kibi-cli 0.19.0 → 2.0.0

package/dist/utils/schema-version.js

@@ -1,5 +1,22 @@
+/*
+ * Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ * Copyright (C) 2026 Piotr Franczyk
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ */
 // implements REQ-003
-export const LATEST_KB_SCHEMA_VERSION = 4;
+export const LATEST_KB_SCHEMA_VERSION = 5;
 // implements REQ-003
 export function normalizeSchemaVersion(schemaVersion) {
     if (schemaVersion === undefined || schemaVersion === null) {
@@ -18,7 +35,10 @@ export function normalizeSchemaVersion(schemaVersion) {
 // implements REQ-003
 export function getSchemaVersionStatus(config) {
     const latestVersion = LATEST_KB_SCHEMA_VERSION;
-    const hasSchemaVersion = config !== null && config !== undefined && "schemaVersion" in config;
+    const hasSchemaVersion = config !== null &&
+        config !== undefined &&
+        "schemaVersion" in config &&
+        config.schemaVersion !== undefined;
     const currentVersion = normalizeSchemaVersion(config?.schemaVersion);
     if (currentVersion === null) {
         return {
@@ -27,8 +47,8 @@ export function getSchemaVersionStatus(config) {
             latestVersion,
             needsMigration: true,
             warning: hasSchemaVersion
-                ? "KB config schemaVersion is invalid and should be migrated."
-                : "KB config schemaVersion is missing; legacy config should be migrated.",
+                ? "KB schemaVersion is invalid and should be migrated."
+                : "KB schemaVersion is missing; the repository should be initialized or migrated.",
         };
     }
     if (currentVersion > latestVersion) {
@@ -37,7 +57,7 @@ export function getSchemaVersionStatus(config) {
             currentVersion,
             latestVersion,
             needsMigration: false,
-            warning: `KB config schemaVersion ${currentVersion} is newer than the latest supported version ${latestVersion}.`,
+            warning: `KB schemaVersion ${currentVersion} is newer than the latest supported version ${latestVersion}.`,
         };
     }
     if (currentVersion < latestVersion) {
@@ -46,7 +66,7 @@ export function getSchemaVersionStatus(config) {
             currentVersion,
             latestVersion,
             needsMigration: true,
-            warning: `KB config schemaVersion ${currentVersion} is older than the latest version ${latestVersion} and should be migrated.`,
+            warning: `KB schemaVersion ${currentVersion} is older than the latest version ${latestVersion} and should be migrated.`,
         };
     }
     return {

package/dist/utils/strict-modeling.d.ts

@@ -1,6 +1,5 @@
 import type { BaseEntity, FactFields } from "../types/entities.js";
 import type { BaseRelationship } from "../types/relationships.js";
-import { type KbConfigPaths } from "./config.js";
 export interface SemanticClaim {
     source: string;
     subjectKey: string;
@@ -13,9 +12,6 @@ export interface SemanticClaim {
 export interface StrictModelInput {
     claim: SemanticClaim;
     statement: string;
-    config?: Pick<{
-        paths: KbConfigPaths;
-    }, "paths">;
 }
 type EntityProperties = Partial<Omit<BaseEntity, "created_at" | "updated_at"> & FactFields> & {
     id: string;
@@ -60,5 +56,6 @@ export declare function normalizePropertyKey(value: string): string;
 export declare function buildStableRequirementIds(claim: SemanticClaim): StableRequirementIds;
 export declare function buildStrictWriteSet(input: StrictModelInput): StrictWriteSet;
 export declare function modelRequirementClaims(inputs: ReadonlyArray<StrictModelInput>): StrictWriteSet[];
+export declare function normalizeTextRef(provenance: string | undefined, source: string): string;
 export {};
 //# sourceMappingURL=strict-modeling.d.ts.map

