@saasontools/strauss-kb 0.1.16 → 0.1.18

package/dist/{chunk-H5W53NVU.js → chunk-GSOTMWZZ.js}

@@ -40,10 +40,24 @@ var kbAnchorSchema = z.object({
   hash: z.string().regex(/^sha256:[0-9a-f]{64}$/, {
     message: "hash must be sha256:<64 hex chars>"
   }).optional(),
+  /**
+   * What `hash` was taken over: the span's raw text, or the normalised token
+   * stream a parser sees (`ast`). Absent means `raw`, which is what every
+   * anchor stamped before this field carries, so old hashes keep comparing
+   * the way they were written. An `ast` hash is blind to whitespace and
+   * comments, so reformatting the anchored code is not drift.
+   */
+  hash_kind: z.enum(["raw", "ast"]).optional(),
   /** ISO 8601 timestamp of the last successful resolution. */
   resolved_at: z.string().min(1).optional(),
   /** Line count of the text the hash was taken over. */
-  lines: z.number().int().positive().optional()
+  lines: z.number().int().positive().optional(),
+  /**
+   * Which resolver produced the hashed span. Absent means an anchor stamped
+   * before resolvers were named, which is read as `regex` — the only one
+   * there was. A hash from a different resolver is drift, not a match.
+   */
+  resolver: z.enum(["tree-sitter", "regex"]).optional()
 }).strict();
 var kbLinkSchema = z.object({
   target: z.string().min(1),
@@ -518,8 +532,8 @@ function safeSegment(value) {
 function revRef(rev) {
   const safe = rev.replace(/[^A-Za-z0-9_-]/g, "-").slice(0, 64);
   let hash = 5381;
-  for (let at = 0; at < rev.length; at++) {
-    hash = (hash * 33 ^ rev.charCodeAt(at)) >>> 0;
+  for (let at2 = 0; at2 < rev.length; at2++) {
+    hash = (hash * 33 ^ rev.charCodeAt(at2)) >>> 0;
   }
   return `refs/strauss/${safe}-${hash.toString(16)}`;
 }
@@ -542,9 +556,9 @@ async function mapLimit(items, limit, fn) {
     { length: Math.min(limit, items.length) },
     async () => {
       while (!failed && next < items.length) {
-        const at = next++;
+        const at2 = next++;
         try {
-          out[at] = await fn(items[at], at);
+          out[at2] = await fn(items[at2], at2);
         } catch (error) {
           failed = true;
           throw error;
@@ -657,8 +671,8 @@ function repoUrlIsSafe(repo) {
   if (!scheme?.[1]) return false;
   if (!allowed.includes(scheme[1].toLowerCase())) return false;
   const authority = url.slice(scheme[0].length).split("/")[0] ?? "";
-  const at = authority.lastIndexOf("@");
-  return at < 0 || !authority.slice(0, at).includes(":");
+  const at2 = authority.lastIndexOf("@");
+  return at2 < 0 || !authority.slice(0, at2).includes(":");
 }
 function protocolArgs() {
   const allowed = allowedProtocols();
@@ -709,18 +723,18 @@ async function readOneRepo(repo, url, declared, context) {
   if (!repoUrlIsSafe(url)) return all({ ok: false, reason: "repo-invalid" });
   const cache = cachePathFor(repo, context.cacheDir);
   if (!cache) return all({ ok: false, reason: "remote-unreachable" });
-  const rejected = /* @__PURE__ */ new Map();
+  const rejected2 = /* @__PURE__ */ new Map();
   const usable = [];
   for (const want of wants) {
     const reason = wantReason(want);
     if (reason)
-      rejected.set(wantKey(repo, want.ref, want.file), { ok: false, reason });
+      rejected2.set(wantKey(repo, want.ref, want.file), { ok: false, reason });
     else usable.push(want);
   }
-  if (!usable.length) return rejected;
+  if (!usable.length) return rejected2;
   wants = usable;
   const opened = await openCache(cache, url, context);
-  if (opened) return new Map([...rejected, ...all(opened)]);
+  if (opened) return new Map([...rejected2, ...all(opened)]);
   const wantsDefault = wants.some((want) => want.ref === void 0);
   const branch = wantsDefault ? await defaultBranch(cache, context) : {};
   const revs = /* @__PURE__ */ new Map();
@@ -747,9 +761,9 @@ async function readOneRepo(repo, url, declared, context) {
     }
   );
   return new Map([
-    ...rejected,
+    ...rejected2,
     ...wants.map(
-      (want, at) => [wantKey(repo, want.ref, want.file), reads[at]]
+      (want, at2) => [wantKey(repo, want.ref, want.file), reads[at2]]
     )
   ]);
 }
@@ -799,13 +813,13 @@ async function defaultBranch(cache, context) {
     if (!listed.ok) {
       const reason = transportReason(listed.stderr);
       if (reason !== "ref-not-found") {
-        const cached2 = await cachedBranch(cache);
-        return cached2 ? { name: cached2 } : { reason };
+        const cached3 = await cachedBranch(cache);
+        return cached3 ? { name: cached3 } : { reason };
       }
     }
   }
-  const cached = await cachedBranch(cache);
-  if (cached) return { name: cached };
+  const cached2 = await cachedBranch(cache);
+  if (cached2) return { name: cached2 };
   return {
     reason: context.offline ? "remote-unreachable" : "default-branch-unknown"
   };
@@ -832,8 +846,8 @@ async function ensureRev(cache, rev, context) {
       cwd: cache
     }
   );
-  const cached = have.ok && have.stdout.trim().length > 0;
-  if (cached && (context.offline || IMMUTABLE_REV.test(rev))) return void 0;
+  const cached2 = have.ok && have.stdout.trim().length > 0;
+  if (cached2 && (context.offline || IMMUTABLE_REV.test(rev))) return void 0;
   if (context.offline) return { ok: false, reason: "remote-unreachable" };
   const fetched = await git(
     [
@@ -849,7 +863,7 @@ async function ensureRev(cache, rev, context) {
   );
   if (!fetched.ok) {
     const reason = transportReason(fetched.stderr);
-    if (cached && reason !== "ref-not-found") return void 0;
+    if (cached2 && reason !== "ref-not-found") return void 0;
     return { ok: false, reason };
   }
   const head = await git(["rev-parse", "FETCH_HEAD"], { cwd: cache });
@@ -960,67 +974,654 @@ async function readAnchorFiles(files, read, concurrency = DEFAULT_IO_CONCURRENCY
       return { ok: false, reason: "file-unreadable" };
     }
   });
-  return new Map(wanted.map((file, at) => [file, results[at]]));
+  return new Map(wanted.map((file, at2) => [file, results[at2]]));
+}
+
+// src/grammars/store.ts
+import { createHash, randomBytes } from "crypto";
+import { mkdir as mkdir2, readFile as readFile2, rename, rm, writeFile } from "fs/promises";
+import { homedir as homedir2 } from "os";
+import { dirname, join as join2 } from "path";
+function grammarsCacheRoot(override) {
+  return override ?? process.env["STRAUSS_KB_GRAMMARS_DIR"] ?? join2(homedir2(), ".strauss", "grammars");
+}
+function grammarCachePath(root, language, sha2564, extension = "wasm") {
+  return join2(root, language, `${sha2564.slice(0, 12)}.${extension}`);
+}
+function sha256(bytes) {
+  return createHash("sha256").update(bytes).digest("hex");
+}
+function matches(bytes, entry) {
+  if (entry.bytes !== void 0 && bytes.byteLength !== entry.bytes)
+    return false;
+  return sha256(bytes) === entry.sha256;
+}
+async function verifyCached(path, entry) {
+  let bytes;
+  try {
+    bytes = await readFile2(path);
+  } catch {
+    return false;
+  }
+  if (matches(bytes, entry)) return true;
+  await rm(path, { force: true });
+  return false;
+}
+async function writeCached(path, bytes) {
+  await mkdir2(dirname(path), { recursive: true });
+  const temporary = `${path}.${process.pid}.${randomBytes(4).toString("hex")}.tmp`;
+  try {
+    await writeFile(temporary, bytes);
+    await rename(temporary, path);
+  } catch (error) {
+    await rm(temporary, { force: true });
+    throw error;
+  }
+}
+
+// src/grammars/manifest.ts
+import { existsSync, readFileSync } from "fs";
+import { dirname as dirname2, join as join3 } from "path";
+import { fileURLToPath } from "url";
+
+// src/grammars/model.ts
+import { z as z4 } from "zod";
+var sha2562 = z4.string().regex(/^[0-9a-f]{64}$/);
+var grammarWasmSchema = z4.object({
+  url: z4.string().min(1),
+  sha256: sha2562,
+  bytes: z4.number().int().positive()
+});
+var grammarTagsSchema = z4.object({ url: z4.string().min(1), sha256: sha2562 });
+var grammarPackSchema = z4.object({
+  package: z4.string().min(1),
+  wasm: grammarWasmSchema,
+  tags: z4.array(grammarTagsSchema),
+  license: z4.string().min(1),
+  extensions: z4.array(z4.string().min(1))
+});
+var grammarManifestSchema = z4.object({
+  /** The runtime the packs were proved against. */
+  webTreeSitter: z4.string().min(1),
+  linguist: z4.object({ tag: z4.string().min(1), commit: z4.string().min(1) }),
+  packs: z4.record(z4.string().min(1), grammarPackSchema)
+});
+
+// src/grammars/manifest.ts
+var cached;
+function grammarManifest() {
+  cached ??= grammarManifestSchema.parse(
+    JSON.parse(readFileSync(grammarsDataPath("manifest.json"), "utf8"))
+  );
+  return cached;
+}
+function grammarsDataPath(...segments) {
+  let dir = dirname2(fileURLToPath(import.meta.url));
+  for (let up = 0; up < 5; up++) {
+    const candidate = join3(dir, "grammars");
+    if (existsSync(join3(candidate, "manifest.json")))
+      return join3(candidate, ...segments);
+    dir = dirname2(dir);
+  }
+  throw new Error("grammars/manifest.json is missing from the package");
+}
+
+// src/grammars/index.ts
+import { readFile as readFile3 } from "fs/promises";
+
+// src/grammars/fetch.ts
+var ATTEMPTS = 3;
+var BACKOFF_MS = 250;
+function grammarUrl(url, override) {
+  const base2 = grammarsBaseUrl(override);
+  if (!base2) return url;
+  let root = base2;
+  while (root.endsWith("/")) root = root.slice(0, -1);
+  const pinned = new URL(url);
+  return `${root}${pinned.pathname}${pinned.search}`;
+}
+function grammarsBaseUrl(override) {
+  return override ?? process.env["STRAUSS_KB_GRAMMARS_URL"];
+}
+async function downloadPart(url, name, entry, options = {}) {
+  const log = options.log ?? ((line) => void process.stderr.write(line));
+  const weight = entry.bytes === void 0 ? "" : ` (${size(entry.bytes)} from manifest)`;
+  log(`strauss-kb: downloading ${name}${weight} from ${url}
+`);
+  let cause = "";
+  for (let attempt = 1; attempt <= ATTEMPTS; attempt++) {
+    const outcome = await attemptDownload(url, entry, options.fetchTimeoutMs);
+    if ("bytes" in outcome) return outcome;
+    cause = outcome.cause;
+    log(
+      `strauss-kb: ${name} attempt ${attempt}/${ATTEMPTS} failed: ${cause}
+`
+    );
+    if (!outcome.retry) break;
+    if (attempt < ATTEMPTS) await pause(BACKOFF_MS * attempt);
+  }
+  log(`strauss-kb: ${name} not downloaded: ${cause}
+`);
+  return { cause };
+}
+async function attemptDownload(url, entry, timeoutMs) {
+  try {
+    const response = await fetch(url, {
+      signal: AbortSignal.timeout(fetchTimeoutMs(timeoutMs))
+    });
+    if (!response.ok) {
+      return {
+        cause: `HTTP ${response.status}`,
+        retry: response.status >= 500 || response.status === 429
+      };
+    }
+    const bytes = new Uint8Array(await response.arrayBuffer());
+    if (!matches(bytes, entry))
+      return { cause: "sha256 mismatch", retry: false };
+    return { bytes };
+  } catch (error) {
+    const timedOut = error instanceof Error && (error.name === "TimeoutError" || error.name === "AbortError");
+    return { cause: timedOut ? "timeout" : "network error", retry: true };
+  }
+}
+function size(bytes) {
+  return bytes >= 1024 * 1024 ? `${(bytes / (1024 * 1024)).toFixed(1)} MB` : `${Math.round(bytes / 1024)} KB`;
+}
+function pause(ms) {
+  return new Promise((resolve6) => setTimeout(resolve6, ms));
+}
+
+// src/grammars/index.ts
+var inFlight = /* @__PURE__ */ new Map();
+var missing = /* @__PURE__ */ new Map();
+var uncompilable = /* @__PURE__ */ new Map();
+var rejected = /* @__PURE__ */ new Map();
+function grammarsDownloadDisabled() {
+  return process.env["STRAUSS_KB_GRAMMARS"] === "off";
+}
+async function ensureGrammar(language, options = {}) {
+  const pack2 = grammarManifest().packs[language];
+  if (!pack2) return null;
+  const root = grammarsCacheRoot(options.cacheRoot);
+  const wasm = grammarCachePath(root, language, pack2.wasm.sha256);
+  const key = `${wasm} ${grammarsBaseUrl(options.baseUrl) ?? ""}`;
+  const existing = inFlight.get(key);
+  if (existing) return existing;
+  const pending = (async () => {
+    const grammar = await ensurePart(
+      wasm,
+      `tree-sitter-${language}`,
+      pack2.wasm,
+      options
+    );
+    if (grammar !== true)
+      return miss(language, `grammar tree-sitter-${language}`, grammar);
+    const parts = [];
+    const total = pack2.tags.length;
+    for (const [at2, part] of pack2.tags.entries()) {
+      const name = `${language} tags${total > 1 ? ` part ${at2 + 1}/${total}` : ""}`;
+      const path = grammarCachePath(root, language, part.sha256, "scm");
+      const held = await ensurePart(path, name, part, options);
+      if (held !== true) return miss(language, name, held);
+      parts.push(`; ${part.url}
+${lf(await readFile3(path, "utf8"))}`);
+    }
+    missing.delete(language);
+    return { wasm, query: total ? parts.join("\n") : void 0 };
+  })();
+  inFlight.set(key, pending);
+  const result = await pending;
+  if (result === null) inFlight.delete(key);
+  return result;
+}
+async function ensurePart(path, name, entry, options) {
+  if (await verifyCached(path, entry)) return true;
+  if (options.offline === true || grammarsDownloadDisabled()) return {};
+  const download = await downloadPart(
+    grammarUrl(entry.url, options.baseUrl),
+    name,
+    entry,
+    options
+  );
+  if ("cause" in download) return { cause: download.cause };
+  await writeCached(path, download.bytes).catch(() => null);
+  return true;
+}
+function miss(language, subject, failure) {
+  missing.set(language, { subject, ...failure });
+  return null;
+}
+function lf(body) {
+  return body.replace(/\r\n/g, "\n");
+}
+function noteUncompilableQuery(language, cause) {
+  uncompilable.set(language, cause);
+}
+function noteRejectedGrammar(language, cause) {
+  rejected.set(language, cause);
+}
+function grammarHints() {
+  const manifest = grammarManifest();
+  const packs = manifest.packs;
+  const lines = /* @__PURE__ */ new Map();
+  for (const [language, { subject, cause }] of missing)
+    lines.set(
+      language,
+      `${subject} not cached${cause ? ` (${cause})` : ""}; run online once, or set STRAUSS_KB_GRAMMARS_DIR`
+    );
+  for (const [language, cause] of rejected)
+    lines.set(
+      language,
+      `${packs[language]?.package ?? `tree-sitter-${language}`} rejected by web-tree-sitter ${manifest.webTreeSitter}${cause ? `: ${cause}` : ""}; re-pin with pnpm grammars pin ${language}`
+    );
+  for (const [language, cause] of uncompilable)
+    lines.set(
+      language,
+      `tags query for ${language} does not compile against ${packs[language]?.package ?? `tree-sitter-${language}`}: ${cause}; re-pin with pnpm grammars pin ${language}`
+    );
+  return [...lines].sort(([a], [b]) => a.localeCompare(b)).map(([, line]) => line);
+}
+
+// src/tree-sitter-resolver/languages.ts
+import { extname } from "path";
+var table;
+function extensionTable() {
+  const manifest = grammarManifest();
+  if (table?.of !== manifest)
+    table = {
+      of: manifest,
+      extensions: Object.fromEntries(
+        Object.entries(manifest.packs).flatMap(
+          ([language, pack2]) => pack2.extensions.map((extension) => [extension, language])
+        )
+      )
+    };
+  return table.extensions;
+}
+function hasQuery(language) {
+  return (grammarManifest().packs[language]?.tags.length ?? 0) > 0;
+}
+function languageForFile(file) {
+  const language = extensionTable()[extname(file).toLowerCase()];
+  return language && hasQuery(language) ? language : void 0;
+}
+function treeSitterLanguages() {
+  return [...new Set(Object.values(extensionTable()))].filter(hasQuery).sort();
+}
+
+// src/tree-sitter-resolver/resolver.ts
+import { createHash as createHash2 } from "crypto";
+import { Language, Parser, Query } from "web-tree-sitter";
+
+// src/tree-sitter-resolver/definitions.ts
+var SCOPE_ONLY = "reference.implementation";
+function index(tree, query) {
+  const byName = /* @__PURE__ */ new Map();
+  for (const match of query.matches(tree.rootNode)) {
+    const nameNode = match.captures.find((capture) => capture.name === "name");
+    const defNode = match.captures.find(
+      (capture) => capture.name.startsWith("definition.") || capture.name === SCOPE_ONLY
+    );
+    if (!nameNode || !defNode) continue;
+    const candidate = {
+      node: defNode.node,
+      name: nameNode.node.text,
+      target: defNode.name !== SCOPE_ONLY
+    };
+    const existing = byName.get(nameNode.node.id);
+    if (existing && width(existing.node) <= width(candidate.node)) continue;
+    byName.set(nameNode.node.id, candidate);
+  }
+  const definitions = [...byName.values()];
+  return {
+    tree,
+    byNodeId: new Map(
+      definitions.map((definition) => [definition.node.id, definition])
+    ),
+    definitions
+  };
+}
+function select(parsed, wanted) {
+  const matches3 = parsed.definitions.filter(
+    (definition) => definition.target && endsWith(chainOf(definition, parsed.byNodeId), wanted)
+  );
+  if (matches3.length < 2) return matches3;
+  const bodied = matches3.filter(
+    (definition) => definition.node.childForFieldName("body") !== null
+  );
+  return bodied.length === 1 ? bodied : matches3;
+}
+function chainOf(definition, byNodeId) {
+  const chain = [definition.name];
+  const receiver = definition.node.childForFieldName("receiver");
+  const type = receiver && typeNameIn(receiver);
+  if (type) chain.unshift(type);
+  for (let node = definition.node.parent; node; node = node.parent) {
+    const enclosing = byNodeId.get(node.id);
+    if (enclosing && enclosing.node !== definition.node)
+      chain.unshift(enclosing.name);
+  }
+  return chain;
+}
+function typeNameIn(receiver) {
+  const stack = [receiver];
+  while (stack.length) {
+    const node = stack.pop();
+    if (node.type === "type_identifier") return node.text;
+    for (let at2 = 0; at2 < node.childCount; at2++) {
+      const child = node.child(at2);
+      if (child) stack.push(child);
+    }
+  }
+  return void 0;
+}
+function endsWith(chain, wanted) {
+  if (wanted.length > chain.length) return false;
+  const offset = chain.length - wanted.length;
+  return wanted.every((segment, at2) => chain[offset + at2] === segment);
+}
+function width(node) {
+  return node.endIndex - node.startIndex;
+}
+function spanOf(definition, source) {
+  let start = definition.node;
+  let end = definition.node;
+  for (let sibling = start.previousSibling; sibling?.type === "decorator"; sibling = sibling.previousSibling) {
+    start = sibling;
+  }
+  const parent = end.parent;
+  if (parent?.type === "export_statement" && parent.childForFieldName("declaration")?.id === end.id) {
+    start = parent;
+    end = parent;
+  }
+  const lines = source.split("\n");
+  const startLine = start.startPosition.row;
+  const endLine = end.endPosition.column === 0 && end.endPosition.row > startLine ? end.endPosition.row - 1 : end.endPosition.row;
+  return {
+    text: lines.slice(startLine, endLine + 1).join("\n"),
+    startLine: startLine + 1,
+    endLine: endLine + 1
+  };
+}
+
+// src/tree-sitter-resolver/tokens.ts
+function tokens(root) {
+  const out = [];
+  const stack = [root];
+  while (stack.length) {
+    const node = stack.pop();
+    if (node.type.includes("comment")) continue;
+    if (node.childCount === 0) {
+      const text = node.text.trim();
+      if (text) out.push(text);
+      continue;
+    }
+    for (let at2 = node.childCount - 1; at2 >= 0; at2--) {
+      const child = node.child(at2);
+      if (child) stack.push(child);
+    }
+  }
+  return out;
+}
+
+// src/tree-sitter-resolver/resolver.ts
+var TREE_CACHE_LIMIT = 32;
+var TreeSitterResolver = class {
+  name = "tree-sitter";
+  grammars;
+  loaded = /* @__PURE__ */ new Map();
+  trees = /* @__PURE__ */ new Map();
+  parser;
+  initialized = false;
+  /** Cache effectiveness, for tests and for the latency numbers. */
+  stats = { parses: 0, cacheHits: 0 };
+  constructor(options = {}) {
+    this.grammars = options;
+  }
+  /**
+   * Loads the grammars these files need, once per language per process,
+   * downloading each one on first use.
+   *
+   * A grammar that will not load is remembered as unavailable rather than
+   * retried per anchor, and never throws: an unobtainable WASM is a finding.
+   */
+  async prepare(files) {
+    const wanted = /* @__PURE__ */ new Set();
+    for (const file of files) {
+      const language = languageForFile(file);
+      if (language && !this.loaded.has(language)) wanted.add(language);
+    }
+    if (!wanted.size) return;
+    if (!this.initialized) {
+      try {
+        await Parser.init();
+        this.parser = new Parser();
+        this.initialized = true;
+      } catch {
+        for (const language of wanted) this.loaded.set(language, null);
+        return;
+      }
+    }
+    const languages = [...wanted];
+    const loaded = await mapLimit(
+      languages,
+      Math.min(DEFAULT_IO_CONCURRENCY, languages.length),
+      (language) => this.load(language)
+    );
+    languages.forEach(
+      (language, at2) => this.loaded.set(language, loaded[at2] ?? null)
+    );
+  }
+  /**
+   * An unobtainable grammar, one this runtime refuses, and a query that will
+   * not compile are three faults with three repairs; all are reported through
+   * the grammars module so every hint has one home.
+   */
+  async load(language) {
+    let pack2;
+    try {
+      pack2 = await ensureGrammar(language, this.grammars);
+    } catch {
+      return null;
+    }
+    if (!pack2?.query) return null;
+    let grammar;
+    try {
+      grammar = await Language.load(pack2.wasm);
+    } catch (error) {
+      noteRejectedGrammar(language, why(error));
+      return null;
+    }
+    try {
+      return { language: grammar, query: new Query(grammar, pack2.query) };
+    } catch (error) {
+      noteUncompilableQuery(language, why(error));
+      return null;
+    }
+  }
+  /**
+   * Abstains on an extension with no grammar so the regex resolver gets a
+   * turn; reports `resolver-unavailable` when the grammar exists in principle
+   * but could not be loaded, because falling back there would silently trade a
+   * precise span for a guessed one.
+   */
+  attempt(source, symbol, file) {
+    const language = file ? languageForFile(file) : void 0;
+    if (!language) return { kind: "abstain" };
+    if (!this.loaded.has(language)) return { kind: "abstain" };
+    const loaded = this.loaded.get(language);
+    if (!loaded) return { kind: "unresolved", reason: "resolver-unavailable" };
+    const parsed = this.parse(language, loaded, source);
+    if (!parsed) return { kind: "unresolved", reason: "resolver-unavailable" };
+    const wanted = symbol.split(".").filter(Boolean);
+    if (!wanted.length)
+      return { kind: "unresolved", reason: "symbol-not-found" };
+    const matches3 = select(parsed, wanted);
+    if (!matches3.length)
+      return { kind: "unresolved", reason: "symbol-not-found" };
+    if (matches3.length > 1)
+      return { kind: "unresolved", reason: "symbol-ambiguous" };
+    return { kind: "resolved", span: spanOf(matches3[0], source) };
+  }
+  resolve(source, symbol, file) {
+    const attempt = this.attempt(source, symbol, file);
+    return attempt.kind === "resolved" ? attempt.span : null;
+  }
+  /** Parsed trees are keyed by content hash, so an unchanged file parses once. */
+  parse(language, loaded, source) {
+    const key = `${language}:${createHash2("sha256").update(source).digest("hex")}`;
+    const cached2 = this.trees.get(key);
+    if (cached2) {
+      this.stats.cacheHits += 1;
+      return cached2;
+    }
+    const parser = this.parser;
+    if (!parser) return null;
+    let parsed;
+    try {
+      parser.setLanguage(loaded.language);
+      const tree = parser.parse(source);
+      if (!tree) return null;
+      parsed = index(tree, loaded.query);
+    } catch {
+      return null;
+    }
+    this.stats.parses += 1;
+    if (this.trees.size >= TREE_CACHE_LIMIT) {
+      const oldest = this.trees.keys().next();
+      if (!oldest.done) {
+        this.trees.get(oldest.value)?.tree.delete();
+        this.trees.delete(oldest.value);
+      }
+    }
+    this.trees.set(key, parsed);
+    return parsed;
+  }
+  /**
+   * Every definition this file declares, as dotted symbol and span.
+   *
+   * The inverse of `attempt`: that asks "where is this name", this asks "what
+   * names are here". `moved` needs the second — the stored hash has to be
+   * looked for at every definition in the repository, and there is no name to
+   * ask about, since the whole question is which name now carries that code.
+   */
+  spans(source, file) {
+    const language = languageForFile(file);
+    if (!language) return [];
+    const loaded = this.loaded.get(language);
+    if (!loaded) return [];
+    const parsed = this.parse(language, loaded, source);
+    if (!parsed) return [];
+    return parsed.definitions.filter((definition) => definition.target).map((definition) => ({
+      symbol: chainOf(definition, parsed.byNodeId).join("."),
+      span: spanOf(definition, source)
+    }));
+  }
+  /**
+   * The token stream of a span: every leaf the parser sees, comments dropped,
+   * joined by single spaces.
+   *
+   * This is what makes a reformat not be drift. Hashing it rather than the raw
+   * text means indentation, line breaks, trailing commas the formatter moved,
+   * and every comment above or inside the definition are outside the hash —
+   * and a renamed identifier or a changed literal is still inside it, because
+   * those are leaves.
+   *
+   * `null` when the file has no grammar, the grammar would not load, or the
+   * text will not parse: no normalisation is better than a guessed one.
+   */
+  normalize(text, file) {
+    const language = file ? languageForFile(file) : void 0;
+    if (!language) return null;
+    const loaded = this.loaded.get(language);
+    if (!loaded) return null;
+    const parser = this.parser;
+    if (!parser) return null;
+    let tree;
+    try {
+      parser.setLanguage(loaded.language);
+      tree = parser.parse(text);
+    } catch {
+      return null;
+    }
+    if (!tree) return null;
+    try {
+      return tokens(tree.rootNode).join(" ");
+    } finally {
+      tree.delete();
+    }
+  }
+  /** Drops cached trees. Grammars stay loaded — they are immutable. */
+  reset() {
+    for (const parsed of this.trees.values()) parsed.tree.delete();
+    this.trees.clear();
+    this.stats.parses = 0;
+    this.stats.cacheHits = 0;
+  }
+};
+function why(error) {
+  const text = error instanceof Error ? error.message : String(error);
+  return text || "no reason given";
 }
 
