@skill-map/cli 0.69.0 → 0.70.0

package/dist/cli.js

@@ -1,6 +1,6 @@
 // cli/entry.ts
 
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="75d0c2c2-d08f-5d7c-aa62-3e1d53dd4ef1")}catch(e){}}();
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ca8113af-a7ac-5cd7-b45c-03a5974bca86")}catch(e){}}();
 import { existsSync as existsSync34 } from "fs";
 import { Builtins, Cli as Cli2 } from "clipanion";
 
@@ -250,7 +250,7 @@ function bucketByKind(kind, instance, bag) {
 // package.json
 var package_default = {
   name: "@skill-map/cli",
-  version: "0.69.0",
+  version: "0.70.0",
   description: "skill-map reference implementation \u2014 kernel + CLI + adapters.",
   license: "MIT",
   type: "module",
@@ -633,7 +633,10 @@ var claudeProvider = {
   presentation: {
     label: "Anthropic's Claude",
     color: "#cc785c",
-    colorDark: "#e89270"
+    colorDark: "#e89270",
+    // Claude Code invokes both commands and skills with `/`; the palette
+    // paints this as the `invokes` edge glyph under the claude lens.
+    invocationSigil: "/"
   },
   // Auto-detect marker: a `.claude/` directory under the scope root marks
   // a Claude Code project. Provider-owned (replaces the old central
@@ -913,13 +916,11 @@ var atDirectiveExtractor = {
   kind: "extractor",
   description: "Detects `@<token>` directives in a node's body using Claude Code rules, choosing the link kind by token shape. Example: a bare handle `@team` becomes a `mentions` link, while a file-flavoured token `@docs/api.md` becomes a `references` link.",
   scope: "body",
-  // Authorised under the claude AND codex lenses: OpenAI Codex sub-agents
-  // reference each other with the same `@<name>` mention grammar, and their
-  // prompt (the TOML `developer_instructions` body, fed in via the codex
-  // provider's `read.bodyField`) carries the same `@` tokens. The gate is the active
-  // lens, not the node's provider, so under `codex` this parses `@` across
-  // the project's markdown surface just as it does under `claude`.
-  precondition: { provider: ["claude", "codex"] },
+  // Claude-only. This is Claude's `@<name>` grammar, where a bare handle is
+  // an agent / entity MENTION. OpenAI Codex's `@` is a file-path picker, not
+  // a mention grammar, so codex is NOT gated here; the codex-owned `at-file`
+  // extractor covers `@`-as-file-reference under the codex lens.
+  precondition: { provider: ["claude"] },
   // eslint-disable-next-line complexity
   extract(ctx) {
     const seenMentions = /* @__PURE__ */ new Set();
@@ -1007,16 +1008,15 @@ var slashCommandExtractor = {
   kind: "extractor",
   description: "Turns `/command` invocations in a node's body into arrows that point at the resolved slash command or skill, using Claude Code routing rules. Example: `/deploy` in the body draws an arrow to the `deploy` command.",
   scope: "body",
-  // Also authorised under the codex and antigravity lenses, which share the
-  // `/command` grammar. Under codex a sub-agent's prompt body (the TOML
-  // `developer_instructions` field) has its `/command` tokens parsed for
-  // pipeline parity; codex resolves them to its open-standard skills
-  // (`invokes: ['skill']`). Under antigravity a workflow / skill / AGENTS.md
-  // body's `/name` tokens resolve to BOTH skills and workflows
-  // (`invokes: ['skill', 'workflow']`), since Antigravity invokes either by
-  // the same slash. A lens that declares no `invokes` resolution leaves the
-  // signals unresolved (no spurious edges).
-  precondition: { provider: ["claude", "codex", "antigravity"] },
+  // Also authorised under the antigravity lens, which shares the `/command`
+  // grammar: a workflow / skill / AGENTS.md body's `/name` tokens resolve to
+  // BOTH skills and workflows (`invokes: ['skill', 'workflow']`), since
+  // Antigravity invokes either by the same slash. NOT gated under codex:
+  // OpenAI Codex reserves `/` for its OWN built-in commands (`/model`,
+  // `/init`, ...) and invokes user skills with `$` instead (parsed by the
+  // codex `dollar-skill` extractor). A lens that declares no `invokes`
+  // resolution leaves the signals unresolved (no spurious edges).
+  precondition: { provider: ["claude", "antigravity"] },
   extract(ctx) {
     const seen = /* @__PURE__ */ new Set();
     const body = stripCodeAndHtml(ctx.body);
@@ -1241,26 +1241,32 @@ var agentSkillsProvider = {
   stability: "stable",
   // Auto-detect marker: a `.agents/` directory marks an open-standard
   // project. This is also the marker a Google/Antigravity project carries
-  // (Antigravity adopted the open standard). The marker only produces an
-  // auto-detect candidate once this experimental provider is enabled.
-  // Provider-owned.
-  detect: { markers: [".agents"] },
+  // (Antigravity adopted the open standard) and the shared skill home a
+  // Codex project populates under `.agents/skills/`. `fallback: true` makes
+  // this candidate yield to any vendor marker present alongside `.agents/`:
+  // a `.codex/` + `.agents/` project resolves `codex` outright, never an
+  // ambiguous `codex` vs `agent-skills` prompt. The `.agents/` marker only
+  // wins when no vendor marker is present. Provider-owned.
+  detect: { markers: [".agents"], fallback: true },
   // Authoring target for `sm tutorial`: the open standard discovers skills
   // under `.agents/skills/<name>/SKILL.md`. `aka` lists Antigravity, which
   // shares this territory AND the BASIC tutorial track (skill + markdown,
   // references), so a tester on Antigravity scaffolds here. OpenAI Codex
   // also reads `.agents/skills/`, but Codex is a RICH-track lens (it has the
-  // `agent` kind, slash and `@`), so advertising it under this basic row
+  // `agent` kind, plus `$`-skill invocation and `@`-file references), so
+  // advertising it under this basic row
   // would hand it the wrong book; Codex is surfaced once a Codex rich
   // scaffold target lands. `aka` is display-only, `--for` matches the id.
   scaffold: { skillDir: ".agents/skills", aka: ["Google's Antigravity"] },
   read: COMMONS_READ,
   kinds: COMMONS_KINDS,
   resolution: COMMONS_RESOLUTION,
-  // Base reserved-name catalog (self-scope under the `agent-skills` lens). The
-  // shared export is inherited by every Provider that adopts the open
-  // standard (see `COMMONS_RESERVED_NAMES` above).
-  reservedNames: COMMONS_RESERVED_NAMES,
+  // NO `reservedNames`: the neutral open standard has no `/`-invocation, a
+  // skill activates by its `description` and connects via markdown links, so
+  // a skill name cannot shadow a built-in `/` command. The shared
+  // `COMMONS_RESERVED_NAMES` export above is for `/`-invoking vendors
+  // (Antigravity) to spread, NOT applied here. See spec/architecture.md
+  // §Provider · reservedNames.
   classify: classifyCommonsPath
 };
 
