squadrant 0.28.0 → 0.28.1

package/dist/squadrantd.js

@@ -9494,10 +9494,34 @@ function expandSource(kbRoot, entry) {
   const re = globToRegExp(abs.split(path16.sep).join("/"));
   return walkFiles(root).filter((f) => re.test(f.split(path16.sep).join("/"))).sort();
 }
-function sourceCovers(kbRoot, entry, ref) {
-  const abs = path16.resolve(kbRoot, expandHome(entry.path));
-  const file = fileForRef(kbRoot, ref);
-  return /[*?]/.test(entry.path) ? globToRegExp(abs.split(path16.sep).join("/")).test(file.split(path16.sep).join("/")) : abs === file;
+function refCandidates(kbRoot, sources, ref) {
+  const asIs = path16.resolve(kbRoot, expandHome(ref));
+  if (path16.isAbsolute(expandHome(ref)))
+    return [asIs];
+  const bases = /* @__PURE__ */ new Set([kbRoot]);
+  for (const s of sources) {
+    let d = path16.resolve(kbRoot, expandHome(s.path.split(/[*?[{]/)[0]));
+    for (let i = 0; i < 6 && d !== path16.dirname(d); i++) {
+      d = path16.dirname(d);
+      bases.add(d);
+    }
+  }
+  return [.../* @__PURE__ */ new Set([asIs, ...[...bases].map((b) => path16.join(b, ref))])];
+}
+function refPath(kbRoot, sources, ref) {
+  const cands = refCandidates(kbRoot, sources, ref);
+  return cands.find(isFile) ?? cands.find((f) => sources.some((e) => entryCovers(kbRoot, e, f))) ?? cands[0];
+}
+function refCanon(kbRoot, sources) {
+  const memo = /* @__PURE__ */ new Map();
+  return (ref) => {
+    let c = memo.get(ref);
+    if (c === void 0) {
+      c = refFor(kbRoot, refPath(kbRoot, sources, ref));
+      memo.set(ref, c);
+    }
+    return c;
+  };
 }
 function detectChange(kbRoot, file) {
   const ref = refFor(kbRoot, file);
@@ -9595,7 +9619,7 @@ async function planIngest(kbRoot, opts) {
   }
   return plan;
 }
-var execFileAsync, CONVERTED_DIR, DEFAULT_MAX_SECTIONS_PER_PASS, CHARS_PER_TOKEN, PASS_THROUGH, SECTION_TARGET_CHARS, markitdownConverter, expandHome, fileForRef, cacheKey, convertedFile, stampFile, isGatedRef, sha256;
+var execFileAsync, CONVERTED_DIR, DEFAULT_MAX_SECTIONS_PER_PASS, CHARS_PER_TOKEN, PASS_THROUGH, SECTION_TARGET_CHARS, markitdownConverter, expandHome, cacheKey, convertedFile, stampFile, isFile, resolveSourceRef, entryCovers, sourceCovers, isGatedRef, sha256;
 var init_ingest = __esm({
   "packages/core/dist/knowledge/ingest.js"() {
     execFileAsync = promisify2(execFile2);
@@ -9609,11 +9633,17 @@ var init_ingest = __esm({
       return stdout;
     };
     expandHome = (p) => p === "~" || p.startsWith("~/") ? path16.join(os7.homedir(), p.slice(1)) : p;
-    fileForRef = (kbRoot, ref) => path16.resolve(kbRoot, expandHome(ref));
     cacheKey = (ref) => `${ref.replace(/[^A-Za-z0-9._-]+/g, "_")}.${crypto3.createHash("sha1").update(ref).digest("hex").slice(0, 6)}`;
     convertedFile = (kbRoot, ref) => path16.join(kbRoot, CONVERTED_DIR, `${cacheKey(ref)}.md`);
     stampFile = (kbRoot, ref) => path16.join(kbRoot, CONVERTED_DIR, `${cacheKey(ref)}.sha`);
-    isGatedRef = (kbRoot, sources, ref) => sources.some((e) => e.review === "required" && sourceCovers(kbRoot, e, ref));
+    isFile = (f) => fs15.existsSync(f) && fs15.statSync(f).isFile();
+    resolveSourceRef = (kbRoot, sources, ref) => refCandidates(kbRoot, sources, ref).find(isFile);
+    entryCovers = (kbRoot, entry, file) => {
+      const abs = path16.resolve(kbRoot, expandHome(entry.path));
+      return /[*?]/.test(entry.path) ? globToRegExp(abs.split(path16.sep).join("/")).test(file.split(path16.sep).join("/")) : abs === file;
+    };
+    sourceCovers = (kbRoot, sources, entry, ref) => entryCovers(kbRoot, entry, refPath(kbRoot, sources, ref));
+    isGatedRef = (kbRoot, sources, ref) => sources.some((e) => e.review === "required" && sourceCovers(kbRoot, sources, e, ref));
     sha256 = (file) => crypto3.createHash("sha256").update(fs15.readFileSync(file)).digest("hex");
   }
 });
@@ -9696,7 +9726,6 @@ var init_verify = __esm({
 
