@skill-map/cli 0.52.0 → 0.53.0

package/dist/cli/tutorial/sm-tutorial/references/fixtures.md

@@ -0,0 +1,251 @@
+# Fixture templates
+
+Fixtures the orchestrator lays for the auto-fixtured parts. Two sets
+today: the **master fixture** (Part 6, "Extend skill-map",
+`backstage-init`) right below, and the **portfolio fixture** (Part 1,
+"The project from zero", `portfolio-init`) at the end of this file.
+Read the set for the part being entered.
+
+## Master fixture (Part 6): layout (per provider)
+
+Per §Provider detection in `SKILL.md`, the `<provider_dir>`
+placeholder resolves to `.claude/` or `.agents/skills/` depending
+on the detected runtime (Google's Antigravity CLI, which replaced
+Gemini CLI on 2026-05-19, adopted the same open standard as
+`agent-skills`, so both share the `.agents/skills/` layout). Drop
+any file whose kind is not in the provider's supported set: on
+`agent-skills` / Antigravity only the skill + note are valid;
+on `claude` (default) all three apply.
+
+Canonical layout (substitute `<provider_dir>` per detection):
+
+```
+<cwd>/
+├── <provider_dir>/
+│   ├── agents/                    (claude only)
+│   │   └── master-agent.md
+│   └── skills/                    (both providers)
+│       └── master-skill/
+│           └── SKILL.md
+├── notes/
+│   └── ideas.md
+└── findings.md
+```
+
+On `agent-skills` the `agents/` subtree is omitted (the provider
+does not claim that kind); the skill lives at
+`.agents/skills/master-skill/SKILL.md`.
+
+Translate the natural-language prose (descriptions, body text,
+list items) to the tester's language. Keep paths, frontmatter
+keys, identifiers, and link targets in English.
+
+## File: `.claude/agents/master-agent.md` (kind: agent)
+
+```markdown
+---
+name: master-agent
+description: |
+  Example agent used by the advanced tutorial. Has a couple of
+  tools so the `core/tools-counter` extractor emits a count.
+tools: [Read, Bash, Edit]
+model: sonnet
+metadata:
+  version: "1.0.0"
+---
+
+# master-agent
+
+Walks the master-skill outputs and reports findings. Used as the
+target node when we exercise extractors, analyzers, and the
+plugin-authoring flow.
+```
+
+## File: `.claude/skills/master-skill/SKILL.md` (kind: skill)
+
+```markdown
+---
+name: master-skill
+description: |
+  Example skill paired with the master-agent for the advanced
+  tutorial. Links to the agent so extractors and analyzers have
+  something to chew on.
+inputs:
+  - name: target
+    type: path
+    description: File to process.
+    required: true
+outputs:
+  - name: report
+    type: string
+    description: Markdown summary.
+metadata:
+  version: "1.0.0"
+---
+
+# master-skill
+
+Hands heavy work over to the
+[master-agent](../../agents/master-agent.md) and emits a Markdown
+report.
+
+## Steps
+1. Read the `target`.
+2. Validate the frontmatter.
+3. Delegate to the agent.
+```
+
+## File: `notes/ideas.md` (kind: markdown)
+
+```markdown
+---
+name: Ideas backlog
+description: |
+  Free-form notes for the advanced tutorial. Demonstrates the
+  catch-all markdown kind alongside the agent and skill.
+tags: [notes, master]
+metadata:
+  version: "1.0.0"
+---
+
+# Ideas
+
+- [ ] Compare extractor outputs side by side.
+- [ ] Sketch a tiny plugin that surfaces a counter on the agent.
+```
+
+## File: `findings.md`
+
+```markdown
+# Findings
+
+If you spot anything weird during the tutorial, log it here.
+
+Per finding:
+- **Chapter**: <id>
+- **Command**: `sm ...`
+- **Expected**: ...
+- **Got**: ...
+- **Notes**: ...
+```
+
+## Portfolio fixture (Part 1, `portfolio-init`)
+
+Laid backstage before the tester's `sm init` in Part 1. The Express
+skeleton (`server.js`, `package.json`, `public/index.html`) is plain
+scaffolding, not `.md`, so the scan ignores it; it makes the project
+real and runnable (Part 5 starts it). The one boot node is the
+handbook `AGENTS.md`. On `agent-skills` / Antigravity (no `agent`
+kind) the harness still works: the agent member is created as a skill
+in a later chapter.
+
+Layout:
+
+```
