/annotation-field-unknown/index.ts
+var ID8 = "annotation-field-unknown";
+var RESERVED_ROOT_BLOCKS = /* @__PURE__ */ new Set(["identity", "annotations", "settings", "audit"]);
+var annotationFieldUnknownAnalyzer = {
+  id: ID8,
+  pluginId: CORE_PLUGIN_ID,
+  kind: "analyzer",
+  description: "Flags typos or unrecognized keys in sidecars (`.sm`).",
+  mode: "deterministic",
+  // No `ui` declaration: the per-node icon-only chip used to surface
+  // "this sidecar declares unknown keys" on `card.footer.right`, but
+  // its severity (`warn`) is now folded into the aggregate counters
+  // emitted by `core/issue-counter`. The detection logic stays, the
+  // findings still ship as `Issue` records (visible in the inspector,
+  // `sm check`, etc.).
+  ui: {},
+  // Analyzer body iterates every sidecar root and classifies each
+  // key against three buckets (catalog / plugin namespace / unknown
+  // root). The per-key branching IS the classification table; factoring
+  // it out would rebuild the discriminator elsewhere. Per
+  // `context/lint.md` category 7 (recursive type-discriminator walkers).
+  // eslint-disable-next-line complexity
+  evaluate(ctx) {
+    const sidecarRoots = ctx.sidecarRoots;
+    if (!sidecarRoots || sidecarRoots.size === 0) return [];
+    const knownAnnotationKeys = getKnownAnnotationKeys();
+    const contributions = ctx.annotationContributions ?? [];
+    const namespacedByPlugin = indexNamespacedContributions(contributions);
+    const rootKeys = indexRootContributions(contributions);
+    const knownPluginIds = collectPluginIds(contributions);
+    const issues = [];
+    const perNode = /* @__PURE__ */ new Map();
+    const bump2 = (nodePath) => {
+      perNode.set(nodePath, (perNode.get(nodePath) ?? 0) + 1);
+    };
+    for (const node of ctx.nodes) {
+      const root = sidecarRoots.get(node.path);
+      if (!root) continue;
+      const annotations = root["annotations"];
+      if (annotations !== void 0 && annotations !== null && typeof annotations === "object" && !Array.isArray(annotations)) {
+        for (const key of Object.keys(annotations)) {
+          if (!knownAnnotationKeys.has(key)) {
+            issues.push({
+              analyzerId: ID8,
+              severity: "warn",
+              nodeIds: [node.path],
+              message: tx(ANNOTATION_FIELD_UNKNOWN_TEXTS.unknownAnnotationKey, {
+                path: node.path,
+                key
+              }),
+              data: { surface: "annotations", key }
+            });
+            bump2(node.path);
+          }
+        }
+      }
+      for (const key of Object.keys(root)) {
+        if (RESERVED_ROOT_BLOCKS.has(key)) continue;
+        if (rootKeys.has(key)) continue;
+        if (knownPluginIds.has(key)) {
+          const block = root[key];
+          if (block === null || typeof block !== "object" || Array.isArray(block)) continue;
+          const contribsForPlugin = namespacedByPlugin.get(key);
+          if (!contribsForPlugin) continue;
+          for (const [contribKey, validator] of contribsForPlugin) {
+            const value = block[contribKey];
+            if (value === void 0) continue;
+            if (validator(value)) continue;
+            const errors = (validator.errors ?? []).map((e) => `${e.instancePath || "(root)"} ${e.message ?? e.keyword}`).join("; ");
+            issues.push({
+              analyzerId: ID8,
+              severity: "warn",
+              nodeIds: [node.path],
+              message: tx(ANNOTATION_FIELD_UNKNOWN_TEXTS.pluginNamespaceInvalid, {
+                path: node.path,
+                pluginId: key,
+                key: contribKey,
+                errors
+              }),
+              data: { surface: "plugin-namespace", pluginId: key, key: contribKey }
+            });
+            bump2(node.path);
+          }
+          continue;
+        }
+        issues.push({
+          analyzerId: ID8,
+          severity: "warn",
+          nodeIds: [node.path],
+          message: tx(ANNOTATION_FIELD_UNKNOWN_TEXTS.unknownRootKey, {
+            path: node.path,
+            key
+          }),
+          data: { surface: "root", key }
+        });
+        bump2(node.path);
+      }
+    }
+    void perNode;
+    return issues;
+  }
+};
+var cachedKnownKeys = null;
+function getKnownAnnotationKeys() {
+  if (cachedKnownKeys) return cachedKnownKeys;
+  const require2 = createRequire(import.meta.url);
+  const indexPath = require2.resolve("@skill-map/spec/index.json");
+  const specRoot = dirname(indexPath);
+  const schema = JSON.parse(
+    readFileSync(resolve(specRoot, "schemas/annotations.schema.json"), "utf8")
+  );
+  cachedKnownKeys = new Set(Object.keys(schema.properties ?? {}));
+  return cachedKnownKeys;
+}
+function indexNamespacedContributions(contributions) {
+  const out = /* @__PURE__ */ new Map();
+  const ajv = new Ajv2020({ strict: false, allErrors: true, allowUnionTypes: true });
+  applyAjvFormats(ajv);
+  for (const entry of contributions) {
+    if (entry.location !== "namespaced") continue;
+    let bucket = out.get(entry.pluginId);
+    if (!bucket) {
+      bucket = /* @__PURE__ */ new Map();
+      out.set(entry.pluginId, bucket);
+    }
+    try {
+      bucket.set(entry.key, ajv.compile(entry.schema));
+    } catch {
+    }
+  }
+  return out;
+}
+function indexRootContributions(contributions) {
+  const out = /* @__PURE__ */ new Set();
+  for (const entry of contributions) {
+    if (entry.location === "root") out.add(entry.key);
+  }
+  return out;
+}
+function collectPluginIds(contributions) {
+  const out = /* @__PURE__ */ new Set();
+  for (const entry of contributions) out.add(entry.pluginId);
+  return out;
+}
+
 // plugins/core/analyzers/annotation-orphan/text.ts
 var ANNOTATION_ORPHAN_TEXTS = {
   /** Sidecar `<path>.sm` has no matching `<path>.md`. */
@@ -1486,13 +1650,12 @@ var ANNOTATION_ORPHAN_TEXTS = {
 };
 
 // plugins/core/analyzers/annotation-orphan/index.ts
-var ID8 = "annotation-orphan";
+var ID9 = "annotation-orphan";
 var annotationOrphanAnalyzer = {
-  id: ID8,
+  id: ID9,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
-  version: "1.0.0",
-  description: "Detects and flags sidecars (`.sm`) whose `.md` no longer exists.",
+  description: "Flags sidecars (`.sm`) whose `.md` file no longer exists.",
   mode: "deterministic",
   evaluate(ctx) {
     const orphans = ctx.orphanSidecars;
@@ -1501,7 +1664,7 @@ var annotationOrphanAnalyzer = {
     for (const orphan of orphans) {
       const expectedMdRelative = orphan.relativePath.endsWith(".sm") ? `${orphan.relativePath.slice(0, -".sm".length)}.md` : `${orphan.relativePath}.md`;
       issues.push({
-        analyzerId: ID8,
+        analyzerId: ID9,
         severity: "warn",
         nodeIds: [expectedMdRelative],
         message: tx(ANNOTATION_ORPHAN_TEXTS.message, {
@@ -1538,17 +1701,16 @@ var ANNOTATION_STALE_TEXTS = {
 };
 
 // plugins/core/analyzers/annotation-stale/index.ts
-var ID9 = "annotation-stale";
+var ID10 = "annotation-stale";
 var annotationStaleAnalyzer = {
-  id: ID9,
+  id: ID10,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
-  version: "1.0.0",
-  description: "Detects and marks sidecars (`.sm`) out of date of their `.md`.",
+  description: "Marks sidecars (`.sm`) that are out of date with their `.md`.",
   mode: "deterministic",
   // The natural fix is to bump the node: refreshes `for` hashes,
   // increments `annotations.version`, and stamps the audit block. The
-  // UI surfaces `core/bump` in the node inspector under "Recommended
+  // UI surfaces `core/node-bump` in the node inspector under "Recommended
   // for issues" whenever this analyzer fires.
   ui: {
     // A `pi-clock` chip in the footer-right cluster so the operator
@@ -1564,7 +1726,10 @@ var annotationStaleAnalyzer = {
       slot: "card.footer.right",
       icon: "pi-clock",
       emitWhenEmpty: true,
-      priority: 20
+      // First in the footer-right cluster: drift is the operator's
+      // entry point for "this node disagrees with its sidecar",
+      // followed by stability, then the severity counters.
+      priority: 10
     }
   },
   evaluate(ctx) {
@@ -1575,7 +1740,7 @@ var annotationStaleAnalyzer = {
       if (status === "fresh") continue;
       const message = status === "stale-body" ? tx(ANNOTATION_STALE_TEXTS.bodyDrift, { path: node.path }) : status === "stale-frontmatter" ? tx(ANNOTATION_STALE_TEXTS.frontmatterDrift, { path: node.path }) : tx(ANNOTATION_STALE_TEXTS.bothDrift, { path: node.path });
       issues.push({
-        analyzerId: ID9,
+        analyzerId: ID10,
         severity: "warn",
         nodeIds: [node.path],
         message,
@@ -1601,233 +1766,130 @@ function tooltipFor(status) {
   }
 }
 
-// plugins/core/analyzers/broken-ref/index.ts
-import { posix as pathPosix3, resolve } from "path";
+// plugins/core/analyzers/contribution-orphan/index.ts
+var ID11 = "contribution-orphan";
+var contributionOrphanAnalyzer = {
+  id: ID11,
+  pluginId: CORE_PLUGIN_ID,
+  kind: "analyzer",
+  description: "Warns about plugin data referencing nodes renamed or deleted in the latest scan.",
+  mode: "deterministic",
+  evaluate(_ctx) {
+    return [];
+  }
+};
 
-// plugins/core/analyzers/broken-ref/text.ts
-var BROKEN_REF_TEXTS = {
-  /** `Broken <kind> reference from <source> → <target>` */
-  message: "Broken {{kind}} reference from {{source}} \u2192 {{target}}",
-  // Tooltips for the per-node view-contribution badges. Singular vs
-  // plural keeps the count grammar correct without a sub-template.
-  alertTooltipSingle: "This node has a broken reference. Open the inspector for details.",
-  alertTooltipMany: "This node has {{count}} broken references. Open the inspector for details.",
-  // Fix-summary copy when the broken trigger has a same-named file on
-  // disk that does not advertise `name:` in its frontmatter. Two
-  // variants for single vs multiple candidates; same template family
-  // as the alert tooltips above.
-  hintSummarySingle: "Add `name: {{name}}` to the frontmatter of {{candidate}} so this reference resolves.",
-  hintSummaryMany: "Add `name: {{name}}` to the frontmatter of one of these files so this reference resolves: {{candidates}}."
+// plugins/core/analyzers/issue-counter/text.ts
+var ISSUE_COUNTER_TEXTS = {
+  errorTooltipSingle: "1 error",
+  errorTooltipMany: "{{count}} errors",
+  warnTooltipSingle: "1 warning",
+  warnTooltipMany: "{{count}} warnings"
 };
 
-// plugins/core/analyzers/broken-ref/index.ts
-var ID10 = "broken-ref";
-var brokenRefAnalyzer = {
-  id: ID10,
+// plugins/core/analyzers/issue-counter/index.ts
+var ID12 = "issue-counter";
+function countByTier(issues) {
+  const errors = /* @__PURE__ */ new Map();
+  const warns = /* @__PURE__ */ new Map();
+  for (const issue of issues) {
+    const bucket = issue.severity === "error" ? errors : issue.severity === "warn" ? warns : null;
+    if (!bucket) continue;
+    for (const nodeId of issue.nodeIds) {
+      bucket.set(nodeId, (bucket.get(nodeId) ?? 0) + 1);
+    }
+  }
+  return { errors, warns };
+}
+function emitTierChips(ctx, contributionId, severity, counts, singleTooltip, manyTooltip) {
+  for (const [nodePath, count] of counts) {
+    const capped = Math.min(count, 99);
+    ctx.emitContribution(nodePath, contributionId, {
+      value: capped,
+      severity,
+      tooltip: count === 1 ? singleTooltip : tx(manyTooltip, { count })
+    });
+  }
+}
+var issueCounterAnalyzer = {
+  id: ID12,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
-  version: "1.0.0",
-  description: "Detects and flags arrows pointing at a node not part of the current scan.",
+  description: "Emits one aggregate severity chip per node (error + warn counts) from the live issue accumulator.",
   mode: "deterministic",
+  phase: "aggregate",
   ui: {
-    // Corner badge on the graph card; count omitted when there is a
-    // single broken ref (avoids a noisy "icon + 1" chip).
-    alert: {
-      slot: "graph.node.alert",
-      icon: "fa-solid fa-circle-xmark",
-      emitWhenEmpty: false
+    // Third in the footer-right cluster, after the drift chip
+    // (priority 10) and the stability badge (priority 20). The warn
+    // counter sits before the error counter so the operator reads
+    // "advisory → blocking" left-to-right.
+    warnCount: {
+      slot: "card.footer.right",
+      icon: "pi-exclamation-triangle",
+      emitWhenEmpty: false,
+      priority: 30
     },
-    // Footer chip on the card. `_counter` shape, `value` always shows,
-    // so the operator sees "how many" at a glance. Renders OUTLINED
-    // (`fa-regular`) so the corner alert (filled, attention-grabbing)
-    // and the footer chip (quieter, paired with a number) read as two
-    // beats of the same signal rather than two identical glyphs.
-    chip: {
+    // Last in the cluster, the red chip pins to the right edge so the
+    // most severe signal anchors the row's reading position.
+    errorCount: {
       slot: "card.footer.right",
-      icon: "fa-regular fa-circle-xmark",
+      icon: "pi-times-circle",
       emitWhenEmpty: false,
       priority: 40
     }
   },
-  // The resolver, the reference-paths escape hatch, the per-source
-  // aggregation, and the dual-slot emit (with single/plural tooltip and
-  // optional count) all live in one flow because they share the per-link
-  // loop. Splitting them would re-walk `ctx.links` three times.
-  // eslint-disable-next-line complexity
   evaluate(ctx) {
-    const byPath3 = new Set(ctx.nodes.map((n) => n.path));
-    const byNormalizedName = indexByNormalizedName(ctx.nodes);
-    const byBasenameWithoutName = indexByBasenameWithoutName(ctx.nodes);
-    const refIndex = ctx.referenceablePaths && ctx.referenceablePaths.size > 0 && ctx.cwd ? { paths: ctx.referenceablePaths, cwd: ctx.cwd } : null;
+    const accumulator = ctx.accumulatedIssues ?? [];
+    if (accumulator.length === 0) return [];
+    const { errors, warns } = countByTier(accumulator);
+    emitTierChips(
+      ctx,
+      "errorCount",
+      "danger",
+      errors,
+      ISSUE_COUNTER_TEXTS.errorTooltipSingle,
+      ISSUE_COUNTER_TEXTS.errorTooltipMany
+    );
+    emitTierChips(
+      ctx,
+      "warnCount",
+      "warn",
+      warns,
+      ISSUE_COUNTER_TEXTS.warnTooltipSingle,
+      ISSUE_COUNTER_TEXTS.warnTooltipMany
+    );
+    return [];
+  }
+};
+
+// plugins/core/analyzers/job-file-orphan/text.ts
+var JOB_FILE_ORPHAN_TEXTS = {
+  /**
+   * `<path>.md` lives under `.skill-map/jobs/` but no `state_jobs.filePath`
+   * row references it. Run `sm job prune --orphan-files` to remove.
+   */
+  message: "Orphan job file: {{filePath}} is not referenced by any state_jobs row. Run `sm job prune --orphan-files` to remove it."
+};
+
+// plugins/core/analyzers/job-file-orphan/index.ts
+var ID13 = "job-file-orphan";
+var jobFileOrphanAnalyzer = {
+  id: ID13,
+  pluginId: CORE_PLUGIN_ID,
+  kind: "analyzer",
+  description: "Flags leftover job result files (no live job references them). Clean up via `sm job prune --orphan-files`.",
+  mode: "deterministic",
+  evaluate(ctx) {
+    const orphans = ctx.orphanJobFiles;
+    if (!orphans || orphans.length === 0) return [];
     const issues = [];
-    const perNode = /* @__PURE__ */ new Map();
-    for (const link of ctx.links) {
-      if (isResolved(link, byPath3, byNormalizedName)) continue;
-      if (refIndex && resolvesViaReferencePaths(link, refIndex)) continue;
-      const candidates = findHintCandidates(link, byBasenameWithoutName);
-      issues.push(buildIssue(link, candidates));
-      perNode.set(link.source, (perNode.get(link.source) ?? 0) + 1);
-    }
-    for (const [nodePath, count] of perNode) {
-      const tooltip = count === 1 ? BROKEN_REF_TEXTS.alertTooltipSingle : tx(BROKEN_REF_TEXTS.alertTooltipMany, { count });
-      const capped = Math.min(count, 99);
-      ctx.emitContribution(nodePath, "alert", {
-        icon: "fa-solid fa-circle-xmark",
-        severity: "danger",
-        tooltip
-      });
-      ctx.emitContribution(nodePath, "chip", {
-        value: capped,
-        severity: "danger",
-        tooltip
-      });
-    }
-    return issues;
-  }
-};
-function buildIssue(link, hintCandidates = []) {
-  const data = {
-    target: link.target,
-    kind: link.kind,
-    trigger: link.trigger?.normalizedTrigger ?? null
-  };
-  const issue = {
-    analyzerId: ID10,
-    severity: "warn",
-    nodeIds: [link.source],
-    message: tx(BROKEN_REF_TEXTS.message, {
-      kind: link.kind,
-      source: link.source,
-      target: link.target
-    }),
-    data
-  };
-  if (hintCandidates.length > 0) {
-    const suggestedName = (link.trigger?.normalizedTrigger ?? "").replace(/^[/@]/, "").trim();
-    const candidatePaths = hintCandidates.map((n) => n.path);
-    data["hint"] = {
-      kind: "missing-frontmatter-name",
-      suggestedName,
-      candidates: candidatePaths
-    };
-    issue.fix = {
-      summary: candidatePaths.length === 1 ? tx(BROKEN_REF_TEXTS.hintSummarySingle, {
-        name: suggestedName,
-        candidate: candidatePaths[0]
-      }) : tx(BROKEN_REF_TEXTS.hintSummaryMany, {
-        name: suggestedName,
-        candidates: candidatePaths.join(", ")
-      }),
-      autofixable: false
-    };
-  }
-  return issue;
-}
-function resolvesViaReferencePaths(link, refIndex) {
-  if (!isPathStyleLink(link)) return false;
-  return refIndex.paths.has(resolve(refIndex.cwd, link.target));
-}
-function indexByNormalizedName(nodes) {
-  const out = /* @__PURE__ */ new Map();
-  for (const node of nodes) {
-    const raw = node.frontmatter?.["name"];
-    const name = typeof raw === "string" ? raw : "";
-    if (!name) continue;
-    const key = normalizeTrigger(name);
-    const bucket = out.get(key) ?? [];
-    bucket.push(node);
-    out.set(key, bucket);
-  }
-  return out;
-}
-function basenameWithoutExt(path) {
-  const base = pathPosix3.basename(path);
-  const ext = pathPosix3.extname(base);
-  return ext ? base.slice(0, -ext.length) : base;
-}
-function indexByBasenameWithoutName(nodes) {
-  const out = /* @__PURE__ */ new Map();
-  for (const node of nodes) {
-    const raw = node.frontmatter?.["name"];
-    const name = typeof raw === "string" ? raw : "";
-    if (name) continue;
-    const bare = basenameWithoutExt(node.path);
-    if (!bare) continue;
-    const key = normalizeTrigger(bare);
-    if (!key) continue;
-    const bucket = out.get(key) ?? [];
-    bucket.push(node);
-    out.set(key, bucket);
-  }
-  return out;
-}
-function findHintCandidates(link, idx) {
-  const normalized = link.trigger?.normalizedTrigger;
-  if (!normalized) return [];
-  const sigil = normalized.charAt(0);
-  if (sigil !== "/" && sigil !== "@") return [];
-  const withoutSigil = normalized.slice(1).trim();
-  if (!withoutSigil) return [];
-  return idx.get(withoutSigil) ?? [];
-}
-function isResolved(link, byPath3, byNormalizedName) {
-  const normalized = link.trigger?.normalizedTrigger;
-  if (normalized) {
-    const withoutSigil = normalized.replace(/^[/@]/, "").trim();
-    if (byNormalizedName.has(withoutSigil)) return true;
-  }
-  if (byPath3.has(link.target)) return true;
-  return false;
-}
-function isPathStyleLink(link) {
-  const sigil = link.trigger?.normalizedTrigger?.charAt(0);
-  if (sigil === "/" || sigil === "@") return false;
-  return true;
-}
-
-// plugins/core/analyzers/contribution-orphan/index.ts
-var ID11 = "contribution-orphan";
-var contributionOrphanAnalyzer = {
-  id: ID11,
-  pluginId: CORE_PLUGIN_ID,
-  kind: "analyzer",
-  version: "0.0.0",
-  description: "Detects and warns about plugin data referencing nodes renamed or deleted in the latest scan.",
-  mode: "deterministic",
-  evaluate(_ctx) {
-    return [];
-  }
-};
-
-// plugins/core/analyzers/job-orphan-file/text.ts
-var JOB_ORPHAN_FILE_TEXTS = {
-  /**
-   * `<path>.md` lives under `.skill-map/jobs/` but no `state_jobs.filePath`
-   * row references it. Run `sm job prune --orphan-files` to remove.
-   */
-  message: "Orphan job file: {{filePath}} is not referenced by any state_jobs row. Run `sm job prune --orphan-files` to remove it."
-};
-
-// plugins/core/analyzers/job-orphan-file/index.ts
-var ID12 = "job-orphan-file";
-var jobOrphanFileAnalyzer = {
-  id: ID12,
-  pluginId: CORE_PLUGIN_ID,
-  kind: "analyzer",
-  version: "1.0.0",
-  description: "Detects and flags leftover job result files (no live job references them). Cleanup via `sm job prune --orphan-files`.",
-  mode: "deterministic",
-  evaluate(ctx) {
-    const orphans = ctx.orphanJobFiles;
-    if (!orphans || orphans.length === 0) return [];
-    const issues = [];
-    for (const filePath of orphans) {
-      issues.push({
-        analyzerId: ID12,
-        severity: "warn",
-        nodeIds: [filePath],
-        message: tx(JOB_ORPHAN_FILE_TEXTS.message, { filePath }),
-        data: { filePath }
+    for (const filePath of orphans) {
+      issues.push({
+        analyzerId: ID13,
+        severity: "warn",
+        nodeIds: [filePath],
+        message: tx(JOB_FILE_ORPHAN_TEXTS.message, { filePath }),
+        data: { filePath }
       });
     }
     return issues;
@@ -1841,13 +1903,12 @@ var LINK_CONFLICT_TEXTS = {
 };
 
 // plugins/core/analyzers/link-conflict/index.ts
-var ID13 = "link-conflict";
+var ID14 = "link-conflict";
 var linkConflictAnalyzer = {
-  id: ID13,
+  id: ID14,
   pluginId: "core",
   kind: "analyzer",
-  version: "1.0.0",
-  description: 'Detects and flags conflicting arrow meanings between extractors (e.g. "references" vs "invokes").',
+  description: "Flags conflicting arrow meanings between extractors (e.g. `references` vs `invokes`).",
   mode: "deterministic",
   // Bucket links by (source, target), then per-bucket detect distinct
   // kinds. The branching is intrinsic to the per-bucket conflict
@@ -1891,7 +1952,7 @@ var linkConflictAnalyzer = {
       const [source, target] = key.split("\0");
       const kindList = variants.map((v) => v.kind).join(" / ");
       issues.push({
-        analyzerId: ID13,
+        analyzerId: ID14,
         severity: "warn",
         nodeIds: [source, target],
         message: tx(LINK_CONFLICT_TEXTS.message, {
@@ -1957,13 +2018,12 @@ function resolveLinkTargetToPath(link, nameIndex) {
   return resolved ?? raw;
 }
 
-// plugins/core/analyzers/link-counts/index.ts
-var ID14 = "link-counts";
-var linkCountsAnalyzer = {
-  id: ID14,
+// plugins/core/analyzers/link-counter/index.ts
+var ID15 = "link-counter";
+var linkCounterAnalyzer = {
+  id: ID15,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
-  version: "1.0.0",
   description: "Counts incoming and outgoing links per node.",
   mode: "deterministic",
   ui: {
@@ -2024,154 +2084,63 @@ function formatBreakdown(byKind, direction) {
   return [direction, ...lines].join("\n");
 }
 
-// plugins/core/analyzers/redundant-target-reference/text.ts
-var REDUNDANT_TARGET_REFERENCE_TEXTS = {
+// plugins/core/analyzers/link-self-loop/text.ts
+var LINK_SELF_LOOP_TEXTS = {
   /**
-   * Multi-form / multi-occurrence reference message. Lists each
-   * occurrence (trigger + line) so the operator sees the full
-   * authorial surface without having to grep the body.
+   * Per-edge warn: a node body references itself via the slash /
+   * at-directive / markdown-link surface (most commonly because the
+   * file's heading IS the invocation token, e.g. `# /deploy` inside
+   * `commands/deploy.md`). The link is structurally valid but rarely
+   * the operator's intent; UI consumers MAY hide it by default and
+   * surface a count.
    */
-  message: "{{source}} references {{resolvedTarget}} via {{count}} occurrences: {{occurrences}}. Consider consolidating to a single form to reduce maintenance surface and avoid duplicate inlining at runtime.",
-  /** Inline separator between occurrences in the message. */
-  occurrenceSeparator: ", ",
-  /** Per-occurrence formatting (trigger + line). */
-  occurrence: "`{{trigger}}` ({{kind}}, line {{line}})",
-  /** Per-occurrence formatting when the extractor did not record a line. */
-  occurrenceUnknownLine: "`{{trigger}}` ({{kind}}, unknown line)"
+  message: "{{source}} references itself via `{{trigger}}` ({{kind}}). Self-loops typically come from the file's own heading or label and are noise rather than intent. Either remove the in-body token or treat this finding as expected and acknowledged."
 };
 
