kibi-cli 0.5.1 → 0.6.0

package/dist/traceability/git-staged.js

@@ -1,4 +1,5 @@
 import { execSync } from "node:child_process";
+import { isCliTraceOrDebugEnabled } from "../env.js";
 function runGit(cmd, exec) {
     try {
         return exec(cmd, { encoding: "utf8" });
@@ -49,7 +50,7 @@ const SUPPORTED_EXT = new Set([
 const SUPPORTED_MANIFEST = new Set(["symbols.yaml", "symbols.yml"]);
 const ENTITY_MARKDOWN_DIRS = ["/requirements/", "/scenarios/", "/tests/"];
 function shouldLogTraceDebug() {
-    return Boolean(process.env.KIBI_TRACE || process.env.KIBI_DEBUG);
+    return isCliTraceOrDebugEnabled();
 }
 function escapePath(p) {
     return p.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
@@ -83,7 +84,9 @@ function isManifestFile(p) {
 /**
  * Parse unified diff hunks (new-file coordinates) from git diff output
  */
-export function parseHunksFromDiff(diffText, isNewFile = false) {
+export function parseHunksFromDiff(
+// implements REQ-014
+diffText, isNewFile = false) {
     const ranges = [];
     if (!diffText)
         return ranges;
@@ -93,7 +96,10 @@ export function parseHunksFromDiff(diffText, isNewFile = false) {
         m = regex.exec(diffText);
         if (!m)
             break;
-        const c = Number.parseInt(m[1], 10);
+        const startLine = m[1];
+        if (!startLine)
+            continue;
+        const c = Number.parseInt(startLine, 10);
         const d = m[2] ? Number.parseInt(m[2], 10) : 1;
         if (d > 0) {
             ranges.push({ start: c, end: c + d - 1 });
@@ -135,8 +141,12 @@ export function getStagedFiles(exec = execSync) {
         let oldPath;
         if (status === "R") {
             if (entry.parts.length >= 2) {
-                oldPath = entry.parts[0];
-                path = entry.parts[1];
+                const previousPath = entry.parts[0];
+                const renamedPath = entry.parts[1];
+                if (previousPath !== undefined && renamedPath !== undefined) {
+                    oldPath = previousPath;
+                    path = renamedPath;
+                }
             }
         }
         if (!hasSupportedExt(path) &&
@@ -183,7 +193,13 @@ export function getStagedFiles(exec = execSync) {
                 r.end = Math.max(1, lines.length);
             }
         }
-        results.push({ path, status, oldPath, hunkRanges, content });
+        results.push({
+            path,
+            status,
+            ...(oldPath !== undefined ? { oldPath } : {}),
+            hunkRanges,
+            content,
+        });
     }
     return results;
 }

package/dist/traceability/symbol-extract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"symbol-extract.d.ts","sourceRoot":"","sources":["../../src/traceability/symbol-extract.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7D,KAAK,wBAAwB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAM7D,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;IAC7D,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,aAAa,CAAC,EAAE,wBAAwB,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,CAAC,EAAE,wBAAwB,EAAE,CAAC;CAC5C;AAED,MAAM,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;AAE9D,wBAAgB,+BAA+B,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAG5E;AAyLD,wBAAgB,4BAA4B,CAE1C,UAAU,EAAE,UAAU,EACtB,cAAc,CAAC,EAAE,cAAc,GAC9B,eAAe,EAAE,CA+JnB"}
+{"version":3,"file":"symbol-extract.d.ts","sourceRoot":"","sources":["../../src/traceability/symbol-extract.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7D,KAAK,wBAAwB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAU7D,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;IAC7D,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,aAAa,CAAC,EAAE,wBAAwB,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,aAAa,CAAC,EAAE,wBAAwB,EAAE,CAAC;CAC5C;AAED,MAAM,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;AAE9D,wBAAgB,+BAA+B,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAG5E;AA2LD,wBAAgB,4BAA4B,CAE1C,UAAU,EAAE,UAAU,EACtB,cAAc,CAAC,EAAE,cAAc,GAC9B,eAAe,EAAE,CA+JnB"}