@@ -1308,7 +1314,10 @@ var antigravityProvider = {
   presentation: {
     label: "Google's Antigravity",
     color: "#7c3aed",
-    colorDark: "#a78bfa"
+    colorDark: "#a78bfa",
+    // Antigravity bolts `/`-invocation onto the open standard (skills and
+    // workflows are `/<name>`), so the `invokes` edge glyph is the slash.
+    invocationSigil: "/"
   },
   // Auto-detect marker: Antigravity's workflows live under `.agent/workflows/`
   // (SINGULAR `.agent`), its one vendor-specific on-disk territory. Skills
@@ -1461,7 +1470,11 @@ var codexProvider = {
   presentation: {
     label: "OpenAI's Codex",
     color: "#22c55e",
-    colorDark: "#4ade80"
+    colorDark: "#4ade80",
+    // Codex invokes skills with `$` (`$publish`); `/` is reserved for its
+    // own built-in commands (`/model`, `/init`), so the `invokes` edge glyph
+    // under the codex lens is the dollar, not the slash.
+    invocationSigil: "$"
   },
   // Auto-detect marker: a `.codex/` directory marks a Codex CLI project.
   // `AGENTS.md` is intentionally NOT a marker: it is the open agents.md
@@ -1527,19 +1540,21 @@ var codexProvider = {
     // `frontmatter.name`.
     ...COMMONS_KINDS
   },
-  // Mentions resolve to agents (`@<name>`, the Codex sub-agent handle).
-  // Slash invocations resolve to skills (`invokes: ['skill']`, inherited
-  // from the open standard), so a `/skill-name` in an agent's prompt links
-  // to its `.agents/skills/` skill.
+  // Skill invocations resolve to skills (`invokes: ['skill']`, inherited
+  // from the open standard): a `$skill-name` in an agent's prompt (parsed by
+  // the codex `dollar-skill` extractor) links to its `.agents/skills/` skill.
+  // NO `mentions` entry: Codex's `@` is a file picker, parsed by the
+  // codex-owned `at-file` extractor as a path-resolved `references` link, not
+  // an agent-mention grammar.
   resolution: {
-    mentions: ["agent"],
     ...COMMONS_RESOLUTION
   },
-  // Open-standard reserved-name base (the universal cross-agent slash
-  // verbs an agent CLI ships built-in), inherited from `agent-skills` and
-  // applied under the codex lens via SELF scope: a user skill that shadows
-  // one is flagged by `core/name-reserved`.
-  reservedNames: COMMONS_RESERVED_NAMES,
+  // NO `reservedNames`: Codex invokes skills via `$` (the `dollar-skill`
+  // extractor), a namespace disjoint from its built-in `/` commands, so a
+  // `$`-skill named `model` does NOT collide with `/model`. Reserved-skill
+  // names only apply to lenses that invoke skills through the `/` command
+  // channel (claude, antigravity). See spec/architecture.md §Provider ·
+  // reservedNames.
   classify(path) {
     const lower = path.toLowerCase();
     if (lower.startsWith(".codex/agents/") && lower.endsWith(".toml")) return "agent";
@@ -1547,6 +1562,123 @@ var codexProvider = {
   }
 };
 