+<cwd>/
+├── <provider_dir>/            (harness, grown by the chapters)
+├── docs/                      (created in the real-kinds chapter)
+├── public/
+│   └── index.html
+├── AGENTS.md                  (the boot node)
+├── server.js
+└── package.json
+```
+
+### File: `AGENTS.md` (kind: markdown, the boot node)
+
+```markdown
+---
+name: portfolio-handbook
+description: |
+  Operating manual for this portfolio site: how its pages get
+  written, checked, and published by the .claude/ harness.
+tags: [docs, portfolio]
+---
+
+# Portfolio handbook
+
+A small static portfolio site, served by Express (`server.js`). The
+`.claude/` harness maintains it: an agent writes the pages, a skill
+checks the links, a command publishes. The conventions live in
+`docs/STYLE.md`; the deploy steps in `docs/DEPLOY.md`.
+```
+
+### File: `server.js` (not scanned; runnable scaffolding)
+
+```js
+// Minimal static server for the portfolio. No framework, one dep.
+const express = require('express');
+const path = require('node:path');
+
+const app = express();
+app.use(express.static(path.join(__dirname, 'public')));
+
+const port = process.env.PORT || 3000;
+app.listen(port, () => console.log(`Portfolio live at http://localhost:${port}`));
+```
+
+### File: `package.json` (not scanned)
+
+```json
+{
+  "name": "my-portfolio",
+  "private": true,
+  "scripts": { "start": "node server.js" },
+  "dependencies": { "express": "4.21.2" }
+}
+```
+
+### File: `public/index.html` (not scanned; placeholder until Part 5)
+
+```html
+<!doctype html>
+<meta charset="utf-8">
+<title>My portfolio</title>
+<h1>My portfolio</h1>
+<p>Pages land here once the content-editor generates them.</p>
+```
+
+### `.skillmapignore` additions
+
+Append to the portfolio `.skillmapignore` (on top of the tutorial
+internals from `SKILL.md`): `node_modules/` (the Express install) and
+`public/` (generated HTML, not part of the harness graph).
+
+## Seed snapshots (for `preflight: seed`, jumping into a campaign part)
+
+When the orchestrator enters a campaign part out of order (its
+predecessors are not `done`), it fast-forwards the project by laying
+the snapshot below, then `sm init` (if `.skill-map/` is missing) +
+`sm scan`. These are **checklists, not content**: each row names a file
+and the chapter that holds its canonical content. Lay each file by
+copying the content from the named chapter (substitute `<provider_dir>`
+and skip provider-unsupported kinds per `_core.md`); an `EDIT` row is
+applied on top of the file an earlier row laid. Keep these lists in
+sync only when a harness FILE is added or removed, the file CONTENT
+lives in the chapters, so editing a chapter needs no change here.
+
+### Seed snapshot: `harness-built` (start of Part 2)
+
+The portfolio skeleton plus the harness members Part 1 created, before
+any cross-links:
+
+1. `AGENTS.md`, `server.js`, `package.json`, `public/index.html`, and
+   the portfolio `.skillmapignore` additions  <-  the `## Portfolio
+   fixture` section above.
+2. `CLAUDE.md` (`@AGENTS.md`)  <-  part-project-kickoff.md, chapter `manual`.
+3. `<provider_dir>/agents/content-editor.md`  <-  part-project-kickoff.md, chapter `first-agent`.
+4. `docs/STYLE.md` and `docs/DEPLOY.md`  <-  part-project-kickoff.md, chapter `real-kinds`.
+
+### Seed snapshot: `harness-connected` (start of Parts 3, 4, 5)
+
+Everything in `harness-built`, PLUS the Part 2 wiring:
+
+5. `<provider_dir>/skills/check-links/SKILL.md`  <-  part-connect-harness.md, chapter `check-links`.
+6. `<provider_dir>/commands/publish.md`  <-  part-connect-harness.md, chapter `publish`.
+7. EDIT `AGENTS.md`: append the two hub bullets (mention `@content-editor`, invoke `/publish`)  <-  part-connect-harness.md, chapter `links`.
+8. EDIT `<provider_dir>/agents/content-editor.md`: add the `[style guide](../../docs/STYLE.md)` line  <-  part-connect-harness.md, chapter `links`.
+
+After laying a snapshot the map matches the state a tester would have at
+the END of the part just before the one being entered.
+

