@skill-map/cli 0.42.0 → 0.44.0

package/dist/cli.js

@@ -1,5 +1,5 @@
 // cli/entry.ts
-import { existsSync as existsSync30 } from "fs";
+import { existsSync as existsSync32 } from "fs";
 import { Builtins, Cli as Cli2 } from "clipanion";
 
 // kernel/adapters/in-memory-progress.ts
@@ -244,11 +244,11 @@ function bucketByKind(kind, instance, bag) {
 // plugins/claude/providers/claude/schemas/skill.schema.json
 var skill_schema_default = {
   $schema: "https://json-schema.org/draft/2020-12/schema",
-  $id: "https://skill-map.dev/providers/claude/v1/frontmatter/skill.schema.json",
+  $id: "https://skill-map.ai/providers/claude/v1/frontmatter/skill.schema.json",
   title: "FrontmatterSkill",
   description: "Frontmatter shape for nodes classified as `skill` by the Claude Provider. Today identical to `command` \u2014 both extend the shared `skill-base.schema.json` per Anthropic's documented merger (https://code.claude.com/docs/en/skills.md \u2014 \"Custom commands have been merged into skills\"). The two are kept SPLIT (not aliased) because skill-map's registry differentiates them in `IProviderKind.ui` (separate label / icon / color) and `defaultRefreshAction`. Splitting also reserves room for future divergence when one kind diverges from the other. No skill-only fields today; `additionalProperties: true` so the file is ready for them.",
   allOf: [
-    { $ref: "https://skill-map.dev/providers/claude/v1/frontmatter/skill-base.schema.json" }
+    { $ref: "https://skill-map.ai/providers/claude/v1/frontmatter/skill-base.schema.json" }
   ],
   type: "object",
   additionalProperties: true,
@@ -258,11 +258,11 @@ var skill_schema_default = {
 // plugins/claude/providers/claude/schemas/skill-base.schema.json
 var skill_base_schema_default = {
   $schema: "https://json-schema.org/draft/2020-12/schema",
-  $id: "https://skill-map.dev/providers/claude/v1/frontmatter/skill-base.schema.json",
+  $id: "https://skill-map.ai/providers/claude/v1/frontmatter/skill-base.schema.json",
   title: "FrontmatterSkillBase",
   description: 'Shared frontmatter base for `skill` and `command` nodes per Anthropic\'s documented merger (https://code.claude.com/docs/en/skills.md \u2014 "Custom commands have been merged into skills"). Both kinds carry the same vendor frontmatter today; skill-map keeps them as distinct `IProviderKind`s in the registry (different UI presentation, different `defaultRefreshAction`) but extends the same base via `allOf` + `$ref` so the field catalog is single-sourced. Field naming is reproduced verbatim from Anthropic \u2014 a deliberate mix of kebab-case (`argument-hint`, `disable-model-invocation`, `user-invocable`, `allowed-tools`), snake_case (`when_to_use`), and camelCase. `additionalProperties: true` so future Anthropic additions flow through unchanged until this schema catches up.',
   allOf: [
-    { $ref: "https://skill-map.dev/spec/v0/frontmatter/base.schema.json" }
+    { $ref: "https://skill-map.ai/spec/v0/frontmatter/base.schema.json" }
   ],
   type: "object",
   additionalProperties: true,
@@ -297,6 +297,13 @@ var skill_base_schema_default = {
       ],
       description: "Tools pre-approved for this skill (no per-use permission prompt). Argument-scoped patterns supported (`Bash(git add *)`)."
     },
+    "disallowed-tools": {
+      oneOf: [
+        { type: "string" },
+        { type: "array", items: { type: "string" } }
+      ],
+      description: "Denylist sibling of `allowed-tools`: tools removed from the available pool while this skill / command is active (the restriction clears on the next user message). Accepts a space- or comma-separated string or a YAML list. Source: https://code.claude.com/docs/en/skills.md."
+    },
     model: {
       type: "string",
       description: "Model alias (`sonnet`, `opus`, `haiku`), full Claude id, or the literal `inherit` to defer to the parent session's model."
@@ -337,11 +344,11 @@ var skill_base_schema_default = {
 // plugins/claude/providers/claude/schemas/agent.schema.json
 var agent_schema_default = {
   $schema: "https://json-schema.org/draft/2020-12/schema",
-  $id: "https://skill-map.dev/providers/claude/v1/frontmatter/agent.schema.json",
+  $id: "https://skill-map.ai/providers/claude/v1/frontmatter/agent.schema.json",
   title: "FrontmatterAgent",
-  description: "Frontmatter shape for nodes classified as `agent` by the Claude Provider. Mirrors Anthropic's documented agent frontmatter verbatim (https://code.claude.com/docs/en/agents.md): `name` and `description` come from the spec base; this schema adds the 14 vendor-specific fields. skill-map AGGREGATES the vendor spec, it does not curate it \u2014 keys are reproduced exactly as Anthropic publishes them (mix of camelCase and snake_case). `additionalProperties: true` so future Anthropic additions flow through unchanged until this schema catches up.",
+  description: "Frontmatter shape for nodes classified as `agent` by the Claude Provider. Mirrors Anthropic's documented agent frontmatter verbatim (https://code.claude.com/docs/en/sub-agents.md): `name` and `description` come from the spec base; this schema adds the 14 vendor-specific fields. skill-map AGGREGATES the vendor spec, it does not curate it \u2014 keys are reproduced exactly as Anthropic publishes them (mix of camelCase and snake_case). `additionalProperties: true` so future Anthropic additions flow through unchanged until this schema catches up.",
   allOf: [
-    { $ref: "https://skill-map.dev/spec/v0/frontmatter/base.schema.json" }
+    { $ref: "https://skill-map.ai/spec/v0/frontmatter/base.schema.json" }
   ],
   type: "object",
   additionalProperties: true,
@@ -363,7 +370,7 @@ var agent_schema_default = {
     permissionMode: {
       type: "string",
       enum: ["default", "acceptEdits", "auto", "dontAsk", "bypassPermissions", "plan"],
-      description: "How the agent handles permission prompts. See https://code.claude.com/docs/en/agents.md."
+      description: "How the agent handles permission prompts. See https://code.claude.com/docs/en/sub-agents.md."
     },
     maxTurns: {
       type: "integer",
@@ -418,11 +425,11 @@ var agent_schema_default = {
 // plugins/claude/providers/claude/schemas/command.schema.json
 var command_schema_default = {
   $schema: "https://json-schema.org/draft/2020-12/schema",
-  $id: "https://skill-map.dev/providers/claude/v1/frontmatter/command.schema.json",
+  $id: "https://skill-map.ai/providers/claude/v1/frontmatter/command.schema.json",
   title: "FrontmatterCommand",
   description: "Frontmatter shape for nodes classified as `command` by the Claude Provider. Today identical to `skill` per Anthropic's documented merger (https://code.claude.com/docs/en/skills.md \u2014 \"Custom commands have been merged into skills\"). Both extend the shared `skill-base.schema.json` via the same `allOf` pattern. The two are kept SPLIT (not aliased) because skill-map's registry differentiates them in `IProviderKind.ui` (separate label / icon / color) and `defaultRefreshAction`. Splitting also reserves room for future divergence. No command-only fields today; `additionalProperties: true` so the file is ready for them.",
   allOf: [
-    { $ref: "https://skill-map.dev/providers/claude/v1/frontmatter/skill-base.schema.json" }
+    { $ref: "https://skill-map.ai/providers/claude/v1/frontmatter/skill-base.schema.json" }
   ],
   type: "object",
   additionalProperties: true,
@@ -498,7 +505,7 @@ var claudeProvider = {
         icon: { kind: "pi", id: "pi-user" }
       },
       // `frontmatter.name` is the documented canonical identifier
-      // (https://code.claude.com/docs/en/agents.md); `filename-basename`
+      // (https://code.claude.com/docs/en/sub-agents.md); `filename-basename`
       // is a graceful fallback for agents authored without an explicit
       // `name:` field, the file at `.claude/agents/<id>.md` resolves
       // `@<id>` even when frontmatter is partial.
@@ -905,75 +912,77 @@ var antigravityProvider = {
   classify() {
     return null;
   },
-  // Seed catalog, PROVISIONAL, derived from the Gemini CLI slash-command
-  // surface. The Google Developers Blog post that announced the Antigravity
-  // CLI rollout on 2026-05-19 states verbatim: "The Antigravity CLI fully
-  // replaces the Gemini CLI ... preserves the most critical Gemini CLI
-  // features: Agent Skills, Hooks, Subagents, and Extensions (now rebranded
-  // as Antigravity plugins) ... shares the same agent harness as Antigravity
-  // 2.0, the new Antigravity desktop application." Since the four feature
-  // pillars carry over 1:1 and the agent harness is shared, the operator's
-  // built-in slash-command vocabulary is overwhelmingly likely to be
-  // Gemini CLI's. We mirror the full 38-verb Gemini CLI catalog (plus its
-  // four documented aliases: `dir`, `?`, `exit`, `bashes`) so a user file
-  // that names a skill / command `help`, `clear`, `mcp`, etc. is flagged
-  // immediately by `core/name-reserved` once the lens activates the catalog.
+  // Built-in slash-command catalog, captured verbatim from `agy /help`
+  // (Antigravity CLI v1.0.3). This REPLACES the earlier provisional list
+  // that mirrored Gemini CLI's verbs: `agy` ships its own surface. It
+  // DROPPED Gemini-only verbs (`vim`, `theme`, `terminal-setup`,
+  // `setup-github`, `bashes`, `shells`, `policies`, `extensions`, `about`,
+  // `auth`, `bug`, `chat`, `compress`, `docs`, `editor`, `ide`, `init`,
+  // `memory`, `restore`, `stats`, `tools`, `upgrade`, `?`, `dir`) and
+  // ADDED agent-first ones (`goal`, `grill-me`, `schedule`, `fast`, `btw`,
+  // `artifact`, `context`, `diff`, `fork`, `tasks`, `add-dir`, `credits`,
+  // `feedback`, `logout`, `open`, `planning`, `rename`, `statusline`,
+  // `title`, `usage`). Both the 35 primary verbs and the 8 documented
+  // aliases (`new`, `settings`, `quit`, `branch`, `switch`, `conversation`,
+  // `undo`, `quota`) are reserved: a user skill named after either is
+  // silently shadowed by the built-in once the catalog activates.
   //
-  // The catalog is INACTIVE today: the analyzer keys on `node.provider`
-  // and this Provider's `classify()` returns `null` for every path, so
-  // no node carries `provider: 'antigravity'`. The seed lives here so
-  // the day Antigravity grows its own on-disk kind (e.g. a vendor-specific
-  // `.antigravity/commands/` directory beyond the open-standard
-  // `.agents/skills/`) the catalog is already in place with no migration.
+  // Declared under the `skill` kind (NOT `command`): Antigravity has no
+  // vendor-specific command directory, its user slash-commands are skills
+  // (`.agents/skills/<name>/SKILL.md`, owned by the universal `agent-skills`
+  // Provider). The catalog is ACTIVE via the LENS SCOPE in
+  // `buildReservedNodePaths` (spec/architecture.md §Provider ·
+  // reservedNames): when `activeProvider === 'antigravity'` the orchestrator
+  // lends this `skill` catalog to `agent-skills` skill nodes, so a user
+  // `.agents/skills/goal/SKILL.md` is flagged because `/goal` is built-in.
   //
-  // **Reconciliation marker**: the day Google's docs at
-  // antigravity.google/docs publishes the authoritative slash-command
-  // reference, replace this comment + array with the official list (and
-  // bump the file's leading docblock to cite the new source URL).
+  // **Reconciliation marker**: re-capture from `agy /help` on each major
+  // Antigravity CLI release and bump the cited version above.
   reservedNames: {
-    command: [
-      "?",
-      "about",
+    skill: [
+      "add-dir",
       "agents",
-      "auth",
-      "bashes",
-      "bug",
-      "chat",
+      "artifact",
+      "branch",
+      "btw",
+      "changelog",
       "clear",
-      "commands",
-      "compress",
+      "config",
+      "context",
+      "conversation",
       "copy",
-      "dir",
-      "directory",
-      "docs",
-      "editor",
+      "credits",
+      "diff",
       "exit",
-      "extensions",
+      "fast",
+      "feedback",
+      "fork",
+      "goal",
+      "grill-me",
       "help",
       "hooks",
-      "ide",
-      "init",
+      "keybindings",
+      "logout",
       "mcp",
-      "memory",
       "model",
+      "new",
+      "open",
       "permissions",
-      "plan",
-      "policies",
-      "privacy",
+      "planning",
       "quit",
-      "restore",
+      "quota",
+      "rename",
       "resume",
       "rewind",
+      "schedule",
       "settings",
-      "setup-github",
-      "shells",
       "skills",
-      "stats",
-      "terminal-setup",
-      "theme",
-      "tools",
-      "upgrade",
-      "vim"
+      "statusline",
+      "switch",
+      "tasks",
+      "title",
+      "undo",
+      "usage"
     ]
   }
 };
@@ -981,11 +990,11 @@ var antigravityProvider = {
 // plugins/openai/providers/openai/schemas/agent.schema.json
 var agent_schema_default2 = {
   $schema: "https://json-schema.org/draft/2020-12/schema",
-  $id: "https://skill-map.dev/providers/openai/v1/frontmatter/agent.schema.json",
+  $id: "https://skill-map.ai/providers/openai/v1/frontmatter/agent.schema.json",
   title: "FrontmatterCodexAgent",
   description: "Frontmatter shape for nodes classified as `agent` by the OpenAI Codex Provider. Codex sub-agents live as TOML files under `.codex/agents/<name>.toml`; the entire file IS the agent definition (no markdown body). The TOML parser feeds the parsed root object into `frontmatter`, so this schema validates the same shape skill-map's other providers carry on per-kind frontmatter. Mirrors Codex's documented sub-agent fields (https://github.com/openai/codex) with `additionalProperties: true` so future additions flow through unchanged.",
   allOf: [
-    { $ref: "https://skill-map.dev/spec/v0/frontmatter/base.schema.json" }
+    { $ref: "https://skill-map.ai/spec/v0/frontmatter/base.schema.json" }
   ],
   type: "object",
   additionalProperties: true,
@@ -1088,15 +1097,34 @@ var openaiProvider = {
 // plugins/agent-skills/providers/agent-skills/schemas/skill.schema.json
 var skill_schema_default2 = {
   $schema: "https://json-schema.org/draft/2020-12/schema",
-  $id: "https://skill-map.dev/providers/agent-skills/v1/frontmatter/skill.schema.json",
+  $id: "https://skill-map.ai/providers/agent-skills/v1/frontmatter/skill.schema.json",
   title: "FrontmatterAgentSkillsSkill",
-  description: "Frontmatter shape for nodes classified as `skill` by the neutral `agent-skills` Provider \u2014 Agent Skills delivered as `SKILL.md` files at the open-standard path `.agents/skills/<name>/SKILL.md`. Jointly adopted by Anthropic, OpenAI (Codex), and Google (Gemini); the path is vendor-neutral so no single Provider should own it. Required fields are `name` and `description` (from spec base); per the open-standard contract no other fields are mandated.",
+  description: "Frontmatter shape for nodes classified as `skill` by the neutral `agent-skills` Provider, Agent Skills delivered as `SKILL.md` files at the open-standard path `.agents/skills/<name>/SKILL.md`. Jointly adopted by Anthropic, OpenAI (Codex), and Google (Gemini); the path is vendor-neutral so no single Provider should own it. Required fields are `name` and `description` (from spec base). The standard's optional frontmatter fields are declared below, mirrored verbatim from https://agentskills.io/specification: `license`, `compatibility`, `metadata`, and the experimental `allowed-tools`. `additionalProperties: true` so any future standard field flows through unchanged until this schema catches up.",
   allOf: [
-    { $ref: "https://skill-map.dev/spec/v0/frontmatter/base.schema.json" }
+    { $ref: "https://skill-map.ai/spec/v0/frontmatter/base.schema.json" }
   ],
   type: "object",
   additionalProperties: true,
-  properties: {}
+  properties: {
+    license: {
+      type: "string",
+      description: "License applied to the skill: a license name (e.g. `Apache-2.0`) or a reference to a bundled license file. Source: https://agentskills.io/specification."
+    },
+    compatibility: {
+      type: "string",
+      maxLength: 500,
+      description: "Environment requirements (intended product, required system packages, network access, etc.). Most skills omit it. Max 500 characters. Source: https://agentskills.io/specification."
+    },
+    metadata: {
+      type: "object",
+      additionalProperties: { type: "string" },
+      description: "Arbitrary string-keyed, string-valued map for client-defined metadata not covered by the standard. Source: https://agentskills.io/specification."
+    },
+    "allowed-tools": {
+      type: "string",
+      description: "Space-separated list of pre-approved tools the skill may run (e.g. `Bash(git:*) Read`). Experimental in the open standard; support varies between agent implementations. Source: https://agentskills.io/specification."
+    }
+  }
 };
 