 // src/anchor-resolver/resolver.ts
-import { createHash } from "crypto";
+import { createHash as createHash3 } from "crypto";
 var PARENT_SCOPE_LINES = 50;
 var CLEAN_STATE = { blockComment: false, template: false };
 function stripLine(line, state) {
   let out = "";
-  let index = 0;
+  let index2 = 0;
   let { blockComment, template } = state;
-  while (index < line.length) {
-    const char = line[index];
-    const next = line[index + 1];
+  while (index2 < line.length) {
+    const char = line[index2];
+    const next = line[index2 + 1];
     if (blockComment) {
       if (char === "*" && next === "/") {
         blockComment = false;
-        index += 2;
+        index2 += 2;
         continue;
       }
-      index += 1;
+      index2 += 1;
       continue;
     }
     if (template) {
       if (char === "\\") {
-        index += 2;
+        index2 += 2;
         continue;
       }
       if (char === "`") template = false;
-      index += 1;
+      index2 += 1;
       continue;
     }
     if (char === "/" && next === "*") {
       blockComment = true;
-      index += 2;
+      index2 += 2;
       continue;
     }
     if (char === "/" && next === "/") break;
     if (char === "`") {
       template = true;
-      index += 1;
+      index2 += 1;
       continue;
     }
     if (char === "'" || char === '"') {
       const quote = char;
-      index += 1;
-      while (index < line.length) {
-        if (line[index] === "\\") {
-          index += 2;
+      index2 += 1;
+      while (index2 < line.length) {
+        if (line[index2] === "\\") {
+          index2 += 2;
           continue;
         }
-        if (line[index] === quote) {
-          index += 1;
+        if (line[index2] === quote) {
+          index2 += 1;
           break;
         }
-        index += 1;
+        index2 += 1;
       }
       continue;
     }
     out += char;
-    index += 1;
+    index2 += 1;
   }
   return { code: out, state: { blockComment, template } };
 }
@@ -1035,8 +1636,8 @@ function captureBraceBlock(lines, matchLine) {
   let depth = 0;
   let opened = false;
   let state = CLEAN_STATE;
-  for (let index = matchLine; index < lines.length; index++) {
-    const stripped = stripLine(lines[index] ?? "", state);
+  for (let index2 = matchLine; index2 < lines.length; index2++) {
+    const stripped = stripLine(lines[index2] ?? "", state);
     state = stripped.state;
     for (const char of stripped.code) {
       if (char === "{") {
@@ -1045,10 +1646,10 @@ function captureBraceBlock(lines, matchLine) {
       } else if (char === "}") {
         depth = Math.max(0, depth - 1);
       } else if (char === ";" && !opened) {
-        return span(lines, matchLine, index);
+        return span(lines, matchLine, index2);
       }
     }
-    if (opened && depth === 0) return span(lines, matchLine, index);
+    if (opened && depth === 0) return span(lines, matchLine, index2);
   }
   return null;
 }
@@ -1057,22 +1658,22 @@ function captureIndentedBlock(lines, matchLine) {
   const header = lines[matchLine] ?? "";
   const indent = header.length - header.trimStart().length;
   let headerEnd = -1;
-  for (let index = matchLine; index < lines.length && index <= matchLine + 20; index++) {
-    const code = stripLine(lines[index] ?? "", CLEAN_STATE).code.trimEnd();
+  for (let index2 = matchLine; index2 < lines.length && index2 <= matchLine + 20; index2++) {
+    const code = stripLine(lines[index2] ?? "", CLEAN_STATE).code.trimEnd();
     if (code.endsWith(":")) {
-      headerEnd = index;
+      headerEnd = index2;
       break;
     }
-    if (code.includes(":")) return span(lines, matchLine, index);
+    if (code.includes(":")) return span(lines, matchLine, index2);
   }
   if (headerEnd === -1) return null;
   let end = headerEnd;
-  for (let index = headerEnd + 1; index < lines.length; index++) {
-    const line = lines[index] ?? "";
+  for (let index2 = headerEnd + 1; index2 < lines.length; index2++) {
+    const line = lines[index2] ?? "";
     if (line.trim() === "") continue;
     const lineIndent = line.length - line.trimStart().length;
     if (lineIndent <= indent) break;
-    end = index;
+    end = index2;
   }
   return end === headerEnd ? null : span(lines, matchLine, end);
 }
@@ -1096,15 +1697,15 @@ var regexResolver = {
     const lines = source.split("\n");
     for (const tier of TIERS) {
       const pattern = tier(escaped);
-      let candidates = lines.map((line, index) => ({ line, index })).filter((entry) => pattern.test(entry.line)).map((entry) => entry.index);
+      let candidates = lines.map((line, index2) => ({ line, index: index2 })).filter((entry) => pattern.test(entry.line)).map((entry) => entry.index);
       if (!candidates.length) continue;
       if (parentPattern && candidates.length > 1) {
         const distances = candidates.map(
-          (index) => distanceToParent(lines, index, parentPattern)
+          (index2) => distanceToParent(lines, index2, parentPattern)
         );
         const nearest = Math.min(...distances);
         if (Number.isFinite(nearest)) {
-          candidates = candidates.filter((_, at) => distances[at] === nearest);
+          candidates = candidates.filter((_, at2) => distances[at2] === nearest);
         }
       }
       if (candidates.length !== 1) return null;
@@ -1117,34 +1718,86 @@ var regexResolver = {
 function escapeRegExp(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function distanceToParent(lines, index, parent) {
-  const floor = Math.max(0, index - PARENT_SCOPE_LINES);
-  for (let at = index; at >= floor; at--) {
-    if (parent.test(lines[at] ?? "")) return index - at;
+function distanceToParent(lines, index2, parent) {
+  const floor = Math.max(0, index2 - PARENT_SCOPE_LINES);
+  for (let at2 = index2; at2 >= floor; at2--) {
+    if (parent.test(lines[at2] ?? "")) return index2 - at2;
   }
   return Number.POSITIVE_INFINITY;
 }
 function hashAnchorText(text) {
-  return `sha256:${createHash("sha256").update(text.replace(/\r\n/g, "\n")).digest("hex")}`;
+  return `sha256:${createHash3("sha256").update(text.replace(/\r\n/g, "\n")).digest("hex")}`;
 }
 function resolveAnchor(source, anchor, resolver = regexResolver) {
+  const outcome = resolveAnchorSpan(source, anchor, [resolver]);
+  return outcome.ok ? outcome.span : null;
+}
+function resolveAnchorSpan(source, anchor, resolvers = [regexResolver]) {
   const normalized = source.replace(/\r\n/g, "\n");
   if (!anchor.symbol) {
     const lines = normalized.split("\n");
     if (lines.length > 1 && lines[lines.length - 1] === "") lines.pop();
     return {
-      text: normalized,
-      startLine: 1,
-      endLine: Math.max(1, lines.length)
+      ok: true,
+      span: {
+        text: normalized,
+        startLine: 1,
+        endLine: Math.max(1, lines.length)
+      }
+    };
+  }
+  for (const resolver of resolvers) {
+    const attempt = resolver.attempt ? resolver.attempt(normalized, anchor.symbol, anchor.file) : fromResolve(resolver, normalized, anchor.symbol, anchor.file);
+    if (attempt.kind === "abstain") continue;
+    if (attempt.kind === "unresolved") {
+      if (attempt.reason === "symbol-not-found") continue;
+      return { ok: false, reason: attempt.reason };
+    }
+    const tokens2 = resolver.normalize?.(attempt.span.text, anchor.file);
+    return {
+      ok: true,
+      span: attempt.span,
+      ...isResolverName(resolver.name) ? { resolver: resolver.name } : {},
+      ...tokens2 ? { normalized: tokens2 } : {}
     };
   }
-  return resolver.resolve(normalized, anchor.symbol);
+  return { ok: false, reason: "symbol-not-found" };
+}
+function fromResolve(resolver, source, symbol, file) {
+  const span2 = resolver.resolve(source, symbol, file);
+  return span2 ? { kind: "resolved", span: span2 } : { kind: "unresolved", reason: "symbol-not-found" };
+}
+function isResolverName(name) {
+  return name === "tree-sitter" || name === "regex";
+}
+async function prepareResolvers(resolvers, files) {
+  for (const resolver of resolvers) await resolver.prepare?.(files);
+}
+function defaultAnchorResolvers(grammars = {}) {
+  return [new TreeSitterResolver(grammars), regexResolver];
+}
+function resolverChanged(source, anchor, produced) {
+  const previous = anchor.resolver ?? "regex";
+  if (!produced || !anchor.symbol || previous === produced) return false;
+  if (previous !== "regex") return false;
+  const before = regexResolver.resolve(
+    source.replace(/\r\n/g, "\n"),
+    anchor.symbol
+  );
+  return before !== null && hashAnchorText(before.text) === anchor.hash;
+}
+function anchorHashOf(anchor, outcome) {
+  const stored = anchor.hash ? anchor.hash_kind ?? "raw" : void 0;
+  const wanted = stored ?? (outcome.normalized ? "ast" : "raw");
+  return wanted === "ast" && outcome.normalized ? { hash: hashAnchorText(outcome.normalized), kind: "ast" } : { hash: hashAnchorText(outcome.span.text), kind: "raw" };
 }
 