-// plugins/core/analyzers/redundant-target-reference/index.ts
-var ID15 = "redundant-target-reference";
-var redundantTargetReferenceAnalyzer = {
-  id: ID15,
+// plugins/core/analyzers/link-self-loop/index.ts
+var ID16 = "link-self-loop";
+var linkSelfLoopAnalyzer = {
+  id: ID16,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
-  version: "1.0.0",
-  description: "Flags when one node references the same resolved target via two or more syntactic surfaces (cross-extractor multi-form OR cross-kind multi-edge). Emits a warn on the source listing every occurrence (kind + trigger + line). Helps consolidate authorial redundancy and avoid duplicate runtime inlining.",
+  description: "Flags links whose source is also their own resolved target (e.g. a body heading like `# /deploy` inside the file that defines `/deploy`).",
   mode: "deterministic",
   evaluate(ctx) {
     if (ctx.links.length === 0) return [];
-    const byPath3 = /* @__PURE__ */ new Map();
-    for (const node of ctx.nodes) byPath3.set(node.path, node);
-    const byName = buildNameIndex2(ctx.nodes);
-    const groups = /* @__PURE__ */ new Map();
-    for (const link of ctx.links) {
-      const resolved = resolveTargetPath(link, byPath3, byName);
-      if (!resolved) continue;
-      const key = `${link.source}\0${resolved}`;
-      const bucket = groups.get(key);
-      if (bucket) bucket.push(link);
-      else groups.set(key, [link]);
-    }
     const issues = [];
-    for (const [key, links] of groups) {
-      const totalOccurrences = links.reduce((acc, l) => acc + (l.occurrences?.length ?? 1), 0);
-      if (totalOccurrences < 2) continue;
-      const [source, resolvedTarget] = key.split("\0");
-      const flat = flattenOccurrences(links);
+    for (const link of ctx.links) {
+      if (!isSelfLoop(link)) continue;
       issues.push({
-        analyzerId: ID15,
+        analyzerId: ID16,
         severity: "warn",
-        nodeIds: [source],
-        message: tx(REDUNDANT_TARGET_REFERENCE_TEXTS.message, {
-          source,
-          resolvedTarget,
-          count: flat.length,
-          occurrences: flat.map(formatOccurrence).join(REDUNDANT_TARGET_REFERENCE_TEXTS.occurrenceSeparator)
+        nodeIds: [link.source],
+        message: tx(LINK_SELF_LOOP_TEXTS.message, {
+          source: link.source,
+          trigger: link.trigger?.originalTrigger ?? link.target,
+          kind: link.kind
         }),
         data: {
-          target: resolvedTarget,
-          resolvedTarget,
-          occurrences: flat.map((o) => ({
-            kind: o.kind,
-            trigger: o.originalTrigger,
-            line: o.line ?? null,
-            extractor: o.extractor
-          }))
+          target: link.target,
+          resolvedTarget: link.resolvedTarget ?? link.target,
+          kind: link.kind,
+          // Mark explicitly so UI / downstream consumers can read this
+          // single field instead of re-computing the `source === target`
+          // predicate themselves.
+          selfLoop: true
         }
       });
     }
     return issues;
   }
 };
-function flattenOccurrences(links) {
-  const out = [];
-  for (const link of links) {
-    if (link.occurrences && link.occurrences.length > 0) {
-      for (const occ of link.occurrences) {
-        out.push({
-          kind: link.kind,
-          originalTrigger: occ.originalTrigger,
-          extractor: occ.extractor,
-          line: occ.location?.line ?? null
-        });
-      }
-      continue;
-    }
-    const trigger = link.trigger?.originalTrigger ?? link.target;
-    out.push({
-      kind: link.kind,
-      originalTrigger: trigger,
-      extractor: link.sources[0] ?? "unknown",
-      line: link.location?.line ?? null
-    });
-  }
-  out.sort((a, b) => {
-    const la = a.line ?? Number.MAX_SAFE_INTEGER;
-    const lb = b.line ?? Number.MAX_SAFE_INTEGER;
-    if (la !== lb) return la - lb;
-    return a.originalTrigger.localeCompare(b.originalTrigger);
-  });
-  return out;
-}
-function formatOccurrence(occ) {
-  if (occ.line === null) {
-    return tx(REDUNDANT_TARGET_REFERENCE_TEXTS.occurrenceUnknownLine, { trigger: occ.originalTrigger, kind: occ.kind });
-  }
-  return tx(REDUNDANT_TARGET_REFERENCE_TEXTS.occurrence, { trigger: occ.originalTrigger, kind: occ.kind, line: occ.line });
-}
-function buildNameIndex2(nodes) {
-  const out = /* @__PURE__ */ new Map();
-  for (const node of nodes) {
-    for (const candidate of collectIdentifiers(node)) {
-      const normalised = normalizeTrigger(candidate);
-      if (!normalised) continue;
-      const bucket = out.get(normalised);
-      if (bucket) bucket.push(node.path);
-      else out.set(normalised, [node.path]);
-    }
-  }
-  return out;
-}
-function collectIdentifiers(node) {
-  const out = [];
-  const fmName = node.frontmatter?.["name"];
-  if (typeof fmName === "string" && fmName.length > 0) out.push(fmName);
-  const segs = node.path.split("/");
-  const last = segs[segs.length - 1] ?? "";
-  if (last) {
-    const stem = last.replace(/\.[^.]+$/, "");
-    if (stem) out.push(stem);
-  }
-  if (segs.length >= 2) {
-    const dirBase = segs[segs.length - 2];
-    if (dirBase) out.push(dirBase);
-  }
-  return out;
-}
-function resolveTargetPath(link, byPath3, byName) {
-  if (byPath3.has(link.target)) return link.target;
-  const trigger = link.trigger?.normalizedTrigger;
-  if (!trigger) return null;
-  const stripped = trigger.replace(/^[/@]/, "").trim();
-  if (!stripped) return null;
-  const candidates = byName.get(stripped);
-  if (!candidates || candidates.length === 0) return null;
-  return candidates[0] ?? null;
+function isSelfLoop(link) {
+  if (link.source === link.target) return true;
+  if (link.resolvedTarget && link.source === link.resolvedTarget) return true;
+  return false;
 }
 
 // kernel/orchestrator/node-identifiers.ts
-import { posix as pathPosix4 } from "path";
+import { posix as pathPosix3 } from "path";
 function deriveNodeIdentifiers(node, kindDescriptor) {
   const sources = kindDescriptor?.identifiers;
   if (!sources || sources.length === 0) return [];
@@ -2195,16 +2164,16 @@ function readFrontmatterName(node) {
   return raw.length > 0 ? raw : null;
 }
 function readFilenameBasename(node) {
-  const base = pathPosix4.basename(node.path);
+  const base = pathPosix3.basename(node.path);
   if (!base) return null;
-  const ext = pathPosix4.extname(base);
+  const ext = pathPosix3.extname(base);
   const stem = ext ? base.slice(0, -ext.length) : base;
   return stem.length > 0 ? stem : null;
 }
 function readDirname(node) {
-  const dir = pathPosix4.dirname(node.path);
+  const dir = pathPosix3.dirname(node.path);
   if (!dir || dir === "." || dir === "/") return null;
-  const base = pathPosix4.basename(dir);
+  const base = pathPosix3.basename(dir);
   return base.length > 0 ? base : null;
 }
 
@@ -2246,10 +2215,9 @@ function resolveByName(link, indexes, ctx) {
   const winner = candidates.find((c) => allowedKinds.includes(c.kind));
   return winner ? winner.path : "none";
 }
-function lookupAllowedKinds(link, indexes, ctx) {
-  const sourceNode = indexes.nodeByPath.get(link.source);
-  if (!sourceNode) return void 0;
-  return ctx.providerResolution.get(sourceNode.provider)?.[link.kind];
+function lookupAllowedKinds(link, _indexes, ctx) {
+  if (ctx.activeProvider === null) return void 0;
+  return ctx.providerResolution.get(ctx.activeProvider)?.[link.kind];
 }
 function stripTriggerSigil(normalized) {
   if (!normalized) return null;
@@ -2273,8 +2241,8 @@ function kindKey(node) {
   return `${node.provider}/${node.kind}`;
 }
 
-// plugins/core/analyzers/reserved-name/text.ts
-var RESERVED_NAME_TEXTS = {
+// plugins/core/analyzers/name-reserved/text.ts
+var NAME_RESERVED_TEXTS = {
   /**
    * Target-side message: emitted on the user file that collides with
    * a runtime built-in. Same wording skill-map shipped before the
@@ -2291,14 +2259,13 @@ var RESERVED_NAME_TEXTS = {
   linkMessage: "Link `{{kind}} {{target}}` resolves to a name reserved by the {{provider}} runtime ({{reservedKind}} `{{reservedPath}}`). The runtime shadows the user file, so this edge is downgraded to confidence {{confidence}} instead of 1.0. Rename the target file or its `frontmatter.name` to a non-reserved value."
 };
 
-// plugins/core/analyzers/reserved-name/index.ts
-var ID16 = "reserved-name";
-var reservedNameAnalyzer = {
-  id: ID16,
+// plugins/core/analyzers/name-reserved/index.ts
+var ID17 = "name-reserved";
+var nameReservedAnalyzer = {
+  id: ID17,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
-  version: "1.0.0",
-  description: "Flags reserved-name collisions on two surfaces. Target side: a user file whose name collides with a Provider runtime's built-in invocable (the runtime shadows the file silently). Source side: a link that resolves to a reserved name, which the post-walk lift transform downgrades to the sentinel `RESERVED_TARGET_CONFIDENCE` (0.1). The two findings share the analyzer id so consumers can group by root cause; the source-side issue carries `data.target` matching the link so UIs can correlate per-row.",
+  description: "Flags two kinds of reserved-name collision: a file whose name shadows a built-in command of the active runtime, and a link that resolves to one of those reserved names.",
   mode: "deterministic",
   // eslint-disable-next-line complexity
   evaluate(ctx) {
@@ -2311,10 +2278,10 @@ var reservedNameAnalyzer = {
       const node = byPath3.get(path);
       if (!node) continue;
       issues.push({
-        analyzerId: ID16,
+        analyzerId: ID17,
         severity: "warn",
         nodeIds: [node.path],
-        message: tx(RESERVED_NAME_TEXTS.message, {
+        message: tx(NAME_RESERVED_TEXTS.message, {
           path: node.path,
           provider: node.provider,
           kind: node.kind
@@ -2327,10 +2294,10 @@ var reservedNameAnalyzer = {
       const reservedNode = findReservedNodeForLink(link, reserved, byPath3);
       if (!reservedNode) continue;
       issues.push({
-        analyzerId: ID16,
+        analyzerId: ID17,
         severity: "warn",
         nodeIds: [link.source],
-        message: tx(RESERVED_NAME_TEXTS.linkMessage, {
+        message: tx(NAME_RESERVED_TEXTS.linkMessage, {
           kind: link.kind,
           target: link.target,
           provider: reservedNode.provider,
@@ -2387,221 +2354,33 @@ function normaliseId(raw) {
   return raw.normalize("NFD").replace(new RegExp("\\p{Mn}+", "gu"), "").toLowerCase().replace(/[-_\s]+/g, " ").replace(/  +/g, " ").trim();
 }
 
-// plugins/core/analyzers/self-loop/text.ts
-var SELF_LOOP_TEXTS = {
-  /**
-   * Per-edge warn: a node body references itself via the slash /
-   * at-directive / markdown-link surface (most commonly because the
-   * file's heading IS the invocation token, e.g. `# /deploy` inside
-   * `commands/deploy.md`). The link is structurally valid but rarely
-   * the operator's intent; UI consumers MAY hide it by default and
-   * surface a count.
-   */
-  message: "{{source}} references itself via `{{trigger}}` ({{kind}}). Self-loops typically come from the file's own heading or label and are noise rather than intent. Either remove the in-body token or treat this finding as expected and acknowledged."
-};
-
-// plugins/core/analyzers/self-loop/index.ts
-var ID17 = "self-loop";
-var selfLoopAnalyzer = {
-  id: ID17,
-  pluginId: CORE_PLUGIN_ID,
-  kind: "analyzer",
-  version: "1.0.0",
-  description: "Flags links whose source is its own resolved target (a body heading like `# /deploy` inside the file that defines `/deploy`). One warn per self-looping link, attached to the source. UI consumers hide self-loops by default; this analyzer is the authoritative detector.",
-  mode: "deterministic",
-  evaluate(ctx) {
-    if (ctx.links.length === 0) return [];
-    const issues = [];
-    for (const link of ctx.links) {
-      if (!isSelfLoop(link)) continue;
-      issues.push({
-        analyzerId: ID17,
-        severity: "warn",
-        nodeIds: [link.source],
-        message: tx(SELF_LOOP_TEXTS.message, {
-          source: link.source,
-          trigger: link.trigger?.originalTrigger ?? link.target,
-          kind: link.kind
-        }),
-        data: {
-          target: link.target,
-          resolvedTarget: link.resolvedTarget ?? link.target,
-          kind: link.kind,
-          // Mark explicitly so UI / downstream consumers can read this
-          // single field instead of re-computing the `source === target`
-          // predicate themselves.
-          selfLoop: true
-        }
-      });
-    }
-    return issues;
-  }
-};
-function isSelfLoop(link) {
-  if (link.source === link.target) return true;
-  if (link.resolvedTarget && link.source === link.resolvedTarget) return true;
-  return false;
-}
-
-// plugins/core/analyzers/signal-collision/text.ts
-var SIGNAL_COLLISION_TEXTS = {
-  /**
-   * Per-Signal warn issue: two extractors detected something at
-   * overlapping byte ranges within the same node and the resolver
-   * dropped the loser. Surfaces WHO lost, WHO won, and the tiebreak
-   * reason so the operator can understand why a candidate edge did NOT
-   * become a Link.
-   *
-   * Placeholders are deliberately verbose because this is one of the
-   * few diagnostic surfaces where the operator may need to disambiguate
-   * a confusing graph (e.g. a `[link](path)` followed by `@path` inside
-   * the same paragraph, the markdown-link wins and the at-directive
-   * silently disappears without this warning).
-   */
-  message: "{{loserExtractor}} detected `{{loserRaw}}` at offset {{loserRange}} but {{winnerExtractor}}'s detection at {{winnerRange}} won the overlap collision ({{reason}}). The graph shows the winning edge only; the loser is not persisted.",
-  /**
-   * Same warn but for the rare case the resolver rejected a Signal
-   * because the operator disabled its extractor via
-   * `plugins.<id>.extensions.<extId>.enabled`. Phase 4+ stub: today the
-   * filter is not wired so this template is unreachable from the
-   * resolver; documented now so the analyzer stays forward-compatible
-   * with the upcoming filter pass.
-   */
-  messageExtractorDisabled: "Extension `{{extractorId}}` is disabled; its detection `{{loserRaw}}` (offset {{loserRange}}) did not produce a Link. Re-enable the extension in Settings or via `sm plugins enable` to surface its edges.",
-  /**
-   * Same warn but for the future confidence floor case. Phase 4+ stub:
-   * today the resolver materialises every winning candidate regardless
-   * of confidence, so this template is unreachable; documented for
-   * forward compatibility.
-   */
-  messageBelowFloor: "Detection `{{loserRaw}}` (offset {{loserRange}}, confidence {{confidence}}) fell below the configured threshold {{threshold}} and was dropped."
-};
-
-// plugins/core/analyzers/signal-collision/index.ts
-var ID18 = "signal-collision";
-var signalCollisionAnalyzer = {
-  id: ID18,
-  pluginId: CORE_PLUGIN_ID,
-  kind: "analyzer",
-  version: "1.0.0",
-  description: "Surfaces Signal IR resolver rejections (range-overlap losers, disabled extractors, below-floor candidates) as warn issues attached to the Signal's source node.",
-  mode: "deterministic",
-  evaluate(ctx) {
-    const signals = ctx.signals;
-    if (!signals || signals.length === 0) return [];
-    const issues = [];
-    for (const signal of signals) {
-      const issue = makeIssue(signal);
-      if (issue) issues.push(issue);
-    }
-    return issues;
-  }
-};
-function makeIssue(signal) {
-  const resolution = signal.resolution;
-  if (!resolution || resolution.outcome !== "rejected") return null;
-  if (resolution.rejectedBy) {
-    const winner = resolution.rejectedBy;
-    const winnerCandidate = signal.candidates[resolution.winnerIndex ?? 0];
-    const loserRange = signal.range ? `${signal.range.start}-${signal.range.end}` : "unknown";
-    const winnerRange = `${winner.range.start}-${winner.range.end}`;
-    return {
-      analyzerId: ID18,
-      severity: "warn",
-      nodeIds: [signal.source],
-      message: tx(SIGNAL_COLLISION_TEXTS.message, {
-        loserExtractor: winnerCandidate.extractorId,
-        loserRaw: signal.raw,
-        loserRange,
-        winnerExtractor: winner.extractorId,
-        winnerRange,
-        reason: winner.reason
-      }),
-      data: {
-        loser: {
-          extractorId: winnerCandidate.extractorId,
-          raw: signal.raw,
-          range: signal.range ?? null,
-          candidate: {
-            kind: winnerCandidate.kind,
-            target: winnerCandidate.target,
-            confidence: winnerCandidate.confidence
-          }
-        },
-        winner: {
-          extractorId: winner.extractorId,
-          range: winner.range
-        },
-        reason: winner.reason
-      }
-    };
-  }
-  if (resolution.extractorDisabled) {
-    const loserRange = signal.range ? `${signal.range.start}-${signal.range.end}` : "unknown";
-    return {
-      analyzerId: ID18,
-      severity: "warn",
-      nodeIds: [signal.source],
-      message: tx(SIGNAL_COLLISION_TEXTS.messageExtractorDisabled, {
-        extractorId: resolution.extractorDisabled.extractorId,
-        loserRaw: signal.raw,
-        loserRange
-      }),
-      data: {
-        extractorDisabled: resolution.extractorDisabled,
-        raw: signal.raw,
-        range: signal.range ?? null
-      }
-    };
-  }
-  if (resolution.belowFloor) {
-    const loserRange = signal.range ? `${signal.range.start}-${signal.range.end}` : "unknown";
-    const topCandidate = signal.candidates[0];
-    return {
-      analyzerId: ID18,
-      severity: "warn",
-      nodeIds: [signal.source],
-      message: tx(SIGNAL_COLLISION_TEXTS.messageBelowFloor, {
-        loserRaw: signal.raw,
-        loserRange,
-        confidence: topCandidate.confidence,
-        threshold: resolution.belowFloor.threshold
-      }),
-      data: {
-        belowFloor: resolution.belowFloor,
-        raw: signal.raw,
-        range: signal.range ?? null
-      }
-    };
-  }
-  return null;
-}
-
-// plugins/core/analyzers/stability/index.ts
-var ID19 = "stability";
+// plugins/core/analyzers/node-stability/index.ts
+var ID18 = "node-stability";
 var EXPERIMENTAL_TOOLTIP = "Experimental: API may change";
 var DEPRECATED_TOOLTIP = "Deprecated: avoid in new code";
-var stabilityAnalyzer = {
-  id: ID19,
+var nodeStabilityAnalyzer = {
+  id: ID18,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
-  version: "1.0.0",
-  description: "Reports node lifecycle stage (`experimental`, `deprecated`) on the card.",
+  description: "Reports a node's stability stage (`experimental`, `deprecated`) on the card.",
   mode: "deterministic",
   ui: {
+    // Second in the footer-right cluster, after the drift chip and
+    // before the severity counters. Stability is a state badge, not a
+    // count, so its priority sits between the two semantic zones.
     experimental: {
       slot: "card.footer.right",
       icon: "fa-solid fa-flask",
       label: "experimental",
       emitWhenEmpty: false,
-      priority: 10
+      priority: 20
     },
     deprecated: {
       slot: "card.footer.right",
       icon: "pi-ban",
       label: "deprecated",
       emitWhenEmpty: false,
-      priority: 10
+      priority: 20
     }
   },
   evaluate(ctx) {
@@ -2614,7 +2393,7 @@ var stabilityAnalyzer = {
           tooltip: EXPERIMENTAL_TOOLTIP
         });
         issues.push({
-          analyzerId: ID19,
+          analyzerId: ID18,
           severity: "info",
           nodeIds: [node.path],
           message: `Node '${node.path}' is marked experimental: API may change.`,
@@ -2627,7 +2406,7 @@ var stabilityAnalyzer = {
           severity: "warn"
         });
         issues.push({
-          analyzerId: ID19,
+          analyzerId: ID18,
           severity: "warn",
           nodeIds: [node.path],
           message: `Node '${node.path}' is marked deprecated: avoid in new code.`,
@@ -2654,20 +2433,19 @@ function isStability(value) {
   return value === "experimental" || value === "deprecated" || value === "stable";
 }
 
-// plugins/core/analyzers/superseded/text.ts
-var SUPERSEDED_TEXTS = {
+// plugins/core/analyzers/node-superseded/text.ts
+var NODE_SUPERSEDED_TEXTS = {
   /** `<path> is superseded by <supersededBy>` */
   message: "{{path}} is superseded by {{supersededBy}}"
 };
 
-// plugins/core/analyzers/superseded/index.ts
-var ID20 = "superseded";
-var supersededAnalyzer = {
-  id: ID20,
+// plugins/core/analyzers/node-superseded/index.ts
+var ID19 = "node-superseded";
+var nodeSupersededAnalyzer = {
+  id: ID19,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
-  version: "1.0.0",
-  description: "Detects and marks nodes replaced by a newer one via `supersededBy`.",
+  description: "Marks nodes replaced by a newer one via `supersededBy`.",
   mode: "deterministic",
   evaluate(ctx) {
     const issues = [];
@@ -2675,10 +2453,10 @@ var supersededAnalyzer = {
       const supersededBy = pickSupersededBy(node);
       if (supersededBy === null) continue;
       issues.push({
-        analyzerId: ID20,
+        analyzerId: ID19,
         severity: "info",
         nodeIds: [node.path],
-        message: tx(SUPERSEDED_TEXTS.message, {
+        message: tx(NODE_SUPERSEDED_TEXTS.message, {
           path: node.path,
           supersededBy
         }),
@@ -2698,351 +2476,307 @@ function pickSupersededBy(node) {
   return value;
 }
 
-// plugins/core/analyzers/trigger-collision/text.ts
-var TRIGGER_COLLISION_TEXTS = {
-  /**
-   * Top-level message when `analyzeTriggerBucket` accumulated exactly one
-   * cause part. Used for the advertiser-ambiguous-only, invocation-
-   * ambiguous-only, and cross-kind-only branches.
-   */
-  messageOnePart: 'Trigger "{{normalized}}" has {{part}}.',
-  /**
-   * Top-level message when `analyzeTriggerBucket` accumulated two cause
-   * parts (advertiser-ambiguous AND invocation-ambiguous fire together).
-   * The joiner lives inside the template so future locales can adapt it
-   * (e.g. `'; y '` in Spanish) without touching the rule code.
-   */
-  messageTwoParts: 'Trigger "{{normalized}}" has {{first}}; and {{second}}.',
-  /** `<n> nodes advertise it: <list>` part, fires on the advertiser-ambiguous branch. */
-  partAdvertisers: "{{count}} nodes advertise it: {{paths}}",
-  /** `<n> distinct invocation forms: <list>` part, fires on the invocation-ambiguous branch. */
-  partInvocations: "{{count}} distinct invocation forms: {{forms}}",
-  /** Singular cross-kind cause: `non-canonical invocation <form> against advertiser <path>`. */
-  partNonCanonicalSingular: "non-canonical invocation {{forms}} against advertiser {{advertiser}}",
-  /** Plural cross-kind cause: `non-canonical invocations <forms> against advertiser <path>`. */
-  partNonCanonicalPlural: "non-canonical invocations {{forms}} against advertiser {{advertiser}}"
+// plugins/core/analyzers/reference-broken/index.ts
+import { posix as pathPosix4, resolve as resolve3 } from "path";
+
+// plugins/core/analyzers/reference-broken/text.ts
+var REFERENCE_BROKEN_TEXTS = {
+  /** `Broken <kind> reference from <source> → <target>` */
+  message: "Broken {{kind}} reference from {{source}} \u2192 {{target}}",
+  // Tooltips for the per-node view-contribution badges. Singular vs
+  // plural keeps the count grammar correct without a sub-template.
+  alertTooltipSingle: "This node has a broken reference. Open the inspector for details.",
+  alertTooltipMany: "This node has {{count}} broken references. Open the inspector for details.",
+  // Fix-summary copy when the broken trigger has a same-named file on
+  // disk that does not advertise `name:` in its frontmatter. Two
+  // variants for single vs multiple candidates; same template family
+  // as the alert tooltips above.
+  hintSummarySingle: "Add `name: {{name}}` to the frontmatter of {{candidate}} so this reference resolves.",
+  hintSummaryMany: "Add `name: {{name}}` to the frontmatter of one of these files so this reference resolves: {{candidates}}."
 };
 