 // plugins/agent-skills/providers/agent-skills/index.ts
@@ -1150,11 +1178,11 @@ var agentSkillsProvider = {
 // plugins/core/providers/core-markdown/schemas/markdown.schema.json
 var markdown_schema_default = {
   $schema: "https://json-schema.org/draft/2020-12/schema",
-  $id: "https://skill-map.dev/providers/core/v1/frontmatter/markdown.schema.json",
+  $id: "https://skill-map.ai/providers/core/v1/frontmatter/markdown.schema.json",
   title: "FrontmatterMarkdown",
   description: "Frontmatter shape for nodes classified as `markdown` by the built-in `core/markdown` Provider, the universal fallback for any markdown file no vendor-specific Provider claims (Claude, OpenAI Codex, agent-skills, plus the metadata-only Antigravity bundle). The kind is named after the format because the file is a generic fallback; format-named kinds apply only as the generic fallback, a TOML file that IS a Codex agent still classifies as `agent`, not `toml`. Extends the spec's universal `frontmatter/base.schema.json` via $ref-by-$id with no additional fields. Ownership relocated from the Claude Provider in spec 0.18.0, markdown is provider-agnostic and lives under `core` so adding new vendor Providers does not require choosing which one owns the universal fallback.",
   allOf: [
-    { $ref: "https://skill-map.dev/spec/v0/frontmatter/base.schema.json" }
+    { $ref: "https://skill-map.ai/spec/v0/frontmatter/base.schema.json" }
   ],
   type: "object",
   additionalProperties: true
@@ -2935,10 +2963,10 @@ function buildSchemaValidators() {
     hook: "extension-hook"
   };
   const pluginManifestValidator = ajv.compile({
-    $ref: "https://skill-map.dev/spec/v0/plugins-registry.schema.json#/$defs/PluginManifest"
+    $ref: "https://skill-map.ai/spec/v0/plugins-registry.schema.json#/$defs/PluginManifest"
   });
   const contributionValidators = /* @__PURE__ */ new Map();
-  const VIEW_SLOTS_ID = "https://skill-map.dev/spec/v0/view-slots.schema.json";
+  const VIEW_SLOTS_ID = "https://skill-map.ai/spec/v0/view-slots.schema.json";
   function getContributionValidator(slot) {
     if (!KNOWN_SLOT_NAMES.has(slot)) return null;
     const existing = contributionValidators.get(slot);
@@ -3920,11 +3948,11 @@ var UPDATE_CHECK_TEXTS = {
 // package.json
 var package_default = {
   name: "@skill-map/cli",
-  version: "0.42.0",
+  version: "0.44.0",
   description: "skill-map reference implementation \u2014 kernel + CLI + adapters.",
   license: "MIT",
   type: "module",
-  homepage: "https://skill-map.dev",
+  homepage: "https://skill-map.ai",
   repository: {
     type: "git",
     url: "git+https://github.com/crystian/skill-map.git",
@@ -3971,25 +3999,25 @@ var package_default = {
     typecheck: "tsc --noEmit",
     lint: "eslint .",
     "lint:fix": "eslint . --fix",
-    reference: "node scripts/build-reference.js",
-    "reference:check": "node scripts/build-reference.js --check",
     "build-built-ins": "node ../scripts/generate-built-ins.js",
     "built-ins:check": "node ../scripts/generate-built-ins.js --check",
     prebuild: "pnpm build-built-ins",
     validate: "pnpm validate:compile && pnpm validate:test",
-    "validate:compile": "pnpm typecheck && pnpm lint && pnpm build && pnpm reference:check && pnpm built-ins:check",
+    "validate:compile": "pnpm typecheck && pnpm lint && pnpm build && pnpm built-ins:check",
     "validate:test": "pnpm test:ci",
     pretest: "tsup",
     "pretest:coverage": "tsup",
     "pretest:coverage:html": "tsup",
-    test: "tsc --noEmit && node --import tsx --test --test-reporter=spec '__tests__/**/*.spec.ts' 'kernel/**/__tests__/**/*.spec.ts' 'cli/**/__tests__/**/*.spec.ts' 'server/**/__tests__/**/*.spec.ts' 'plugins/**/__tests__/**/*.spec.ts' 'core/**/__tests__/**/*.spec.ts' 'conformance/**/__tests__/**/*.spec.ts'",
-    "test:ci": "node --import tsx --test '__tests__/**/*.spec.ts' 'kernel/**/__tests__/**/*.spec.ts' 'cli/**/__tests__/**/*.spec.ts' 'server/**/__tests__/**/*.spec.ts' 'plugins/**/__tests__/**/*.spec.ts' 'core/**/__tests__/**/*.spec.ts' 'conformance/**/__tests__/**/*.spec.ts'",
-    "test:coverage": "tsc --noEmit && SKILL_MAP_SKIP_BENCHMARK=1 node --experimental-default-config-file --import tsx --test --experimental-test-coverage '__tests__/**/*.spec.ts' 'kernel/**/__tests__/**/*.spec.ts' 'cli/**/__tests__/**/*.spec.ts' 'server/**/__tests__/**/*.spec.ts' 'plugins/**/__tests__/**/*.spec.ts' 'core/**/__tests__/**/*.spec.ts' 'conformance/**/__tests__/**/*.spec.ts'",
-    "test:coverage:html": "tsc --noEmit && SKILL_MAP_SKIP_BENCHMARK=1 c8 node --import tsx --test '__tests__/**/*.spec.ts' 'kernel/**/__tests__/**/*.spec.ts' 'cli/**/__tests__/**/*.spec.ts' 'server/**/__tests__/**/*.spec.ts' 'plugins/**/__tests__/**/*.spec.ts' 'core/**/__tests__/**/*.spec.ts' 'conformance/**/__tests__/**/*.spec.ts'",
+    test: "tsc --noEmit && SKILL_MAP_TELEMETRY=0 node --import tsx --test --test-reporter=./scripts/test-reporter.js --test-reporter-destination=stdout '__tests__/**/*.spec.ts' 'kernel/**/__tests__/**/*.spec.ts' 'cli/**/__tests__/**/*.spec.ts' 'server/**/__tests__/**/*.spec.ts' 'plugins/**/__tests__/**/*.spec.ts' 'core/**/__tests__/**/*.spec.ts' 'conformance/**/__tests__/**/*.spec.ts'",
+    "test:ci": "FORCE_COLOR=1 SKILL_MAP_TELEMETRY=0 node --import tsx --test --test-reporter=./scripts/test-reporter.js --test-reporter-destination=stdout '__tests__/**/*.spec.ts' 'kernel/**/__tests__/**/*.spec.ts' 'cli/**/__tests__/**/*.spec.ts' 'server/**/__tests__/**/*.spec.ts' 'plugins/**/__tests__/**/*.spec.ts' 'core/**/__tests__/**/*.spec.ts' 'conformance/**/__tests__/**/*.spec.ts'",
+    "test:spec": "SKILL_MAP_TELEMETRY=0 node --import tsx --test --test-reporter=spec '__tests__/**/*.spec.ts' 'kernel/**/__tests__/**/*.spec.ts' 'cli/**/__tests__/**/*.spec.ts' 'server/**/__tests__/**/*.spec.ts' 'plugins/**/__tests__/**/*.spec.ts' 'core/**/__tests__/**/*.spec.ts' 'conformance/**/__tests__/**/*.spec.ts'",
+    "test:coverage": "tsc --noEmit && SKILL_MAP_TELEMETRY=0 SKILL_MAP_SKIP_BENCHMARK=1 node --experimental-default-config-file --import tsx --test --experimental-test-coverage '__tests__/**/*.spec.ts' 'kernel/**/__tests__/**/*.spec.ts' 'cli/**/__tests__/**/*.spec.ts' 'server/**/__tests__/**/*.spec.ts' 'plugins/**/__tests__/**/*.spec.ts' 'core/**/__tests__/**/*.spec.ts' 'conformance/**/__tests__/**/*.spec.ts'",
+    "test:coverage:html": "tsc --noEmit && SKILL_MAP_TELEMETRY=0 SKILL_MAP_SKIP_BENCHMARK=1 c8 node --import tsx --test '__tests__/**/*.spec.ts' 'kernel/**/__tests__/**/*.spec.ts' 'cli/**/__tests__/**/*.spec.ts' 'server/**/__tests__/**/*.spec.ts' 'plugins/**/__tests__/**/*.spec.ts' 'core/**/__tests__/**/*.spec.ts' 'conformance/**/__tests__/**/*.spec.ts'",
     clean: "rm -rf dist coverage"
   },
   dependencies: {
     "@hono/node-server": "2.0.1",
+    "@sentry/node": "10.55.0",
     "@skill-map/spec": "workspace:*",
     ajv: "8.18.0",
     "ajv-formats": "3.0.1",
@@ -4000,6 +4028,7 @@ var package_default = {
     "js-tiktoken": "1.0.21",
     "js-yaml": "4.1.1",
     kysely: "0.28.17",
+    "posthog-node": "5.35.6",
     semver: "7.7.4",
     "smol-toml": "1.6.1",
     typanion: "3.14.0",
@@ -4070,6 +4099,7 @@ function ansiFor(opts) {
 }
 
 // cli/util/user-settings-store.ts
+import { randomUUID } from "crypto";
 import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync5 } from "fs";
 import { homedir } from "os";
 import { join as join2 } from "path";
@@ -4178,13 +4208,13 @@ function userSettingsFilePath() {
   return join2(homedir(), SKILL_MAP_DIR, FILENAME);
 }
 function defaultSettings() {
-  return { schemaVersion: SCHEMA_VERSION, updateCheck: {} };
+  return { schemaVersion: SCHEMA_VERSION, updateCheck: {}, telemetry: {} };
 }
 function readUserSettings() {
   const parsed = readParsedFile();
   if (parsed === null) return defaultSettings();
   const validated = validateOrDefault(parsed);
-  return backfillUpdateCheck(validated);
+  return backfillSubObjects(validated);
 }
 function readParsedFile() {
   const path = userSettingsFilePath();
@@ -4206,11 +4236,12 @@ function validateOrDefault(parsed) {
   if (!result.ok) return defaultSettings();
   return result.data;
 }
-function backfillUpdateCheck(settings) {
-  if (settings.updateCheck === void 0) {
-    return { ...settings, updateCheck: {} };
-  }
-  return settings;
+function backfillSubObjects(settings) {
+  return {
+    ...settings,
+    updateCheck: settings.updateCheck ?? {},
+    telemetry: settings.telemetry ?? {}
+  };
 }
 function writeUserSettings(patch) {
   const dir = join2(homedir(), SKILL_MAP_DIR);
@@ -4232,14 +4263,49 @@ function isUpdateCheckEnabled() {
   const settings = readUserSettings();
   return settings.updateCheck?.enabled !== false;
 }
+function isErrorTelemetryEnabled() {
+  const settings = readUserSettings();
+  return settings.telemetry?.errorsEnabled === true;
+}
+function isUsageCliTelemetryEnabled() {
+  const settings = readUserSettings();
+  return settings.telemetry?.usageCliEnabled === true;
+}
+function isUsageUiTelemetryEnabled() {
+  const settings = readUserSettings();
+  return settings.telemetry?.usageUiEnabled === true;
+}
+function readAnonymousId() {
+  const settings = readUserSettings();
+  return settings.telemetry?.anonymousId ?? null;
+}
+function ensureAnonymousId(generate = () => randomUUID()) {
+  const existing = readAnonymousId();
+  if (existing !== null && existing !== "") return existing;
+  const id = generate();
+  writeUserSettings({ telemetry: { anonymousId: id } });
+  return id;
+}
+function hasTelemetryPromptBeenShown() {
+  const settings = readUserSettings();
+  return typeof settings.telemetry?.promptedAt === "number";
+}
+function hasSeenFirstRun() {
+  const settings = readUserSettings();
+  return typeof settings.telemetry?.firstRunAt === "number";
+}
 function mergeSettings(current, patch) {
   const merged = {
     schemaVersion: SCHEMA_VERSION,
-    updateCheck: { ...current.updateCheck ?? {} }
+    updateCheck: { ...current.updateCheck ?? {} },
+    telemetry: { ...current.telemetry ?? {} }
   };
   if (patch.updateCheck) {
     merged.updateCheck = { ...merged.updateCheck, ...patch.updateCheck };
   }
+  if (patch.telemetry) {
+    merged.telemetry = { ...merged.telemetry, ...patch.telemetry };
+  }
   return merged;
 }
 function tryLoadValidators() {
@@ -4352,40 +4418,40 @@ var updateCheckHook = {
 };
 
 // plugins/built-ins.ts
-var claudeProvider2 = { ...claudeProvider, pluginId: "claude", version: "0.42.0" };
-var atDirectiveExtractor2 = { ...atDirectiveExtractor, pluginId: "claude", version: "0.42.0" };
-var slashCommandExtractor2 = { ...slashCommandExtractor, pluginId: "claude", version: "0.42.0" };
-var antigravityProvider2 = { ...antigravityProvider, pluginId: "antigravity", version: "0.42.0" };
-var openaiProvider2 = { ...openaiProvider, pluginId: "openai", version: "0.42.0" };
-var agentSkillsProvider2 = { ...agentSkillsProvider, pluginId: "agent-skills", version: "0.42.0" };
-var coreMarkdownProvider2 = { ...coreMarkdownProvider, pluginId: "core", version: "0.42.0" };
-var annotationsExtractor2 = { ...annotationsExtractor, pluginId: "core", version: "0.42.0" };
-var externalUrlCounterExtractor2 = { ...externalUrlCounterExtractor, pluginId: "core", version: "0.42.0" };
-var markdownLinkExtractor2 = { ...markdownLinkExtractor, pluginId: "core", version: "0.42.0" };
-var mcpToolsExtractor2 = { ...mcpToolsExtractor, pluginId: "core", version: "0.42.0" };
-var toolsCounterExtractor2 = { ...toolsCounterExtractor, pluginId: "core", version: "0.42.0" };
-var annotationFieldUnknownAnalyzer2 = { ...annotationFieldUnknownAnalyzer, pluginId: "core", version: "0.42.0" };
-var annotationOrphanAnalyzer2 = { ...annotationOrphanAnalyzer, pluginId: "core", version: "0.42.0" };
-var annotationStaleAnalyzer2 = { ...annotationStaleAnalyzer, pluginId: "core", version: "0.42.0" };
-var contributionOrphanAnalyzer2 = { ...contributionOrphanAnalyzer, pluginId: "core", version: "0.42.0" };
-var issueCounterAnalyzer2 = { ...issueCounterAnalyzer, pluginId: "core", version: "0.42.0" };
-var jobFileOrphanAnalyzer2 = { ...jobFileOrphanAnalyzer, pluginId: "core", version: "0.42.0" };
-var linkConflictAnalyzer2 = { ...linkConflictAnalyzer, pluginId: "core", version: "0.42.0" };
-var linkCounterAnalyzer2 = { ...linkCounterAnalyzer, pluginId: "core", version: "0.42.0" };
-var linkSelfLoopAnalyzer2 = { ...linkSelfLoopAnalyzer, pluginId: "core", version: "0.42.0" };
-var nameReservedAnalyzer2 = { ...nameReservedAnalyzer, pluginId: "core", version: "0.42.0" };
-var nodeStabilityAnalyzer2 = { ...nodeStabilityAnalyzer, pluginId: "core", version: "0.42.0" };
-var nodeSupersededAnalyzer2 = { ...nodeSupersededAnalyzer, pluginId: "core", version: "0.42.0" };
-var referenceBrokenAnalyzer2 = { ...referenceBrokenAnalyzer, pluginId: "core", version: "0.42.0" };
-var referenceRedundantAnalyzer2 = { ...referenceRedundantAnalyzer, pluginId: "core", version: "0.42.0" };
-var schemaViolationAnalyzer2 = { ...schemaViolationAnalyzer, pluginId: "core", version: "0.42.0" };
-var signalCollisionAnalyzer2 = { ...signalCollisionAnalyzer, pluginId: "core", version: "0.42.0" };
-var triggerCollisionAnalyzer2 = { ...triggerCollisionAnalyzer, pluginId: "core", version: "0.42.0" };
-var asciiFormatter2 = { ...asciiFormatter, pluginId: "core", version: "0.42.0" };
-var jsonFormatter2 = { ...jsonFormatter, pluginId: "core", version: "0.42.0" };
-var nodeBumpAction2 = { ...nodeBumpAction, pluginId: "core", version: "0.42.0" };
-var nodeSupersedeAction2 = { ...nodeSupersedeAction, pluginId: "core", version: "0.42.0" };
-var updateCheckHook2 = { ...updateCheckHook, pluginId: "core", version: "0.42.0" };
+var claudeProvider2 = { ...claudeProvider, pluginId: "claude", version: "0.44.0" };
+var atDirectiveExtractor2 = { ...atDirectiveExtractor, pluginId: "claude", version: "0.44.0" };
+var slashCommandExtractor2 = { ...slashCommandExtractor, pluginId: "claude", version: "0.44.0" };
+var antigravityProvider2 = { ...antigravityProvider, pluginId: "antigravity", version: "0.44.0" };
+var openaiProvider2 = { ...openaiProvider, pluginId: "openai", version: "0.44.0" };
+var agentSkillsProvider2 = { ...agentSkillsProvider, pluginId: "agent-skills", version: "0.44.0" };
+var coreMarkdownProvider2 = { ...coreMarkdownProvider, pluginId: "core", version: "0.44.0" };
+var annotationsExtractor2 = { ...annotationsExtractor, pluginId: "core", version: "0.44.0" };
+var externalUrlCounterExtractor2 = { ...externalUrlCounterExtractor, pluginId: "core", version: "0.44.0" };
+var markdownLinkExtractor2 = { ...markdownLinkExtractor, pluginId: "core", version: "0.44.0" };
+var mcpToolsExtractor2 = { ...mcpToolsExtractor, pluginId: "core", version: "0.44.0" };
+var toolsCounterExtractor2 = { ...toolsCounterExtractor, pluginId: "core", version: "0.44.0" };
+var annotationFieldUnknownAnalyzer2 = { ...annotationFieldUnknownAnalyzer, pluginId: "core", version: "0.44.0" };
+var annotationOrphanAnalyzer2 = { ...annotationOrphanAnalyzer, pluginId: "core", version: "0.44.0" };
+var annotationStaleAnalyzer2 = { ...annotationStaleAnalyzer, pluginId: "core", version: "0.44.0" };
+var contributionOrphanAnalyzer2 = { ...contributionOrphanAnalyzer, pluginId: "core", version: "0.44.0" };
+var issueCounterAnalyzer2 = { ...issueCounterAnalyzer, pluginId: "core", version: "0.44.0" };
+var jobFileOrphanAnalyzer2 = { ...jobFileOrphanAnalyzer, pluginId: "core", version: "0.44.0" };
+var linkConflictAnalyzer2 = { ...linkConflictAnalyzer, pluginId: "core", version: "0.44.0" };
+var linkCounterAnalyzer2 = { ...linkCounterAnalyzer, pluginId: "core", version: "0.44.0" };
+var linkSelfLoopAnalyzer2 = { ...linkSelfLoopAnalyzer, pluginId: "core", version: "0.44.0" };
+var nameReservedAnalyzer2 = { ...nameReservedAnalyzer, pluginId: "core", version: "0.44.0" };
+var nodeStabilityAnalyzer2 = { ...nodeStabilityAnalyzer, pluginId: "core", version: "0.44.0" };
+var nodeSupersededAnalyzer2 = { ...nodeSupersededAnalyzer, pluginId: "core", version: "0.44.0" };
+var referenceBrokenAnalyzer2 = { ...referenceBrokenAnalyzer, pluginId: "core", version: "0.44.0" };
+var referenceRedundantAnalyzer2 = { ...referenceRedundantAnalyzer, pluginId: "core", version: "0.44.0" };
+var schemaViolationAnalyzer2 = { ...schemaViolationAnalyzer, pluginId: "core", version: "0.44.0" };
+var signalCollisionAnalyzer2 = { ...signalCollisionAnalyzer, pluginId: "core", version: "0.44.0" };
+var triggerCollisionAnalyzer2 = { ...triggerCollisionAnalyzer, pluginId: "core", version: "0.44.0" };
+var asciiFormatter2 = { ...asciiFormatter, pluginId: "core", version: "0.44.0" };
+var jsonFormatter2 = { ...jsonFormatter, pluginId: "core", version: "0.44.0" };
+var nodeBumpAction2 = { ...nodeBumpAction, pluginId: "core", version: "0.44.0" };
+var nodeSupersedeAction2 = { ...nodeSupersedeAction, pluginId: "core", version: "0.44.0" };
+var updateCheckHook2 = { ...updateCheckHook, pluginId: "core", version: "0.44.0" };
 var builtInBundles = [
   {
     id: "claude",
@@ -4917,6 +4983,341 @@ function defaultRuntimeContext() {
   return { cwd: process.cwd() };
 }
 