package/dist/cli/tutorial/{sm-master/references/tour-authoring.md → sm-tutorial/references/part-authoring.md}

@@ -1,9 +1,8 @@
-# Tour: plugin authoring (step library, `authoring-*` ids)
+# Part 6 (c): Extend skill-map - build plugins (step library, `authoring-*` ids)
 
-Step bodies used by the menu's option 3 (`build-and-configure`).
-The SKILL.md orchestrator walks `master-state.yml.tours.build-and-configure.steps`
-and dispatches each `authoring-*` id here; `settings-*` ids it
-dispatches to `tour-settings.md`.
+Step bodies for the plugin-authoring chapters of Part 6.
+The SKILL.md orchestrator dispatches each `authoring-*` chapter id
+here; `settings-*` ids it dispatches to `part-settings.md`.
 
 The tester writes their first plugin. We use `sm plugins create` to
 scaffold an extractor that counts configurable keywords (TODO,
@@ -16,11 +15,11 @@ Verify that `.skill-map/` exists in the cwd (pre-flight step 4 of
 the `SKILL.md` orchestrator ran `sm init --no-scan` and appended
 the master-tutorial's internal entries to `.skillmapignore`, so
 this is the expected state regardless of whether the tester ran
-`plugins-tour` first). If `.skill-map/` is missing, the fixture
+the plugins chapters first). If `.skill-map/` is missing, the fixture
 is corrupted: surface the mismatch ("the project bootstrap is
-gone, re-invoke `sm-master` from an empty dir") and stop.
+gone, re-invoke the tutorial from an empty dir") and stop.
 
-## Step `authoring-1-scaffold` — `sm plugins create demo-highlight` (~2 min)
+## Step `authoring-1-scaffold` - `sm plugins create demo-highlight` (~2 min)
 
 **Context**: We're building `demo-highlight`: a tiny extractor
 that scans each node's body for the keywords `TODO` and `FIXME`
@@ -51,7 +50,7 @@ or `Demo-Highlight` are rejected.
 
 Mark `authoring-1-scaffold: done`.
 
-## Step `authoring-2-anatomy` — tour the scaffold (~3 min)
+## Step `authoring-2-anatomy` - tour the scaffold (~3 min)
 
 Ask the tester to open the three files and walk through each one
 with you. They DO NOT edit anything yet.
@@ -132,7 +131,7 @@ and `spec/view-slots.md`.
 
 Mark `authoring-2-anatomy: done`.
 
-## Step `authoring-3-edit-setting` — edit a setting and observe it (~3 min)
+## Step `authoring-3-edit-setting` - edit a setting and observe it (~3 min)
 
 > Now we'll touch the settings. The scaffold tracks `TODO` and
 > `FIXME`. Add a third keyword: `XXX`. The change goes in the
@@ -178,7 +177,7 @@ the icon and label come from the manifest's `ui.count`.
 