package/dist/utils/strict-modeling.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"strict-modeling.d.ts","sourceRoot":"","sources":["../../src/utils/strict-modeling.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAkB,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AAIjE,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,UAAU,CAAC;IAC7D,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,IAAI,CAAC;QAAE,KAAK,EAAE,aAAa,CAAA;KAAE,EAAE,OAAO,CAAC,CAAC;CAClD;AAED,KAAK,gBAAgB,GAAG,OAAO,CAC7B,IAAI,CAAC,UAAU,EAAE,YAAY,GAAG,YAAY,CAAC,GAAG,UAAU,CAC3D,GAAG;IACF,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,WAAW,UAAU,CACzB,KAAK,SAAS,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,EAC7C,WAAW,SAAS,gBAAgB,GAAG,gBAAgB;IAEvD,IAAI,EAAE,KAAK,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,WAAW,CAAC;CACzB;AAED,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,gBAAgB,EAChB,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,QAAQ,GAAG,YAAY,CACjD,CAAC;AAEF,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,yBAAyB;IACjC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACjC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,QAAQ,EAAE,IAAI,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,mBAAmB;IAC3B,eAAe,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,QAAQ,EAAE,KAAK,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GAAG,yBAAyB,GAAG,mBAAmB,CAAC;AAE7E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiBzD;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAe1D;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,aAAa,GACnB,oBAAoB,CAwBtB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,cAAc,CAsH3E;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,aAAa,CAAC,gBAAgB,CAAC,GACtC,cAAc,EAAE,CAkBlB"}
+{"version":3,"file":"strict-modeling.d.ts","sourceRoot":"","sources":["../../src/utils/strict-modeling.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAKlE,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,UAAU,CAAC;IAC7D,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,KAAK,gBAAgB,GAAG,OAAO,CAC7B,IAAI,CAAC,UAAU,EAAE,YAAY,GAAG,YAAY,CAAC,GAAG,UAAU,CAC3D,GAAG;IACF,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,WAAW,UAAU,CACzB,KAAK,SAAS,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,EAC7C,WAAW,SAAS,gBAAgB,GAAG,gBAAgB;IAEvD,IAAI,EAAE,KAAK,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,WAAW,CAAC;CACzB;AAED,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,gBAAgB,EAChB,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,QAAQ,GAAG,YAAY,CACjD,CAAC;AAEF,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,yBAAyB;IACjC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACjC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,QAAQ,EAAE,IAAI,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,mBAAmB;IAC3B,eAAe,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,QAAQ,EAAE,KAAK,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GAAG,yBAAyB,GAAG,mBAAmB,CAAC;AAE7E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiBzD;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAe1D;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,aAAa,GACnB,oBAAoB,CAwBtB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,cAAc,CAsH3E;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,aAAa,CAAC,gBAAgB,CAAC,GACtC,cAAc,EAAE,CAkBlB;AAiDD,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,MAAM,EAAE,MAAM,GACb,MAAM,CAMR"}