package/dist/traceability/symbol-extract.js

@@ -1,8 +1,12 @@
 import { createHash } from "node:crypto";
 import { Project, ScriptKind } from "ts-morph";
 import { extractFromManifest } from "../extractors/manifest.js";
-const TRACEABILITY_RELATIONSHIP_TYPES = new Set(["implements", "covered_by"]);
-const REQUIREMENT_ID_PATTERN = /^[A-Z][A-Z0-9\-_]*$/;
+const TRACEABILITY_RELATIONSHIP_TYPES = new Set([
+    "implements",
+    "covered_by",
+    "executable_for",
+]);
+const REQUIREMENT_ID_PATTERN = /^[A-Za-z][A-Za-z0-9\-_]*$/;
 const LOCAL_MANIFEST_NAMES = ["symbols.yaml", "symbols.yml"];
 const MANIFEST_SENTINEL_PREFIX = "__manifest__:";
 export function createManifestLookupSentinelKey(manifestPath) {
@@ -85,7 +89,7 @@ function buildSymbolResult(stagedFile, name, kind, span, inlineReqLinks, manifes
         },
         hunkRanges: intersectingHunks(span.startLine, span.endLine, stagedFile.hunkRanges),
         reqLinks: mergedReqLinks,
-        relationships,
+        ...(relationships !== undefined ? { relationships } : {}),
     };
 }
 // Simple in-memory cache keyed by blob sha with 30s TTL
@@ -111,7 +115,7 @@ function parseReqDirectives(text) {
     // look for lines containing implements REQ-123 or implements: REQ-1, REQ-2
     // Stop at end-of-line and only accept IDs starting with an uppercase letter
     // to avoid capturing tokens like `export`, `function`, etc.
-    const REQ_ID = "[A-Z][A-Z0-9\\-_]*";
+    const REQ_ID = "[A-Za-z][A-Za-z0-9\\-_]*";
     const regex = new RegExp(`implements\\s*:?\\s*(${REQ_ID}(?:\\s*,\\s*${REQ_ID})*)\\s*$`, "gim");
     const reqs = new Set();
     let m;
@@ -120,6 +124,8 @@ function parseReqDirectives(text) {
         if (!m)
             break;
         const list = m[1];
+        if (!list)
+            continue;
         for (const part of list.split(/[,\s]+/)) {
             const p = part.trim();
             if (!p)

package/dist/traceability/temp-kb.d.ts

@@ -7,6 +7,18 @@ export interface TempKbContext {
     overlayPath: string;
     prolog: PrologProcess;
 }
+/**
+ * Reset module state - used by tests to clear state between test runs.
+ * This is necessary because module-level Maps/Sets persist across tests.
+ */
+export declare function resetModuleState(): void;
+/**
+ * Override the PrologProcess factory — used by tests to inject the real constructor
+ * when mock.module() has replaced the module-level binding.
+ */
+export declare function _setPrologFactory(factory: (opts: {
+    timeout: number;
+}) => PrologProcess): void;
 declare function consultOverlay(ctx: TempKbContext): Promise<void>;
 export { consultOverlay };
 export declare function projectStagedEntities(prolog: PrologProcess, results: ExtractionResult[]): Promise<void>;

package/dist/traceability/temp-kb.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"temp-kb.d.ts","sourceRoot":"","sources":["../../src/traceability/temp-kb.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAGV,gBAAgB,EACjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,aAAa,CAAC;CACvB;AA4ID,iBAAe,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB/D;AAED,OAAO,EAAE,cAAc,EAAE,CAAC;AAG1B,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,gBAAgB,EAAE,GAC1B,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED,wBAAsB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CA2C7E;AAGD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,MAAM,CAkBrE;AAED,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BlE"}
+{"version":3,"file":"temp-kb.d.ts","sourceRoot":"","sources":["../../src/traceability/temp-kb.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAGV,gBAAgB,EACjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,aAAa,CAAC;CACvB;AAMD;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,IAAI,CASvC;AAOD;;;GAGG;AACH,wBAAgB,iBAAiB,CAE/B,OAAO,EAAE,CAAC,IAAI,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,KAAK,aAAa,GACpD,IAAI,CAEN;AA4ID,iBAAe,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB/D;AAED,OAAO,EAAE,cAAc,EAAE,CAAC;AAG1B,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,gBAAgB,EAAE,GAC1B,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED,wBAAsB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CA6C7E;AAGD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,MAAM,CAkBrE;AAED,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BlE"}

