@skill-map/cli 0.65.0 → 0.66.0

package/dist/cli.js

@@ -1,6 +1,6 @@
 // cli/entry.ts
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="62413e88-87c9-5ddc-a41c-f64bac9cdf2f")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="4ec5542f-63ef-5e2c-ab32-58a6c8be5dec")}catch(e){}}();
 import { existsSync as existsSync34 } from "fs";
 import { Builtins, Cli as Cli2 } from "clipanion";
 
@@ -250,7 +250,7 @@ function bucketByKind(kind, instance, bag) {
 // package.json
 var package_default = {
   name: "@skill-map/cli",
-  version: "0.65.0",
+  version: "0.66.0",
   description: "skill-map reference implementation \u2014 kernel + CLI + adapters.",
   license: "MIT",
   type: "module",
@@ -466,6 +466,19 @@ var skill_base_schema_default = {
       type: "string",
       enum: ["bash", "powershell"],
       description: "Shell flavor for any embedded shell snippets. Default: `bash`."
+    },
+    license: {
+      type: "string",
+      description: "License applied to the skill: a license name (e.g. `Apache-2.0`) or a reference to a bundled license file. Inherited from the Agent Skills open standard that Claude Code follows. Source: https://agentskills.io/specification."
+    },
+    compatibility: {
+      type: "string",
+      description: "Environment requirements (intended product, required system packages, network access, etc.). Open-standard field; Claude Code does not consume it but the format permits it. Source: https://agentskills.io/specification."
+    },
+    metadata: {
+      type: "object",
+      additionalProperties: { type: "string" },
+      description: "Arbitrary string-keyed, string-valued map for metadata not covered by the standard. This is the canonical home of `version` and `author` (there is NO top-level `version` field). Source: https://agentskills.io/specification."
     }
   }
 };
@@ -481,6 +494,7 @@ var agent_schema_default = {
   ],
   type: "object",
   additionalProperties: true,
+  required: ["name", "description"],
   properties: {
     tools: {
       type: "array",
@@ -494,7 +508,7 @@ var agent_schema_default = {
     },
     model: {
       type: "string",
-      description: "Model alias (`sonnet`, `opus`, `haiku`), full Claude id (e.g. `claude-3-7-sonnet-latest`), or the literal `inherit` to defer to the parent session's model."
+      description: "Model alias (`sonnet`, `opus`, `haiku`, `fable`), a full Claude id (e.g. `claude-opus-4-8`, `claude-sonnet-4-6`), or the literal `inherit` to defer to the parent session's model."
     },
     permissionMode: {
       type: "string",
@@ -513,8 +527,8 @@ var agent_schema_default = {
     },
     mcpServers: {
       type: "array",
-      description: "MCP servers this agent connects to at startup. Shape is platform-defined; preserved as opaque objects.",
-      items: { type: "object" }
+      description: "MCP servers this agent connects to at startup. Each item is either a bare server name referencing an already-configured server (e.g. `github`) or an inline definition object keyed by server name. Shape is platform-defined; preserved opaque.",
+      items: { type: ["string", "object"] }
     },
     hooks: {
       type: "object",
@@ -568,7 +582,7 @@ var command_schema_default = {
 // plugins/ids.ts
 var CORE_PLUGIN_ID = "core";
 var CLAUDE_PLUGIN_ID = "claude";
-var OPENAI_PLUGIN_ID = "openai";
+var OPENAI_PLUGIN_ID = "codex";
 var ANTIGRAVITY_PLUGIN_ID = "antigravity";
 var AGENT_SKILLS_PLUGIN_ID = "agent-skills";
 
@@ -618,7 +632,7 @@ var claudeProvider = {
   // variant lifts luminosity for dark mode. Verbatim from the previous
   // static UI catalog (`ui/src/services/provider-ui.ts`).
   presentation: {
-    label: "Claude",
+    label: "Anthropic's Claude",
     color: "#cc785c",
     colorDark: "#e89270"
   },
@@ -900,7 +914,13 @@ var atDirectiveExtractor = {
   kind: "extractor",
   description: "Detects `@<token>` directives in a node's body using Claude Code rules, choosing the link kind by token shape. Example: a bare handle `@team` becomes a `mentions` link, while a file-flavoured token `@docs/api.md` becomes a `references` link.",
   scope: "body",
-  precondition: { provider: ["claude"] },
+  // Authorised under the claude AND codex lenses: OpenAI Codex sub-agents
+  // reference each other with the same `@<name>` mention grammar, and their
+  // prompt (the TOML `developer_instructions` body, fed in via the codex
+  // provider's `read.bodyField`) carries the same `@` tokens. The gate is the active
+  // lens, not the node's provider, so under `codex` this parses `@` across
+  // the project's markdown surface just as it does under `claude`.
+  precondition: { provider: ["claude", "codex"] },
   // eslint-disable-next-line complexity
   extract(ctx) {
     const seenMentions = /* @__PURE__ */ new Set();
@@ -988,7 +1008,12 @@ var slashCommandExtractor = {
   kind: "extractor",
   description: "Turns `/command` invocations in a node's body into arrows that point at the resolved slash command or skill, using Claude Code routing rules. Example: `/deploy` in the body draws an arrow to the `deploy` command.",
   scope: "body",
-  precondition: { provider: ["claude"] },
+  // Also authorised under the codex lens so a Codex agent's prompt body
+  // (the TOML `developer_instructions` field) has its `/command` tokens parsed for
+  // pipeline parity with the claude body. codex declares no `invokes`
+  // resolution today, so these signals stay unresolved (no spurious edges)
+  // until Codex slash commands land in Phase 6b.
+  precondition: { provider: ["claude", "codex"] },
   extract(ctx) {
     const seen = /* @__PURE__ */ new Set();
     const body = stripCodeAndHtml(ctx.body);
@@ -1073,12 +1098,13 @@ var skill_schema_default2 = {
   $schema: "https://json-schema.org/draft/2020-12/schema",
   $id: "https://skill-map.ai/providers/agent-skills/v1/frontmatter/skill.schema.json",
   title: "FrontmatterAgentSkillsSkill",
-  description: "Frontmatter shape for nodes classified as `skill` by the neutral `agent-skills` Provider, Agent Skills delivered as `SKILL.md` files at the open-standard path `.agents/skills/<name>/SKILL.md`. Jointly adopted by Anthropic, OpenAI (Codex), and Google (Gemini); the path is vendor-neutral so no single Provider should own it. Required fields are `name` and `description` (from spec base). The standard's optional frontmatter fields are declared below, mirrored verbatim from https://agentskills.io/specification: `license`, `compatibility`, `metadata`, and the experimental `allowed-tools`. `additionalProperties: true` so any future standard field flows through unchanged until this schema catches up.",
+  description: "Frontmatter shape for nodes classified as `skill` by the neutral `agent-skills` Provider, Agent Skills delivered as `SKILL.md` files at the open-standard path `.agents/skills/<name>/SKILL.md`. Jointly adopted by Anthropic, OpenAI (Codex), and Google (Gemini); the path is vendor-neutral so no single Provider should own it. Required fields are `name` and `description` (defined on the spec base, declared `required` here, the open standard mandates both). The standard's optional frontmatter fields are declared below, mirrored verbatim from https://agentskills.io/specification: `license`, `compatibility`, `metadata`, and the experimental `allowed-tools`. `additionalProperties: true` so any future standard field flows through unchanged until this schema catches up.",
   allOf: [
     { $ref: "https://skill-map.ai/spec/v0/frontmatter/base.schema.json" }
   ],
   type: "object",
   additionalProperties: true,
+  required: ["name", "description"],
   properties: {
     name: {
       type: "string",
@@ -1167,9 +1193,14 @@ var agentSkillsProvider = {
   // and the per-node provider chip. Neutral slate (this is the
   // vendor-agnostic open-standard Provider, not a brand). The reusable
   // open-standard pieces it owns use a `COMMONS_*` vocabulary internally;
-  // the user-facing label stays the descriptive "Open Skills".
+  // the user-facing label is the descriptive "Standard: Agent skills" (the
+  // `Standard:` prefix marks it as the vendor-neutral lens, distinct from
+  // the possessive `<Vendor>'s <product>` form the brand lenses use). This
+  // is the single open lens shown in the selector when no vendor is active; the
+  // non-gated `core/markdown` base sits underneath it and is never offered
+  // as a lens of its own.
   presentation: {
-    label: "Open Skills",
+    label: "Standard: Agent skills",
     color: "#64748b",
     colorDark: "#94a3b8"
   },
@@ -1178,11 +1209,12 @@ var agentSkillsProvider = {
   // (including `markdown`) it falls through to `core/markdown`, the sole
   // universal provider. Keeps the "one active lens" model honest.
   gatedByActiveLens: true,
-  // Not yet ready for end users: ships disabled by default. The operator
-  // opts in via `sm plugins enable` / the Settings toggle / the tutorial's
-  // `--experimental` flow, so it neither classifies nor auto-detects until
-  // enabled.
-  stability: "experimental",
+  // The open-standard lens is the universal default: stable and locked
+  // enabled (`agent-skills/agent-skills` in the host lock-list), so it is
+  // the lens a project falls back to when no vendor marker is present, and
+  // it cannot be disabled out from under that role. Auto-detects `.agents/`
+  // and classifies skills under its own lens.
+  stability: "stable",
   // Auto-detect marker: a `.agents/` directory marks an open-standard
   // project. This is also the marker a Google/Antigravity project carries
   // (Antigravity adopted the open standard). The marker only produces an
@@ -1195,7 +1227,7 @@ var agentSkillsProvider = {
   // OpenAI Codex (skills mirror the open standard), so `aka` surfaces both
   // names in the destination prompt to orient testers on those agents.
   // `aka` is display-only, `--for` still matches the `agent-skills` id.
-  scaffold: { skillDir: ".agents/skills", aka: ["Antigravity", "OpenAI Codex"] },
+  scaffold: { skillDir: ".agents/skills", aka: ["Google's Antigravity", "OpenAI's Codex"] },
   read: COMMONS_READ,
   kinds: COMMONS_KINDS,
   resolution: COMMONS_RESOLUTION,
@@ -1216,7 +1248,7 @@ var antigravityProvider = {
   // and the per-node provider chip. Antigravity violet, distinct from the
   // other vendor palettes.
   presentation: {
-    label: "Antigravity",
+    label: "Google's Antigravity",
     color: "#7c3aed",
     colorDark: "#a78bfa"
   },
@@ -1309,86 +1341,126 @@ var antigravityProvider = {
   }
 };
 