package/dist/utils/strict-modeling.js

@@ -17,7 +17,7 @@
  */
 import { createHash } from "node:crypto";
 import * as path from "node:path";
-import { DEFAULT_CONFIG } from "./config.js";
+import { CANONICAL_ENTITY_PATHS } from "./kb-paths.js";
 const STRICT_CONFIDENCE_THRESHOLD = 0.7;
 export function normalizeSubjectKey(value) {
     const normalized = value
@@ -78,7 +78,7 @@ export function buildStrictWriteSet(input) {
         confidence,
         provenance: textRef,
     });
-    const sourcePaths = resolveEntitySourcePaths(input.config?.paths);
+    const sourcePaths = resolveEntitySourcePaths();
     if (confidence < STRICT_CONFIDENCE_THRESHOLD) {
         return {
             observationFact: {
@@ -232,7 +232,7 @@ function normalizeStatement(statement) {
     }
     return normalized;
 }
-function normalizeTextRef(provenance, source) {
+export function normalizeTextRef(provenance, source) {
     const value = provenance?.trim() || source.trim();
     if (!value) {
         throw new Error("Strict modeling requires claim provenance or source");
@@ -366,15 +366,14 @@ function dedupeRelationships(relationships) {
     }
     return deduped;
 }
-function resolveEntitySourcePaths(configPaths) {
+function resolveEntitySourcePaths() {
     return {
-        requirements: normalizeEntityDirectory(configPaths?.requirements, DEFAULT_CONFIG.paths.requirements),
-        facts: normalizeEntityDirectory(configPaths?.facts, DEFAULT_CONFIG.paths.facts),
+        requirements: normalizeEntityDirectory(CANONICAL_ENTITY_PATHS.requirements),
+        facts: normalizeEntityDirectory(CANONICAL_ENTITY_PATHS.facts),
     };
 }
-function normalizeEntityDirectory(directory, fallback) {
-    const selected = directory?.trim() || fallback?.trim() || "documentation";
-    return selected.split(path.sep).join("/").replace(/\/+$/g, "");
+function normalizeEntityDirectory(directory) {
+    return directory.split(path.sep).join("/").replace(/\/+$/g, "");
 }
 function buildEntitySourcePath(directory, entityId) {
     return `${directory}/${entityId}.md`;

package/package.json

@@ -1,21 +1,30 @@
 {
   "name": "kibi-cli",
-  "version": "0.19.0",
+  "version": "2.0.0",
   "type": "module",
   "description": "Kibi CLI for knowledge base management",
   "engines": {
-    "node": ">=18"
+    "node": ">=22"
   },
   "main": "./dist/cli.js",
   "bin": {
     "kibi": "bin/kibi"
   },
-  "files": ["dist", "bin", "schema", "src/schemas", "src/public"],
+  "files": [
+    "dist",
+    "bin",
+    "schema",
+    "src/schemas",
+    "src/public",
+    "templates"
+  ],
   "scripts": {
-    "build": "tsc -p tsconfig.json && mkdir -p dist/public/skills && cp -r src/public/skills/. dist/public/skills/",
+    "build": "tsc -p tsconfig.json && rm -rf dist/public/skills && mkdir -p dist/public/skills dist/report && cp -r src/public/skills/. dist/public/skills/ && cp src/report/html-report.css dist/report/html-report.css && node ../../scripts/generate-entity-schema.mjs --check",
     "test": "node ../../scripts/run-owned-engine-tests.mjs -- bun test --timeout 15000 .",
     "typecheck": "tsc -p tsconfig.json --noEmit",
-    "prepack": "npm run build"
+    "schema:generate": "tsc -p tsconfig.json && node ../../scripts/generate-entity-schema.mjs",
+    "schema:check": "tsc -p tsconfig.json && node ../../scripts/generate-entity-schema.mjs --check",
+    "prepack": "npm run build && node ../../scripts/verify-package-contract.mjs kibi-cli"
   },
   "exports": {
     ".": {
@@ -38,14 +47,18 @@
       "types": "./dist/public/operations/runtime-types.d.ts",
       "default": "./dist/public/operations/runtime-types.js"
     },
+    "./operations/result-envelope": {
+      "types": "./dist/public/operations/result-envelope.d.ts",
+      "default": "./dist/public/operations/result-envelope.js"
+    },
+    "./runtime/cli-runtime": {
+      "types": "./dist/runtime/cli-runtime.d.ts",
+      "default": "./dist/runtime/cli-runtime.js"
+    },
     "./operations/node-ports": {
       "types": "./dist/public/operations/node-ports.d.ts",
       "default": "./dist/public/operations/node-ports.js"
     },
-    "./verification-receipt": {
-      "types": "./dist/public/verification-receipt.d.ts",
-      "default": "./dist/public/verification-receipt.js"
-    },
     "./operations/semantic-advisor/analyze-prose": {
       "types": "./dist/operations/semantic-advisor/analyze-prose.d.ts",
       "default": "./dist/operations/semantic-advisor/analyze-prose.js"
@@ -62,6 +75,10 @@
       "types": "./dist/public/extractors/symbols-coordinator.d.ts",
       "default": "./dist/public/extractors/symbols-coordinator.js"
     },
+    "./extractors/symbol-coordinates": {
+      "types": "./dist/extractors/symbol-coordinates.d.ts",
+      "default": "./dist/extractors/symbol-coordinates.js"
+    },
     "./extractors/manifest": {
       "types": "./dist/public/extractors/manifest.d.ts",
       "default": "./dist/public/extractors/manifest.js"
@@ -94,6 +111,18 @@
       "types": "./dist/search-ranking.d.ts",
       "default": "./dist/search-ranking.js"
     },
+    "./intent-search": {
+      "types": "./dist/intent-search.d.ts",
+      "default": "./dist/intent-search.js"
+    },
+    "./playwright-reporter": {
+      "types": "./dist/proof/producers/playwright-reporter.d.ts",
+      "default": "./dist/proof/producers/playwright-reporter.js"
+    },
+    "./playwright-case-id": {
+      "types": "./dist/proof/producers/playwright-case-id.d.ts",
+      "default": "./dist/proof/producers/playwright-case-id.js"
+    },
     "./public/check-types": {
       "types": "./dist/public/check-types.d.ts",
       "default": "./dist/public/check-types.js"
@@ -151,6 +180,10 @@
       "types": "./dist/operations/mutation/symbol-refresh.d.ts",
       "default": "./dist/operations/mutation/symbol-refresh.js"
     },
+    "./operations/mutation/symbol-compiler-lock": {
+      "types": "./dist/operations/mutation/symbol-compiler-lock.d.ts",
+      "default": "./dist/operations/mutation/symbol-compiler-lock.js"
+    },
     "./operations/mutation/types": {
       "types": "./dist/operations/mutation/types.d.ts",
       "default": "./dist/operations/mutation/types.js"
@@ -193,12 +226,15 @@
     "fast-glob": "^3.2.12",
     "gray-matter": "^4.0.3",
     "js-yaml": "^4.1.0",
-    "kibi-core": "^0.10.0",
+    "kibi-core": "^0.12.0",
+    "saxes": "^6.0.0",
     "ts-morph": "^23.0.0",
-    "ignore": "^5.3.0"
+    "ignore": "^5.3.0",
+    "yaml": "^2.9.0"
   },
   "devDependencies": {
     "@types/node": "latest",
+    "semver": "^7.7.4",
     "typescript": "^5.7.0"
   },
   "license": "AGPL-3.0-or-later",