package/dist/traceability/temp-kb.js

@@ -2,11 +2,39 @@ import { existsSync } from "node:fs";
 import { cp, mkdir, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import path from "node:path";
+import { isCliTraceOrDebugEnabled } from "../env.js";
 import { PrologProcess } from "../prolog.js";
 import { toPrologAtom, toPrologString } from "../prolog/codec.js";
 const prologByTempDir = new Map();
 const cleanupByTempDir = new Map();
 const cleanedTempDirs = new Set();
+/**
+ * Reset module state - used by tests to clear state between test runs.
+ * This is necessary because module-level Maps/Sets persist across tests.
+ */
+export function resetModuleState() {
+    // implements REQ-014
+    // Terminate all tracked prolog processes
+    for (const prolog of prologByTempDir.values()) {
+        void prolog.terminate().catch(() => { });
+    }
+    prologByTempDir.clear();
+    cleanupByTempDir.clear();
+    cleanedTempDirs.clear();
+}
+// Factory function for creating PrologProcess instances.
+// Default uses the imported PrologProcess. Tests can override via _setPrologFactory
+// to bypass mock.module() pollution from other test files.
+let _createProlog = (opts) => new PrologProcess(opts);
+/**
+ * Override the PrologProcess factory — used by tests to inject the real constructor
+ * when mock.module() has replaced the module-level binding.
+ */
+export function _setPrologFactory(
+// implements REQ-014
+factory) {
+    _createProlog = factory;
+}
 const FACT_ATOM_FIELDS = new Set([
     "fact_kind",
     "operator",
@@ -26,7 +54,7 @@ const FACT_STRING_FIELDS = new Set([
 const FACT_NUMBER_FIELDS = new Set(["value_int", "value_number"]);
 const FACT_BOOLEAN_FIELDS = new Set(["value_bool", "closed_world"]);
 function isTraceEnabled() {
-    return Boolean(process.env.KIBI_TRACE || process.env.KIBI_DEBUG);
+    return isCliTraceOrDebugEnabled();
 }
 function trace(message) {
     if (isTraceEnabled()) {
@@ -37,23 +65,27 @@ function trace(message) {
 function escapePrologAtom(value) {
     return `'${value.replace(/'/g, "''")}'`;
 }
+function getEntityField(entity, field) {
+    // ExtractedEntity declares all fact fields as optional properties, so indexing
+    // via keyof is safe. The cast is confined to this single helper.
+    return entity[field];
+}
 function serializeTypedFactFields(entity) {
     const fields = [];
-    const entityRecord = entity;
     for (const field of FACT_STRING_FIELDS) {
-        const value = entityRecord[field];
+        const value = getEntityField(entity, field);
         if (value !== undefined && value !== null) {
             fields.push(`${field}=${toPrologString(String(value))}`);
         }
     }
     for (const field of FACT_ATOM_FIELDS) {
-        const value = entityRecord[field];
+        const value = getEntityField(entity, field);
         if (value !== undefined && value !== null) {
             fields.push(`${field}=${toPrologAtom(String(value))}`);
         }
     }
     for (const field of FACT_NUMBER_FIELDS) {
-        const value = entityRecord[field];
+        const value = getEntityField(entity, field);
         if (value !== undefined && value !== null && typeof value === "number") {
             if (field === "value_int" && !Number.isInteger(value)) {
                 continue;
@@ -62,7 +94,7 @@ function serializeTypedFactFields(entity) {
         }
     }
     for (const field of FACT_BOOLEAN_FIELDS) {
-        const value = entityRecord[field];
+        const value = getEntityField(entity, field);
         if (value !== undefined && value !== null && typeof value === "boolean") {
             fields.push(`${field}=${value}`);
         }
@@ -157,10 +189,12 @@ export async function projectStagedEntities(prolog, results) {
     }
 }
 export async function createTempKb(baseKbPath) {
+    // implements REQ-014
     if (!existsSync(baseKbPath)) {
         throw new Error(`Base KB path does not exist: ${baseKbPath}`);
     }
-    const tempDir = path.join(tmpdir(), `kibi-precommit-${process.pid}-${Date.now()}`);
+    // Use crypto.randomUUID() for uniqueness across concurrent calls
+    const tempDir = path.join(tmpdir(), `kibi-precommit-${process.pid}-${Date.now()}-${crypto.randomUUID().slice(0, 8)}`);
     const kbPath = path.join(tempDir, "kb");
     const overlayPath = path.join(tempDir, "changed_symbols.pl");
     trace(`creating temp KB directory ${tempDir}`);
@@ -168,7 +202,7 @@ export async function createTempKb(baseKbPath) {
     trace(`copying base KB ${baseKbPath} -> ${kbPath}`);
     await cp(baseKbPath, kbPath, { recursive: true });
     await writeFile(overlayPath, "", "utf8");
-    const prolog = new PrologProcess({ timeout: 120000 });
+    const prolog = _createProlog({ timeout: 120000 });
     await prolog.start();
     prologByTempDir.set(tempDir, prolog);
     // ctx includes prolog so callers can use it directly