-// plugins/openai/providers/openai/schemas/agent.schema.json
+// plugins/codex/providers/codex/schemas/agent.schema.json
 var agent_schema_default2 = {
   $schema: "https://json-schema.org/draft/2020-12/schema",
-  $id: "https://skill-map.ai/providers/openai/v1/frontmatter/agent.schema.json",
+  $id: "https://skill-map.ai/providers/codex/v1/frontmatter/agent.schema.json",
   title: "FrontmatterCodexAgent",
-  description: "Frontmatter shape for nodes classified as `agent` by the OpenAI Codex Provider. Codex sub-agents live as TOML files under `.codex/agents/<name>.toml`; the entire file IS the agent definition (no markdown body). The TOML parser feeds the parsed root object into `frontmatter`, so this schema validates the same shape skill-map's other providers carry on per-kind frontmatter. Mirrors Codex's documented sub-agent fields (https://github.com/openai/codex) with `additionalProperties: true` so future additions flow through unchanged.",
+  description: "Frontmatter shape for nodes classified as `agent` by the OpenAI Codex Provider. Codex sub-agents live as standalone TOML files under `.codex/agents/<name>.toml`; the entire file IS the agent definition (no markdown body, the prompt is the `developer_instructions` field). The TOML parser feeds the parsed root object into `frontmatter`, so this schema validates the same shape skill-map's other providers carry on per-kind frontmatter. Field set mirrors the documented Codex custom-agent contract (https://developers.codex.com/codex/subagents); `additionalProperties: true` lets any other inherited `config.toml` key flow through unchanged.",
   allOf: [
     { $ref: "https://skill-map.ai/spec/v0/frontmatter/base.schema.json" }
   ],
   type: "object",
   additionalProperties: true,
+  required: ["name", "description", "developer_instructions"],
   properties: {
     name: {
       type: "string",
       minLength: 1,
-      description: "Sub-agent identifier. Conventionally matches the filename stem."
+      description: "Sub-agent identifier used when spawning the agent. Conventionally matches the filename stem."
     },
     description: {
       type: "string",
       description: "Short description of when this sub-agent applies. Codex surfaces this in the agent picker; skill-map mirrors it in the card."
     },
+    developer_instructions: {
+      type: "string",
+      description: "The sub-agent's core behavioural prompt (TOML triple-quoted string), the Codex equivalent of a system prompt. Required: the Codex CLI refuses to load an agent role file that omits it, so skill-map flags the same gap as a schema violation. Fed through the body pipeline via the provider's `read.bodyField`, so the markdown links / mentions it carries become graph edges."
+    },
     model: {
       type: "string",
-      description: "Model identifier (`gpt-4o`, `o3-mini`, etc.) the sub-agent runs against."
+      description: "Model identifier (`gpt-5-codex`, `gpt-5.4`, ...) the sub-agent runs against. Inherits the parent's model when omitted."
     },
-    instructions: {
+    model_reasoning_effort: {
       type: "string",
-      description: "Multi-line prompt body (TOML triple-quoted string)."
+      enum: ["minimal", "low", "medium", "high", "xhigh"],
+      description: "Reasoning effort the sub-agent runs at (`xhigh` is model-dependent). Inherits the parent's setting when omitted."
     },
-    tools: {
-      type: "array",
-      items: { type: "string" },
-      description: "Tool ids this sub-agent is allowed to call."
+    sandbox_mode: {
+      type: "string",
+      enum: ["read-only", "workspace-write", "danger-full-access"],
+      description: "Codex sandbox mode the sub-agent runs under. Inherits the parent's policy when omitted."
     },
-    mcp_servers: {
+    nickname_candidates: {
       type: "array",
       items: { type: "string" },
-      description: "MCP server ids attached to this sub-agent (`tools: [mcp__<server>__*]` follows the same pattern as Claude)."
+      description: "Pool of display names Codex draws from when spawning instances of this sub-agent."
     },
-    approval_policy: {
-      type: "string",
-      enum: ["never", "on-request", "untrusted"],
-      description: "Codex approval policy for this sub-agent's destructive operations."
+    mcp_servers: {
+      type: "object",
+      additionalProperties: { type: "object" },
+      description: "Agent-specific MCP server bindings: a TOML table keyed by server name (`[mcp_servers.<name>]`), each value a server config (`command` + `args`, or `url`). This is NOT the Claude `tools: [mcp__<server>__*]` array convention, which is claude-only."
     },
-    sandbox_mode: {
-      type: "string",
-      enum: ["read-only", "workspace-write", "danger-full-access"],
-      description: "Codex sandbox mode the sub-agent runs under."
+    skills: {
+      type: "object",
+      additionalProperties: true,
+      description: "Skill overrides for this sub-agent. The `config` array (`[[skills.config]]` in TOML) lists skills by path with an enabled flag.",
+      properties: {
+        config: {
+          type: "array",
+          items: {
+            type: "object",
+            additionalProperties: true,
+            properties: {
+              path: { type: "string", description: "Path to the skill's SKILL.md." },
+              enabled: { type: "boolean", description: "Whether the skill is active for this sub-agent." }
+            }
+          }
+        }
+      }
     }
   }
 };
 
-// plugins/openai/providers/openai/index.ts
-var openaiProvider = {
-  id: "openai",
+// plugins/codex/providers/codex/index.ts
+var codexProvider = {
+  id: "codex",
   pluginId: OPENAI_PLUGIN_ID,
   kind: "provider",
-  description: "Classifies files under `.codex/agents/*.toml` as OpenAI Codex CLI sub-agents.",
+  description: "Classifies `.codex/agents/*.toml` as OpenAI Codex CLI sub-agents and `.agents/skills/*/SKILL.md` as Codex skills (open standard).",
   // Provider identity for the active-lens dropdown, the topbar lens chip,
   // and the per-node provider chip. Codex green, distinct from the Claude
   // palette so the chip reads at a glance.
   presentation: {
-    label: "OpenAI Codex",
+    label: "OpenAI's Codex",
     color: "#22c55e",
     colorDark: "#4ade80"
   },
-  // Auto-detect markers: a `.codex/` directory or a root `AGENTS.md` marks
-  // a Codex CLI project. Provider-owned (replaces the old central
-  // detection table in `src/core/config/active-provider.ts`).
-  detect: { markers: [".codex", "AGENTS.md"] },
-  // Vendor provider: Codex CLI only reads its own `.codex/` territory.
-  // Gating the classifier behind the active lens keeps the walker from
-  // claiming Codex agents under a `claude` (or any other) lens, where
-  // the Codex runtime would never resolve them anyway.
+  // Auto-detect marker: a `.codex/` directory marks a Codex CLI project.
+  // `AGENTS.md` is intentionally NOT a marker: it is the open agents.md
+  // standard (present in many non-Codex repos, and commonly alongside a
+  // `.claude/` directory), so keying auto-detect off it would mis-route a
+  // plain-markdown repo to the Codex lens and force an ambiguous prompt on
+  // any project that carries both. `.agents/` is likewise NOT a marker: it
+  // is the vendor-neutral open standard (owned by `agent-skills` for
+  // auto-detect), so a project that only carries `.agents/skills/` is an
+  // open-standard project, not necessarily a Codex one. A genuine Codex
+  // project is identified by `.codex/`.
+  detect: { markers: [".codex"] },
+  // Vendor provider: Codex CLI only reads its own territory (its `.codex/`
+  // agents plus the open `.agents/skills/` skills it adopted). Gating the
+  // classifier behind the active lens keeps the walker from claiming Codex
+  // agents under a `claude` (or any other) lens, where the Codex runtime
+  // would never resolve them anyway.
   gatedByActiveLens: true,
-  // Not yet ready for end users: ships disabled by default (the operator
-  // opts in via `sm plugins enable` / Settings / the tutorial's
-  // `--experimental` flow). Replaces the retired `comingSoon` flag.
-  stability: "experimental",
-  read: { extensions: [".toml"], parser: "toml" },
+  // Beta: ships enabled by default (auto-detects `.codex/`, selectable as
+  // the active lens) with a maturity badge, since the Codex body extractor
+  // is freshly landed. Promote to `stable` (drop the field) once it has
+  // real-world mileage.
+  stability: "beta",
+  // Multi-rule read: `.toml` sub-agents and `.md` open-standard skills,
+  // each with its own parser. `resolveProviderWalk` runs one walk pass per
+  // rule; the extensions are disjoint.
+  //   1. Codex sub-agents are pure TOML (`parser: 'toml'`); the markdown
+  //      prompt is the triple-quoted `developer_instructions` field, fed
+  //      to the body pipeline via `bodyField` so the universal body
+  //      extractors plus the lens-gated at-directive / slash run over it.
+  //   2. Skills reuse the open-standard `agent-skills` read config
+  //      (`COMMONS_READ`: `.md` + `frontmatter-yaml`).
+  read: [
+    { extensions: [".toml"], parser: "toml", bodyField: "developer_instructions" },
+    COMMONS_READ
+  ],
   kinds: {
     agent: {
       schema: "./schemas/agent.schema.json",
@@ -1405,18 +1477,30 @@ var openaiProvider = {
       // the TOML structured frontmatter when the author declared it
       // explicitly.
       identifiers: ["frontmatter.name", "filename-basename"]
-    }
+    },
+    // Open-standard `skill` kind, inherited from `agent-skills` by manifest
+    // composition (same schema + UI every standard adopter shares).
+    // `.agents/skills/<name>/SKILL.md` resolves by dirname or
+    // `frontmatter.name`.
+    ...COMMONS_KINDS
   },
-  // Codex's invocation surface is mention-style today (`@<name>`); slash
-  // invocation and skill nodes land in Phase 6b. Empty `invokes` keeps
-  // the contract narrow until skills arrive.
+  // Mentions resolve to agents (`@<name>`, the Codex sub-agent handle).
+  // Slash invocations resolve to skills (`invokes: ['skill']`, inherited
+  // from the open standard), so a `/skill-name` in an agent's prompt links
+  // to its `.agents/skills/` skill.
   resolution: {
-    mentions: ["agent"]
+    mentions: ["agent"],
+    ...COMMONS_RESOLUTION
   },
+  // Open-standard reserved-name base (the universal cross-agent slash
+  // verbs an agent CLI ships built-in), inherited from `agent-skills` and
+  // applied under the codex lens via SELF scope: a user skill that shadows
+  // one is flagged by `core/name-reserved`.
+  reservedNames: COMMONS_RESERVED_NAMES,
   classify(path) {
     const lower = path.toLowerCase();
     if (lower.startsWith(".codex/agents/") && lower.endsWith(".toml")) return "agent";
-    return null;
+    return classifyCommonsPath(path);
   }
 };
 
@@ -1442,17 +1526,23 @@ var coreMarkdownProvider = {
   // Provider identity. `hideChip: true` suppresses the per-card provider
   // chip: this fallback carries the majority of nodes in any project, so
   // badging every generic `.md` would be noise and dilute the chip's
-  // purpose (signalling a NON-default platform). The Provider still shows
-  // in the active-lens dropdown and the topbar lens chip with this label.
+  // purpose (signalling a NON-default platform). This Provider is the
+  // non-gated universal BASE, not a lens: `gatedByActiveLens` is false, so
+  // the BFF projects `isLens: false` and the UI never lists it in the
+  // active-lens dropdown nor as the topbar lens chip. The label is retained
+  // only for internal registry lookups (and any legacy node still tagged
+  // `provider: 'markdown'`).
   presentation: {
     label: "Markdown",
     color: "#9ca3af",
     colorDark: "#6b7280",
     hideChip: true
   },
-  // No `detect` block: the universal fallback is never auto-suggested as a
-  // lens (selecting it would gate out every vendor Provider). Operators
-  // pick it manually if they want an open-standard-only view.
+  // No `detect` block: the universal base is never auto-suggested, and
+  // since it is non-gated (`gatedByActiveLens` omitted == false) it is not
+  // a selectable lens at all. A no-vendor project resolves to the
+  // open-standard `agent-skills` default lens; this base runs underneath
+  // every lens regardless.
   read: { extensions: [".md"], parser: "frontmatter-yaml" },
   // Per spec § A.6, defaultRefreshAction values MUST be qualified
   // action ids. The summarize-markdown action is not yet implemented
@@ -3253,13 +3343,6 @@ function existsSyncSafe(path) {
   }
 }
 