package/schema/config.json

@@ -1,8 +1,8 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://raw.githubusercontent.com/Looted/kibi/master/packages/cli/schema/config.json",
-  "title": "Kibi Configuration",
-  "description": "Configuration schema for Kibi knowledge base",
+  "title": "Kibi Legacy Configuration (deprecated)",
+  "description": "Deprecated leftover .kb/config.json schema kept only so migration tooling can recognize old files. Entity paths and check policy in this document are ignored at runtime. Canonical lifecycle metadata lives in .kb/manifest.json.",
   "type": "object",
   "properties": {
     "$schema": {

package/schema/manifest.json

@@ -0,0 +1,26 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://raw.githubusercontent.com/Looted/kibi/master/packages/cli/schema/manifest.json",
+  "title": "Kibi Lifecycle Manifest",
+  "description": "Kibi-owned lifecycle metadata written to .kb/manifest.json. This is not a user configuration file: entity paths and check enforcement are canonical and cannot be overridden here.",
+  "type": "object",
+  "additionalProperties": true,
+  "required": ["manifestVersion", "schemaVersion"],
+  "properties": {
+    "manifestVersion": {
+      "type": "integer",
+      "minimum": 1,
+      "description": "Payload schema for this lifecycle manifest"
+    },
+    "schemaVersion": {
+      "type": "integer",
+      "minimum": 1,
+      "description": "KB entity/relationship schema generation"
+    },
+    "semanticAdvisorBackfill": {
+      "type": "string",
+      "enum": ["pending", "completed", "not_applicable"],
+      "description": "Retroactive semantic-advisor backfill review state"
+    }
+  }
+}