 Mark `authoring-3-edit-setting: done`.
 
-## Step `authoring-4-edit-slot` — change the view-slot (~2 min)
+## Step `authoring-4-edit-slot` - change the view-slot (~2 min)
 
 > Same contribution, different home. We'll move it from the
 > footer to the top-right corner of the card.
@@ -212,7 +211,7 @@ catalogue, picking an unknown slot id is rejected at load.
 
 Mark `authoring-4-edit-slot: done`.
 
-## Step `authoring-5-doctor-author` — catch a manifest mistake (~2 min)
+## Step `authoring-5-doctor-author` - catch a manifest mistake (~2 min)
 
 > Last lesson on the manifest. We'll break it on purpose to see
 > how `doctor` reports it.
@@ -244,7 +243,7 @@ Back to clean.
 
 Mark `authoring-5-doctor-author: done`.
 
-## Step `authoring-6-upgrade` — `sm plugins upgrade` (~2 min)
+## Step `authoring-6-upgrade` - `sm plugins upgrade` (~2 min)
 
 > One last verb. `sm plugins upgrade` applies catalog migrations
 > to plugin manifests. Today the catalog is at `1.0.0` with zero
@@ -267,7 +266,7 @@ Expected: both report no migrations to apply.
 
 Mark `authoring-6-upgrade: done`.
 
-## Tour wrap-up (fires at the end of `build-and-configure`)
+## Wrap-up (fires at the end of the authoring chapters)
 
 > You wrote a plugin. From here:
 >
@@ -283,5 +282,5 @@ Mark `authoring-6-upgrade: done`.
 >
 > Anything weird worth logging? If not, back to the menu.
 
-Mark tour `build-and-configure: done` in `master-state.yml`, update
+Mark the authoring chapters done in `tutorial-state.yml`, update
 the matching harness task, return to the menu in `SKILL.md`.