-// kernel/orchestrator/frontmatter-issue-ids.ts
-var FRONTMATTER_ISSUE_ANALYZERS = /* @__PURE__ */ new Set([
-  "frontmatter-invalid",
-  "frontmatter-malformed",
-  "frontmatter-parse-error"
-]);
-
 // plugins/core/analyzers/schema-violation/text.ts
 var SCHEMA_VIOLATION_TEXTS = {
   // Diagnosis bodies (`<what>; <why>`). The shared `formatFinding` helper
@@ -3270,8 +3353,6 @@ var SCHEMA_VIOLATION_TEXTS = {
   nodeFailure: "Schema validation failed; {{errors}}",
   /** `<target>` subject + `Link failed schema validation; <errors>` */
   linkFailure: "Link failed schema validation; {{errors}}",
-  /** `Missing required frontmatter; <missing>` */
-  frontmatterBaseFailure: "Missing required frontmatter; {{missing}}",
   /** Singular tooltip on the alert / chip when a node has exactly one validation failure. */
   alertTooltipSingle: "Frontmatter or schema validation failed.",
   /** Plural tooltip; `{{count}}` capped at 99 in the chip badge but the tooltip text shows the raw count. */
@@ -3302,11 +3383,9 @@ var schemaViolationAnalyzer = {
     const validators = loadSchemaValidators();
     const findings = [];
     const perNode = /* @__PURE__ */ new Map();
-    const kernelFlaggedNodes = collectKernelFlaggedNodes(ctx.accumulatedIssues);
     for (const node of ctx.nodes) {
       const before = findings.length;
       collectNodeFindings(validators, node, findings);
-      collectFrontmatterBaseFindings(node, findings, kernelFlaggedNodes);
       if (findings.length > before) {
         let worst = "warn";
         for (let i = before; i < findings.length; i++) {
@@ -3344,43 +3423,6 @@ function collectNodeFindings(v, node, out) {
     data: { target: "node", path: node.path }
   });
 }
-function collectKernelFlaggedNodes(accumulated) {
-  const flagged = /* @__PURE__ */ new Set();
-  for (const issue of accumulated ?? []) {
-    if (!FRONTMATTER_ISSUE_ANALYZERS.has(issue.analyzerId)) continue;
-    for (const id of issue.nodeIds) flagged.add(id);
-  }
-  return flagged;
-}
-function collectFrontmatterBaseFindings(node, out, kernelFlagged) {
-  if (kernelFlagged.has(node.path)) return;
-  if (node.provider === "markdown") return;
-  if (node.bytes.frontmatter === 0) return;
-  const fm = node.frontmatter ?? {};
-  const missing = [];
-  if (isMissingStringField(fm, "name")) missing.push("name");
-  if (isMissingStringField(fm, "description")) missing.push("description");
-  if (missing.length === 0) return;
-  out.push({
-    analyzerId: ID22,
-    // `warn` (not `error`) so the default `sm scan` exit code stays
-    // 0 even when nodes are missing frontmatter base fields. Strict
-    // mode (`sm scan --strict`) still escalates to exit 1. Matches
-    // the `frontmatter-invalid` severity policy of the orchestrator.
-    severity: "warn",
-    nodeIds: [node.path],
-    message: formatFinding({
-      body: tx(SCHEMA_VIOLATION_TEXTS.frontmatterBaseFailure, {
-        missing: missing.join(", ")
-      })
-    }),
-    data: { target: "frontmatter", path: node.path, missing }
-  });
-}
-function isMissingStringField(fm, field) {
-  const v = fm[field];
-  return typeof v !== "string" || v.length === 0;
-}
 function collectLinkFindings(v, link, out) {
   const result = v.validate("link", toLinkForSchema(link));
   if (result.ok) return;
@@ -4155,12 +4197,13 @@ function writeJsonAtomic(path, content) {
 }
 
 // core/paths/db-path.ts
-import { join as join2, resolve as resolve5 } from "path";
+import { join as join2, resolve as resolve6 } from "path";
 
 // kernel/util/skill-map-paths.ts
-import { join } from "path";
+import { dirname as dirname5, join, resolve as resolve5 } from "path";
 var SKILL_MAP_DIR = ".skill-map";
 var KERNEL_SKILL_MAP_DIR = SKILL_MAP_DIR;
+var BACKUPS_DIRNAME = "backups";
 var SETTINGS_FILENAME = "settings.json";
 var LOCAL_SETTINGS_FILENAME = "settings.local.json";
 function kernelSettingsPath(scopeRoot) {
@@ -4169,6 +4212,9 @@ function kernelSettingsPath(scopeRoot) {
 function kernelLocalSettingsPath(scopeRoot) {
   return join(scopeRoot, KERNEL_SKILL_MAP_DIR, LOCAL_SETTINGS_FILENAME);
 }
+function kernelBackupsDir(dbPath) {
+  return join(dirname5(resolve5(dbPath)), BACKUPS_DIRNAME);
+}
 
 // core/paths/db-path.ts
 var DB_FILENAME = "skill-map.db";
@@ -4183,17 +4229,20 @@ var GITIGNORE_ENTRIES = [
   `${SKILL_MAP_DIR}/${DB_FILENAME}`
 ];
 function resolveDbPath(options) {
-  if (options.db) return resolve5(options.db);
-  return resolve5(options.cwd, DEFAULT_DB_REL);
+  if (options.db) return resolve6(options.db);
+  return resolve6(options.cwd, DEFAULT_DB_REL);
 }
 function defaultProjectDbPath(ctx) {
-  return resolve5(ctx.cwd, DEFAULT_DB_REL);
+  return resolve6(ctx.cwd, DEFAULT_DB_REL);
 }
 function defaultProjectJobsDir(ctx) {
-  return resolve5(ctx.cwd, SKILL_MAP_DIR, JOBS_DIRNAME);
+  return resolve6(ctx.cwd, SKILL_MAP_DIR, JOBS_DIRNAME);
 }
 function defaultProjectPluginsDir(ctx) {
-  return resolve5(ctx.cwd, SKILL_MAP_DIR, PLUGINS_DIRNAME);
+  return resolve6(ctx.cwd, SKILL_MAP_DIR, PLUGINS_DIRNAME);
+}
+function backupsDirForDb(dbPath) {
+  return kernelBackupsDir(dbPath);
 }
 function defaultDbPath(scopeRoot) {
   return join2(scopeRoot, SKILL_MAP_DIR, DB_FILENAME);
@@ -4430,7 +4479,7 @@ var atDirectiveExtractor2 = { ...atDirectiveExtractor, pluginId: "claude", versi
 var slashCommandExtractor2 = { ...slashCommandExtractor, pluginId: "claude", version: VERSION };
 var toolsCounterExtractor2 = { ...toolsCounterExtractor, pluginId: "claude", version: VERSION };
 var antigravityProvider2 = { ...antigravityProvider, pluginId: "antigravity", version: VERSION };
-var openaiProvider2 = { ...openaiProvider, pluginId: "openai", version: VERSION };
+var codexProvider2 = { ...codexProvider, pluginId: "codex", version: VERSION };
 var agentSkillsProvider2 = { ...agentSkillsProvider, pluginId: "agent-skills", version: VERSION };
 var coreMarkdownProvider2 = { ...coreMarkdownProvider, pluginId: "core", version: VERSION };
 var backtickPathExtractor2 = { ...backtickPathExtractor, pluginId: "core", version: VERSION };
@@ -4477,10 +4526,10 @@ var builtInPlugins = [
     ]
   },
   {
-    id: "openai",
+    id: "codex",
     description: "OpenAI Codex CLI platform integration. Classifies TOML sub-agent definitions under `.codex/agents/*.toml`.",
     extensions: [
-      openaiProvider2
+      codexProvider2
     ]
   },
   {
@@ -5218,7 +5267,7 @@ async function closeSentryCli(timeoutMs = 2e3) {
 var BUILT_IN_PLUGIN_IDS = /* @__PURE__ */ new Set([
   "claude",
   "antigravity",
-  "openai",
+  "codex",
   "agent-skills",
   "core"
 ]);
@@ -5408,7 +5457,7 @@ import { Command as Command2, Option as Option2 } from "clipanion";
 
 // core/config/helper.ts
 import { homedir as osHomedir } from "os";
-import { isAbsolute, join as join4, resolve as resolve6, sep } from "path";
+import { isAbsolute, join as join4, resolve as resolve7, sep } from "path";
 
 // kernel/config/loader.ts
 import { existsSync as existsSync5, readFileSync as readFileSync6 } from "fs";
@@ -5828,13 +5877,13 @@ function projectPathExposure(inputs) {
   return { expandsSurface: true, exposedPaths: exposed };
 }
 function resolveScanPathForExposure(raw, cwd) {
-  if (raw.startsWith("~/")) return resolve6(join4(osHomedir(), raw.slice(2)));
-  if (raw === "~") return resolve6(osHomedir());
-  if (isAbsolute(raw)) return resolve6(raw);
-  return resolve6(cwd, raw);
+  if (raw.startsWith("~/")) return resolve7(join4(osHomedir(), raw.slice(2)));
+  if (raw === "~") return resolve7(osHomedir());
+  if (isAbsolute(raw)) return resolve7(raw);
+  return resolve7(cwd, raw);
 }
 function isUnderProject(absPath, cwd) {
-  const projectRoot = resolve6(cwd);
+  const projectRoot = resolve7(cwd);
   return absPath === projectRoot || absPath.startsWith(`${projectRoot}${sep}`);
 }
 
@@ -5895,7 +5944,7 @@ function ensureSidecarWritesAllowed(opts) {
 
 // kernel/sidecar/store.ts
 import { existsSync as existsSync6, readFileSync as readFileSync7 } from "fs";
-import { dirname as dirname5, resolve as resolve7 } from "path";
+import { dirname as dirname6, resolve as resolve8 } from "path";
 import { createRequire as createRequire4 } from "module";
 import { Ajv2020 as Ajv20204 } from "ajv/dist/2020.js";
 import yaml2 from "js-yaml";
@@ -6003,10 +6052,10 @@ function getSidecarValidator2() {
   applyAjvFormats(ajv);
   const specRoot = resolveSpecRoot3();
   const annotationsSchema = JSON.parse(
-    readFileSync7(resolve7(specRoot, "schemas/annotations.schema.json"), "utf8")
+    readFileSync7(resolve8(specRoot, "schemas/annotations.schema.json"), "utf8")
   );
   const sidecarSchema = JSON.parse(
-    readFileSync7(resolve7(specRoot, "schemas/sidecar.schema.json"), "utf8")
+    readFileSync7(resolve8(specRoot, "schemas/sidecar.schema.json"), "utf8")
   );
   ajv.addSchema(annotationsSchema);
   cachedValidator = ajv.compile(sidecarSchema);
@@ -6016,7 +6065,7 @@ function resolveSpecRoot3() {
   const require2 = createRequire4(import.meta.url);
   try {
     const indexPath = require2.resolve("@skill-map/spec/index.json");
-    return dirname5(indexPath);
+    return dirname6(indexPath);
   } catch {
     throw new Error("@skill-map/spec not resolvable: sidecar store cannot load schemas.");
   }
@@ -6126,12 +6175,12 @@ async function confirm(question, streams, opts) {
 // cli/util/git.ts
 import { spawnSync } from "child_process";
 import { existsSync as existsSync7 } from "fs";
-import { dirname as dirname6, resolve as resolve8 } from "path";
+import { dirname as dirname7, resolve as resolve9 } from "path";
 function isInsideGitRepo(cwd) {
   let current = cwd;
   while (true) {
-    if (existsSync7(resolve8(current, ".git"))) return true;
-    const parent = dirname6(current);
+    if (existsSync7(resolve9(current, ".git"))) return true;
+    const parent = dirname7(current);
     if (parent === current) return false;
     current = parent;
   }
@@ -6329,7 +6378,7 @@ import { existsSync as existsSync11 } from "fs";
 
 // kernel/adapters/sqlite/storage-adapter.ts
 import { mkdirSync as mkdirSync4 } from "fs";
-import { dirname as dirname8, resolve as resolve11 } from "path";
+import { dirname as dirname9, resolve as resolve12 } from "path";
 import { DatabaseSync as DatabaseSync4 } from "node:sqlite";
 import { CamelCasePlugin, Kysely, sql as sql4 } from "kysely";
 
@@ -6462,7 +6511,7 @@ var AsyncMutex = class {
       this.#locked = true;
       return;
     }
-    await new Promise((resolve44) => this.#waiters.push(resolve44));
+    await new Promise((resolve45) => this.#waiters.push(resolve45));
     this.#locked = true;
   }
   unlock() {
@@ -6888,7 +6937,7 @@ async function migrateNodeFavorites(trx, fromPath, toPath, report) {
 }
 