 // packages/core/dist/knowledge/store.js
 import fs16 from "fs";
-import os8 from "os";
 import path17 from "path";
 import matter2 from "gray-matter";
 function duplicateIdProblem(id, ignored, used) {
@@ -9757,18 +9786,6 @@ function loadRulesDir(dir, layer, opts = {}) {
   }
   return { rules, errors };
 }
-function resolveSourceRef(ref, kbRoot, sources) {
-  const bases = /* @__PURE__ */ new Set([kbRoot]);
-  for (const s of sources) {
-    let d = path17.resolve(kbRoot, expandHome2(s.path.split(/[*?[{]/)[0]));
-    for (let i = 0; i < 6 && d !== path17.dirname(d); i++) {
-      d = path17.dirname(d);
-      bases.add(d);
-    }
-  }
-  const cands = [path17.resolve(kbRoot, expandHome2(ref)), ...[...bases].map((b) => path17.join(b, ref))];
-  return cands.find((c) => fs16.existsSync(c) && fs16.statSync(c).isFile());
-}
 function validateKb(opts) {
   const { rules, errors } = loadRulesDir(opts.rulesDir, "kb", { includeProposed: true });
   const checks = [];
@@ -9788,17 +9805,18 @@ function validateKb(opts) {
   else
     checks.push({ level: "ok", message: "no duplicate ids" });
   const cache = /* @__PURE__ */ new Map();
+  const canon = refCanon(opts.kbRoot, opts.sources);
   let verified = 0, unresolved = 0, notIngested = 0;
   for (const r of rules) {
     r.sources.forEach((src, i) => {
-      const file = resolveSourceRef(src.ref, opts.kbRoot, opts.sources);
+      const file = resolveSourceRef(opts.kbRoot, opts.sources, src.ref);
       if (!file) {
         unresolved++;
         return;
       }
       const key = `${src.ref}\0${file}`;
       if (!cache.has(key)) {
-        const conv = readState2(opts.kbRoot, src.ref) ? convertedFile(opts.kbRoot, src.ref) : null;
+        const conv = readState2(opts.kbRoot, canon(src.ref)) ? convertedFile(opts.kbRoot, canon(src.ref)) : null;
         const cached = !!conv && fs16.existsSync(conv);
         cache.set(key, {
           hay: normalizedViews(fs16.readFileSync(cached ? conv : file, "utf8")),
@@ -9810,7 +9828,7 @@ function validateKb(opts) {
       if (span) {
         verified++;
         const active = r.status === "active" && !path17.relative(opts.rulesDir, r.file).split(path17.sep).includes(PROPOSED_DIR);
-        const err = active ? (opts.errata ?? []).find((e) => e.ref === src.ref && ((o) => !!o && spansOverlap(o, span))(findQuote(hay, e.quote))) : void 0;
+        const err = active ? (opts.errata ?? []).find((e) => canon(e.ref) === canon(src.ref) && ((o) => !!o && spansOverlap(o, span))(findQuote(hay, e.quote))) : void 0;
         if (err)
           checks.push({ level: "warn", message: `${r.id}: grounded in erratum ${err.id} (${err.reason}); re-check or retire it (${r.file})` });
       } else if (convertible)
@@ -9833,7 +9851,7 @@ function validateKb(opts) {
   }
   return { checks, ok: !checks.some((c) => c.level === "fail") };
 }
-var NO_JS_FRONTMATTER, expandHome2;
+var NO_JS_FRONTMATTER;
 var init_store2 = __esm({
   "packages/core/dist/knowledge/store.js"() {
     init_dist();
@@ -9845,7 +9863,6 @@ var init_store2 = __esm({
         throw new Error("only YAML front matter is allowed");
       } } }
     };
-    expandHome2 = (p) => p === "~" || p.startsWith("~/") ? path17.join(os8.homedir(), p.slice(1)) : p;
   }
 });
 