+// cli/telemetry/first-run-prompt.ts
+import { createInterface } from "readline/promises";
+
+// cli/i18n/telemetry.texts.ts
+var TELEMETRY_PROMPT_TEXTS = {
+  // Header + body of the one-time question (glyph `ℹ` added by the renderer).
+  title: "Anonymous error and usage reporting",
+  intro: [
+    "skill-map can send anonymous reports to help fix bugs and decide what to",
+    "build next. No personal information is ever sent: not your files or their",
+    "contents, not your folder or home paths, not your settings."
+  ],
+  question: "Enable anonymous error and usage reporting?",
+  answerYes: "[Y]es",
+  answerNo: "[n]o",
+  answerDetails: "[d]etails",
+  // Disclosure shown on `[d]etails`, then the question is re-asked.
+  detailsSentTitle: "Sent, only if you turn this on",
+  detailsSent: [
+    "crashes: error name, code, message, and a path-stripped stack trace",
+    "usage: the command you ran and its flag names (never their values)",
+    "usage: which built-in extractors ran, and which UI views you opened",
+    "cli version, node major, os, arch, and a random anonymous id"
+  ],
+  detailsNeverTitle: "Never sent",
+  detailsNever: [
+    "your files, their contents, frontmatter, annotations",
+    "absolute paths, hostname, your username, ip address",
+    "your settings values or any flag values"
+  ],
+  detailsHint: "Turn error reports, CLI usage, and UI usage on or off independently in Settings, or force everything off with SKILL_MAP_TELEMETRY=0.",
+  // Confirmation lines (glyph added by the renderer).
+  enabled: "Telemetry on. Thanks. Turn error reports, CLI usage, and UI usage off independently in Settings.",
+  disabled: "Telemetry off. You can turn any of it on later in Settings."
+};
+
+// public-config.ts
+var SENTRY_DSN_NODE = "https://8b73dbb2563da4b77def12ce5ee46e75@o4511475590037504.ingest.de.sentry.io/4511475708002384";
+var POSTHOG_KEY_NODE = "phc_vMX3PcNeDsacWNg2hYEbKVXDijSWcjKFzabCkzU7RNEr";
+var POSTHOG_HOST = "https://eu.i.posthog.com";
+
+// core/telemetry/scrub.ts
+var HOME_PLACEHOLDER = "<HOME>";
+var STRIPPED_ENVELOPE_KEYS = ["server_name", "user"];
+var HOME_PATTERNS = [
+  // Windows: drive + Users + one user segment (back- or forward-slash).
+  /[A-Za-z]:[\\/]Users[\\/][^\\/\s:*?"<>|]+/g,
+  // POSIX user homes: /home/<user> or macOS /Users/<user>.
+  /\/(?:home|Users)\/[^/\s:]+/g,
+  // Root account home.
+  /\/root(?=\/|\b)/g
+];
+function scrubString(value) {
+  let out = value;
+  for (const pattern of HOME_PATTERNS) {
+    out = out.replace(pattern, HOME_PLACEHOLDER);
+  }
+  return out;
+}
+function scrubEvent(event) {
+  const walked = walk(event);
+  if (walked !== null && typeof walked === "object" && !Array.isArray(walked)) {
+    const record = walked;
+    for (const key of STRIPPED_ENVELOPE_KEYS) {
+      if (key in record) delete record[key];
+    }
+  }
+  return walked;
+}
+function walk(value) {
+  if (typeof value === "string") return scrubString(value);
+  if (Array.isArray(value)) return value.map((item) => walk(item));
+  if (value !== null && typeof value === "object") {
+    const out = {};
+    for (const [key, child] of Object.entries(value)) {
+      out[key] = walk(child);
+    }
+    return out;
+  }
+  return value;
+}
+
+// cli/telemetry/telemetry-env.ts
+var TELEMETRY_ENV_VAR = "SKILL_MAP_TELEMETRY_ENV";
+function resolveTelemetryEnv() {
+  const raw = process.env[TELEMETRY_ENV_VAR];
+  if (raw === void 0 || raw.trim() === "" || raw === "prod" || raw === "production") {
+    return "prod";
+  }
+  return "dev";
+}
+
+// cli/telemetry/sentry-init.ts
+var KILL_SWITCH_ENV = "SKILL_MAP_TELEMETRY";
+var sdk = null;
+function isCliDsnConfigured() {
+  return SENTRY_DSN_NODE !== "";
+}
+function isTelemetryForcedOff() {
+  return process.env[KILL_SWITCH_ENV] === "0";
+}
+function isTelemetryActive(dsn) {
+  if (isTelemetryForcedOff()) return false;
+  if (dsn === "") return false;
+  return isErrorTelemetryEnabled();
+}
+async function initSentryCli(version, loadSdk = () => import("@sentry/node")) {
+  if (sdk) return;
+  if (!isTelemetryActive(SENTRY_DSN_NODE)) return;
+  const Sentry = await loadSdk();
+  Sentry.init({
+    dsn: SENTRY_DSN_NODE,
+    release: `@skill-map/cli@${version}`,
+    environment: resolveTelemetryEnv(),
+    // CLI and BFF share one Sentry project; the `surface` tag tells their
+    // events apart in the shared issue stream.
+    initialScope: { tags: { surface: "cli" } },
+    // Errors only: do NOT register the OpenTelemetry ESM loader hooks. We
+    // run no tracing / auto-instrumentation, and the hook calls the
+    // deprecated `module.register()` (a `DEP0205` warning on Node >= 26 that
+    // would print on every telemetry-on invocation). Disabling it keeps
+    // stderr clean and skips the loader's startup cost.
+    registerEsmLoaderHooks: false,
+    defaultIntegrations: false,
+    integrations: [
+      Sentry.onUncaughtExceptionIntegration(),
+      Sentry.onUnhandledRejectionIntegration()
+    ],
+    tracesSampleRate: 0,
+    sendDefaultPii: false,
+    beforeSend: (event) => scrubEvent(event)
+  });
+  sdk = Sentry;
+}
+function setTelemetryVerbTag(verb) {
+  if (!sdk || verb === void 0 || verb === "") return;
+  sdk.setTag("verb", verb);
+}
+async function closeSentryCli(timeoutMs = 2e3) {
+  if (!sdk) return;
+  try {
+    await sdk.close(timeoutMs);
+  } catch {
+  }
+}
+
+// cli/telemetry/usage-collector.ts
+var BUILT_IN_PLUGIN_IDS = /* @__PURE__ */ new Set([
+  "claude",
+  "antigravity",
+  "openai",
+  "agent-skills",
+  "core"
+]);
+var EXTERNAL_PLUGIN_PLACEHOLDER = "external_plugin";
+function qualifyExtensionForUsage(qualifiedId2) {
+  const slash = qualifiedId2.indexOf("/");
+  if (slash <= 0) return EXTERNAL_PLUGIN_PLACEHOLDER;
+  const pluginId = qualifiedId2.slice(0, slash);
+  return BUILT_IN_PLUGIN_IDS.has(pluginId) ? qualifiedId2 : EXTERNAL_PLUGIN_PLACEHOLDER;
+}
+function buildScanExtensionSet(executedExtensionIds) {
+  const out = /* @__PURE__ */ new Set();
+  for (const id of executedExtensionIds) {
+    out.add(qualifyExtensionForUsage(id));
+  }
+  return [...out].sort();
+}
+function extractFlagNames(args2) {
+  const out = /* @__PURE__ */ new Set();
+  for (const arg of args2) {
+    if (!arg.startsWith("-")) continue;
+    const name = arg.replace(/^-+/, "").split("=")[0];
+    if (name !== void 0 && name !== "") out.add(name);
+  }
+  return [...out].sort();
+}
+function cliVerbEventName(verb, knownVerbs) {
+  return `cli.${knownVerbs.has(verb) ? verb : "unknown"}`;
+}
+function buildCliVerbProperties(flagNames, extensions) {
+  const flags = [...new Set(flagNames)].sort();
+  return extensions ? { flags, extensions } : { flags };
+}
+function envUsageProps(cliVersion) {
+  return {
+    cli_version: cliVersion,
+    node_major: Number.parseInt(process.versions.node.split(".")[0] ?? "0", 10),
+    os: process.platform,
+    arch: process.arch,
+    environment: resolveTelemetryEnv()
+  };
+}
+
+// cli/telemetry/posthog-init.ts
+var client = null;
+function isUsageKeyConfigured() {
+  return POSTHOG_KEY_NODE !== "";
+}
+function isUsageCliTelemetryActive(key) {
+  if (isTelemetryForcedOff()) return false;
+  if (key === "") return false;
+  return isUsageCliTelemetryEnabled();
+}
+function scrubUsageEvent(event) {
+  return event === null ? null : scrubEvent(event);
+}
+async function initUsageCli(loadSdk = () => import("posthog-node")) {
+  if (client) return;
+  if (!isUsageCliTelemetryActive(POSTHOG_KEY_NODE)) return;
+  const { PostHog } = await loadSdk();
+  client = new PostHog(POSTHOG_KEY_NODE, {
+    host: POSTHOG_HOST,
+    // Second line of defense behind the project-level IP drop: the client
+    // never attaches an IP or geo, and never autocaptures.
+    disableGeoip: true,
+    before_send: scrubUsageEvent
+  });
+}
+function captureUsage(event, properties) {
+  if (client === null) return;
+  const distinctId = readAnonymousId();
+  if (distinctId === null) return;
+  client.capture({
+    distinctId,
+    event,
+    properties: { ...envUsageProps(VERSION), ...properties }
+  });
+}
+var pendingScanExtensions = null;
+function setScanExtensions(extensions) {
+  pendingScanExtensions = extensions;
+}
+function captureCliInvocation(verb, flagNames, knownVerbs) {
+  const extensions = pendingScanExtensions;
+  pendingScanExtensions = null;
+  captureUsage(cliVerbEventName(verb, knownVerbs), buildCliVerbProperties(flagNames, extensions));
+}
+async function flushUsageCli(timeoutMs = 2e3) {
+  if (client === null) return;
+  try {
+    await client.shutdown(timeoutMs);
+  } catch {
+  }
+}
+
+// cli/telemetry/first-run-prompt.ts
+function interpretConsentAnswer(raw) {
+  const value = raw.trim().toLowerCase();
+  if (value === "n" || value === "no") return "no";
+  if (value === "d" || value === "details") return "details";
+  return "yes";
+}
+function isPromptEligible(opts) {
+  return opts.dsnConfigured && opts.isTTY && !opts.isCI && !opts.forcedOff && !opts.alreadyPrompted;
+}
+function liveGateInputs(stdout) {
+  return {
+    dsnConfigured: isCliDsnConfigured() || isUsageKeyConfigured(),
+    isTTY: stdout.isTTY === true,
+    isCI: Boolean(process.env["CI"]),
+    forcedOff: isTelemetryForcedOff(),
+    alreadyPrompted: hasTelemetryPromptBeenShown()
+  };
+}
+function renderConsent(ansi) {
+  const t = TELEMETRY_PROMPT_TEXTS;
+  const answerLine = `     ${t.question}  ${ansi.bold(t.answerYes)}  ${t.answerNo}  ${ansi.dim(t.answerDetails)} `;
+  return {
+    question: [
+      `  ${ansi.cyan("\u2139")}  ${ansi.bold(t.title)}`,
+      ...t.intro.map((line) => `     ${line}`),
+      "",
+      answerLine
+    ].join("\n"),
+    reprompt: answerLine,
+    details: [
+      "",
+      `     ${t.detailsSentTitle}`,
+      ...t.detailsSent.map((line) => `       ${ansi.dim("\u2192")}  ${line}`),
+      `     ${t.detailsNeverTitle}`,
+      ...t.detailsNever.map((line) => `       ${ansi.red("\u2715")}  ${line}`),
+      "",
+      `     ${ansi.dim(t.detailsHint)}`,
+      ""
+    ].join("\n"),
+    enabled: `  ${ansi.green("\u2713")}  ${t.enabled}
+`,
+    disabled: `  ${ansi.cyan("\u2139")}  ${t.disabled}
+`
+  };
+}
+async function readConsentDecision(rl, stdout, rendered) {
+  let answer = interpretConsentAnswer(await rl.question(rendered.question));
+  while (answer === "details") {
+    stdout.write(rendered.details);
+    answer = interpretConsentAnswer(await rl.question(rendered.reprompt));
+  }
+  return answer === "yes";
+}
+async function runConsentPrompt(stdin, stdout, nowMs) {
+  const rendered = renderConsent(
+    ansiFor({ isTTY: stdout.isTTY === true, noColorFlag: false })
+  );
+  const rl = createInterface({ input: stdin, output: stdout });
+  try {
+    const consented = await readConsentDecision(rl, stdout, rendered);
+    writeUserSettings({
+      telemetry: {
+        errorsEnabled: consented,
+        usageCliEnabled: consented,
+        usageUiEnabled: consented,
+        promptedAt: nowMs
+      }
+    });
+    if (consented) ensureAnonymousId();
+    stdout.write(consented ? rendered.enabled : rendered.disabled);
+  } catch {
+  } finally {
+    rl.close();
+  }
+}
+async function maybeRunFirstRunPrompt({
+  stdin = process.stdin,
+  stdout = process.stdout,
+  nowMs = Date.now()
+} = {}) {
+  if (!isPromptEligible(liveGateInputs(stdout))) return;
+  if (!hasSeenFirstRun()) {
+    writeUserSettings({ telemetry: { firstRunAt: nowMs } });
+    return;
+  }
+  await runConsentPrompt(stdin, stdout, nowMs);
+}
+
 // cli/commands/bump.ts
 import { Command as Command2, Option as Option2 } from "clipanion";
 