+// plugins/codex/extractors/at-file/index.ts
+import { posix as pathPosix2 } from "path";
+var ID4 = "at-file";
+var AT_RE2 = /(?:^|[^A-Za-z0-9_@])(@(?:\.{1,2}\/|\/)?[a-z0-9](?:[a-z0-9_\-./]*[a-z0-9_])?(?::[a-z0-9][a-z0-9_-]*)?)/gi;
+var FILE_EXT_RE2 = /\.(md|mdx|js|jsx|ts|tsx|json|yml|yaml|toml|txt|html|css|scss|less|py|rb|go|rs|java|c|cpp|h|hpp|sh|sql|svg|png|jpg|jpeg|gif|webp|pdf)$/i;
+var atFileExtractor = {
+  id: ID4,
+  pluginId: OPENAI_PLUGIN_ID,
+  kind: "extractor",
+  description: "Detects `@<file>` references in a node's body under the OpenAI Codex lens, where `@` is a file picker. A path- or extension-shaped token becomes a `references` link to that file; a bare `@handle` forms no edge. Example: `@builder.toml` in an agent's prompt draws an arrow to the `builder` agent file.",
+  scope: "body",
+  // Codex-only: under the codex lens `@` is a file-path picker, so only
+  // file-shaped tokens form references. The claude `at-directive` (bare
+  // `@handle` → agent mention) is NOT gated under codex.
+  precondition: { provider: ["codex"] },
+  extract(ctx) {
+    const seenReferences = /* @__PURE__ */ new Set();
+    const body = stripCodeAndHtml(ctx.body);
+    const lineStarts = computeLineStarts(body);
+    const sourceDir = pathPosix2.dirname(ctx.node.path);
+    for (const match of body.matchAll(AT_RE2)) {
+      const original = match[1];
+      const bare = original.slice(1);
+      const rationale = classifyAtToken(bare);
+      if (rationale === null) continue;
+      const target = resolveSourceRelative2(sourceDir, bare);
+      const dedupKey = target.toLowerCase();
+      if (seenReferences.has(dedupKey)) continue;
+      seenReferences.add(dedupKey);
+      const captureOffset = (match.index ?? 0) + match[0].indexOf(original);
+      const line = lineFor(lineStarts, captureOffset);
+      ctx.emitSignal({
+        source: ctx.node.path,
+        scope: "body",
+        range: { start: captureOffset, end: captureOffset + original.length, line },
+        raw: original,
+        candidates: [
+          {
+            extractorId: ID4,
+            kind: "references",
+            target,
+            // 0.85: strong file signal (path prefix or known extension),
+            // one degree of inference (the runtime resolves the path).
+            confidence: 0.85,
+            rationale,
+            trigger: {
+              originalTrigger: original,
+              normalizedTrigger: target
+            }
+          }
+        ]
+      });
+    }
+  }
+};
+function classifyAtToken(bare) {
+  if (bare.startsWith("/")) return null;
+  if (bare.startsWith("./") || bare.startsWith("../")) return "relative path prefix";
+  if (FILE_EXT_RE2.test(bare)) return "known file extension";
+  return null;
+}
+function resolveSourceRelative2(sourceDir, bare) {
+  const joined = sourceDir === "." ? bare : `${sourceDir}/${bare}`;
+  return pathPosix2.normalize(joined);
+}
+
+// plugins/codex/extractors/dollar-skill/index.ts
+var ID5 = "dollar-skill";
+var DOLLAR_RE = /(?<![A-Za-z0-9_$])(\$[a-z][a-z0-9_-]*)/g;
+var dollarSkillExtractor = {
+  id: ID5,
+  pluginId: OPENAI_PLUGIN_ID,
+  kind: "extractor",
+  description: "Turns `$skill` invocations in a node's body into arrows that point at the resolved Codex skill, using OpenAI Codex routing rules. Example: `$check-links` in the body draws an arrow to the `check-links` skill.",
+  scope: "body",
+  // Codex-only: `$skill` is OpenAI Codex's explicit skill-invocation
+  // grammar. The codex provider resolves it to its open-standard skills
+  // (`invokes: ['skill']`). Other lenses do not parse `$`.
+  precondition: { provider: ["codex"] },
+  extract(ctx) {
+    const seen = /* @__PURE__ */ new Set();
+    const body = stripCodeAndHtml(ctx.body);
+    const lineStarts = computeLineStarts(body);
+    for (const match of body.matchAll(DOLLAR_RE)) {
+      const original = match[1];
+      const normalized = normalizeTrigger(original);
+      if (seen.has(normalized)) continue;
+      seen.add(normalized);
+      const captureOffset = (match.index ?? 0) + match[0].indexOf(original);
+      const line = lineFor(lineStarts, captureOffset);
+      ctx.emitSignal({
+        source: ctx.node.path,
+        scope: "body",
+        range: { start: captureOffset, end: captureOffset + original.length, line },
+        raw: original,
+        candidates: [
+          {
+            extractorId: ID5,
+            kind: "invokes",
+            target: original,
+            // 0.8: clean `$skill` match after code-block strip. The
+            // lowercase-letter guard filters currency / env-var noise, so a
+            // hit is unambiguous syntax. Resolution against the live skill
+            // catalog happens downstream.
+            confidence: 0.8,
+            rationale: "unambiguous $skill syntax post code-block strip",
+            trigger: {
+              originalTrigger: original,
+              normalizedTrigger: normalized
+            }
+          }
+        ]
+      });
+    }
+  }
+};
+
 // plugins/core/providers/core-markdown/schemas/markdown.schema.json
 var markdown_schema_default = {
   $schema: "https://json-schema.org/draft/2020-12/schema",
@@ -1634,11 +1766,11 @@ var coreMarkdownProvider = {
 };
 