 // kernel/adapters/sqlite/jobs.ts
-import { resolve as resolve9 } from "path";
+import { resolve as resolve10 } from "path";
 async function pruneTerminalJobs(db, status, cutoffMs) {
   const rows = await db.selectFrom("state_jobs").select(["id", "filePath"]).where("status", "=", status).where("finishedAt", "is not", null).where("finishedAt", "<", cutoffMs).execute();
   if (rows.length === 0) {
@@ -6903,14 +6952,14 @@ async function selectReferencedJobFilePaths(db) {
   const rows = await db.selectFrom("state_jobs").select(["filePath"]).where("filePath", "is not", null).execute();
   const out = /* @__PURE__ */ new Set();
   for (const row of rows) {
-    if (row.filePath !== null) out.add(resolve9(row.filePath));
+    if (row.filePath !== null) out.add(resolve10(row.filePath));
   }
   return out;
 }
 
 // kernel/adapters/sqlite/migrations.ts
 import { copyFileSync, existsSync as existsSync8, mkdirSync as mkdirSync3, readFileSync as readFileSync8, readdirSync as readdirSync2 } from "fs";
-import { dirname as dirname7, join as join5, resolve as resolve10 } from "path";
+import { dirname as dirname8, join as join5, resolve as resolve11 } from "path";
 import { DatabaseSync as DatabaseSync2 } from "node:sqlite";
 import { fileURLToPath } from "url";
 
@@ -6924,10 +6973,10 @@ var MIGRATIONS_TEXTS = {
 // kernel/adapters/sqlite/migrations.ts
 var FILE_RE = /^(\d{3})_([a-z0-9_]+)\.sql$/;
 function defaultMigrationsDir() {
-  const here = dirname7(fileURLToPath(import.meta.url));
-  const flatLayout = resolve10(here, "migrations");
+  const here = dirname8(fileURLToPath(import.meta.url));
+  const flatLayout = resolve11(here, "migrations");
   if (existsSync8(flatLayout)) return flatLayout;
-  return resolve10(here, "..", "..", "..", "migrations");
+  return resolve11(here, "..", "..", "..", "migrations");
 }
 function discoverMigrations(dir = defaultMigrationsDir()) {
   if (!existsSync8(dir)) return [];
@@ -6997,7 +7046,7 @@ function resolveMigrationTarget(to, files) {
 function writePreMigrateBackup(dbPath, target) {
   return writeBackup(
     dbPath,
-    join5(dirname7(resolve10(dbPath)), "backups", `skill-map-pre-migrate-v${target}.db`)
+    join5(kernelBackupsDir(dbPath), `skill-map-pre-migrate-v${target}.db`)
   );
 }
 function applyOneMigration(db, migration) {
@@ -7032,9 +7081,9 @@ function applyOneMigration(db, migration) {
 }
 function writeBackup(dbPath, destPath) {
   if (dbPath === ":memory:") return null;
-  const absoluteSource = resolve10(dbPath);
-  const absoluteDest = resolve10(destPath);
-  mkdirSync3(dirname7(absoluteDest), { recursive: true });
+  const absoluteSource = resolve11(dbPath);
+  const absoluteDest = resolve11(destPath);
+  mkdirSync3(dirname8(absoluteDest), { recursive: true });
   const db = new DatabaseSync2(absoluteSource);
   try {
     db.exec("PRAGMA wal_checkpoint(TRUNCATE)");
@@ -8671,8 +8720,8 @@ var SqliteStorageAdapter = class {
     if (this.#db) return;
     const path = this.#options.databasePath;
     if (path !== ":memory:") {
-      const absolute = resolve11(path);
-      mkdirSync4(dirname8(absolute), { recursive: true });
+      const absolute = resolve12(path);
+      mkdirSync4(dirname9(absolute), { recursive: true });
     }
     if (this.#options.autoMigrate !== false) {
       const files = discoverMigrations();
@@ -9280,16 +9329,16 @@ async function tryWithSqlite(options, fn) {
 }
 
 // cli/commands/bump-plan.ts
-import { resolve as resolve13 } from "path";
+import { resolve as resolve14 } from "path";
 
 // core/paths/path-guard.ts
 import { lstatSync } from "fs";
-import { isAbsolute as isAbsolute2, resolve as resolve12, sep as sep2 } from "path";
+import { isAbsolute as isAbsolute2, resolve as resolve13, sep as sep2 } from "path";
 function assertContained(cwd, rel) {
   if (isAbsolute2(rel)) {
     throw new Error(`node path is absolute, refusing to read: ${rel}`);
   }
-  const abs = resolve12(cwd, rel);
+  const abs = resolve13(cwd, rel);
   if (abs !== cwd && !abs.startsWith(cwd + sep2)) {
     throw new Error(`node path escapes repo root: ${rel}`);
   }
@@ -9324,7 +9373,7 @@ function planOne(node, options, invoker) {
   let absPath;
   try {
     assertContained(options.cwd, node.path);
-    absPath = resolve13(options.cwd, node.path);
+    absPath = resolve14(options.cwd, node.path);
   } catch (err) {
     return {
       nodePath: node.path,
@@ -9966,18 +10015,18 @@ var PLUGIN_LOADER_TEXTS = {
 // kernel/adapters/plugin-loader/index.ts
 import { createRequire as createRequire5 } from "module";
 import { existsSync as existsSync13, readFileSync as readFileSync13, readdirSync as readdirSync5, statSync as statSync2 } from "fs";
-import { join as join8, resolve as resolve16 } from "path";
+import { join as join8, resolve as resolve17 } from "path";
 import { pathToFileURL } from "url";
 import semver from "semver";
 
 // kernel/adapters/plugin-loader/id-utils.ts
-import { isAbsolute as isAbsolute3, relative, resolve as resolve14 } from "path";
+import { isAbsolute as isAbsolute3, relative, resolve as resolve15 } from "path";
 function fail(path, id, status, reason) {
   return { path, id, status, reason };
 }
 function isInsidePlugin(pluginPath, relEntry) {
   if (isAbsolute3(relEntry)) return false;
-  const abs = resolve14(pluginPath, relEntry);
+  const abs = resolve15(pluginPath, relEntry);
   const rel = relative(pluginPath, abs);
   if (rel === "") return true;
   if (rel.startsWith("..")) return false;
@@ -10069,7 +10118,7 @@ function stripFunctionsAndPluginId(input) {
 // kernel/adapters/plugin-loader/validation.ts
 import * as nodeFs from "fs";
 import { existsSync as existsSync12 } from "fs";
-import { dirname as dirname9, join as join7 } from "path";
+import { dirname as dirname10, join as join7 } from "path";
 import { Ajv2020 as Ajv20205 } from "ajv/dist/2020.js";
 
 // kernel/extensions/hook.ts
@@ -10190,7 +10239,7 @@ function validateHookTriggers(pluginPath, pluginId, manifest, relEntry, exported
   return null;
 }
 function validateActionFileConventions(pluginPath, pluginId, manifest, relEntry, entryAbsPath, manifestView) {
-  const actionDir = dirname9(entryAbsPath);
+  const actionDir = dirname10(entryAbsPath);
   const reportSchemaPath = join7(actionDir, "report.schema.json");
   const promptPath = join7(actionDir, "prompt.md");
   const mode = isRecord(manifestView) && typeof manifestView["mode"] === "string" ? manifestView["mode"] : "deterministic";
@@ -10318,7 +10367,7 @@ function isDirectorySafe(path, statSync13) {
 
 // kernel/adapters/plugin-loader/storage-schemas.ts
 import { readFileSync as readFileSync12 } from "fs";
-import { resolve as resolve15 } from "path";
+import { resolve as resolve16 } from "path";
 import { Ajv2020 as Ajv20206 } from "ajv/dist/2020.js";
 
 // kernel/adapters/plugin-store.ts
@@ -10382,7 +10431,7 @@ function compilePluginSchema(pluginPath, relPath) {
       errDescription: tx(PLUGIN_LOADER_TEXTS.loadErrorSchemaPathEscapesPlugin, { relPath, pluginPath })
     };
   }
-  const abs = resolve15(pluginPath, relPath);
+  const abs = resolve16(pluginPath, relPath);
   let raw;
   try {
     raw = JSON.parse(readFileSync12(abs, "utf8"));
@@ -10424,7 +10473,7 @@ var PluginLoader = class {
         if (!entry.isDirectory()) continue;
         const candidate = join8(root, entry.name);
         if (existsSync13(join8(candidate, "plugin.json"))) {
-          out.push(resolve16(candidate));
+          out.push(resolve17(candidate));
         }
       }
     }
@@ -10583,7 +10632,7 @@ var PluginLoader = class {
         manifest
       } };
     }
-    const abs = resolve16(pluginPath, relEntry);
+    const abs = resolve17(pluginPath, relEntry);
     if (!existsSync13(abs)) {
       return { ok: false, failure: {
         ...fail(
@@ -10787,7 +10836,7 @@ function discoverExtensionEntries(pluginPath) {
   return out;
 }
 function collectKindEntries(pluginPath, kindDir, out) {
-  const kindAbs = resolve16(pluginPath, kindDir);
+  const kindAbs = resolve17(pluginPath, kindDir);
   if (!existsSync13(kindAbs)) return;
   let entries;
   try {
@@ -10798,7 +10847,7 @@ function collectKindEntries(pluginPath, kindDir, out) {
   entries.sort();
   for (const entry of entries) {
     if (entry.startsWith(".")) continue;
-    const entryAbs = resolve16(kindAbs, entry);
+    const entryAbs = resolve17(kindAbs, entry);
     if (!isDirectorySafe2(entryAbs)) continue;
     const candidate = findIndexCandidate(entryAbs);
     if (candidate !== null) {
@@ -10815,14 +10864,14 @@ function isDirectorySafe2(path) {
 }
 function findIndexCandidate(entryAbs) {
   for (const candidate of INDEX_CANDIDATES) {
-    if (existsSync13(resolve16(entryAbs, candidate))) return candidate;
+    if (existsSync13(resolve17(entryAbs, candidate))) return candidate;
   }
   return null;
 }
 function installedSpecVersion() {
   const require2 = createRequire5(import.meta.url);
   const indexPath = require2.resolve("@skill-map/spec/index.json");
-  const pkgPath = resolve16(indexPath, "..", "package.json");
+  const pkgPath = resolve17(indexPath, "..", "package.json");
   const pkg = JSON.parse(readFileSync13(pkgPath, "utf8"));
   return pkg.version;
 }
@@ -10835,6 +10884,13 @@ var LOCKED_PLUGIN_IDS = /* @__PURE__ */ new Set([
   // silently invisible, a foot-gun the host product does not want to
   // expose. Lock it in the enabled state.
   "core/markdown",
+  // `agent-skills/agent-skills` is the open-standard default lens: the lens
+  // a project falls back to when no vendor marker is present (see
+  // spec/architecture.md §Active Provider Lens). Locking it enabled
+  // guarantees the resolver always has a valid floor lens to resolve to;
+  // disabling it would leave a no-vendor project with no selectable lens.
+  // Stable, so the lock is legitimate (nothing experimental is lockable).
+  "agent-skills/agent-skills",
   // `core/schema-violation` validates every scanned Node against
   // `node.schema.json` and every Link against `link.schema.json` (the
   // authoritative @skill-map/spec). Disabling it makes the system
@@ -10907,11 +10963,11 @@ async function buildEnabledResolver(ctx) {
 
 // kernel/scan/walk-content.ts
 import { readFile, readdir, lstat } from "fs/promises";
-import { isAbsolute as isAbsolute4, join as join9, relative as relative2, resolve as resolve18, sep as sep3 } from "path";
+import { isAbsolute as isAbsolute4, join as join9, relative as relative2, resolve as resolve19, sep as sep3 } from "path";
 