package/dist/cli/tutorial/sm-tutorial/references/part-cli.md

@@ -0,0 +1,267 @@
+# Part 7: The CLI in depth - step library
+
+The deep-dive into the rest of the CLI: browsing verbs, ASCII graph + export, broken-ref issues, the `.sm` annotation consent prompt, and validating links to folders outside the scan scope. `pace: auto-advance` (walk straight into the next chapter's Announcement once one is marked done) and it reuses the fundamentals fixture and DB built in Part 0 (no fresh fixture of its own). Shared conventions (tone, provider detection / substitution, the `> ` rendering rule, the per-step cycle) live in `_core.md`; do not restate them here.
+
+## Chapter `browse` - list / show / check (~3 min)
+
+```bash
+sm list
+sm list --kind skill
+sm list --kind agent
+sm list --kind markdown
+sm show .claude/skills/demo-skill/SKILL.md
+sm check
+```
+
+Expected: you see the 5 fixture nodes listed with their kind: `demo-skill` (skill), `demo-agent` (agent), `demo-command` (command), `notes/todo` (`markdown`, the catch-all per the `kinds` chapter), and `notes/demo-guideline` (`markdown` as well, the target of the hub's `references` link). `check` reads the persisted `scan_issues` table, it does NOT re-walk the filesystem. The fixture is clean (the connector / inspector chapters captured the latest state before Ctrl+C), so the verb prints `✓ No issues`. We will plant one in the `issues` chapter and watch the rule catch it after a fresh `sm scan`.
+
+Mark `browse`: done.
+
+## Chapter `graph-export` - graph / export (query, formatters) (~3 min)
+
+```bash
+sm graph
+sm export --format md > export.md
+sm export "kind=markdown" --format json > export-markdown.json
+sm export "path=notes/**" --format json > export-notes.json
+ls -la export*
+```
+
+`graph` draws an ASCII tree of the whole persisted scan (no `--root` flag, graph is whole-graph today). `export` takes a positional query (`kind=…`, `path=…`, `has=issues`, comma-OR within a key, AND across keys) and a `--format` of `md` or `json`. The `path=` glob uses POSIX semantics (`*` is one segment, `**` spans segments) so `path=notes/**` cleanly captures the notes folder regardless of the catch-all kind.
+
+Mark `graph-export`: done.
+
+## Chapter `issues` - Issues and broken refs (--analyzers, --json) (~3 min)
+
+`reference-broken` is one of the deterministic rules `sm check` runs. We'll plant one and watch it surface, that's the easiest way to internalise that it is an **issue** on a node, NOT a connector and NOT the same thing as an "orphan".
+
+> ℹ️ `reference-broken` is one of ~16 built-in rules. Others surface
+> different families: `core/name-reserved` (a file shadows a vendor
+> built-in like `/help`), `core/link-self-loop` (a node links to itself),
+> `core/reference-redundant` (two surfaces in the same body
+> point at the same target), `core/signal-collision` (two extractors
+> detected the SAME byte range with different interpretations, the
+> resolver picked one and the warning explains who lost and why).
+> Same `sm check --analyzers <id>` pattern works for any of them.
+> We will not plant fixtures for the rest, the reference-broken demo
+> covers the mechanics.
+
+Ask the tester to **append one bullet** to `notes/todo.md`:
+
+```markdown
+- [ ] Document the [flow diagram](./missing-page.md).
+```
+
+`./missing-page.md` deliberately doesn't exist. Save the file, then run `sm scan` first to refresh the snapshot before checking:
+
+```bash
+sm scan
+sm check
+sm check --analyzers reference-broken
+sm check --json
+```
+
+Expected: the error surfaces the dangling link from `notes/todo.md` to the non-existent `missing-page.md`. The `--analyzers` filter lets you focus on a single issue type; `--json` emits the structured payload (useful for CI / scripting). When done, the tester can leave the bullet in place or delete it, the rest of the deep-dive doesn't depend on it.
+
+If the tester asks about `sm orphans` vs `sm check`:
+
+- `sm check` reports broken-refs and other rule-driven issues
+  (the deterministic catalog).
+- `sm orphans` is a **different scope**: auto-rename / orphan-node
+  detection (a node whose file disappeared, or a candidate rename
+  the kernel is still unsure about). Our fixture doesn't produce
+  orphans of that kind, so `sm orphans` will print "No orphan /
+  auto-rename issues", that's expected, not a bug.
+
+Mark `issues`: done.
+
+## Chapter `annotations` - Annotations and the .sm consent prompt (~3 min)
+