-// plugins/core/analyzers/trigger-collision/index.ts
-var ID21 = "trigger-collision";
-var ADVERTISING_KINDS = /* @__PURE__ */ new Set([
-  "command",
-  "skill",
-  "agent"
-]);
-var triggerCollisionAnalyzer = {
-  id: ID21,
+// plugins/core/analyzers/reference-broken/index.ts
+var ID20 = "reference-broken";
+var referenceBrokenAnalyzer = {
+  id: ID20,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
+  description: "Flags arrows pointing at a node not part of the current scan.",
   mode: "deterministic",
-  version: "1.0.0",
-  description: "Detects and flags two or more nodes claiming the same `/command` or `@agent` name.",
-  // Two claim-collection passes (advertisement + invocation) feeding
-  // the bucket map. Per-bucket analysis lives in `analyzeTriggerBucket`.
-  // eslint-disable-next-line complexity
+  // No `ui` declaration: this analyzer used to emit a per-finding
+  // counter chip on `card.footer.right`, but that chip duplicated the
+  // aggregate severity counters now owned by `core/issue-counter`. The
+  // detection logic stays intact, only the chip emission is gone.
+  ui: {},
+  // The resolver, the reference-paths escape hatch, and the hint
+  // index all share the per-link loop, splitting would re-walk
+  // `ctx.links` once per concern. The per-source aggregation that
+  // historically lived alongside (driving the now-retired chip
+  // emission) moved into `core/issue-counter`.
   evaluate(ctx) {
-    const buckets = /* @__PURE__ */ new Map();
-    const push = (key, claim) => {
-      const bucket = buckets.get(key) ?? [];
-      bucket.push(claim);
-      buckets.set(key, bucket);
-    };
-    for (const node of ctx.nodes) {
-      if (!ADVERTISING_KINDS.has(node.kind)) continue;
-      const raw = node.frontmatter?.["name"];
-      if (typeof raw !== "string" || raw.length === 0) continue;
-      const normalized = `/${normalizeTrigger(raw)}`;
-      if (normalized === "/") continue;
-      push(normalized, {
-        kind: "advertiser",
-        token: node.path,
-        nodeId: node.path,
-        canonicalForm: `/${raw}`
-      });
-    }
+    const byPath3 = new Set(ctx.nodes.map((n) => n.path));
+    const byNormalizedName = indexByNormalizedName(ctx.nodes);
+    const byBasenameWithoutName = indexByBasenameWithoutName(ctx.nodes);
+    const refIndex = ctx.referenceablePaths && ctx.referenceablePaths.size > 0 && ctx.cwd ? { paths: ctx.referenceablePaths, cwd: ctx.cwd } : null;
+    const issues = [];
     for (const link of ctx.links) {
-      const normalized = link.trigger?.normalizedTrigger;
-      if (!normalized) continue;
-      push(normalized, {
-        kind: "invocation",
-        token: link.target,
-        nodeId: link.source
-      });
-    }
-    const issues = [];
-    for (const [normalized, claims] of buckets) {
-      const issue = analyzeTriggerBucket(normalized, claims);
-      if (issue) issues.push(issue);
+      if (isResolved(link, byPath3, byNormalizedName)) continue;
+      if (refIndex && resolvesViaReferencePaths(link, refIndex)) continue;
+      const candidates = findHintCandidates(link, byBasenameWithoutName);
+      issues.push(buildIssue(link, candidates));
     }
     return issues;
   }
 };
-function analyzeTriggerBucket(normalized, claims) {
-  const advertiserPaths = [
-    ...new Set(claims.filter((c) => c.kind === "advertiser").map((c) => c.token))
-  ].sort();
-  const invocationTargets = [
-    ...new Set(claims.filter((c) => c.kind === "invocation").map((c) => c.token))
-  ].sort();
-  const advertisers = claims.filter(
-    (c) => c.kind === "advertiser"
-  );
-  const advertiserAmbiguous = advertiserPaths.length >= 2;
-  const invocationAmbiguous = invocationTargets.length >= 2;
-  const canonicalForms = new Set(advertisers.map((a) => a.canonicalForm));
-  const nonCanonicalInvocations = invocationTargets.filter((t) => !canonicalForms.has(t));
-  const crossKindAmbiguous = advertiserPaths.length === 1 && nonCanonicalInvocations.length >= 1;
-  if (!advertiserAmbiguous && !invocationAmbiguous && !crossKindAmbiguous) {
-    return null;
+function buildIssue(link, hintCandidates = []) {
+  const data = {
+    target: link.target,
+    kind: link.kind,
+    trigger: link.trigger?.normalizedTrigger ?? null
+  };
+  const issue = {
+    analyzerId: ID20,
+    // `error`, not `warn`: a link whose target is not in the scan is a
+    // structural defect the operator must notice, and the card chip
+    // paints `danger` (red) to match. Per the chip-vs-issue policy in
+    // `context/view-slots.md`, a `danger` chip MUST be backed by an
+    // `error` Issue so the visual signal lines up with the exit code
+    // and the global error count on the card.
+    severity: "error",
+    nodeIds: [link.source],
+    message: tx(REFERENCE_BROKEN_TEXTS.message, {
+      kind: link.kind,
+      source: link.source,
+      target: link.target
+    }),
+    data
+  };
+  if (hintCandidates.length > 0) {
+    const suggestedName = (link.trigger?.normalizedTrigger ?? "").replace(/^[/@]/, "").trim();
+    const candidatePaths = hintCandidates.map((n) => n.path);
+    data["hint"] = {
+      kind: "missing-frontmatter-name",
+      suggestedName,
+      candidates: candidatePaths
+    };
+    issue.fix = {
+      summary: candidatePaths.length === 1 ? tx(REFERENCE_BROKEN_TEXTS.hintSummarySingle, {
+        name: suggestedName,
+        candidate: candidatePaths[0]
+      }) : tx(REFERENCE_BROKEN_TEXTS.hintSummaryMany, {
+        name: suggestedName,
+        candidates: candidatePaths.join(", ")
+      }),
+      autofixable: false
+    };
   }
-  const nodeIds = [...new Set(claims.map((c) => c.nodeId))].sort();
-  const parts = [];
-  if (advertiserAmbiguous) {
-    parts.push(
-      tx(TRIGGER_COLLISION_TEXTS.partAdvertisers, {
-        count: advertiserPaths.length,
-        paths: advertiserPaths.join(", ")
-      })
-    );
+  return issue;
+}
+function resolvesViaReferencePaths(link, refIndex) {
+  if (!isPathStyleLink(link)) return false;
+  return refIndex.paths.has(resolve3(refIndex.cwd, link.target));
+}
+function indexByNormalizedName(nodes) {
+  const out = /* @__PURE__ */ new Map();
+  for (const node of nodes) {
+    const raw = node.frontmatter?.["name"];
+    const name = typeof raw === "string" ? raw : "";
+    if (!name) continue;
+    const key = normalizeTrigger(name);
+    const bucket = out.get(key) ?? [];
+    bucket.push(node);
+    out.set(key, bucket);
   }
-  if (invocationAmbiguous) {
-    parts.push(
-      tx(TRIGGER_COLLISION_TEXTS.partInvocations, {
-        count: invocationTargets.length,
-        forms: invocationTargets.join(", ")
-      })
-    );
-  } else if (crossKindAmbiguous) {
-    const template = nonCanonicalInvocations.length > 1 ? TRIGGER_COLLISION_TEXTS.partNonCanonicalPlural : TRIGGER_COLLISION_TEXTS.partNonCanonicalSingular;
-    parts.push(
-      tx(template, {
-        forms: nonCanonicalInvocations.join(", "),
-        advertiser: advertiserPaths[0]
-      })
-    );
+  return out;
+}
+function basenameWithoutExt(path) {
+  const base = pathPosix4.basename(path);
+  const ext = pathPosix4.extname(base);
+  return ext ? base.slice(0, -ext.length) : base;
+}
+function indexByBasenameWithoutName(nodes) {
+  const out = /* @__PURE__ */ new Map();
+  for (const node of nodes) {
+    const raw = node.frontmatter?.["name"];
+    const name = typeof raw === "string" ? raw : "";
+    if (name) continue;
+    const bare = basenameWithoutExt(node.path);
+    if (!bare) continue;
+    const key = normalizeTrigger(bare);
+    if (!key) continue;
+    const bucket = out.get(key) ?? [];
+    bucket.push(node);
+    out.set(key, bucket);
   }
-  const message = parts.length === 2 ? tx(TRIGGER_COLLISION_TEXTS.messageTwoParts, {
-    normalized,
-    first: parts[0],
-    second: parts[1]
-  }) : tx(TRIGGER_COLLISION_TEXTS.messageOnePart, {
-    normalized,
-    part: parts[0]
-  });
-  return {
-    analyzerId: ID21,
-    severity: "error",
-    nodeIds,
-    message,
-    data: {
-      normalizedTrigger: normalized,
-      invocationTargets,
-      advertiserPaths
-    }
-  };
+  return out;
 }
-
-// plugins/core/analyzers/unknown-field/index.ts
-import { readFileSync } from "fs";
-import { dirname, resolve as resolve3 } from "path";
-import { createRequire } from "module";
-import { Ajv2020 } from "ajv/dist/2020.js";
-
-// kernel/util/ajv-interop.ts
-import addFormatsModule from "ajv-formats";
-var addFormats = addFormatsModule.default ?? addFormatsModule;
-function applyAjvFormats(ajv) {
-  addFormats(ajv);
+function findHintCandidates(link, idx) {
+  const normalized = link.trigger?.normalizedTrigger;
+  if (!normalized) return [];
+  const sigil = normalized.charAt(0);
+  if (sigil !== "/" && sigil !== "@") return [];
+  const withoutSigil = normalized.slice(1).trim();
+  if (!withoutSigil) return [];
+  return idx.get(withoutSigil) ?? [];
+}
+function isResolved(link, byPath3, byNormalizedName) {
+  const normalized = link.trigger?.normalizedTrigger;
+  if (normalized) {
+    const withoutSigil = normalized.replace(/^[/@]/, "").trim();
+    if (byNormalizedName.has(withoutSigil)) return true;
+  }
+  if (byPath3.has(link.target)) return true;
+  return false;
+}
+function isPathStyleLink(link) {
+  const sigil = link.trigger?.normalizedTrigger?.charAt(0);
+  if (sigil === "/" || sigil === "@") return false;
+  return true;
 }
 
-// plugins/core/analyzers/unknown-field/text.ts
-var UNKNOWN_FIELD_TEXTS = {
-  /** Key inside `annotations:` is not in the curated catalog. */
-  unknownAnnotationKey: "{{path}}: sidecar annotations contain unknown key '{{key}}' (not in annotations.schema.json catalog).",
-  /** Top-level key is neither reserved, nor a registered plugin namespace, nor a registered root key. */
-  unknownRootKey: "{{path}}: sidecar declares unknown top-level key '{{key}}'; not a reserved block, not a registered plugin namespace, not a registered root contribution.",
-  /** Value under a registered plugin namespace fails the contributed schema. */
-  pluginNamespaceInvalid: "{{path}}: sidecar block '{{pluginId}}.{{key}}' fails the schema contributed by plugin '{{pluginId}}': {{errors}}.",
-  // Tooltips for the per-node view-contribution badges. Singular vs
-  // plural keeps the count grammar correct without a sub-template.
-  alertTooltipSingle: "This node has 1 unknown field in its sidecar. Open the inspector for details.",
-  alertTooltipMany: "This node has {{count}} unknown fields in its sidecar. Open the inspector for details."
+// plugins/core/analyzers/reference-redundant/text.ts
+var REFERENCE_REDUNDANT_TEXTS = {
+  /**
+   * Multi-form / multi-occurrence reference message. Lists each
+   * occurrence (trigger + line) so the operator sees the full
+   * authorial surface without having to grep the body.
+   */
+  message: "{{source}} references {{resolvedTarget}} via {{count}} occurrences: {{occurrences}}. Consider consolidating to a single form to reduce maintenance surface and avoid duplicate inlining at runtime.",
+  /** Inline separator between occurrences in the message. */
+  occurrenceSeparator: ", ",
+  /** Per-occurrence formatting (trigger + line). */
+  occurrence: "`{{trigger}}` ({{kind}}, line {{line}})",
+  /** Per-occurrence formatting when the extractor did not record a line. */
+  occurrenceUnknownLine: "`{{trigger}}` ({{kind}}, unknown line)"
 };
 
-// plugins/core/analyzers/unknown-field/index.ts
-var ID22 = "unknown-field";
-var RESERVED_ROOT_BLOCKS = /* @__PURE__ */ new Set(["identity", "annotations", "settings", "audit"]);
-var unknownFieldAnalyzer = {
-  id: ID22,
+// plugins/core/analyzers/reference-redundant/index.ts
+var ID21 = "reference-redundant";
+var referenceRedundantAnalyzer = {
+  id: ID21,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
-  version: "1.0.0",
-  description: "Detects and flags typos or unrecognized keys in sidecars (`.sm`).",
+  description: "Flags when one node references the same target through two or more different links (e.g. a markdown link plus a `references:` entry).",
   mode: "deterministic",
-  ui: {
-    // Corner badge on the graph card; count omitted when there is a
-    // single unknown field (avoids a noisy "icon + 1" chip).
-    alert: {
-      slot: "graph.node.alert",
-      // Filled warning triangle on the corner, matches the broken-ref
-      // alert's "attention-grabbing solid" pattern; the footer chip
-      // below stays outlined for the quieter counter pairing.
-      icon: "fa-solid fa-triangle-exclamation",
-      emitWhenEmpty: false
-    },
-    // Footer chip on the card, `_counter` shape but rendered icon-only
-    // (the analyzer emits `value: 0` so NodeCounter hides the number
-    // and only the glyph shows). PrimeIcons `pi-question-circle` so the
-    // visual weight matches `annotation-stale`'s `pi-clock` chip
-    // sitting next to it on the same footer row. `emitWhenEmpty: true`
-    // is required: with `value: 0` the slot treats the payload as
-    // empty, so the manifest has to opt in to keep the emission.
-    chip: {
-      slot: "card.footer.right",
-      icon: "pi-question-circle",
-      emitWhenEmpty: true,
-      priority: 30
-    }
-  },
-  // Analyzer body iterates every sidecar root and classifies each
-  // key against three buckets (catalog / plugin namespace / unknown
-  // root). The per-key branching IS the classification table; factoring
-  // it out would rebuild the discriminator elsewhere. Per
-  // `context/lint.md` category 7 (recursive type-discriminator walkers).
-  // eslint-disable-next-line complexity
   evaluate(ctx) {
-    const sidecarRoots = ctx.sidecarRoots;
-    if (!sidecarRoots || sidecarRoots.size === 0) return [];
-    const knownAnnotationKeys = getKnownAnnotationKeys();
-    const contributions = ctx.annotationContributions ?? [];
-    const namespacedByPlugin = indexNamespacedContributions(contributions);
-    const rootKeys = indexRootContributions(contributions);
-    const knownPluginIds = collectPluginIds(contributions);
-    const issues = [];
-    const perNode = /* @__PURE__ */ new Map();
-    const bump2 = (nodePath) => {
-      perNode.set(nodePath, (perNode.get(nodePath) ?? 0) + 1);
-    };
-    for (const node of ctx.nodes) {
-      const root = sidecarRoots.get(node.path);
-      if (!root) continue;
-      const annotations = root["annotations"];
-      if (annotations !== void 0 && annotations !== null && typeof annotations === "object" && !Array.isArray(annotations)) {
-        for (const key of Object.keys(annotations)) {
-          if (!knownAnnotationKeys.has(key)) {
-            issues.push({
-              analyzerId: ID22,
-              severity: "warn",
-              nodeIds: [node.path],
-              message: tx(UNKNOWN_FIELD_TEXTS.unknownAnnotationKey, {
-                path: node.path,
-                key
-              }),
-              data: { surface: "annotations", key }
-            });
-            bump2(node.path);
-          }
-        }
-      }
-      for (const key of Object.keys(root)) {
-        if (RESERVED_ROOT_BLOCKS.has(key)) continue;
-        if (rootKeys.has(key)) continue;
-        if (knownPluginIds.has(key)) {
-          const block = root[key];
-          if (block === null || typeof block !== "object" || Array.isArray(block)) continue;
-          const contribsForPlugin = namespacedByPlugin.get(key);
-          if (!contribsForPlugin) continue;
-          for (const [contribKey, validator] of contribsForPlugin) {
-            const value = block[contribKey];
-            if (value === void 0) continue;
-            if (validator(value)) continue;
-            const errors = (validator.errors ?? []).map((e) => `${e.instancePath || "(root)"} ${e.message ?? e.keyword}`).join("; ");
-            issues.push({
-              analyzerId: ID22,
-              severity: "warn",
-              nodeIds: [node.path],
-              message: tx(UNKNOWN_FIELD_TEXTS.pluginNamespaceInvalid, {
-                path: node.path,
-                pluginId: key,
-                key: contribKey,
-                errors
-              }),
-              data: { surface: "plugin-namespace", pluginId: key, key: contribKey }
-            });
-            bump2(node.path);
-          }
-          continue;
-        }
-        issues.push({
-          analyzerId: ID22,
-          severity: "warn",
-          nodeIds: [node.path],
-          message: tx(UNKNOWN_FIELD_TEXTS.unknownRootKey, {
-            path: node.path,
-            key
-          }),
-          data: { surface: "root", key }
-        });
-        bump2(node.path);
-      }
+    if (ctx.links.length === 0) return [];
+    const byPath3 = /* @__PURE__ */ new Map();
+    for (const node of ctx.nodes) byPath3.set(node.path, node);
+    const byName = buildNameIndex2(ctx.nodes);
+    const groups = /* @__PURE__ */ new Map();
+    for (const link of ctx.links) {
+      const resolved = resolveTargetPath(link, byPath3, byName);
+      if (!resolved) continue;
+      const key = `${link.source}\0${resolved}`;
+      const bucket = groups.get(key);
+      if (bucket) bucket.push(link);
+      else groups.set(key, [link]);
     }
-    for (const [nodePath, count] of perNode) {
-      const tooltip = count === 1 ? UNKNOWN_FIELD_TEXTS.alertTooltipSingle : tx(UNKNOWN_FIELD_TEXTS.alertTooltipMany, { count });
-      ctx.emitContribution(nodePath, "alert", {
-        icon: "fa-solid fa-triangle-exclamation",
-        severity: "warn",
-        tooltip
-      });
-      ctx.emitContribution(nodePath, "chip", {
-        value: 0,
+    const issues = [];
+    for (const [key, links] of groups) {
+      const totalOccurrences = links.reduce((acc, l) => acc + (l.occurrences?.length ?? 1), 0);
+      if (totalOccurrences < 2) continue;
+      const [source, resolvedTarget] = key.split("\0");
+      const flat = flattenOccurrences(links);
+      issues.push({
+        analyzerId: ID21,
         severity: "warn",
-        tooltip
+        nodeIds: [source],
+        message: tx(REFERENCE_REDUNDANT_TEXTS.message, {
+          source,
+          resolvedTarget,
+          count: flat.length,
+          occurrences: flat.map(formatOccurrence).join(REFERENCE_REDUNDANT_TEXTS.occurrenceSeparator)
+        }),
+        data: {
+          target: resolvedTarget,
+          resolvedTarget,
+          occurrences: flat.map((o) => ({
+            kind: o.kind,
+            trigger: o.originalTrigger,
+            line: o.line ?? null,
+            extractor: o.extractor
+          }))
+        }
       });
     }
     return issues;
   }
 };
-var cachedKnownKeys = null;
-function getKnownAnnotationKeys() {
-  if (cachedKnownKeys) return cachedKnownKeys;
-  const require2 = createRequire(import.meta.url);
-  const indexPath = require2.resolve("@skill-map/spec/index.json");
-  const specRoot = dirname(indexPath);
-  const schema = JSON.parse(
-    readFileSync(resolve3(specRoot, "schemas/annotations.schema.json"), "utf8")
-  );
-  cachedKnownKeys = new Set(Object.keys(schema.properties ?? {}));
-  return cachedKnownKeys;
+function flattenOccurrences(links) {
+  const out = [];
+  for (const link of links) {
+    if (link.occurrences && link.occurrences.length > 0) {
+      for (const occ of link.occurrences) {
+        out.push({
+          kind: link.kind,
+          originalTrigger: occ.originalTrigger,
+          extractor: occ.extractor,
+          line: occ.location?.line ?? null
+        });
+      }
+      continue;
+    }
+    const trigger = link.trigger?.originalTrigger ?? link.target;
+    out.push({
+      kind: link.kind,
+      originalTrigger: trigger,
+      extractor: link.sources[0] ?? "unknown",
+      line: link.location?.line ?? null
+    });
+  }
+  out.sort((a, b) => {
+    const la = a.line ?? Number.MAX_SAFE_INTEGER;
+    const lb = b.line ?? Number.MAX_SAFE_INTEGER;
+    if (la !== lb) return la - lb;
+    return a.originalTrigger.localeCompare(b.originalTrigger);
+  });
+  return out;
+}
+function formatOccurrence(occ) {
+  if (occ.line === null) {
+    return tx(REFERENCE_REDUNDANT_TEXTS.occurrenceUnknownLine, { trigger: occ.originalTrigger, kind: occ.kind });
+  }
+  return tx(REFERENCE_REDUNDANT_TEXTS.occurrence, { trigger: occ.originalTrigger, kind: occ.kind, line: occ.line });
 }
-function indexNamespacedContributions(contributions) {
+function buildNameIndex2(nodes) {
   const out = /* @__PURE__ */ new Map();
-  const ajv = new Ajv2020({ strict: false, allErrors: true, allowUnionTypes: true });
-  applyAjvFormats(ajv);
-  for (const entry of contributions) {
-    if (entry.location !== "namespaced") continue;
-    let bucket = out.get(entry.pluginId);
-    if (!bucket) {
-      bucket = /* @__PURE__ */ new Map();
-      out.set(entry.pluginId, bucket);
-    }
-    try {
-      bucket.set(entry.key, ajv.compile(entry.schema));
-    } catch {
+  for (const node of nodes) {
+    for (const candidate of collectIdentifiers(node)) {
+      const normalised = normalizeTrigger(candidate);
+      if (!normalised) continue;
+      const bucket = out.get(normalised);
+      if (bucket) bucket.push(node.path);
+      else out.set(normalised, [node.path]);
     }
   }
   return out;
 }
-function indexRootContributions(contributions) {
-  const out = /* @__PURE__ */ new Set();
-  for (const entry of contributions) {
-    if (entry.location === "root") out.add(entry.key);
+function collectIdentifiers(node) {
+  const out = [];
+  const fmName = node.frontmatter?.["name"];
+  if (typeof fmName === "string" && fmName.length > 0) out.push(fmName);
+  const segs = node.path.split("/");
+  const last = segs[segs.length - 1] ?? "";
+  if (last) {
+    const stem = last.replace(/\.[^.]+$/, "");
+    if (stem) out.push(stem);
+  }
+  if (segs.length >= 2) {
+    const dirBase = segs[segs.length - 2];
+    if (dirBase) out.push(dirBase);
   }
   return out;
 }
-function collectPluginIds(contributions) {
-  const out = /* @__PURE__ */ new Set();
-  for (const entry of contributions) out.add(entry.pluginId);
-  return out;
+function resolveTargetPath(link, byPath3, byName) {
+  if (byPath3.has(link.target)) return link.target;
+  const trigger = link.trigger?.normalizedTrigger;
+  if (!trigger) return null;
+  const stripped = trigger.replace(/^[/@]/, "").trim();
+  if (!stripped) return null;
+  const candidates = byName.get(stripped);
+  if (!candidates || candidates.length === 0) return null;
+  return candidates[0] ?? null;
 }
 
