Tree-sitter symbol/call/import extraction. No LLM, no type checker — honest static extraction with explicit confidence tiers downstream.