@@ -5599,13 +6000,13 @@ var CONSENT_TEXTS = {
 };
 
 // cli/util/confirm.ts
-import { createInterface } from "readline";
+import { createInterface as createInterface2 } from "readline";
 var YES_PATTERN = new RegExp(UTIL_TEXTS.confirmYesPatternSource, "i");
 var NO_PATTERN = new RegExp(UTIL_TEXTS.confirmNoPatternSource, "i");
 async function confirm(question, streams, opts) {
   const defaultAnswer = opts?.defaultAnswer ?? "no";
   const suffix = defaultAnswer === "yes" ? UTIL_TEXTS.confirmPromptSuffixDefaultYes : UTIL_TEXTS.confirmPromptSuffix;
-  const rl = createInterface({ input: streams.stdin, output: streams.stderr });
+  const rl = createInterface2({ input: streams.stdin, output: streams.stderr });
   try {
     const answer = await new Promise(
       (resolveP) => rl.question(`${question}${suffix}`, resolveP)
@@ -7444,8 +7845,7 @@ async function replaceAllScanTags(trx, records, livePaths = /* @__PURE__ */ new
   if (records.length === 0) return;
   const rows = records.map((r) => ({
     nodePath: r.nodePath,
-    tag: r.tag,
-    source: r.source
+    tag: r.tag
   }));
   const BATCH = 300;
   for (let i = 0; i < rows.length; i += BATCH) {
@@ -7453,18 +7853,16 @@ async function replaceAllScanTags(trx, records, livePaths = /* @__PURE__ */ new
   }
 }
 async function loadTagsForNode(db, nodePath) {
-  const rows = await db.selectFrom("scan_node_tags").select(["nodePath", "tag", "source"]).where("nodePath", "=", nodePath).orderBy("source", "asc").orderBy("tag", "asc").execute();
-  return rows.map((r) => ({ nodePath: r.nodePath, tag: r.tag, source: r.source }));
+  const rows = await db.selectFrom("scan_node_tags").select(["nodePath", "tag"]).where("nodePath", "=", nodePath).orderBy("tag", "asc").execute();
+  return rows.map((r) => ({ nodePath: r.nodePath, tag: r.tag }));
 }
 async function loadTagsForPaths(db, nodePaths) {
   if (nodePaths.length === 0) return [];
-  const rows = await db.selectFrom("scan_node_tags").select(["nodePath", "tag", "source"]).where("nodePath", "in", [...nodePaths]).orderBy("source", "asc").orderBy("tag", "asc").execute();
-  return rows.map((r) => ({ nodePath: r.nodePath, tag: r.tag, source: r.source }));
+  const rows = await db.selectFrom("scan_node_tags").select(["nodePath", "tag"]).where("nodePath", "in", [...nodePaths]).orderBy("tag", "asc").execute();
+  return rows.map((r) => ({ nodePath: r.nodePath, tag: r.tag }));
 }
-async function findNodesByTag(db, tag, source) {
-  let q = db.selectFrom("scan_node_tags").select("nodePath").where("tag", "=", tag);
-  if (source !== void 0) q = q.where("source", "=", source);
-  const rows = await q.distinct().orderBy("nodePath", "asc").execute();
+async function findNodesByTag(db, tag) {
+  const rows = await db.selectFrom("scan_node_tags").select("nodePath").where("tag", "=", tag).distinct().orderBy("nodePath", "asc").execute();
   return rows.map((r) => r.nodePath);
 }
 
@@ -7662,19 +8060,18 @@ function pickIntegerVersion(v) {
 function nodesToTagRecords(nodes) {
   const records = [];
   for (const node of nodes) {
-    pushTagRecords(records, node.path, node.frontmatter?.["tags"], "author");
-    pushTagRecords(records, node.path, node.sidecar?.annotations?.["tags"], "user");
+    pushTagRecords(records, node.path, node.sidecar?.annotations?.["tags"]);
   }
   return records;
 }
-function pushTagRecords(out, nodePath, raw, source) {
+function pushTagRecords(out, nodePath, raw) {
   if (!Array.isArray(raw)) return;
   const seen = /* @__PURE__ */ new Set();
   for (const item of raw) {
     if (typeof item !== "string" || item.length === 0) continue;
     if (seen.has(item)) continue;
     seen.add(item);
-    out.push({ nodePath, tag: item, source });
+    out.push({ nodePath, tag: item });
   }
 }
 function linkToRow(link) {
@@ -7882,7 +8279,7 @@ var SqliteStorageAdapter = class {
   /**
    * Access the underlying Kysely instance.
    *
-   * Test-only escape hatch (per AGENTS.md § Kernel boundaries, tests
+   * Test-only escape hatch (per context/kernel.md §Kernel boundaries, tests
    * are the documented exception). CLI commands MUST consume the
    * adapter through the namespaced port surfaces (`port.<namespace>.*`
    * or `port.transaction(...)`); reaching for this getter from a
@@ -7915,7 +8312,7 @@ var SqliteStorageAdapter = class {
     this.tags = {
       listForNode: (nodePath) => loadTagsForNode(this.db, nodePath),
       listForPaths: (paths) => loadTagsForPaths(this.db, paths),
-      findNodes: (tag, source) => findNodesByTag(this.db, tag, source)
+      findNodes: (tag) => findNodesByTag(this.db, tag)
     };
     this.issues = {
       listAll: () => listAllIssues(this.db),
@@ -10221,8 +10618,8 @@ var DEFAULT_READ_CONFIG = Object.freeze({
 });
 function resolveProviderWalk(provider) {
   if (provider.walk) {
-    const walk2 = provider.walk.bind(provider);
-    return walk2;
+    const walk3 = provider.walk.bind(provider);
+    return walk3;
   }
   const read = provider.read ?? DEFAULT_READ_CONFIG;
   return (roots, options) => {
@@ -12618,9 +13015,22 @@ var DbRestoreCommand = class extends SmCommand {
 };
 
 // cli/commands/db/reset.ts
-import { rm as rm2 } from "fs/promises";
 import { DatabaseSync as DatabaseSync5 } from "node:sqlite";
 import { Command as Command8, Option as Option8 } from "clipanion";
+
+// core/sqlite/db-files.ts
+import { existsSync as existsSync19 } from "fs";
+import { rm as rm2 } from "fs/promises";
+var DB_FILE_SUFFIXES = ["", "-wal", "-shm"];
+async function removeDbFiles(dbPath) {
+  if (dbPath === ":memory:") return;
+  for (const suffix of DB_FILE_SUFFIXES) {
+    const p = `${dbPath}${suffix}`;
+    if (existsSync19(p)) await rm2(p);
+  }
+}
+
+// cli/commands/db/reset.ts
 var DbResetCommand = class extends SmCommand {
   static paths = [["db", "reset"]];
   static usage = Command8.Usage({
@@ -12680,10 +13090,7 @@ var DbResetCommand = class extends SmCommand {
           return ExitCode.Error;
         }
       }
-      for (const suffix of ["", "-wal", "-shm"]) {
-        const p = `${path}${suffix}`;
-        if (await pathExists(p)) await rm2(p);
-      }
+      await removeDbFiles(path);
       const ansiHard = this.ansiFor("stdout");
       this.printer.data(
         tx(DB_TEXTS.resetHardDeleted, {
@@ -13838,8 +14245,7 @@ var HelpCommand = class extends Command15 {
 
       Formats:
         human (default): pretty terminal output.
-        md             : canonical markdown. context/cli-reference.md is
-                         regenerated from this and CI fails on drift.
+        md             : canonical markdown for documentation.
         json           : structured surface dump per spec/cli-contract.md.
     `
   });
@@ -14424,7 +14830,7 @@ import { join as join17 } from "path";
 import { Command as Command17, Option as Option16 } from "clipanion";
 
 // kernel/orchestrator/index.ts
-import { existsSync as existsSync21, statSync as statSync6 } from "fs";
+import { existsSync as existsSync22, statSync as statSync6 } from "fs";
 import { isAbsolute as isAbsolute7, resolve as resolve28 } from "path";
 import { Tiktoken as Tiktoken2 } from "js-tiktoken/lite";
 import cl100k_base from "js-tiktoken/ranks/cl100k_base";
@@ -15471,16 +15877,16 @@ function computeDriftStatus(args2) {
 }
 
 // kernel/sidecar/discover-orphans.ts
-import { existsSync as existsSync19, readdirSync as readdirSync7, statSync as statSync5 } from "fs";
+import { existsSync as existsSync20, readdirSync as readdirSync7, statSync as statSync5 } from "fs";
 import { join as join13, relative as relative4, sep as sep4 } from "path";
 function discoverOrphanSidecars(roots, shouldSkip) {
   const out = [];
   for (const root of roots) {
-    walk(root, root, shouldSkip ?? (() => false), out);
+    walk2(root, root, shouldSkip ?? (() => false), out);
   }
   return out;
 }
-function walk(root, current, shouldSkip, out) {
+function walk2(root, current, shouldSkip, out) {
   let entries;
   try {
     entries = readdirSync7(current, { withFileTypes: true, encoding: "utf8" });
@@ -15493,13 +15899,13 @@ function walk(root, current, shouldSkip, out) {
     if (shouldSkip(rel)) continue;
     if (entry.isSymbolicLink()) continue;
     if (entry.isDirectory()) {
-      walk(root, full, shouldSkip, out);
+      walk2(root, full, shouldSkip, out);
       continue;
     }
     if (!entry.isFile()) continue;
     if (!entry.name.endsWith(".sm")) continue;
     const expectedMd = `${full.slice(0, -".sm".length)}.md`;
-    if (existsSync19(expectedMd) && safeIsFile(expectedMd)) continue;
+    if (existsSync20(expectedMd) && safeIsFile(expectedMd)) continue;
     out.push({ sidecarPath: full, relativePath: rel, expectedMdPath: expectedMd });
   }
 }
@@ -15513,7 +15919,7 @@ function safeIsFile(path) {
 
 // kernel/orchestrator/node-build.ts
 import { createHash } from "crypto";
-import { existsSync as existsSync20 } from "fs";
+import { existsSync as existsSync21 } from "fs";
 import { isAbsolute as isAbsolute6, resolve as resolvePath } from "path";
 import "js-tiktoken/lite";
 import yaml4 from "js-yaml";
@@ -15677,11 +16083,11 @@ function resolveSidecarOverlay(relativePath2, nodePathForIssue, roots, liveBodyH
 }
 function resolveAbsoluteMdPath(relativePath2, roots) {
   if (isAbsolute6(relativePath2)) {
-    return existsSync20(relativePath2) ? relativePath2 : null;
+    return existsSync21(relativePath2) ? relativePath2 : null;
   }
   for (const root of roots) {
     const candidate = resolvePath(root, relativePath2);
-    if (existsSync20(candidate)) return candidate;
+    if (existsSync21(candidate)) return candidate;
   }
   return null;
 }
@@ -16117,7 +16523,8 @@ function buildPostWalkTransformCtx(providers, nodes, activeProvider) {
   const reservedNodePaths = buildReservedNodePaths(
     nodes,
     kindRegistry,
-    reservedNamesByProviderKind
+    reservedNamesByProviderKind,
+    activeProvider
   );
   return { kindRegistry, providerResolution, activeProvider, reservedNodePaths };
 }
@@ -16148,19 +16555,23 @@ function indexReservedNames(provider, out) {
     }
   }
 }
-function buildReservedNodePaths(nodes, kindRegistry, reservedNamesByProviderKind) {
+function buildReservedNodePaths(nodes, kindRegistry, reservedNamesByProviderKind, activeProvider) {
   const out = /* @__PURE__ */ new Set();
   for (const node of nodes) {
-    const key = `${node.provider}/${node.kind}`;
-    const reservedSet = reservedNamesByProviderKind.get(key);
-    if (!reservedSet || reservedSet.size === 0) continue;
-    const ids = deriveNodeIdentifiers(node, kindRegistry.get(key));
-    if (ids.some((id) => reservedSet.has(id))) {
+    const selfKey = `${node.provider}/${node.kind}`;
+    const selfReserved = reservedNamesByProviderKind.get(selfKey);
+    const lensReserved = activeProvider && activeProvider !== node.provider ? reservedNamesByProviderKind.get(`${activeProvider}/${node.kind}`) : void 0;
+    if (!hasEntries(selfReserved) && !hasEntries(lensReserved)) continue;
+    const ids = deriveNodeIdentifiers(node, kindRegistry.get(selfKey));
+    if (ids.some((id) => selfReserved?.has(id) === true || lensReserved?.has(id) === true)) {
       out.add(node.path);
     }
   }
   return out;
 }
+function hasEntries(set) {
+  return set !== void 0 && set.size > 0;
+}
 function buildScanSetup(options) {
   const start = Date.now();
   const emitter = options.emitter ?? new InMemoryProgressEmitter();
@@ -16246,7 +16657,7 @@ function validateRoots(roots) {
     throw new Error(ORCHESTRATOR_TEXTS.runScanRootEmptyArray);
   }
   for (const root of roots) {
-    if (!existsSync21(root) || !statSync6(root).isDirectory()) {
+    if (!existsSync22(root) || !statSync6(root).isDirectory()) {
       throw new Error(tx(ORCHESTRATOR_TEXTS.runScanRootMissing, { root }));
     }
   }
@@ -16255,7 +16666,7 @@ function resolveActiveProviderOption(optionValue, roots, providers) {
   if (optionValue !== void 0) return optionValue;
   for (const root of roots) {
     const absRoot = isAbsolute7(root) ? root : resolve28(root);
-    if (!existsSync21(absRoot)) continue;
+    if (!existsSync22(absRoot)) continue;
     const detected = resolveActiveProvider(absRoot, providers).resolved;
     if (detected !== null) return detected;
   }
@@ -16722,7 +17133,7 @@ function safeStat(path) {
 }
 
 // core/runtime/active-provider-bootstrap.ts
-import { createInterface as createInterface2 } from "readline";
+import { createInterface as createInterface3 } from "readline";
 import { isAbsolute as isAbsolute9, join as join16 } from "path";
 async function bootstrapActiveProvider(opts) {
   const fromCwd = resolveActiveProvider(opts.cwd, opts.providers);
@@ -16878,7 +17289,7 @@ async function promptForLens(detected, stdin, stderr, warnGlyph) {
     );
   }
   stderr.write(lines.join("\n") + "\n");
-  const rl = createInterface2({ input: stdin, output: stderr });
+  const rl = createInterface3({ input: stdin, output: stderr });
   try {
     const answer = await new Promise(
       (resolveP) => rl.question(SCAN_RUNNER_TEXTS.activeProviderPromptInput, resolveP)
@@ -16895,6 +17306,99 @@ async function promptForLens(detected, stdin, stderr, warnGlyph) {
   }
 }
 