 // plugins/core/extractors/backtick-path/index.ts
-import { posix as pathPosix2 } from "path";
-var ID4 = "backtick-path";
+import { posix as pathPosix3 } from "path";
+var ID6 = "backtick-path";
 var PATH_RE = /(?<![\w/:.-])(?:\.{1,2}\/)?[\w][\w.-]*(?:\/[\w.-]+)*\.md\b(?![\w/])/g;
 var backtickPathExtractor = {
-  id: ID4,
+  id: ID6,
   pluginId: CORE_PLUGIN_ID,
   kind: "extractor",
   description: "Turns relative .md paths written inside code spans and fenced blocks into arrows between nodes in the graph. Example: a backticked `references/rules.md` path draws an arrow to that file.",
@@ -1647,7 +1779,7 @@ var backtickPathExtractor = {
     const seen = /* @__PURE__ */ new Set();
     const body = extractCodeRegions(ctx.body);
     const lineStarts = computeLineStarts(body);
-    const sourceDir = pathPosix2.dirname(ctx.node.path);
+    const sourceDir = pathPosix3.dirname(ctx.node.path);
     for (const match of body.matchAll(PATH_RE)) {
       const original = match[0];
       const resolved = resolveTarget(sourceDir, original);
@@ -1663,7 +1795,7 @@ var backtickPathExtractor = {
         raw: original,
         candidates: [
           {
-            extractorId: ID4,
+            extractorId: ID6,
             kind: "points",
             target: resolved,
             // 0.85: a strong file signal with one degree of inference,
@@ -1688,11 +1820,11 @@ function resolveTarget(sourceDir, raw) {
   if (trimmed.length === 0) return null;
   if (trimmed.startsWith("/")) return null;
   const joined = sourceDir === "." ? trimmed : `${sourceDir}/${trimmed}`;
-  return pathPosix2.normalize(joined);
+  return pathPosix3.normalize(joined);
 }
 
 // plugins/core/extractors/external-url-counter/index.ts
-var ID5 = "external-url-counter";
+var ID7 = "external-url-counter";
 var count2 = {
   slot: "card.footer.left",
   icon: "pi-link",
@@ -1712,7 +1844,7 @@ var settings = {
 var URL_RE = /https?:\/\/[^\s<>"'`)\]]+/g;
 var TRAILING_PUNCT = /[.,;:!?]+$/;
 var externalUrlCounterExtractor = {
-  id: ID5,
+  id: ID7,
   pluginId: CORE_PLUGIN_ID,
   kind: "extractor",
   description: "Counts the distinct external URLs in a node's body and shows the count on the card. Example: a body linking `https://example.com` and `https://docs.rs` shows a count of 2.",
@@ -1764,7 +1896,7 @@ var externalUrlCounterExtractor = {
         raw: original,
         candidates: [
           {
-            extractorId: ID5,
+            extractorId: ID7,
             kind: "references",
             target: normalized.href,
             confidence: 0.3,
@@ -1805,12 +1937,12 @@ function normalizeUrl(raw) {
 }
 
 // plugins/core/extractors/markdown-link/index.ts
-import { posix as pathPosix3 } from "path";
-var ID6 = "markdown-link";
+import { posix as pathPosix4 } from "path";
+var ID8 = "markdown-link";
 var LINK_RE = /(?<!!)\[([^\]]*)\]\(([^)\s]+)(?:\s+"[^"]*")?\)/g;
 var URL_SCHEME_RE = /^[a-z][a-z0-9+.-]*:/i;
 var markdownLinkExtractor = {
-  id: ID6,
+  id: ID8,
   pluginId: CORE_PLUGIN_ID,
   kind: "extractor",
   description: "Turns markdown links (`[text](path)`) in a node's body into arrows between nodes in the graph. Example: `[the guide](docs/guide.md)` draws an arrow to `docs/guide.md`.",
@@ -1819,7 +1951,7 @@ var markdownLinkExtractor = {
     const seen = /* @__PURE__ */ new Set();
     const body = stripCodeAndHtml(ctx.body);
     const lineStarts = computeLineStarts(body);
-    const sourceDir = pathPosix3.dirname(ctx.node.path);
+    const sourceDir = pathPosix4.dirname(ctx.node.path);
     for (const match of body.matchAll(LINK_RE)) {
       const original = match[2];
       const resolved = resolveTarget2(sourceDir, original);
@@ -1835,7 +1967,7 @@ var markdownLinkExtractor = {
         raw: match[0],
         candidates: [
           {
-            extractorId: ID6,
+            extractorId: ID8,
             kind: "references",
             target: resolved,
             // 0.95: the `[text](path)` syntax is unambiguous (the spec's
@@ -1866,14 +1998,14 @@ function resolveTarget2(sourceDir, raw) {
   if (URL_SCHEME_RE.test(trimmed)) return null;
   if (trimmed.startsWith("/")) return null;
   const joined = sourceDir === "." ? trimmed : `${sourceDir}/${trimmed}`;
-  return pathPosix3.normalize(joined);
+  return pathPosix4.normalize(joined);
 }
 
 // plugins/core/extractors/mcp-tools/index.ts
-var ID7 = "mcp-tools";
+var ID9 = "mcp-tools";
 var MCP_PATTERN = /^mcp__([a-z0-9][a-z0-9_-]*)__[a-z0-9_-]+$/i;
 var mcpToolsExtractor = {
-  id: ID7,
+  id: ID9,
   pluginId: CORE_PLUGIN_ID,
   kind: "extractor",
   description: "Turns `tools: [mcp__<server>__<tool>]` entries in a node's frontmatter into an MCP node per unique server and an arrow from the source to each one. Example: `tools: [mcp__github__create_pr]` adds an `mcp://github` node and an arrow to it.",
@@ -1904,7 +2036,7 @@ var mcpToolsExtractor = {
         raw: `mcp__${server}__*`,
         candidates: [
           {
-            extractorId: ID7,
+            extractorId: ID9,
             kind: "references",
             target: mcpPath,
             confidence: 0.85,
@@ -1973,10 +2105,10 @@ var ANNOTATION_FIELD_UNKNOWN_TEXTS = {
 };
 