package/src/public/branch-resolver.ts

@@ -1 +1,2 @@
 export * from "../utils/branch-resolver.js";
+export * from "../utils/branch-store-locator.js";

package/src/public/check-types.ts

@@ -1,19 +1,19 @@
 /*
- Kibi — repo-local, per-branch, queryable long-term memory for software projects
- Copyright (C) 2026 Piotr Franczyk
-
- This program is free software: you can redistribute it and/or modify
- it under the terms of the GNU Affero General Public License as published by
- the Free Software Foundation, either version 3 of the License, or
- (at your option) any later version.
-
- This program is distributed in the hope that it will be useful,
- but WITHOUT ANY WARRANTY; without even the implied warranty of
- MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- GNU Affero General Public License for more details.
-
- You should have received a copy of the GNU Affero General Public License
- along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ * Copyright (C) 2026 Piotr Franczyk
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
  */
 
 /**
@@ -21,9 +21,8 @@
  * Import from "kibi-cli/public/check-types" in MCP or external consumers.
  */
 export type {
-  ChecksConfig,
   RuleDefinition,
-  SymbolTraceabilityOptions,
+  RuleEnforcementClass,
   Violation,
 } from "../utils/rule-registry.js";
 export type {
@@ -34,11 +33,15 @@ export type {
 } from "../utils/strict-modeling.js";
 
 export {
-  DEFAULT_CHECKS_CONFIG,
   RULE_NAMES,
   RULES,
+  getCanonicalRules,
+  getDefaultRules,
   getEffectiveRules,
-  mergeChecksConfig,
+  getRuleDefinition,
+  getRuleEnforcementClass,
+  isCanonicalRule,
+  ruleRunsByDefault,
   validateRuleName,
 } from "../utils/rule-registry.js";
 

package/src/public/diagnostic-usage.ts

@@ -22,7 +22,12 @@ function isRecord(value: unknown): value is Record<string, unknown> {
 
 function resultRecord(result: unknown): Record<string, unknown> | undefined {
   if (!isRecord(result)) return undefined;
-  return isRecord(result.structuredContent) ? result.structuredContent : result;
+  if (isRecord(result.structuredContent)) return result.structuredContent;
+  // CLI JSON operations return the same versioned KibiResult envelope as MCP
+  // structuredContent.  Unwrap its data before deriving operation-specific
+  // telemetry fields (coverage/proof fields in particular).
+  if (result.kibiProtocol === 1 && isRecord(result.data)) return result.data;
+  return result;
 }
 
 function stringArray(value: unknown): string[] {
@@ -80,13 +85,58 @@ function appendSemanticFields(
 }
 
 const RECEIPT_GAP_CODES = new Set([
-  "missing_verification_receipt",
-  "stale_verification_receipt",
-  "failed_verification_receipt",
-  "invalid_verification_receipt",
-  "verification_snapshot_unavailable",
+  "missing_proof_receipt",
+  "stale_proof_receipt",
+  "failed_proof_receipt",
+  "invalid_proof_receipt",
+  "proof_contract_mismatch",
+  "proof_snapshot_unavailable",
 ]);
 