 // src/anchor-resolver/drift.ts
 async function detectAnchorDrift(records, options = {}) {
   const repoRoot = options.repoRoot ?? process.cwd();
-  const resolver = options.resolver ?? regexResolver;
+  const resolvers = options.resolvers ?? (options.resolver ? [options.resolver] : defaultAnchorResolvers({
+    offline: options.remote?.offline === true
+  }));
   const origin = new LazyOrigin(repoRoot);
   const planned = /* @__PURE__ */ new Map();
   let declaresRepo = false;
@@ -1182,12 +1835,16 @@ async function detectAnchorDrift(records, options = {}) {
     ),
     (options.readRemote ?? readRemoteAnchors)(wants, options.remote ?? {})
   ]);
+  await prepareResolvers(resolvers, [
+    ...files,
+    ...wants.map((want) => want.file)
+  ]);
   const drift = /* @__PURE__ */ new Map();
   for (const record of records) {
     const entries = [];
     for (const { anchor, foreign } of planned.get(record.conceptId) ?? []) {
       entries.push(
-        foreign ? remoteEntry(anchor, remote, resolver) : localEntry(anchor, reads.get(anchor.file), resolver)
+        foreign ? remoteEntry(anchor, remote, resolvers) : localEntry(anchor, reads.get(anchor.file), resolvers)
       );
     }
     if (entries.length) drift.set(record.conceptId, entries);
@@ -1213,50 +1870,94 @@ function unresolved(anchor, reason, repo) {
     state: "unresolved",
     diffSize: null,
     ...reason ? { reason } : {},
-    ...repo ? { repo } : {}
+    ...repo ? { repo } : {},
+    ...classOf(reason)
+  };
+}
+function provisionalDriftClass(entry) {
+  if (entry.state === "unresolved") {
+    return entry.reason === "file-missing" || entry.reason === "symbol-not-found" ? "gone" : void 0;
+  }
+  return entry.state === "drifted" ? "changed" : void 0;
+}
+function classOf(reason) {
+  const settled = provisionalDriftClass({ state: "unresolved", reason });
+  return settled ? { class: settled } : {};
+}
+function hashIn(source, anchor, resolvers) {
+  const outcome = resolveAnchorSpan(source, anchor, resolvers);
+  if (!outcome.ok) return { ok: false, reason: outcome.reason };
+  const { hash, kind } = anchorHashOf(anchor, outcome);
+  return {
+    ok: true,
+    current: {
+      hash,
+      kind,
+      lines: outcome.span.endLine - outcome.span.startLine + 1,
+      ...outcome.resolver ? { resolver: outcome.resolver } : {}
+    }
   };
 }
-function hashIn(source, anchor, resolver) {
-  const resolved = resolveAnchor(source, anchor, resolver);
-  if (!resolved) return null;
+function resolverExtras(source, anchor, current) {
   return {
-    hash: hashAnchorText(resolved.text),
-    lines: resolved.endLine - resolved.startLine + 1
+    ...current.resolver ? { resolver: current.resolver } : {},
+    ...current.hash !== anchor.hash && resolverChanged(source, anchor, current.resolver) ? { reason: "resolver-changed" } : {}
   };
 }
 function compared(anchor, current, extra = {}) {
+  const matched = current.hash === anchor.hash;
   return {
     ...base(anchor),
-    state: current.hash === anchor.hash ? "match" : "drifted",
+    state: matched ? "match" : "drifted",
     currentHash: current.hash,
+    hashKind: current.kind,
     diffSize: anchor.lines === void 0 ? null : Math.abs(current.lines - anchor.lines),
+    ...matched ? {} : { class: "changed" },
     ...extra
   };
 }
-function localEntry(anchor, read, resolver) {
+function localEntry(anchor, read, resolvers) {
   if (!read.ok) return unresolved(anchor, read.reason);
-  const current = hashIn(read.source, anchor, resolver);
-  return current ? compared(anchor, current) : unresolved(anchor, "symbol-not-found");
+  const found = hashIn(read.source, anchor, resolvers);
+  if (!found.ok) return unresolved(anchor, found.reason);
+  return compared(
+    anchor,
+    found.current,
+    resolverExtras(read.source, anchor, found.current)
+  );
 }
-function remoteEntry(anchor, remote, resolver) {
+function remoteEntry(anchor, remote, resolvers) {
   const repo = anchor.repo;
   const key = normalizeRepoUrl(repo);
   const atDefault = remote.get(wantKey(key, void 0, anchor.file));
   const primary = anchor.ref ? remote.get(wantKey(key, anchor.ref, anchor.file)) : atDefault;
   if (!primary) return unresolved(anchor, "remote-unreachable", repo);
   if (!primary.ok) return unresolved(anchor, primary.reason, repo);
-  const current = hashIn(primary.source, anchor, resolver);
-  if (!current) return unresolved(anchor, "symbol-not-found", repo);
-  if (!anchor.ref) return compared(anchor, current, { repo });
+  const found = hashIn(primary.source, anchor, resolvers);
+  if (!found.ok) return unresolved(anchor, found.reason, repo);
+  const current = found.current;
+  const extras = resolverExtras(primary.source, anchor, current);
+  if (!anchor.ref) return compared(anchor, current, { repo, ...extras });
   if (current.hash !== anchor.hash) {
-    return compared(anchor, current, { repo, remoteState: "drifted-from-ref" });
+    return compared(anchor, current, {
+      repo,
+      ...extras,
+      remoteState: "drifted-from-ref"
+    });
   }
-  const head = atDefault?.ok ? hashIn(atDefault.source, anchor, resolver) : null;
-  return head && head.hash !== anchor.hash ? {
-    ...compared(anchor, head, { repo }),
+  const head = atDefault?.ok ? hashIn(atDefault.source, anchor, resolvers) : null;
+  return head?.ok && head.current.hash !== anchor.hash ? {
+    ...compared(anchor, head.current, {
+      repo,
+      ...head.current.resolver ? { resolver: head.current.resolver } : {}
+    }),
     state: "drifted",
     remoteState: "drifted-on-default"
-  } : compared(anchor, current, { repo, remoteState: "matches-ref" });
+  } : compared(anchor, current, {
+    repo,
+    ...extras,
+    remoteState: "matches-ref"
+  });
 }
 
 // src/errors.ts
@@ -1463,9 +2164,9 @@ var KbStampDigestBaselineError = class extends BaseError {
 // src/kb-pins/budgets.ts
 function asBudgets(value) {
   if (value === null || typeof value !== "object") return {};
-  const table = value;
+  const table2 = value;
   const pick = (key, min) => {
-    const raw = table[key];
+    const raw = table2[key];
     return typeof raw === "number" && Number.isInteger(raw) && raw >= min ? raw : void 0;
   };
   const budgetTokens = pick("budgetTokens", 1);
@@ -1476,9 +2177,9 @@ function asBudgets(value) {
   };
 }
 function contextProfileBudgets(manifest, profile) {
-  const table = manifest.context;
-  if (table === null || typeof table !== "object") return {};
-  const entries = table;
+  const table2 = manifest.context;
+  if (table2 === null || typeof table2 !== "object") return {};
+  const entries = table2;
   return {
     ...asBudgets(entries["default"]),
     ...profile ? asBudgets(entries[profile]) : {}
@@ -1509,15 +2210,15 @@ var KbBaseFrozenError = class extends Error {
 };
 
 // src/kb-pins/model.ts
-import { join as join2 } from "path";
-import { z as z4 } from "zod";
-var PINS_FILE = join2(".strauss", "kb-pins.json");
-var PINS_LOCAL_FILE = join2(".strauss", "kb-pins.local.json");
+import { join as join4 } from "path";
+import { z as z5 } from "zod";
+var PINS_FILE = join4(".strauss", "kb-pins.json");
+var PINS_LOCAL_FILE = join4(".strauss", "kb-pins.local.json");
 var PIN_LAYERS = ["project", "local", "user"];
-var pinSchema = z4.object({
+var pinSchema = z5.object({
   /** Relative to the manifest's root, so the file is committable. */
-  path: z4.string().min(1),
-  pinnedAt: z4.string().min(1).optional(),
+  path: z5.string().min(1),
+  pinnedAt: z5.string().min(1).optional(),
   /**
    * How `context` renders this base. `full` preloads the whole base into
    * the block regardless of the full-under threshold — for a base whose
@@ -1527,7 +2228,7 @@ var pinSchema = z4.object({
    * Absent: the profile's full-under threshold decides. Invalid values
    * degrade to absent rather than failing the manifest.
    */
-  mode: z4.enum(["full", "index"]).optional().catch(void 0),
+  mode: z5.enum(["full", "index"]).optional().catch(void 0),
   /**
    * Context profiles this pin surfaces in (e.g. only at session-start,
    * not per turn). Absent: every profile. A run without a profile sees
@@ -1535,17 +2236,17 @@ var pinSchema = z4.object({
    * that skill at point of use than pinned at all — pins are what every
    * session should see.
    */
-  profiles: z4.array(z4.string()).optional().catch(void 0),
+  profiles: z5.array(z5.string()).optional().catch(void 0),
   /**
    * The base is concluded — a finished piece of research, a frozen ADR
    * set. Write commands against it refuse while this workspace holds the
    * pin, and `context` labels it read-only. Workspace policy, not base
    * state: the base itself stays copyable and writable elsewhere.
    */
-  frozen: z4.boolean().optional().catch(void 0)
+  frozen: z5.boolean().optional().catch(void 0)
 }).passthrough();
-var pinsManifestSchema = z4.object({
-  pins: z4.array(pinSchema).default([]),
+var pinsManifestSchema = z5.object({
+  pins: z5.array(pinSchema).default([]),
   /**
    * Per-repo budgets for the `context` command, keyed by profile —
    * `"session-start"`, `"compact"`, `"turn"`, or `"default"` for all of
@@ -1554,21 +2255,21 @@ var pinsManifestSchema = z4.object({
    * the index at every session start. `contextProfileBudgets` does the
    * tolerant read.
    */
-  context: z4.unknown().optional()
+  context: z5.unknown().optional()
 }).passthrough();
 
 // src/kb-pins/layers.ts
-import { mkdir as mkdir2, readFile as readFile2, writeFile } from "fs/promises";
-import { homedir as homedir2 } from "os";
-import { dirname, isAbsolute as isAbsolute2, join as join3, relative as relative2, resolve as resolve2, sep as sep2 } from "path";
+import { mkdir as mkdir3, readFile as readFile4, writeFile as writeFile2 } from "fs/promises";
+import { homedir as homedir3 } from "os";
+import { dirname as dirname3, isAbsolute as isAbsolute2, join as join5, relative as relative2, resolve as resolve2, sep as sep2 } from "path";
 function userRoot() {
-  return process.env.STRAUSS_KB_USER_ROOT || homedir2();
+  return process.env.STRAUSS_KB_USER_ROOT || homedir3();
 }
 function layerRoot(workspaceDir, layer) {
   return layer === "user" ? userRoot() : resolve2(workspaceDir);
 }
 function layerFile(workspaceDir, layer) {
-  return join3(
+  return join5(
     layerRoot(workspaceDir, layer),
     layer === "local" ? PINS_LOCAL_FILE : PINS_FILE
   );
@@ -1577,7 +2278,7 @@ async function readPinsLayer(workspaceDir, layer) {
   const file = layerFile(workspaceDir, layer);
   let raw;
   try {
-    raw = await readFile2(file, "utf8");
+    raw = await readFile4(file, "utf8");
   } catch {
     return { pins: [] };
   }
@@ -1601,8 +2302,8 @@ async function readPinsLayer(workspaceDir, layer) {
 }
 async function writePinsLayer(workspaceDir, layer, manifest) {
   const file = layerFile(workspaceDir, layer);
-  await mkdir2(dirname(file), { recursive: true });
-  await writeFile(file, `${JSON.stringify(manifest, null, 2)}
+  await mkdir3(dirname3(file), { recursive: true });
+  await writeFile2(file, `${JSON.stringify(manifest, null, 2)}
 `, "utf8");
 }
 function resolvePinPath(rootDir, path) {
@@ -1668,7 +2369,7 @@ async function listPins(store, workspaceDir) {
 }
 
 // src/kb-pins/pin.ts
-async function pinBase(store, workspaceDir, bundlePath2, at, options = {}) {
+async function pinBase(store, workspaceDir, bundlePath2, at2, options = {}) {
   const layer = options.layer ?? "project";
   const root = layerRoot(workspaceDir, layer);
   const manifest = await readPinsLayer(workspaceDir, layer);
@@ -1696,7 +2397,7 @@ async function pinBase(store, workspaceDir, bundlePath2, at, options = {}) {
     return {
       path: existing.path,
       layer,
-      pinnedAt: existing.pinnedAt ?? at,
+      pinnedAt: existing.pinnedAt ?? at2,
       alreadyPinned: true,
       ...updated.mode ? { mode: updated.mode } : {},
       ...updated.profiles ? { profiles: updated.profiles } : {},
@@ -1706,7 +2407,7 @@ async function pinBase(store, workspaceDir, bundlePath2, at, options = {}) {
   }
   const entry = {
     path: storablePath(root, bundlePath2),
-    pinnedAt: at,
+    pinnedAt: at2,
     ...fields
   };
   await writePinsLayer(workspaceDir, layer, {
@@ -1716,7 +2417,7 @@ async function pinBase(store, workspaceDir, bundlePath2, at, options = {}) {
   return {
     path: entry.path,
     layer,
-    pinnedAt: at,
+    pinnedAt: at2,
     alreadyPinned: false,
     ...fields,
     ...warning ? { warning } : {}
@@ -1816,7 +2517,8 @@ function warningAnchor(entry) {
     diffSize,
     ...reason !== void 0 ? { reason } : {},
     ...repo !== void 0 ? { repo } : {},
-    ...remoteState !== void 0 ? { remoteState } : {}
+    ...remoteState !== void 0 ? { remoteState } : {},
+    ...entry.class !== void 0 ? { class: entry.class } : {}
   };
 }
 function resolveHeads(from, byId) {
@@ -1827,8 +2529,8 @@ function resolveHeads(from, byId) {
   while (queue.length) {
     const current = queue.shift();
     const next = successors(current, byId);
-    for (const missing of next.missing) {
-      warnings.push({ kind: "broken-chain", missing });
+    for (const missing2 of next.missing) {
+      warnings.push({ kind: "broken-chain", missing: missing2 });
     }
     if (!next.records.length) {
       if (current.conceptId !== from.conceptId)
@@ -1859,13 +2561,13 @@ function successors(record, byId) {
     }
   }
   const records = [];
-  const missing = [];
+  const missing2 = [];
   for (const id of ids) {
     const found = byId.get(id);
     if (found) records.push(found);
-    else missing.push(id);
+    else missing2.push(id);
   }
-  return { records, missing };
+  return { records, missing: missing2 };
 }
 
 // src/catalog.ts
@@ -1936,7 +2638,7 @@ function indexIsStale(stored, expected) {
 }
 