 // plugins/core/analyzers/annotation-field-unknown/index.ts
-var ID8 = "annotation-field-unknown";
+var ID10 = "annotation-field-unknown";
 var RESERVED_ROOT_BLOCKS = /* @__PURE__ */ new Set(["identity", "annotations", "settings", "audit"]);
 var annotationFieldUnknownAnalyzer = {
-  id: ID8,
+  id: ID10,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   description: "Flags typos or unrecognized keys in sidecars (`.sm`).",
@@ -2011,7 +2143,7 @@ var annotationFieldUnknownAnalyzer = {
         for (const key of Object.keys(annotations)) {
           if (!knownAnnotationKeys.has(key)) {
             issues.push({
-              analyzerId: ID8,
+              analyzerId: ID10,
               severity: "warn",
               nodeIds: [node.path],
               message: formatFinding({
@@ -2037,7 +2169,7 @@ var annotationFieldUnknownAnalyzer = {
             if (validator(value)) continue;
             const errors = (validator.errors ?? []).map((e) => `${e.instancePath || "(root)"} ${e.message ?? e.keyword}`).join("; ");
             issues.push({
-              analyzerId: ID8,
+              analyzerId: ID10,
               severity: "warn",
               nodeIds: [node.path],
               message: formatFinding({
@@ -2052,7 +2184,7 @@ var annotationFieldUnknownAnalyzer = {
           continue;
         }
         issues.push({
-          analyzerId: ID8,
+          analyzerId: ID10,
           severity: "warn",
           nodeIds: [node.path],
           message: formatFinding({
@@ -2124,9 +2256,9 @@ var ANNOTATION_ORPHAN_TEXTS = {
 };
 
 // plugins/core/analyzers/annotation-orphan/index.ts
-var ID9 = "annotation-orphan";
+var ID11 = "annotation-orphan";
 var annotationOrphanAnalyzer = {
-  id: ID9,
+  id: ID11,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   description: "Flags sidecars (`.sm`) whose `.md` file no longer exists.",
@@ -2138,7 +2270,7 @@ var annotationOrphanAnalyzer = {
     for (const orphan of orphans) {
       const expectedMdRelative = orphan.relativePath.endsWith(".sm") ? `${orphan.relativePath.slice(0, -".sm".length)}.md` : `${orphan.relativePath}.md`;
       issues.push({
-        analyzerId: ID9,
+        analyzerId: ID11,
         severity: "warn",
         nodeIds: [expectedMdRelative],
         message: formatFinding({
@@ -2181,7 +2313,7 @@ var ANNOTATION_STALE_TEXTS = {
 };
 
 // plugins/core/analyzers/annotation-stale/index.ts
-var ID10 = "annotation-stale";
+var ID12 = "annotation-stale";
 var staleIcon = {
   slot: "card.footer.right",
   icon: "pi-clock",
@@ -2194,7 +2326,7 @@ var staleBadge = {
   priority: 20
 };
 var annotationStaleAnalyzer = {
-  id: ID10,
+  id: ID12,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   description: "Marks sidecars (`.sm`) that are out of date with their `.md`.",
@@ -2214,7 +2346,7 @@ var annotationStaleAnalyzer = {
       const status = staleStatus(node.sidecar);
       if (status === null) continue;
       issues.push({
-        analyzerId: ID10,
+        analyzerId: ID12,
         severity: "info",
         nodeIds: [node.path],
         message: formatFinding({ body: messageFor(status) }),
@@ -2260,9 +2392,9 @@ function tooltipFor(status) {
 }
 
 // plugins/core/analyzers/contribution-orphan/index.ts
-var ID11 = "contribution-orphan";
+var ID13 = "contribution-orphan";
 var contributionOrphanAnalyzer = {
-  id: ID11,
+  id: ID13,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   description: "Warns about plugin data referencing nodes renamed or deleted in the latest scan.",
@@ -2294,12 +2426,12 @@ var EXTRACTOR_COLLISION_TEXTS = {
 };
 
 // plugins/core/analyzers/extractor-collision/index.ts
-var ID12 = "extractor-collision";
+var ID14 = "extractor-collision";
 function signalLines(signal) {
   return signal.range && typeof signal.range.line === "number" ? [signal.range.line] : void 0;
 }
 var extractorCollisionAnalyzer = {
-  id: ID12,
+  id: ID14,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   description: "Reports when two extractors detect something at the same span of body text and the resolver drops one.",
@@ -2323,7 +2455,7 @@ function makeIssue(signal) {
   const loserRange = signal.range ? `${signal.range.start}-${signal.range.end}` : "unknown";
   const winnerRange = `${winner.range.start}-${winner.range.end}`;
   return {
-    analyzerId: ID12,
+    analyzerId: ID14,
     severity: "warn",
     nodeIds: [signal.source],
     message: formatFinding({
@@ -2367,7 +2499,7 @@ var ISSUE_COUNTER_TEXTS = {
 };
 