+// core/sqlite/db-drift-reset.ts
+import { existsSync as existsSync23 } from "fs";
+import { createInterface as createInterface4 } from "readline";
+import { DatabaseSync as DatabaseSync7 } from "node:sqlite";
+
+// core/sqlite/i18n/db-drift.texts.ts
+var DB_DRIFT_TEXTS = {
+  // Interactive confirm (TTY `sm scan`, no `--yes`). The block is
+  // written to stderr, then the question line drives `readline`.
+  driftPrompt: "{{glyph}}  The local cache was built by skill-map {{dbVersion}} and you are on {{currentVersion}}.\n   {{hint}}\n",
+  driftPromptHint: "Pre-1.0 the DB is a derived cache (your .sm sidecars hold the real data); it cannot be carried across a version change and has to be rebuilt.",
+  driftPromptQuestion: "Delete the local cache and rebuild it on this scan? [y/N] ",
+  // Receipt after the rebuild (printed by the scan / refresh path).
+  driftReset: "{{glyph}}  Local cache rebuilt: it was written by skill-map {{dbVersion}}, you are on {{currentVersion}}.\n   {{hint}}\n",
+  driftResetHint: "The DB was deleted and is being regenerated by this scan; .sm sidecars were not touched.",
+  // Abort headline when the operator declines (wrapped by the caller's
+  // `sm scan: {message}` shell, so it carries no glyph / verb prefix).
+  driftAborted: "cache rebuild declined: the {{dbVersion}} cache cannot be reused on {{currentVersion}}. {{hint}}",
+  driftAbortedHint: "Re-run with --yes, or run `sm db reset --hard` then `sm scan`."
+};
+
+// core/sqlite/db-drift-reset.ts
+async function maybeResetOnDrift(dbPath, policy) {
+  const dbVersion = readScannedByVersion(dbPath);
+  if (dbVersion === null) return { kind: "no-drift" };
+  const skew = classifyVersionSkew(dbVersion, policy.currentVersion);
+  if (skew.kind === "ok" || skew.kind === "no-meta") return { kind: "no-drift" };
+  const confirmed = await confirmDriftReset(dbVersion, policy);
+  if (!confirmed) {
+    return { kind: "aborted", dbVersion, currentVersion: policy.currentVersion };
+  }
+  await removeDbFiles(dbPath);
+  renderResetReceipt(dbVersion, policy);
+  return { kind: "reset", dbVersion, currentVersion: policy.currentVersion };
+}
+function readScannedByVersion(dbPath) {
+  if (dbPath === ":memory:" || !existsSync23(dbPath)) return null;
+  let raw = null;
+  try {
+    raw = new DatabaseSync7(dbPath, { readOnly: true });
+    const row = raw.prepare("SELECT scanned_by_version AS v FROM scan_meta LIMIT 1").get();
+    const v = row?.v;
+    return typeof v === "string" && v.length > 0 ? v : null;
+  } catch {
+    return null;
+  } finally {
+    raw?.close();
+  }
+}
+async function confirmDriftReset(dbVersion, policy) {
+  if (!shouldPromptForReset(policy)) return true;
+  return askDriftReset(dbVersion, policy);
+}
+function shouldPromptForReset(policy) {
+  if (policy.assumeYes) return false;
+  if (!policy.stdin || !policy.stderr) return false;
+  return policy.stdin.isTTY === true;
+}
+async function askDriftReset(dbVersion, policy) {
+  const warnGlyph = policy.style?.warnGlyph ?? "\u26A0";
+  const dim = policy.style?.dim ?? ((s) => s);
+  policy.stderr.write(
+    tx(DB_DRIFT_TEXTS.driftPrompt, {
+      glyph: warnGlyph,
+      dbVersion,
+      currentVersion: policy.currentVersion,
+      hint: dim(DB_DRIFT_TEXTS.driftPromptHint)
+    })
+  );
+  const rl = createInterface4({ input: policy.stdin, output: policy.stderr });
+  try {
+    const answer = await new Promise(
+      (resolveP) => rl.question(DB_DRIFT_TEXTS.driftPromptQuestion, resolveP)
+    );
+    return /^y(es)?$/i.test(answer.trim());
+  } finally {
+    rl.close();
+  }
+}
+function renderResetReceipt(dbVersion, policy) {
+  if (!policy.printer) return;
+  const warnGlyph = policy.style?.warnGlyph ?? "\u26A0";
+  const dim = policy.style?.dim ?? ((s) => s);
+  policy.printer.warn(
+    tx(DB_DRIFT_TEXTS.driftReset, {
+      glyph: warnGlyph,
+      dbVersion,
+      currentVersion: policy.currentVersion,
+      hint: dim(DB_DRIFT_TEXTS.driftResetHint)
+    })
+  );
+}
+
 // core/runtime/scan-runner.ts
 async function runScanForCommand(opts) {
   const ctx = opts.ctx ?? defaultRuntimeContext();
@@ -16907,9 +17411,9 @@ async function runScanForCommand(opts) {
   const { cfg, ignoreFilter, strict, effectiveRoots } = scanInputs;
   let referenceablePaths;
   if (cfg.scan.referencePaths.length > 0) {
-    const walk2 = walkReferencePaths(cfg.scan.referencePaths, ctx.cwd);
-    referenceablePaths = walk2.paths;
-    emitReferenceWalkAdvisory(walk2, opts);
+    const walk3 = walkReferencePaths(cfg.scan.referencePaths, ctx.cwd);
+    referenceablePaths = walk3.paths;
+    emitReferenceWalkAdvisory(walk3, opts);
   }
   const loadPrior = makePriorLoader(opts.noBuiltIns, strict);
   const jobsDir = defaultProjectJobsDir(ctx);
@@ -16971,11 +17475,11 @@ async function resolveActiveLens(opts, ctx, effectiveRoots, pluginRuntime, provi
   });
   return { kind: "ok", activeProvider: bootstrap.activeProvider };
 }
-function emitReferenceWalkAdvisory(walk2, opts) {
-  if (walk2.truncated) {
+function emitReferenceWalkAdvisory(walk3, opts) {
+  if (walk3.truncated) {
     opts.printer.warn(SCAN_RUNNER_TEXTS.referenceWalkTruncated);
   }
-  for (const missing of walk2.missingRoots) {
+  for (const missing of walk3.missingRoots) {
     opts.printer.warn(
       tx(SCAN_RUNNER_TEXTS.referenceWalkMissingRoot, { path: missing })
     );
@@ -17092,7 +17596,29 @@ function buildRunScanEmitter(opts) {
     colorEnabled: opts.colorEnabled === true
   });
 }
+async function rebuildOnDrift(opts, dbPath) {
+  const drift = await maybeResetOnDrift(dbPath, {
+    currentVersion: VERSION,
+    assumeYes: opts.yes ?? false,
+    stdin: opts.stdin ?? process.stdin,
+    stderr: opts.stderr,
+    printer: opts.printer,
+    ...opts.style ? { style: opts.style } : {}
+  });
+  if (drift.kind !== "aborted") return null;
+  const dim = opts.style?.dim ?? ((s) => s);
+  return {
+    kind: "scan-error",
+    message: tx(DB_DRIFT_TEXTS.driftAborted, {
+      dbVersion: drift.dbVersion,
+      currentVersion: drift.currentVersion,
+      hint: dim(DB_DRIFT_TEXTS.driftAbortedHint)
+    })
+  };
+}
 async function runPersistPath(opts, dbPath, jobsDir, strict, loadPrior, runScanWith, extensions) {
+  const driftError = await rebuildOnDrift(opts, dbPath);
+  if (driftError) return driftError;
   let outcome;
   try {
     outcome = await withSqlite({ databasePath: dbPath }, async (adapter) => {
@@ -17132,7 +17658,8 @@ async function runPersistPath(opts, dbPath, jobsDir, strict, loadPrior, runScanW
     renameOps: outcome.renameOps,
     persistedTo: dbPath,
     dbPath,
-    strict
+    strict,
+    executedExtensionIds: outcome.extractorRuns.map((run) => run.extractorId)
   };
 }
 async function runEphemeralPath(opts, dbPath, strict, loadPrior, runScanWith) {
@@ -17150,7 +17677,8 @@ async function runEphemeralPath(opts, dbPath, strict, loadPrior, runScanWith) {
       renameOps: scanned.renameOps,
       persistedTo: null,
       dbPath,
-      strict
+      strict,
+      executedExtensionIds: scanned.extractorRuns.map((run) => run.extractorId)
     };
   } catch (err) {
     return { kind: "scan-error", message: formatErrorMessage(err) };
@@ -18182,19 +18710,6 @@ import { Command as Command20, Option as Option19 } from "clipanion";
 var LIST_TEXTS = {
   invalidSortBy: '{{glyph}}  --sort-by: invalid sort field "{{value}}".\n   {{hint}}\n',
   invalidSortByHint: "Allowed: {{allowed}}.",
-  /**
-   * §3.1b two-line block. Closed enum: hint enumerates the two valid
-   * values so the operator does not need to re-read `--help`.
-   */
-  invalidTagSource: '{{glyph}}  --tag-source: expected "author" or "user", got "{{value}}".\n   {{hint}}\n',
-  invalidTagSourceHint: "Allowed: author, user.",
-  /**
-   * §3.1b two-line block. `--tag-source` is a narrowing filter on
-   * `--tag`; the hint repeats the dependency in operator-actionable
-   * form.
-   */
-  tagSourceWithoutTag: "{{glyph}}  --tag-source requires --tag <name>.\n   {{hint}}\n",
-  tagSourceWithoutTagHint: "The source filter narrows tag matches, it does not stand alone. Pass --tag <name> alongside --tag-source.",
   noNodesFound: "No nodes found.\n",
   // --- renderTable column headers ----------------------------------------
   tableHeaderPath: "PATH",
@@ -18231,9 +18746,8 @@ var ListCommand = class extends SmCommand {
       Reads from the persisted scan snapshot (scan_nodes). Filters:
       --kind <k> restricts to one node kind; --issue keeps only nodes
       that touch at least one current issue; --tag <name> keeps only
-      nodes carrying that tag (matches the union of frontmatter.tags
-      and sidecar.annotations.tags by default; --tag-source author|user
-      narrows to one side).
+      nodes carrying that tag in their \`.sm\` sidecar
+      (\`annotations.tags\`).
 
       --sort-by accepts: path, kind, tokens_total, links_out_count,
       links_in_count, external_refs_count. Default: path. --limit N caps
@@ -18246,8 +18760,7 @@ var ListCommand = class extends SmCommand {
       ["List only agents", "$0 list --kind agent"],
       ["Top 5 by total tokens", "$0 list --sort-by tokens_total --limit 5"],
       ["Only nodes with issues, machine-readable", "$0 list --issue --json"],
-      ["Filter by tag (author or user surfaces)", "$0 list --tag urgent"],
-      ["Filter by user-only tag", "$0 list --tag wip --tag-source user"]
+      ["Filter by tag", "$0 list --tag urgent"]
     ]
   });
   kind = Option19.String("--kind", { required: false });
@@ -18255,7 +18768,6 @@ var ListCommand = class extends SmCommand {
   sortBy = Option19.String("--sort-by", { required: false });
   limit = Option19.String("--limit", { required: false });
   tag = Option19.String("--tag", { required: false });
-  tagSource = Option19.String("--tag-source", { required: false });
   async run() {
     const stderrAnsi = this.ansiFor("stderr");
     const flags = this.#parseFlags(stderrAnsi);
@@ -18274,7 +18786,6 @@ var ListCommand = class extends SmCommand {
    * resolved values or a precomputed exit code (already printed
    * directed errors before returning).
    */
-  // eslint-disable-next-line complexity
   #parseFlags(stderrAnsi) {
     let sortColumn = "path";
     let sortDirection = "asc";
@@ -18301,30 +18812,7 @@ var ListCommand = class extends SmCommand {
       if (parsed === null) return { ok: false, exit: ExitCode.Error };
       limitValue = parsed;
     }
-    let tagSourceValue;
-    if (this.tagSource !== void 0) {
-      if (this.tag === void 0) {
-        this.printer.error(
-          tx(LIST_TEXTS.tagSourceWithoutTag, {
-            glyph: stderrAnsi.red("\u2715"),
-            hint: stderrAnsi.dim(LIST_TEXTS.tagSourceWithoutTagHint)
-          })
-        );
-        return { ok: false, exit: ExitCode.Error };
-      }
-      if (this.tagSource !== "author" && this.tagSource !== "user") {
-        this.printer.error(
-          tx(LIST_TEXTS.invalidTagSource, {
-            glyph: stderrAnsi.red("\u2715"),
-            value: this.tagSource,
-            hint: stderrAnsi.dim(LIST_TEXTS.invalidTagSourceHint)
-          })
-        );
-        return { ok: false, exit: ExitCode.Error };
-      }
-      tagSourceValue = this.tagSource;
-    }
-    return { ok: true, sortColumn, sortDirection, limitValue, tagSourceValue };
+    return { ok: true, sortColumn, sortDirection, limitValue };
   }
   /**
    * Issue the DB queries: optional `--tag` allow-list narrowing, the
@@ -18332,7 +18820,7 @@ var ListCommand = class extends SmCommand {
    * out so `run()` reads as a thin orchestrator.
    */
   async #runQuery(adapter, flags) {
-    const tagAllowList = await this.#resolveTagAllowList(adapter, flags);
+    const tagAllowList = await this.#resolveTagAllowList(adapter);
     if (tagAllowList === "no-match") return this.#renderEmpty();
     const filter = this.#buildFindNodesFilter(flags);
     const allMatchingNodes = await adapter.scans.findNodes(filter);
@@ -18348,16 +18836,15 @@ var ListCommand = class extends SmCommand {
     return ExitCode.Ok;
   }
   /**
-   * Resolve `--tag` (and the optional `--tag-source` filter) into a
-   * path allow-list. Returns:
+   * Resolve `--tag` into a path allow-list. Returns:
    *   - `null` when `--tag` was not supplied (no narrowing).
    *   - `'no-match'` when the tag matched zero nodes (caller renders
    *     the empty surface and exits).
    *   - a Set of paths otherwise.
    */
-  async #resolveTagAllowList(adapter, flags) {
+  async #resolveTagAllowList(adapter) {
     if (this.tag === void 0) return null;
-    const matchingPaths = await adapter.tags.findNodes(this.tag, flags.tagSourceValue);
+    const matchingPaths = await adapter.tags.findNodes(this.tag);
     if (matchingPaths.length === 0) return "no-match";
     return new Set(matchingPaths);
   }
@@ -20115,6 +20602,8 @@ var TogglePluginsBase = class extends SmCommand {
     targets = lockError;
     const keys = expandToKeys(targets);
     await this.#persistKeys(keys, enabled);
+    const set = buildScanExtensionSet(keys);
+    captureUsage("plugin.apply", enabled ? { enabled: set, disabled: [] } : { enabled: [], disabled: set });
     this.#renderSuccess(keys, enabled);
     return ExitCode.Ok;
   }
@@ -20447,7 +20936,7 @@ function resolveBareToggle(id, catalogue) {
 }
 
 // cli/commands/plugins/create.ts
-import { existsSync as existsSync22, mkdirSync as mkdirSync5, writeFileSync } from "fs";
+import { existsSync as existsSync24, mkdirSync as mkdirSync5, writeFileSync } from "fs";
 import { join as join18, resolve as resolve33 } from "path";
 import { Command as Command26, Option as Option25 } from "clipanion";
 var PluginsCreateCommand = class extends SmCommand {
@@ -20476,7 +20965,7 @@ var PluginsCreateCommand = class extends SmCommand {
     const ctx = defaultRuntimeContext();
     const baseDir = defaultProjectPluginsDir(ctx);
     const targetDir = this.at ? resolve33(this.at) : join18(baseDir, this.pluginId);
-    if (existsSync22(targetDir) && !this.force) {
+    if (existsSync24(targetDir) && !this.force) {
       this.printer.error(
         tx(PLUGINS_TEXTS.createRefuseOverwrite, {
           glyph: errGlyph,
@@ -21077,6 +21566,29 @@ function stripFrontmatterFence(text) {
 }
 var REFRESH_COMMANDS = [RefreshCommand];
 
+// cli/i18n/intentional-fail.texts.ts
+var INTENTIONAL_FAIL_TEXTS = {
+  triggering: "Triggering an intentional uncaught error to exercise Sentry error reporting...",
+  errorMessage: "skill-map intentional failure (Sentry self-test)"
+};
+
+// cli/commands/intentional-fail.ts
+var IntentionalFailCommand = class extends SmCommand {
+  static paths = [["intentional-fail"]];
+  // No `static usage` on purpose: that is what keeps the verb out of every
+  // help / reference surface Clipanion drives from command definitions.
+  // A self-test crash has no meaningful "done in <...>" line.
+  emitElapsed = false;
+  async run() {
+    this.printer.warn(INTENTIONAL_FAIL_TEXTS.triggering);
+    setTimeout(() => {
+      throw new Error(INTENTIONAL_FAIL_TEXTS.errorMessage);
+    }, 0);
+    await new Promise((resolve40) => setTimeout(resolve40, 5e3));
+    return 1;
+  }
+};
+
 // cli/commands/scan.ts
 import { Command as Command31, Option as Option29 } from "clipanion";
 