 // src/kb-context.ts
-import { readFile as readFile3, writeFile as writeFile2 } from "fs/promises";
+import { readFile as readFile5, writeFile as writeFile3 } from "fs/promises";
 var HEADING2 = "## Knowledge bases (pinned)";
 var DEFAULT_CONTEXT_BUDGET = 4e3;
 var CONTEXT_PROFILES = {
@@ -2140,13 +2842,13 @@ function toHookJson(block, event) {
 var CONTEXT_BEGIN = "<!-- strauss-kb:begin -->";
 var CONTEXT_END = "<!-- strauss-kb:end -->";
 async function syncInstructions(file, block) {
-  const existing = await readFile3(file, "utf8").catch(() => null);
+  const existing = await readFile5(file, "utf8").catch(() => null);
   const region = block ? `${CONTEXT_BEGIN}
 ${block.trim()}
 ${CONTEXT_END}` : null;
   if (existing === null) {
     if (!region) return { file, action: "unchanged" };
-    await writeFile2(file, `${region}
+    await writeFile3(file, `${region}
 `, "utf8");
     return { file, action: "created" };
   }
@@ -2157,11 +2859,11 @@ ${CONTEXT_END}` : null;
     const after = existing.slice(end + CONTEXT_END.length);
     const next = region ? `${before}${region}${after}` : `${before.replace(/\n+$/, "\n")}${after.replace(/^\n+/, "\n")}`;
     if (next === existing) return { file, action: "unchanged" };
-    await writeFile2(file, next, "utf8");
+    await writeFile3(file, next, "utf8");
     return { file, action: region ? "replaced" : "removed" };
   }
   if (!region) return { file, action: "unchanged" };
-  await writeFile2(
+  await writeFile3(
     file,
     `${existing.replace(/\n*$/, "\n\n")}${region}
 `,
@@ -2170,6 +2872,405 @@ ${CONTEXT_END}` : null;
   return { file, action: "appended" };
 }
 
+// src/drift/git.ts
+import { execFile as execFile3 } from "child_process";
+import { promisify as promisify3 } from "util";
+var execFileAsync3 = promisify3(execFile3);
+var MAX_GIT_OUTPUT_BYTES = 1048576;
+var GIT_TIMEOUT_MS = 5e3;
+async function git2(cwd, args) {
+  const env = { ...process.env };
+  delete env["GIT_DIR"];
+  delete env["GIT_WORK_TREE"];
+  delete env["GIT_INDEX_FILE"];
+  try {
+    const { stdout } = await execFileAsync3("git", ["-C", cwd, ...args], {
+      timeout: GIT_TIMEOUT_MS,
+      maxBuffer: MAX_GIT_OUTPUT_BYTES,
+      env
+    });
+    return { ok: true, stdout };
+  } catch {
+    return { ok: false };
+  }
+}
+async function listRepoFiles(repoRoot) {
+  const result = await git2(repoRoot, ["ls-files", "-z", "--cached"]);
+  if (!result.ok) return [];
+  return result.stdout.split("\0").filter(Boolean);
+}
+async function readOldSource(repoRoot, anchor) {
+  if (!filePathIsSafe(anchor.file))
+    return { ok: false, reason: "unrecoverable" };
+  if (anchor.ref && refShapeIsSafe(anchor.ref)) {
+    const shown2 = await showFile(repoRoot, anchor.ref, anchor.file);
+    if (shown2 !== null) {
+      return {
+        ok: true,
+        source: shown2,
+        origin: { kind: "ref", ref: anchor.ref }
+      };
+    }
+  }
+  const at2 = anchor.resolved_at;
+  if (!at2 || Number.isNaN(Date.parse(at2))) {
+    return { ok: false, reason: "unrecoverable" };
+  }
+  const found = await git2(repoRoot, [
+    "log",
+    "-1",
+    "--format=%H",
+    `--before=${at2}`,
+    "--end-of-options",
+    "HEAD",
+    "--",
+    anchor.file
+  ]);
+  const sha = found.ok ? found.stdout.trim() : "";
+  if (!sha || !refShapeIsSafe(sha))
+    return { ok: false, reason: "unrecoverable" };
+  const shown = await showFile(repoRoot, sha, anchor.file);
+  if (shown === null) return { ok: false, reason: "unrecoverable" };
+  return { ok: true, source: shown, origin: { kind: "history", ref: sha } };
+}
+async function showFile(repoRoot, ref, file) {
+  const path = file.replace(/^\.\//, "");
+  const result = await git2(repoRoot, [
+    "show",
+    "--end-of-options",
+    `${ref}:${path}`
+  ]);
+  return result.ok ? result.stdout : null;
+}
+
+// src/drift/moved.ts
+import { stat as stat2 } from "fs/promises";
+var MAX_MOVED_SEARCH_FILES = 2e3;
+var SEARCH_BATCH = 64;
+function movedSearch(repoRoot, options = {}) {
+  const read = options.reader ?? anchorFileReader(repoRoot);
+  const sizeOf = options.sizeOf ?? diskSize(repoRoot);
+  const resolver = new TreeSitterResolver();
+  let repoFiles;
+  const prepared = /* @__PURE__ */ new Set();
+  const filesForLanguage = async (language) => {
+    repoFiles ??= listRepoFiles(repoRoot);
+    return (await repoFiles).filter((file) => languageForFile(file) === language).slice(0, MAX_MOVED_SEARCH_FILES);
+  };
+  return {
+    async find(anchor) {
+      const stored = anchor.hash;
+      if (!stored) return void 0;
+      const language = languageForFile(anchor.file);
+      if (!language) return sameFileWindow(anchor, read, stored);
+      const candidates = await filesForLanguage(language);
+      if (!prepared.has(language)) {
+        await resolver.prepare(candidates.length ? candidates : [anchor.file]);
+        prepared.add(language);
+      }
+      const floor = anchor.lines ?? 0;
+      for (let at2 = 0; at2 < candidates.length; at2 += SEARCH_BATCH) {
+        const batch = candidates.slice(at2, at2 + SEARCH_BATCH);
+        const hits = await mapLimit(
+          batch,
+          DEFAULT_IO_CONCURRENCY,
+          async (file) => {
+            const size2 = await sizeOf(file);
+            if (size2 !== null && size2 < floor) return void 0;
+            return matchIn(resolver, read, anchor, stored, file);
+          }
+        );
+        const found = hits.find((hit) => hit !== void 0);
+        if (found) return found;
+      }
+      return void 0;
+    }
+  };
+}
+async function matchIn(resolver, read, anchor, stored, file) {
+  const source = await read(file);
+  if (!source.ok) return void 0;
+  const normalized = source.source.replace(/\r\n/g, "\n");
+  for (const found of resolver.spans(normalized, file)) {
+    const text = anchor.hash_kind === "ast" ? resolver.normalize(found.span.text, file) : found.span.text;
+    if (text === null || hashAnchorText(text) !== stored) continue;
+    if (file === anchor.file && found.symbol === anchor.symbol) continue;
+    return {
+      file,
+      symbol: found.symbol,
+      startLine: found.span.startLine,
+      endLine: found.span.endLine
+    };
+  }
+  return void 0;
+}
+function diskSize(repoRoot) {
+  return async (file) => {
+    const path = anchorFilePath(repoRoot, file);
+    if (path === null) return null;
+    try {
+      return (await stat2(path)).size;
+    } catch {
+      return null;
+    }
+  };
+}
+async function sameFileWindow(anchor, read, stored) {
+  const height = anchor.lines;
+  if (!height || anchor.hash_kind === "ast") return void 0;
+  const source = await read(anchor.file);
+  if (!source.ok) return void 0;
+  const lines = source.source.replace(/\r\n/g, "\n").split("\n");
+  for (let at2 = 0; at2 + height <= lines.length; at2++) {
+    if (hashAnchorText(lines.slice(at2, at2 + height).join("\n")) !== stored) {
+      continue;
+    }
+    return {
+      file: anchor.file,
+      ...anchor.symbol ? { symbol: anchor.symbol } : {},
+      startLine: at2 + 1,
+      endLine: at2 + height
+    };
+  }
+  return void 0;
+}
+
+// src/drift/classify.ts
+async function classifyDrift(repoRoot, record, entries, options = {}) {
+  const anchors = (record.frontmatter.strauss_anchors ?? []).filter(
+    (anchor) => anchor.hash
+  );
+  const reader = options.reader ?? anchorFileReader(repoRoot);
+  const treeSitter = new TreeSitterResolver();
+  const resolvers = [treeSitter, regexResolver];
+  const search = options.search ?? movedSearch(repoRoot, { ...options.reader ? { reader } : {} });
+  const wanted = [];
+  entries.forEach((entry, at2) => {
+    const anchor = anchors[at2];
+    if (!anchor) return;
+    if (entry.state === "match" || isUncheckedReason(entry.reason)) return;
+    wanted.push({ anchor, entry });
+  });
+  if (!wanted.length) return [];
+  await prepareResolvers(
+    resolvers,
+    wanted.map(({ anchor }) => anchor.file)
+  );
+  const out = [];
+  for (const { anchor, entry } of wanted) {
+    const movedTo = await search.find(anchor);
+    if (movedTo) {
+      out.push({
+        anchor,
+        entry: { ...entry, class: "moved", movedTo },
+        class: "moved"
+      });
+      continue;
+    }
+    const newText = await currentText(reader, anchor, resolvers);
+    const old = options.withHistory === false ? { ok: false, reason: "unrecoverable" } : await readOldSource(repoRoot, anchor);
+    const oldText = old.ok ? spanIn(old.source, anchor, resolvers) : void 0;
+    const settled = newText !== void 0 && oldText !== void 0 && sameTokens(treeSitter, anchor.file, oldText, newText) ? "cosmetic" : entry.class ?? "changed";
+    out.push({
+      anchor,
+      entry: { ...entry, class: settled },
+      class: settled,
+      ...newText !== void 0 ? { newText } : {},
+      ...oldText !== void 0 ? { oldText } : {},
+      ...old.ok ? { oldOrigin: old.origin } : {}
+    });
+  }
+  return out;
+}
+function sameTokens(resolver, file, before, after) {
+  if (before === after) return false;
+  const left = resolver.normalize(before, file);
+  const right = resolver.normalize(after, file);
+  return left !== null && left === right;
+}
+async function currentText(reader, anchor, resolvers) {
+  const read = await reader(anchor.file);
+  if (!read.ok) return void 0;
+  return spanIn(read.source, anchor, resolvers);
+}
+function spanIn(source, anchor, resolvers) {
+  const outcome = resolveAnchorSpan(source, anchor, resolvers);
+  return outcome.ok ? outcome.span.text : void 0;
+}
+
+// src/drift/diff.ts
+var MAX_ANCHOR_DIFF_LINES = 200;
+var PACKET_DIFF_LINE_BUDGET = 200;
+var MIN_ANCHOR_DIFF_LINES = 12;
+function diffBudget(anchors) {
+  if (anchors <= 0) return MAX_ANCHOR_DIFF_LINES;
+  return Math.min(
+    MAX_ANCHOR_DIFF_LINES,
+    Math.max(
+      MIN_ANCHOR_DIFF_LINES,
+      Math.floor(PACKET_DIFF_LINE_BUDGET / anchors)
+    )
+  );
+}
+function unifiedDiff(before, after, options = {}) {
+  const max = options.maxLines ?? MAX_ANCHOR_DIFF_LINES;
+  const left = before.replace(/\r\n/g, "\n").split("\n");
+  const right = after.replace(/\r\n/g, "\n").split("\n");
+  const body = [];
+  let added = 0;
+  let removed = 0;
+  for (const edit of edits(left, right)) {
+    if (edit.kind === "same") body.push(` ${edit.line}`);
+    else if (edit.kind === "remove") {
+      body.push(`-${edit.line}`);
+      removed += 1;
+    } else {
+      body.push(`+${edit.line}`);
+      added += 1;
+    }
+  }
+  const truncated = body.length > max;
+  const shown = truncated ? body.slice(0, max) : body;
+  const header = `@@ -1,${left.length} +1,${right.length} @@${options.oldLabel ? ` ${options.oldLabel} \u2192 ${options.newLabel ?? ""}`.trimEnd() : ""}`;
+  const lines = [header, ...shown];
+  if (truncated) lines.push(`\u2026 ${body.length - max} more diff lines`);
+  return { text: lines.join("\n"), added, removed, truncated };
+}
+function edits(left, right) {
+  const rows = left.length;
+  const cols = right.length;
+  const table2 = Array.from(
+    { length: rows + 1 },
+    () => new Array(cols + 1).fill(0)
+  );
+  for (let row2 = rows - 1; row2 >= 0; row2--) {
+    for (let col2 = cols - 1; col2 >= 0; col2--) {
+      table2[row2][col2] = left[row2] === right[col2] ? table2[row2 + 1][col2 + 1] + 1 : Math.max(
+        table2[row2 + 1][col2],
+        table2[row2][col2 + 1]
+      );
+    }
+  }
+  const out = [];
+  let row = 0;
+  let col = 0;
+  while (row < rows && col < cols) {
+    if (left[row] === right[col]) {
+      out.push({ kind: "same", line: left[row] });
+      row += 1;
+      col += 1;
+    } else if (table2[row + 1][col] >= table2[row][col + 1]) {
+      out.push({ kind: "remove", line: left[row] });
+      row += 1;
+    } else {
+      out.push({ kind: "add", line: right[col] });
+      col += 1;
+    }
+  }
+  for (; row < rows; row++)
+    out.push({ kind: "remove", line: left[row] });
+  for (; col < cols; col++)
+    out.push({ kind: "add", line: right[col] });
+  return out;
+}
+
+// src/drift/packet.ts
+var PRESUMED_INVALID = [
+  "fact",
+  "constraint",
+  "contract"
+];
+var RATIONALE_SURVIVES = ["decision", "risk"];
+var DEFAULT_NOTES = {
+  "presumed-invalidated": "the code this claim was taken from changed; presume it no longer holds until re-read",
+  "rationale-may-survive": "the reasoning may outlive the code that implemented it; check whether it does",
+  review: "re-read the record against the new code"
+};
+async function reassessPacket(repoRoot, record, entries, options = {}) {
+  const classified = await classifyDrift(repoRoot, record, entries, {
+    ...options.reader ? { reader: options.reader } : {},
+    ...options.search ? { search: options.search } : {},
+    withHistory: options.withDiff !== false
+  });
+  const open = classified.filter(
+    (found) => found.class === "changed" || found.class === "gone"
+  );
+  if (!open.length) return { packet: null, classified };
+  const budget = diffBudget(open.length);
+  const anchors = open.map(
+    (found) => anchorPacket(found, options.withDiff === true, budget)
+  );
+  const type = record.frontmatter.type;
+  const fallback = isKbRecordType(type) ? PRESUMED_INVALID.includes(type) ? "presumed-invalidated" : RATIONALE_SURVIVES.includes(type) ? "rationale-may-survive" : "review" : "review";
+  return {
+    classified,
+    packet: {
+      conceptId: record.conceptId,
+      title: record.frontmatter.title ?? null,
+      type,
+      standing: options.standing ?? "unsettled",
+      why: record.frontmatter.description ?? null,
+      claim: claimOf(record),
+      anchors,
+      impact: (options.impact?.impacted ?? []).map((entry) => ({
+        conceptId: entry.conceptId,
+        title: entry.title,
+        standing: entry.standing,
+        depth: entry.depth
+      })),
+      impactTruncated: options.impact?.truncated ?? false,
+      default: fallback,
+      defaultNote: DEFAULT_NOTES[fallback]
+    }
+  };
+}
+function anchorPacket(found, withDiff, maxLines) {
+  const { entry } = found;
+  const base2 = {
+    file: entry.file,
+    ...entry.symbol ? { symbol: entry.symbol } : {},
+    class: found.class,
+    ...entry.reason ? { reason: entry.reason } : {},
+    storedHash: entry.storedHash,
+    ...entry.currentHash ? { currentHash: entry.currentHash } : {},
+    diffSize: entry.diffSize,
+    ...entry.movedTo ? { movedTo: entry.movedTo } : {}
+  };
+  if (!withDiff) return base2;
+  if (found.oldText === void 0 || !found.oldOrigin) {
+    return { ...base2, diff: { status: "unrecoverable" } };
+  }
+  const rendered = unifiedDiff(found.oldText, found.newText ?? "", {
+    maxLines
+  });
+  return {
+    ...base2,
+    diff: {
+      status: "ok",
+      source: found.oldOrigin.kind,
+      ref: found.oldOrigin.ref,
+      unified: rendered.text,
+      added: rendered.added,
+      removed: rendered.removed,
+      truncated: rendered.truncated
+    }
+  };
+}
+function claimOf(record) {
+  const type = record.frontmatter.type;
+  const section = isKbRecordType(type) ? RECORD_TYPES[type].sections[0] : void 0;
+  if (!section) return null;
+  const lines = record.body.replace(/\r\n/g, "\n").split("\n");
+  const start = lines.findIndex(
+    (line) => line.trim().toLowerCase() === `## ${section}`.toLowerCase()
+  );
+  if (start < 0) return null;
+  const rest = lines.slice(start + 1);
+  const end = rest.findIndex((line) => line.startsWith("## "));
+  const text = (end < 0 ? rest : rest.slice(0, end)).join("\n").trim();
+  return text ? { section, text } : null;
+}
+
 // src/kb-edges.ts
 var KB_EDGE_KINDS = [
   "body-link",
@@ -2365,6 +3466,18 @@ var CHECK_HEADLINES = {
   unchecked: "an anchor in another repository nothing could reach"
 };
 var DAY_MS = 864e5;
+function anchorResolverCounts(bundle) {
+  let treeSitter = 0;
+  let regex = 0;
+  for (const record of bundle) {
+    for (const anchor of record.frontmatter.strauss_anchors ?? []) {
+      if (!anchor.hash || !anchor.symbol) continue;
+      if (anchor.resolver === "tree-sitter") treeSitter += 1;
+      else regex += 1;
+    }
+  }
+  return { total: treeSitter + regex, treeSitter, regex };
+}
 function doctor(bundle, options = {}) {
   const thresholds = {
     expiringDays: options.expiringDays ?? DEFAULT_EXPIRING_DAYS,
@@ -2400,6 +3513,7 @@ function doctor(bundle, options = {}) {
     counts,
     groups,
     findingCount,
+    anchorResolvers: anchorResolverCounts(bundle),
     healthy: findingCount === 0
   };
 }
@@ -2416,18 +3530,18 @@ function expired(hits, now) {
   for (const hit of hits) {
     const raw = hit.record.frontmatter.stale_after;
     if (!raw) continue;
-    const at = Date.parse(raw);
-    if (Number.isNaN(at)) {
+    const at2 = Date.parse(raw);
+    if (Number.isNaN(at2)) {
       findings.push(
         finding(hit.record, `stale_after "${raw}" is not a readable date`)
       );
       continue;
     }
-    if (at < now.getTime()) {
+    if (at2 < now.getTime()) {
       findings.push(
         finding(
           hit.record,
-          `stale since ${raw} (${daysBetween(at, now.getTime())} days ago)`
+          `stale since ${raw} (${daysBetween(at2, now.getTime())} days ago)`
         )
       );
     }
@@ -2440,12 +3554,12 @@ function expiring(hits, now, withinDays) {
   for (const hit of hits) {
     const raw = hit.record.frontmatter.stale_after;
     if (!raw) continue;
-    const at = Date.parse(raw);
-    if (Number.isNaN(at) || at < now.getTime() || at > horizon) continue;
+    const at2 = Date.parse(raw);
+    if (Number.isNaN(at2) || at2 < now.getTime() || at2 > horizon) continue;
     findings.push(
       finding(
         hit.record,
-        `goes stale ${raw} (in ${daysBetween(now.getTime(), at)} days)`
+        `goes stale ${raw} (in ${daysBetween(now.getTime(), at2)} days)`
       )
     );
   }
@@ -2615,13 +3729,16 @@ function anchorFindings(hits, kind, headline) {
   );
 }
 function describeAnchor(anchor) {
-  const at = anchor.symbol ? `${anchor.file}:${anchor.symbol}` : anchor.file;
-  if (anchor.reason) return `${at} (${anchor.reason})`;
+  const at2 = anchor.symbol ? `${anchor.file}:${anchor.symbol}` : anchor.file;
+  if (anchor.class === "gone") {
+    return `${at2} gone${anchor.reason ? ` (${anchor.reason})` : ""}`;
+  }
+  if (anchor.reason) return `${at2} (${anchor.reason})`;
   if (anchor.remoteState === "drifted-on-default") {
-    return `${at} (matches ref, moved on the default branch)`;
+    return `${at2} (matches ref, moved on the default branch)`;
   }
-  if (anchor.diffSize === null) return `${at} (changed, size unrecorded)`;
-  return anchor.diffSize === 0 ? `${at} (content changed, same line count)` : `${at} (${anchor.diffSize} line${anchor.diffSize === 1 ? "" : "s"} apart)`;
+  if (anchor.diffSize === null) return `${at2} (changed, size unrecorded)`;
+  return anchor.diffSize === 0 ? `${at2} (content changed, same line count)` : `${at2} (${anchor.diffSize} line${anchor.diffSize === 1 ? "" : "s"} apart)`;
 }
 function replaces(later, earlier) {
   return (later.frontmatter.strauss_supersedes ?? []).includes(earlier.conceptId) || earlier.frontmatter.strauss_superseded_by === later.conceptId;
@@ -2638,17 +3755,17 @@ function daysBetween(from, to) {
   return Math.max(0, Math.floor((to - from) / DAY_MS));
 }
 function ageInDays(record, now) {
-  const at = record.frontmatter.generated?.at;
-  if (!at) return null;
-  const written = Date.parse(at);
+  const at2 = record.frontmatter.generated?.at;
+  if (!at2) return null;
+  const written = Date.parse(at2);
   if (Number.isNaN(written)) return null;
   return daysBetween(written, now.getTime());
 }
 