 // plugins/core/analyzers/issue-counter/index.ts
-var ID13 = "issue-counter";
+var ID15 = "issue-counter";
 var warnCount = {
   slot: "card.footer.right",
   icon: "pi-exclamation-triangle",
@@ -2403,7 +2535,7 @@ function emitTierChips(ctx, ref, severity, counts, singleTooltip, manyTooltip) {
   }
 }
 var issueCounterAnalyzer = {
-  id: ID13,
+  id: ID15,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   description: "Emits one aggregate severity chip per node (error + warn counts) from the live issue accumulator.",
@@ -2466,7 +2598,7 @@ var LINK_COUNTER_TEXTS = {
 };
 
 // plugins/core/analyzers/link-counter/index.ts
-var ID14 = "link-counter";
+var ID16 = "link-counter";
 var linksIn = {
   slot: "card.footer.left",
   icon: "pi-download",
@@ -2482,7 +2614,7 @@ var linksOut = {
   priority: 20
 };
 var linkCounterAnalyzer = {
-  id: ID14,
+  id: ID16,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   description: "Counts incoming and outgoing links per node.",
@@ -2547,10 +2679,10 @@ var LINK_KIND_CONFLICT_TEXTS = {
 };
 
 // plugins/core/analyzers/link-kind-conflict/index.ts
-var ID15 = "link-kind-conflict";
+var ID17 = "link-kind-conflict";
 var NON_CONFLICTING_KINDS = /* @__PURE__ */ new Set(["points"]);
 var linkKindConflictAnalyzer = {
-  id: ID15,
+  id: ID17,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   description: "Flags conflicting arrow meanings between extractors (e.g. `references` vs `invokes`).",
@@ -2598,7 +2730,7 @@ var linkKindConflictAnalyzer = {
       const [source, target] = key.split("\0");
       const kindList = variants.map((v) => v.kind).join(" / ");
       issues.push({
-        analyzerId: ID15,
+        analyzerId: ID17,
         severity: "warn",
         nodeIds: [source, target],
         message: formatFinding({
@@ -2637,9 +2769,9 @@ var LINK_SELF_LOOP_TEXTS = {
 };
 
 // plugins/core/analyzers/link-self-loop/index.ts
-var ID16 = "link-self-loop";
+var ID18 = "link-self-loop";
 var linkSelfLoopAnalyzer = {
-  id: ID16,
+  id: ID18,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   description: "Flags links whose source is also their own resolved target (e.g. a body heading like `# /deploy` inside the file that defines `/deploy`).",
@@ -2649,7 +2781,7 @@ var linkSelfLoopAnalyzer = {
     for (const link of ctx.links) {
       if (!isSelfLoop(link)) continue;
       issues.push({
-        analyzerId: ID16,
+        analyzerId: ID18,
         severity: "warn",
         nodeIds: [link.source],
         message: formatFinding({
@@ -2681,9 +2813,9 @@ var NAME_COLLISION_TEXTS = {
 };
 
 // plugins/core/analyzers/name-collision/index.ts
-var ID17 = "name-collision";
+var ID19 = "name-collision";
 var nameCollisionAnalyzer = {
-  id: ID17,
+  id: ID19,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   mode: "deterministic",
@@ -2697,7 +2829,7 @@ var nameCollisionAnalyzer = {
     for (const [name, claims] of collisions) {
       const paths = claims.map((c) => c.path);
       issues.push({
-        analyzerId: ID17,
+        analyzerId: ID19,
         severity: "error",
         nodeIds: paths,
         message: formatFinding({
@@ -2747,9 +2879,9 @@ var NAME_RESERVED_TEXTS = {
 };
 
 // plugins/core/analyzers/name-reserved/index.ts
-var ID18 = "name-reserved";
+var ID20 = "name-reserved";
 var nameReservedAnalyzer = {
-  id: ID18,
+  id: ID20,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   description: "Flags two kinds of reserved-name collision: a file whose name shadows a built-in command of the active runtime, and a link that resolves to one of those reserved names.",
@@ -2767,7 +2899,7 @@ var nameReservedAnalyzer = {
       const node = byPath3.get(path);
       if (!node) continue;
       issues.push({
-        analyzerId: ID18,
+        analyzerId: ID20,
         severity: "warn",
         nodeIds: [node.path],
         message: formatFinding({
@@ -2789,7 +2921,7 @@ var nameReservedAnalyzer = {
         adjust(link, { kind: "delta", value: -RESERVED_PENALTY });
       }
       issues.push({
-        analyzerId: ID18,
+        analyzerId: ID20,
         severity: "warn",
         nodeIds: [link.source],
         message: formatFinding({
@@ -2841,7 +2973,7 @@ var NODE_STABILITY_TEXTS = {
 };
 
 // plugins/core/analyzers/node-stability/index.ts
-var ID19 = "node-stability";
+var ID21 = "node-stability";
 var EXPERIMENTAL_TOOLTIP = "Experimental: API may change";
 var DEPRECATED_TOOLTIP = "Deprecated: avoid in new code";
 var experimental = {
@@ -2859,7 +2991,7 @@ var deprecated = {
   priority: 10
 };
 var nodeStabilityAnalyzer = {
-  id: ID19,
+  id: ID21,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   description: "Surfaces a node's stability stage on the card: `deprecated` as a chip plus a finding, `experimental` as a chip only; `stable` and unset stay silent.",
@@ -2881,7 +3013,7 @@ var nodeStabilityAnalyzer = {
           severity: "warn"
         });
         issues.push({
-          analyzerId: ID19,
+          analyzerId: ID21,
           severity: "warn",
           nodeIds: [node.path],
           message: formatFinding({ body: tx(NODE_STABILITY_TEXTS.deprecated) }),
@@ -2933,9 +3065,9 @@ var REFERENCE_BROKEN_TEXTS = {
 };
 