@@ -13068,7 +13085,7 @@ function removeSource(kbRoot, rulesDir, entryPath, opts = {}) {
   const res = { dryRun: !!opts.dryRun, entryRemoved: true, stripped: [], stale: [] };
   const writes = [];
   for (const rule of loadRulesDir(rulesDir, "kb").rules) {
-    const kept = rule.sources.filter((s) => !sourceCovers(kbRoot, entry, s.ref));
+    const kept = rule.sources.filter((s) => !sourceCovers(kbRoot, sources, entry, s.ref));
     if (kept.length === rule.sources.length)
       continue;
     res.stripped.push(rule.id);
@@ -13189,7 +13206,7 @@ var init_match = __esm({
 
 // packages/core/dist/knowledge/audit.js
 import fs20 from "fs";
-import os9 from "os";
+import os8 from "os";
 import path21 from "path";
 function appendAudit(events, sink = {}) {
   if (!events.length)
@@ -13219,8 +13236,8 @@ var AUDIT_QUERY_CHARS, defaultAuditDir, auditMachineId;
 var init_audit = __esm({
   "packages/core/dist/knowledge/audit.js"() {
     AUDIT_QUERY_CHARS = 200;
-    defaultAuditDir = () => process.env.SQUADRANT_AUDIT_DIR || path21.join(os9.homedir(), ".local", "state", "squadrant", "audit");
-    auditMachineId = () => os9.hostname().replace(/[^A-Za-z0-9_-]/g, "_") || "host";
+    defaultAuditDir = () => process.env.SQUADRANT_AUDIT_DIR || path21.join(os8.homedir(), ".local", "state", "squadrant", "audit");
+    auditMachineId = () => os8.hostname().replace(/[^A-Za-z0-9_-]/g, "_") || "host";
   }
 });
 
@@ -13646,18 +13663,20 @@ function loadErrata(kbRoot) {
   });
   return { errata, errors };
 }
-function orphanedErrata(kbRoot, errata, refs) {
-  const only = refs ? new Set(refs) : void 0;
+function orphanedErrata(kbRoot, sources, errata, refs) {
+  const canon = refCanon(kbRoot, sources);
+  const only = refs ? new Set([...refs].map(canon)) : void 0;
   const hays = /* @__PURE__ */ new Map();
   const out = [];
   for (const e of errata) {
-    if (only && !only.has(e.ref))
+    const ref = canon(e.ref);
+    if (only && !only.has(ref))
       continue;
-    if (!hays.has(e.ref)) {
-      const conv = readState2(kbRoot, e.ref) ? convertedFile(kbRoot, e.ref) : null;
-      hays.set(e.ref, conv && fs23.existsSync(conv) ? normalizedViews(fs23.readFileSync(conv, "utf8")) : null);
+    if (!hays.has(ref)) {
+      const conv = readState2(kbRoot, ref) ? convertedFile(kbRoot, ref) : null;
+      hays.set(ref, conv && fs23.existsSync(conv) ? normalizedViews(fs23.readFileSync(conv, "utf8")) : null);
     }
-    const hay = hays.get(e.ref);
+    const hay = hays.get(ref);
     if (hay && !findQuote(hay, e.quote))
       out.push({ id: e.id, ref: e.ref });
   }
@@ -13674,9 +13693,31 @@ var init_errata = __esm({
 