 // src/kb-log.ts
-import { z as z5 } from "zod";
+import { z as z6 } from "zod";
 var LOG_FILE = "log.jsonl";
-var kbLogEntrySchema = z5.object({
+var kbLogEntrySchema = z6.object({
   // Validated, not just `min(1)`: `at` is a sort key (see `parseLog`
   // below), and a value that isn't actually chronological — a Unix
   // timestamp, a human-typed date, garbage — would sort wrong without
@@ -2657,12 +3774,12 @@ var kbLogEntrySchema = z5.object({
   // and rejects everything else, including a non-`Z` offset — so a
   // malformed `at` is reported the same way a malformed line already is,
   // rather than silently sorting into the wrong place.
-  at: z5.iso.datetime(),
-  by: z5.string().min(1),
-  operation: z5.string().min(1),
-  conceptId: z5.string().min(1),
+  at: z6.iso.datetime(),
+  by: z6.string().min(1),
+  operation: z6.string().min(1),
+  conceptId: z6.string().min(1),
   /** Second concept id, where the operation relates two — supersession. */
-  target: z5.string().min(1).optional()
+  target: z6.string().min(1).optional()
 }).strict();
 function renderLogEntry(entry) {
   return `${JSON.stringify(kbLogEntrySchema.parse(entry))}
@@ -2672,18 +3789,18 @@ function parseLog(raw) {
   const entries = [];
   const malformed = [];
   const seen = /* @__PURE__ */ new Set();
-  raw.split("\n").forEach((text, index) => {
+  raw.split("\n").forEach((text, index2) => {
     if (!text.trim()) return;
     let value;
     try {
       value = JSON.parse(text);
     } catch {
-      malformed.push({ line: index + 1, text });
+      malformed.push({ line: index2 + 1, text });
       return;
     }
     const parsed = kbLogEntrySchema.safeParse(value);
     if (!parsed.success) {
-      malformed.push({ line: index + 1, text });
+      malformed.push({ line: index2 + 1, text });
       return;
     }
     const key = JSON.stringify(parsed.data);
@@ -2698,14 +3815,14 @@ function parseLog(raw) {
 }
 
 // src/json-schema.ts
-import { z as z6 } from "zod";
+import { z as z7 } from "zod";
 function kbJsonSchemas() {
   return {
-    recordFrontmatter: z6.toJSONSchema(kbRecordFrontmatterSchema, {
+    recordFrontmatter: z7.toJSONSchema(kbRecordFrontmatterSchema, {
       io: "input"
     }),
-    composeInput: z6.toJSONSchema(composeInputSchema, { io: "input" }),
-    logEntry: z6.toJSONSchema(kbLogEntrySchema, { io: "input" })
+    composeInput: z7.toJSONSchema(composeInputSchema, { io: "input" }),
+    logEntry: z7.toJSONSchema(kbLogEntrySchema, { io: "input" })
   };
 }
 
@@ -2753,18 +3870,18 @@ function trace(seedId, bundle, options = {}) {
   return [...reached.values()].sort(byGeneratedAt);
 }
 function byGeneratedAt(left, right) {
-  const at = (step) => step.record.frontmatter.generated?.at ?? "";
-  return at(left).localeCompare(at(right)) || left.depth - right.depth;
+  const at2 = (step) => step.record.frontmatter.generated?.at ?? "";
+  return at2(left).localeCompare(at2(right)) || left.depth - right.depth;
 }
 
 // src/commands/anchor-resolve.ts
-import { z as z8 } from "zod";
+import { z as z9 } from "zod";
 
 // src/commands/model.ts
-import { z as z7 } from "zod";
-var bundlePath = z7.string().min(1).describe("Absolute path to the knowledge base directory.");
-var conceptId = z7.string().min(1).describe("e.g. decision.cursor-v2");
-var REPO_ROOT = z7.string().min(1).optional().describe(
+import { z as z8 } from "zod";
+var bundlePath = z8.string().min(1).describe("Absolute path to the knowledge base directory.");
+var conceptId = z8.string().min(1).describe("e.g. decision.cursor-v2");
+var REPO_ROOT = z8.string().min(1).optional().describe(
   "Where the anchored source lives, for the drift check. Defaults to the working directory."
 );
 function define(command) {
@@ -2777,9 +3894,9 @@ function argvFlag(argv, name) {
     if (!value2) throw new KbMissingFlagValueError(name);
     return value2;
   }
-  const at = argv.indexOf(name);
-  if (at === -1) return void 0;
-  const value = argv[at + 1];
+  const at2 = argv.indexOf(name);
+  if (at2 === -1) return void 0;
+  const value = argv[at2 + 1];
   if (value === void 0 || value.startsWith("--")) {
     throw new KbMissingFlagValueError(name);
   }
@@ -2787,22 +3904,30 @@ function argvFlag(argv, name) {
 }
 
 // src/commands/anchor-resolve.ts
+function resolverSummary(results) {
+  const names = [
+    ...new Set(
+      results.flatMap((entry) => entry.resolver ? [entry.resolver] : [])
+    )
+  ].sort();
+  return names.length ? `${names.join(" + ")} resolver` : "whole-file";
+}
 var anchorResolveCommand = define({
   name: "anchor-resolve",
   tool: "kb_anchor_resolve",
   usage: "anchor-resolve <concept-id> [--repo-root <path>] [--offline] [--rebaseline] [--restamp]",
   description: "Resolve a record's anchors: stamp a hash onto anchors that lack one, report drift where the code moved. An anchor naming another repository is read from that remote through a bare cache; --offline uses the cache only. kb_verify's mechanical counterpart \u2014 reach for it when the question is whether the code still is what it was. Exits non-zero on drift.",
-  input: z8.object({
+  input: z9.object({
     bundlePath,
     conceptId,
-    repoRoot: z8.string().min(1).optional(),
-    offline: z8.boolean().optional().describe(
+    repoRoot: z9.string().min(1).optional(),
+    offline: z9.boolean().optional().describe(
       "Resolve foreign anchors from the local repo cache only, never fetching."
     ),
-    rebaseline: z8.boolean().optional().describe(
+    rebaseline: z9.boolean().optional().describe(
       "Accept the current code as the new baseline for anchors that drifted."
     ),
-    restamp: z8.boolean().optional().describe(
+    restamp: z9.boolean().optional().describe(
       "Refresh `resolved_at` on anchors that already match. Off by default, so a green run writes nothing."
     )
   }),
@@ -2831,6 +3956,11 @@ var anchorResolveCommand = define({
     const updated = [];
     let dirty = false;
     const sources = await readSources(anchors, root, offline === true);
+    const resolvers = defaultAnchorResolvers({ offline: offline === true });
+    await prepareResolvers(
+      resolvers,
+      anchors.map((anchor) => anchor.file)
+    );
     for (const anchor of anchors) {
       const base2 = {
         file: anchor.file,
@@ -2847,27 +3977,39 @@ var anchorResolveCommand = define({
         updated.push(anchor);
         continue;
       }
-      const resolved = resolveAnchor(source.source, anchor);
-      if (!resolved) {
+      const outcome = resolveAnchorSpan(source.source, anchor, resolvers);
+      if (!outcome.ok) {
         results.push({
           ...base2,
           state: "unresolved",
-          reason: "symbol-not-found"
+          reason: outcome.reason
         });
         updated.push(anchor);
         continue;
       }
-      const currentHash = hashAnchorText(resolved.text);
+      const resolved = outcome.span;
+      const producedBy = outcome.resolver;
+      const { hash: currentHash, kind } = anchorHashOf(anchor, outcome);
       const currentLines = resolved.endLine - resolved.startLine + 1;
+      const stampedKind = outcome.normalized ? "ast" : "raw";
+      const stampedHash = outcome.normalized ? anchorHashOf({ ...anchor, hash: void 0 }, outcome).hash : currentHash;
       const stamped = {
         ...anchor,
-        hash: currentHash,
+        hash: stampedHash,
+        hash_kind: stampedKind,
         lines: currentLines,
-        resolved_at: now()
+        resolved_at: now(),
+        ...producedBy ? { resolver: producedBy } : {}
       };
       const pinned = anchor.ref !== void 0 && source.repo !== void 0;
       if (!anchor.hash) {
-        results.push({ ...base2, state: "stamped", currentHash });
+        results.push({
+          ...base2,
+          state: "stamped",
+          currentHash: stampedHash,
+          hashKind: stampedKind,
+          ...producedBy ? { resolver: producedBy } : {}
+        });
         updated.push(stamped);
         dirty = true;
         continue;
@@ -2877,7 +4019,12 @@ var anchorResolveCommand = define({
           ...base2,
           state: "drifted",
           currentHash,
+          hashKind: kind,
           diffSize: lineDelta(anchor, currentLines),
+          ...producedBy ? { resolver: producedBy } : {},
+          // A regex-stamped anchor re-read by tree-sitter drifts because the
+          // resolver changed, not because the code did.
+          ...resolverChanged(source.source, anchor, producedBy) ? { reason: "resolver-changed" } : {},
           ...pinned ? { remoteState: "drifted-from-ref" } : {},
           ...rebaseline ? { rebaselined: true } : {}
         });
@@ -2885,7 +4032,7 @@ var anchorResolveCommand = define({
         if (rebaseline) dirty = true;
         continue;
       }
-      const onDefault = pinned ? headHash(source, anchor) : void 0;
+      const onDefault = pinned ? headHash(source, anchor, resolvers) : void 0;
       if (onDefault && onDefault.hash !== anchor.hash) {
         results.push({
           ...base2,
@@ -2901,6 +4048,8 @@ var anchorResolveCommand = define({
         ...base2,
         state: "match",
         currentHash,
+        hashKind: kind,
+        ...producedBy ? { resolver: producedBy } : {},
         ...pinned ? { remoteState: "matches-ref" } : {}
       });
       const refresh = restamp || anchor.resolved_at === void 0;
@@ -2918,19 +4067,21 @@ var anchorResolveCommand = define({
       if (!frozen) await store.updateAnchors(path, id, updated, actor);
     }
     const frozenNote = frozen ? { frozen: true, note: "base is frozen: nothing was stamped" } : {};
+    const hints = grammarHints();
+    const hintNote = hints.length ? { hints } : {};
     const unreachable = results.filter(
       (entry) => isUncheckedReason(entry.reason)
     ).length;
     const checked = results.length - unreachable;
-    const matches2 = results.filter((entry) => entry.state === "match").length;
-    const note = `${matches2}/${checked} anchors match${unreachable ? `, ${unreachable} unreachable` : ""}`;
-    const clean = checked > 0 && matches2 === checked && unreachable === 0;
+    const matches3 = results.filter((entry) => entry.state === "match").length;
+    const note = `${matches3}/${checked} anchors match${unreachable ? `, ${unreachable} unreachable` : ""}`;
+    const clean = checked > 0 && matches3 === checked && unreachable === 0;
     if (clean) {
       try {
         await store.verify(
           path,
           id,
-          `anchor-resolve: ${note} (regex resolver)`,
+          `anchor-resolve: ${note} (${resolverSummary(results)})`,
           actor,
           now()
         );
@@ -2941,17 +4092,25 @@ var anchorResolveCommand = define({
           results,
           verified: false,
           verifyRefused: "self-verification",
-          ...frozenNote
+          ...frozenNote,
+          ...hintNote
         };
       }
-      return { conceptId: id, results, verified: true, ...frozenNote };
+      return {
+        conceptId: id,
+        results,
+        verified: true,
+        ...frozenNote,
+        ...hintNote
+      };
     }
     return {
       conceptId: id,
       results,
       verified: false,
       ...unreachable ? { note } : {},
-      ...frozenNote
+      ...frozenNote,
+      ...hintNote
     };
   },
   // A stored hash that no longer resolves is a broken anchor, not an absence:
@@ -2967,13 +4126,13 @@ var anchorResolveCommand = define({
 function lineDelta(anchor, current) {
   return anchor.lines === void 0 ? null : Math.abs(current - anchor.lines);
 }
-function headHash(source, anchor) {
+function headHash(source, anchor, resolvers) {
   if (source.head === void 0) return void 0;
-  const resolved = resolveAnchor(source.head, anchor);
-  if (!resolved) return void 0;
+  const outcome = resolveAnchorSpan(source.head, anchor, resolvers);
+  if (!outcome.ok) return void 0;
   return {
-    hash: hashAnchorText(resolved.text),
-    lines: resolved.endLine - resolved.startLine + 1
+    hash: hashAnchorText(outcome.span.text),
+    lines: outcome.span.endLine - outcome.span.startLine + 1
   };
 }
 async function readSources(anchors, root, offline) {
@@ -3023,13 +4182,13 @@ async function readSources(anchors, root, offline) {
 }
 
 // src/commands/answer.ts
-import { z as z9 } from "zod";
+import { z as z10 } from "zod";
 var answerCommand = define({
   name: "answer",
   tool: "kb_answer",
   usage: "answer <concept-id> <answer...>",
   description: "Resolve an open question: set status, stamp who and when, append an Answer section. If the answer overturns a decision or assumption, supersede that record explicitly.",
-  input: z9.object({ bundlePath, conceptId, answer: z9.string().min(1) }),
+  input: z10.object({ bundlePath, conceptId, answer: z10.string().min(1) }),
   fromArgv: (argv, path) => ({
     bundlePath: path,
     conceptId: argv[1],
@@ -3043,27 +4202,27 @@ var answerCommand = define({
 });
 
 // src/commands/backlinks.ts
-import { z as z10 } from "zod";
+import { z as z11 } from "zod";
 var backlinksCommand = define({
   name: "backlinks",
   tool: "kb_backlinks",
   usage: "backlinks <concept-id>",
   description: "Who points at this record: every inbound typed causal link (`strauss_links`), one hop, every rel including `related_to`, each with its rel and the standing of the record that made it. Use it when you need the exact edges \u2014 reviewing or renaming a record.",
-  input: z10.object({ bundlePath, conceptId }),
+  input: z11.object({ bundlePath, conceptId }),
   fromArgv: (argv, path) => ({ bundlePath: path, conceptId: argv[1] }),
   run: async ({ store }, { bundlePath: path, conceptId: id }) => store.backlinks(path, id)
 });
 