+**Context**: every `.md` skill-map tracks gets a sibling **companion file** with extension `.sm` that carries **all of the tool's metadata about that markdown, so your `.md` stays clean and uncluttered**. Version, history, tags, annotations, anything that does not belong in the human-authored body lives in the `.sm`. The `.md` is content you write for Claude or humans; the `.sm` is bookkeeping the tool writes. They are ordinary source files, committed to git like everything else, and you'll encounter them often once you start working with the project.
+
+The first time skill-map wants to write one in a new project it asks for your consent, it never touches your filesystem without permission. After you say yes, the choice is saved to the project's `settings.local.json` (part of your project config, gitignored) and the prompt never appears again.
+
+We'll demonstrate by creating an empty annotation scaffold for `notes/todo.md`. **Reset any prior consent state first** so the prompt actually appears (an earlier step may have flipped the flag without you noticing, in which case `sm sidecar annotate` would skip straight past the prompt and the lesson would not land):
+
+```bash
+rm -f notes/todo.sm .skill-map/settings.local.json
+sm sidecar annotate notes/todo.md
+```
+
+Expected: a short explanation paragraph appears in the terminal, followed by a `[Y/n]` prompt (capital Y = default Yes, you can just hit Enter). After accepting, `notes/todo.sm` appears next to `notes/todo.md` carrying an `identity:` block plus an empty `annotations: {}` block, and `.skill-map/settings.local.json` now contains `{ "allowEditSmFiles": true }`.
+
+```bash
+cat notes/todo.sm
+cat .skill-map/settings.local.json
+```
+
+**Why the prompt?** The choice is **per-user, per-project**: stored in the gitignored `settings.local.json` so each contributor consents independently and nothing about the choice travels via the repo. Once accepted, the flag stays set and skill-map will never ask again on this checkout (the next `sm sidecar annotate` or `sm bump` goes through silently). On a CI / non-interactive session, pass `--yes` to grant up-front.
+
+If the tester asks about `sm bump` vs `sm sidecar annotate` vs `sm sidecar refresh`:
+
+- `sm sidecar annotate` is the scaffold verb (creates a fresh
+  `.sm`).
+- `sm bump <node>` is the day-to-day verb that increments the
+  sidecar's version and refreshes its hashes, same consent gate.
+- `sm sidecar refresh <node>` is the hash-only update (no version
+  bump).
+
+If the tester ever asks about reserved names (e.g. `commands/help.md`): if they name a file after a built-in (`/help`, `/clear`, `/init`, `/agents`, `/model`, or one of the documented agent reservations like `general-purpose`), `sm check` surfaces a `reserved-name` warning. The vendor runtime ignores user-owned files that shadow its built-ins, so the warning is not a bug, it's skill-map telling the operator "Claude will never invoke this file; pick another name". Incoming links to the shadowed file resolve at confidence `0.1` instead of `1.0`, so the **Map** also visually de-emphasises them. Rename the file and the warning clears on the next scan.
+
+Mark `annotations`: done.
+
+## Chapter `reference-paths` - Validate links to folders outside the scan scope (~4 min)
+
+**Context**: until now the map saw only files inside the cwd. In real projects a repo often links to files in a sibling repo (a specs project, a sibling package in a monorepo). Skill-map only scans from its cwd downwards, so a link to `../sibling/file.md` shows up as broken. The fix is to declare the external folders in `scan.referencePaths`, which lets the `reference-broken` analyzer validate path-style links against those extra roots **without indexing their files as nodes**. The folders are checked, not walked as part of the map.
+
+**Setup (you, silent)**: write the fixture under the tutorial cwd so both sub-projects are siblings of each other but children of the tutorial root. The agent does this with `Write`, no confirmation beat needed, the tester learns about the files in the next message.
+
+```
+link-validation/
+├── hijoA/
+│   └── note-with-external-link.md   ← contains [spec](../hijoB/spec.md)
+└── hijoB/
+    └── spec.md                      ← the real target file
+```
+
+`link-validation/hijoA/note-with-external-link.md`:
+```markdown
+---
+name: note-with-external-link
+description: |
+  Demo note that links out to a sibling project (hijoB) sitting
+  next to this one. Used to teach scan.referencePaths.
+tags: [demo, link-validation]
+---
+
+# Note with external link
+
+See the [spec](../hijoB/spec.md) for the agreed format.
+```
+
+`link-validation/hijoB/spec.md`:
+```markdown
+---
+name: spec
+description: |
+  Target of the cross-folder link. Lives outside hijoA's scan