 // kernel/scan/ignore.ts
 import { existsSync as existsSync14, readFileSync as readFileSync14 } from "fs";
-import { dirname as dirname10, resolve as resolve17 } from "path";
+import { dirname as dirname11, resolve as resolve18 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import ignoreFactory from "ignore";
 function buildIgnoreFilter(opts = {}) {
@@ -10940,7 +10996,7 @@ function loadBundledIgnoreText() {
   return loadDefaultsText();
 }
 function readIgnoreFileText(scopeRoot) {
-  const path = resolve17(scopeRoot, ".skillmapignore");
+  const path = resolve18(scopeRoot, ".skillmapignore");
   if (!existsSync14(path)) return void 0;
   try {
     return readFileSync14(path, "utf8");
@@ -10967,13 +11023,13 @@ function loadDefaultsText() {
   return cachedDefaults;
 }
 function readDefaultsFromDisk() {
-  const here = dirname10(fileURLToPath2(import.meta.url));
+  const here = dirname11(fileURLToPath2(import.meta.url));
   const candidates = [
-    resolve17(here, "../../config/defaults/skillmapignore"),
+    resolve18(here, "../../config/defaults/skillmapignore"),
     // src/kernel/scan/ → src/config/defaults/
-    resolve17(here, "../config/defaults/skillmapignore"),
+    resolve18(here, "../config/defaults/skillmapignore"),
     // dist/cli.js → dist/config/defaults/ (siblings)
-    resolve17(here, "config/defaults/skillmapignore")
+    resolve18(here, "config/defaults/skillmapignore")
   ];
   for (const candidate of candidates) {
     if (existsSync14(candidate)) {
@@ -11087,24 +11143,31 @@ async function* walkContent(roots, options) {
   const filter = options.ignoreFilter ?? buildIgnoreFilter();
   const extensions = options.extensions;
   const sizeLimit = buildSizeLimit(options);
+  const bodyField = options.bodyField;
   if (options.scopedPaths !== void 0) {
-    yield* walkScoped(roots, options.scopedPaths, extensions, sizeLimit, parser);
+    yield* walkScoped(roots, options.scopedPaths, extensions, sizeLimit, parser, bodyField);
     return;
   }
   for (const root of roots) {
     for await (const entry of walkRoot(root, root, filter, extensions, sizeLimit)) {
       const relPath = relative2(root, entry.full).split(sep3).join("/");
-      const rec = await traversedEntryToNode(entry, relPath, options.priorMtimes, parser);
+      const rec = await traversedEntryToNode(
+        entry,
+        relPath,
+        options.priorMtimes,
+        parser,
+        bodyField
+      );
       if (rec !== null) yield rec;
     }
   }
 }
-async function traversedEntryToNode(entry, relPath, priorMtimes, parser) {
+async function traversedEntryToNode(entry, relPath, priorMtimes, parser, bodyField) {
   const priorMtime = priorMtimes?.get(relPath);
   if (priorMtime !== void 0 && priorMtime === entry.modifiedAtMs) {
-    return buildUnchangedRecord(entry.full, relPath, entry.modifiedAtMs, parser);
+    return buildUnchangedRecord(entry.full, relPath, entry.modifiedAtMs, parser, bodyField);
   }
-  const parsed = await readAndParse(entry.full, relPath, parser);
+  const parsed = await readAndParse(entry.full, relPath, parser, bodyField);
   if (parsed === null) return null;
   return {
     path: relPath,
@@ -11121,7 +11184,7 @@ async function traversedEntryToNode(entry, relPath, priorMtimes, parser) {
     ...parsed.parseIssues ? { parseIssues: parsed.parseIssues } : {}
   };
 }
-function buildUnchangedRecord(full, relPath, modifiedAtMs, parser) {
+function buildUnchangedRecord(full, relPath, modifiedAtMs, parser, bodyField) {
   return {
     path: relPath,
     body: "",
@@ -11130,26 +11193,26 @@ function buildUnchangedRecord(full, relPath, modifiedAtMs, parser) {
     modifiedAtMs,
     unchanged: true,
     reread: async () => {
-      const re = await readAndParse(full, relPath, parser);
+      const re = await readAndParse(full, relPath, parser, bodyField);
       return re ?? { body: "", frontmatterRaw: "", frontmatter: {} };
     }
   };
 }
-async function* walkScoped(roots, scopedPaths, extensions, sizeLimit, parser) {
-  const absRoots = roots.map((r) => isAbsolute4(r) ? r : resolve18(r));
+async function* walkScoped(roots, scopedPaths, extensions, sizeLimit, parser, bodyField) {
+  const absRoots = roots.map((r) => isAbsolute4(r) ? r : resolve19(r));
   for (const scoped of scopedPaths) {
-    const rec = await scopedPathToNode(scoped, absRoots, extensions, sizeLimit, parser);
+    const rec = await scopedPathToNode(scoped, absRoots, extensions, sizeLimit, parser, bodyField);
     if (rec !== null) yield rec;
   }
 }
-async function scopedPathToNode(scoped, absRoots, extensions, sizeLimit, parser) {
-  const full = isAbsolute4(scoped) ? scoped : resolve18(scoped);
+async function scopedPathToNode(scoped, absRoots, extensions, sizeLimit, parser, bodyField) {
+  const full = isAbsolute4(scoped) ? scoped : resolve19(scoped);
   const relPath = relativeFromRoots(full, absRoots);
   if (relPath === null) return null;
   if (!hasMatchingExtension(full, extensions)) return null;
   const s = await statRegularFile(full, relPath, sizeLimit);
   if (s === null) return null;
-  const parsed = await readAndParse(full, relPath, parser);
+  const parsed = await readAndParse(full, relPath, parser, bodyField);
   if (parsed === null) return null;
   return {
     path: relPath,
@@ -11182,7 +11245,7 @@ function relativeFromRoots(full, absRoots) {
   }
   return null;
 }
-async function readAndParse(full, relPath, parser) {
+async function readAndParse(full, relPath, parser, bodyField) {
   let raw;
   try {
     raw = await readFile(full, "utf8");
@@ -11191,12 +11254,19 @@ async function readAndParse(full, relPath, parser) {
   }
   const parsed = parser.parse(raw, relPath);
   return {
-    body: parsed.body,
+    body: resolveEffectiveBody(parsed.body, parsed.frontmatter, bodyField),
     frontmatterRaw: parsed.frontmatterRaw,
     frontmatter: parsed.frontmatter,
     ...parsed.issues && parsed.issues.length > 0 ? { parseIssues: parsed.issues } : {}
   };
 }
+function resolveEffectiveBody(parsedBody, frontmatter, bodyField) {
+  if (bodyField !== void 0) {
+    const candidate = frontmatter[bodyField];
+    if (typeof candidate === "string") return candidate;
+  }
+  return parsedBody;
+}
 function buildSizeLimit(options) {
   const sizeLimit = {};
   if (options.maxFileSizeBytes !== void 0) {
@@ -11252,13 +11322,19 @@ function resolveProviderWalk(provider) {
     return walk3;
   }
   const read = provider.read ?? DEFAULT_READ_CONFIG;
-  return (roots, options) => walkContent(roots, buildWalkContentOptions(read, options));
+  const rules = Array.isArray(read) ? read : [read];
+  return async function* walkRules(roots, options) {
+    for (const rule of rules) {
+      yield* walkContent(roots, buildWalkContentOptions(rule, options));
+    }
+  };
 }
 function buildWalkContentOptions(read, options) {
   const walkOptions = {
     extensions: read.extensions,
     parser: read.parser
   };
+  if (read.bodyField !== void 0) walkOptions.bodyField = read.bodyField;
   if (options) copyOptionalWalkOptions(walkOptions, options);
   return walkOptions;
 }
@@ -11359,7 +11435,7 @@ function isExtensionInstance(v) {
 }
 
 // core/runtime/plugin-runtime/warnings.ts
-import { resolve as resolve19 } from "path";
+import { resolve as resolve20 } from "path";
 
 // kernel/util/text.ts
 function truncateHead(s, max) {
@@ -11409,7 +11485,7 @@ function resolveRuntimeContext(opts) {
   return opts.runtimeContext ?? defaultRuntimeContext();
 }
 function resolveSearchPaths(opts, ctx) {
-  if (opts.pluginDir) return [resolve19(opts.pluginDir)];
+  if (opts.pluginDir) return [resolve20(opts.pluginDir)];
   return [defaultProjectPluginsDir(ctx)];
 }
 
@@ -11947,17 +12023,18 @@ function isDetectableUnderCwd(cwd, provider) {
 }
 
 // core/config/active-provider.ts
-var MARKDOWN_LENS_ID = "markdown";
+var DEFAULT_LENS_ID = "agent-skills";
+var MARKDOWN_BASE_ID = "markdown";
 function resolveActiveProvider(cwd, providers = []) {
   const detected = detectProvidersFromFilesystem(cwd, providers);
   const fromConfig = readConfigValue("activeProvider", { cwd });
-  if (typeof fromConfig === "string" && fromConfig.length > 0) {
+  if (typeof fromConfig === "string" && fromConfig.length > 0 && fromConfig !== MARKDOWN_BASE_ID) {
     return { resolved: fromConfig, source: "config", detected };
   }
   if (detected.length > 0) {
     return { resolved: detected[0], source: "autodetect", detected };
   }
-  return { resolved: MARKDOWN_LENS_ID, source: "default", detected };
+  return { resolved: DEFAULT_LENS_ID, source: "default", detected };
 }
 
 // cli/util/path-display.ts
@@ -12689,7 +12766,7 @@ var CONFIG_COMMANDS = [
 
 // cli/commands/conformance.ts
 import { existsSync as existsSync19, readFileSync as readFileSync16 } from "fs";
-import { dirname as dirname12, resolve as resolve22 } from "path";
+import { dirname as dirname13, resolve as resolve23 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 import { Command as Command5, Option as Option5 } from "clipanion";
 
@@ -12697,7 +12774,7 @@ import { Command as Command5, Option as Option5 } from "clipanion";
 import { spawnSync as spawnSync2 } from "child_process";
 import { cpSync, existsSync as existsSync17, mkdtempSync, readdirSync as readdirSync6, readFileSync as readFileSync15, rmSync, statSync as statSync3 } from "fs";
 import { tmpdir } from "os";
-import { isAbsolute as isAbsolute6, join as join11, relative as relative3, resolve as resolve20 } from "path";
+import { isAbsolute as isAbsolute6, join as join11, relative as relative3, resolve as resolve21 } from "path";
 
 // conformance/i18n/runner.texts.ts
 var CONFORMANCE_RUNNER_TEXTS = {
@@ -12864,7 +12941,7 @@ function assertContained2(root, rel, label) {
       tx(CONFORMANCE_RUNNER_TEXTS.pathMustBeRelative, { label, path: rel, anchor: root })
     );
   }
-  const abs = resolve20(root, rel);
+  const abs = resolve21(root, rel);
   const r = relative3(root, abs);
   if (r.startsWith("..") || isAbsolute6(r)) {
     throw new Error(
@@ -12891,7 +12968,7 @@ function evaluateAssertion(a, ctx) {
       } catch (err) {
         return { ok: false, type: a.type, reason: formatErrorMessage(err) };
       }
-      const abs = resolve20(ctx.scope, a.path);
+      const abs = resolve21(ctx.scope, a.path);
       return existsSync17(abs) ? { ok: true, type: a.type } : {
         ok: false,
         type: a.type,
@@ -12906,7 +12983,7 @@ function evaluateAssertion(a, ctx) {
         return { ok: false, type: a.type, reason: formatErrorMessage(err) };
       }
       const fixturePath = join11(ctx.fixturesRoot, a.fixture);
-      const targetPath = resolve20(ctx.scope, a.path);
+      const targetPath = resolve21(ctx.scope, a.path);
       if (!existsSync17(targetPath)) {
         return {
           ok: false,
@@ -13089,14 +13166,14 @@ var CONFORMANCE_TEXTS = {
 