 // src/commands/catalog.ts
-import { z as z11 } from "zod";
+import { z as z12 } from "zod";
 var catalogCommand = define({
   name: "catalog",
   tool: "kb_catalog",
   usage: "catalog [type]",
   description: "Lists every record as one line \u2014 concept id, type, title, standing, and a stale flag \u2014 at roughly thirty tokens each. Pick this over kb_load once kb_load refuses: kb_catalog never refuses. Superseded records show only their replacement; fetch bodies with kb_load, kb_pack, kb_query, or kb_trace.",
-  input: z11.object({
+  input: z12.object({
     bundlePath,
-    type: z11.enum(KB_RECORD_TYPES).optional()
+    type: z12.enum(KB_RECORD_TYPES).optional()
   }),
   fromArgv: (argv, path) => ({
     bundlePath: path,
@@ -3118,26 +4277,26 @@ function count(value, noun) {
 }
 
 // src/commands/context.ts
-import { z as z12 } from "zod";
+import { z as z13 } from "zod";
 var contextCommand = define({
   name: "context",
   tool: "kb_context",
   usage: "context [--profile NAME] [--budget N] [--full-under N] [--format json] [--event NAME]",
   description: "Index block of pinned bases (ids, titles, standing) for injection at context birth. Takes no bundlePath \u2014 reads the workspace pin manifests. Empty when nothing is pinned; refuses over budget rather than truncating. Budget precedence: flags, then the manifest `context[profile]` over `context.default`, then the built-in profile, then package defaults.",
-  input: z12.object({
-    budgetTokens: z12.number().int().positive().optional().describe(
+  input: z13.object({
+    budgetTokens: z13.number().int().positive().optional().describe(
       "Ceiling on the whole emitted block; past it the command refuses with a list of bases rather than truncating. Defaults to 4000."
     ),
-    fullUnderTokens: z12.number().int().positive().optional().describe(
+    fullUnderTokens: z13.number().int().positive().optional().describe(
       "Per-base rendering threshold, applied before the budget: a base whose complete load fits under this arrives as full records instead of index lines, and the whole block still answers to budgetTokens. Off by default \u2014 index-only is the safe default at a context birth, because injected bodies outlive the qualifiers on them; the session-start profile opts tiny bases in at 1500."
     ),
-    profile: z12.string().optional().describe(
+    profile: z13.string().optional().describe(
       "Named budget set: built-ins are session-start (full-under 1500), compact and turn (budget 2500); the manifests' `context` tables override per repo. Unknown names fall through to defaults rather than failing."
     ),
-    format: z12.enum(["markdown", "json"]).optional().describe(
+    format: z13.enum(["markdown", "json"]).optional().describe(
       "CLI envelope for hook protocols that require strict JSON on stdout. MCP callers omit this \u2014 the block itself is identical."
     ),
-    event: z12.string().optional().describe(
+    event: z13.string().optional().describe(
       "hookEventName stamped into the JSON envelope. Only meaningful with format=json."
     )
   }),
@@ -3173,14 +4332,168 @@ var contextCommand = define({
 });
 
 // src/commands/doctor.ts
-import { z as z13 } from "zod";
-var days = (what, fallback) => z13.number().int().positive().optional().describe(`${what} Defaults to ${fallback}.`);
+import { z as z15 } from "zod";
+
+// src/commands/reassess.ts
+import { z as z14 } from "zod";
+var reassessCommand = define({
+  name: "reassess",
+  tool: "kb_reassess",
+  usage: "reassess <concept-id> [--repo-root <path>] [--with-diff]",
+  description: "One drifted record, as something to judge: its claim, each anchor's drift class, the old-vs-new span diff, and the records that depend on it. Formatting-only drift is dropped. Empty when there is nothing to reassess. Writes: relocates moved anchors, keeping their hash; never verifies, supersedes, or changes standing.",
+  input: z14.object({
+    bundlePath,
+    conceptId,
+    repoRoot: REPO_ROOT,
+    withDiff: z14.boolean().optional().describe(
+      "Recover each anchor's committed span and render the diff. Reads git history."
+    )
+  }),
+  fromArgv: (argv, path) => {
+    const repoRoot = argvFlag(argv, "--repo-root");
+    return {
+      bundlePath: path,
+      conceptId: argv[1],
+      ...repoRoot !== void 0 ? { repoRoot } : {},
+      ...argv.includes("--with-diff") ? { withDiff: true } : {}
+    };
+  },
+  run: async ({ store, actor }, { bundlePath: path, conceptId: id, repoRoot, withDiff }) => {
+    const root = repoRoot ?? process.cwd();
+    const bundle = await store.list(path);
+    const record = bundle.find((entry) => entry.conceptId === id);
+    if (!record) throw new KbRecordNotFoundError(id);
+    const drift = await store.detectDrift([record], repoRoot);
+    const entries = drift?.get(id) ?? [];
+    if (!entries.some((entry) => entry.state !== "match")) {
+      return { conceptId: id, packet: null, rebaselined: [], cosmetic: 0 };
+    }
+    const standing = adjudicate(bundle, bundle).find(
+      (hit) => hit.record.conceptId === id
+    )?.standing;
+    const impact2 = await store.impact(path, id);
+    const { packet, classified } = await reassessPacket(root, record, entries, {
+      ...withDiff ? { withDiff: true } : {},
+      impact: impact2,
+      ...standing ? { standing } : {}
+    });
+    const moves = classified.filter((found) => found.class === "moved");
+    let frozen = false;
+    const rebaselined = [];
+    if (moves.length) {
+      const relocated = /* @__PURE__ */ new Map();
+      for (const found of moves) {
+        const to = found.entry.movedTo;
+        if (!to) continue;
+        relocated.set(found.anchor, {
+          ...found.anchor,
+          file: to.file,
+          ...to.symbol ? { symbol: to.symbol } : {}
+        });
+        rebaselined.push({
+          file: found.anchor.file,
+          ...found.anchor.symbol ? { symbol: found.anchor.symbol } : {},
+          toFile: to.file,
+          ...to.symbol ? { toSymbol: to.symbol } : {}
+        });
+      }
+      try {
+        await assertBaseNotFrozen(process.cwd(), path);
+      } catch (error) {
+        if (!(error instanceof KbBaseFrozenError)) throw error;
+        frozen = true;
+      }
+      if (!frozen) {
+        await store.updateAnchors(
+          path,
+          id,
+          (record.frontmatter.strauss_anchors ?? []).map(
+            (anchor) => relocated.get(anchor) ?? anchor
+          ),
+          actor
+        );
+      }
+    }
+    return {
+      conceptId: id,
+      packet,
+      rebaselined: frozen ? [] : rebaselined,
+      cosmetic: classified.filter((found) => found.class === "cosmetic").length,
+      ...frozen ? {
+        frozen: true,
+        note: "base is frozen: nothing was rebaselined"
+      } : {}
+    };
+  },
+  render: (result) => renderReassess(result)
+});
+function renderReassess(result) {
+  const lines = [];
+  for (const move of result.rebaselined) {
+    lines.push(
+      `rebaselined: ${at(move.file, move.symbol)} \u2192 ${at(move.toFile, move.toSymbol)} (same code, new address)`
+    );
+  }
+  if (result.cosmetic) {
+    lines.push(
+      `${result.cosmetic} anchor${result.cosmetic === 1 ? "" : "s"} changed formatting only.`
+    );
+  }
+  if (result.note) lines.push(result.note);
+  const packet = result.packet;
+  if (!packet) {
+    lines.push(`${result.conceptId}: nothing to reassess.`);
+    return lines.join("\n");
+  }
+  lines.push(
+    "",
+    `# ${packet.conceptId}${packet.title ? ` \u2014 ${packet.title}` : ""}`,
+    `type: ${packet.type}   standing: ${packet.standing}`,
+    ...packet.why ? [`why: ${packet.why}`] : [],
+    ...packet.claim ? ["", `## ${packet.claim.section}`, packet.claim.text] : [],
+    "",
+    `## Anchors (${packet.anchors.length})`
+  );
+  for (const anchor of packet.anchors) {
+    lines.push(
+      `- ${at(anchor.file, anchor.symbol)} \u2014 ${anchor.class}${anchor.reason ? ` (${anchor.reason})` : ""}`
+    );
+    if (!anchor.diff) continue;
+    if (anchor.diff.status === "unrecoverable") {
+      lines.push(
+        "  diff: unrecoverable \u2014 no committed span to compare against"
+      );
+      continue;
+    }
+    lines.push(
+      `  diff vs ${anchor.diff.ref} (${anchor.diff.source}): +${anchor.diff.added} \u2212${anchor.diff.removed}`,
+      ...anchor.diff.unified.split("\n").map((line) => `  ${line}`)
+    );
+  }
+  if (packet.impact.length) {
+    lines.push("", `## Impact (${packet.impact.length})`);
+    for (const entry of packet.impact) {
+      lines.push(
+        `- ${entry.conceptId} [${entry.standing}]${entry.title ? ` \u2014 ${entry.title}` : ""}`
+      );
+    }
+    if (packet.impactTruncated) lines.push("- \u2026 walk truncated");
+  }
+  lines.push("", `Default: ${packet.default} \u2014 ${packet.defaultNote}.`);
+  return lines.join("\n");
+}
+function at(file, symbol) {
+  return symbol ? `${file}:${symbol}` : file;
+}
+
+// src/commands/doctor.ts
+var days = (what, fallback) => z15.number().int().positive().optional().describe(`${what} Defaults to ${fallback}.`);
 var doctorCommand = define({
   name: "doctor",
   tool: "kb_doctor",
-  usage: "doctor [--expiring-days N] [--unverified-days N] [--aging-days N] [--repo-root PATH] [--offline] [--strict]",
-  description: "Read-only health sweep: expired, expiring, unverified, aging, orphaned, broken-supersession, superseded-but-cited, drifted and unchecked anchors. Every group is reported even when empty; nothing is written or re-stamped. Use it when picking up a base you have not touched in a while; kb_validate only checks that pointers between records agree.",
-  input: z13.object({
+  usage: "doctor [--expiring-days N] [--unverified-days N] [--aging-days N] [--repo-root PATH] [--offline] [--strict] [--drifted [--with-diff]]",
+  description: "Read-only health sweep: expired, expiring, unverified, aging, orphaned, broken-supersession, superseded-but-cited, drifted and unchecked anchors. Every group is reported even when empty; nothing is written or re-stamped. `drifted` narrows it to a reassessment packet per drifted record, `with_diff` adding each anchor's old-vs-new span.",
+  input: z15.object({
     bundlePath,
     repoRoot: REPO_ROOT,
     expiringDays: days(
@@ -3195,11 +4508,17 @@ var doctorCommand = define({
       "How long a record may stay `open` or `proposed` before `aging` reports it, in days.",
       DEFAULT_AGING_DAYS
     ),
-    offline: z13.boolean().optional().describe(
+    offline: z15.boolean().optional().describe(
       "Read foreign anchors from the local repo cache only, never fetching."
     ),
-    strict: z13.boolean().optional().describe(
+    strict: z15.boolean().optional().describe(
       "Turn an expired record into a non-zero exit for the CLI. No effect on the report itself."
+    ),
+    drifted: z15.boolean().optional().describe(
+      "Report only drift, as a reassessment packet per record: claim, per-anchor class, and what depends on it."
+    ),
+    withDiff: z15.boolean().optional().describe(
+      "With `drifted`: recover each anchor's committed span and render the old-vs-new diff. Reads git history."
     )
   }),
   // Presence, not truthiness: `--expiring-days ""` is a caller who meant
@@ -3218,7 +4537,9 @@ var doctorCommand = define({
       ...unverified2 !== void 0 ? { unverifiedDays: Number(unverified2) } : {},
       ...agingDays !== void 0 ? { agingDays: Number(agingDays) } : {},
       ...argv.includes("--offline") ? { offline: true } : {},
-      ...argv.includes("--strict") ? { strict: true } : {}
+      ...argv.includes("--strict") ? { strict: true } : {},
+      ...argv.includes("--drifted") ? { drifted: true } : {},
+      ...argv.includes("--with-diff") ? { withDiff: true } : {}
     };
   },
   run: async ({ store, now }, {
@@ -3227,7 +4548,9 @@ var doctorCommand = define({
     unverifiedDays,
     agingDays,
     repoRoot,
-    offline
+    offline,
+    drifted: drifted2,
+    withDiff
   }) => {
     const checkedAt = now();
     const records = await store.list(path);
@@ -3241,7 +4564,54 @@ var doctorCommand = define({
       ...anchorDrift !== void 0 ? { anchorDrift } : {},
       now: new Date(checkedAt)
     });
-    return { bundlePath: path, checkedAt, ...report };
+    const hints = grammarHints();
+    if (!drifted2) {
+      return {
+        bundlePath: path,
+        checkedAt,
+        ...report,
+        ...hints.length ? { hints } : {}
+      };
+    }
+    const standings = new Map(
+      adjudicate(records, records, new Date(checkedAt)).map((hit) => [
+        hit.record.conceptId,
+        hit.standing
+      ])
+    );
+    const packets = [];
+    const rebaselinable = [];
+    const search = movedSearch(repoRoot ?? process.cwd());
+    for (const found of report.groups.find((g) => g.check === "drifted")?.findings ?? []) {
+      const record = records.find(
+        (entry) => entry.conceptId === found.conceptId
+      );
+      if (!record) continue;
+      const standing = standings.get(record.conceptId);
+      const built = await reassessPacket(
+        repoRoot ?? process.cwd(),
+        record,
+        anchorDrift?.get(record.conceptId) ?? [],
+        {
+          ...withDiff ? { withDiff: true } : {},
+          impact: await store.impact(path, record.conceptId),
+          ...standing ? { standing } : {},
+          search
+        }
+      );
+      if (built.packet) packets.push(built.packet);
+      if (built.classified.some((entry) => entry.class === "moved")) {
+        rebaselinable.push(record.conceptId);
+      }
+    }
+    return {
+      bundlePath: path,
+      checkedAt,
+      ...report,
+      packets,
+      rebaselinable,
+      ...hints.length ? { hints } : {}
+    };
   },
   render: (result) => render2(result),
   // Only expiry, and only under --strict. The other seven checks report debt a
@@ -3253,18 +4623,22 @@ var doctorCommand = define({
   failsWhen: (result, input) => input.strict === true && result.counts.expired > 0
 });
 function render2(result) {
+  if (result.packets) return renderPackets(result);
   const { thresholds } = result;
   const lines = [
     `# KB Doctor \u2014 ${result.bundlePath}`,
     `records: ${result.recordCount}`,
     `thresholds: expiring within ${thresholds.expiringDays}d, unverified over ${thresholds.unverifiedDays}d, aging over ${thresholds.agingDays}d`,
     `checked: ${result.checkedAt}`,
+    ...result.anchorResolvers.total ? [
+      `anchors: ${result.anchorResolvers.total} hashed \u2014 ${result.anchorResolvers.treeSitter} tree-sitter, ${result.anchorResolvers.regex} regex`
+    ] : [],
     ""
   ];
-  const width = Math.max(...result.groups.map((group2) => group2.check.length));
+  const width2 = Math.max(...result.groups.map((group2) => group2.check.length));
   for (const group2 of result.groups) {
     lines.push(
-      `  ${group2.check.padEnd(width)}  ${String(group2.count).padStart(3)}  ${group2.headline}`
+      `  ${group2.check.padEnd(width2)}  ${String(group2.count).padStart(3)}  ${group2.headline}`
     );
   }
   for (const group2 of result.groups) {
@@ -3276,27 +4650,52 @@ function render2(result) {
       );
     }
   }
+  for (const hint of result.hints ?? []) lines.push("", hint);
   lines.push(
     "",
     result.healthy ? "Nothing to repair." : `${result.findingCount} finding${result.findingCount === 1 ? "" : "s"} across ${result.groups.filter((group2) => group2.count).length} of ${result.groups.length} checks.`
   );
   return lines.join("\n");
 }
+function renderPackets(result) {
+  const packets = result.packets ?? [];
+  const lines = [
+    `# KB Drift \u2014 ${result.bundlePath}`,
+    `checked: ${result.checkedAt}`,
+    `${packets.length} record${packets.length === 1 ? "" : "s"} need a reading; ${result.counts.drifted} drifted in all.`
+  ];
+  if (result.rebaselinable?.length) {
+    lines.push(
+      `moved, rebaseline with \`kb_reassess\`: ${result.rebaselinable.join(", ")}`
+    );
+  }
+  for (const packet of packets) {
+    lines.push(
+      renderReassess({
+        conceptId: packet.conceptId,
+        packet,
+        rebaselined: [],
+        cosmetic: 0
+      })
+    );
+  }
+  return lines.join("\n");
+}
 
 // src/commands/impact.ts
-import { z as z14 } from "zod";
+import { z as z16 } from "zod";
 var impactCommand = define({
   name: "impact",
   tool: "kb_impact",
   usage: "impact <concept-id> [--depth N] [--rels a,b]",
   description: "What breaks if this record changes: its transitive set of dependants, each with its standing. Each rel declares which of its ends depends on the other, and the walk follows each rel in its own direction. Naming `related_to` or an unknown rel in `rels` is an error. kb_backlinks gives one flat hop.",
-  input: z14.object({
+  input: z16.object({
     bundlePath,
     conceptId,
-    depth: z14.number().int().positive().optional().describe(
+    depth: z16.number().int().positive().optional().describe(
       "Hops out from the record. Unbounded when omitted; a walk this cuts reports truncated: true."
     ),
-    rels: z14.array(z14.enum(KB_CAUSAL_LINK_RELS)).optional().describe(
+    rels: z16.array(z16.enum(KB_CAUSAL_LINK_RELS)).optional().describe(
       "Narrow which rels the walk follows. Defaults to every rel that carries a dependence \u2014 all but related_to."
     )
   }),
@@ -3317,13 +4716,13 @@ var impactCommand = define({
 });
 