+  scope on purpose: that is precisely what scan.referencePaths
+  is designed to bridge.
+tags: [demo, link-validation]
+---
+
+# External spec
+
+Anything that hijoA points at lives here.
+```
+
+Once the files are in place, tell the tester:
+
+> I just dropped two sibling folders inside the tutorial cwd:
+>
+> ```
+> link-validation/
+> ├── hijoA/
+> │   └── note-with-external-link.md   ← contains [spec](../hijoB/spec.md)
+> └── hijoB/
+>     └── spec.md                      ← the real target file
+> ```
+>
+> For this step you'll switch folders for a moment, so `sm` treats
+> `hijoA/` as a separate project (new cwd, scope limited to that
+> subtree). At the end of the step I'll tell you how to come back.
+>
+> If an `sm` from an earlier step is still running, close it with
+> Ctrl+C so the port is free for this one. Then, in your second
+> terminal:
+
+```bash
+cd link-validation/hijoA
+sm init
+sm check
+```
+
+> You'll see an error from the `reference-broken` analyzer (a rule
+> that flags problems) pointing at the link `../hijoB/spec.md`. As
+> far as skill-map is concerned that file doesn't exist, because
+> `hijoB/` sits outside the scope `sm` is scanning from `hijoA/`:
+> each project has its own `.skill-map/` and only walks from its
+> cwd downwards, never "up" and never into sibling folders.
+>
+> Paste me the output (or just an OK) and we'll move on to the fix.
+
+Wait for confirmation before showing the fix. Mark the error landed as expected; if the tester reports `✓ No issues` instead, the most likely cause is that they ran `sm check` from the tutorial root by mistake (the root scan still sees both folders). Have them re-check that the cwd of their second terminal is `link-validation/hijoA/` (`pwd`) and rerun.
+
+After they confirm the broken-ref error, present the fix:
+
+> To resolve the link without moving `hijoB/` inside `hijoA/`, you
+> add `../hijoB` to the `scan.referencePaths` setting. It tells the
+> analyzer "if a path-style link lands here, validate it against
+> these extra folders too". The files are NOT added to the map
+> (they don't show up as nodes), they're only consulted to resolve
+> outgoing references from `hijoA/`.
+>
+> In your second terminal (still inside `link-validation/hijoA/`):
+
+```bash
+sm config set scan.referencePaths '["../hijoB"]' --yes
+sm scan
+sm check
+```
+
+> The `--yes` flag confirms the privacy gate: you're authorizing
+> skill-map to read files outside the project root, so it asks for
+> your explicit OK. Without `--yes` the verb aborts and asks you to
+> retry with `--yes` (it does not open an interactive prompt).
+> After the scan, `sm check` should print `✓ No issues`: the error
+> is gone and `hijoB/` still hasn't entered the map as a node.
+>
+> Paste me the output and let's see how it got persisted.
+
+Wait for confirmation. After they paste the clean `sm check` output, show where the value lives on disk:
+
+> Look at how the change got saved:
+
+```bash
+cat .skill-map/settings.local.json
+```
+
+> You'll see something like this:
+>
+> ```json
+> {
+>   "scan": {
+>     "referencePaths": ["../hijoB"]
+>   }
+> }
+> ```
+>
+> It lives in `settings.local.json` (gitignored, doesn't travel
+> through git), NOT in the `settings.json` that does get committed.
+> The reason: paths to sibling folders usually depend on your
+> machine's local layout (not every contributor has the same
+> project tree on disk), so skill-map forces this setting into the
+> local layer.
+
+Now the UI half. The tester needs `sm` running with `hijoA/` as cwd to see the matching panel:
+
+> Now the same thing from the UI. In the same terminal, start the
+> server from `hijoA/`:
+
+```bash
+sm
+```
+
+> Open the URL the command prints in the browser. Top right there's
+> the **sliders** icon (hover shows "Settings"), click it, in the
+> modal go to the **Project** tab and scroll down to the **Folders
+> for link validation** section. You'll see `../hijoB` listed, with buttons to add or
+> remove paths. The CLI and the UI write to the same file: if you
+> add one from the UI, it shows up in the JSON, and vice versa.
+>
+> When you're done looking, Ctrl+C in the terminal to close the
+> server.
+
+Wait for confirmation that they saw the panel and closed the server. If the `sm` launch fails with a port-in-use error, an old `sm` is still bound to the default port from an earlier step; follow the §Edge cases recipe (`sm serve --port 4243`).
+
+The tester is still inside `link-validation/hijoA/` at this point. Do NOT send them back here; the return-to-root `cd ../..` lives in §Final wrap-up, right before the cleanup line. Mark `reference-paths`: done.