 // plugins/core/analyzers/reference-broken/index.ts
-var ID20 = "reference-broken";
+var ID22 = "reference-broken";
 var referenceBrokenAnalyzer = {
-  id: ID20,
+  id: ID22,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   description: "Flags arrows pointing at a node not part of the current scan.",
@@ -2978,7 +3110,7 @@ function penalizeBrokenConfidence(adjust, link) {
 }
 function buildIssue(link) {
   return {
-    analyzerId: ID20,
+    analyzerId: ID22,
     // `error`, not `warn`: a link whose target is not in the scan is a
     // structural defect the operator must notice, and the card chip
     // paints `danger` (red) to match. Per the chip-vs-issue policy in
@@ -3042,9 +3174,9 @@ var REFERENCE_REDUNDANT_TEXTS = {
 };
 
 // plugins/core/analyzers/reference-redundant/index.ts
-var ID21 = "reference-redundant";
+var ID23 = "reference-redundant";
 var referenceRedundantAnalyzer = {
-  id: ID21,
+  id: ID23,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   description: "Flags when one node references the same target through two or more different links (e.g. a markdown link plus a `references:` entry).",
@@ -3067,7 +3199,7 @@ var referenceRedundantAnalyzer = {
       const [source, resolvedTarget] = key.split("\0");
       const flat = flattenOccurrences(links);
       issues.push({
-        analyzerId: ID21,
+        analyzerId: ID23,
         severity: "info",
         nodeIds: [source],
         message: formatFinding({
@@ -3403,9 +3535,9 @@ var SCHEMA_VIOLATION_TEXTS = {
 };
 
 // plugins/core/analyzers/schema-violation/index.ts
-var ID22 = "schema-violation";
+var ID24 = "schema-violation";
 var schemaViolationAnalyzer = {
-  id: ID22,
+  id: ID24,
   pluginId: CORE_PLUGIN_ID,
   kind: "analyzer",
   description: "Flags nodes or links that violate the project schemas.",
@@ -3455,7 +3587,7 @@ function collectNodeFindings(v, node, out) {
   const result = v.validate("node", toNodeForSchema(node));
   if (result.ok) return;
   out.push({
-    analyzerId: ID22,
+    analyzerId: ID24,
     severity: "error",
     nodeIds: [node.path],
     message: formatFinding({
@@ -3470,7 +3602,7 @@ function collectLinkFindings(v, link, out) {
   const result = v.validate("link", toLinkForSchema(link));
   if (result.ok) return;
   out.push({
-    analyzerId: ID22,
+    analyzerId: ID24,
     severity: "error",
     nodeIds: [link.source],
     message: formatFinding({
@@ -3539,13 +3671,13 @@ var ASCII_FORMATTER_TEXTS = {
 };
 
 // plugins/core/formatters/ascii/index.ts
-var ID23 = "ascii";
+var ID25 = "ascii";
 var KIND_ORDER = ["agent", "command", "skill", "markdown"];
 var asciiFormatter = {
-  id: ID23,
+  id: ID25,
   pluginId: CORE_PLUGIN_ID,
   kind: "formatter",
-  formatId: ID23,
+  formatId: ID25,
   description: "Renders the scan as plain text in three sections: nodes (grouped by kind), arrows, and issues. Used by `sm scan --format ascii`.",
   // ASCII tree formatter, header + per-kind sections + per-issue
   // section. Each section iterates and renders; splitting per section
@@ -3639,13 +3771,13 @@ function renderSection(out, kind, group) {
 }
 
 // plugins/core/formatters/json/index.ts
-var ID24 = "json";
+var ID26 = "json";
 var jsonFormatter = {
-  id: ID24,
+  id: ID26,
   pluginId: CORE_PLUGIN_ID,
   kind: "formatter",
   description: "Renders the persisted scan as JSON (conforms to `scan-result.schema.json`). Used by `sm graph --format json` and `GET /api/graph?format=json`.",
-  formatId: ID24,
+  formatId: ID26,
   format(ctx) {
     if (ctx.scanResult !== void 0) {
       return JSON.stringify(ctx.scanResult);
@@ -3792,13 +3924,13 @@ var BUMP_TEXTS = {
 };
 
 // plugins/core/actions/node-bump/index.ts
-var ID25 = "node-bump";
+var ID27 = "node-bump";
 var bumpButton = {
   slot: "inspector.action.button",
   priority: 10
 };
 var nodeBumpAction = {
-  id: ID25,
+  id: ID27,
   pluginId: CORE_PLUGIN_ID,
   kind: "action",
   description: "Marks a node as updated: bumps `annotations.version`, refreshes sidecar hashes, and records the timestamp.",
@@ -3901,13 +4033,13 @@ var NODE_SET_STABILITY_TEXTS = {
 };
 
 // plugins/core/actions/node-set-stability/index.ts
-var ID26 = "node-set-stability";
+var ID28 = "node-set-stability";
 var setStabilityButton = {
   slot: "inspector.action.button",
   priority: 15
 };
 var nodeSetStabilityAction = {
-  id: ID26,
+  id: ID28,
   pluginId: CORE_PLUGIN_ID,
   kind: "action",
   description: "Sets the lifecycle stage of the current node (writes `stability` to the sidecar).",
@@ -3979,9 +4111,9 @@ function invokeSetStability(input, ctx) {
 }
 