@@ -21202,6 +21714,12 @@ var RUNTIME_TEXTS = {
 
 // core/watcher/runtime.ts
 var DEFAULT_RUN_INITIAL_BATCH = true;
+async function rebuildWatcherDbOnDrift(dbPath, events) {
+  const drift = await maybeResetOnDrift(dbPath, { currentVersion: VERSION, assumeYes: true });
+  if (drift.kind === "reset") {
+    events.onDriftReset?.({ dbVersion: drift.dbVersion, currentVersion: drift.currentVersion });
+  }
+}
 function createWatcherRuntime(opts) {
   const events = opts.events ?? {};
   const cwd = opts.runtimeContext.cwd;
@@ -21245,6 +21763,7 @@ function createWatcherRuntime(opts) {
   };
   let handleBatch = null;
   const start = async () => {
+    await rebuildWatcherDbOnDrift(opts.dbPath, events);
     cfg = loadEffectiveConfig();
     ignoreFilter = composeIgnoreFilter(cfg, readIgnoreFileText(cwd));
     applyConfigDerivedState(cfg);
@@ -21301,9 +21820,9 @@ function createWatcherRuntime(opts) {
         overrideMaxNodes: opts.maxNodesOverride ?? null
       };
       if (cfg.scan.referencePaths.length > 0) {
-        const walk2 = walkReferencePaths(cfg.scan.referencePaths, cwd);
-        if (walk2.paths.size > 0) {
-          runOptions.referenceablePaths = walk2.paths;
+        const walk3 = walkReferencePaths(cfg.scan.referencePaths, cwd);
+        if (walk3.paths.size > 0) {
+          runOptions.referenceablePaths = walk3.paths;
           runOptions.cwd = cwd;
         }
       }
@@ -21600,6 +22119,16 @@ async function runWatchLoop(opts) {
         printer.warn(`${message}
 `);
       },
+      onDriftReset: (info) => {
+        context.stderr.write(
+          tx(DB_DRIFT_TEXTS.driftReset, {
+            glyph: stderrAnsi.yellow("\u26A0"),
+            dbVersion: info.dbVersion,
+            currentVersion: info.currentVersion,
+            hint: stderrAnsi.dim(DB_DRIFT_TEXTS.driftResetHint)
+          })
+        );
+      },
       onConfigLoaded: ({ debounceMs }) => {
         if (opts.json) return;
         context.stderr.write(
@@ -21821,7 +22350,7 @@ var ScanCommand = class extends SmCommand {
     description: "Long-running mode: watch the roots and trigger an incremental scan after each debounced batch of filesystem events. Alias of `sm watch`."
   });
   yes = Option29.Boolean("--yes", false, {
-    description: "Non-interactive mode for ambiguous activeProvider auto-detect. With `--yes`, multiple provider markers (.claude/, .codex/, AGENTS.md, .cursor/) under the scan tree exit non-zero instead of prompting the operator. Set the lens manually via `sm config set activeProvider <id>` and re-run."
+    description: "Non-interactive mode. For ambiguous activeProvider auto-detect, multiple provider markers (.claude/, .codex/, AGENTS.md, .cursor/) under the scan tree exit non-zero instead of prompting; set the lens manually via `sm config set activeProvider <id>` and re-run. Also auto-confirms the pre-1.0 schema-drift rebuild (when the DB was written by a different skill-map major.minor it is deleted and regenerated) instead of prompting."
   });
   maxNodes = Option29.String("--max-nodes", {
     required: false,
@@ -21871,7 +22400,11 @@ var ScanCommand = class extends SmCommand {
       style,
       ...parsedMaxNodes.value !== void 0 ? { maxNodes: parsedMaxNodes.value } : {}
     });
-    return outcome.kind === "ok" ? this.renderOutcome(outcome.result, outcome.persistedTo, outcome.dbPath, outcome.strict) : this.renderFailure(outcome);
+    if (outcome.kind === "ok") {
+      setScanExtensions(buildScanExtensionSet(outcome.executedExtensionIds));
+      return this.renderOutcome(outcome.result, outcome.persistedTo, outcome.dbPath, outcome.strict);
+    }
+    return this.renderFailure(outcome);
   }
   /**
    * Parse `--max-nodes <N>`. Returns either the integer value (or
@@ -22355,7 +22888,7 @@ function renderDeltaIssues(issues) {
 
 // cli/commands/serve.ts
 import { spawn as spawn2 } from "child_process";
-import { existsSync as existsSync28 } from "fs";
+import { existsSync as existsSync30 } from "fs";
 import { Command as Command33, Option as Option31 } from "clipanion";
 
 // kernel/util/dev-mode.ts
@@ -22389,7 +22922,7 @@ import { WebSocketServer } from "ws";
 // server/app.ts
 import { Hono } from "hono";
 import { bodyLimit } from "hono/body-limit";
-import { HTTPException as HTTPException15 } from "hono/http-exception";
+import { HTTPException as HTTPException16 } from "hono/http-exception";
 
 // core/config/service.ts
 var ConfigService = class {
@@ -22510,6 +23043,11 @@ var SERVER_TEXTS = {
   // watcher loop continues, a transient FS error must not kill the
   // broadcaster.
   watcherBatchFailed: "skill-map server: watcher batch failed ({{message}}).\n",
+  // Logged once when the pre-1.0 schema-drift check rebuilt the DB on
+  // watcher boot (the on-disk cache was written by a different
+  // major.minor). The scan that follows repopulates it; .sm sidecars
+  // are untouched. See spec/db-schema.md §Schema drift (pre-1.0).
+  watcherDriftReset: "skill-map server: local cache rebuilt (was {{dbVersion}}, now on {{currentVersion}}); .sm sidecars untouched.\n",
   // chokidar surfaced an error. The watcher stays open per IFsWatcher's
   // contract; the BFF also broadcasts a `watcher.error` advisory so the
   // SPA can surface it in the live event log.
@@ -22621,6 +23159,10 @@ var SERVER_TEXTS = {
   preferencesBodyEmpty: "Request body must contain at least one known preference (e.g. `updateCheck.enabled`).",
   preferencesUpdateCheckNotObject: '`updateCheck` must be an object (e.g. `{"updateCheck": {"enabled": false}}`).',
   preferencesUpdateCheckEnabledNotBoolean: "`updateCheck.enabled` must be a boolean.",
+  preferencesTelemetryNotObject: '`telemetry` must be an object (e.g. `{"telemetry": {"errorsEnabled": true}}`).',
+  preferencesTelemetryErrorsEnabledNotBoolean: "`telemetry.errorsEnabled` must be a boolean.",
+  preferencesTelemetryUsageCliEnabledNotBoolean: "`telemetry.usageCliEnabled` must be a boolean.",
+  preferencesTelemetryUsageUiEnabledNotBoolean: "`telemetry.usageUiEnabled` must be a boolean.",
   preferencesPersistFailed: "Could not persist preferences: {{message}}",
   // ---- project-preferences route (routes/project-preferences.ts) ----------
   //
@@ -22780,6 +23322,53 @@ function createSecurityHeaders() {
   };
 }
 
+// server/telemetry/sentry.ts
+import { HTTPException } from "hono/http-exception";
+var sdk2 = null;
+async function initSentryBff(version, loadSdk = () => import("@sentry/node")) {
+  if (sdk2) return;
+  if (!isTelemetryActive(SENTRY_DSN_NODE)) return;
+  const Sentry = await loadSdk();
+  Sentry.init({
+    dsn: SENTRY_DSN_NODE,
+    release: `@skill-map/cli@${version}`,
+    environment: resolveTelemetryEnv(),
+    // Shared project with the CLI; the `surface` tag separates the two.
+    initialScope: { tags: { surface: "bff" } },
+    // Errors only: skip the OpenTelemetry ESM loader hooks (we run no
+    // tracing). They call the deprecated `module.register()` (a Node >= 26
+    // DEP0205 warning) and add startup cost for nothing here.
+    registerEsmLoaderHooks: false,
+    defaultIntegrations: false,
+    integrations: [],
+    tracesSampleRate: 0,
+    sendDefaultPii: false,
+    beforeSend: (event) => scrubEvent(event)
+  });
+  sdk2 = Sentry;
+}
+function shouldCaptureError(err) {
+  if (err instanceof HTTPException) return err.status >= 500;
+  return true;
+}
+function createSentryRequestCapture() {
+  return async function sentryRequestCapture(c, next) {
+    try {
+      await next();
+    } catch (err) {
+      const client2 = sdk2;
+      if (client2 && shouldCaptureError(err)) {
+        client2.withScope((scope) => {
+          scope.setTag("route", c.req.routePath ?? c.req.path);
+          scope.setTag("method", c.req.method);
+          client2.captureException(err);
+        });
+      }
+      throw err;
+    }
+  };
+}
+
 // server/routes/annotations.ts
 var ENVELOPE_KIND = "annotations.registered";
 function registerAnnotationsRoute(app, deps) {
@@ -22796,10 +23385,10 @@ function registerAnnotationsRoute(app, deps) {
 }
 
 // server/routes/contributions.ts
-import { HTTPException as HTTPException2 } from "hono/http-exception";
+import { HTTPException as HTTPException3 } from "hono/http-exception";
 
 // server/util/parse-query.ts
-import { HTTPException } from "hono/http-exception";
+import { HTTPException as HTTPException2 } from "hono/http-exception";
 function parseCsv(value) {
   if (value === void 0) return [];
   return value.split(",").map((s) => s.trim()).filter((s) => s.length > 0);
@@ -22808,7 +23397,7 @@ function parsePagination(query, defaults) {
   const offset = parseNonNegativeInt(query.offset, "offset", 0);
   const limit = parseNonNegativeInt(query.limit, "limit", defaults.limit);
   if (limit > defaults.max) {
-    throw new HTTPException(400, {
+    throw new HTTPException2(400, {
       message: tx(SERVER_TEXTS.paginationLimitTooLarge, {
         value: limit,
         max: defaults.max
@@ -22822,7 +23411,7 @@ function parseBooleanFlag(value) {
 }
 function parseRequiredString(value, name) {
   if (typeof value !== "string" || value.length === 0) {
-    throw new HTTPException(400, {
+    throw new HTTPException2(400, {
       message: tx(SERVER_TEXTS.queryRequiredString, { name })
     });
   }
@@ -22833,7 +23422,7 @@ function parseNonNegativeInt(raw, name, fallback) {
   const trimmed = raw.trim();
   const parsed = Number.parseInt(trimmed, 10);
   if (!Number.isInteger(parsed) || parsed < 0 || String(parsed) !== trimmed) {
-    throw new HTTPException(400, {
+    throw new HTTPException2(400, {
       message: tx(SERVER_TEXTS.paginationInvalidInteger, { name, value: raw })
     });
   }
@@ -22844,7 +23433,7 @@ function parseNonNegativeInt(raw, name, fallback) {
 var QUALIFIED_ID_SEGMENT = /^[A-Za-z0-9._-]+$/;
 function parseQualifiedIdSegment(value, name) {
   if (!QUALIFIED_ID_SEGMENT.test(value)) {
-    throw new HTTPException2(400, {
+    throw new HTTPException3(400, {
       message: tx(SERVER_TEXTS.qualifiedIdMalformed, {
         name,
         value: sanitizeForTerminal(value)
@@ -22874,7 +23463,7 @@ function registerContributionsRoutes(app, deps) {
       (e) => e.pluginId === pluginId && e.extensionId === extensionId && e.contributionId === contributionId
     );
     if (!catalogEntry) {
-      throw new HTTPException2(404, {
+      throw new HTTPException3(404, {
         message: tx(SERVER_TEXTS.contributionUnknown, {
           pluginId: sanitizeForTerminal(pluginId),
           extensionId: sanitizeForTerminal(extensionId),
@@ -22905,7 +23494,7 @@ function registerContributionsRoutes(app, deps) {
 }
 
 // server/routes/config.ts
-import { HTTPException as HTTPException3 } from "hono/http-exception";
+import { HTTPException as HTTPException4 } from "hono/http-exception";
 
 // server/envelope.ts
 var REST_ENVELOPE_SCHEMA_VERSION = "1";
@@ -22944,7 +23533,7 @@ function registerConfigRoute(app, deps) {
     try {
       loaded = deps.configService.get();
     } catch (err) {
-      throw new HTTPException3(500, { message: formatErrorMessage(err) });
+      throw new HTTPException4(500, { message: formatErrorMessage(err) });
     }
     for (const warn of loaded.warnings) {
       log.warn(sanitizeForTerminal(warn));
@@ -22962,7 +23551,7 @@ function registerConfigRoute(app, deps) {
 }
 
 // server/routes/favorites.ts
-import { HTTPException as HTTPException4 } from "hono/http-exception";
+import { HTTPException as HTTPException5 } from "hono/http-exception";
 
 // server/path-codec.ts
 var PathCodecError = class extends Error {
@@ -23002,7 +23591,7 @@ function registerFavoritesRoutes(app, deps) {
       }
     );
     if (!result || !result.found) {
-      throw new HTTPException4(404, {
+      throw new HTTPException5(404, {
         message: tx(SERVER_TEXTS.nodeNotFound, { path: sanitizeForTerminal(nodePath) })
       });
     }
@@ -23022,14 +23611,14 @@ function decodePath(pathB64) {
     return decodeNodePath(pathB64);
   } catch (err) {
     if (err instanceof PathCodecError) {
-      throw new HTTPException4(404, { message: SERVER_TEXTS.pathB64Malformed });
+      throw new HTTPException5(404, { message: SERVER_TEXTS.pathB64Malformed });
     }
     throw err;
   }
 }
 
 // server/routes/graph.ts
-import { HTTPException as HTTPException5 } from "hono/http-exception";
+import { HTTPException as HTTPException6 } from "hono/http-exception";
 var DEFAULT_FORMAT2 = "ascii";
 var FORMAT_ID_PATTERN = /^[a-z0-9-]+$/;
 var FORMAT_ID_MAX = 32;
@@ -23037,7 +23626,7 @@ function registerGraphRoute(app, deps) {
   app.get("/api/graph", async (c) => {
     const format = c.req.query("format") ?? DEFAULT_FORMAT2;
     if (format.length > FORMAT_ID_MAX || !FORMAT_ID_PATTERN.test(format)) {
-      throw new HTTPException5(400, {
+      throw new HTTPException6(400, {
         // Sanitize defensively, the regex above already rejects ANSI
         // and control bytes, but the message interpolates user input
         // and the BFF mirrors error envelopes into the server log.
@@ -23053,7 +23642,7 @@ function registerGraphRoute(app, deps) {
     const formatter = formatters.find((f) => f.formatId === format);
     if (!formatter) {
       const available = formatters.map((f) => f.formatId).sort().join(", ");
-      throw new HTTPException5(400, {
+      throw new HTTPException6(400, {
         message: tx(SERVER_TEXTS.graphUnknownFormat, {
           format,
           available: available || "(none)"
@@ -23090,7 +23679,7 @@ function contentTypeFor(format) {
 }
 
 // server/health.ts
-import { existsSync as existsSync23 } from "fs";
+import { existsSync as existsSync25 } from "fs";
 var FALLBACK_SCHEMA_VERSION = "1";
 function buildHealth(deps) {
   const dev = isDevBuild();
@@ -23099,7 +23688,7 @@ function buildHealth(deps) {
     schemaVersion: FALLBACK_SCHEMA_VERSION,
     specVersion: deps.specVersion,
     implVersion: VERSION,
-    db: existsSync23(deps.dbPath) ? "present" : "missing",
+    db: existsSync25(deps.dbPath) ? "present" : "missing",
     cwd: deps.cwd,
     dbPath: deps.dbPath,
     // Only emit when truthy so a published install keeps the wire
@@ -23226,7 +23815,7 @@ function registerLinksRoute(app, deps) {
 }
 
 // server/routes/nodes.ts
-import { HTTPException as HTTPException6 } from "hono/http-exception";
+import { HTTPException as HTTPException7 } from "hono/http-exception";
 
 // server/node-body.ts
 import { constants as fsConstants2 } from "fs";
@@ -23337,7 +23926,7 @@ function registerNodesRoutes(app, deps) {
       nodePath = decodeNodePath(pathB64);
     } catch (err) {
       if (err instanceof PathCodecError) {
-        throw new HTTPException6(404, { message: SERVER_TEXTS.pathB64Malformed });
+        throw new HTTPException7(404, { message: SERVER_TEXTS.pathB64Malformed });
       }
       throw err;
     }
@@ -23350,7 +23939,7 @@ function registerNodesRoutes(app, deps) {
             bundle: null,
             isFavorite: false,
             contributions: [],
-            tags: { byAuthor: [], byUser: [] }
+            tags: []
           };
         }
         const favSet = await adapter.favorites.listPaths();
@@ -23360,16 +23949,16 @@ function registerNodesRoutes(app, deps) {
           bundle: b,
           isFavorite: favSet.has(b.node.path),
           contributions: contributions2,
-          tags: groupTagsBySource(tagRows)
+          tags: tagRows.map((r) => r.tag)
         };
       }
     );
     const bundle = result?.bundle ?? null;
     const isFavorite = result?.isFavorite ?? false;
     const contributions = result?.contributions ?? [];
-    const tags = result?.tags ?? { byAuthor: [], byUser: [] };
+    const tags = result?.tags ?? [];
     if (!bundle) {
-      throw new HTTPException6(404, {
+      throw new HTTPException7(404, {
         message: tx(SERVER_TEXTS.nodeNotFound, { path: nodePath })
       });
     }
@@ -23421,7 +24010,7 @@ function registerNodesRoutes(app, deps) {
         const contribByPath = contributionsOmitted ? /* @__PURE__ */ new Map() : await groupContributionsByPath(
           await adapter.contributions.listForPaths(pagePaths)
         );
-        const tagByPath = await groupTagsByPath(
+        const tagByPath = groupTagsByPath(
           await adapter.tags.listForPaths(pagePaths)
         );
         return { contributionsByPath: contribByPath, tagsByPath: tagByPath };
@@ -23434,7 +24023,7 @@ function registerNodesRoutes(app, deps) {
       ...n,
       isFavorite: favSet.has(n.path),
       contributions: contributionsByPath.get(n.path) ?? [],
-      tags: tagsByPath.get(n.path) ?? { byAuthor: [], byUser: [] }
+      tags: tagsByPath.get(n.path) ?? []
     }));
     return c.json(
       buildListEnvelope({
@@ -23457,24 +24046,15 @@ function registerNodesRoutes(app, deps) {
 function parseIncludes(raw) {
   return new Set(parseCsv(raw));
 }
-function groupTagsBySource(rows) {
-  const byAuthor = /* @__PURE__ */ new Set();
-  const byUser = /* @__PURE__ */ new Set();
-  for (const r of rows) (r.source === "author" ? byAuthor : byUser).add(r.tag);
-  return {
-    byAuthor: [...byAuthor].sort(),
-    byUser: [...byUser].sort()
-  };
-}
-async function groupTagsByPath(rows) {
+function groupTagsByPath(rows) {
   const buckets = /* @__PURE__ */ new Map();
   for (const r of rows) {
-    const list = buckets.get(r.nodePath);
-    if (list) list.push({ tag: r.tag, source: r.source });
-    else buckets.set(r.nodePath, [{ tag: r.tag, source: r.source }]);
+    const set = buckets.get(r.nodePath);
+    if (set) set.add(r.tag);
+    else buckets.set(r.nodePath, /* @__PURE__ */ new Set([r.tag]));
   }
   const out = /* @__PURE__ */ new Map();
-  for (const [path, entries] of buckets) out.set(path, groupTagsBySource(entries));
+  for (const [path, set] of buckets) out.set(path, [...set].sort());
   return out;
 }
 async function groupContributionsByPath(rows) {
@@ -23488,11 +24068,11 @@ async function groupContributionsByPath(rows) {
 }
 