 // kernel/adapters/schema-validators.ts
@@ -3231,185 +2965,449 @@ function registerProviderAuxiliarySchemas(ajv, providers) {
       ajv.addSchema(aux);
     }
   }
-}
-function resolveSpecRoot() {
-  const require2 = createRequire2(import.meta.url);
-  try {
-    const indexPath = require2.resolve("@skill-map/spec/index.json");
-    return dirname2(indexPath);
-  } catch {
-    throw new Error(
-      "@skill-map/spec not resolvable: ensure the workspace is linked or the package is installed."
-    );
+}
+function resolveSpecRoot() {
+  const require2 = createRequire2(import.meta.url);
+  try {
+    const indexPath = require2.resolve("@skill-map/spec/index.json");
+    return dirname2(indexPath);
+  } catch {
+    throw new Error(
+      "@skill-map/spec not resolvable: ensure the workspace is linked or the package is installed."
+    );
+  }
+}
+function existsSyncSafe(path) {
+  try {
+    readFileSync2(path, "utf8");
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// plugins/core/analyzers/schema-violation/text.ts
+var SCHEMA_VIOLATION_TEXTS = {
+  /** `Node <path> failed schema validation: <errors>` */
+  nodeFailure: "Node {{path}} failed schema validation: {{errors}}",
+  /** `Link <source> → <target> failed schema validation: <errors>` */
+  linkFailure: "Link {{source}} \u2192 {{target}} failed schema validation: {{errors}}",
+  /** `Node <path> is missing required frontmatter fields: <missing>` */
+  frontmatterBaseFailure: "Node {{path}} is missing required frontmatter fields: {{missing}}.",
+  /** Singular tooltip on the alert / chip when a node has exactly one validation failure. */
+  alertTooltipSingle: "Frontmatter or schema validation failed.",
+  /** Plural tooltip; `{{count}}` capped at 99 in the chip badge but the tooltip text shows the raw count. */
+  alertTooltipMany: "{{count}} schema validation issues on this node."
+};
+
+// plugins/core/analyzers/schema-violation/index.ts
+var ID22 = "schema-violation";
+var schemaViolationAnalyzer = {
+  id: ID22,
+  pluginId: CORE_PLUGIN_ID,
+  kind: "analyzer",
+  description: "Flags nodes or links that violate the project schemas.",
+  mode: "deterministic",
+  // No `ui` declaration: the per-node failure-count chip used to live
+  // on `card.footer.right`, but its information is now folded into the
+  // aggregate severity counters emitted by `core/issue-counter`. The
+  // findings still emit as `Issue` records, so `sm check` / inspector
+  // unchanged.
+  ui: {},
+  // Pre-existing complexity: validates every node + every link
+  // against multiple schemas with per-severity aggregation. The
+  // branching mirrors the schema catalog and splitting scatters the
+  // validation contract. Tracked as tech-debt; surfaced when an
+  // unrelated change touched the lint cache.
+  // eslint-disable-next-line complexity
+  evaluate(ctx) {
+    const validators = loadSchemaValidators();
+    const findings = [];
+    const perNode = /* @__PURE__ */ new Map();
+    for (const node of ctx.nodes) {
+      const before = findings.length;
+      collectNodeFindings(validators, node, findings);
+      collectFrontmatterBaseFindings(node, findings);
+      if (findings.length > before) {
+        let worst = "warn";
+        for (let i = before; i < findings.length; i++) {
+          if (findings[i].severity === "error") {
+            worst = "danger";
+            break;
+          }
+        }
+        const prev = perNode.get(node.path);
+        perNode.set(node.path, {
+          count: (prev?.count ?? 0) + (findings.length - before),
+          worst: prev?.worst === "danger" ? "danger" : worst
+        });
+      }
+    }
+    for (const link of ctx.links) {
+      collectLinkFindings(validators, link, findings);
+    }
+    void perNode;
+    return findings;
+  }
+};
+function collectNodeFindings(v, node, out) {
+  const result = v.validate("node", toNodeForSchema(node));
+  if (result.ok) return;
+  out.push({
+    analyzerId: ID22,
+    severity: "error",
+    nodeIds: [node.path],
+    message: tx(SCHEMA_VIOLATION_TEXTS.nodeFailure, {
+      path: node.path,
+      errors: result.errors
+    }),
+    data: { target: "node", path: node.path }
+  });
+}
+function collectFrontmatterBaseFindings(node, out) {
+  if (node.provider === "markdown") return;
+  if (node.bytes.frontmatter === 0) return;
+  const fm = node.frontmatter ?? {};
+  const missing = [];
+  if (isMissingStringField(fm, "name")) missing.push("name");
+  if (isMissingStringField(fm, "description")) missing.push("description");
+  if (missing.length === 0) return;
+  out.push({
+    analyzerId: ID22,
+    // `warn` (not `error`) so the default `sm scan` exit code stays
+    // 0 even when nodes are missing frontmatter base fields. Strict
+    // mode (`sm scan --strict`) still escalates to exit 1. Matches
+    // the `frontmatter-invalid` severity policy of the orchestrator.
+    severity: "warn",
+    nodeIds: [node.path],
+    message: tx(SCHEMA_VIOLATION_TEXTS.frontmatterBaseFailure, {
+      path: node.path,
+      missing: missing.join(", ")
+    }),
+    data: { target: "frontmatter", path: node.path, missing }
+  });
+}
+function isMissingStringField(fm, field) {
+  const v = fm[field];
+  return typeof v !== "string" || v.length === 0;
+}
+function collectLinkFindings(v, link, out) {
+  const result = v.validate("link", toLinkForSchema(link));
+  if (result.ok) return;
+  out.push({
+    analyzerId: ID22,
+    severity: "error",
+    nodeIds: [link.source],
+    message: tx(SCHEMA_VIOLATION_TEXTS.linkFailure, {
+      source: link.source,
+      target: link.target,
+      errors: result.errors
+    }),
+    data: { target: "link", source: link.source, to: link.target }
+  });
+}
+function toNodeForSchema(node) {
+  return {
+    path: node.path,
+    kind: node.kind,
+    provider: node.provider,
+    bodyHash: node.bodyHash,
+    frontmatterHash: node.frontmatterHash,
+    bytes: node.bytes,
+    tokens: node.tokens ?? void 0,
+    linksOutCount: node.linksOutCount,
+    linksInCount: node.linksInCount,
+    externalRefsCount: node.externalRefsCount,
+    frontmatter: node.frontmatter ?? {},
+    sidecar: node.sidecar ?? void 0
+  };
+}
+function toLinkForSchema(link) {
+  return {
+    source: link.source,
+    target: link.target,
+    kind: link.kind,
+    confidence: link.confidence,
+    sources: link.sources,
+    trigger: link.trigger ?? void 0,
+    location: link.location ?? void 0,
+    raw: link.raw ?? void 0
+  };
+}
+
+// plugins/core/analyzers/signal-collision/text.ts
+var SIGNAL_COLLISION_TEXTS = {
+  /**
+   * Per-Signal warn issue: two extractors detected something at
+   * overlapping byte ranges within the same node and the resolver
+   * dropped the loser. Surfaces WHO lost, WHO won, and the tiebreak
+   * reason so the operator can understand why a candidate edge did NOT
+   * become a Link.
+   *
+   * Placeholders are deliberately verbose because this is one of the
+   * few diagnostic surfaces where the operator may need to disambiguate
+   * a confusing graph (e.g. a `[link](path)` followed by `@path` inside
+   * the same paragraph, the markdown-link wins and the at-directive
+   * silently disappears without this warning).
+   */
+  message: "{{loserExtractor}} detected `{{loserRaw}}` at offset {{loserRange}} but {{winnerExtractor}}'s detection at {{winnerRange}} won the overlap collision ({{reason}}). The graph shows the winning edge only; the loser is not persisted.",
+  /**
+   * Same warn but for the rare case the resolver rejected a Signal
+   * because the operator disabled its extractor via
+   * `plugins.<id>.extensions.<extId>.enabled`. Phase 4+ stub: today the
+   * filter is not wired so this template is unreachable from the
+   * resolver; documented now so the analyzer stays forward-compatible
+   * with the upcoming filter pass.
+   */
+  messageExtractorDisabled: "Extension `{{extractorId}}` is disabled; its detection `{{loserRaw}}` (offset {{loserRange}}) did not produce a Link. Re-enable the extension in Settings or via `sm plugins enable` to surface its edges.",
+  /**
+   * Same warn but for the future confidence floor case. Phase 4+ stub:
+   * today the resolver materialises every winning candidate regardless
+   * of confidence, so this template is unreachable; documented for
+   * forward compatibility.
+   */
+  messageBelowFloor: "Detection `{{loserRaw}}` (offset {{loserRange}}, confidence {{confidence}}) fell below the configured threshold {{threshold}} and was dropped."
+};
+
+// plugins/core/analyzers/signal-collision/index.ts
+var ID23 = "signal-collision";
+var signalCollisionAnalyzer = {
+  id: ID23,
+  pluginId: CORE_PLUGIN_ID,
+  kind: "analyzer",
+  description: "Reports when two extractors fight over the same span of body text, or when a candidate link is dropped (extractor disabled, confidence too low) before it reaches the graph.",
+  mode: "deterministic",
+  evaluate(ctx) {
+    const signals = ctx.signals;
+    if (!signals || signals.length === 0) return [];
+    const issues = [];
+    for (const signal of signals) {
+      const issue = makeIssue(signal);
+      if (issue) issues.push(issue);
+    }
+    return issues;
+  }
+};
+function makeIssue(signal) {
+  const resolution = signal.resolution;
+  if (!resolution || resolution.outcome !== "rejected") return null;
+  if (resolution.rejectedBy) {
+    const winner = resolution.rejectedBy;
+    const winnerCandidate = signal.candidates[resolution.winnerIndex ?? 0];
+    const loserRange = signal.range ? `${signal.range.start}-${signal.range.end}` : "unknown";
+    const winnerRange = `${winner.range.start}-${winner.range.end}`;
+    return {
+      analyzerId: ID23,
+      severity: "warn",
+      nodeIds: [signal.source],
+      message: tx(SIGNAL_COLLISION_TEXTS.message, {
+        loserExtractor: winnerCandidate.extractorId,
+        loserRaw: signal.raw,
+        loserRange,
+        winnerExtractor: winner.extractorId,
+        winnerRange,
+        reason: winner.reason
+      }),
+      data: {
+        loser: {
+          extractorId: winnerCandidate.extractorId,
+          raw: signal.raw,
+          range: signal.range ?? null,
+          candidate: {
+            kind: winnerCandidate.kind,
+            target: winnerCandidate.target,
+            confidence: winnerCandidate.confidence
+          }
+        },
+        winner: {
+          extractorId: winner.extractorId,
+          range: winner.range
+        },
+        reason: winner.reason
+      }
+    };
+  }
+  if (resolution.extractorDisabled) {
+    const loserRange = signal.range ? `${signal.range.start}-${signal.range.end}` : "unknown";
+    return {
+      analyzerId: ID23,
+      severity: "warn",
+      nodeIds: [signal.source],
+      message: tx(SIGNAL_COLLISION_TEXTS.messageExtractorDisabled, {
+        extractorId: resolution.extractorDisabled.extractorId,
+        loserRaw: signal.raw,
+        loserRange
+      }),
+      data: {
+        extractorDisabled: resolution.extractorDisabled,
+        raw: signal.raw,
+        range: signal.range ?? null
+      }
+    };
   }
-}
-function existsSyncSafe(path) {
-  try {
-    readFileSync2(path, "utf8");
-    return true;
-  } catch {
-    return false;
+  if (resolution.belowFloor) {
+    const loserRange = signal.range ? `${signal.range.start}-${signal.range.end}` : "unknown";
+    const topCandidate = signal.candidates[0];
+    return {
+      analyzerId: ID23,
+      severity: "warn",
+      nodeIds: [signal.source],
+      message: tx(SIGNAL_COLLISION_TEXTS.messageBelowFloor, {
+        loserRaw: signal.raw,
+        loserRange,
+        confidence: topCandidate.confidence,
+        threshold: resolution.belowFloor.threshold
+      }),
+      data: {
+        belowFloor: resolution.belowFloor,
+        raw: signal.raw,
+        range: signal.range ?? null
+      }
+    };
   }
+  return null;
 }
 
-// plugins/core/analyzers/validate-all/text.ts
-var VALIDATE_ALL_TEXTS = {
-  /** `Node <path> failed schema validation: <errors>` */
-  nodeFailure: "Node {{path}} failed schema validation: {{errors}}",
-  /** `Link <source> → <target> failed schema validation: <errors>` */
-  linkFailure: "Link {{source}} \u2192 {{target}} failed schema validation: {{errors}}",
-  /** `Node <path> is missing required frontmatter fields: <missing>` */
-  frontmatterBaseFailure: "Node {{path}} is missing required frontmatter fields: {{missing}}.",
-  /** Singular tooltip on the alert / chip when a node has exactly one validation failure. */
-  alertTooltipSingle: "Frontmatter or schema validation failed.",
-  /** Plural tooltip; `{{count}}` capped at 99 in the chip badge but the tooltip text shows the raw count. */
-  alertTooltipMany: "{{count}} schema validation issues on this node."
+// plugins/core/analyzers/trigger-collision/text.ts
+var TRIGGER_COLLISION_TEXTS = {
+  /**
+   * Top-level message when `analyzeTriggerBucket` accumulated exactly one
+   * cause part. Used for the advertiser-ambiguous-only, invocation-
+   * ambiguous-only, and cross-kind-only branches.
+   */
+  messageOnePart: 'Trigger "{{normalized}}" has {{part}}.',
+  /**
+   * Top-level message when `analyzeTriggerBucket` accumulated two cause
+   * parts (advertiser-ambiguous AND invocation-ambiguous fire together).
+   * The joiner lives inside the template so future locales can adapt it
+   * (e.g. `'; y '` in Spanish) without touching the rule code.
+   */
+  messageTwoParts: 'Trigger "{{normalized}}" has {{first}}; and {{second}}.',
+  /** `<n> nodes advertise it: <list>` part, fires on the advertiser-ambiguous branch. */
+  partAdvertisers: "{{count}} nodes advertise it: {{paths}}",
+  /** `<n> distinct invocation forms: <list>` part, fires on the invocation-ambiguous branch. */
+  partInvocations: "{{count}} distinct invocation forms: {{forms}}",
+  /** Singular cross-kind cause: `non-canonical invocation <form> against advertiser <path>`. */
+  partNonCanonicalSingular: "non-canonical invocation {{forms}} against advertiser {{advertiser}}",
+  /** Plural cross-kind cause: `non-canonical invocations <forms> against advertiser <path>`. */
+  partNonCanonicalPlural: "non-canonical invocations {{forms}} against advertiser {{advertiser}}"
 };
 
-// plugins/core/analyzers/validate-all/index.ts
-var ID23 = "validate-all";
-var validateAllAnalyzer = {
-  id: ID23,
+// plugins/core/analyzers/trigger-collision/index.ts
+var ID24 = "trigger-collision";
+var ADVERTISING_KINDS = /* @__PURE__ */ new Set([
+  "command",
+  "skill",
+  "agent"
+]);
+var triggerCollisionAnalyzer = {
+  id: ID24,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
-  version: "1.0.0",
-  description: "Detects and flags nodes or links violating the project schemas.",
   mode: "deterministic",
-  ui: {
-    // Corner badge on the graph card; surfaces when the node body /
-    // frontmatter fails schema validation (parse error, missing
-    // `name`/`description`, malformed YAML, etc.). Same visual
-    // chassis as `core/broken-ref`, danger severity.
-    alert: {
-      slot: "graph.node.alert",
-      icon: "fa-solid fa-triangle-exclamation",
-      emitWhenEmpty: false
-    },
-    // Footer chip that mirrors the corner alert with the actual
-    // count so the operator can scan the cards and prioritise.
-    // Outlined (vs the filled corner alert) per the broken-ref
-    // pattern: two beats of the same signal.
-    chip: {
-      slot: "card.footer.right",
-      icon: "fa-regular fa-triangle-exclamation",
-      emitWhenEmpty: false,
-      priority: 35
-    }
-  },
+  description: "Flags two or more nodes that claim the same `/command` or `@agent` name.",
+  // Two claim-collection passes (advertisement + invocation) feeding
+  // the bucket map. Per-bucket analysis lives in `analyzeTriggerBucket`.
+  // eslint-disable-next-line complexity
   evaluate(ctx) {
-    const validators = loadSchemaValidators();
-    const findings = [];
-    const perNode = /* @__PURE__ */ new Map();
+    const buckets = /* @__PURE__ */ new Map();
+    const push = (key, claim) => {
+      const bucket = buckets.get(key) ?? [];
+      bucket.push(claim);
+      buckets.set(key, bucket);
+    };
     for (const node of ctx.nodes) {
-      const before = findings.length;
-      collectNodeFindings(validators, node, findings);
-      collectFrontmatterBaseFindings(node, findings);
-      if (findings.length > before) {
-        perNode.set(node.path, (perNode.get(node.path) ?? 0) + (findings.length - before));
-      }
+      if (!ADVERTISING_KINDS.has(node.kind)) continue;
+      const raw = node.frontmatter?.["name"];
+      if (typeof raw !== "string" || raw.length === 0) continue;
+      const normalized = `/${normalizeTrigger(raw)}`;
+      if (normalized === "/") continue;
+      push(normalized, {
+        kind: "advertiser",
+        token: node.path,
+        nodeId: node.path,
+        canonicalForm: `/${raw}`
+      });
     }
     for (const link of ctx.links) {
-      collectLinkFindings(validators, link, findings);
-    }
-    for (const [nodePath, count] of perNode) {
-      const tooltip = count === 1 ? VALIDATE_ALL_TEXTS.alertTooltipSingle : tx(VALIDATE_ALL_TEXTS.alertTooltipMany, { count });
-      const capped = Math.min(count, 99);
-      ctx.emitContribution(nodePath, "alert", {
-        icon: "fa-solid fa-triangle-exclamation",
-        severity: "danger",
-        tooltip
-      });
-      ctx.emitContribution(nodePath, "chip", {
-        value: capped,
-        severity: "danger",
-        tooltip
+      const normalized = link.trigger?.normalizedTrigger;
+      if (!normalized) continue;
+      push(normalized, {
+        kind: "invocation",
+        token: link.target,
+        nodeId: link.source
       });
     }
-    return findings;
+    const issues = [];
+    for (const [normalized, claims] of buckets) {
+      const issue = analyzeTriggerBucket(normalized, claims);
+      if (issue) issues.push(issue);
+    }
+    return issues;
   }
 };
-function collectNodeFindings(v, node, out) {
-  const result = v.validate("node", toNodeForSchema(node));
-  if (result.ok) return;
-  out.push({
-    analyzerId: ID23,
-    severity: "error",
-    nodeIds: [node.path],
-    message: tx(VALIDATE_ALL_TEXTS.nodeFailure, {
-      path: node.path,
-      errors: result.errors
-    }),
-    data: { target: "node", path: node.path }
-  });
-}
-function collectFrontmatterBaseFindings(node, out) {
-  if (node.provider === "markdown") return;
-  if (node.bytes.frontmatter === 0) return;
-  const fm = node.frontmatter ?? {};
-  const missing = [];
-  if (isMissingStringField(fm, "name")) missing.push("name");
-  if (isMissingStringField(fm, "description")) missing.push("description");
-  if (missing.length === 0) return;
-  out.push({
-    analyzerId: ID23,
-    // `warn` (not `error`) so the default `sm scan` exit code stays
-    // 0 even when nodes are missing frontmatter base fields. Strict
-    // mode (`sm scan --strict`) still escalates to exit 1. Matches
-    // the `frontmatter-invalid` severity policy of the orchestrator.
-    severity: "warn",
-    nodeIds: [node.path],
-    message: tx(VALIDATE_ALL_TEXTS.frontmatterBaseFailure, {
-      path: node.path,
-      missing: missing.join(", ")
-    }),
-    data: { target: "frontmatter", path: node.path, missing }
-  });
-}
-function isMissingStringField(fm, field) {
-  const v = fm[field];
-  return typeof v !== "string" || v.length === 0;
-}
-function collectLinkFindings(v, link, out) {
-  const result = v.validate("link", toLinkForSchema(link));
-  if (result.ok) return;
-  out.push({
-    analyzerId: ID23,
-    severity: "error",
-    nodeIds: [link.source],
-    message: tx(VALIDATE_ALL_TEXTS.linkFailure, {
-      source: link.source,
-      target: link.target,
-      errors: result.errors
-    }),
-    data: { target: "link", source: link.source, to: link.target }
+function analyzeTriggerBucket(normalized, claims) {
+  const advertiserPaths = [
+    ...new Set(claims.filter((c) => c.kind === "advertiser").map((c) => c.token))
+  ].sort();
+  const invocationTargets = [
+    ...new Set(claims.filter((c) => c.kind === "invocation").map((c) => c.token))
+  ].sort();
+  const advertisers = claims.filter(
+    (c) => c.kind === "advertiser"
+  );
+  const advertiserAmbiguous = advertiserPaths.length >= 2;
+  const invocationAmbiguous = invocationTargets.length >= 2;
+  const canonicalForms = new Set(advertisers.map((a) => a.canonicalForm));
+  const nonCanonicalInvocations = invocationTargets.filter((t) => !canonicalForms.has(t));
+  const crossKindAmbiguous = advertiserPaths.length === 1 && nonCanonicalInvocations.length >= 1;
+  if (!advertiserAmbiguous && !invocationAmbiguous && !crossKindAmbiguous) {
+    return null;
+  }
+  const nodeIds = [...new Set(claims.map((c) => c.nodeId))].sort();
+  const parts = [];
+  if (advertiserAmbiguous) {
+    parts.push(
+      tx(TRIGGER_COLLISION_TEXTS.partAdvertisers, {
+        count: advertiserPaths.length,
+        paths: advertiserPaths.join(", ")
+      })
+    );
+  }
+  if (invocationAmbiguous) {
+    parts.push(
+      tx(TRIGGER_COLLISION_TEXTS.partInvocations, {
+        count: invocationTargets.length,
+        forms: invocationTargets.join(", ")
+      })
+    );
+  } else if (crossKindAmbiguous) {
+    const template = nonCanonicalInvocations.length > 1 ? TRIGGER_COLLISION_TEXTS.partNonCanonicalPlural : TRIGGER_COLLISION_TEXTS.partNonCanonicalSingular;
+    parts.push(
+      tx(template, {
+        forms: nonCanonicalInvocations.join(", "),
+        advertiser: advertiserPaths[0]
+      })
+    );
+  }
+  const message = parts.length === 2 ? tx(TRIGGER_COLLISION_TEXTS.messageTwoParts, {
+    normalized,
+    first: parts[0],
+    second: parts[1]
+  }) : tx(TRIGGER_COLLISION_TEXTS.messageOnePart, {
+    normalized,
+    part: parts[0]
   });
-}
-function toNodeForSchema(node) {
-  return {
-    path: node.path,
-    kind: node.kind,
-    provider: node.provider,
-    bodyHash: node.bodyHash,
-    frontmatterHash: node.frontmatterHash,
-    bytes: node.bytes,
-    tokens: node.tokens ?? void 0,
-    linksOutCount: node.linksOutCount,
-    linksInCount: node.linksInCount,
-    externalRefsCount: node.externalRefsCount,
-    frontmatter: node.frontmatter ?? {},
-    sidecar: node.sidecar ?? void 0
-  };
-}
-function toLinkForSchema(link) {
   return {
-    source: link.source,
-    target: link.target,
-    kind: link.kind,
-    confidence: link.confidence,
-    sources: link.sources,
-    trigger: link.trigger ?? void 0,
-    location: link.location ?? void 0,
-    raw: link.raw ?? void 0
+    analyzerId: ID24,
+    severity: "error",
+    nodeIds,
+    message,
+    data: {
+      normalizedTrigger: normalized,
+      invocationTargets,
+      advertiserPaths
+    }
   };
 }
 
@@ -3441,15 +3439,14 @@ var ASCII_FORMATTER_TEXTS = {
 };
 
 // plugins/core/formatters/ascii/index.ts
-var ID24 = "ascii";
+var ID25 = "ascii";
 var KIND_ORDER = ["agent", "command", "skill", "markdown"];
 var asciiFormatter = {
-  id: ID24,
+  id: ID25,
   pluginId: CORE_PLUGIN_ID,
   kind: "formatter",
-  formatId: ID24,
-  version: "1.0.0",
-  description: "Renders the scan as plain text, grouped by kind, arrows, and issues. Used by `sm scan --format=ascii`.",
+  formatId: ID25,
+  description: "Renders the scan as plain text in three sections: nodes (grouped by kind), arrows, and issues. Used by `sm scan --format ascii`.",
   // ASCII tree formatter, header + per-kind sections + per-issue
   // section. Each section iterates and renders; splitting per section
   // would multiply the for-loop boilerplate.
@@ -3542,14 +3539,13 @@ function renderSection(out, kind, group) {
 }
 
 // plugins/core/formatters/json/index.ts
-var ID25 = "json";
+var ID26 = "json";
 var jsonFormatter = {
-  id: ID25,
+  id: ID26,
   pluginId: CORE_PLUGIN_ID,
   kind: "formatter",
-  version: "1.0.0",
-  description: "Renders the persisted scan as JSON (conforms to `scan-result.schema.json` when the full ScanResult is available). Used by `sm graph --format json` and `GET /api/graph?format=json`.",
-  formatId: ID25,
+  description: "Renders the persisted scan as JSON (conforms to `scan-result.schema.json`). Used by `sm graph --format json` and `GET /api/graph?format=json`.",
+  formatId: ID26,
   format(ctx) {
     if (ctx.scanResult !== void 0) {
       return JSON.stringify(ctx.scanResult);
@@ -3687,14 +3683,13 @@ function resolveSpecRoot2() {
   }
 }
 
-// plugins/core/actions/bump/index.ts
-var ID26 = "bump";
-var bumpAction = {
-  id: ID26,
+// plugins/core/actions/node-bump/index.ts
+var ID27 = "node-bump";
+var nodeBumpAction = {
+  id: ID27,
   pluginId: CORE_PLUGIN_ID,
   kind: "action",
-  version: "1.0.0",
-  description: "Marks a node as updated: bumps version, refreshes sidecar hashes, records the timestamp.",
+  description: "Marks a node as updated: bumps `annotations.version`, refreshes sidecar hashes, and records the timestamp.",
   mode: "deterministic",
   // The runtime contract uses generic <TInput, TReport>; bump narrows
   // both. The cast is the standard pattern for built-ins that want
@@ -3748,14 +3743,13 @@ function pickCurrentVersion(overlay) {
   return typeof v === "number" && Number.isFinite(v) ? v : 0;
 }
 
-// plugins/core/actions/mark-superseded/index.ts
-var ID27 = "mark-superseded";
-var markSupersededAction = {
-  id: ID27,
+// plugins/core/actions/node-supersede/index.ts
+var ID28 = "node-supersede";
+var nodeSupersedeAction = {
+  id: ID28,
   pluginId: CORE_PLUGIN_ID,
   kind: "action",
-  version: "0.0.0",
-  description: "Declares the current node as superseded by another (writes `supersededBy` to the sidecar). Paired with the `core/superseded` analyzer.",
+  description: "Declares the current node as superseded by another (writes `supersededBy` to the sidecar).",
   mode: "deterministic",
   invoke(_input, _ctx) {
     const report = { ok: true, noop: true };
@@ -3861,7 +3855,7 @@ var UPDATE_CHECK_TEXTS = {
 // package.json
 var package_default = {
   name: "@skill-map/cli",
-  version: "0.38.0",
+  version: "0.40.0",
   description: "skill-map reference implementation \u2014 kernel + CLI + adapters.",
   license: "MIT",
   type: "module",
@@ -4278,8 +4272,7 @@ var updateCheckHook = {
   id: "update-check",
   pluginId: CORE_PLUGIN_ID,
   kind: "hook",
-  version: "1.0.0",
-  description: "Checks daily for a newer skill-map version on npm. Shows an `update available` banner when one is found.",
+  description: "Checks daily for a newer `skill-map` version on npm. Shows an `update available` banner when one is found.",
   triggers: ["boot"],
   async on(ctx) {
     const payload = ctx.event.data ?? {};
@@ -4294,105 +4287,102 @@ var updateCheckHook = {
 };
 