 // src/commands/list.ts
-import { z as z15 } from "zod";
+import { z as z17 } from "zod";
 var listCommand = define({
   name: "list",
   tool: "kb_list",
   usage: "list [type]",
   description: "Every record, optionally one type. For enumerating; use kb_query for a question.",
-  input: z15.object({ bundlePath, type: z15.enum(KB_RECORD_TYPES).optional() }),
+  input: z17.object({ bundlePath, type: z17.enum(KB_RECORD_TYPES).optional() }),
   fromArgv: (argv, path) => ({ bundlePath: path, type: argv[1] }),
   run: async ({ store }, { bundlePath: path, type }) => (await store.list(path, type)).map((record) => ({
     conceptId: record.conceptId,
@@ -3335,17 +4734,17 @@ var listCommand = define({
 });
 
 // src/commands/load.ts
-import { z as z16 } from "zod";
+import { z as z18 } from "zod";
 var loadCommand = define({
   name: "load",
   tool: "kb_load",
   usage: "load [type] [--budget N | --all] [--repo-root PATH]",
   description: "Load the whole base, each record with its standing \u2014 call it first, at the point of use, since compaction drops it. Superseded records arrive as stubs; kb_trace has the history. Over budget it refuses: kb_catalog, then kb_pack, or narrow with `type`; `all` bypasses. Never read record files directly \u2014 only kb_* tools resolve supersession. `digest` stamps the base's content, so hooks know when to reload.",
-  input: z16.object({
+  input: z18.object({
     bundlePath,
-    type: z16.enum(KB_RECORD_TYPES).optional(),
-    budgetTokens: z16.number().int().positive().optional().describe("Approximate token ceiling. Defaults to 25000."),
-    all: z16.boolean().optional().describe(
+    type: z18.enum(KB_RECORD_TYPES).optional(),
+    budgetTokens: z18.number().int().positive().optional().describe("Approximate token ceiling. Defaults to 25000."),
+    all: z18.boolean().optional().describe(
       "Loads the entire base regardless of size, bypassing the token budget; mutually exclusive with budgetTokens."
     ),
     repoRoot: REPO_ROOT
@@ -3387,25 +4786,25 @@ var loadCommand = define({
 });
 
 // src/commands/log.ts
-import { z as z17 } from "zod";
+import { z as z19 } from "zod";
 var logCommand = define({
   name: "log",
   tool: "kb_log",
   usage: "log",
   description: "Who touched what, and when. Append-only; malformed lines are reported, never repaired.",
-  input: z17.object({ bundlePath }),
+  input: z19.object({ bundlePath }),
   fromArgv: (_argv, path) => ({ bundlePath: path }),
   run: ({ store }, { bundlePath: path }) => store.readLog(path)
 });
 
 // src/commands/no-decision.ts
-import { z as z18 } from "zod";
+import { z as z20 } from "zod";
 var noDecisionCommand = define({
   name: "no-decision",
   tool: "kb_no_decision",
   usage: "no-decision <reason...>",
   description: "Record in one sentence that a piece of work had nothing to decide. Idempotent.",
-  input: z18.object({ bundlePath, reason: z18.string().min(1) }),
+  input: z20.object({ bundlePath, reason: z20.string().min(1) }),
   fromArgv: (argv, path) => ({
     bundlePath: path,
     reason: argv.slice(1).join(" ").trim()
@@ -3422,20 +4821,20 @@ var noDecisionCommand = define({
 });
 
 // src/commands/pack.ts
-import { z as z19 } from "zod";
+import { z as z21 } from "zod";
 var packCommand = define({
   name: "pack",
   tool: "kb_pack",
   usage: "pack <conceptId> [--hops N] [--max-nodes N] [--budget N]",
   description: "Bounded neighbourhood around one record: within `hops`, ranked, cut to `maxNodes`, with every cut record named under Excluded. Use when the base is over kb_load's budget and the work centres on a record you can name. Refuses over budget rather than truncating. Everything below the header is byte-stable across runs. Resolves supersession like kb_load.",
-  input: z19.object({
+  input: z21.object({
     bundlePath,
     conceptId,
-    hops: z19.number().int().positive().optional().describe("How far from the root the walk may reach. Defaults to 2."),
-    maxNodes: z19.number().int().positive().optional().describe(
+    hops: z21.number().int().positive().optional().describe("How far from the root the walk may reach. Defaults to 2."),
+    maxNodes: z21.number().int().positive().optional().describe(
       "How many records the pack may hold, root included. Defaults to 20."
     ),
-    budgetTokens: z19.number().int().positive().optional().describe(
+    budgetTokens: z21.number().int().positive().optional().describe(
       "Approximate token ceiling over what is actually emitted. Defaults to 25000."
     )
   }),
@@ -3460,12 +4859,12 @@ var packCommand = define({
     return render3(result, path, now());
   }
 });
-function render3(result, bundle, at) {
+function render3(result, bundle, at2) {
   const lines = [
     `# KB Pack \u2014 ${result.root}`,
     `bundle: ${bundle}`,
     `budget: ~${result.tokensLoaded} of ${result.budgetTokens} tokens, ${result.recordCount} records`,
-    `packed: ${at}`,
+    `packed: ${at2}`,
     "",
     `## Records (${result.records.length})`
   ];
@@ -3522,22 +4921,22 @@ function warningLabel(warning) {
 }
 
 // src/commands/pin.ts
-import { z as z20 } from "zod";
+import { z as z22 } from "zod";
 var pinCommand = define({
   name: "pin",
   tool: "kb_pin",
   usage: "pin [bundle-path] [--mode full|index] [--profiles a,b] [--local|--user] [--frozen|--unfreeze]",
   description: "Pin a base into a workspace manifest so kb_context surfaces it. Layers, nearest wins: project `.strauss/kb-pins.json` (default), `--local` (personal, gitignored), `--user` (`~/.strauss`). Idempotent; `--mode full|index`, `--profiles`, `--frozen`/`--unfreeze` update only those fields. A path with no records pins with a warning. Never touches the base itself.",
-  input: z20.object({
+  input: z22.object({
     bundlePath,
-    mode: z20.enum(["full", "index"]).optional().describe(
+    mode: z22.enum(["full", "index"]).optional().describe(
       "full: always emit this base's records whole (still under the block budget); index: never upgrade. Absent: the profile's full-under threshold decides."
     ),
-    profiles: z20.array(z20.string()).optional().describe("Context profiles this pin surfaces in. Absent: all of them."),
-    layer: z20.enum(["project", "local", "user"]).optional().describe(
+    profiles: z22.array(z22.string()).optional().describe("Context profiles this pin surfaces in. Absent: all of them."),
+    layer: z22.enum(["project", "local", "user"]).optional().describe(
       "Which manifest to write: project (committed, default), local (personal, gitignored), user (~/.strauss, every workspace)."
     ),
-    frozen: z20.boolean().optional().describe(
+    frozen: z22.boolean().optional().describe(
       "true: the base is concluded \u2014 writes against it refuse while pinned. false: lift a freeze."
     )
   }),
@@ -3566,29 +4965,29 @@ var pinCommand = define({
 });
 
 // src/commands/pins.ts
-import { z as z21 } from "zod";
+import { z as z23 } from "zod";
 var pinsCommand = define({
   name: "pins",
   tool: "kb_pins",
   usage: "pins",
   description: "Every pinned base across the manifest layers, with its layer and whether it resolves to records. Takes no bundlePath.",
-  input: z21.object({}),
+  input: z23.object({}),
   fromArgv: () => ({}),
   run: ({ store }) => listPins(store, process.cwd())
 });
 
 // src/commands/query.ts
-import { z as z22 } from "zod";
+import { z as z24 } from "zod";
 var queryCommand = define({
   name: "query",
   tool: "kb_query",
   usage: "query <text...> [--repo-root PATH]",
   description: "Search; every hit carries its standing. Flagged, never filtered: a superseded hit returns with its replacement, a rejected one is marked. Prefer kb_load when the base fits its budget \u2014 a full read beats search. Results are volatile: place them at the tail, not the cached prefix. Never read record files directly.",
-  input: z22.object({
+  input: z24.object({
     bundlePath,
-    text: z22.string().optional(),
-    type: z22.enum(KB_RECORD_TYPES).optional(),
-    includeNonCurrent: z22.boolean().optional(),
+    text: z24.string().optional(),
+    type: z24.enum(KB_RECORD_TYPES).optional(),
+    includeNonCurrent: z24.boolean().optional(),
     repoRoot: REPO_ROOT
   }),
   // `--repo-root` is a flag, so its value must not fall into the search text.
@@ -3620,43 +5019,43 @@ var queryCommand = define({
 });
 
 // src/commands/read-index.ts
-import { z as z23 } from "zod";
+import { z as z25 } from "zod";
 var readIndexCommand = define({
   name: "index",
   tool: "kb_index",
   usage: "index",
   description: "The index \u2014 title, type, status, description per record \u2014 rebuilt if stale. Cheapest re-orientation after compaction: call it (or kb_context) first, then kb_load or fetch by id.",
-  input: z23.object({ bundlePath }),
+  input: z25.object({ bundlePath }),
   fromArgv: (_argv, path) => ({ bundlePath: path }),
   run: ({ store }, { bundlePath: path }) => store.readIndex(path)
 });
 
 // src/commands/schema.ts
-import { z as z24 } from "zod";
+import { z as z26 } from "zod";
 var schemaCommand = define({
   name: "schema",
   tool: "kb_schema",
   usage: "schema",
   description: "JSON Schema for frontmatter, write input, and log entries, generated from the enforcing code.",
-  input: z24.object({}),
+  input: z26.object({}),
   fromArgv: () => ({}),
   run: () => Promise.resolve(kbJsonSchemas())
 });
 
 // src/commands/stamp.ts
-import { readFile as readFile4 } from "fs/promises";
-import { z as z25 } from "zod";
+import { readFile as readFile6 } from "fs/promises";
+import { z as z27 } from "zod";
 var DIGEST = /^[0-9a-f]{64}$/;
 var stampCommand = define({
   name: "stamp",
   tool: "kb_stamp",
   usage: "stamp [--bundle PATH] [--since DIGEST|FILE]",
-  description: "Content stamp of a base \u2014 `load`'s digest, record counts, per-record digests \u2014 without any bodies. Takes no bundlePath to stamp every pinned base. With `since`, reports only the bases that moved, naming the changed ids when the baseline is a prior stamp; silent when nothing changed. Reads, never writes.",
-  input: z25.object({
-    bundlePath: z25.string().min(1).optional().describe(
+  description: "Content stamp of a base \u2014 `load`'s digest, record counts, per-record digests, how many records have drifted anchors \u2014 without any bodies. Takes no bundlePath to stamp every pinned base. With `since`, reports only the bases that moved, naming the changed ids. Reads, never writes.",
+  input: z27.object({
+    bundlePath: z27.string().min(1).optional().describe(
       "Absolute path to one knowledge base. Omit to stamp every pinned base."
     ),
-    since: z25.string().min(1).optional().describe(
+    since: z27.string().min(1).optional().describe(
       "Prior digest, or path to a prior `stamp --json`; only moved bases return, with changed ids when the baseline is a file."
     )
   }),
@@ -3695,7 +5094,7 @@ var stampCommand = define({
     return reports;
   },
   render: (result) => result.map((report) => {
-    const counts = `${report.recordCount} record(s), ${report.superseded} superseded`;
+    const counts = `${report.recordCount} record(s), ${report.superseded} superseded${report.drifted ? `, ${report.drifted} drifted` : ""}`;
     const head = `${report.path}  ${report.digest}  ${counts}${report.newestAt ? `  newest ${report.newestAt}` : ""}`;
     return report.changed?.length ? `${head}
   changed: ${report.changed.join(", ")}` : head;
@@ -3718,7 +5117,7 @@ async function readBaseline(since) {
   if (DIGEST.test(since)) return { digest: since, byPath: /* @__PURE__ */ new Map() };
   let parsed;
   try {
-    parsed = JSON.parse(await readFile4(since, "utf8"));
+    parsed = JSON.parse(await readFile6(since, "utf8"));
   } catch {
     throw new KbStampBaselineError(since);
   }
@@ -3742,16 +5141,16 @@ async function readBaseline(since) {
 }
 
 // src/commands/status.ts
-import { z as z26 } from "zod";
+import { z as z28 } from "zod";
 var statusCommand = define({
   name: "status",
   tool: "kb_status",
   usage: "status <concept-id> <status>",
   description: "Move a record's status. Compare-and-swap: a concurrent change fails instead of being overwritten.",
-  input: z26.object({
+  input: z28.object({
     bundlePath,
     conceptId,
-    status: z26.enum(KB_RECORD_STATUSES)
+    status: z28.enum(KB_RECORD_STATUSES)
   }),
   fromArgv: (argv, path) => ({
     bundlePath: path,
@@ -3766,13 +5165,13 @@ var statusCommand = define({
 });
 
 // src/commands/supersede.ts
-import { z as z27 } from "zod";
+import { z as z29 } from "zod";
 var supersedeCommand = define({
   name: "supersede",
   tool: "kb_supersede",
   usage: "supersede <concept-id> <replacement-id>",
   description: "Mark a record superseded by another, linked in both directions. Use instead of editing a record whose meaning changed.",
-  input: z27.object({ bundlePath, conceptId, replacementId: conceptId }),
+  input: z29.object({ bundlePath, conceptId, replacementId: conceptId }),
   fromArgv: (argv, path) => ({
     bundlePath: path,
     conceptId: argv[1],
@@ -3786,16 +5185,16 @@ var supersedeCommand = define({
 });
 
 // src/commands/sync-instructions.ts
-import { z as z28 } from "zod";
+import { z as z30 } from "zod";
 var syncInstructionsCommand = define({
   name: "sync-instructions",
   usage: "sync-instructions <file> [--profile NAME] [--budget N] [--full-under N]",
   description: "CLI-only: plant the kb_context block between sentinel comments in AGENTS.md or CLAUDE.md, idempotently.",
-  input: z28.object({
-    file: z28.string().min(1).describe("The instruction file to edit in place."),
-    budgetTokens: z28.number().int().positive().optional(),
-    fullUnderTokens: z28.number().int().positive().optional(),
-    profile: z28.string().optional()
+  input: z30.object({
+    file: z30.string().min(1).describe("The instruction file to edit in place."),
+    budgetTokens: z30.number().int().positive().optional(),
+    fullUnderTokens: z30.number().int().positive().optional(),
+    profile: z30.string().optional()
   }),
   fromArgv: (argv) => {
     const budget = argvFlag(argv, "--budget");
@@ -3821,17 +5220,17 @@ var syncInstructionsCommand = define({
 });
 
 // src/commands/trace.ts
-import { z as z29 } from "zod";
+import { z as z31 } from "zod";
 var traceCommand = define({
   name: "trace",
   tool: "kb_trace",
   usage: "trace <concept-id> [edges...]",
   description: 'Timeline of how a position was reached, ordered by write time, following supersession, shared anchors and shared sources. Includes rejected, draft and superseded records \u2014 in a history they are the content. For "why is it like this"; kb_load answers "what holds now".',
-  input: z29.object({
+  input: z31.object({
     bundlePath,
     conceptId,
-    edges: z29.array(z29.enum(TRACE_EDGES)).optional(),
-    depth: z29.number().int().positive().optional()
+    edges: z31.array(z31.enum(TRACE_EDGES)).optional(),
+    depth: z31.number().int().positive().optional()
   }),
   fromArgv: (argv, path) => ({
     bundlePath: path,
@@ -3853,37 +5252,37 @@ var traceCommand = define({
 });
 
 // src/commands/types.ts
-import { z as z30 } from "zod";
+import { z as z32 } from "zod";
 var typesCommand = define({
   name: "types",
   tool: "kb_types",
   usage: "types",
   description: "The twelve record types with their purpose, body sections, and starting status. Read this before writing rather than guessing headings \u2014 a section the type does not define is rejected.",
-  input: z30.object({}),
+  input: z32.object({}),
   fromArgv: () => ({}),
   run: () => Promise.resolve(RECORD_TYPES)
 });
 
 // src/commands/unpin.ts
-import { z as z31 } from "zod";
+import { z as z33 } from "zod";
 var unpinCommand = define({
   name: "unpin",
   tool: "kb_unpin",
   usage: "unpin [bundle-path]",
   description: "Remove a base from every manifest layer that holds it. Reports the layers touched.",
-  input: z31.object({ bundlePath }),
+  input: z33.object({ bundlePath }),
   fromArgv: (argv, path) => ({ bundlePath: argv[1] ?? path }),
   run: (_ctx, { bundlePath: path }) => unpinBase(process.cwd(), path)
 });
 
 // src/commands/validate.ts
-import { z as z32 } from "zod";
+import { z as z34 } from "zod";
 var validateCommand = define({
   name: "validate",
   tool: "kb_validate",
   usage: "validate",
   description: "Check pointers no single record can see: supersession links that disagree between the two records, typed causal links, and assumptions that cite sources. Each finding carries a severity: errors fail the exit code, warnings do not.",
-  input: z32.object({ bundlePath }),
+  input: z34.object({ bundlePath }),
   fromArgv: (_argv, path) => ({ bundlePath: path }),
   run: async ({ store }, { bundlePath: path }) => validateBundle(await store.list(path)),
   // Warnings never fail the exit code; every other severity does.
@@ -3893,16 +5292,16 @@ var validateCommand = define({
 });
 
 // src/commands/verify.ts
-import { z as z33 } from "zod";
+import { z as z35 } from "zod";
 var verifyCommand = define({
   name: "verify",
   tool: "kb_verify",
   usage: "verify <concept-id> --note <text>",
   description: "Append a verified[] event: who checked, when, and what was found. Append-only. A record's own generator is refused unless the actor is `human:`-prefixed.",
-  input: z33.object({
+  input: z35.object({
     bundlePath,
     conceptId,
-    note: z33.string().refine((s) => s.trim().length > 0, {
+    note: z35.string().refine((s) => s.trim().length > 0, {
       message: "note must say what the check found"
     })
   }),
@@ -3922,15 +5321,15 @@ var verifyCommand = define({
 });
 