 // server/routes/plugins.ts
-import { HTTPException as HTTPException8 } from "hono/http-exception";
+import { HTTPException as HTTPException9 } from "hono/http-exception";
 
 // server/util/parse-body.ts
 import { Ajv2020 as Ajv20207 } from "ajv/dist/2020.js";
-import { HTTPException as HTTPException7 } from "hono/http-exception";
+import { HTTPException as HTTPException8 } from "hono/http-exception";
 function makeBodyValidator(schema, messages) {
   const ajv = new Ajv20207({ strict: false, allErrors: false });
   const validate = ajv.compile(schema);
@@ -23501,16 +24081,16 @@ function makeBodyValidator(schema, messages) {
     try {
       raw = await req.json();
     } catch {
-      throw new HTTPException7(400, { message: messages.notJson });
+      throw new HTTPException8(400, { message: messages.notJson });
     }
     if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
-      throw new HTTPException7(400, { message: messages.notObject });
+      throw new HTTPException8(400, { message: messages.notObject });
     }
     if (validate(raw)) {
       return raw;
     }
     const message = resolveErrorMessage(validate.errors, messages);
-    throw new HTTPException7(400, { message });
+    throw new HTTPException8(400, { message });
   };
 }
 function resolveErrorMessage(errors, messages) {
@@ -23611,18 +24191,18 @@ function registerPluginsRoute(app, deps) {
   app.patch("/api/plugins/:id", async (c) => {
     const id = c.req.param("id");
     if (id.includes("/")) {
-      throw new HTTPException8(400, {
+      throw new HTTPException9(400, {
         message: tx(SERVER_TEXTS.pluginsCascadeRouteQualifiedRejected, { id })
       });
     }
     const handle = findHandle(id, deps);
     if (!handle) {
-      throw new HTTPException8(404, {
+      throw new HTTPException9(404, {
         message: tx(SERVER_TEXTS.pluginsUnknown, { id })
       });
     }
     if (isPluginLocked(id)) {
-      throw new HTTPException8(403, {
+      throw new HTTPException9(403, {
         message: tx(SERVER_TEXTS.pluginsLocked, { id })
       });
     }
@@ -23636,18 +24216,18 @@ function registerPluginsRoute(app, deps) {
     const extensionId = c.req.param("extensionId");
     const handle = findHandle(bundleId, deps);
     if (!handle) {
-      throw new HTTPException8(404, {
+      throw new HTTPException9(404, {
         message: tx(SERVER_TEXTS.pluginsUnknown, { id: bundleId })
       });
     }
     if (!hasExtension(handle, extensionId)) {
-      throw new HTTPException8(404, {
+      throw new HTTPException9(404, {
         message: tx(SERVER_TEXTS.pluginsExtensionUnknown, { bundleId, extensionId })
       });
     }
     const qualified = qualifiedExtensionId(bundleId, extensionId);
     if (isPluginLocked(qualified) || isPluginLocked(bundleId)) {
-      throw new HTTPException8(403, {
+      throw new HTTPException9(403, {
         message: tx(SERVER_TEXTS.pluginsExtensionLocked, { bundleId, extensionId })
       });
     }
@@ -23923,7 +24503,7 @@ function hasExtension(handle, extensionId) {
 }
 
 // server/routes/preferences.ts
-import { HTTPException as HTTPException9 } from "hono/http-exception";
+import { HTTPException as HTTPException10 } from "hono/http-exception";
 function registerPreferencesRoute(app, _deps) {
   app.get("/api/preferences", (c) => {
     return c.json(buildEnvelope());
@@ -23936,20 +24516,43 @@ function registerPreferencesRoute(app, _deps) {
 }
 function buildEnvelope() {
   return {
-    updateCheck: { enabled: isUpdateCheckEnabled() }
+    updateCheck: { enabled: isUpdateCheckEnabled() },
+    telemetry: {
+      errorsEnabled: isErrorTelemetryEnabled(),
+      usageCliEnabled: isUsageCliTelemetryEnabled(),
+      usageUiEnabled: isUsageUiTelemetryEnabled(),
+      anonymousId: readAnonymousId(),
+      environment: resolveTelemetryEnv()
+    }
   };
 }
 function applyPatch(body) {
-  if (body.updateCheck && typeof body.updateCheck.enabled === "boolean") {
-    try {
+  try {
+    if (body.updateCheck && typeof body.updateCheck.enabled === "boolean") {
       writeUserSettings({ updateCheck: { enabled: body.updateCheck.enabled } });
-    } catch (err) {
-      throw new HTTPException9(400, {
-        message: tx(SERVER_TEXTS.preferencesPersistFailed, {
-          message: formatErrorMessage(err)
-        })
-      });
     }
+    if (body.telemetry) {
+      applyTelemetryPatch(body.telemetry);
+    }
+  } catch (err) {
+    throw new HTTPException10(400, {
+      message: tx(SERVER_TEXTS.preferencesPersistFailed, {
+        message: formatErrorMessage(err)
+      })
+    });
+  }
+}
+function applyTelemetryPatch(t) {
+  if (typeof t.errorsEnabled === "boolean") {
+    writeUserSettings({ telemetry: { errorsEnabled: t.errorsEnabled } });
+  }
+  if (typeof t.usageCliEnabled === "boolean") {
+    writeUserSettings({ telemetry: { usageCliEnabled: t.usageCliEnabled } });
+    if (t.usageCliEnabled) ensureAnonymousId();
+  }
+  if (typeof t.usageUiEnabled === "boolean") {
+    writeUserSettings({ telemetry: { usageUiEnabled: t.usageUiEnabled } });
+    if (t.usageUiEnabled) ensureAnonymousId();
   }
 }
 var PATCH_BODY_SCHEMA = {
@@ -23963,6 +24566,15 @@ var PATCH_BODY_SCHEMA = {
       properties: {
         enabled: { type: "boolean" }
       }
+    },
+    telemetry: {
+      type: "object",
+      additionalProperties: false,
+      properties: {
+        errorsEnabled: { type: "boolean" },
+        usageCliEnabled: { type: "boolean" },
+        usageUiEnabled: { type: "boolean" }
+      }
     }
   }
 };
@@ -23973,20 +24585,24 @@ var parsePatchBody2 = makeBodyValidator(PATCH_BODY_SCHEMA, {
   mapping: {
     ":minProperties": SERVER_TEXTS.preferencesBodyEmpty,
     "/updateCheck:type:object": SERVER_TEXTS.preferencesUpdateCheckNotObject,
-    "/updateCheck/enabled:type:boolean": SERVER_TEXTS.preferencesUpdateCheckEnabledNotBoolean
+    "/updateCheck/enabled:type:boolean": SERVER_TEXTS.preferencesUpdateCheckEnabledNotBoolean,
+    "/telemetry:type:object": SERVER_TEXTS.preferencesTelemetryNotObject,
+    "/telemetry/errorsEnabled:type:boolean": SERVER_TEXTS.preferencesTelemetryErrorsEnabledNotBoolean,
+    "/telemetry/usageCliEnabled:type:boolean": SERVER_TEXTS.preferencesTelemetryUsageCliEnabledNotBoolean,
+    "/telemetry/usageUiEnabled:type:boolean": SERVER_TEXTS.preferencesTelemetryUsageUiEnabledNotBoolean
   }
 });
 
 // server/routes/project-ignore.ts
-import { HTTPException as HTTPException10 } from "hono/http-exception";
+import { HTTPException as HTTPException11 } from "hono/http-exception";
 
 // server/util/skillmapignore-io.ts
-import { existsSync as existsSync24, readFileSync as readFileSync17, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync26, readFileSync as readFileSync17, writeFileSync as writeFileSync2 } from "fs";
 import { resolve as resolve35 } from "path";
 var IGNORE_FILENAME2 = ".skillmapignore";
 function readPatterns(cwd) {
   const path = resolve35(cwd, IGNORE_FILENAME2);
-  if (!existsSync24(path)) return [];
+  if (!existsSync26(path)) return [];
   let raw;
   try {
     raw = readFileSync17(path, "utf8");
@@ -23997,7 +24613,7 @@ function readPatterns(cwd) {
 }
 function writePatterns(cwd, nextPatterns) {
   const path = resolve35(cwd, IGNORE_FILENAME2);
-  const prior = existsSync24(path) ? safeRead(path) : "";
+  const prior = existsSync26(path) ? safeRead(path) : "";
   const content = buildContent(prior, nextPatterns);
   writeFileSync2(path, content, "utf8");
 }
@@ -24065,12 +24681,12 @@ async function applyPatch2(deps, body) {
   for (const raw of body.patterns) {
     const t = raw.trim();
     if (t.length === 0) {
-      throw new HTTPException10(400, {
+      throw new HTTPException11(400, {
         message: SERVER_TEXTS.projectIgnorePatternEmpty
       });
     }
     if (seen.has(t)) {
-      throw new HTTPException10(400, {
+      throw new HTTPException11(400, {
         message: tx(SERVER_TEXTS.projectIgnorePatternDuplicate, { pattern: t })
       });
     }
@@ -24081,7 +24697,7 @@ async function applyPatch2(deps, body) {
   try {
     writePatterns(cwd, trimmed);
   } catch (err) {
-    throw new HTTPException10(400, {
+    throw new HTTPException11(400, {
       message: tx(SERVER_TEXTS.projectIgnorePersistFailed, {
         message: formatErrorMessage(err)
       })
@@ -24159,7 +24775,7 @@ var parsePatchBody3 = makeBodyValidator(PATCH_BODY_SCHEMA2, {
 
 // server/routes/project-preferences.ts
 import { statSync as statSync9 } from "fs";
-import { HTTPException as HTTPException11 } from "hono/http-exception";
+import { HTTPException as HTTPException12 } from "hono/http-exception";
 function registerProjectPreferencesRoute(app, deps) {
   app.get("/api/project-preferences", (c) => {
     return c.json(buildEnvelope3(deps));
@@ -24187,7 +24803,7 @@ async function applyPatch3(deps, body) {
   const cwd = deps.runtimeContext.cwd;
   const missingPaths = collectMissingPaths(writes, cwd);
   if (missingPaths.length > 0) {
-    throw new HTTPException11(400, {
+    throw new HTTPException12(400, {
       message: tx(SERVER_TEXTS.projectPrefsPathNotFound, {
         paths: missingPaths.join(", ")
       })
@@ -24196,7 +24812,7 @@ async function applyPatch3(deps, body) {
   const exposures = writes.map((w) => projectPathExposure({ key: w.key, value: w.value, cwd })).filter((e) => e.expandsSurface);
   if (exposures.length > 0 && body.confirm !== true) {
     const exposed = exposures.flatMap((e) => e.exposedPaths);
-    throw new HTTPException11(412, {
+    throw new HTTPException12(412, {
       message: tx(SERVER_TEXTS.projectPrefsConfirmRequired, {
         paths: exposed.join(", ")
       })
@@ -24248,7 +24864,7 @@ function runWrite(w, cwd) {
   try {
     writeConfigValue(w.key, w.value, { target: "project-local", cwd });
   } catch (err) {
-    throw new HTTPException11(400, {
+    throw new HTTPException12(400, {
       message: tx(SERVER_TEXTS.projectPrefsPersistFailed, {
         key: w.key,
         message: formatErrorMessage(err)
@@ -24347,8 +24963,8 @@ var parsePatchBody4 = makeBodyValidator(PATCH_BODY_SCHEMA3, {
 });
 
 // server/routes/active-provider.ts
-import { existsSync as existsSync25 } from "fs";
-import { HTTPException as HTTPException12 } from "hono/http-exception";
+import { existsSync as existsSync27 } from "fs";
+import { HTTPException as HTTPException13 } from "hono/http-exception";
 function registerActiveProviderRoute(app, deps) {
   app.get("/api/active-provider", (c) => {
     return c.json(buildEnvelope4(deps));
@@ -24373,14 +24989,14 @@ function applyLensSwitch(deps, newValue) {
   try {
     writeConfigValue("activeProvider", newValue, { target: "project", cwd });
   } catch (err) {
-    throw new HTTPException12(400, {
+    throw new HTTPException13(400, {
       message: tx(SERVER_TEXTS.activeProviderPersistFailed, {
         message: formatErrorMessage(err)
       })
     });
   }
   const dbPath = resolveDbPath({ db: void 0, cwd });
-  if (!existsSync25(dbPath)) return { dropped: null };
+  if (!existsSync27(dbPath)) return { dropped: null };
   const dropResult = dropScanZone(dbPath);
   return {
     dropped: {
@@ -24409,7 +25025,7 @@ var parsePatchBody5 = makeBodyValidator(PATCH_BODY_SCHEMA4, {
 });
 
 // server/routes/scan.ts
-import { HTTPException as HTTPException13 } from "hono/http-exception";
+import { HTTPException as HTTPException14 } from "hono/http-exception";
 
 // server/scan-mutex.ts
 var inFlight = null;
@@ -24501,6 +25117,14 @@ function createWatcherService(opts) {
         onPluginWarning: (message) => {
           log.warn(sanitizeForTerminal(message));
         },
+        onDriftReset: (info) => {
+          log.warn(
+            tx(SERVER_TEXTS.watcherDriftReset, {
+              dbVersion: info.dbVersion,
+              currentVersion: info.currentVersion
+            })
+          );
+        },
         onReady: (info) => {
           opts.broadcaster.broadcast(
             buildWatcherStartedEvent({ roots: info.roots, debounceMs: info.debounceMs })
@@ -24567,7 +25191,7 @@ function registerScanRoute(app, deps) {
 }
 async function runPersistedScan(c, deps) {
   if (deps.options.noBuiltIns || deps.options.noPlugins) {
-    throw new HTTPException13(400, { message: SERVER_TEXTS.scanPostRequiresFullPipeline });
+    throw new HTTPException14(400, { message: SERVER_TEXTS.scanPostRequiresFullPipeline });
   }
   const dbExists = await tryWithSqlite(
     { databasePath: deps.options.dbPath, autoBackup: false },
@@ -24604,7 +25228,7 @@ async function runPersistedScan(c, deps) {
         ...deps.options.maxNodes !== void 0 ? { maxNodes: deps.options.maxNodes } : {}
       });
       if (outcome.kind !== "ok") {
-        throw new HTTPException13(500, {
+        throw new HTTPException14(500, {
           message: outcome.kind === "guard-trip" ? tx(SERVER_TEXTS.scanGuardTrip, { existing: outcome.existing }) : outcome.message
         });
       }
@@ -24612,7 +25236,7 @@ async function runPersistedScan(c, deps) {
     });
   } catch (err) {
     if (err instanceof ScanBusyError) {
-      throw new HTTPException13(409, { message: SERVER_TEXTS.scanPostBusy });
+      throw new HTTPException14(409, { message: SERVER_TEXTS.scanPostBusy });
     }
     throw err;
   }
@@ -24643,13 +25267,8 @@ async function loadPersistedScan(deps) {
         if (list) list.push(r);
         else byPath3.set(r.nodePath, [r]);
       }
-      const tagBuckets = /* @__PURE__ */ new Map();
-      for (const r of tagRows) {
-        const list = tagBuckets.get(r.nodePath);
-        if (list) list.push({ tag: r.tag, source: r.source });
-        else tagBuckets.set(r.nodePath, [{ tag: r.tag, source: r.source }]);
-      }
-      return { loaded, favSet, contribByPath: byPath3, tagBuckets };
+      const tagsByPath = groupTagsByPath2(tagRows);
+      return { loaded, favSet, contribByPath: byPath3, tagsByPath };
     }
   );
   if (opened === null) {
@@ -24661,22 +25280,24 @@ async function loadPersistedScan(deps) {
       ...n,
       isFavorite: opened.favSet.has(n.path),
       contributions: opened.contribByPath.get(n.path) ?? [],
-      tags: groupTagsBySource2(opened.tagBuckets.get(n.path) ?? [])
+      tags: opened.tagsByPath.get(n.path) ?? []
     }))
   };
 }
-function groupTagsBySource2(rows) {
-  const byAuthor = /* @__PURE__ */ new Set();
-  const byUser = /* @__PURE__ */ new Set();
-  for (const r of rows) (r.source === "author" ? byAuthor : byUser).add(r.tag);
-  return {
-    byAuthor: [...byAuthor].sort(),
-    byUser: [...byUser].sort()
-  };
+function groupTagsByPath2(rows) {
+  const buckets = /* @__PURE__ */ new Map();
+  for (const r of rows) {
+    const set = buckets.get(r.nodePath);
+    if (set) set.add(r.tag);
+    else buckets.set(r.nodePath, /* @__PURE__ */ new Set([r.tag]));
+  }
+  const out = /* @__PURE__ */ new Map();
+  for (const [path, set] of buckets) out.set(path, [...set].sort());
+  return out;
 }
 async function runFreshScan(deps) {
   if (deps.options.noBuiltIns || deps.options.noPlugins) {
-    throw new HTTPException13(400, { message: SERVER_TEXTS.freshScanRequiresPipeline });
+    throw new HTTPException14(400, { message: SERVER_TEXTS.freshScanRequiresPipeline });
   }
   const resolveEnabledOverride = await buildBffResolverOverride(deps);
   const outcome = await runScanForCommand({
@@ -24711,7 +25332,7 @@ async function runFreshScan(deps) {
     ...deps.options.maxNodes !== void 0 ? { maxNodes: deps.options.maxNodes } : {}
   });
   if (outcome.kind !== "ok") {
-    throw new HTTPException13(500, {
+    throw new HTTPException14(500, {
       message: outcome.kind === "guard-trip" ? tx(SERVER_TEXTS.freshScanGuardTrip, { existing: outcome.existing }) : outcome.message
     });
   }
@@ -24751,7 +25372,7 @@ function emptyScanResult() {
 }
 