package/dist/traceability/validate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/traceability/validate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,iBAAS,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAO1C;AAED,iBAAS,kBAAkB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CA0B/C;AAED,iBAAS,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CA8CnD;AAED,iBAAS,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,CAuBzD;AAGD,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqCtB;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,CAiBhE;AAGD,eAAO,MAAM,QAAQ;;;;;CAKpB,CAAC"}
+{"version":3,"file":"validate.d.ts","sourceRoot":"","sources":["../../src/traceability/validate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,iBAAS,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAO1C;AAED,iBAAS,kBAAkB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CA0B/C;AAED,iBAAS,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CA8CnD;AAED,iBAAS,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,CAuBzD;AAGD,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,SAAS,EAAE,CAAC,CAgDtB;AAED,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,CAkBhE;AAGD,eAAO,MAAM,QAAQ;;;;;CAKpB,CAAC"}

package/dist/traceability/validate.js

@@ -114,6 +114,14 @@ export async function validateStagedSymbols(options) {
         if (row.length < 6)
             continue;
         const [sym, count, file, line, col, name] = row;
+        if (sym === undefined ||
+            count === undefined ||
+            file === undefined ||
+            line === undefined ||
+            col === undefined ||
+            name === undefined) {
+            continue;
+        }
         const symbolId = unquoteAtom(sym);
         const currentLinks = Number(count.replace(/[^0-9]/g, "")) || 0;
         const requiredLinks = minLinks;
@@ -134,6 +142,7 @@ export async function validateStagedSymbols(options) {
     return violations;
 }
 export function formatViolations(violations) {
+    // implements REQ-014
     if (!violations || violations.length === 0)
         return "";
     const total = violations.length;
@@ -143,8 +152,8 @@ export function formatViolations(violations) {
     for (const v of violations) {
         const loc = `${v.file}:${v.line}`;
         const name = `${v.name}()`;
-        // Suggest adding requirement links via `implements:` using requirement IDs (e.g. REQ-001)
-        const suggestion = "Add one or more requirement links, for example: implements: REQ-001";
+        // Suggest adding requirement links with role-specific guidance
+        const suggestion = "Add ownership: implements: REQ-001 (production code), use covered_by for production coverage, or executable_for for executable test code";
         lines.push(`${loc}  ${name}  -> ${suggestion}`);
     }
     return lines.join("\n");

package/dist/utils/branch-resolver.d.ts

@@ -7,6 +7,10 @@ export type BranchResolutionError = {
 };
 export type BranchResolutionResult = BranchResolutionSuccess | BranchResolutionError;
 export type BranchErrorCode = "ENV_OVERRIDE" | "DETACHED_HEAD" | "UNBORN_BRANCH" | "GIT_NOT_AVAILABLE" | "NOT_A_GIT_REPO" | "UNKNOWN_ERROR";
+export interface BranchResolverDeps {
+    execSync: typeof import("node:child_process").execSync;
+}
+export declare function _setBranchResolverDepsForTests(deps: Partial<BranchResolverDeps>): void;
 /**
  * Resolve the active branch according to ADR-012 precedence:
  * 1. KIBI_BRANCH env var (if set)