+const MAX_COVERAGE_RECEIPT_GAPS = 50;
+
+function coverageReceiptGapDetails(rows: readonly Record<string, unknown>[]): {
+  readonly details: readonly Record<string, unknown>[];
+  readonly total: number;
+  readonly truncated: boolean;
+} {
+  const details = rows
+    .flatMap((row) => {
+      const codes = [...new Set(stringArray(row.proofGaps))]
+        .filter((code) => RECEIPT_GAP_CODES.has(code))
+        .sort();
+      if (codes.length === 0) return [];
+      const stages = isRecord(row.proofStages) ? row.proofStages : undefined;
+      const passingE2e = isRecord(stages?.passingE2e)
+        ? stages.passingE2e
+        : undefined;
+      const testIds = [
+        "missingReceiptTests",
+        "staleReceiptTests",
+        "failedReceiptTests",
+        "invalidReceiptTests",
+        "contractMismatchReceiptTests",
+        "snapshotUnavailableTests",
+      ].flatMap((key) => stringArray(passingE2e?.[key]));
+      const requirementId = typeof row.id === "string" ? row.id : "unknown";
+      return [
+        {
+          requirementId,
+          testIds: [...new Set(testIds)].sort(),
+          codes,
+        },
+      ];
+    })
+    .sort((left, right) =>
+      left.requirementId.localeCompare(right.requirementId),
+    );
+  return {
+    details: details.slice(0, MAX_COVERAGE_RECEIPT_GAPS),
+    total: details.length,
+    truncated: details.length > MAX_COVERAGE_RECEIPT_GAPS,
+  };
+}
+
 function appendCoverageFields(
   fields: Record<string, unknown>,
   args: Readonly<Record<string, unknown>>,
@@ -108,6 +158,10 @@ function appendCoverageFields(
   fields.coverage_receipt_gap_count = gapCodes.filter((code) =>
     RECEIPT_GAP_CODES.has(code),
   ).length;
+  const receiptGaps = coverageReceiptGapDetails(rows);
+  fields.coverage_receipt_gaps = receiptGaps.details;
+  fields.coverage_receipt_gap_total = receiptGaps.total;
+  fields.coverage_receipt_gaps_truncated = receiptGaps.truncated;
   if (typeof scope?.complete === "boolean") {
     fields.coverage_scope_complete = scope.complete;
   }
@@ -135,6 +189,30 @@ export function deriveDiagnosticUsageFields(
   }
 
   const structured = resultRecord(result);
+  const envelope =
+    isRecord(structured) && structured.kibiProtocol === 1
+      ? structured
+      : undefined;
+  if (envelope) {
+    fields.protocol_version = envelope.kibiProtocol;
+    fields.result_version =
+      typeof envelope.resultVersion === "string"
+        ? envelope.resultVersion
+        : null;
+    fields.result_status =
+      typeof envelope.status === "string" ? envelope.status : null;
+    fields.effect_failures = Array.isArray(envelope.effects)
+      ? envelope.effects.filter(
+          (effect) => isRecord(effect) && effect.status === "failed",
+        )
+      : [];
+    fields.followed_next_actions = Array.isArray(
+      telemetry?.followed_next_actions,
+    )
+      ? telemetry.followed_next_actions
+      : [];
+    fields.unsafe_original_retry = telemetry?.unsafe_original_retry === true;
+  }
   if (tool === "kb_query" || tool === "kb_search") {
     const resultCount = Number(structured?.count ?? 0);
     fields.result_count = resultCount;

package/src/public/distribution-parity.ts

@@ -19,7 +19,8 @@ export const REQUIREMENT_COMPILER_CAPABILITIES = [
   "contradiction_witnesses",
   "conservative_proof",
   "repair_plan",
-  "verification_receipts",
+  "proof_receipts",
+  "proof_contract",
   "telemetry_acceptance",
 ] as const;
 
@@ -169,7 +170,10 @@ const DEFAULT_VOLATILE_KEYS = new Set([
   "updated_at",
   "updatedAt",
   "usageLogLineNumber",
-  "verificationSnapshot",
+  "proofSnapshot",
+  // Per-workspace filesystem identity; CLI and MCP parity runs use two temp trees.
+  "attachedIno",
+  "attachedDev",
 ]);
 
 type PackageManifest = {
@@ -177,12 +181,17 @@ type PackageManifest = {
   readonly version?: string;
 };
 