 // server/routes/sidecar.ts
-import { HTTPException as HTTPException14 } from "hono/http-exception";
+import { HTTPException as HTTPException15 } from "hono/http-exception";
 import { resolve as resolve36 } from "path";
 var STATUS_FRESH = "fresh";
 var ENVELOPE_KIND2 = "sidecar.bumped";
@@ -24788,11 +25409,11 @@ function registerSidecarRoutes(app, deps) {
       assertContained(deps.runtimeContext.cwd, node.path);
       absPath = resolve36(deps.runtimeContext.cwd, node.path);
     } catch (err) {
-      throw new HTTPException14(400, { message: formatErrorMessage(err) });
+      throw new HTTPException15(400, { message: formatErrorMessage(err) });
     }
     const result = invokeBump2(node, absPath, body);
     if (result.report.ok === false && result.report.reason === "fresh") {
-      throw new HTTPException14(409, { message: SERVER_TEXTS.sidecarFreshRefusal });
+      throw new HTTPException15(409, { message: SERVER_TEXTS.sidecarFreshRefusal });
     }
     if (result.report.ok === true && result.report.noop === true) {
       const envelope2 = {
@@ -24819,7 +25440,7 @@ function registerSidecarRoutes(app, deps) {
       }
     } catch (err) {
       if (err instanceof EConsentRequiredError) throw err;
-      throw new HTTPException14(500, { message: formatErrorMessage(err) });
+      throw new HTTPException15(500, { message: formatErrorMessage(err) });
     }
     if (body.confirm === true) {
       deps.configService.reload();
@@ -24856,7 +25477,7 @@ async function loadNode(deps, nodePath) {
   );
   const node = persisted?.nodes.find((n) => n.path === nodePath);
   if (!node) {
-    throw new HTTPException14(404, {
+    throw new HTTPException15(404, {
       message: tx(SERVER_TEXTS.nodeNotFound, { path: sanitizeForTerminal(nodePath) })
     });
   }
@@ -24864,7 +25485,7 @@ async function loadNode(deps, nodePath) {
 }
 function invokeBump2(node, absPath, body) {
   if (!nodeBumpAction.invoke) {
-    throw new HTTPException14(500, { message: SERVER_TEXTS.sidecarBumpInvokeMissing });
+    throw new HTTPException15(500, { message: SERVER_TEXTS.sidecarBumpInvokeMissing });
   }
   const input = {};
   if (body.force === true) input.force = true;
@@ -24910,7 +25531,7 @@ function registerUpdateStatusRoute(app, deps) {
 }
 
 // server/static.ts
-import { existsSync as existsSync26 } from "fs";
+import { existsSync as existsSync28 } from "fs";
 import { readFile as readFile6 } from "fs/promises";
 import { extname, join as join19 } from "path";
 import { serveStatic } from "@hono/node-server/serve-static";
@@ -24965,7 +25586,7 @@ function createSpaFallback(opts) {
     if (c.req.method !== "GET" && c.req.method !== "HEAD") return c.notFound();
     if (opts.uiDist === null) return htmlResponse(c, placeholder);
     const indexPath = join19(opts.uiDist, INDEX_HTML);
-    if (!existsSync26(indexPath)) return htmlResponse(c, placeholder);
+    if (!existsSync28(indexPath)) return htmlResponse(c, placeholder);
     return fileResponse(c, indexPath);
   };
 }
@@ -25051,13 +25672,13 @@ function attachBroadcasterRoute(app, broadcaster) {
 
 // server/app.ts
 var BODY_LIMIT_BYTES = 1024 * 1024;
-var DbMissingError = class extends HTTPException15 {
+var DbMissingError = class extends HTTPException16 {
   constructor(message) {
     super(500, { message });
     this.name = "DbMissingError";
   }
 };
-var BulkValidationError = class extends HTTPException15 {
+var BulkValidationError = class extends HTTPException16 {
   id;
   code;
   constructor(init) {
@@ -25067,7 +25688,7 @@ var BulkValidationError = class extends HTTPException15 {
     this.code = init.code;
   }
 };
-var LoopbackGateError = class extends HTTPException15 {
+var LoopbackGateError = class extends HTTPException16 {
   code;
   constructor(init) {
     super(403, { message: init.message });
@@ -25080,6 +25701,7 @@ function createApp(deps) {
   const configService = new ConfigService({
     cwd: deps.runtimeContext.cwd
   });
+  app.use("*", createSentryRequestCapture());
   app.use("*", createLoopbackGate({ port: deps.options.port }));
   app.use("*", createSecurityHeaders());
   app.use(
@@ -25087,7 +25709,7 @@ function createApp(deps) {
     bodyLimit({
       maxSize: BODY_LIMIT_BYTES,
       onError: () => {
-        throw new HTTPException15(413, { message: tx(SERVER_TEXTS.bodyTooLarge, { maxBytes: String(BODY_LIMIT_BYTES) }) });
+        throw new HTTPException16(413, { message: tx(SERVER_TEXTS.bodyTooLarge, { maxBytes: String(BODY_LIMIT_BYTES) }) });
       }
     })
   );
@@ -25133,7 +25755,7 @@ function createApp(deps) {
   registerActiveProviderRoute(app, routeDeps);
   registerProjectIgnoreRoute(app, routeDeps);
   app.all("/api/*", (c) => {
-    throw new HTTPException15(404, {
+    throw new HTTPException16(404, {
       message: tx(SERVER_TEXTS.unknownApiEndpoint, { path: sanitizeForTerminal(c.req.path) })
     });
   });
@@ -25141,7 +25763,7 @@ function createApp(deps) {
   app.use("*", createStaticHandler({ uiDist: deps.options.uiDist, noUi: deps.options.noUi }));
   app.get("*", createSpaFallback({ uiDist: deps.options.uiDist, noUi: deps.options.noUi }));
   app.notFound((c) => {
-    throw new HTTPException15(404, {
+    throw new HTTPException16(404, {
       message: tx(SERVER_TEXTS.unknownPath, { path: sanitizeForTerminal(c.req.path) })
     });
   });
@@ -25196,7 +25818,7 @@ function formatError2(err, c) {
     };
     return c.json(envelope, 403);
   }
-  if (err instanceof HTTPException15) {
+  if (err instanceof HTTPException16) {
     const status = err.status;
     const envelope = {
       ok: false,
@@ -25295,7 +25917,7 @@ var WsBroadcaster = class {
    * stop the rest from receiving the event. A failing socket is closed
    * + unregistered so the next broadcast doesn't waste cycles on it.
    *
-   * Backpressure check (per AGENTS.md §Watcher integration): if a
+   * Backpressure check (per context/kernel.md §Kernel boundaries): if a
    * client's `bufferedAmount` exceeds `MAX_BUFFERED_BYTES`, it's evicted
    * with close code 1009. The check runs BEFORE `send` so the threshold
    * acts as an admission gate, not a post-mortem.
@@ -25315,8 +25937,8 @@ var WsBroadcaster = class {
       return;
     }
     const snapshot = Array.from(this.#clients);
-    for (const client of snapshot) {
-      this.#deliver(client, payload);
+    for (const client2 of snapshot) {
+      this.#deliver(client2, payload);
     }
   }
   /**
@@ -25330,9 +25952,9 @@ var WsBroadcaster = class {
     this.#shutDown = true;
     const snapshot = Array.from(this.#clients);
     this.#clients.clear();
-    for (const client of snapshot) {
+    for (const client2 of snapshot) {
       try {
-        client.close(CLOSE_CODE_GOING_AWAY, "server shutdown");
+        client2.close(CLOSE_CODE_GOING_AWAY, "server shutdown");
       } catch {
       }
     }
@@ -25341,31 +25963,31 @@ var WsBroadcaster = class {
    * Per-client delivery: backpressure check, then `send()`. Eviction +
    * unregistration on either failure mode.
    */
-  #deliver(client, payload) {
-    if (client.readyState !== READY_STATE_OPEN) {
-      this.#clients.delete(client);
+  #deliver(client2, payload) {
+    if (client2.readyState !== READY_STATE_OPEN) {
+      this.#clients.delete(client2);
       return;
     }
-    if (client.bufferedAmount > MAX_BUFFERED_BYTES) {
-      this.#clients.delete(client);
+    if (client2.bufferedAmount > MAX_BUFFERED_BYTES) {
+      this.#clients.delete(client2);
       try {
-        client.close(CLOSE_CODE_MESSAGE_TOO_BIG, "backpressure exceeded");
+        client2.close(CLOSE_CODE_MESSAGE_TOO_BIG, "backpressure exceeded");
       } catch {
       }
       log.warn(
         tx(SERVER_TEXTS.wsBackpressureEvicted, {
-          buffered: String(client.bufferedAmount),
+          buffered: String(client2.bufferedAmount),
           threshold: String(MAX_BUFFERED_BYTES)
         })
       );
       return;
     }
     try {
-      client.send(payload);
+      client2.send(payload);
     } catch (err) {
-      this.#clients.delete(client);
+      this.#clients.delete(client2);
       try {
-        client.close();
+        client2.close();
       } catch {
       }
       const message = formatErrorMessage(err);
@@ -25574,7 +26196,7 @@ function validateNoUi(noUi, uiDist) {
 }
 
 // server/paths.ts
-import { existsSync as existsSync27, statSync as statSync10 } from "fs";
+import { existsSync as existsSync29, statSync as statSync10 } from "fs";
 import { dirname as dirname18, isAbsolute as isAbsolute11, join as join20, resolve as resolve37 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
 var DEFAULT_UI_REL = join20("ui", "dist", "ui", "browser");
@@ -25589,10 +26211,10 @@ function resolveExplicitUiDist(ctx, raw) {
   return isAbsolute11(raw) ? raw : resolve37(ctx.cwd, raw);
 }
 function isUiBundleDir(path) {
-  if (!existsSync27(path)) return false;
+  if (!existsSync29(path)) return false;
   try {
     if (!statSync10(path).isDirectory()) return false;
-    return existsSync27(join20(path, INDEX_HTML2));
+    return existsSync29(join20(path, INDEX_HTML2));
   } catch {
     return false;
   }
@@ -26126,7 +26748,7 @@ var ServeCommand = class extends SmCommand {
   emitElapsed = false;
   // CLI orchestrator with multi-flag handling, each `if (this.flag)`
   // branch is one cyclomatic point. Splitting per branch scatters the
-  // validation away from the flag it gates. Per AGENTS.md §Linting
+  // validation away from the flag it gates. Per context/lint.md
   // category 1 ("CLI orchestrators with multi-flag handling").
   // eslint-disable-next-line complexity
   async run() {
@@ -26147,7 +26769,7 @@ var ServeCommand = class extends SmCommand {
       return ExitCode.Error;
     }
     const dbPath = resolveDbPath({ db: this.db, ...runtimeCtx });
-    if (this.db !== void 0 && !existsSync28(dbPath)) {
+    if (this.db !== void 0 && !existsSync30(dbPath)) {
       this.printer.info(
         tx(SERVE_TEXTS.dbNotFound, {
           glyph: errGlyph,
@@ -26229,6 +26851,7 @@ var ServeCommand = class extends SmCommand {
       this.printer.info(formatValidationError(validation.error, stderrAnsi));
       return ExitCode.Error;
     }
+    await initSentryBff(VERSION);
     let handle;
     try {
       handle = await createServer(validation.options);
@@ -27412,7 +28035,7 @@ var STUB_COMMANDS = [
 ];
 
 // cli/commands/tutorial.ts
-import { cpSync as cpSync2, existsSync as existsSync29, mkdirSync as mkdirSync6, rmSync as rmSync2, statSync as statSync11 } from "fs";
+import { cpSync as cpSync2, existsSync as existsSync31, mkdirSync as mkdirSync6, rmSync as rmSync2, statSync as statSync11 } from "fs";
 import { dirname as dirname19, join as join21, resolve as resolve39 } from "path";
 import { fileURLToPath as fileURLToPath7 } from "url";
 import { Command as Command37, Option as Option35 } from "clipanion";
@@ -27511,7 +28134,7 @@ var TutorialCommand = class extends SmCommand {
     const spec = VARIANT_SPECS[variant];
     const targetDir = join21(ctx.cwd, ".claude", "skills", spec.slug);
     const targetDisplay = `.claude/skills/${spec.slug}/`;
-    if (existsSync29(targetDir) && !this.force) {
+    if (existsSync31(targetDir) && !this.force) {
       this.printer.error(
         tx(TUTORIAL_TEXTS.alreadyExists, {
           glyph: errGlyph,
@@ -27594,7 +28217,7 @@ function resolveSkillSourceDir(variant) {
     resolve39(here, "../cli/tutorial", spec.slug)
   ];
   for (const candidate of candidates) {
-    if (existsSync29(candidate) && statSync11(candidate).isDirectory()) {
+    if (existsSync31(candidate) && statSync11(candidate).isDirectory()) {
       cachedSourceDirs.set(variant, candidate);
       return candidate;
     }
@@ -27698,6 +28321,7 @@ cli.register(RootHelpCommand);
 cli.register(HelpCommand);
 cli.register(InitCommand);
 cli.register(TutorialCommand);
+cli.register(IntentionalFailCommand);
 cli.register(ScanCommand);
 cli.register(ScanCompareCommand);
 cli.register(ServeCommand);
@@ -27731,6 +28355,13 @@ var logLevel = resolveLogLevel({
 configureLogger(new Logger({ level: logLevel, stream: process.stderr }));
 var bareArgs = resolveBareInvocation(args);
 var routedArgs = routeHelpArgs(bareArgs ?? args, cli);
+var telemetryVerb = routedArgs[0];
+await maybeRunFirstRunPrompt();
+if (telemetryVerb !== "serve") {
+  await initSentryCli(VERSION);
+  setTelemetryVerbTag(telemetryVerb);
+  await initUsageCli();
+}
 var lifecycleDispatcher = makeHookDispatcher(
   builtIns().hooks ?? [],
   new InMemoryProgressEmitter()
@@ -27767,10 +28398,18 @@ var exitCode = await cli.run(routedArgs, {
   stdout: process.stdout,
   stderr: process.stderr
 });
+if (telemetryVerb !== void 0 && telemetryVerb !== "") {
+  const knownVerbs = new Set(
+    registeredVerbPaths(cli).map((path) => path[0]).filter((token) => token !== void 0)
+  );
+  captureCliInvocation(telemetryVerb, extractFlagNames(routedArgs.slice(1)), knownVerbs);
+}
 await lifecycleDispatcher.dispatch(
   "shutdown",
   makeEvent("shutdown", { exitCode })
 );
+await closeSentryCli();
+await flushUsageCli();
 process.exit(exitCode);
 function resolveBareInvocation(rawArgs) {
   if (rawArgs.length === 0) return resolveBareDefault();
@@ -27779,7 +28418,7 @@ function resolveBareInvocation(rawArgs) {
   if (first !== void 0 && first.startsWith("-") && !passthrough.has(first)) {
     const isSingleDashLong = !first.startsWith("--") && first.length > 2;
     if (isSingleDashLong) return null;
-    if (existsSync30(defaultProjectDbPath(defaultRuntimeContext()))) {
+    if (existsSync32(defaultProjectDbPath(defaultRuntimeContext()))) {
       return ["serve", ...rawArgs];
     }
     return resolveBareDefault();
@@ -27788,7 +28427,7 @@ function resolveBareInvocation(rawArgs) {
 }
 function resolveBareDefault() {
   const ctx = defaultRuntimeContext();
-  if (existsSync30(defaultProjectDbPath(ctx))) {
+  if (existsSync32(defaultProjectDbPath(ctx))) {
     return ["serve"];
   }
   const stderr = process.stderr;