 // cli/util/conformance-scopes.ts
 import { existsSync as existsSync18, readdirSync as readdirSync7, statSync as statSync4 } from "fs";
-import { dirname as dirname11, resolve as resolve21 } from "path";
+import { dirname as dirname12, resolve as resolve22 } from "path";
 import { createRequire as createRequire6 } from "module";
 import { fileURLToPath as fileURLToPath3 } from "url";
 function resolveSpecRoot4() {
   const require2 = createRequire6(import.meta.url);
   try {
     const indexPath = require2.resolve("@skill-map/spec/index.json");
-    return dirname11(indexPath);
+    return dirname12(indexPath);
   } catch {
     throw new Error(
       "@skill-map/spec not resolvable: ensure the workspace is linked or the package is installed."
@@ -13104,14 +13181,14 @@ function resolveSpecRoot4() {
   }
 }
 function resolveCliWorkspaceRoot() {
-  const here = dirname11(fileURLToPath3(import.meta.url));
+  const here = dirname12(fileURLToPath3(import.meta.url));
   let cursor = here;
   for (let depth = 0; depth < 6; depth += 1) {
-    const candidate = resolve21(cursor, "plugins");
+    const candidate = resolve22(cursor, "plugins");
     if (existsSync18(candidate) && statSync4(candidate).isDirectory()) {
       return cursor;
     }
-    const parent = dirname11(cursor);
+    const parent = dirname12(cursor);
     if (parent === cursor) break;
     cursor = parent;
   }
@@ -13127,12 +13204,12 @@ function collectProviderScopes(specRoot) {
   } catch {
     return out;
   }
-  const pluginsRoot = resolve21(workspaceRoot, "plugins");
+  const pluginsRoot = resolve22(workspaceRoot, "plugins");
   if (!existsSync18(pluginsRoot)) return out;
   for (const pluginEntry of readdirSync7(pluginsRoot)) {
-    const pluginDir = resolve21(pluginsRoot, pluginEntry);
+    const pluginDir = resolve22(pluginsRoot, pluginEntry);
     if (!isDir(pluginDir)) continue;
-    const providersRoot = resolve21(pluginDir, "providers");
+    const providersRoot = resolve22(pluginDir, "providers");
     if (!isDir(providersRoot)) continue;
     collectPluginProviderScopes(providersRoot, specRoot, out);
   }
@@ -13147,12 +13224,12 @@ function isDir(path) {
 }
 function collectPluginProviderScopes(providersRoot, specRoot, out) {
   for (const entry of readdirSync7(providersRoot)) {
-    const providerDir = resolve21(providersRoot, entry);
+    const providerDir = resolve22(providersRoot, entry);
     if (!isDir(providerDir)) continue;
-    const conformanceDir = resolve21(providerDir, "conformance");
+    const conformanceDir = resolve22(providerDir, "conformance");
     if (!existsSync18(conformanceDir)) continue;
-    const casesDir = resolve21(conformanceDir, "cases");
-    const fixturesDir = resolve21(conformanceDir, "fixtures");
+    const casesDir = resolve22(conformanceDir, "cases");
+    const fixturesDir = resolve22(conformanceDir, "fixtures");
     if (!existsSync18(casesDir) || !existsSync18(fixturesDir)) continue;
     out.push({
       id: `provider:${entry}`,
@@ -13169,8 +13246,8 @@ function specScope(specRoot) {
     id: "spec",
     kind: "spec",
     label: "spec",
-    casesDir: resolve21(specRoot, "conformance", "cases"),
-    fixturesDir: resolve21(specRoot, "conformance", "fixtures"),
+    casesDir: resolve22(specRoot, "conformance", "cases"),
+    fixturesDir: resolve22(specRoot, "conformance", "fixtures"),
     specRoot
   };
 }
@@ -13192,7 +13269,7 @@ function selectConformanceScopes(scope) {
 }
 function listCaseFiles(scope) {
   if (!existsSync18(scope.casesDir)) return [];
-  return readdirSync7(scope.casesDir).filter((entry) => entry.endsWith(".json")).sort().map((entry) => resolve21(scope.casesDir, entry));
+  return readdirSync7(scope.casesDir).filter((entry) => entry.endsWith(".json")).sort().map((entry) => resolve22(scope.casesDir, entry));
 }
 
 // cli/commands/conformance.ts
@@ -13206,16 +13283,16 @@ function formatAssertionFailureDetail(type, reason) {
   });
 }
 function resolveBinary() {
-  const here = dirname12(fileURLToPath4(import.meta.url));
+  const here = dirname13(fileURLToPath4(import.meta.url));
   let cursor = here;
   for (let depth = 0; depth < 6; depth += 1) {
-    const candidate = resolve22(cursor, "bin", "sm.js");
+    const candidate = resolve23(cursor, "bin", "sm.js");
     if (existsSync19(candidate)) return candidate;
-    const parent = dirname12(cursor);
+    const parent = dirname13(cursor);
     if (parent === cursor) break;
     cursor = parent;
   }
-  return resolve22(here, "..", "..", "bin", "sm.js");
+  return resolve23(here, "..", "..", "bin", "sm.js");
 }
 var ConformanceRunCommand = class extends SmCommand {
   static paths = [["conformance", "run"]];
@@ -13468,7 +13545,7 @@ function writeStreamSnippet(stream, header, text) {
 var CONFORMANCE_COMMANDS = [ConformanceRunCommand];
 
 // cli/commands/db/backup.ts
-import { dirname as dirname13, join as join12, resolve as resolve23 } from "path";
+import { join as join12, resolve as resolve24 } from "path";
 import { Command as Command6, Option as Option6 } from "clipanion";
 
 // cli/i18n/db.texts.ts
@@ -13581,7 +13658,7 @@ var DbBackupCommand = class extends SmCommand {
     const exit = requireDbOrExit(path, this.context.stderr);
     if (exit !== null) return exit;
     const ts = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-    const outPath = this.out ? resolve23(this.out) : join12(dirname13(path), "backups", `${ts}.db`);
+    const outPath = this.out ? resolve24(this.out) : join12(backupsDirForDb(path), `${ts}.db`);
     await withSqlite({ databasePath: path, autoMigrate: false }, async (storage) => {
       storage.migrations.writeBackup(outPath);
     });
@@ -13598,7 +13675,7 @@ var DbBackupCommand = class extends SmCommand {
 
 // cli/commands/db/restore.ts
 import { chmod, copyFile, mkdir, rm } from "fs/promises";
-import { dirname as dirname14, resolve as resolve24 } from "path";
+import { dirname as dirname14, resolve as resolve25 } from "path";
 import { Command as Command7, Option as Option7 } from "clipanion";
 
 // cli/util/fs.ts
@@ -13648,7 +13725,7 @@ var DbRestoreCommand = class extends SmCommand {
   });
   async run() {
     const target = resolveDbPath({ db: this.db, ...defaultRuntimeContext() });
-    const sourcePath = resolve24(this.source);
+    const sourcePath = resolve25(this.source);
     const stderrAnsi = this.ansiFor("stderr");
     const sourceStat = await statOrNull(sourcePath);
     if (!sourceStat) {
@@ -13889,7 +13966,7 @@ var DbShellCommand = class extends SmCommand {
 
 // cli/commands/db/browser.ts
 import { spawn, spawnSync as spawnSync4 } from "child_process";
-import { resolve as resolve25 } from "path";
+import { resolve as resolve26 } from "path";
 import { Command as Command10, Option as Option9 } from "clipanion";
 var DbBrowserCommand = class extends SmCommand {
   static paths = [["db", "browser"]];
@@ -13922,7 +13999,7 @@ var DbBrowserCommand = class extends SmCommand {
   });
   positional = Option9.String({ required: false });
   async run() {
-    const path = this.positional ? resolve25(this.positional) : resolveDbPath({ db: this.db, ...defaultRuntimeContext() });
+    const path = this.positional ? resolve26(this.positional) : resolveDbPath({ db: this.db, ...defaultRuntimeContext() });
     if (!assertDbExists(path, this.context.stderr)) {
       this.printer.error(DB_TEXTS.browserRunScanFirstHint);
       return ExitCode.NotFound;
@@ -14323,7 +14400,7 @@ var DB_COMMANDS = [
 
 // cli/commands/example.ts
 import { cpSync as cpSync2, existsSync as existsSync21, statSync as statSync5 } from "fs";
-import { dirname as dirname16, relative as relative5, resolve as resolve26 } from "path";
+import { dirname as dirname16, relative as relative5, resolve as resolve27 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
 import { Command as Command13, Option as Option12 } from "clipanion";
 
@@ -14619,11 +14696,11 @@ function resolveExampleSourceDir() {
   const here = dirname16(fileURLToPath5(import.meta.url));
   const candidates = [
     // dev: src/cli/commands/ → repo-root fixtures/demo-scope/
-    resolve26(here, "../../..", EXAMPLE_SOURCE_DIR),
+    resolve27(here, "../../..", EXAMPLE_SOURCE_DIR),
     // bundled: dist/cli.js → dist/cli/example (sibling)
-    resolve26(here, "cli/example"),
+    resolve27(here, "cli/example"),
     // bundled fallback: any-depth → cli/example
-    resolve26(here, "../cli/example")
+    resolve27(here, "../cli/example")
   ];
   for (const candidate of candidates) {
     if (existsSync21(candidate) && statSync5(candidate).isDirectory()) {
@@ -15160,7 +15237,7 @@ var GraphCommand = class extends SmCommand {
 // cli/commands/help.ts
 import { readFileSync as readFileSync17 } from "fs";
 import { createRequire as createRequire7 } from "module";
-import { resolve as resolve27 } from "path";
+import { resolve as resolve28 } from "path";
 import { Command as Command16, Option as Option15 } from "clipanion";
 
 // cli/i18n/help.texts.ts
@@ -15474,7 +15551,7 @@ function resolveSpecVersion() {
   try {
     const req = createRequire7(import.meta.url);
     const indexPath = req.resolve("@skill-map/spec/index.json");
-    const pkgPath = resolve27(indexPath, "..", "package.json");
+    const pkgPath = resolve28(indexPath, "..", "package.json");
     const pkg = JSON.parse(readFileSync17(pkgPath, "utf8"));
     return pkg.version;
   } catch {
@@ -15782,7 +15859,7 @@ function registeredVerbPaths(cli2) {
 
 // cli/commands/hooks.ts
 import { chmod as chmod2, mkdir as mkdir3, readFile as readFile2, stat as stat2, writeFile } from "fs/promises";
-import { dirname as dirname17, resolve as resolve28 } from "path";
+import { dirname as dirname17, resolve as resolve29 } from "path";
 import { Command as Command17, Option as Option16 } from "clipanion";
 
 // cli/i18n/hooks.texts.ts
@@ -15885,8 +15962,8 @@ var HooksInstallCommand = class extends SmCommand {
       );
       return ExitCode.NotFound;
     }
-    const hooksDir = resolve28(repoRoot, ".git", "hooks");
-    const hookPath = resolve28(hooksDir, "pre-commit");
+    const hooksDir = resolve29(repoRoot, ".git", "hooks");
+    const hookPath = resolve29(hooksDir, "pre-commit");
     const existing = await pathExists(hookPath) ? await readFile2(hookPath, "utf8") : null;
     const planned2 = computePlannedHookContent(existing);
     if (planned2.kind === "already-installed") {
@@ -15944,7 +16021,7 @@ var HooksInstallCommand = class extends SmCommand {
 async function findGitRepoRoot(cwd) {
   let current = cwd;
   while (true) {
-    if (await pathExists(resolve28(current, ".git"))) return current;
+    if (await pathExists(resolve29(current, ".git"))) return current;
     const parent = dirname17(current);
     if (parent === current) return null;
     current = parent;
@@ -15971,7 +16048,7 @@ import { Command as Command18, Option as Option17 } from "clipanion";
 
 // kernel/orchestrator/index.ts
 import { existsSync as existsSync24, statSync as statSync7 } from "fs";
-import { isAbsolute as isAbsolute10, resolve as resolve31 } from "path";
+import { isAbsolute as isAbsolute10, resolve as resolve32 } from "path";
 import { Tiktoken as Tiktoken2 } from "js-tiktoken/lite";
 