 // src/commands/write.ts
-import { z as z34 } from "zod";
+import { z as z36 } from "zod";
 var writeCommand = define({
   name: "write",
   tool: "kb_write",
   usage: "write <type> < record.json",
   description: "Write one record. Search first \u2014 a duplicate concept id is rejected, not overwritten; kb_types lists each type's sections. An unsourced claim is an `assumption` with assumption: true, never a vague `fact`. Conflicting records get a `risk`, `open-question`, or superseding `decision`. Prefer a new short record over overloading one. Never delete; supersede.",
-  input: z34.object({
+  input: z36.object({
     bundlePath,
-    type: z34.enum(KB_RECORD_TYPES),
+    type: z36.enum(KB_RECORD_TYPES),
     input: composeInputSchema
   }),
   fromArgv: async (argv, path, stdin) => ({
@@ -3954,13 +5353,13 @@ var writeCommand = define({
 });
 
 // src/commands/write-decision.ts
-import { z as z35 } from "zod";
+import { z as z37 } from "zod";
 var writeDecisionCommand = define({
   name: "write-decision",
   tool: "kb_write_decision",
   usage: "write-decision < decision.json",
   description: "Write a decision, with `alternative` (what was rejected and why) and `impact` as fields. Record one when a later reader would otherwise simplify the constraint away; skip when the diff already answers it. `sources` for material read, `anchors` for code, `relatedConceptIds` for records.",
-  input: z35.object({ bundlePath, input: decisionInputSchema }),
+  input: z37.object({ bundlePath, input: decisionInputSchema }),
   fromArgv: async (_argv, path, stdin) => ({
     bundlePath: path,
     input: JSON.parse(await stdin())
@@ -3990,6 +5389,7 @@ var KB_COMMANDS = [
   answerCommand,
   verifyCommand,
   anchorResolveCommand,
+  reassessCommand,
   loadCommand,
   catalogCommand,
   packCommand,
@@ -4041,8 +5441,8 @@ function parseMarkdownWithFrontmatter(text, schema) {
 }
 
 // src/search-index.ts
-import { stat as stat2 } from "fs/promises";
-import { join as join4 } from "path";
+import { stat as stat3 } from "fs/promises";
+import { join as join6 } from "path";
 var SEARCH_INDEX_FILE = ".index.sqlite";
 var COLLECTION = "kb";
 async function searchBase(bundlePath2, query, options = {}) {
@@ -4051,7 +5451,7 @@ async function searchBase(bundlePath2, query, options = {}) {
   let store = null;
   try {
     store = await qmd.createStore({
-      dbPath: join4(bundlePath2, SEARCH_INDEX_FILE),
+      dbPath: join6(bundlePath2, SEARCH_INDEX_FILE),
       config: {
         collections: {
           [COLLECTION]: {
@@ -4086,7 +5486,7 @@ async function searchBase(bundlePath2, query, options = {}) {
   }
 }
 async function isStale(bundlePath2) {
-  const indexAt = await stat2(join4(bundlePath2, SEARCH_INDEX_FILE)).then((s) => s.mtimeMs).catch(() => 0);
+  const indexAt = await stat3(join6(bundlePath2, SEARCH_INDEX_FILE)).then((s) => s.mtimeMs).catch(() => 0);
   if (!indexAt) return true;
   const { readdir: readdir2 } = await import("fs/promises");
   const names = (await readdir2(bundlePath2).catch(() => [])).filter(
@@ -4095,8 +5495,8 @@ async function isStale(bundlePath2) {
   let stale = false;
   await mapLimit(names, DEFAULT_IO_CONCURRENCY, async (name) => {
     if (stale) return;
-    const at = await stat2(join4(bundlePath2, name)).then((s) => s.mtimeMs).catch(() => 0);
-    if (at > indexAt) stale = true;
+    const at2 = await stat3(join6(bundlePath2, name)).then((s) => s.mtimeMs).catch(() => 0);
+    if (at2 > indexAt) stale = true;
   });
   return stale;
 }
@@ -4133,25 +5533,25 @@ async function loadQmd(logger) {
 import {
   appendFile,
   link,
-  mkdir as mkdir3,
+  mkdir as mkdir4,
   readdir,
-  readFile as readFile5,
-  rename,
+  readFile as readFile7,
+  rename as rename2,
   unlink,
-  writeFile as writeFile3
+  writeFile as writeFile4
 } from "fs/promises";
-import { join as join5, resolve as resolve5, sep as sep3 } from "path";
+import { join as join7, resolve as resolve5, sep as sep3 } from "path";
 
 // src/kb-stamp.ts
-import { createHash as createHash2 } from "crypto";
-function sha256(contents) {
-  return createHash2("sha256").update(contents).digest("hex");
+import { createHash as createHash4 } from "crypto";
+function sha2563(contents) {
+  return createHash4("sha256").update(contents).digest("hex");
 }
 function bundleStamp(records, superseded) {
   const entries = [
     ...records.map((hit) => ({
       conceptId: hit.record.conceptId,
-      digest: `current:${sha256(
+      digest: `current:${sha2563(
         stringifyMarkdownWithFrontmatter(
           hit.record.body,
           hit.record.frontmatter
@@ -4160,11 +5560,11 @@ function bundleStamp(records, superseded) {
     })),
     ...superseded.map((entry) => ({
       conceptId: entry.conceptId,
-      digest: `superseded:${sha256(JSON.stringify(entry))}`
+      digest: `superseded:${sha2563(JSON.stringify(entry))}`
     }))
   ].sort((a, b) => a.conceptId < b.conceptId ? -1 : 1);
   return {
-    digest: sha256(
+    digest: sha2563(
       entries.map((entry) => `${entry.conceptId}:${entry.digest}`).join("\n")
     ),
     records: entries
@@ -4334,7 +5734,7 @@ function appendUnionMergeLine(contents) {
 }
 
 // src/kb-store.ts
-var KB_DIR = join5(".strauss", "kb");
+var KB_DIR = join7(".strauss", "kb");
 var STORE_OWNED = /* @__PURE__ */ new Set([INDEX_FILE, LOG_FILE, SEARCH_INDEX_FILE]);
 var DEFAULT_LOAD_BUDGET = 25e3;
 var KbStore = class {
@@ -4365,7 +5765,7 @@ var KbStore = class {
     const conceptId2 = `${input.type}.${input.slug}`;
     const root = this.root(bundlePath2);
     const target = this.recordPath(bundlePath2, conceptId2);
-    await mkdir3(root, { recursive: true });
+    await mkdir4(root, { recursive: true });
     await this.publish(
       target,
       stringifyMarkdownWithFrontmatter(input.body, frontmatter),
@@ -4404,7 +5804,7 @@ var KbStore = class {
     const target = this.recordPath(bundlePath2, conceptId2);
     let raw;
     try {
-      raw = await readFile5(target, "utf8");
+      raw = await readFile7(target, "utf8");
     } catch {
       return null;
     }
@@ -4429,7 +5829,7 @@ var KbStore = class {
     const records = await mapLimit(
       wanted,
       DEFAULT_IO_CONCURRENCY,
-      async ({ name, conceptId: conceptId2 }) => this.parse(conceptId2, await readFile5(join5(root, name), "utf8"))
+      async ({ name, conceptId: conceptId2 }) => this.parse(conceptId2, await readFile7(join7(root, name), "utf8"))
     );
     return records.filter((record) => record !== null);
   }
@@ -4477,8 +5877,8 @@ var KbStore = class {
    * and the refusal is logged under its own operation name — `mutate` only
    * logs what it publishes.
    */
-  async verify(bundlePath2, conceptId2, note, actor = "unknown", at = (/* @__PURE__ */ new Date()).toISOString()) {
-    const event = kbVerifiedEventSchema.parse({ by: actor, at, note });
+  async verify(bundlePath2, conceptId2, note, actor = "unknown", at2 = (/* @__PURE__ */ new Date()).toISOString()) {
+    const event = kbVerifiedEventSchema.parse({ by: actor, at: at2, note });
     const existing = await this.read(bundlePath2, conceptId2);
     if (!existing) throw new KbRecordNotFoundError(conceptId2);
     const generatedBy = existing.frontmatter.generated?.by;
@@ -4530,14 +5930,14 @@ var KbStore = class {
     return superseded;
   }
   /** Resolves an open question, stamping who answered and when. */
-  async answer(bundlePath2, conceptId2, answer, actor = "unknown", at = (/* @__PURE__ */ new Date()).toISOString()) {
+  async answer(bundlePath2, conceptId2, answer, actor = "unknown", at2 = (/* @__PURE__ */ new Date()).toISOString()) {
     return this.mutate(
       bundlePath2,
       conceptId2,
       (frontmatter) => ({
         ...frontmatter,
         strauss_status: "resolved",
-        strauss_answered: { by: actor, at }
+        strauss_answered: { by: actor, at: at2 }
       }),
       { operation: "answer", by: actor },
       (body) => `${body.trimEnd()}
@@ -4586,7 +5986,7 @@ ${answer}
       if (found.length) return found;
     }
     const lowered = needle.toLowerCase();
-    return bundle.filter((record) => matches(record, lowered));
+    return bundle.filter((record) => matches2(record, lowered));
   }
   /**
    * Anchor drift over the records about to be handed back. Like the search
@@ -4706,24 +6106,34 @@ ${answer}
   }
   /**
    * `load`'s digest without `load`'s bodies — the same records, adjudicated
-   * the same way, handed back as a stamp. Skips the anchor drift pass, which
-   * reads source files and only ever adds warnings: no warning reaches the
-   * digest, so the value is identical to the one `load` returns.
+   * the same way, handed back as a stamp.
+   *
+   * Drift is counted but kept out of the digest, which is what lets the reload
+   * hook ask one question and get two answers: whether the base moved, and
+   * whether the code under it did. A `load` and a `stamp` of the same base
+   * still agree on the digest, because no warning has ever reached it.
    */
-  async stamp(bundlePath2) {
+  async stamp(bundlePath2, options = {}) {
     const bundle = await this.list(bundlePath2);
     const adjudicated = adjudicate(bundle, bundle, /* @__PURE__ */ new Date());
     const current = adjudicated.filter((hit) => hit.standing !== "superseded");
     const superseded = adjudicated.filter((hit) => hit.standing === "superseded").map(stub);
     const stamped = bundleStamp(current, superseded);
-    const dates = bundle.map((record) => record.frontmatter.generated?.at ?? null).filter((at) => typeof at === "string").sort();
+    const dates = bundle.map((record) => record.frontmatter.generated?.at ?? null).filter((at2) => typeof at2 === "string").sort();
+    const drift = await this.detectDrift(bundle, options.repoRoot);
+    const drifted2 = drift === void 0 ? null : [...drift.values()].filter(
+      (entries) => entries.some(
+        (entry) => entry.state !== "match" && !isUncheckedReason(entry.reason)
+      )
+    ).length;
     return {
       path: bundlePath2,
       digest: stamped.digest,
       recordCount: bundle.length,
       superseded: superseded.length,
       newestAt: dates.at(-1) ?? null,
-      records: stamped.records
+      records: stamped.records,
+      drifted: drifted2
     };
   }
   /** How a position was arrived at, as a timeline. See `trace.ts`. */
@@ -4756,11 +6166,11 @@ ${answer}
   async readIndex(bundlePath2) {
     const root = this.root(bundlePath2);
     const expected = renderIndex(await this.list(bundlePath2));
-    const stored = await readFile5(join5(root, INDEX_FILE), "utf8").catch(
+    const stored = await readFile7(join7(root, INDEX_FILE), "utf8").catch(
       () => null
     );
     if (indexIsStale(stored, expected)) {
-      await this.publish(join5(root, INDEX_FILE), expected, true, INDEX_FILE);
+      await this.publish(join7(root, INDEX_FILE), expected, true, INDEX_FILE);
       this.logger.info?.({
         operation: "kb.index.repair",
         bundlePath: root,
@@ -4777,8 +6187,8 @@ ${answer}
    * knows which agent touched what. So a bad line is surfaced and left alone.
    */
   async readLog(bundlePath2) {
-    const raw = await readFile5(
-      join5(this.root(bundlePath2), LOG_FILE),
+    const raw = await readFile7(
+      join7(this.root(bundlePath2), LOG_FILE),
       "utf8"
     ).catch(() => "");
     const result = parseLog(raw);
@@ -4829,15 +6239,15 @@ ${answer}
   }
   async mutate(bundlePath2, conceptId2, change, entry, changeBody = (body) => body) {
     const target = this.recordPath(bundlePath2, conceptId2);
-    const before = await readFile5(target, "utf8").catch(() => null);
+    const before = await readFile7(target, "utf8").catch(() => null);
     if (before === null) throw new KbRecordNotFoundError(conceptId2);
     const parsed = this.parse(conceptId2, before);
     if (!parsed) throw new KbRecordNotFoundError(conceptId2);
     const frontmatter = change(parsed.frontmatter);
     const body = changeBody(parsed.body);
     const contents = stringifyMarkdownWithFrontmatter(body, frontmatter);
-    const witness = await readFile5(target, "utf8").catch(() => null);
-    if (witness === null || sha256(witness) !== sha256(before)) {
+    const witness = await readFile7(target, "utf8").catch(() => null);
+    if (witness === null || sha2563(witness) !== sha2563(before)) {
       throw new KbWriteConflictError(conceptId2);
     }
     await this.publish(target, contents, true, conceptId2);
@@ -4862,10 +6272,10 @@ ${answer}
    */
   async publish(target, contents, overwrite, conceptId2) {
     const staging = `${target}.${process.pid}.tmp`;
-    await writeFile3(staging, contents, "utf8");
+    await writeFile4(staging, contents, "utf8");
     try {
       if (overwrite) {
-        await rename(staging, target);
+        await rename2(staging, target);
         return;
       }
       await link(staging, target);
@@ -4919,18 +6329,18 @@ ${answer}
    * file must not fail the mutation it guards.
    */
   async ensureGitattributes(root) {
-    const target = join5(root, GITATTRIBUTES_FILE);
+    const target = join7(root, GITATTRIBUTES_FILE);
     try {
       let existing;
       try {
-        existing = await readFile5(target, "utf8");
+        existing = await readFile7(target, "utf8");
       } catch (error) {
         if (error.code !== "ENOENT") throw error;
         existing = null;
       }
       if (existing === null) {
         try {
-          await writeFile3(target, appendUnionMergeLine(""), {
+          await writeFile4(target, appendUnionMergeLine(""), {
             encoding: "utf8",
             flag: "wx"
           });
@@ -4970,7 +6380,7 @@ ${answer}
   async record(root, entry) {
     await this.ensureGitattributes(root);
     const line = renderLogEntry({ at: (/* @__PURE__ */ new Date()).toISOString(), ...entry });
-    await appendFile(join5(root, LOG_FILE), line, "utf8").catch((error) => {
+    await appendFile(join7(root, LOG_FILE), line, "utf8").catch((error) => {
       this.logger.warn?.({
         operation: "kb.log.append",
         outcome: "failed",
@@ -5007,7 +6417,7 @@ ${answer}
         { conceptId: conceptId2 }
       );
     }
-    return join5(this.root(bundlePath2), `${conceptId2}.md`);
+    return join7(this.root(bundlePath2), `${conceptId2}.md`);
   }
 };
 function estimateTokens(record) {
@@ -5034,7 +6444,7 @@ function stub(hit) {
     at: hit.record.frontmatter.generated?.at ?? null
   };
 }
-function matches(record, needle) {
+function matches2(record, needle) {
   const { title, description } = record.frontmatter;
   return [record.conceptId, title, description, record.body].some(
     (field) => field?.toLowerCase().includes(needle)
@@ -5126,12 +6536,12 @@ function byRank(left, right) {
   ) || left.record.conceptId.localeCompare(right.record.conceptId);
 }
 function typeRank(record) {
-  const index = TYPE_PRIORITY.indexOf(record.frontmatter.type);
-  return index === -1 ? TYPE_PRIORITY.length : index;
+  const index2 = TYPE_PRIORITY.indexOf(record.frontmatter.type);
+  return index2 === -1 ? TYPE_PRIORITY.length : index2;
 }
 
 // src/version.ts
-var VERSION = true ? "0.1.16" : "0.0.0-dev";
+var VERSION = true ? "0.1.18" : "0.0.0-dev";
 
 export {
   kbSourceSchema,
@@ -5167,9 +6577,19 @@ export {
   repoCacheDir,
   readRemoteAnchors,
   anchorFilePath,
+  grammarsCacheRoot,
+  grammarManifest,
+  ensureGrammar,
+  grammarHints,
+  languageForFile,
+  treeSitterLanguages,
+  TreeSitterResolver,
   regexResolver,
   hashAnchorText,
   resolveAnchor,
+  resolveAnchorSpan,
+  prepareResolvers,
+  defaultAnchorResolvers,
   detectAnchorDrift,
   Fault,
   ErrorTypes,
@@ -5210,6 +6630,9 @@ export {
   CONTEXT_BEGIN,
   CONTEXT_END,
   syncInstructions,
+  classifyDrift,
+  unifiedDiff,
+  reassessPacket,
   KB_EDGE_KINDS,
   DEFAULT_TYPED_LINK_RELS,
   neighbours,
@@ -5247,4 +6670,4 @@ export {
   KbStore,
   VERSION
 };
-//# sourceMappingURL=chunk-H5W53NVU.js.map
+//# sourceMappingURL=chunk-GSOTMWZZ.js.map