 // plugins/core/actions/node-set-tags/index.ts
-var ID27 = "node-set-tags";
+var ID29 = "node-set-tags";
 var nodeSetTagsAction = {
-  id: ID27,
+  id: ID29,
   pluginId: CORE_PLUGIN_ID,
   kind: "action",
   description: "Sets the taxonomy tags of the current node (writes `tags` to the sidecar; whole-array replace).",
@@ -4523,6 +4655,8 @@ var slashCommandExtractor2 = { ...slashCommandExtractor, pluginId: "claude", ver
 var toolsCounterExtractor2 = { ...toolsCounterExtractor, pluginId: "claude", version: VERSION };
 var antigravityProvider2 = { ...antigravityProvider, pluginId: "antigravity", version: VERSION };
 var codexProvider2 = { ...codexProvider, pluginId: "codex", version: VERSION };
+var atFileExtractor2 = { ...atFileExtractor, pluginId: "codex", version: VERSION };
+var dollarSkillExtractor2 = { ...dollarSkillExtractor, pluginId: "codex", version: VERSION };
 var agentSkillsProvider2 = { ...agentSkillsProvider, pluginId: "agent-skills", version: VERSION };
 var coreMarkdownProvider2 = { ...coreMarkdownProvider, pluginId: "core", version: VERSION };
 var backtickPathExtractor2 = { ...backtickPathExtractor, pluginId: "core", version: VERSION };
@@ -4572,7 +4706,9 @@ var builtInPlugins = [
     id: "codex",
     description: "OpenAI Codex CLI platform integration. Classifies TOML sub-agent definitions under `.codex/agents/*.toml`.",
     extensions: [
-      codexProvider2
+      codexProvider2,
+      atFileExtractor2,
+      dollarSkillExtractor2
     ]
   },
   {
@@ -12176,14 +12312,16 @@ import { existsSync as existsSync16 } from "fs";
 import { join as join10 } from "path";
 function detectProvidersFromFilesystem(cwd, providers) {
   const seen = /* @__PURE__ */ new Set();
-  const out = [];
+  const matched = [];
   for (const provider of providers) {
     if (seen.has(provider.id)) continue;
     if (!isDetectableUnderCwd(cwd, provider)) continue;
     seen.add(provider.id);
-    out.push(provider.id);
+    matched.push(provider);
   }
-  return out;
+  const hasVendor = matched.some((p) => p.detect?.fallback !== true);
+  const kept = hasVendor ? matched.filter((p) => p.detect?.fallback !== true) : matched;
+  return kept.map((p) => p.id);
 }
 function isDetectableUnderCwd(cwd, provider) {
   if (!installedDefaultEnabled(provider.stability)) return false;
@@ -17254,7 +17392,7 @@ function classifyLinkSource(source, shortIdToQualified, cachedQualifiedIds, appl
 }
 
 // kernel/orchestrator/node-identifiers.ts
-import { posix as pathPosix4 } from "path";
+import { posix as pathPosix5 } from "path";
 function deriveNodeIdentifiers(node, kindDescriptor) {
   const sources = kindDescriptor?.identifiers;
   if (!sources || sources.length === 0) return [];
@@ -17278,16 +17416,16 @@ function readFrontmatterName(node) {
   return raw.length > 0 ? raw : null;
 }
 function readFilenameBasename(node) {
-  const base = pathPosix4.basename(node.path);
+  const base = pathPosix5.basename(node.path);
   if (!base) return null;
-  const ext = pathPosix4.extname(base);
+  const ext = pathPosix5.extname(base);
   const stem = ext ? base.slice(0, -ext.length) : base;
   return stem.length > 0 ? stem : null;
 }
 function readDirname(node) {
-  const dir = pathPosix4.dirname(node.path);
+  const dir = pathPosix5.dirname(node.path);
   if (!dir || dir === "." || dir === "/") return null;
-  const base = pathPosix4.basename(dir);
+  const base = pathPosix5.basename(dir);
   return base.length > 0 ? base : null;
 }
 function collectNameCollisions(nodes, kindRegistry) {
@@ -17384,7 +17522,7 @@ function lookupAllowedKinds(link, _indexes, ctx) {
 }
 function stripTriggerSigil(normalized) {
   if (!normalized) return null;
-  const trimmed = normalized.replace(/^[/@]/, "").trim();
+  const trimmed = normalized.replace(/^[/@$]/, "").trim();
   return trimmed.length === 0 ? null : trimmed;
 }
 function indexNode(node, ctx, byName) {
@@ -30420,6 +30558,7 @@ function presentationOptionals(ui) {
   if (ui.emoji !== void 0) out.emoji = ui.emoji;
   if (ui.icon !== void 0) out.icon = ui.icon;
   if (ui.hideChip !== void 0) out.hideChip = ui.hideChip;
+  if (ui.invocationSigil !== void 0) out.invocationSigil = ui.invocationSigil;
   return out;
 }
 function resolveProviderBodyField(read) {
@@ -32989,4 +33128,4 @@ function resolveBareDefault() {
   process.exit(ExitCode.Error);
 }
 //# sourceMappingURL=cli.js.map
-//# debugId=75d0c2c2-d08f-5d7c-aa62-3e1d53dd4ef1
+//# debugId=ca8113af-a7ac-5cd7-b45c-03a5974bca86