package/dist/utils/branch-resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"branch-resolver.d.ts","sourceRoot":"","sources":["../../src/utils/branch-resolver.ts"],"names":[],"mappings":"AA4BA,MAAM,MAAM,uBAAuB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AACzD,MAAM,MAAM,qBAAqB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC;AAC7E,MAAM,MAAM,sBAAsB,GAC9B,uBAAuB,GACvB,qBAAqB,CAAC;AAE1B,MAAM,MAAM,eAAe,GACvB,cAAc,GACd,eAAe,GACf,eAAe,GACf,mBAAmB,GACnB,gBAAgB,GAChB,eAAe,CAAC;AA8BpB;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,aAAa,GAAE,MAAsB,GACpC,sBAAsB,CAmHxB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,aAAa,GAAE,MAAsB,GAAG,OAAO,CAa7E;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,KAAK,EAAE,MAAM,GACZ,MAAM,CAuBR;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAuBvD;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,IAAI,CAUN;AA6BD;;;;;GAKG;AACH,wBAAgB,2BAA2B,IAAI,MAAM,EAAE,CAMtD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,MAAsB,EAC3B,MAAM,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAqCtD"}
+{"version":3,"file":"branch-resolver.d.ts","sourceRoot":"","sources":["../../src/utils/branch-resolver.ts"],"names":[],"mappings":"AA6BA,MAAM,MAAM,uBAAuB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AACzD,MAAM,MAAM,qBAAqB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC;AAC7E,MAAM,MAAM,sBAAsB,GAC9B,uBAAuB,GACvB,qBAAqB,CAAC;AAE1B,MAAM,MAAM,eAAe,GACvB,cAAc,GACd,eAAe,GACf,eAAe,GACf,mBAAmB,GACnB,gBAAgB,GAChB,eAAe,CAAC;AAEpB,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,cAAc,oBAAoB,EAAE,QAAQ,CAAC;CACxD;AAID,wBAAgB,8BAA8B,CAC5C,IAAI,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAChC,IAAI,CAGN;AA8BD;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,aAAa,GAAE,MAAsB,GACpC,sBAAsB,CAwHxB;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,aAAa,GAAE,MAAsB,GAAG,OAAO,CAgB7E;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,KAAK,EAAE,MAAM,GACZ,MAAM,CAuBR;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAuBvD;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,IAAI,CAUN;AA6BD;;;;;GAKG;AACH,wBAAgB,2BAA2B,IAAI,MAAM,EAAE,CAMtD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,MAAsB,EAC3B,MAAM,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAwCtD"}