 // kernel/i18n/orchestrator.texts.ts
@@ -16659,6 +16736,13 @@ function validateIssue(analyzer, issue, emitter) {
   return { ...issue, analyzerId: issue.analyzerId || analyzer.id };
 }
 
+// kernel/orchestrator/frontmatter-issue-ids.ts
+var FRONTMATTER_ISSUE_ANALYZERS = /* @__PURE__ */ new Set([
+  "frontmatter-invalid",
+  "frontmatter-malformed",
+  "frontmatter-parse-error"
+]);
+
 // kernel/orchestrator/cache.ts
 function indexPriorSnapshot(prior) {
   const priorNodesByPath = /* @__PURE__ */ new Map();
@@ -16916,7 +17000,7 @@ function collectBrokenLinks(links, nodes, ctx) {
   return broken;
 }
 function applyResolution(link, indexes, ctx) {
-  const resolution = resolve29(link, indexes, ctx);
+  const resolution = resolve30(link, indexes, ctx);
   if (resolution === "none") return;
   link.resolvedTarget = resolution;
 }
@@ -16931,7 +17015,7 @@ function buildIndexes(nodes, ctx) {
   }
   return { byPath: byPath3, byName, nodeByPath };
 }
-function resolve29(link, indexes, ctx) {
+function resolve30(link, indexes, ctx) {
   if (indexes.byPath.has(link.target)) return link.target;
   return resolveByName(link, indexes, ctx);
 }
@@ -17320,7 +17404,7 @@ function detectRenamesAndOrphans(prior, current, issues, silenced) {
 }
 
 // kernel/orchestrator/walk.ts
-import { isAbsolute as isAbsolute9, resolve as resolve30 } from "path";
+import { isAbsolute as isAbsolute9, resolve as resolve31 } from "path";
 
 // kernel/sidecar/drift.ts
 function computeDriftStatus(args2) {
@@ -17766,8 +17850,8 @@ function expandSidecarPaths(paths, priorNodesByPath) {
 }
 function toAbsolute(relPath, roots) {
   const root = roots[0] ?? ".";
-  const absRoot = isAbsolute9(root) ? root : resolve30(root);
-  return resolve30(absRoot, relPath);
+  const absRoot = isAbsolute9(root) ? root : resolve31(root);
+  return resolve31(absRoot, relPath);
 }
 function resolveEffectiveCaps(opts) {
   return {
@@ -18365,7 +18449,7 @@ function validateRoots(roots) {
 function resolveActiveProviderOption(optionValue, roots, providers) {
   if (optionValue !== void 0) return optionValue;
   for (const root of roots) {
-    const absRoot = isAbsolute10(root) ? root : resolve31(root);
+    const absRoot = isAbsolute10(root) ? root : resolve32(root);
     if (!existsSync24(absRoot)) continue;
     const detected = detectProvidersFromFilesystem(absRoot, providers)[0] ?? null;
     if (detected !== null) return detected;
@@ -18374,10 +18458,10 @@ function resolveActiveProviderOption(optionValue, roots, providers) {
 }
 
 // kernel/scan/watcher.ts
-import { resolve as resolve32, relative as relative7, sep as sep5 } from "path";
+import { resolve as resolve33, relative as relative7, sep as sep5 } from "path";
 import chokidar from "chokidar";
 function createChokidarWatcher(opts) {
-  const absRoots = opts.roots.map((r) => resolve32(opts.cwd, r));
+  const absRoots = opts.roots.map((r) => resolve33(opts.cwd, r));
   const ignoreFilterOpt = opts.ignoreFilter;
   const getFilter = ignoreFilterOpt === void 0 ? void 0 : typeof ignoreFilterOpt === "function" ? ignoreFilterOpt : () => ignoreFilterOpt;
   const ignored = getFilter ? (path) => {
@@ -18883,7 +18967,7 @@ function resolveScanRoots(inputs) {
 // core/runtime/reference-paths-walker.ts
 import { readdirSync as readdirSync9, statSync as statSync8 } from "fs";
 import { homedir as osHomedir2 } from "os";
-import { isAbsolute as isAbsolute11, join as join14, resolve as resolve33 } from "path";
+import { isAbsolute as isAbsolute11, join as join14, resolve as resolve34 } from "path";
 var REFERENCE_WALK_MAX_FILES = 5e4;
 var SKIPPED_DIR_NAMES = /* @__PURE__ */ new Set([
   "node_modules",
@@ -18891,10 +18975,10 @@ var SKIPPED_DIR_NAMES = /* @__PURE__ */ new Set([
   SKILL_MAP_DIR
 ]);
 function resolveScanPath(raw, cwd) {
-  if (raw.startsWith("~/")) return resolve33(join14(osHomedir2(), raw.slice(2)));
-  if (raw === "~") return resolve33(osHomedir2());
-  if (isAbsolute11(raw)) return resolve33(raw);
-  return resolve33(cwd, raw);
+  if (raw.startsWith("~/")) return resolve34(join14(osHomedir2(), raw.slice(2)));
+  if (raw === "~") return resolve34(osHomedir2());
+  if (isAbsolute11(raw)) return resolve34(raw);
+  return resolve34(cwd, raw);
 }
 function walkReferencePaths(rawRoots, cwd) {
   const paths = /* @__PURE__ */ new Set();
@@ -18963,7 +19047,7 @@ async function bootstrapActiveProvider(opts) {
     opts.providers
   );
   if (detected.length === 0) {
-    return { kind: "ok", activeProvider: MARKDOWN_LENS_ID, source: "default" };
+    return { kind: "ok", activeProvider: DEFAULT_LENS_ID, source: "default" };
   }
   if (detected.length === 1) {
     const picked2 = detected[0];
@@ -20358,7 +20442,7 @@ import { Command as Command20, Option as Option19 } from "clipanion";
 
 // kernel/jobs/orphan-files.ts
 import { readdirSync as readdirSync10, statSync as statSync9 } from "fs";
-import { join as join17, resolve as resolve34 } from "path";
+import { join as join17, resolve as resolve35 } from "path";
 function findOrphanJobFiles(jobsDir, referencedPaths) {
   let entries;
   try {
@@ -20376,7 +20460,7 @@ function findOrphanJobFiles(jobsDir, referencedPaths) {
     if (!entry.isFile()) continue;
     const name = entry.name;
     if (!name.endsWith(".md")) continue;
-    const abs = resolve34(join17(jobsDir, name));
+    const abs = resolve35(join17(jobsDir, name));
     if (!referencedPaths.has(abs)) orphans.push(abs);
   }
   orphans.sort();
@@ -21586,7 +21670,7 @@ var BUILT_IN_PLUGIN_PRESENTATION_ORDER = [
   "core",
   "claude",
   "antigravity",
-  "openai",
+  "codex",
   "agent-skills"
 ];
 function sortPluginsForPresentation(plugins) {
@@ -21603,9 +21687,9 @@ function sortPluginsForPresentation(plugins) {
 }
 
 // cli/commands/plugins/shared.ts
-import { resolve as resolve35 } from "path";
+import { resolve as resolve36 } from "path";
 function resolveSearchPaths2(opts, cwd) {
-  if (opts.pluginDir) return [resolve35(opts.pluginDir)];
+  if (opts.pluginDir) return [resolve36(opts.pluginDir)];
   return [defaultProjectPluginsDir({ cwd })];
 }
 async function buildResolver() {
@@ -22849,7 +22933,7 @@ var PluginsEnableCommand = class extends TogglePluginsBase {
       ids (\`claude\`, which fans the toggle out across every extension
       inside the plugin). Multi-extension plugins need --yes (or an
       interactive TTY confirm) to avoid flipping 27 core extensions by
-      accident. Single-extension plugins (openai, agent-skills,
+      accident. Single-extension plugins (codex, agent-skills,
       antigravity) apply without prompting.
 
       Batches are all-or-nothing: a single unknown id aborts before
@@ -22876,7 +22960,7 @@ var PluginsDisableCommand = class extends TogglePluginsBase {
       ids (\`core\`, which fans the toggle out across every extension
       inside the plugin). Multi-extension plugins need --yes (or an
       interactive TTY confirm) to avoid flipping 27 core extensions by
-      accident. Single-extension plugins (openai, agent-skills,
+      accident. Single-extension plugins (codex, agent-skills,
       antigravity) apply without prompting.
 
       Batches are all-or-nothing: a single unknown id aborts before
@@ -22919,7 +23003,7 @@ function resolveBareToggle(id, catalogue) {
 
 // cli/commands/plugins/create.ts
 import { existsSync as existsSync26, mkdirSync as mkdirSync5, writeFileSync } from "fs";
-import { dirname as dirname18, join as join18, resolve as resolve36 } from "path";
+import { dirname as dirname18, join as join18, resolve as resolve37 } from "path";
 import { Command as Command27, Option as Option26 } from "clipanion";
 
 // cli/commands/plugins/scaffold/action.ts
@@ -23369,7 +23453,7 @@ var PluginsCreateCommand = class extends SmCommand {
     const kind = this.kind;
     const ctx = defaultRuntimeContext();
     const baseDir = defaultProjectPluginsDir(ctx);
-    const targetDir = this.at ? resolve36(this.at) : join18(baseDir, this.pluginId);
+    const targetDir = this.at ? resolve37(this.at) : join18(baseDir, this.pluginId);
     if (existsSync26(targetDir) && !this.force) {
       this.printer.error(
         tx(PLUGINS_TEXTS.createRefuseOverwrite, {
@@ -23885,7 +23969,7 @@ var PLUGIN_COMMANDS = [
 
 // cli/commands/refresh.ts
 import { readFile as readFile4 } from "fs/promises";
-import { resolve as resolve37 } from "path";
+import { resolve as resolve38 } from "path";
 import { Command as Command31, Option as Option29 } from "clipanion";
 
 // cli/i18n/refresh.texts.ts
@@ -24193,7 +24277,7 @@ var RefreshCommand = class extends SmCommand {
       let body;
       try {
         assertContained(cwd, node.path);
-        const raw = await readFile4(resolve37(cwd, node.path), "utf8");
+        const raw = await readFile4(resolve38(cwd, node.path), "utf8");
         body = stripFrontmatterFence(raw);
       } catch (err) {
         if (!this.json) {
@@ -24266,7 +24350,7 @@ var IntentionalFailCommand = class extends SmCommand {
     setTimeout(() => {
       throw new Error(INTENTIONAL_FAIL_TEXTS.errorMessage);
     }, 0);
-    await new Promise((resolve44) => setTimeout(resolve44, 5e3));
+    await new Promise((resolve45) => setTimeout(resolve45, 5e3));
     return ExitCode.Issues;
   }
 };
@@ -24434,7 +24518,7 @@ var SCAN_TEXTS = {
 import { Command as Command32, Option as Option30 } from "clipanion";
 
 // core/watcher/runtime.ts
-import { dirname as dirname19, isAbsolute as isAbsolute13, relative as relative9, resolve as resolve38, sep as sep6 } from "path";
+import { dirname as dirname19, isAbsolute as isAbsolute13, relative as relative9, resolve as resolve39, sep as sep6 } from "path";
 
 // core/runtime/fresh-resolver.ts
 async function buildFreshResolver(deps) {
@@ -24480,7 +24564,7 @@ function applyPriorStateToRunOptions(runOptions, priorState, changedPaths) {
   }
 }
 function toIncrementalPaths(events, roots, cwd) {
-  const absRoots = roots.map((r) => isAbsolute13(r) ? r : resolve38(cwd, r));
+  const absRoots = roots.map((r) => isAbsolute13(r) ? r : resolve39(cwd, r));
   const changed = /* @__PURE__ */ new Set();
   const removed = /* @__PURE__ */ new Set();
   for (const ev of events) {
@@ -26224,7 +26308,8 @@ var SERVER_TEXTS = {
   activeProviderBodyMissing: "Request body must include `activeProvider` (a non-empty string).",
   activeProviderValueNotString: "`activeProvider` must be a string.",
   activeProviderValueEmpty: "`activeProvider` cannot be the empty string. Send the id of an enabled provider.",
-  activeProviderPersistFailed: "Could not persist activeProvider: {{message}}"
+  activeProviderPersistFailed: "Could not persist activeProvider: {{message}}",
+  activeProviderNotSelectable: "`{{id}}` is not a selectable lens. Pick one of: {{selectable}}."
 };
 