 // packages/core/dist/knowledge/anchor.js
 import fs24 from "fs";
+import { execFileSync as execFileSync7 } from "child_process";
 import path25 from "path";
-function* repoFiles(root) {
+function gitFiles(root) {
+  try {
+    const out = execFileSync7("git", ["ls-files", "-co", "--exclude-standard", "-z"], { cwd: root, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], maxBuffer: 64 * 1024 * 1024 });
+    return out.split("\0").filter(Boolean).sort();
+  } catch {
+    return null;
+  }
+}
+function* repoFiles(root, maxFiles) {
   let count = 0;
+  const listed = gitFiles(root);
+  if (listed) {
+    for (const rel of listed) {
+      if (!CODE_EXT.has(path25.extname(rel)) || rel.split("/").slice(0, -1).some((d) => SKIP_DIRS.has(d)))
+        continue;
+      if (++count > maxFiles) {
+        console.warn(`anchor: ${root} has more than ${maxFiles} code files; anchors cover only the first ${maxFiles}`);
+        return;
+      }
+      yield path25.join(root, rel);
+    }
+    return;
+  }
   const stack = [root];
   while (stack.length) {
     const dir = stack.pop();
@@ -13691,48 +13732,60 @@ function* repoFiles(root) {
         if (!SKIP_DIRS.has(ent.name))
           stack.push(path25.join(dir, ent.name));
       } else if (ent.isFile() && CODE_EXT.has(path25.extname(ent.name))) {
-        if (++count > MAX_FILES)
+        if (++count > maxFiles) {
+          console.warn(`anchor: ${root} has more than ${maxFiles} code files; anchors cover only the first ${maxFiles}`);
           return;
+        }
         yield path25.join(dir, ent.name);
       }
     }
   }
 }
-function computeAnchor(repoRoot, triggers) {
-  const terms2 = anchorTerms(triggers);
-  if (!terms2.length || !fs24.existsSync(repoRoot))
-    return null;
-  const hits = [];
-  for (const file of repoFiles(repoRoot)) {
-    let text;
+function scanRepo(root, maxFiles) {
+  const out = [];
+  for (const file of repoFiles(root, maxFiles)) {
     try {
       if (fs24.statSync(file).size > MAX_FILE_BYTES)
         continue;
-      text = fs24.readFileSync(file, "utf8");
+      const text = fs24.readFileSync(file, "utf8");
+      const rel = path25.relative(root, file).split(path25.sep).join("/");
+      out.push({ rel, text, hay: `${path25.relative(root, file)}
+${text}`.toLowerCase() });
     } catch {
       continue;
     }
-    const hay = `${path25.relative(repoRoot, file)}
-${text}`.toLowerCase();
+  }
+  return out;
+}
+function computeAnchor(repoRoot, triggers, cache, maxFiles = MAX_FILES) {
+  const terms2 = anchorTerms(triggers);
+  if (!terms2.length || !fs24.existsSync(repoRoot))
+    return null;
+  let files = cache?.get(repoRoot);
+  if (!files) {
+    files = scanRepo(repoRoot, maxFiles);
+    cache?.set(repoRoot, files);
+  }
+  const hits = [];
+  for (const { rel, text, hay } of files) {
     const score = terms2.filter((t) => hay.includes(t)).length;
     if (!score)
       continue;
-    const symbols2 = [...text.matchAll(SYMBOL_RE)].map((m) => m[1]).filter((s) => terms2.some((t) => s.toLowerCase().includes(t)));
-    hits.push({ rel: path25.relative(repoRoot, file).split(path25.sep).join("/"), score, symbols: symbols2 });
+    hits.push({ rel, score, text });
   }
   if (!hits.length)
     return null;