-function nearestPackageInfo(entrypoint: string): {
+export function nextAncestorDirectory(current: string): string | undefined {
+  const parent = path.dirname(current);
+  return parent === current ? undefined : parent;
+}
+
+export function nearestPackageInfo(entrypoint: string): {
   readonly packageRoot?: string;
   readonly version?: string;
 } {
-  let current = path.dirname(entrypoint);
-  while (true) {
+  let current: string | undefined = path.dirname(entrypoint);
+  while (current !== undefined) {
     const manifestPath = path.join(current, "package.json");
     if (existsSync(manifestPath)) {
       try {
@@ -199,10 +208,9 @@ function nearestPackageInfo(entrypoint: string): {
         return { packageRoot: current };
       }
     }
-    const parent = path.dirname(current);
-    if (parent === current) return {};
-    current = parent;
+    current = nextAncestorDirectory(current);
   }
+  return {};
 }
 
 function declaredEntrypoint(contents: string): string | undefined {
@@ -304,7 +312,7 @@ function semanticFingerprint(value: unknown): string {
   return JSON.stringify(value);
 }
 
-function sortedUnique(values: readonly string[] | undefined): string[] {
+export function sortedUnique(values: readonly string[] | undefined): string[] {
   return [...new Set(values ?? [])].sort((left, right) =>
     left.localeCompare(right),
   );

package/src/public/ignore-policy.ts

@@ -1,15 +1,9 @@
-import {
-  type Dirent,
-  existsSync,
-  readFileSync,
-  readdirSync,
-  statSync,
-} from "node:fs";
+import { type Dirent, existsSync, readFileSync, readdirSync } from "node:fs";
 import * as path from "node:path";
 import ignore from "ignore";
+import { DERIVED_KB_PREFIXES } from "../utils/kb-paths.js";
 
 const HARD_DENYLIST = [
-  ".kb",
   ".git",
   "node_modules",
   "vendor",
@@ -18,6 +12,9 @@ const HARD_DENYLIST = [
   ".opencode",
 ];
 
+/** Derived .kb/ runtime trees. Authored knowledge lanes stay visible. */
+const HARD_DENY_KB_PREFIXES = DERIVED_KB_PREFIXES;
+
 export interface IgnorePolicy {
   isIgnored(inputPath: string): boolean;
   getFastGlobIgnoreGlobs(): string[];
@@ -41,7 +38,7 @@ function toPosix(p: string): string {
   return p.split(path.sep).join("/");
 }
 
-// implements REQ-001
+// implements REQ-cli-canonical-runtime
 export function createRepoIgnorePolicy(workspaceRoot: string): IgnorePolicy {
   const root = path.resolve(workspaceRoot);
 
@@ -69,7 +66,7 @@ export function createRepoIgnorePolicy(workspaceRoot: string): IgnorePolicy {
       if (ent.isDirectory()) {
         // avoid descending into common heavy or control directories
         if (HARD_DENYLIST.includes(name)) continue;
-        // also avoid .git itself to prevent reading internal excludes as nested
+        if (name === ".kb") continue;
         if (name === ".git") continue;
         walk(abs);
       } else if (ent.isFile()) {
@@ -113,6 +110,11 @@ export function createRepoIgnorePolicy(workspaceRoot: string): IgnorePolicy {
 
   function matchesHardDeny(relPosix: string): boolean {
     const segments = relPosix.split("/").filter(Boolean);
+    for (const prefix of HARD_DENY_KB_PREFIXES) {
+      if (relPosix === prefix || relPosix.startsWith(`${prefix}/`)) {
+        return true;
+      }
+    }
     for (const deny of HARD_DENYLIST) {
       if (segments.includes(deny)) return true;
     }
@@ -186,6 +188,10 @@ export function createRepoIgnorePolicy(workspaceRoot: string): IgnorePolicy {
       globs.push(`**/${d}/**`);
       globs.push(`**/${d}`);
     }
+    for (const prefix of HARD_DENY_KB_PREFIXES) {
+      globs.push(`**/${prefix}/**`);
+      globs.push(`**/${prefix}`);
+    }
 
     // Root .gitignore patterns (convert to simple globs)
     for (const p of rootGitPatterns) {