 // plugins/built-ins.ts
-var claudeProvider2 = { ...claudeProvider, pluginId: "claude" };
-var atDirectiveExtractor2 = { ...atDirectiveExtractor, pluginId: "claude" };
-var slashExtractor2 = { ...slashExtractor, pluginId: "claude" };
-var antigravityProvider2 = { ...antigravityProvider, pluginId: "antigravity" };
-var openaiProvider2 = { ...openaiProvider, pluginId: "openai" };
-var agentSkillsProvider2 = { ...agentSkillsProvider, pluginId: "agent-skills" };
-var coreMarkdownProvider2 = { ...coreMarkdownProvider, pluginId: "core" };
-var annotationsExtractor2 = { ...annotationsExtractor, pluginId: "core" };
-var externalUrlCounterExtractor2 = { ...externalUrlCounterExtractor, pluginId: "core" };
-var markdownLinkExtractor2 = { ...markdownLinkExtractor, pluginId: "core" };
-var mcpToolsExtractor2 = { ...mcpToolsExtractor, pluginId: "core" };
-var toolsCountExtractor2 = { ...toolsCountExtractor, pluginId: "core" };
-var annotationOrphanAnalyzer2 = { ...annotationOrphanAnalyzer, pluginId: "core" };
-var annotationStaleAnalyzer2 = { ...annotationStaleAnalyzer, pluginId: "core" };
-var brokenRefAnalyzer2 = { ...brokenRefAnalyzer, pluginId: "core" };
-var contributionOrphanAnalyzer2 = { ...contributionOrphanAnalyzer, pluginId: "core" };
-var jobOrphanFileAnalyzer2 = { ...jobOrphanFileAnalyzer, pluginId: "core" };
-var linkConflictAnalyzer2 = { ...linkConflictAnalyzer, pluginId: "core" };
-var linkCountsAnalyzer2 = { ...linkCountsAnalyzer, pluginId: "core" };
-var redundantTargetReferenceAnalyzer2 = { ...redundantTargetReferenceAnalyzer, pluginId: "core" };
-var reservedNameAnalyzer2 = { ...reservedNameAnalyzer, pluginId: "core" };
-var selfLoopAnalyzer2 = { ...selfLoopAnalyzer, pluginId: "core" };
-var signalCollisionAnalyzer2 = { ...signalCollisionAnalyzer, pluginId: "core" };
-var stabilityAnalyzer2 = { ...stabilityAnalyzer, pluginId: "core" };
-var supersededAnalyzer2 = { ...supersededAnalyzer, pluginId: "core" };
-var triggerCollisionAnalyzer2 = { ...triggerCollisionAnalyzer, pluginId: "core" };
-var unknownFieldAnalyzer2 = { ...unknownFieldAnalyzer, pluginId: "core" };
-var validateAllAnalyzer2 = { ...validateAllAnalyzer, pluginId: "core" };
-var asciiFormatter2 = { ...asciiFormatter, pluginId: "core" };
-var jsonFormatter2 = { ...jsonFormatter, pluginId: "core" };
-var bumpAction2 = { ...bumpAction, pluginId: "core" };
-var markSupersededAction2 = { ...markSupersededAction, pluginId: "core" };
-var updateCheckHook2 = { ...updateCheckHook, pluginId: "core" };
+var claudeProvider2 = { ...claudeProvider, pluginId: "claude", version: "0.40.0" };
+var atDirectiveExtractor2 = { ...atDirectiveExtractor, pluginId: "claude", version: "0.40.0" };
+var slashCommandExtractor2 = { ...slashCommandExtractor, pluginId: "claude", version: "0.40.0" };
+var antigravityProvider2 = { ...antigravityProvider, pluginId: "antigravity", version: "0.40.0" };
+var openaiProvider2 = { ...openaiProvider, pluginId: "openai", version: "0.40.0" };
+var agentSkillsProvider2 = { ...agentSkillsProvider, pluginId: "agent-skills", version: "0.40.0" };
+var coreMarkdownProvider2 = { ...coreMarkdownProvider, pluginId: "core", version: "0.40.0" };
+var annotationsExtractor2 = { ...annotationsExtractor, pluginId: "core", version: "0.40.0" };
+var externalUrlCounterExtractor2 = { ...externalUrlCounterExtractor, pluginId: "core", version: "0.40.0" };
+var markdownLinkExtractor2 = { ...markdownLinkExtractor, pluginId: "core", version: "0.40.0" };
+var mcpToolsExtractor2 = { ...mcpToolsExtractor, pluginId: "core", version: "0.40.0" };
+var toolsCounterExtractor2 = { ...toolsCounterExtractor, pluginId: "core", version: "0.40.0" };
+var annotationFieldUnknownAnalyzer2 = { ...annotationFieldUnknownAnalyzer, pluginId: "core", version: "0.40.0" };
+var annotationOrphanAnalyzer2 = { ...annotationOrphanAnalyzer, pluginId: "core", version: "0.40.0" };
+var annotationStaleAnalyzer2 = { ...annotationStaleAnalyzer, pluginId: "core", version: "0.40.0" };
+var contributionOrphanAnalyzer2 = { ...contributionOrphanAnalyzer, pluginId: "core", version: "0.40.0" };
+var issueCounterAnalyzer2 = { ...issueCounterAnalyzer, pluginId: "core", version: "0.40.0" };
+var jobFileOrphanAnalyzer2 = { ...jobFileOrphanAnalyzer, pluginId: "core", version: "0.40.0" };
+var linkConflictAnalyzer2 = { ...linkConflictAnalyzer, pluginId: "core", version: "0.40.0" };
+var linkCounterAnalyzer2 = { ...linkCounterAnalyzer, pluginId: "core", version: "0.40.0" };
+var linkSelfLoopAnalyzer2 = { ...linkSelfLoopAnalyzer, pluginId: "core", version: "0.40.0" };
+var nameReservedAnalyzer2 = { ...nameReservedAnalyzer, pluginId: "core", version: "0.40.0" };
+var nodeStabilityAnalyzer2 = { ...nodeStabilityAnalyzer, pluginId: "core", version: "0.40.0" };
+var nodeSupersededAnalyzer2 = { ...nodeSupersededAnalyzer, pluginId: "core", version: "0.40.0" };
+var referenceBrokenAnalyzer2 = { ...referenceBrokenAnalyzer, pluginId: "core", version: "0.40.0" };
+var referenceRedundantAnalyzer2 = { ...referenceRedundantAnalyzer, pluginId: "core", version: "0.40.0" };
+var schemaViolationAnalyzer2 = { ...schemaViolationAnalyzer, pluginId: "core", version: "0.40.0" };
+var signalCollisionAnalyzer2 = { ...signalCollisionAnalyzer, pluginId: "core", version: "0.40.0" };
+var triggerCollisionAnalyzer2 = { ...triggerCollisionAnalyzer, pluginId: "core", version: "0.40.0" };
+var asciiFormatter2 = { ...asciiFormatter, pluginId: "core", version: "0.40.0" };
+var jsonFormatter2 = { ...jsonFormatter, pluginId: "core", version: "0.40.0" };
+var nodeBumpAction2 = { ...nodeBumpAction, pluginId: "core", version: "0.40.0" };
+var nodeSupersedeAction2 = { ...nodeSupersedeAction, pluginId: "core", version: "0.40.0" };
+var updateCheckHook2 = { ...updateCheckHook, pluginId: "core", version: "0.40.0" };
 var builtInBundles = [
   {
     id: "claude",
-    granularity: "bundle",
-    description: "Claude Code platform integration. Classifies files under `.claude/{agents,commands,skills}` and parses Claude-flavored frontmatter.",
+    description: "Claude Code platform integration. Classifies files under `.claude/{agents,commands,skills}` and detects Claude-flavored slash commands and at-directives in their bodies.",
     extensions: [
       claudeProvider2,
       atDirectiveExtractor2,
-      slashExtractor2
+      slashCommandExtractor2
     ]
   },
   {
     id: "antigravity",
-    granularity: "bundle",
-    description: "Google Antigravity CLI platform integration (released 2026-05-19, replaces the retired Gemini CLI). Antigravity adopted the open-standard `.agents/` layout, so skills are classified by the neutral `agent-skills` Provider; this bundle contributes lens identity + a reserved-name seed catalog for future Antigravity built-in invocables.",
+    description: "Google Antigravity CLI platform integration (replaces the retired Gemini CLI). Antigravity adopted the open-standard `.agents/` layout, so skills are classified by the neutral `agent-skills` provider; this plugin contributes the Antigravity runtime identity and a seed list of reserved built-in names.",
     extensions: [
       antigravityProvider2
     ]
   },
   {
     id: "openai",
-    granularity: "bundle",
-    description: "OpenAI Codex CLI platform integration. Classifies TOML sub-agent definitions under `.codex/agents/*.toml` and (future) walks the hierarchical AGENTS.md cascade. Provider for the active-lens `openai` runtime.",
+    description: "OpenAI Codex CLI platform integration. Classifies TOML sub-agent definitions under `.codex/agents/*.toml`.",
     extensions: [
       openaiProvider2
     ]
   },
   {
     id: "agent-skills",
-    granularity: "bundle",
-    description: "Agent Skills open standard. Vendor-neutral path `.agents/skills/<name>/SKILL.md` (Anthropic, OpenAI, Google). See agentskills.io.",
+    description: "Open-standard Agent Skills layout. Classifies skills under the vendor-neutral path `.agents/skills/<name>/SKILL.md` (adopted by Anthropic, OpenAI, Google). See agentskills.io.",
     extensions: [
       agentSkillsProvider2
     ]
   },
   {
     id: "core",
-    granularity: "extension",
-    description: "Core extensions shared across providers: extractors, analyzers, formatters, the bump action, and the universal `.md` fallback Provider.",
+    description: "Core extensions shared across providers: parsers, extractors, analyzers, actions, hooks, formatters, and the universal `.md` fallback provider.",
     extensions: [
       coreMarkdownProvider2,
       annotationsExtractor2,
       externalUrlCounterExtractor2,
       markdownLinkExtractor2,
       mcpToolsExtractor2,
-      toolsCountExtractor2,
+      toolsCounterExtractor2,
+      annotationFieldUnknownAnalyzer2,
       annotationOrphanAnalyzer2,
       annotationStaleAnalyzer2,
-      brokenRefAnalyzer2,
       contributionOrphanAnalyzer2,
-      jobOrphanFileAnalyzer2,
+      issueCounterAnalyzer2,
+      jobFileOrphanAnalyzer2,
       linkConflictAnalyzer2,
-      linkCountsAnalyzer2,
-      redundantTargetReferenceAnalyzer2,
-      reservedNameAnalyzer2,
-      selfLoopAnalyzer2,
+      linkCounterAnalyzer2,
+      linkSelfLoopAnalyzer2,
+      nameReservedAnalyzer2,
+      nodeStabilityAnalyzer2,
+      nodeSupersededAnalyzer2,
+      referenceBrokenAnalyzer2,
+      referenceRedundantAnalyzer2,
+      schemaViolationAnalyzer2,
       signalCollisionAnalyzer2,
-      stabilityAnalyzer2,
-      supersededAnalyzer2,
       triggerCollisionAnalyzer2,
-      unknownFieldAnalyzer2,
-      validateAllAnalyzer2,
       asciiFormatter2,
       jsonFormatter2,
-      bumpAction2,
-      markSupersededAction2,
+      nodeBumpAction2,
+      nodeSupersedeAction2,
       updateCheckHook2
     ]
   }
@@ -4519,21 +4509,42 @@ function localTimeFromIso(iso) {
   const ss = String(d.getSeconds()).padStart(2, "0");
   return `${hh}:${mm}:${ss}`;
 }
-var defaultFormat = (record) => {
+function paintLevelPrefix(level, ansi) {
+  const label = level.toUpperCase().padEnd(5);
+  switch (level) {
+    case "error":
+      return `${ansi.red("\u2715")} ${ansi.red(label)}`;
+    case "warn":
+      return `${ansi.yellow("\u26A0")} ${ansi.yellow(label)}`;
+    case "info":
+      return `${ansi.cyan("\u2139")} ${ansi.cyan(label)}`;
+    case "debug":
+    case "trace":
+      return `${ansi.dim("\xB7")} ${ansi.dim(label)}`;
+  }
+}
+var defaultFormat = (record, ansi) => {
   const time = localTimeFromIso(record.timestamp);
-  const level = record.level.toUpperCase().padEnd(5);
-  const ctx = record.context && Object.keys(record.context).length > 0 ? ` | ${JSON.stringify(record.context)}` : "";
-  return `${time} | ${level} | ${record.message}${ctx}
+  const prefix = paintLevelPrefix(record.level, ansi);
+  const ctx = record.context && Object.keys(record.context).length > 0 ? ` ${ansi.dim("|")} ${ansi.dim(JSON.stringify(record.context))}` : "";
+  return `${ansi.dim(time)}  ${prefix}  ${record.message}${ctx}
 `;
 };
 var Logger = class {
   #level;
   #stream;
   #format;
+  #ansi;
   constructor(opts) {
     this.#level = opts.level;
     this.#stream = opts.stream;
     this.#format = opts.format ?? defaultFormat;
+    const streamTty = opts.stream;
+    this.#ansi = ansiFor({
+      isTTY: streamTty.isTTY === true,
+      noColorFlag: opts.noColorFlag === true,
+      ...opts.env !== void 0 ? { env: opts.env } : {}
+    });
   }
   setLevel(level) {
     this.#level = level;
@@ -4564,7 +4575,7 @@ var Logger = class {
       message,
       ...context !== void 0 ? { context } : {}
     };
-    this.#stream.write(this.#format(record));
+    this.#stream.write(this.#format(record, this.#ansi));
   }
 };
 function resolveLogLevel(opts) {
@@ -7246,9 +7257,9 @@ async function sweepPerTupleContributions(trx, contributions, freshlyRunTuples)
   const bufferKeys = buildContributionsBufferKeys(contributions);
   const tuplesByPluginExt = groupFreshlyRunTuplesByPluginExt(freshlyRunTuples);
   for (const [pe, nodes] of tuplesByPluginExt) {
-    const sep7 = pe.indexOf("\0");
-    if (sep7 < 0) continue;
-    await deleteStaleTupleRows(trx, pe.slice(0, sep7), pe.slice(sep7 + 1), [...nodes], bufferKeys);
+    const sep8 = pe.indexOf("\0");
+    if (sep8 < 0) continue;
+    await deleteStaleTupleRows(trx, pe.slice(0, sep8), pe.slice(sep8 + 1), [...nodes], bufferKeys);
   }
 }
 function buildContributionsBufferKeys(contributions) {
@@ -8406,12 +8417,12 @@ function planOne(node, options) {
   };
 }
 function invokeBumpFor(node, absPath, force) {
-  if (!bumpAction.invoke) {
+  if (!nodeBumpAction.invoke) {
     throw new Error("built-in bump action is missing its invoke()");
   }
   const input = {};
   if (force) input.force = true;
-  return bumpAction.invoke(input, {
+  return nodeBumpAction.invoke(input, {
     node,
     nodeAbsolutePath: absPath,
     invoker: "cli",
@@ -8427,7 +8438,7 @@ var BumpCommand = class extends SmCommand {
     category: "Actions",
     description: "Bump a node's sidecar (`<basename>.sm`): increment annotations.version, refresh hashes, stamp audit.",
     details: `
-      Wraps the built-in deterministic \`core/bump\` Action. Single-node
+      Wraps the built-in deterministic \`core/node-bump\` Action. Single-node
       mode bumps one path; \`--pending\` walks every node whose sidecar
       overlay reports drift and bumps them all.
 
@@ -8912,7 +8923,16 @@ var CHECK_TEXTS = {
   tipLine: "\nTip: `sm refresh <node>` to revalidate a file after fixes.\n",
   // --- prob stub advisory ---------------------------------------------------
   probStubAdvisory: "sm check --include-prob: probabilistic Analyzer dispatch requires the job subsystem (Step 10). Stub: skipped {{count}} probabilistic analyzer(s): {{analyzerIds}}. Deterministic analyzers ran as usual; full dispatch lands when the job subsystem ships.\n",
-  probStubAdvisoryAsync: "sm check --include-prob --async: probabilistic Analyzer dispatch requires the job subsystem (Step 10). Stub: skipped {{count}} probabilistic analyzer(s): {{analyzerIds}}. The --async flag is reserved for future encoding (returns job ids without waiting once jobs land); today it is a no-op. Deterministic analyzers ran as usual.\n"
+  probStubAdvisoryAsync: "sm check --include-prob --async: probabilistic Analyzer dispatch requires the job subsystem (Step 10). Stub: skipped {{count}} probabilistic analyzer(s): {{analyzerIds}}. The --async flag is reserved for future encoding (returns job ids without waiting once jobs land); today it is a no-op. Deterministic analyzers ran as usual.\n",
+  /**
+   * Emitted on stderr when `--analyzers` lists one or more ids the
+   * loaded analyzer registry does not know. The user almost always
+   * mistyped (e.g. `broken-ref` instead of `reference-broken`); listing
+   * the valid ids inline lets them fix the call without a second round
+   * trip through `sm plugins list`. Exit code is `ExitCode.Error` (2):
+   * bad usage, not "no issues found".
+   */
+  unknownAnalyzerIds: "sm check: unknown analyzer id(s) in --analyzers: {{unknown}}.\nValid ids (qualified or short form accepted):\n{{known}}\n"
 };
 
 // cli/util/conformance-env.ts
@@ -9453,20 +9473,17 @@ var PluginLoader = class {
    * into a helper would scatter the return-on-failure pattern without
    * making the orchestration clearer.
    */
-  // eslint-disable-next-line complexity
   async loadOne(pluginPath) {
     const pluginId = pathId(pluginPath);
     const manifestResult = this.#parseAndValidateManifest(pluginPath, pluginId);
     if (!manifestResult.ok) return manifestResult.failure;
     const manifest = manifestResult.manifest;
-    const granularity = manifest.granularity ?? "extension";
     if (this.#options.resolveEnabled && !this.#options.resolveEnabled(pluginId)) {
       return {
         path: pluginPath,
         id: pluginId,
         status: "disabled",
         manifest,
-        granularity,
         reason: PLUGIN_LOADER_TEXTS.disabledByConfig
       };
     }
@@ -9488,7 +9505,6 @@ var PluginLoader = class {
       id: pluginId,
       status: "enabled",
       manifest,
-      granularity,
       extensions: loaded,
       ...storageSchemasResult.schemas ? { storageSchemas: storageSchemasResult.schemas } : {}
     };
@@ -9546,7 +9562,6 @@ var PluginLoader = class {
         id: pluginId,
         status: "incompatible-spec",
         manifest,
-        granularity: manifest.granularity ?? "extension",
         reason: tx(PLUGIN_LOADER_TEXTS.incompatibleSpec, {
           installedSpecVersion: this.#options.specVersion,
           specCompat: manifest.specCompat
@@ -9823,14 +9838,14 @@ var LOCKED_PLUGIN_IDS = /* @__PURE__ */ new Set([
   // unreachable from CLI / BFF / UI. Re-evaluate if a third-party ever
   // ships a competing supersession extractor.
   "core/annotations",
-  // `core/validate-all` validates every scanned Node against
+  // `core/schema-violation` validates every scanned Node against
   // `node.schema.json` and every Link against `link.schema.json` (the
   // authoritative @skill-map/spec). Disabling it makes the system
   // persist non-conformant content silently, breaking the spec
   // invariant "what reaches the DB conforms to the spec". The check is
   // foundational, not advisory; lock it on so the guarantee holds
   // regardless of user / DB / settings hand-edits.
-  "core/validate-all",
+  "core/schema-violation",
   // `core/ascii` is the only built-in Formatter today and the default
   // for `sm graph` (`--format ascii`). Disabling it breaks the verb
   // entirely (`composeFormatters` returns the empty list, the CLI
@@ -9865,21 +9880,9 @@ function isBuiltInExtensionEnabled(bundle, ext, resolveEnabled) {
   return isBundleEntryEnabled(bundle, ext.id, resolveEnabled);
 }
 function isBundleEntryEnabled(bundle, extId, resolveEnabled) {
-  if (bundle.granularity === "bundle") {
-    return resolveEnabled(bundle.id);
-  }
   return resolveEnabled(qualifiedExtensionId(bundle.id, extId));
 }
-function buildGranularityMap(discovered) {
-  const out = /* @__PURE__ */ new Map();
-  for (const plugin of discovered) {
-    out.set(plugin.id, plugin.granularity ?? "bundle");
-  }
-  return out;
-}
-function isPluginExtensionEnabled(ext, granularityMap, resolveEnabled) {
-  const granularity = granularityMap.get(ext.pluginId) ?? "bundle";
-  if (granularity === "bundle") return resolveEnabled(ext.pluginId);
+function isPluginExtensionEnabled(ext, resolveEnabled) {
   return resolveEnabled(qualifiedExtensionId(ext.pluginId, ext.id));
 }
 async function buildEnabledResolver(ctx) {
@@ -10398,7 +10401,6 @@ function filterBuiltInManifests(manifests, resolveEnabled) {
 // core/runtime/plugin-runtime/composer.ts
 function composeScanExtensions(opts) {
   const resolveEnabled = opts.resolveEnabled ?? opts.pluginRuntime.resolveEnabled;
-  const granularityMap = buildGranularityMap(opts.pluginRuntime.discovered);
   const providers = [];
   const extractors = [];
   const analyzers = [];
@@ -10410,16 +10412,16 @@ function composeScanExtensions(opts) {
     );
   }
   for (const ext of opts.pluginRuntime.extensions.providers) {
-    if (isPluginExtensionEnabled(ext, granularityMap, resolveEnabled)) providers.push(ext);
+    if (isPluginExtensionEnabled(ext, resolveEnabled)) providers.push(ext);
   }
   for (const ext of opts.pluginRuntime.extensions.extractors) {
-    if (isPluginExtensionEnabled(ext, granularityMap, resolveEnabled)) extractors.push(ext);
+    if (isPluginExtensionEnabled(ext, resolveEnabled)) extractors.push(ext);
   }
   for (const ext of opts.pluginRuntime.extensions.analyzers) {
-    if (isPluginExtensionEnabled(ext, granularityMap, resolveEnabled)) analyzers.push(ext);
+    if (isPluginExtensionEnabled(ext, resolveEnabled)) analyzers.push(ext);
   }
   for (const ext of opts.pluginRuntime.extensions.hooks) {
-    if (isPluginExtensionEnabled(ext, granularityMap, resolveEnabled)) hooks.push(ext);
+    if (isPluginExtensionEnabled(ext, resolveEnabled)) hooks.push(ext);
   }
   const finalProviders = opts.killSwitches?.providers === true ? [] : providers;
   const finalExtractors = opts.killSwitches?.extractors === true ? [] : extractors;
@@ -10466,7 +10468,6 @@ function accumulateBuiltInScanExtensions(buckets, resolveEnabled) {
 function composeFormatters(opts) {
   const noBuiltIns = opts.noBuiltIns ?? false;
   const resolveEnabled = opts.resolveEnabled ?? opts.pluginRuntime.resolveEnabled;
-  const granularityMap = buildGranularityMap(opts.pluginRuntime.discovered);
   const out = [];
   if (!noBuiltIns) {
     for (const bundle of builtInBundles) {
@@ -10478,32 +10479,24 @@ function composeFormatters(opts) {
     }
   }
   for (const ext of opts.pluginRuntime.extensions.formatters) {
-    if (isPluginExtensionEnabled(ext, granularityMap, resolveEnabled)) out.push(ext);
+    if (isPluginExtensionEnabled(ext, resolveEnabled)) out.push(ext);
   }
   return out;
 }
 function registerEnabledExtensions(kernel, pluginRuntime, options = {}) {
   const noBuiltIns = options.noBuiltIns === true;
   const resolveEnabled = options.resolveEnabled ?? pluginRuntime.resolveEnabled;
-  const granularityMap = buildGranularityMap(pluginRuntime.discovered);
   if (!noBuiltIns) {
     const enabledBuiltIns = filterBuiltInManifests(listBuiltIns(), resolveEnabled);
     for (const manifest of enabledBuiltIns) kernel.registry.register(manifest);
   }
   for (const manifest of pluginRuntime.manifests) {
-    if (!isPluginExtensionEnabled(manifest, granularityMap, resolveEnabled)) continue;
+    if (!isPluginExtensionEnabled(manifest, resolveEnabled)) continue;
     kernel.registry.register(manifest);
   }
   if (kernel.setRegisteredAnnotationKeys) {
     const filteredAnnotations = pluginRuntime.annotationContributions.filter(
-      (entry) => (
-        // Annotation contributions live at plugin-id granularity (the
-        // catalog row carries `pluginId`, not `extensionId`), so the
-        // bundle-level toggle gates the entire row. Extension
-        // granularity falls through to the manifest-level filter above
-        // this surface is bundle-scoped by design.
-        resolveEnabled(entry.pluginId)
-      )
+      (entry) => resolveEnabled(entry.pluginId)
     );
     kernel.setRegisteredAnnotationKeys(filteredAnnotations);
   }
@@ -10511,7 +10504,6 @@ function registerEnabledExtensions(kernel, pluginRuntime, options = {}) {
     const userContribs = pluginRuntime.viewContributions.filter(
       (entry) => isPluginExtensionEnabled(
         { pluginId: entry.pluginId, id: entry.extensionId },
-        granularityMap,
         resolveEnabled
       )
     );
@@ -10550,7 +10542,7 @@ var CheckCommand = class extends SmCommand {
       ["Print every current issue", "$0 check"],
       ["Machine-readable issue list", "$0 check --json"],
       ["Restrict to a single node", "$0 check -n .claude/agents/architect.md"],
-      ["Restrict to specific rules", "$0 check --analyzers core/broken-ref,core/validate-all"],
+      ["Restrict to specific rules", "$0 check --analyzers core/reference-broken,core/schema-violation"],
       ["Opt in to probabilistic analyzers (stub until Step 10)", "$0 check --include-prob"],
       ["Use a non-default DB file", "$0 check --db /path/to/skill-map.db"]
     ]
@@ -10577,22 +10569,8 @@ var CheckCommand = class extends SmCommand {
     const exit = requireDbOrExit(dbPath, this.context.stderr);
     if (exit !== null) return exit;
     const analyzerFilter = parseAnalyzersFlag(this.analyzers);
-    if (this.includeProb) {
-      const probAnalyzerIds = await detectProbAnalyzerIds({
-        noPlugins: this.noPlugins,
-        analyzerFilter,
-        printer: this.printer
-      });
-      if (probAnalyzerIds.length > 0) {
-        const template = this.async ? CHECK_TEXTS.probStubAdvisoryAsync : CHECK_TEXTS.probStubAdvisory;
-        this.printer.info(
-          tx(template, {
-            count: probAnalyzerIds.length,
-            analyzerIds: probAnalyzerIds.join(", ")
-          })
-        );
-      }
-    }
+    const preflight = await this.#preflightAnalyzerCatalog(analyzerFilter);
+    if (preflight.exit !== null) return preflight.exit;
     return withSqlite({ databasePath: dbPath, autoBackup: false }, async (adapter) => {
       let issues = await adapter.issues.listAll();
       if (this.node !== void 0) {
@@ -10615,6 +10593,53 @@ var CheckCommand = class extends SmCommand {
       return issues.some((i) => i.severity === "error") ? ExitCode.Issues : ExitCode.Ok;
     });
   }
+  /**
+   * Either an explicit `--analyzers` list or `--include-prob` forces a
+   * load of the live Analyzer catalog: the first needs it to validate
+   * the user-supplied ids against the registry, the second to enumerate
+   * registered probabilistic analyzers. Sharing a single load keeps
+   * `sm check` from paying for two passes when both flags are present.
+   *
+   * Returns `{ exit: <code> }` to short-circuit `run()` when the
+   * validation rejects an unknown id (the only path that aborts before
+   * the DB read). Successful runs return `{ exit: null }`.
+   */
+  async #preflightAnalyzerCatalog(analyzerFilter) {
+    const needsCatalog = analyzerFilter !== void 0 || this.includeProb;
+    if (!needsCatalog) return { exit: null };
+    const analyzers = await loadAnalyzerCatalog({
+      noPlugins: this.noPlugins,
+      printer: this.printer
+    });
+    if (analyzerFilter !== void 0) {
+      const validation = validateAnalyzerFilter(analyzerFilter, analyzers);
+      if (validation !== null) {
+        this.printer.error(validation);
+        return { exit: ExitCode.Error };
+      }
+    }
+    if (this.includeProb) {
+      this.#emitProbAdvisory(analyzers, analyzerFilter);
+    }
+    return { exit: null };
+  }
+  /**
+   * Walk the loaded catalog for probabilistic analyzers honouring the
+   * `--analyzers` filter and, when any survive, emit the stub stderr
+   * advisory naming them. Extracted so `run()` does not carry the
+   * branching for the `--include-prob` / `--async` advisory shapes.
+   */
+  #emitProbAdvisory(analyzers, analyzerFilter) {
+    const probAnalyzerIds = detectProbAnalyzerIds(analyzers, analyzerFilter);
+    if (probAnalyzerIds.length === 0) return;
+    const template = this.async ? CHECK_TEXTS.probStubAdvisoryAsync : CHECK_TEXTS.probStubAdvisory;
+    this.printer.info(
+      tx(template, {
+        count: probAnalyzerIds.length,
+        analyzerIds: probAnalyzerIds.join(", ")
+      })
+    );
+  }
 };
 function parseAnalyzersFlag(raw) {
   if (raw === void 0) return void 0;
@@ -10622,7 +10647,7 @@ function parseAnalyzersFlag(raw) {
   if (ids.length === 0) return void 0;
   return ids;
 }
-async function detectProbAnalyzerIds(opts) {
+async function loadAnalyzerCatalog(opts) {
   const pluginRuntime = opts.noPlugins ? emptyPluginRuntime() : await loadPluginRuntime();
   pluginRuntime.emitWarnings(opts.printer);
   const composed = composeScanExtensions({
@@ -10630,12 +10655,30 @@ async function detectProbAnalyzerIds(opts) {
     pluginRuntime,
     killSwitches: readConformanceKillSwitches()
   });
-  const analyzers = composed?.analyzers ?? [];
+  return composed?.analyzers ?? [];
+}
+function validateAnalyzerFilter(filter, analyzers) {
+  const knownQualified = /* @__PURE__ */ new Set();
+  const knownShort = /* @__PURE__ */ new Set();
+  for (const analyzer of analyzers) {
+    const qualified = qualifiedExtensionId(analyzer.pluginId, analyzer.id);
+    knownQualified.add(qualified);
+    knownShort.add(analyzer.id);
+  }
+  const unknown = filter.filter((id) => !knownQualified.has(id) && !knownShort.has(id));
+  if (unknown.length === 0) return null;
+  const knownList = [...knownQualified].sort().map((id) => `  ${id}`).join("\n");
+  return tx(CHECK_TEXTS.unknownAnalyzerIds, {
+    unknown: unknown.join(", "),
+    known: knownList
+  });
+}
+function detectProbAnalyzerIds(analyzers, analyzerFilter) {
   const probIds = [];
   for (const analyzer of analyzers) {
     if (analyzer.mode !== "probabilistic") continue;
     const qualified = qualifiedExtensionId(analyzer.pluginId, analyzer.id);
-    if (opts.analyzerFilter && !matchesAnalyzerFilter(qualified, opts.analyzerFilter)) continue;
+    if (analyzerFilter && !matchesAnalyzerFilter(qualified, analyzerFilter)) continue;
     probIds.push(qualified);
   }
   probIds.sort();
@@ -14297,8 +14340,8 @@ function computePlannedHookContent(existing) {
   if (existing.includes(SKILL_MAP_MARKER)) {
     return { kind: "already-installed", content: existing };
   }
-  const sep7 = existing.endsWith("\n") ? "" : "\n";
-  return { kind: "chained", content: existing + sep7 + "\n" + SKILL_MAP_BLOCK };
+  const sep8 = existing.endsWith("\n") ? "" : "\n";
+  return { kind: "chained", content: existing + sep8 + "\n" + SKILL_MAP_BLOCK };
 }
 async function ensureExecutableBit(path) {
   const mode = (await stat2(path)).mode;
@@ -14673,7 +14716,8 @@ function recomputeLinkCounts(nodes, links) {
   for (const link of links) {
     const source = byPath3.get(link.source);
     if (source) source.linksOutCount += 1;
-    const target = byPath3.get(link.target);
+    const targetKey = link.resolvedTarget ?? link.target;
+    const target = byPath3.get(targetKey);
     if (target) target.linksInCount += 1;
   }
 }
@@ -14707,8 +14751,8 @@ function isExternalUrlLink(link) {
 }
 