   hits.sort((a, b) => b.score - a.score || (a.rel < b.rel ? -1 : 1));
   const top = hits.slice(0, MAX_PATHS);
-  const symbols = [...new Set(top.flatMap((h) => h.symbols))].sort().slice(0, MAX_SYMBOLS);
+  const symbols = [...new Set(top.flatMap((h) => [...h.text.matchAll(SYMBOL_RE)].map((m) => m[1]).filter((s) => terms2.some((t) => s.toLowerCase().includes(t)))))].sort().slice(0, MAX_SYMBOLS);
   return { paths: top.map((h) => h.rel).sort(), ...symbols.length ? { symbols } : {} };
 }
 var SKIP_DIRS, CODE_EXT, MAX_FILES, MAX_FILE_BYTES, MAX_PATHS, MAX_SYMBOLS, SYMBOL_RE, anchorTerms;
 var init_anchor = __esm({
   "packages/core/dist/knowledge/anchor.js"() {
-    SKIP_DIRS = /* @__PURE__ */ new Set([".git", "node_modules", "dist", "build", "coverage", ".next", ".worktrees", ".planning", ".converted"]);
+    SKIP_DIRS = /* @__PURE__ */ new Set([".git", "node_modules", "dist", "build", "coverage", ".next", ".worktrees", ".planning", ".converted", ".venv", "venv", "__pycache__"]);
     CODE_EXT = /* @__PURE__ */ new Set([".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs", ".py", ".go", ".rs", ".java", ".kt", ".swift", ".rb", ".php", ".cs", ".sol", ".sql", ".md"]);
-    MAX_FILES = 5e3;
+    MAX_FILES = 2e4;
     MAX_FILE_BYTES = 256 * 1024;
     MAX_PATHS = 5;
     MAX_SYMBOLS = 10;
@@ -13776,8 +13829,8 @@ function validateCandidate(c) {
   }
   return p;
 }
-function upsertSource(fm, src) {
-  const i = fm.sources.findIndex((s) => s.ref === src.ref);
+function upsertSource(fm, src, canon) {
+  const i = fm.sources.findIndex((s) => canon(s.ref) === canon(src.ref));
   if (i < 0) {
     fm.sources.push(src);
     return true;
@@ -13801,7 +13854,8 @@ function applyCandidates(input, opts) {
   const norm = /* @__PURE__ */ new Map();
   const totals = /* @__PURE__ */ new Map();
   const touched = /* @__PURE__ */ new Set();
-  const complete = new Set(input.complete ?? []);
+  const canon = refCanon(kbRoot, opts.sources ?? []);
+  const complete = new Set((input.complete ?? []).map(canon));
   for (const cand of input.candidates) {
     const problems = validateCandidate(cand);
     if (problems.length) {
@@ -13829,7 +13883,7 @@ function applyCandidates(input, opts) {
       ev2("item.rejected", cand.id, { reason: "ungrounded" });
       continue;
     }
-    const hit = (opts.errata ?? []).find((e) => e.ref === cand.source && ((o) => !!o && spansOverlap(o, offset))(findQuote(hay, e.quote)));
+    const hit = (opts.errata ?? []).find((e) => canon(e.ref) === canon(cand.source) && ((o) => !!o && spansOverlap(o, offset))(findQuote(hay, e.quote)));
     if (hit) {
       tot.total--;
       res.rejected.push({ id: cand.id, source: cand.source, reason: `errata:${hit.id}` });
@@ -13839,7 +13893,7 @@ function applyCandidates(input, opts) {
     let id = cand.id;
     for (const [wid, w] of work) {
       const span = (s) => s.sha === st.sha ? s.offset : findQuote(hay, s.quote) ?? s.offset;
-      if (w.fm.sources.some((s) => s.ref === cand.source && s.offset && ((o) => !!o && spansOverlap(o, offset))(span(s)))) {
+      if (w.fm.sources.some((s) => canon(s.ref) === canon(cand.source) && s.offset && ((o) => !!o && spansOverlap(o, offset))(span(s)))) {
         id = wid;
         break;
       }
@@ -13854,7 +13908,7 @@ function applyCandidates(input, opts) {
 