 // server/loopback-gate.ts
@@ -27924,10 +28009,10 @@ import { HTTPException as HTTPException12 } from "hono/http-exception";
 
 // server/util/skillmapignore-io.ts
 import { existsSync as existsSync28, readFileSync as readFileSync18, writeFileSync as writeFileSync2 } from "fs";
-import { resolve as resolve39 } from "path";
+import { resolve as resolve40 } from "path";
 var IGNORE_FILENAME2 = ".skillmapignore";
 function readPatterns(cwd) {
-  const path = resolve39(cwd, IGNORE_FILENAME2);
+  const path = resolve40(cwd, IGNORE_FILENAME2);
   if (!existsSync28(path)) return [];
   let raw;
   try {
@@ -27938,7 +28023,7 @@ function readPatterns(cwd) {
   return raw.split(/\r?\n/).map((l) => l.trim()).filter((l) => l.length > 0 && !l.startsWith("#"));
 }
 function writePatterns(cwd, nextPatterns) {
-  const path = resolve39(cwd, IGNORE_FILENAME2);
+  const path = resolve40(cwd, IGNORE_FILENAME2);
   const prior = existsSync28(path) ? safeRead(path) : "";
   const content = buildContent(prior, nextPatterns);
   writeFileSync2(path, content, "utf8");
@@ -28326,6 +28411,15 @@ function registerActiveProviderRoute(app, deps) {
   });
   app.patch("/api/active-provider", async (c) => {
     const body = await parsePatchBody5(c.req.raw);
+    const selectable = await resolveSelectableProviders(deps);
+    if (!selectable.includes(body.activeProvider)) {
+      throw new HTTPException14(400, {
+        message: tx(SERVER_TEXTS.activeProviderNotSelectable, {
+          id: body.activeProvider,
+          selectable: selectable.join(", ")
+        })
+      });
+    }
     const result = applyLensSwitch(deps, body.activeProvider);
     deps.configService.reload();
     return c.json({ ...await buildEnvelope4(deps), switch: result });
@@ -28348,7 +28442,7 @@ async function resolveSelectableProviders(deps) {
   });
   const selectable = /* @__PURE__ */ new Set();
   for (const provider of deps.providers) {
-    if (isPluginExtensionEnabled(provider, resolveEnabled)) {
+    if (provider.gatedByActiveLens === true && isPluginExtensionEnabled(provider, resolveEnabled)) {
       selectable.add(provider.id);
     }
   }
@@ -28396,7 +28490,7 @@ var parsePatchBody5 = makeBodyValidator(PATCH_BODY_SCHEMA4, {
 
 // server/routes/actions.ts
 import { HTTPException as HTTPException16 } from "hono/http-exception";
-import { resolve as resolve40 } from "path";
+import { resolve as resolve41 } from "path";
 
 // server/routes/node-loader.ts
 import { HTTPException as HTTPException15 } from "hono/http-exception";
@@ -28456,7 +28550,7 @@ function registerActionsRoutes(app, deps) {
     let absPath;
     try {
       assertContained(deps.runtimeContext.cwd, node.path);
-      absPath = resolve40(deps.runtimeContext.cwd, node.path);
+      absPath = resolve41(deps.runtimeContext.cwd, node.path);
     } catch (err) {
       throw new HTTPException16(400, { message: formatErrorMessage(err) });
     }
@@ -28564,14 +28658,14 @@ async function withScanMutex(fn) {
   if (inFlight !== null) {
     throw new ScanBusyError();
   }
-  let resolve44;
+  let resolve45;
   inFlight = new Promise((r) => {
-    resolve44 = r;
+    resolve45 = r;
   });
   try {
     return await fn();
   } finally {
-    resolve44();
+    resolve45();
     inFlight = null;
   }
 }
@@ -29678,6 +29772,22 @@ function buildKindRegistry(providers) {
 }
 
 // server/provider-registry.ts
+function presentationOptionals(ui) {
+  const out = {};
+  if (ui.colorDark !== void 0) out.colorDark = ui.colorDark;
+  if (ui.emoji !== void 0) out.emoji = ui.emoji;
+  if (ui.icon !== void 0) out.icon = ui.icon;
+  if (ui.hideChip !== void 0) out.hideChip = ui.hideChip;
+  return out;
+}
+function resolveProviderBodyField(read) {
+  if (read === void 0) return void 0;
+  const rules = Array.isArray(read) ? read : [read];
+  for (const rule of rules) {
+    if (rule.bodyField !== void 0) return rule.bodyField;
+  }
+  return void 0;
+}
 function buildProviderRegistry(providers) {
   const registry = {};
   for (const provider of providers) {
@@ -29685,12 +29795,14 @@ function buildProviderRegistry(providers) {
     if (!ui) continue;
     const entry = {
       label: ui.label,
-      color: ui.color
+      color: ui.color,
+      // A Provider is a selectable lens iff it gates on the active lens;
+      // the non-gated `markdown` base projects `isLens: false`.
+      isLens: provider.gatedByActiveLens === true,
+      ...presentationOptionals(ui)
     };
-    if (ui.colorDark !== void 0) entry.colorDark = ui.colorDark;
-    if (ui.emoji !== void 0) entry.emoji = ui.emoji;
-    if (ui.icon !== void 0) entry.icon = ui.icon;
-    if (ui.hideChip !== void 0) entry.hideChip = ui.hideChip;
+    const bodyField = resolveProviderBodyField(provider.read);
+    if (bodyField !== void 0) entry.bodyField = bodyField;
     registry[provider.id] = entry;
   }
   return registry;
@@ -29869,7 +29981,7 @@ function validateNoUi(noUi, uiDist) {
 
 // server/paths.ts
 import { existsSync as existsSync31, statSync as statSync11 } from "fs";
-import { dirname as dirname20, isAbsolute as isAbsolute15, join as join20, resolve as resolve41 } from "path";
+import { dirname as dirname20, isAbsolute as isAbsolute15, join as join20, resolve as resolve42 } from "path";
 import { fileURLToPath as fileURLToPath7 } from "url";
 var DEFAULT_UI_REL = join20("ui", "dist", "ui", "browser");
 var PACKAGE_UI_REL = "ui";
@@ -29880,7 +29992,7 @@ function resolveDefaultUiDist(ctx) {
   return walkUpForUi(ctx.cwd);
 }
 function resolveExplicitUiDist(ctx, raw) {
-  return isAbsolute15(raw) ? raw : resolve41(ctx.cwd, raw);
+  return isAbsolute15(raw) ? raw : resolve42(ctx.cwd, raw);
 }
 function isUiBundleDir(path) {
   if (!existsSync31(path)) return false;
@@ -29914,7 +30026,7 @@ function resolvePackageBundledUiFrom(here) {
   return null;
 }
 function walkUpForUi(startDir) {
-  let current = resolve41(startDir);
+  let current = resolve42(startDir);
   for (let i = 0; i < 64; i++) {
     const candidate = join20(current, DEFAULT_UI_REL);
     if (isUiBundleDir(candidate)) return candidate;
@@ -30968,7 +31080,7 @@ function rankConfidenceForGrouping(c) {
 
 // cli/commands/sidecar.ts
 import { unlink as unlink3 } from "fs/promises";
-import { resolve as resolve42 } from "path";
+import { resolve as resolve43 } from "path";
 import { Command as Command37, Option as Option35 } from "clipanion";
 
 // cli/i18n/sidecar.texts.ts
@@ -31126,7 +31238,7 @@ var SidecarRefreshCommand = class extends SmCommand {
     let absPath;
     try {
       assertContained(ctx.cwd, node.path);
-      absPath = resolve42(ctx.cwd, node.path);
+      absPath = resolve43(ctx.cwd, node.path);
     } catch (err) {
       this.printer.error(
         tx(SIDECAR_TEXTS.refreshFailed, { glyph: errGlyph, message: formatErrorMessage(err) })
@@ -31410,7 +31522,7 @@ var SidecarAnnotateCommand = class extends SmCommand {
     let absPath;
     try {
       assertContained(ctx.cwd, node.path);
-      absPath = resolve42(ctx.cwd, node.path);
+      absPath = resolve43(ctx.cwd, node.path);
     } catch (err) {
       this.printer.error(
         tx(SIDECAR_TEXTS.annotateFailed, { glyph: errGlyph, message: formatErrorMessage(err) })
@@ -31662,7 +31774,7 @@ var STUB_COMMANDS = [
 
 // cli/commands/tutorial.ts
 import { cpSync as cpSync3, existsSync as existsSync33, mkdirSync as mkdirSync6, rmSync as rmSync2, statSync as statSync12 } from "fs";
-import { dirname as dirname21, join as join21, resolve as resolve43 } from "path";
+import { dirname as dirname21, join as join21, resolve as resolve44 } from "path";
 import { createInterface as createInterface6 } from "readline";
 import { fileURLToPath as fileURLToPath8 } from "url";
 import { Command as Command39, Option as Option37 } from "clipanion";
@@ -31741,10 +31853,10 @@ var TutorialCommand = class extends SmCommand {
       overwrite the target directory unless --force is passed. Takes no
       positional argument.
 
-      By default only ready providers are offered as destinations. Pass
-      --experimental to also offer experimental ones (e.g. agent-skills);
-      they ship disabled, so enable the chosen one with
-      \`sm plugins enable <id>\` before scanning under its lens.
+      By default only stable / beta providers are offered as destinations
+      (today claude and the open-standard agent-skills). Pass --experimental
+      to also offer experimental ones; they ship disabled, so enable the
+      chosen one with \`sm plugins enable <id>\` before scanning under its lens.
     `,
     examples: [
       ["Materialize the tutorial skill in the cwd", "$0 tutorial"],
@@ -31768,7 +31880,7 @@ var TutorialCommand = class extends SmCommand {
     description: "Overwrite an existing target directory without prompting."
   });
   experimental = Option37.Boolean("--experimental", false, {
-    description: "Offer experimental providers (e.g. agent-skills) as destinations. They ship disabled; enable the chosen one with `sm plugins enable <id>`."
+    description: "Offer experimental providers as destinations. They ship disabled; enable the chosen one with `sm plugins enable <id>`."
   });
   async run() {
     const ctx = defaultRuntimeContext();
@@ -31977,11 +32089,11 @@ function resolveSkillSourceDir() {
   const here = dirname21(fileURLToPath8(import.meta.url));
   const candidates = [
     // dev: src/cli/commands/ → repo-root .claude/skills/sm-tutorial/
-    resolve43(here, "../../..", SKILL_SOURCE_DIR),
+    resolve44(here, "../../..", SKILL_SOURCE_DIR),
     // bundled: dist/cli.js → dist/cli/tutorial/sm-tutorial (sibling)
-    resolve43(here, "cli/tutorial", SKILL_SLUG),
+    resolve44(here, "cli/tutorial", SKILL_SLUG),
     // bundled fallback: any-depth → cli/tutorial/sm-tutorial
-    resolve43(here, "../cli/tutorial", SKILL_SLUG)
+    resolve44(here, "../cli/tutorial", SKILL_SLUG)
   ];
   for (const candidate of candidates) {
     if (existsSync33(candidate) && statSync12(candidate).isDirectory()) {
@@ -32227,4 +32339,4 @@ function resolveBareDefault() {
   process.exit(ExitCode.Error);
 }
 //# sourceMappingURL=cli.js.map
-//# debugId=62413e88-87c9-5ddc-a41c-f64bac9cdf2f
+//# debugId=4ec5542f-63ef-5e2c-ab32-58a6c8be5dec