 // kernel/orchestrator/analyzers.ts
-async function runAnalyzers(analyzers, nodes, internalLinks, orphanSidecars, sidecarRoots, annotationContributions, viewContributions, orphanJobFiles, referenceablePaths, cwd, registeredActionIds, emitter, hookDispatcher, reservedNodePaths, signals) {
-  const issues = [];
+async function runAnalyzers(analyzers, nodes, internalLinks, orphanSidecars, sidecarRoots, annotationContributions, viewContributions, orphanJobFiles, referenceablePaths, cwd, registeredActionIds, emitter, hookDispatcher, reservedNodePaths, signals, seedIssues = []) {
+  const issues = [...seedIssues];
   const contributions = [];
   const validators = loadSchemaValidators();
   void registeredActionIds;
@@ -14716,7 +14760,8 @@ async function runAnalyzers(analyzers, nodes, internalLinks, orphanSidecars, sid
     relativePath: o.relativePath,
     expectedMdPath: o.expectedMdPath
   }));
-  for (const analyzer of analyzers) {
+  const scheduled = orderAnalyzersByPhase(analyzers);
+  for (const analyzer of scheduled) {
     const qualifiedId2 = qualifiedExtensionId(analyzer.pluginId, analyzer.id);
     const declaredContributions = readDeclaredContributions(analyzer);
     const emitContribution = (nodePath, contributionId, payload) => {
@@ -14769,6 +14814,11 @@ async function runAnalyzers(analyzers, nodes, internalLinks, orphanSidecars, sid
       annotationContributions,
       viewContributions,
       orphanJobFiles,
+      // `issues` is the live accumulator, mutated by `issues.push(...)`
+      // below as each analyzer's emission lands. Late-phase analyzers
+      // (`core/issue-counter`) read it to compute cross-analyzer
+      // aggregates. Treat as read-only on the analyzer side.
+      accumulatedIssues: issues,
       ...referenceablePaths ? { referenceablePaths } : {},
       ...cwd ? { cwd } : {},
       ...reservedNodePaths ? { reservedNodePaths } : {},
@@ -14785,6 +14835,12 @@ async function runAnalyzers(analyzers, nodes, internalLinks, orphanSidecars, sid
   }
   return { issues, contributions };
 }
+function orderAnalyzersByPhase(analyzers) {
+  return analyzers.slice().sort((a, b) => phaseRank(a) - phaseRank(b));
+}
+function phaseRank(a) {
+  return a.phase === "aggregate" ? 1 : 0;
+}
 function validateIssue(analyzer, issue, emitter) {
   const severity = issue.severity;
   if (severity !== "error" && severity !== "warn" && severity !== "info") {
@@ -15929,7 +15985,7 @@ async function runScanInternal(_kernel, options) {
     else walked.internalLinks.push(link);
   }
   walked.signals = resolved.resolvedSignals;
-  const postWalkCtx = buildPostWalkTransformCtx(exts.providers, walked.nodes);
+  const postWalkCtx = buildPostWalkTransformCtx(exts.providers, walked.nodes, activeProviderId);
   walked.internalLinks = applyPostWalkTransforms(walked.internalLinks, walked.nodes, postWalkCtx);
   recomputeLinkCounts(walked.nodes, walked.internalLinks);
   recomputeExternalRefsCount(walked.nodes, walked.externalLinks, walked.cachedPaths);
@@ -15952,11 +16008,15 @@ async function runScanInternal(_kernel, options) {
     emitter,
     hookDispatcher,
     postWalkCtx.reservedNodePaths,
-    walked.signals
+    walked.signals,
+    // Seed the accumulator with orchestrator-emitted frontmatter
+    // issues so the aggregate phase (`core/issue-counter`) counts
+    // them on the per-node chip. The seeds are echoed back on
+    // `analyzerResult.issues`, no explicit push is needed below.
+    walked.frontmatterIssues
   );
   mergeAnalyzerEmissions(walked, analyzerResult, exts.analyzers);
   const issues = analyzerResult.issues;
-  for (const issue of walked.frontmatterIssues) issues.push(issue);
   const silenced = options.ignoreFilter ? (path) => options.ignoreFilter.ignores(path) : void 0;
   const renameOps = prior ? detectRenamesAndOrphans(prior, walked.nodes, issues, silenced) : [];
   const stats = buildScanStats(walked, issues, start);
@@ -15965,14 +16025,14 @@ async function runScanInternal(_kernel, options) {
   await hookDispatcher.dispatch("scan.completed", scanCompletedEvent);
   return buildScanReturn(walked, issues, renameOps, stats, options, setup);
 }
-function buildPostWalkTransformCtx(providers, nodes) {
+function buildPostWalkTransformCtx(providers, nodes, activeProvider) {
   const { kindRegistry, providerResolution, reservedNamesByProviderKind } = buildProviderIndexes(providers);
   const reservedNodePaths = buildReservedNodePaths(
     nodes,
     kindRegistry,
     reservedNamesByProviderKind
   );
-  return { kindRegistry, providerResolution, reservedNodePaths };
+  return { kindRegistry, providerResolution, activeProvider, reservedNodePaths };
 }
 function buildProviderIndexes(providers) {
   const kindRegistry = /* @__PURE__ */ new Map();
@@ -16409,7 +16469,7 @@ var SCAN_RUNNER_TEXTS = {
   priorSchemaValidationFailed: "prior scan-result loaded from DB failed schema validation: {{errors}}. Run `sm db backup` then re-scan without --strict to rebuild from disk.",
   /**
    * Reference-paths walker hit `REFERENCE_WALK_MAX_FILES` and stopped
-   * early. The set may be incomplete for link validation; `core/broken-ref`
+   * early. The set may be incomplete for link validation; `core/reference-broken`
    * still works against whatever made it in.
    */
   referenceWalkTruncated: "scan.referencePaths: walker truncated at the 50000-file safety cap. Some link targets may flag as broken even though they exist on disk. Trim the configured paths to dirs you actually need to validate against.",
@@ -16424,9 +16484,18 @@ var SCAN_RUNNER_TEXTS = {
    * markers (`.claude/`, `.codex/`, `AGENTS.md`, `.cursor/`) anywhere
    * under cwd or the effective scan roots. Plain-markdown projects
    * keep scanning fine; provider-specific extractors silently no-op
-   * for this scan.
+   * for this scan. Follows `context/cli-output-style.md` §3.1b
+   * (two-line block, glyph + dim hint):
+   *   - line 1: `{{glyph}}` (yellow `⚠`) + headline naming the
+   *     missing markers,
+   *   - line 2 (indent 3): `{{hint}}`, dim, names the consequence
+   *     and the actionable next step.
+   * Both the full block AND the bare hint are catalog-side so the
+   * caller can wrap the hint in `ansi.dim(...)` without splitting
+   * the template manually.
    */
-  activeProviderNoMarkerWarning: "No provider markers detected (.claude/, .codex/, AGENTS.md, .cursor/). Scanning as universal markdown only; provider-specific link types (e.g. claude @-directives, /-commands) will not appear in the graph. Set `activeProvider` in .skill-map/settings.json or install a provider plugin to enable them.",
+  activeProviderNoMarkerWarning: "{{glyph}}  No provider markers detected (.claude/, .codex/, AGENTS.md, .cursor/).\n   {{hint}}\n",
+  activeProviderNoMarkerWarningHint: "Scanning as universal markdown only; provider-specific link types (e.g. claude @-directives, /-commands) will not appear. Set `activeProvider` in .skill-map/settings.json or install a provider plugin to enable them.",
   /**
    * Active-provider bootstrap: filesystem auto-detect found exactly
    * one marker and persisted the detected id to project settings.
@@ -16579,7 +16648,14 @@ async function bootstrapActiveProvider(opts) {
   }
   const detected = aggregateDetected(opts.cwd, opts.effectiveRoots, fromCwd.detected);
   if (detected.length === 0) {
-    opts.printer.warn(SCAN_RUNNER_TEXTS.activeProviderNoMarkerWarning);
+    const warnGlyph = opts.style?.warnGlyph ?? "\u26A0";
+    const dim = opts.style?.dim ?? ((s) => s);
+    opts.printer.warn(
+      tx(SCAN_RUNNER_TEXTS.activeProviderNoMarkerWarning, {
+        glyph: warnGlyph,
+        hint: dim(SCAN_RUNNER_TEXTS.activeProviderNoMarkerWarningHint)
+      })
+    );
     return { kind: "ok", activeProvider: null, source: "none" };
   }
   if (detected.length === 1) {
@@ -18788,21 +18864,6 @@ import { Command as Command22, Option as Option21 } from "clipanion";
 // cli/i18n/plugins.texts.ts
 var PLUGINS_TEXTS = {
   // --- enable / disable error guidance --------------------------------
-  // Spec § A.7, granularity validation. The CLI rejects mismatched ids
-  // up front (instead of silently writing a config_plugins row that the
-  // runtime would later ignore) so the user learns the model immediately.
-  /**
-   * Granularity-mismatch errors share a structured shape:
-   *   ✕  <headline>
-   *      <fix-line>
-   *      <hint-line>
-   * Glyph + indent + dim hint applied at the call site so all four
-   * "wrong shape" advisories read the same way.
-   */
-  granularityBundleRejectsQualified: "{{glyph}}  '{{bundleId}}' has granularity=bundle.\n   Use `sm plugins {{verb}} {{bundleId}}` to {{verb}} the whole bundle.\n   {{hint}}\n",
-  granularityBundleRejectsQualifiedHint: "Individual extensions inside a bundle-granularity plugin cannot be toggled.",
-  granularityExtensionRejectsBundleId: "{{glyph}}  '{{bundleId}}' has granularity=extension.\n   Use `sm plugins {{verb}} {{bundleId}}/<ext-id>` to {{verb}} a single extension.\n   {{hint}}\n",
-  granularityExtensionRejectsBundleIdHint: "Run `sm plugins list` for the per-extension qualified ids.",
   pluginNotFound: "{{glyph}}  Plugin not found: {{id}}\n   {{hint}}\n",
   pluginNotFoundHint: "Run `sm plugins list` for discovered ids and the qualified extension ids.",
   pluginLocked: '{{glyph}}  Plugin "{{id}}" is locked by the host and cannot be toggled.\n   {{hint}}\n',
@@ -18833,8 +18894,14 @@ var PLUGINS_TEXTS = {
   // --- list verb -------------------------------------------------------
   listEmpty: "No plugins discovered.\n",
   // --- doctor verb -----------------------------------------------------
-  /** One-line summary that opens the human doctor output. */
-  doctorSummary: "plugins doctor: {{enabled}} enabled \xB7 {{issues}} issue{{issuesPlural}} \xB7 {{warnings}} warning{{warningsPlural}}\n\n",
+  /**
+   * One-line summary that opens the human doctor output. `enabled` is
+   * the count of enabled extensions across every bundle (every
+   * extension is independently toggle-able by its qualified id); the
+   * value matches the row count rendered by `sm plugins list` once
+   * disabled extensions are filtered out.
+   */
+  doctorSummary: "plugins doctor: {{enabled}} enabled extension{{enabledPlural}} \xB7 {{issues}} issue{{issuesPlural}} \xB7 {{warnings}} warning{{warningsPlural}}\n\n",
   /** Source breakdown row (built-in vs user). Indented 4 to match the status rows. */
   doctorSourceRow: "    {{label}}  {{count}}\n",
   /** Status breakdown table heading. */
@@ -18868,8 +18935,35 @@ var PLUGINS_TEXTS = {
   toggleNeitherIdNorAllHint: "Examples: `sm plugins {{verb}} <id1> <id2>` (explicit set), `sm plugins {{verb}} --all` (every discovered plugin).",
   toggleResolveError: "{{error}}",
   toggleAppliedSingle: "{{verbPast}}: {{id}}\n",
-  toggleAppliedManyHeader: "{{verbPast}}: {{count}} plugin(s)\n",
+  toggleAppliedManyHeader: "{{verbPast}}: {{count}} extension(s)\n",
   toggleAppliedManyRow: "  - {{id}}\n",
+  /**
+   * Macro expansion summary printed on stderr before the confirm
+   * prompt (or before the `--yes` rejection). The block lists every
+   * qualified extension id the bare bundle id resolves to, so the
+   * user sees the exact set that would flip.
+   */
+  bundleMacroHeader: "sm plugins {{verb}} {{bundleId}}: this will affect {{count}} extensions:\n",
+  bundleMacroRow: "  - {{id}}\n",
+  /**
+   * Interactive prompt rendered to a TTY by the macro path. The
+   * `confirm` helper appends the `[y/N]` suffix from UTIL_TEXTS.
+   */
+  bundleMacroConfirmPrompt: "Apply this {{verb}} to every listed extension?",
+  /**
+   * Stderr advisory when a TTY user answers no to the macro prompt.
+   * The verb exits non-zero (ExitCode.Error) so callers can detect
+   * the cancellation.
+   */
+  bundleMacroCancelled: "Cancelled.\n",
+  /**
+   * Non-TTY rejection path: pipes / CI cannot prompt, so the verb
+   * refuses unless `--yes` is set. The body lines come from
+   * `bundleMacroHeader` / `bundleMacroRow` above; this template adds
+   * the directed re-run hint.
+   */
+  bundleMacroRequiresYes: "{{glyph}}  Refusing to {{verb}} multiple extensions without confirmation.\n   {{hint}}\n",
+  bundleMacroRequiresYesHint: "Re-run with --yes to apply, or pass a qualified id `<bundle>/<extension>` for a single extension.",
   // --- list / show renderers ------------------------------------------
   rowStatusOk: "ok",
   rowStatusOff: "off",
@@ -18915,17 +19009,15 @@ var PLUGINS_TEXTS = {
   /** Extensions block heading, separated from the header by a blank line. */
   detailExtensionsBlock: "\n",
   /**
-   * Extension row WITH per-extension glyph (granularity=extension).
-   * Used by built-in `core` and any user plugin that opts in. Padding
-   * for {{kind}} and {{name}} is computed at render time so columns
-   * align inside the block.
-   */
-  detailExtensionRowGlyph: "    {{glyph}}  {{kind}}  {{name}}  v{{version}}\n",
-  /**
-   * Extension row WITHOUT per-extension glyph (granularity=bundle).
-   * The bundle is the only toggle; per-extension status is implicit.
+   * Extension row inside the bundle detail. Every extension is
+   * independently toggle-able, so every row carries its own glyph
+   * (✓ / ✕). Padding for {{kind}} and {{name}} is computed at render
+   * time so columns align inside the block. `{{versionSuffix}}` is
+   * either `  v<x.y.z>` (user plugins) or empty (built-in bundles,
+   * which inherit the CLI version and do not maintain per-extension
+   * versions of their own).
    */
-  detailExtensionRowBare: "       {{kind}}  {{name}}  v{{version}}\n",
+  detailExtensionRowGlyph: "    {{glyph}}  {{kind}}  {{name}}{{versionSuffix}}\n",
   detailVersionUnknown: "?",
   detailCompatUnknown: "?",
   /**
@@ -18975,6 +19067,27 @@ var PLUGINS_TEXTS = {
   slotsListTipText: "Tip: full spec at spec/view-slots.md and spec/input-types.md."
 };
 