 ${cand.rationale.trim()}` : "");
     if (target && contradicted.length === 0 && sameMeaning(target, cand)) {
-      let changed = upsertSource(target.fm, src);
+      let changed = upsertSource(target.fm, src, canon);
       if (target.fm.status === "stale") {
         target.fm.status = "active";
         changed = true;
@@ -13905,7 +13959,7 @@ ${cand.rationale.trim()}` : "");
       if (!other.startsWith(`${id}@`) || !other.endsWith(".md") || path26.join(dir, other) === file)
         continue;
       const old = matter4(fs25.readFileSync(path26.join(dir, other), "utf8"));
-      if (!old.data.sources?.some((s) => s.ref === cand.source))
+      if (!old.data.sources?.some((s) => canon(s.ref) === canon(cand.source)))
         continue;
       fs25.writeFileSync(path26.join(dir, other.replace(/\.md$/, ".superseded")), matter4.stringify(old.content, { ...old.data, supersededBy: path26.basename(file) }));
       fs25.rmSync(path26.join(dir, other));
@@ -13919,18 +13973,19 @@ ${cand.rationale.trim()}` : "");
   for (const [id, w] of work) {
     if (touched.has(id) || w.fm.status !== "active" || w.isNew)
       continue;
-    if (w.fm.sources.length && w.fm.sources.every((s) => complete.has(s.ref))) {
+    if (w.fm.sources.length && w.fm.sources.every((s) => complete.has(canon(s.ref)))) {
       w.fm.status = "stale";
       w.dirty = true;
       res.stale.push(id);
     }
   }
+  const anchorCache = /* @__PURE__ */ new Map();
   for (const w of work.values()) {
     if (!w.dirty || !opts.projects?.length)
       continue;
     const anchors = { ...w.fm.anchors ?? {} };
     for (const p of opts.projects) {
-      const a = computeAnchor(p.root, w.fm.triggers);
+      const a = computeAnchor(p.root, w.fm.triggers, anchorCache);
       if (a)
         anchors[p.name] = a;
     }
@@ -13945,7 +14000,7 @@ ${cand.rationale.trim()}` : "");
     if (!fs25.existsSync(w.file) || fs25.readFileSync(w.file, "utf8") !== text)
       fs25.writeFileSync(w.file, text);
   }
-  res.orphanedErrata = orphanedErrata(kbRoot, opts.errata ?? [], totals.keys());
+  res.orphanedErrata = orphanedErrata(kbRoot, opts.sources ?? [], opts.errata ?? [], totals.keys());
   for (const [ref, t] of totals)
     if (needsDocling(t.dropped, t.total))
       res.doclingFlags.push({ ref, ...t });
@@ -14144,7 +14199,7 @@ var init_schedule = __esm({
 
 // packages/core/dist/knowledge/review.js
 import crypto4 from "crypto";
-import { execFileSync as execFileSync7 } from "child_process";
+import { execFileSync as execFileSync8 } from "child_process";
 import fs27 from "fs";
 import path28 from "path";
 import matter5 from "gray-matter";
@@ -14174,11 +14229,7 @@ function priorityOfRef(c, ref) {
   if (ref.startsWith("agent:"))
     return "agent";
   const root = kbDir(c.cfg, c.kb);
-  for (const e of c.sources)
-    for (const f of expandSource(root, e))
-      if (refFor(root, f) === ref)
-        return e.priority;
-  return "project";
+  return c.sources.find((e) => sourceCovers(root, c.sources, e, ref))?.priority ?? "project";
 }
 function priorityOfRule(c, r) {
   return r.sources.map((s) => priorityOfRef(c, s.ref)).sort((a, b) => PRIORITY_RANK[b] - PRIORITY_RANK[a])[0] ?? "project";
@@ -14215,7 +14266,7 @@ function reindex(c) {
 function anchorsFor(c, fm) {
   const anchors = { ...fm.anchors ?? {} };
   for (const p of c.projects ?? []) {
-    const a = computeAnchor(p.root, fm.triggers);
+    const a = computeAnchor(p.root, fm.triggers, c.anchorCache);
     if (a)
       anchors[p.name] = a;
   }
@@ -14258,8 +14309,9 @@ function mergeInto(c, p, targetId, live, events) {
   if (!t)
     return false;
   const tf = readFm(t.file);
+  const canon = refCanon(kbDir(c.cfg, c.kb), c.sources);
   for (const s of p.rule.sources)
-    if (!tf.fm.sources.some((x) => x.ref === s.ref))
+    if (!tf.fm.sources.some((x) => canon(x.ref) === canon(s.ref)))
       tf.fm.sources.push(s);
   fs27.writeFileSync(t.file, fileText(tf.fm, tf.body));
   fs27.rmSync(p.rule.file);
@@ -14272,7 +14324,7 @@ function evaluateCodeConflict(c, rule, cc) {
   const root = proj?.root;
   const code = root ? g.lastCommit(root, cc.files) : null;
   const kbRoot = kbDir(c.cfg, c.kb);
-  const docDates = rule.sources.map((s) => g.docDate(fileForRef(kbRoot, s.ref))).filter((d2) => !!d2).sort();
+  const docDates = rule.sources.map((s) => g.docDate(refPath(kbRoot, c.sources, s.ref))).filter((d2) => !!d2).sort();
   const docDate = docDates[docDates.length - 1];
   const docRev = docRevOf(rule);
   const evidence = { docRev, codeRev: code?.rev ?? "unknown", files: cc.files, project: cc.project };
@@ -14294,6 +14346,7 @@ function evaluateCodeConflict(c, rule, cc) {
   };
 }
 function applyDecisions(file, c) {
+  c = { ...c, anchorCache: /* @__PURE__ */ new Map() };
   const now = nowOf(c);
   const kbRoot = kbDir(c.cfg, c.kb);
   const threshold = reconcileConfig(c.cfg, c.kb).autoApproveConfidence;
@@ -14447,8 +14500,9 @@ function applyPair(pd, c, res, threshold, events, kbRoot, now) {
     return;
   }
   const kf = readFm(keep.file);
+  const canon = refCanon(kbRoot, c.sources);
   for (const s of drop.sources)
-    if (!kf.fm.sources.some((x) => x.ref === s.ref))
+    if (!kf.fm.sources.some((x) => canon(x.ref) === canon(s.ref)))
       kf.fm.sources.push(s);
   kf.fm.supersedes = [.../* @__PURE__ */ new Set([...kf.fm.supersedes ?? [], drop.id])];
   fs27.writeFileSync(keep.file, fileText(kf.fm, kf.body));
@@ -14594,7 +14648,7 @@ var init_review = __esm({
     escalationsFile = (kbRoot) => path28.join(kbRoot, "escalations.json");
     verdictsFile = (kbRoot) => path28.join(kbRoot, "verdicts.jsonl");
     needsYouCount = (kbRoot) => readEscalations(kbRoot).filter((e) => e.needsYou).length;
-    git = (root, args) => execFileSync7("git", ["-C", root, ...args], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
+    git = (root, args) => execFileSync8("git", ["-C", root, ...args], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
     realGit = {
       lastCommit(root, files) {
         try {
@@ -15033,7 +15087,7 @@ function renderReport(cfg, kb, o) {
   if (info.length)
     L.push("", `## For information (${info.length})`, "", ...info.map((e) => `- **${e.key}**: ${e.explanation}`));
   const { errata, errors: errataErrors } = loadErrata(kbDir(cfg, kb));
-  const orphans = orphanedErrata(kbDir(cfg, kb), errata);
+  const orphans = orphanedErrata(kbDir(cfg, kb), loadSources(kbDir(cfg, kb)).sources, errata);
   if (orphans.length || errataErrors.length) {
     L.push("", `## Errata to re-check (${orphans.length + errataErrors.length})`, "", ...orphans.map((e) => `- **${e.id}** (${e.ref}): quote no longer found in the source; the raw file changed. Re-check it in errata.yaml.`), ...errataErrors.map((e) => `- errata.yaml: ${e}`));
   }
@@ -15055,6 +15109,7 @@ var init_report = __esm({
     init_errata();
     init_layers();
     init_paths();
+    init_sources();
     init_review();
     init_scores();
   }
@@ -15390,7 +15445,6 @@ __export(dist_exports, {
   extractToolPayload: () => extractToolPayload,
   extractUserIntentFromTranscript: () => extractUserIntentFromTranscript,
   fallsBackToPane: () => fallsBackToPane,
-  fileForRef: () => fileForRef,
   findCrewPane: () => findCrewPane,
   findLegacyKbs: () => findLegacyKbs,
   findLegacyOverlays: () => findLegacyOverlays,
@@ -15532,7 +15586,10 @@ __export(dist_exports, {
   recoverStall: () => recoverStall,
   reduce: () => reduce,
   reduceLifecycle: () => reduceLifecycle,
+  refCandidates: () => refCandidates,
+  refCanon: () => refCanon,
   refFor: () => refFor,
+  refPath: () => refPath,
   releaseDaemonLock: () => releaseDaemonLock,
   removeRunningMarker: () => removeRunningMarker,
   removeSource: () => removeSource,
@@ -15565,6 +15622,7 @@ __export(dist_exports, {
   resolveSetupGroup: () => resolveSetupGroup,
   resolveSetupToken: () => resolveSetupToken,
   resolveSetupUserId: () => resolveSetupUserId,
+  resolveSourceRef: () => resolveSourceRef,
   restartDaemonIfRunning: () => restartDaemonIfRunning,
   rotateIfNeeded: () => rotateIfNeeded,
   ruleAuditScope: () => ruleAuditScope,
@@ -15832,31 +15890,31 @@ import path32 from "path";
 // packages/agents/dist/projection/cursor.js
 import { mkdir, readFile, writeFile } from "fs/promises";
 import path33 from "path";
-import os10 from "os";
+import os9 from "os";
 