+// plugins/presentation-order.ts
+var BUILT_IN_BUNDLE_PRESENTATION_ORDER = [
+  "core",
+  "claude",
+  "antigravity",
+  "openai",
+  "agent-skills"
+];
+function sortBundlesForPresentation(bundles) {
+  const orderIndex = (id) => {
+    const idx = BUILT_IN_BUNDLE_PRESENTATION_ORDER.indexOf(id);
+    return idx >= 0 ? idx : BUILT_IN_BUNDLE_PRESENTATION_ORDER.length;
+  };
+  return [...bundles].sort((a, b) => {
+    const ai = orderIndex(a.id);
+    const bi = orderIndex(b.id);
+    if (ai !== bi) return ai - bi;
+    return a.id.localeCompare(b.id);
+  });
+}
+
 // cli/commands/plugins/shared.ts
 import { resolve as resolve32 } from "path";
 function resolveSearchPaths2(opts, cwd) {
@@ -19004,26 +19117,24 @@ async function loadAll(opts) {
   return loader.discoverAndLoadAll();
 }
 function builtInRows(resolveEnabled) {
-  return builtInBundles.map((bundle) => {
-    const bundleEnabled = resolveEnabled(bundle.id);
-    const extensions = bundle.extensions.map((ext) => extensionRowFromBuiltIn(ext, bundle, bundleEnabled, resolveEnabled));
+  return sortBundlesForPresentation(builtInBundles).map((bundle) => {
+    const extensions = bundle.extensions.map((ext) => extensionRowFromBuiltIn(ext, bundle, resolveEnabled));
     const manifestSummary = bundle.extensions.map((ext) => `${ext.kind}:${qualifiedExtensionId(bundle.id, ext.id)}@${ext.version}`).join(", ");
     return {
       id: bundle.id,
-      granularity: bundle.granularity,
-      enabled: bundleEnabled,
+      enabled: extensions.some((e) => e.enabled),
       description: bundle.description,
       extensions,
       manifestSummary
     };
   });
 }
-function extensionRowFromBuiltIn(ext, bundle, bundleEnabled, resolveEnabled) {
+function extensionRowFromBuiltIn(ext, bundle, resolveEnabled) {
   const row = {
     id: ext.id,
     kind: ext.kind,
     version: ext.version,
-    enabled: bundle.granularity === "bundle" ? bundleEnabled : resolveEnabled(qualifiedExtensionId(bundle.id, ext.id)),
+    enabled: resolveEnabled(qualifiedExtensionId(bundle.id, ext.id)),
     description: ext.description ?? ""
   };
   if (ext.entry !== void 0) row.entry = ext.entry;
@@ -19077,14 +19188,14 @@ var PluginsListCommand = class extends SmCommand {
       return ExitCode.Ok;
     }
     const ansi = this.ansiFor("stdout");
-    this.printer.data(renderListHuman(builtIns2, plugins, ansi));
+    this.printer.data(renderListHuman(builtIns2, plugins, resolveEnabled, ansi));
     return ExitCode.Ok;
   }
 };
-function renderListHuman(builtIns2, plugins, ansi) {
+function renderListHuman(builtIns2, plugins, resolveEnabled, ansi) {
   const rows = [
     ...builtIns2.map(builtInToListRow),
-    ...plugins.map(pluginToListRow)
+    ...plugins.map((p) => pluginToListRow(p, resolveEnabled))
   ];
   const idWidth = Math.max(...rows.map((r) => r.id.length));
   const countWidth = Math.max(
@@ -19115,9 +19226,9 @@ function renderListHuman(builtIns2, plugins, ansi) {
   return lines.join("\n") + "\n" + PLUGINS_TEXTS.listTipShow;
 }
 function builtInToListRow(b) {
-  const names = b.granularity === "extension" ? b.extensions.map(
+  const names = b.extensions.map(
     (e) => e.enabled ? e.id : `${PLUGINS_TEXTS.rowGlyphOff} ${e.id}`
-  ) : b.extensions.map((e) => e.id);
+  );
   return {
     id: b.id,
     enabled: b.enabled,
@@ -19125,9 +19236,14 @@ function builtInToListRow(b) {
     names
   };
 }
-function pluginToListRow(p) {
-  const enabled = p.status === "enabled";
-  const names = p.extensions?.map((e) => sanitizeForTerminal(e.id)) ?? [];
+function pluginToListRow(p, resolveEnabled) {
+  const isLoaded = p.status === "enabled";
+  const extensions = p.extensions ?? [];
+  const enabled = isLoaded ? extensions.length === 0 || extensions.some((e) => resolveEnabled(qualifiedExtensionId(p.id, e.id))) : false;
+  const names = extensions.map((e) => {
+    const safeId = sanitizeForTerminal(e.id);
+    return resolveEnabled(qualifiedExtensionId(p.id, e.id)) ? safeId : `${PLUGINS_TEXTS.rowGlyphOff} ${safeId}`;
+  });
   const reason = p.status === "enabled" ? void 0 : sanitizeForTerminal(p.reason ?? "") || void 0;
   return {
     id: sanitizeForTerminal(p.id),
@@ -19139,10 +19255,10 @@ function pluginToListRow(p) {
 }
 function wrapNames(names, indent, maxWidth) {
   const out = [];
-  const sep7 = ", ";
+  const sep8 = ", ";
   let current = "";
   for (const name of names) {
-    const candidate = current === "" ? name : `${current}${sep7}${name}`;
+    const candidate = current === "" ? name : `${current}${sep8}${name}`;
     if (indent.length + candidate.length > maxWidth && current !== "") {
       out.push(`${current},`);
       current = name;
@@ -19165,11 +19281,10 @@ var PluginsShowCommand = class extends SmCommand {
       Accepts a bundle / plugin id (\`core\`, \`claude\`, \`my-plugin\`)
       or a qualified extension id (\`core/<ext-id>\`,
       \`<plugin>/<ext-id>\`). When given a qualified id, validates the
-      extension exists and renders the parent bundle's detail (which
-      lists every extension with per-extension status for
-      granularity=extension bundles like \`core\`). The same id shapes
-      \`sm plugins enable\` and \`sm plugins disable\` accept resolve
-      cleanly here too.
+      extension exists and renders a single-extension detail block.
+      The bare form renders the parent bundle's detail with per-extension
+      status. The same id shapes \`sm plugins enable\` and
+      \`sm plugins disable\` accept resolve cleanly here too.
     `
   });
   id = Option22.String({ required: true });
@@ -19300,16 +19415,13 @@ function sortExtensionsCanonical(exts) {
   });
 }
 function renderBuiltInDetail(b, ansi) {
-  const enabled = b.enabled;
-  const glyph = enabled ? ansi.green(PLUGINS_TEXTS.rowGlyphOk) : ansi.red(PLUGINS_TEXTS.rowGlyphOff);
+  const glyph = b.enabled ? ansi.green(PLUGINS_TEXTS.rowGlyphOk) : ansi.red(PLUGINS_TEXTS.rowGlyphOff);
   const count = b.extensions.length;
-  const qualify = b.granularity === "extension";
   const sorted = sortExtensionsCanonical(b.extensions);
   const items = sorted.map((ext) => ({
-    glyph: b.granularity === "extension" ? ext.enabled ? ansi.green(PLUGINS_TEXTS.rowGlyphOk) : ansi.red(PLUGINS_TEXTS.rowGlyphOff) : null,
+    glyph: ext.enabled ? ansi.green(PLUGINS_TEXTS.rowGlyphOk) : ansi.red(PLUGINS_TEXTS.rowGlyphOff),
     kind: ext.kind,
-    name: qualify ? `${b.id}/${ext.id}` : ext.id,
-    version: ext.version
+    name: `${b.id}/${ext.id}`
   }));
   return tx(PLUGINS_TEXTS.detailHeaderBuiltIn, {
     glyph,
@@ -19377,15 +19489,18 @@ function renderPluginDetailFields(match) {
 function collectPluginExtensionItems(match, ansi) {
   const enabled = match.status === "enabled";
   if (!enabled || !match.extensions) return [];
-  const qualify = match.granularity === "extension";
   const safeBundleId = sanitizeForTerminal(match.id);
   const sorted = sortExtensionsCanonical(match.extensions);
   return sorted.map((ext) => {
     const safeExtId = sanitizeForTerminal(ext.id);
     return {
-      glyph: match.granularity === "extension" ? ansi.green(PLUGINS_TEXTS.rowGlyphOk) : null,
+      // User plugins surfaced via `loadAll` already filter on the
+      // resolver, so a reachable extension on this surface is enabled
+      // by construction. The disabled path goes through the bundle
+      // status header above (✕ on the row).
+      glyph: ansi.green(PLUGINS_TEXTS.rowGlyphOk),
       kind: sanitizeForTerminal(ext.kind),
-      name: qualify ? `${safeBundleId}/${safeExtId}` : safeExtId,
+      name: `${safeBundleId}/${safeExtId}`,
       version: sanitizeForTerminal(ext.version)
     };
   });
@@ -19393,29 +19508,21 @@ function collectPluginExtensionItems(match, ansi) {
 function renderExtensionItems(items) {
   if (items.length === 0) return "";
   const kindWidth = Math.max(...items.map((i) => i.kind.length));
-  const nameWidth = Math.max(...items.map((i) => i.name.length));
+  const anyVersion = items.some((i) => i.version !== void 0);
+  const nameWidth = anyVersion ? Math.max(...items.map((i) => i.name.length)) : 0;
   const out = [];
   for (const item of items) {
     const kind = item.kind.padEnd(kindWidth);
-    const name = item.name.padEnd(nameWidth);
-    if (item.glyph !== null) {
-      out.push(
-        tx(PLUGINS_TEXTS.detailExtensionRowGlyph, {
-          glyph: item.glyph,
-          kind,
-          name,
-          version: item.version
-        })
-      );
-    } else {
-      out.push(
-        tx(PLUGINS_TEXTS.detailExtensionRowBare, {
-          kind,
-          name,
-          version: item.version
-        })
-      );
-    }
+    const name = anyVersion ? item.name.padEnd(nameWidth) : item.name;
+    const versionSuffix = item.version ? `  v${item.version}` : "";
+    out.push(
+      tx(PLUGINS_TEXTS.detailExtensionRowGlyph, {
+        glyph: item.glyph,
+        kind,
+        name,
+        versionSuffix
+      })
+    );
   }
   return out.join("");
 }
@@ -19426,7 +19533,7 @@ function renderBuiltInExtensionDetail(bundleId, ext, ansi) {
     qualifiedId: sanitizeForTerminal(`${bundleId}/${ext.id}`),
     source: ansi.dim(PLUGINS_TEXTS.sourceBuiltIn)
   });
-  const meta = { kind: ext.kind, version: ext.version };
+  const meta = { kind: ext.kind };
   if (ext.description) meta.description = ext.description;
   if (ext.entry !== void 0) meta.entry = ext.entry;
   return header + "\n" + renderExtensionFields(meta);
@@ -19465,7 +19572,12 @@ function readInstanceMeta(instance) {
 function renderExtensionFields(meta) {
   const fields = [];
   fields.push({ label: PLUGINS_TEXTS.detailFieldKind, value: sanitizeForTerminal(meta.kind) });
-  fields.push({ label: PLUGINS_TEXTS.detailFieldVersion, value: sanitizeForTerminal(meta.version) });
+  if (meta.version) {
+    fields.push({
+      label: PLUGINS_TEXTS.detailFieldVersion,
+      value: sanitizeForTerminal(meta.version)
+    });
+  }
   if (meta.stability) {
     fields.push({
       label: PLUGINS_TEXTS.detailFieldStability,
@@ -19519,7 +19631,7 @@ var PluginsDoctorCommand = class extends SmCommand {
     const plugins = await loadAll({ pluginDir: this.pluginDir });
     const resolveEnabled = await buildResolver();
     const builtIns2 = builtInRows(resolveEnabled);
-    const counts = countByStatus(builtIns2, plugins);
+    const counts = countByStatus(builtIns2, plugins, resolveEnabled);
     const knownKinds = collectKnownKinds(plugins);
     const applicableKindWarnings = collectApplicableKindWarnings(plugins, knownKinds);
     const unknownSlotWarnings = collectUnknownSlotWarnings(plugins, KNOWN_SLOT_NAMES);
@@ -19554,6 +19666,7 @@ var PluginsDoctorCommand = class extends SmCommand {
     this.printer.data(
       tx(PLUGINS_TEXTS.doctorSummary, {
         enabled,
+        enabledPlural: enabled === 1 ? "" : "s",
         issues: badCount,
         issuesPlural: badCount === 1 ? "" : "s",
         warnings,
@@ -19651,7 +19764,7 @@ var PluginsDoctorCommand = class extends SmCommand {
     }
   }
 };
-function countByStatus(builtIns2, plugins) {
+function countByStatus(builtIns2, plugins, resolveEnabled) {
   const counts = {
     enabled: 0,
     disabled: 0,
@@ -19662,15 +19775,20 @@ function countByStatus(builtIns2, plugins) {
     "id-collision": 0
   };
   for (const b of builtIns2) {
-    if (b.granularity === "bundle") {
-      counts[b.enabled ? "enabled" : "disabled"]++;
-    } else {
-      for (const ext of b.extensions) {
-        counts[ext.enabled ? "enabled" : "disabled"]++;
-      }
+    for (const ext of b.extensions) {
+      counts[ext.enabled ? "enabled" : "disabled"]++;
+    }
+  }
+  for (const p of plugins) {
+    if (p.status !== "enabled" || !p.extensions) {
+      counts[p.status]++;
+      continue;
+    }
+    for (const ext of p.extensions) {
+      const enabled = resolveEnabled(`${p.id}/${ext.id}`);
+      counts[enabled ? "enabled" : "disabled"]++;
     }
   }
-  for (const p of plugins) counts[p.status]++;
   return counts;
 }
 function forEachProviderInstance(plugins, callback) {
@@ -19710,10 +19828,13 @@ function extensionInstance(ext) {
 }
 function collectKnownKinds(plugins) {
   const known = /* @__PURE__ */ new Set();
-  forEachProviderInstance(plugins, ({ instance }) => {
+  forEachProviderInstance(plugins, ({ pluginId, instance }) => {
     const map = instance["kinds"];
     if (map === null || typeof map !== "object") return;
-    for (const k of Object.keys(map)) known.add(k);
+    for (const k of Object.keys(map)) {
+      known.add(k);
+      known.add(qualifiedExtensionId(pluginId, k));
+    }
   });
   return known;
 }
@@ -19860,6 +19981,9 @@ function buildDoctorJsonEnvelope(args2) {
 import { Command as Command25, Option as Option24 } from "clipanion";
 var TogglePluginsBase = class extends SmCommand {
   all = Option24.Boolean("--all", false);
+  yes = Option24.Boolean("--yes,-y", false, {
+    description: "Skip the interactive confirm when a bare bundle id (or --all) fans the toggle out across multiple extensions."
+  });
   ids = Option24.Rest({ name: "ids" });
   async toggle(enabled) {
     const verb = enabled ? "enable" : "disable";
@@ -19868,14 +19992,17 @@ var TogglePluginsBase = class extends SmCommand {
     if (argError !== null) return argError;
     const plugins = await loadAll({ pluginDir: void 0 });
     const catalogue = bundleCatalogue(plugins);
-    const targetsResult = this.#pickTargets(catalogue, verb, stderrAnsi);
+    const targetsResult = this.#pickTargets(catalogue, stderrAnsi);
     if (typeof targetsResult === "number") return targetsResult;
     let targets = targetsResult;
+    const macroOk = await this.#confirmMacroIfNeeded(targets, verb, stderrAnsi);
+    if (!macroOk) return ExitCode.Error;
     const lockError = this.#applyLockGate(targets, stderrAnsi);
     if (typeof lockError === "number") return lockError;
     targets = lockError;
-    await this.#persistTargets(targets, enabled);
-    this.#renderSuccess(targets, enabled);
+    const keys = expandToKeys(targets);
+    await this.#persistKeys(keys, enabled);
+    this.#renderSuccess(keys, enabled);
     return ExitCode.Ok;
   }
   /**
@@ -19908,87 +20035,166 @@ var TogglePluginsBase = class extends SmCommand {
   /**
    * Resolve `<id>...` against the catalogue or fan out via `--all`.
    * Returns the target list on success, or the exit code on a
-   * directed-error path (unknown id, granularity mismatch).
-   *
-   * `--all` is a macro on bundle ids: every plugin / bundle the user
-   * can see. We deliberately do NOT expand to qualified
-   * <bundle>/<ext> keys, that would silently flip a granularity
-   * policy. For granularity=extension bundles the user already hits
-   * the directed error message when they try the bundle id directly,
-   * so `--all` skips them here too and the real "disable every core
-   * extension" intent is served by `--no-built-ins` on `sm scan`.
+   * directed-error path (unknown id, malformed qualified id).
    *
-   * Variadic mode is all-or-nothing: the first bad id aborts the
-   * batch before any DB write, so the user never lands in a partial
-   * state. Repeated ids in the same call are deduped.
+   * Repeated ids in the same call are deduped at the target level
+   * (`origin === 'bare'` and `origin === 'qualified'` rows stay
+   * distinct so the macro-confirm path can address each correctly).
+   * The first unknown id aborts the batch before any DB write so the
+   * user never lands in a partial state.
    */
-  #pickTargets(catalogue, verb, ansi) {
+  #pickTargets(catalogue, ansi) {
     if (this.all) {
-      return catalogue.filter((b) => b.granularity === "bundle").map((b) => b.id);
+      return catalogue.map((b) => ({
+        origin: "bare",
+        bundleId: b.id,
+        keys: b.extensionIds.map((extId) => qualifiedExtensionId(b.id, extId))
+      }));
     }
-    const keys = [];
+    const out = [];
+    const seen = /* @__PURE__ */ new Set();
     for (const rawId of this.ids) {
-      const resolved = resolveToggleTarget(rawId, catalogue, verb, ansi);
+      const resolved = resolveToggleTarget(rawId, catalogue, ansi);
       if ("error" in resolved) {
         this.printer.error(tx(PLUGINS_TEXTS.toggleResolveError, { error: resolved.error }));
         return ExitCode.NotFound;
       }
-      keys.push(resolved.key);
+      const novelKeys = resolved.keys.filter((k) => !seen.has(k));
+      if (novelKeys.length === 0) continue;
+      for (const k of novelKeys) seen.add(k);
+      out.push({ ...resolved, keys: novelKeys });
+    }
+    return out;
+  }
+  /**
+   * Macro gate: when the request would fan a single user input out
+   * across more than one extension (either `--all` or a bare bundle
+   * id whose bundle holds ≥2 extensions), confirm the intent.
+   *
+   * Resolution order:
+   *   1. `--yes` flag: skip the prompt entirely.
+   *   2. TTY stdin: render the list + ask interactively (`[y/N]`).
+   *   3. Non-TTY (CI / pipe / agent harness): refuse with a directed
+   *      message that names the extensions and points at `--yes`.
+   *
+   * Returns `true` when the verb should proceed, `false` when it
+   * should abort. Single-extension targets (bare bundle id mapping to
+   * one child, or qualified ids) skip the gate uniformly.
+   */
+  // Cyclomatic count comes from the three-stage gate (--yes shortcut,
+  // TTY interactive path, non-TTY rejection) folded over the targets
+  // loop. Splitting them scatters the contract without making the
+  // algorithm clearer.
+  // eslint-disable-next-line complexity
+  async #confirmMacroIfNeeded(targets, verb, ansi) {
+    const macroTargets = targets.filter((t) => requiresMacroConfirm(t));
+    if (macroTargets.length === 0) return true;
+    if (this.yes) return true;
+    const isTty = Boolean(this.context.stdin && "isTTY" in this.context.stdin && this.context.stdin.isTTY);
+    for (const target of macroTargets) {
+      const bundleLabel = target.origin === "bare" ? target.bundleId ?? "--all" : "--all";
+      this.printer.info(
+        tx(PLUGINS_TEXTS.bundleMacroHeader, {
+          verb,
+          bundleId: sanitizeForTerminal(bundleLabel),
+          count: target.keys.length
+        })
+      );
+      for (const key of target.keys) {
+        this.printer.info(tx(PLUGINS_TEXTS.bundleMacroRow, { id: sanitizeForTerminal(key) }));
+      }
+    }
+    if (!isTty) {
+      this.printer.error(
+        tx(PLUGINS_TEXTS.bundleMacroRequiresYes, {
+          glyph: ansi.red("\u2715"),
+          verb,
+          hint: ansi.dim(PLUGINS_TEXTS.bundleMacroRequiresYesHint)
+        })
+      );
+      return false;
+    }
+    const ok = await confirm(
+      tx(PLUGINS_TEXTS.bundleMacroConfirmPrompt, { verb }),
+      { stdin: this.context.stdin, stderr: this.context.stderr }
+    );
+    if (!ok) {
+      this.printer.info(PLUGINS_TEXTS.bundleMacroCancelled);
     }
-    return [...new Set(keys)];
+    return ok;
   }
   /**
    * Host lock, see `src/kernel/config/locked-plugins.ts`. Bulk modes
-   * (`--all` or an explicit batch of >1 ids) silently skip locked
-   * targets so the user can still toggle the rest. Single-id mode
-   * surfaces a directed exit-5 message so the user knows their one
-   * intended target was refused.
+   * (`--all`, an explicit batch of >1 targets, or a macro expansion
+   * with >1 keys) silently skip locked extensions so the user can
+   * still toggle the rest. Single-extension mode surfaces a directed
+   * exit-5 message so the user knows their one intended target was
+   * refused.
    */
   #applyLockGate(targets, ansi) {
-    if (this.all || this.ids.length > 1) return targets.filter((id) => !isPluginLocked(id));
-    const lockedHit = targets.find((id) => isPluginLocked(id));
-    if (!lockedHit) return targets;
+    const totalKeys = targets.reduce((acc, t) => acc + t.keys.length, 0);
+    const bulk = this.all || this.ids.length > 1 || totalKeys > 1;
+    if (bulk) {
+      return targets.map((t) => ({ ...t, keys: t.keys.filter((k) => !isPluginLocked(k)) }));
+    }
+    const onlyKey = targets[0]?.keys[0];
+    if (!onlyKey || !isPluginLocked(onlyKey)) return targets;
     this.printer.error(
       tx(PLUGINS_TEXTS.pluginLocked, {
         glyph: ansi.red("\u2715"),
-        id: sanitizeForTerminal(lockedHit),
+        id: sanitizeForTerminal(onlyKey),
         hint: ansi.dim(PLUGINS_TEXTS.pluginLockedHint)
       })
     );
     return ExitCode.NotFound;
   }
   /**
-   * Persist the toggle in `config_plugins`. On disable, also purge
-   * the plugin's `scan_contributions` rows immediately (matches the
-   * BFF route, see `server/routes/plugins.ts:applyChangeToAdapter`).
-   * `targets` carries either a bare bundle id (e.g. `claude`) or a
-   * qualified `<bundle>/<ext>` (e.g. `core/slash`); the split mirrors
-   * how the catalog sweep groups rows.
+   * Persist every qualified id in `config_plugins`. On disable, also
+   * purge the plugin's `scan_contributions` rows immediately (matches
+   * the BFF route, see `server/routes/plugins.ts:applyChangeToAdapter`).
+   * Every key is `<bundle>/<ext>` shape so the contribution purge can
+   * split into `(pluginId, extensionId)` cleanly.
    */
-  async #persistTargets(targets, enabled) {
+  async #persistKeys(keys, enabled) {
     const ctx = defaultRuntimeContext();
     const dbPath = resolveDbPath({ db: void 0, cwd: ctx.cwd });
     await withSqlite({ databasePath: dbPath, autoBackup: false }, async (adapter) => {
-      for (const id of targets) {
+      for (const id of keys) {
         await adapter.pluginConfig.set(id, enabled);
         if (!enabled) await purgeContributionsFor(adapter, id);
       }
     });
   }
-  #renderSuccess(targets, enabled) {
+  #renderSuccess(keys, enabled) {
     const verbPast = enabled ? "enabled" : "disabled";
-    if (targets.length === 1) {
-      this.printer.data(tx(PLUGINS_TEXTS.toggleAppliedSingle, { verbPast, id: targets[0] }));
+    if (keys.length === 1) {
+      this.printer.data(tx(PLUGINS_TEXTS.toggleAppliedSingle, { verbPast, id: keys[0] }));
     } else {
       this.printer.data(
-        tx(PLUGINS_TEXTS.toggleAppliedManyHeader, { verbPast, count: targets.length })
+        tx(PLUGINS_TEXTS.toggleAppliedManyHeader, { verbPast, count: keys.length })
       );
-      for (const id of targets) {
+      for (const id of keys) {
         this.printer.data(tx(PLUGINS_TEXTS.toggleAppliedManyRow, { id }));
       }
     }
   }
 };
+function requiresMacroConfirm(target) {
+  if (target.origin !== "bare") return false;
+  return target.keys.length >= 2;
+}
+function expandToKeys(targets) {
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const t of targets) {
+    for (const k of t.keys) {
+      if (seen.has(k)) continue;
+      seen.add(k);
+      out.push(k);
+    }
+  }
+  return out;
+}
 async function purgeContributionsFor(adapter, id) {
   const slash = id.indexOf("/");
   if (slash < 0) {
@@ -20001,25 +20207,24 @@ var PluginsEnableCommand = class extends TogglePluginsBase {
   static paths = [["plugins", "enable"]];
   static usage = Command25.Usage({
     category: "Plugins",
-    description: "Enable one or more plugins (or --all). Persists in config_plugins.",
+    description: "Enable one or more extensions (or --all). Persists in config_plugins.",
     details: `
-      Writes a row to config_plugins with enabled=1 per id. Takes
-      precedence over the team-shared baseline at
+      Writes a row to config_plugins with enabled=1 per qualified
+      extension id. Takes precedence over the team-shared baseline at
       settings.json#/plugins/<id>/enabled. Use sm plugins disable to
       flip; sm config reset plugins.<id>.enabled drops the settings.json
       baseline.
 
-      Accepts one or more ids in one call, e.g.
-      'sm plugins enable claude antigravity openai'. Batches are
-      all-or-nothing: a single unknown / mismatched id aborts before
-      any write. Repeated ids are deduped. Locked plugins inside a
-      batch are silently skipped.
+      Accepts qualified ids (\`claude/at-directive\`) and bare bundle
+      ids (\`claude\`, which fans the toggle out across every extension
+      inside the bundle). Multi-extension bundles need --yes (or an
+      interactive TTY confirm) to avoid flipping 27 core extensions by
+      accident. Single-extension bundles (openai, agent-skills,
+      antigravity) apply without prompting.
 
-      Granularity: a bundle-granularity plugin (default for user plugins,
-      and the built-in 'claude' bundle) accepts only the bundle id. An
-      extension-granularity plugin (the built-in 'core' bundle) accepts
-      only qualified ids '<bundle>/<ext-id>'. Mismatches are rejected
-      with directed guidance.
+      Batches are all-or-nothing: a single unknown id aborts before
+      any write. Repeated ids are deduped. Locked extensions inside a
+      batch are silently skipped.
     `
   });
   async run() {
@@ -20030,24 +20235,23 @@ var PluginsDisableCommand = class extends TogglePluginsBase {
   static paths = [["plugins", "disable"]];
   static usage = Command25.Usage({
     category: "Plugins",
-    description: "Disable one or more plugins (or --all). Persists in config_plugins; does not delete files.",
+    description: "Disable one or more extensions (or --all). Persists in config_plugins; does not delete files.",
     details: `
-      Writes a row to config_plugins with enabled=0 per id. Discovery
-      still surfaces the plugin in sm plugins list, but with
-      status=disabled; its extensions are not imported and the kernel
-      will not run them.
-
-      Accepts one or more ids in one call, e.g.
-      'sm plugins disable antigravity openai agent-skills'. Batches are
-      all-or-nothing: a single unknown / mismatched id aborts before
-      any write. Repeated ids are deduped. Locked plugins inside a
+      Writes a row to config_plugins with enabled=0 per qualified
+      extension id. Discovery still surfaces the plugin in
+      sm plugins list, but with status=disabled; the kernel will not
+      run any of its disabled extensions.
+
+      Accepts qualified ids (\`core/markdown-link\`) and bare bundle
+      ids (\`core\`, which fans the toggle out across every extension
+      inside the bundle). Multi-extension bundles need --yes (or an
+      interactive TTY confirm) to avoid flipping 27 core extensions by
+      accident. Single-extension bundles (openai, agent-skills,
+      antigravity) apply without prompting.
+
+      Batches are all-or-nothing: a single unknown id aborts before
+      any write. Repeated ids are deduped. Locked extensions inside a
       batch are silently skipped.
-
-      Granularity: a bundle-granularity plugin (default for user plugins,
-      and the built-in 'claude' bundle) accepts only the bundle id. An
-      extension-granularity plugin (the built-in 'core' bundle) accepts
-      only qualified ids '<bundle>/<ext-id>'. Mismatches are rejected
-      with directed guidance.
     `
   });
   async run() {
@@ -20059,23 +20263,21 @@ function bundleCatalogue(plugins) {
   for (const bundle of builtInBundles) {
     out.push({
       id: bundle.id,
-      granularity: bundle.granularity,
       extensionIds: bundle.extensions.map((e) => e.id)
     });
   }
   for (const p of plugins) {
     out.push({
       id: p.id,
-      granularity: p.granularity ?? "bundle",
       extensionIds: p.extensions?.map((e) => e.id) ?? []
     });
   }
   return out;
 }
-function resolveToggleTarget(id, catalogue, verb, ansi) {
-  return id.includes("/") ? resolveQualifiedToggle(id, catalogue, verb, ansi) : resolveBareToggle(id, catalogue, verb, ansi);
+function resolveToggleTarget(id, catalogue, ansi) {
+  return id.includes("/") ? resolveQualifiedToggle(id, catalogue, ansi) : resolveBareToggle(id, catalogue);
 }
-function resolveQualifiedToggle(id, catalogue, verb, ansi) {
+function resolveQualifiedToggle(id, catalogue, ansi) {
   const errGlyph = ansi.red("\u2715");
   const [bundleId, extId, ...rest] = id.split("/");
   if (!bundleId || !extId || rest.length > 0) {
@@ -20097,17 +20299,6 @@ function resolveQualifiedToggle(id, catalogue, verb, ansi) {
       })
     };
   }
-  if (bundle.granularity === "bundle") {
-    return {
-      error: tx(PLUGINS_TEXTS.granularityBundleRejectsQualified, {
-        glyph: errGlyph,
-        bundleId: sanitizeForTerminal(bundleId),
-        extId: sanitizeForTerminal(extId),
-        verb,
-        hint: ansi.dim(PLUGINS_TEXTS.granularityBundleRejectsQualifiedHint)
-      })
-    };
-  }
   if (!bundle.extensionIds.includes(extId)) {
     return {
       error: tx(PLUGINS_TEXTS.qualifiedIdNotFound, {
@@ -20119,31 +20310,27 @@ function resolveQualifiedToggle(id, catalogue, verb, ansi) {
       })
     };
   }
-  return { key: qualifiedExtensionId(bundleId, extId) };
+  return {
+    origin: "qualified",
+    keys: [qualifiedExtensionId(bundleId, extId)]
+  };
 }
-function resolveBareToggle(id, catalogue, verb, ansi) {
-  const errGlyph = ansi.red("\u2715");
+function resolveBareToggle(id, catalogue) {
   const bundle = catalogue.find((b) => b.id === id);
   if (!bundle) {
     return {
       error: tx(PLUGINS_TEXTS.pluginNotFound, {
-        glyph: errGlyph,
+        glyph: "\u2715",
         id: sanitizeForTerminal(id),
-        hint: ansi.dim(PLUGINS_TEXTS.pluginNotFoundHint)
-      })
-    };
-  }
-  if (bundle.granularity === "extension") {
-    return {
-      error: tx(PLUGINS_TEXTS.granularityExtensionRejectsBundleId, {
-        glyph: errGlyph,
-        bundleId: sanitizeForTerminal(id),
-        verb,
-        hint: ansi.dim(PLUGINS_TEXTS.granularityExtensionRejectsBundleIdHint)
+        hint: PLUGINS_TEXTS.pluginNotFoundHint
       })
     };
   }
-  return { key: bundle.id };
+  return {
+    origin: "bare",
+    bundleId: bundle.id,
+    keys: bundle.extensionIds.map((extId) => qualifiedExtensionId(bundle.id, extId))
+  };
 }
 
 // cli/commands/plugins/create.ts
@@ -20194,7 +20381,6 @@ var PluginsCreateCommand = class extends SmCommand {
       version: "0.1.0",
       specCompat: `^${specVersion}`,
       catalogCompat: "^1.0.0",
-      granularity: "bundle",
       description: "Generated by `sm plugins create`. Edit to taste.",
       settings: {
         keywords: {
@@ -20310,7 +20496,7 @@ var VIEW_SLOTS_CATALOG = [
   { id: "card.subtitle.left", summary: "Single non-negative integer in the card subtitle row." },
   { id: "card.footer.left", summary: "Counter chip in the left footer of the card." },
   { id: "card.footer.right", summary: "Counter chip in the right footer of the card." },
-  { id: "graph.node.alert", summary: "Corner badge decoration on the graph node (alert / status)." },
+  { id: "graph.node.alert", summary: 'Reserved corner badge on the graph node, special-case signals only. No core analyzer emits here; routine "this node has a problem" findings belong in `card.footer.right`.' },
   { id: "inspector.header.badge.counter", summary: "Counter chip in the inspector header badge cluster." },
   { id: "inspector.header.badge.tag", summary: "Qualitative tag chip in the inspector header badge cluster." },
   { id: "inspector.body.panel.breakdown", summary: "Top-N labeled values rendered as a bar chart in the inspector body." },
@@ -21608,13 +21794,12 @@ var ScanCommand = class extends SmCommand {
     const ansi = this.ansiFor("stdout");
     const cwd = defaultRuntimeContext().cwd;
     const hasErrors = exitCode2 === ExitCode.Issues;
-    const issuesCount = result.stats.issuesCount;
-    const glyph = hasErrors ? ansi.red("\u2715") : ansi.green("\u2713");
+    const severityCounts = countBySeverity(result.issues);
+    const glyph = hasErrors ? " " : ansi.green("\u2713");
     const counts = formatScanCounts({
       nodes: result.stats.nodesCount,
       links: result.stats.linksCount,
-      issues: issuesCount,
-      hasErrors,
+      severities: severityCounts,
       ansi
     });
     const duration = ansi.dim(`in ${result.stats.durationMs}ms`);
@@ -21661,11 +21846,49 @@ var ScanCommand = class extends SmCommand {
     return exitCode2;
   }
 };
+function countBySeverity(issues) {
+  const buckets = {
+    error: /* @__PURE__ */ new Set(),
+    warn: /* @__PURE__ */ new Set(),
+    info: /* @__PURE__ */ new Set()
+  };
+  for (const i of issues) {
+    const tier = i.severity;
+    const bucket = buckets[tier];
+    if (!bucket) continue;
+    fillSeverityBucket(bucket, i.nodeIds);
+  }
+  return { errors: buckets.error.size, warns: buckets.warn.size, info: buckets.info.size };
+}
+function fillSeverityBucket(bucket, nodeIds) {
+  const ids = nodeIds ?? [];
+  if (ids.length === 0) {
+    bucket.add("");
+    return;
+  }
+  for (const id of ids) bucket.add(id);
+}
 function formatScanCounts(opts) {
-  const { nodes, links, issues, hasErrors, ansi } = opts;
-  const issuesText = `${issues} ${plural(issues, "issue")}`;
-  const issuesColored = issues === 0 ? ansi.dim(issuesText) : hasErrors ? ansi.red(issuesText) : ansi.yellow(issuesText);
-  return `${nodes} ${plural(nodes, "node")} \xB7 ${links} ${plural(links, "link")} \xB7 ${issuesColored}`;
+  const { nodes, links, severities, ansi } = opts;
+  const parts = [
+    `${nodes} ${plural(nodes, "node")}`,
+    `${links} ${plural(links, "link")}`
+  ];
+  const total = severities.errors + severities.warns + severities.info;
+  if (total === 0) {
+    parts.push(ansi.dim("0 issues"));
+  } else {
+    if (severities.errors > 0) {
+      parts.push(ansi.red(`${severities.errors} ${plural(severities.errors, "error")}`));
+    }
+    if (severities.warns > 0) {
+      parts.push(ansi.yellow(`${severities.warns} ${plural(severities.warns, "warning")}`));
+    }
+    if (severities.info > 0) {
+      parts.push(ansi.dim(`${severities.info} info`));
+    }
+  }
+  return parts.join(" \xB7 ");
 }
 function plural(count, word) {
   return count === 1 ? word : `${word}s`;
@@ -21919,6 +22142,18 @@ import { spawn as spawn2 } from "child_process";
 import { existsSync as existsSync28 } from "fs";
 import { Command as Command33, Option as Option31 } from "clipanion";
 
+// kernel/util/dev-mode.ts
+import { sep as sep6 } from "path";
+import { fileURLToPath as fileURLToPath5 } from "url";
+var SELF_PATH = fileURLToPath5(import.meta.url);
+var IS_DEV_BUILD = isDevBuildFromPath(SELF_PATH, sep6);
+function isDevBuildFromPath(filePath, separator = sep6) {
+  return !filePath.includes(`${separator}node_modules${separator}`);
+}
+function isDevBuild() {
+  return IS_DEV_BUILD;
+}
+
 // cli/util/browser-launch.ts
 function validateBrowserUrl(url) {
   if (typeof url !== "string" || url.length === 0) return false;
@@ -22136,10 +22371,10 @@ var SERVER_TEXTS = {
   pluginsBodyNotJson: "Request body must be valid JSON.",
   pluginsBodyNotObject: "Request body must be a JSON object.",
   pluginsEnabledRequired: "`enabled` is required and must be a boolean.",
-  // 400, granularity mismatch. Two flavours so the message is useful
-  // when the operator hits the wrong route by hand.
-  pluginsGranularityExtensionExpected: 'Plugin "{{id}}" has granularity:"extension"; toggle individual extensions via PATCH /api/plugins/{{id}}/extensions/<extensionId>.',
-  pluginsGranularityBundleExpected: 'Plugin "{{id}}" has granularity:"bundle"; toggle the whole bundle via PATCH /api/plugins/{{id}}.',
+  // 400, cascade route rejects qualified ids: the bare-id PATCH is the
+  // bundle macro endpoint. Anything containing `/` needs the dedicated
+  // per-extension route below.
+  pluginsCascadeRouteQualifiedRejected: 'Plugin id "{{id}}" contains "/"; toggle individual extensions via PATCH /api/plugins/<bundle>/extensions/<extensionId>.',
   // 404, unknown plugin / extension.
   pluginsUnknown: 'No plugin with id "{{id}}".',
   pluginsExtensionUnknown: 'Plugin "{{bundleId}}" has no extension named "{{extensionId}}".',
@@ -22632,6 +22867,7 @@ function contentTypeFor(format) {
 import { existsSync as existsSync23 } from "fs";
 var FALLBACK_SCHEMA_VERSION = "1";
 function buildHealth(deps) {
+  const dev = isDevBuild();
   return {
     ok: true,
     schemaVersion: FALLBACK_SCHEMA_VERSION,
@@ -22639,7 +22875,10 @@ function buildHealth(deps) {
     implVersion: VERSION,
     db: existsSync23(deps.dbPath) ? "present" : "missing",
     cwd: deps.cwd,
-    dbPath: deps.dbPath
+    dbPath: deps.dbPath,
+    // Only emit when truthy so a published install keeps the wire
+    // shape lean and consumers branch on presence alone.
+    ...dev ? { dev: true } : {}
   };
 }
 var cachedSpecVersion = null;
@@ -22764,13 +23003,13 @@ import { HTTPException as HTTPException6 } from "hono/http-exception";
 // server/node-body.ts
 import { constants as fsConstants2 } from "fs";
 import { open } from "fs/promises";
-import { isAbsolute as isAbsolute10, resolve as resolvePath2, relative as relativePath, sep as sep6 } from "path";
+import { isAbsolute as isAbsolute10, resolve as resolvePath2, relative as relativePath, sep as sep7 } from "path";
 async function readNodeBody(cwd, relPath) {
   if (isAbsolute10(relPath)) return null;
   const absRoot = resolvePath2(cwd);
   const absFile = resolvePath2(absRoot, relPath);
   const rel = relativePath(absRoot, absFile);
-  if (rel.startsWith("..") || rel.startsWith(sep6) || rel.length === 0) {
+  if (rel.startsWith("..") || rel.startsWith(sep7) || rel.length === 0) {
     return null;
   }
   let raw;
@@ -23142,7 +23381,7 @@ function registerPluginsRoute(app, deps) {
     const id = c.req.param("id");
     if (id.includes("/")) {
       throw new HTTPException8(400, {
-        message: tx(SERVER_TEXTS.pluginsGranularityExtensionExpected, { id })
+        message: tx(SERVER_TEXTS.pluginsCascadeRouteQualifiedRejected, { id })
       });
     }
     const handle = findHandle(id, deps);
@@ -23151,18 +23390,15 @@ function registerPluginsRoute(app, deps) {
         message: tx(SERVER_TEXTS.pluginsUnknown, { id })
       });
     }
-    if (granularityOf(handle) !== "bundle") {
-      throw new HTTPException8(400, {
-        message: tx(SERVER_TEXTS.pluginsGranularityExtensionExpected, { id })
-      });
-    }
     if (isPluginLocked(id)) {
       throw new HTTPException8(403, {
         message: tx(SERVER_TEXTS.pluginsLocked, { id })
       });
     }
     const body = await parsePatchBody(c.req.raw);
-    return await persistAndProject(c, deps, id, body.enabled);
+    const childIds = bundleExtensionIds(handle).map((extId) => qualifiedExtensionId(id, extId));
+    const writable = childIds.filter((q) => !isPluginLocked(q));
+    return await persistManyAndProject(c, deps, writable, body.enabled);
   });
   app.patch("/api/plugins/:bundleId/extensions/:extensionId", async (c) => {
     const bundleId = c.req.param("bundleId");
@@ -23210,8 +23446,7 @@ function listItems(deps, resolveEnabled) {
   ];
 }
 function buildBuiltInItems(resolveEnabled) {
-  return builtInBundles.map((bundle) => {
-    const bundleEnabled = resolveEnabled(bundle.id);
+  return sortBundlesForPresentation(builtInBundles).map((bundle) => {
     const bundleLocked = isPluginLocked(bundle.id);
     const extensions = bundle.extensions.map((ext) => {
       const qualified = qualifiedExtensionId(bundle.id, ext.id);
@@ -23225,6 +23460,7 @@ function buildBuiltInItems(resolveEnabled) {
         ...extLocked ? { locked: true } : {}
       };
     });
+    const bundleEnabled = extensions.some((e) => e.enabled);
     return {
       id: bundle.id,
       version: firstVersion(bundle.extensions),
@@ -23232,7 +23468,6 @@ function buildBuiltInItems(resolveEnabled) {
       status: bundleEnabled ? "enabled" : "disabled",
       reason: null,
       source: "built-in",
-      granularity: bundle.granularity,
       description: bundle.description,
       ...extensions.length > 0 ? { extensions } : {},
       ...bundleLocked ? { locked: true } : {}
@@ -23243,9 +23478,8 @@ function buildDiscoveredItems(discovered, deps, resolveEnabled) {
   return discovered.map((plugin) => buildDiscoveredItem(plugin, deps, resolveEnabled));
 }
 function buildDiscoveredItem(plugin, deps, resolveEnabled) {
-  const granularity = plugin.granularity ?? "bundle";
   const bundleLocked = isPluginLocked(plugin.id);
-  const extensions = projectExtensionRows(plugin, granularity, resolveEnabled, bundleLocked);
+  const extensions = projectExtensionRows(plugin, resolveEnabled, bundleLocked);
   const optional = optionalDiscoveredFields(plugin, extensions);
   return {
     id: plugin.id,
@@ -23254,7 +23488,6 @@ function buildDiscoveredItem(plugin, deps, resolveEnabled) {
     status: projectStatus(plugin, resolveEnabled),
     reason: plugin.reason ?? null,
     source: classifyPluginSource(plugin.path, deps),
-    granularity,
     ...optional,
     ...bundleLocked ? { locked: true } : {},
     ...plugin.status === "disabled" ? { startsAsDisabled: true } : {}
@@ -23267,7 +23500,7 @@ function optionalDiscoveredFields(plugin, extensions) {
   if (extensions) out.extensions = extensions;
   return out;
 }
-function projectExtensionRows(plugin, _granularity, resolveEnabled, bundleLocked) {
+function projectExtensionRows(plugin, resolveEnabled, bundleLocked) {
   if (!plugin.extensions || plugin.extensions.length === 0) return void 0;
   return plugin.extensions.map((ext) => {
     const description = readInstanceDescription(ext.instance);
@@ -23316,6 +23549,18 @@ async function persistAndProject(c, deps, configKey, enabled) {
   );
   return projectListResponse(c, deps, overrides);
 }
+async function persistManyAndProject(c, deps, keys, enabled) {
+  const overrides = await tryWithSqlite(
+    { databasePath: deps.options.dbPath, autoBackup: false },
+    async (adapter) => {
+      for (const key of keys) {
+        await applyChangeToAdapter(adapter, key, enabled);
+      }
+      return await adapter.pluginConfig.loadOverrideMap();
+    }
+  );
+  return projectListResponse(c, deps, overrides);
+}
 async function applyChangeToAdapter(adapter, configKey, enabled) {
   await adapter.pluginConfig.set(configKey, enabled);
   if (enabled) return;
@@ -23359,13 +23604,6 @@ function validateBulkChange(change, deps) {
         message: tx(SERVER_TEXTS.pluginsUnknown, { id: change.id })
       };
     }
-    if (granularityOf(handle2) !== "bundle") {
-      return {
-        status: 400,
-        code: "bad-query",
-        message: tx(SERVER_TEXTS.pluginsGranularityExtensionExpected, { id: change.id })
-      };
-    }
     if (isPluginLocked(change.id)) {
       return {
         status: 403,
@@ -23406,13 +23644,22 @@ async function persistBulkAndProject(c, deps, changes) {
     { databasePath: deps.options.dbPath, autoBackup: false },
     async (adapter) => {
       for (const change of changes) {
-        await applyChangeToAdapter(adapter, change.id, change.enabled);
+        const writeKeys = expandBulkChangeKeys(change, deps);
+        for (const key of writeKeys) {
+          await applyChangeToAdapter(adapter, key, change.enabled);
+        }
       }
       return await adapter.pluginConfig.loadOverrideMap();
     }
   );
   return projectListResponse(c, deps, overrides);
 }
+function expandBulkChangeKeys(change, deps) {
+  if (change.id.includes("/")) return [change.id];
+  const handle = findHandle(change.id, deps);
+  if (!handle) return [];
+  return bundleExtensionIds(handle).map((extId) => qualifiedExtensionId(change.id, extId)).filter((q) => !isPluginLocked(q));
+}
 async function buildFreshResolver2(deps) {
   return buildFreshResolver({
     databasePath: deps.options.dbPath,
@@ -23430,8 +23677,11 @@ function findHandle(id, deps) {
   if (discovered) return { kind: "discovered", plugin: discovered };
   return null;
 }
-function granularityOf(handle) {
-  return handle.kind === "built-in" ? handle.bundle.granularity : handle.plugin.granularity ?? "bundle";
+function bundleExtensionIds(handle) {
+  if (handle.kind === "built-in") {
+    return handle.bundle.extensions.map((e) => e.id);
+  }
+  return (handle.plugin.extensions ?? []).map((e) => e.id);
 }
 function hasExtension(handle, extensionId) {
   if (handle.kind === "built-in") {
@@ -24365,12 +24615,12 @@ async function loadNode(deps, nodePath) {
   return node;
 }
 function invokeBump2(node, absPath, body) {
-  if (!bumpAction.invoke) {
+  if (!nodeBumpAction.invoke) {
     throw new HTTPException14(500, { message: SERVER_TEXTS.sidecarBumpInvokeMissing });
   }
   const input = {};
   if (body.force === true) input.force = true;
-  return bumpAction.invoke(input, {
+  return nodeBumpAction.invoke(input, {
     node,
     nodeAbsolutePath: absPath,
     invoker: "ui",
@@ -25041,7 +25291,7 @@ function validateNoUi(noUi, uiDist) {
 // server/paths.ts
 import { existsSync as existsSync27, statSync as statSync10 } from "fs";
 import { dirname as dirname18, isAbsolute as isAbsolute11, join as join20, resolve as resolve37 } from "path";
-import { fileURLToPath as fileURLToPath5 } from "url";
+import { fileURLToPath as fileURLToPath6 } from "url";
 var DEFAULT_UI_REL = join20("ui", "dist", "ui", "browser");
 var PACKAGE_UI_REL = "ui";
 var INDEX_HTML2 = "index.html";
@@ -25065,7 +25315,7 @@ function isUiBundleDir(path) {
 function resolvePackageBundledUi() {
   let here;
   try {
-    here = dirname18(fileURLToPath5(import.meta.url));
+    here = dirname18(fileURLToPath6(import.meta.url));
   } catch {
     return null;
   }
@@ -25357,7 +25607,9 @@ var ESC2 = {
   /** 256-color violet (xterm 141). */
   violet: "\x1B[38;5;141m",
   /** 256-color green (xterm 42). */
-  green: "\x1B[38;5;42m"
+  green: "\x1B[38;5;42m",
+  /** 256-color yellow (xterm 214), matches `cli/util/ansi.ts:yellow`. */
+  yellow: "\x1B[38;5;214m"
 };
 var LOGO_LINES = [
   "  ____  _    _ _ _   __  __             ",
@@ -25377,7 +25629,8 @@ function renderBanner(input) {
       host: input.host,
       port: input.port,
       dbPath: input.dbPath,
-      openBrowser: input.openBrowser
+      openBrowser: input.openBrowser,
+      dev: input.dev === true
     });
   }
   return renderFiglet({
@@ -25387,7 +25640,8 @@ function renderBanner(input) {
     pathDisplay: formatCwdPath(input.cwd),
     browserLine,
     colorEnabled: input.colorEnabled,
-    referencePaths: input.referencePaths ?? []
+    referencePaths: input.referencePaths ?? [],
+    dev: input.dev === true
   });
 }
 function resolveColorEnabled(opts) {
@@ -25402,8 +25656,9 @@ function renderFlat(input) {
   const safeHost = sanitizeForTerminal(input.host);
   const safeDb = sanitizeForTerminal(input.dbPath);
   const url = `http://${safeHost}:${input.port}`;
+  const devSuffix = input.dev ? " [dev]" : "";
   const linesOut = [];
-  linesOut.push(`sm serve: listening on ${url} (db=${safeDb})`);
+  linesOut.push(`sm serve${devSuffix}: listening on ${url} (db=${safeDb})`);
   if (input.openBrowser) {
     linesOut.push(`sm serve: opening ${url}/ in your browser. Press Ctrl+C to stop.`);
   } else {
@@ -25430,12 +25685,16 @@ function renderFiglet(input) {
     greenUnderline,
     greenUnderlineClose,
     violetOpen,
-    violetClose
+    violetClose,
+    yellowOpen,
+    yellowClose
   } = resolveAnsi(input.colorEnabled);
   const logoLines = LOGO_LINES.map((line) => `${violetOpen}${line}${violetClose}`);
   const versionText = `v${input.version}`;
-  const versionPad = Math.max(0, LOGO_WIDTH - versionText.length);
-  const versionLine = `${" ".repeat(versionPad)}${dimOpen}${versionText}${dimClose}`;
+  const devText = "[dev]";
+  const versionWidth = input.dev ? devText.length : versionText.length;
+  const versionPad = Math.max(0, LOGO_WIDTH - versionWidth);
+  const versionLine = input.dev ? `${" ".repeat(versionPad)}${yellowOpen}${devText}${yellowClose}` : `${" ".repeat(versionPad)}${dimOpen}${versionText}${dimClose}`;
   const lines = [];
   lines.push(...logoLines);
   lines.push("");
@@ -25467,7 +25726,9 @@ var EMPTY_ANSI = {
   greenUnderline: "",
   greenUnderlineClose: "",
   violetOpen: "",
-  violetClose: ""
+  violetClose: "",
+  yellowOpen: "",
+  yellowClose: ""
 };
 var ENABLED_ANSI = {
   dimOpen: ESC2.dim,
@@ -25475,7 +25736,9 @@ var ENABLED_ANSI = {
   greenUnderline: `${ESC2.green}${ESC2.underline}`,
   greenUnderlineClose: ESC2.reset,
   violetOpen: ESC2.violet,
-  violetClose: ESC2.reset
+  violetClose: ESC2.reset,
+  yellowOpen: ESC2.yellow,
+  yellowClose: ESC2.reset
 };
 function resolveAnsi(colorEnabled) {
   return colorEnabled ? ENABLED_ANSI : EMPTY_ANSI;
@@ -25696,7 +25959,8 @@ var ServeCommand = class extends SmCommand {
         openBrowser: validation.options.open,
         isTTY,
         colorEnabled,
-        referencePaths
+        referencePaths,
+        dev: isDevBuild()
       })
     );
     if (validation.options.open) {
@@ -26830,7 +27094,7 @@ var STUB_COMMANDS = [
 // cli/commands/tutorial.ts
 import { cpSync as cpSync2, existsSync as existsSync29, mkdirSync as mkdirSync6, rmSync as rmSync2, statSync as statSync11 } from "fs";
 import { dirname as dirname19, join as join21, resolve as resolve39 } from "path";
-import { fileURLToPath as fileURLToPath6 } from "url";
+import { fileURLToPath as fileURLToPath7 } from "url";
 import { Command as Command37, Option as Option35 } from "clipanion";
 
 // cli/i18n/tutorial.texts.ts
@@ -27000,7 +27264,7 @@ function resolveSkillSourceDir(variant) {
   const cached = cachedSourceDirs.get(variant);
   if (cached !== void 0) return cached;
   const spec = VARIANT_SPECS[variant];
-  const here = dirname19(fileURLToPath6(import.meta.url));
+  const here = dirname19(fileURLToPath7(import.meta.url));
   const candidates = [
     // dev: src/cli/commands/ → repo-root .claude/skills/<slug>/
     resolve39(here, "../../..", spec.sourceDir),
@@ -27048,6 +27312,7 @@ var VersionCommand = class extends SmCommand {
     const kernelVersion = VERSION;
     const specVersion = await resolveSpecVersion3();
     const dbSchema = await resolveDbSchemaVersion();
+    const dev = isDevBuild();
     if (this.json) {
       const payload = {
         sm: VERSION,
@@ -27055,17 +27320,19 @@ var VersionCommand = class extends SmCommand {
         spec: specVersion,
         dbSchema
       };
+      if (dev) payload["dev"] = true;
       this.printer.data(JSON.stringify(payload) + "\n");
       return ExitCode.Ok;
     }
+    const ansi = this.ansiFor("stdout");
+    const smValue = dev ? `${VERSION} ${ansi.yellow("[dev]")}` : VERSION;
     const lines = [
-      ["sm", VERSION],
+      ["sm", smValue],
       ["kernel", kernelVersion],
       ["spec", specVersion],
       ["runtime", runtime],
       ["db-schema", dbSchema]
     ];
-    const ansi = this.ansiFor("stdout");
     const pad = Math.max(...lines.map(([k]) => k.length));
     for (const [k, v] of lines) {
       this.printer.data(