 // packages/agents/dist/projection/codex.js
 import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2 } from "fs/promises";
 import path34 from "path";
-import os11 from "os";
+import os10 from "os";
 
 // packages/agents/dist/projection/gemini.js
 import { mkdir as mkdir3, readFile as readFile3, writeFile as writeFile3 } from "fs/promises";
 import path35 from "path";
-import os12 from "os";
+import os11 from "os";
 
 // packages/agents/dist/projection/opencode.js
 import { mkdir as mkdir4, readFile as readFile4, writeFile as writeFile4 } from "fs/promises";
 import path36 from "path";
-import os13 from "os";
+import os12 from "os";
 
 // packages/agents/dist/projection/opencode-skills.js
 import fs33 from "fs";
-import os14 from "os";
+import os13 from "os";
 import path37 from "path";
 var OPENCODE_SKILL_MARKER = ".squadrant-managed";
 var MARKER_BODY = "squadrant\n";
 function defaultOpencodeSkillsRoot(env = process.env) {
-  const configHome = env.XDG_CONFIG_HOME || path37.join(os14.homedir(), ".config");
+  const configHome = env.XDG_CONFIG_HOME || path37.join(os13.homedir(), ".config");
   return path37.join(configHome, "opencode", "skills");
 }
 var SAFE_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
@@ -15944,7 +16002,7 @@ function syncShippedOpencodeSkills(opts) {
 // packages/agents/dist/projection/claude.js
 import { mkdir as mkdir5, readFile as readFile5, writeFile as writeFile5 } from "fs/promises";
 import path38 from "path";
-import os15 from "os";
+import os14 from "os";
 
 // packages/agents/dist/codex/app-server-client.js
 import { EventEmitter } from "events";
@@ -17289,7 +17347,7 @@ var ClaudeReceiptListener = class {
 
 // packages/agents/dist/claude/api-key-approval.js
 import fs34 from "fs";
-import os16 from "os";
+import os15 from "os";
 import path39 from "path";
 
 // packages/agents/dist/opencode/http-channel.js
@@ -17460,7 +17518,7 @@ function createOpencodeFactAdapter(deps) {
 
 // packages/agents/dist/rules-hooks/install.js
 import fs35 from "fs";
-import os17 from "os";
+import os16 from "os";
 import path40 from "path";
 
 // packages/workspaces/dist/runtimes/cmux.js
@@ -17469,7 +17527,7 @@ init_dist();
 init_dist();
 init_dist2();
 init_dist2();
-import { execFile as execFile3, execFileSync as execFileSync8 } from "child_process";
+import { execFile as execFile3, execFileSync as execFileSync9 } from "child_process";
 var CMUX_TIMEOUT = 15e3;
 var CmuxTimeoutError = class extends Error {
   constructor(cmd) {
@@ -18143,7 +18201,7 @@ var RuntimeRegistry = class {
 
 // packages/workspaces/dist/notifiers/cmux.js
 init_dist();
-import { execFile as execFileCb, execFileSync as execFileSync9 } from "child_process";
+import { execFile as execFileCb, execFileSync as execFileSync10 } from "child_process";
 import { promisify as promisify3 } from "util";
 var execFile4 = promisify3(execFileCb);
 function createCmuxNotifier(_scope) {
@@ -18151,7 +18209,7 @@ function createCmuxNotifier(_scope) {
     name: "cmux",
     async probe() {
       try {
-        execFileSync9(resolveCmuxBin(), ["capabilities"], { encoding: "utf-8", stdio: "pipe", timeout: CMUX_TIMEOUT });
+        execFileSync10(resolveCmuxBin(), ["capabilities"], { encoding: "utf-8", stdio: "pipe", timeout: CMUX_TIMEOUT });
         return { installed: true, reachable: true };
       } catch (err) {
         const code = err.code;
@@ -18361,9 +18419,9 @@ import { homedir as homedir11 } from "os";
 // packages/workspaces/dist/cmux-daemon/store-fingerprint.js
 init_dist();
 init_dist2();
-import { execFileSync as execFileSync10 } from "child_process";
+import { execFileSync as execFileSync11 } from "child_process";
 function defaultExecPs(pid) {
-  return execFileSync10("ps", ["-o", "command=", "-p", String(pid)], {
+  return execFileSync11("ps", ["-o", "command=", "-p", String(pid)], {
     encoding: "utf-8",
     stdio: ["ignore", "pipe", "ignore"]
   });