package/dist/utils/branch-resolver.js

@@ -15,9 +15,15 @@
  * You should have received a copy of the GNU Affero General Public License
  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
  */
-import { execSync } from "node:child_process";
+import { execSync as rawExecSync } from "node:child_process";
 import { copyFileSync, existsSync, mkdirSync, readdirSync, statSync, } from "node:fs";
 import * as path from "node:path";
+import { getBranchOverride } from "../env.js";
+const defaultDeps = { execSync: rawExecSync };
+export function _setBranchResolverDepsForTests(deps) {
+    // implements REQ-008
+    defaultDeps.execSync = deps.execSync ?? rawExecSync;
+}
 // Files to exclude when copying branch snapshots (volatile artifacts)
 const VOLATILE_ARTIFACTS = new Set([
     "sync-cache.json",
@@ -53,8 +59,9 @@ function isVolatileArtifact(fileName) {
  * @returns BranchResolutionResult with either the branch name or an error
  */
 export function resolveActiveBranch(workspaceRoot = process.cwd()) {
+    // implements REQ-008
     // 1. Check KIBI_BRANCH env var first (highest precedence)
-    const envBranch = process.env.KIBI_BRANCH?.trim();
+    const envBranch = getBranchOverride();
     if (envBranch) {
         // Validate the env branch name
         if (!isValidBranchName(envBranch)) {
@@ -67,12 +74,14 @@ export function resolveActiveBranch(workspaceRoot = process.cwd()) {
     }
     // 2. Try to get the current git branch
     try {
-        const branch = execSync("git branch --show-current", {
+        const branch = defaultDeps
+            .execSync("git branch --show-current", {
             cwd: workspaceRoot,
             encoding: "utf8",
             timeout: 5000,
             stdio: ["pipe", "pipe", "pipe"],
-        }).trim();
+        })
+            .trim();
         if (!branch) {
             // Empty result means detached HEAD
             return {
@@ -94,12 +103,14 @@ export function resolveActiveBranch(workspaceRoot = process.cwd()) {
     catch (error) {
         // Try alternative: git rev-parse --abbrev-ref HEAD
         try {
-            const branch = execSync("git rev-parse --abbrev-ref HEAD", {
+            const branch = defaultDeps
+                .execSync("git rev-parse --abbrev-ref HEAD", {
                 cwd: workspaceRoot,
                 encoding: "utf8",
                 timeout: 5000,
                 stdio: ["pipe", "pipe", "pipe"],
-            }).trim();
+            })
+                .trim();
             if (branch === "HEAD") {
                 return {
                     error: getBranchDiagnostic(undefined, "Git is in detached HEAD state"),
@@ -122,7 +133,7 @@ export function resolveActiveBranch(workspaceRoot = process.cwd()) {
             const normalizedBranch = branch === "master" ? "main" : branch;
             return { branch: normalizedBranch };
         }
-        catch (fallbackError) {
+        catch {
             // Determine specific error type
             const errorMessage = error instanceof Error ? error.message : String(error);
             if (errorMessage.includes("not a git repository")) {
@@ -152,13 +163,16 @@ export function resolveActiveBranch(workspaceRoot = process.cwd()) {
  * @returns true if in detached HEAD, false otherwise
  */
 export function isDetachedHead(workspaceRoot = process.cwd()) {
+    // implements REQ-008
     try {
-        const branch = execSync("git rev-parse --abbrev-ref HEAD", {
+        const branch = defaultDeps
+            .execSync("git rev-parse --abbrev-ref HEAD", {
             cwd: workspaceRoot,
             encoding: "utf8",
             timeout: 5000,
             stdio: ["pipe", "pipe", "pipe"],
-        }).trim();
+        })
+            .trim();
         return branch === "HEAD";
     }
     catch {
@@ -278,6 +292,7 @@ export function getVolatileArtifactPatterns() {
  * @returns BranchResolutionResult with either the branch name or an error
  */
 export function resolveDefaultBranch(cwd = process.cwd(), config) {
+    // implements REQ-012
     // 1. Check config.defaultBranch first (highest precedence)
     const configuredBranch = config?.defaultBranch?.trim();
     if (configuredBranch) {
@@ -292,17 +307,19 @@ export function resolveDefaultBranch(cwd = process.cwd(), config) {
     }
     // 2. Try to get the remote default branch from origin/HEAD
     try {
-        const remoteHead = execSync("git symbolic-ref refs/remotes/origin/HEAD", {
+        const remoteHead = defaultDeps
+            .execSync("git symbolic-ref refs/remotes/origin/HEAD", {
             cwd,
             encoding: "utf8",
             timeout: 5000,
             stdio: ["pipe", "pipe", "pipe"],
-        }).trim();
+        })
+            .trim();
         // Parse refs/remotes/origin/BRANCH_NAME -> BRANCH_NAME
         const match = remoteHead.match(/^refs\/remotes\/origin\/(.+)$/);
         if (match) {
             const branch = match[1];
-            if (isValidBranchName(branch)) {
+            if (branch && isValidBranchName(branch)) {
                 return { branch };
             }
         }

package/dist/utils/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/utils/config.ts"],"names":[],"mappings":"AAoBA,OAAO,EACL,KAAK,YAAY,EAEjB,KAAK,yBAAyB,EAC/B,MAAM,oBAAoB,CAAC;AAE5B;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,aAAa,CAAC;IACrB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,YAAY,EAAE,YAAY,EAAE,yBAAyB,EAAE,CAAC;AAExD;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,QAAQ,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAcxD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,aAShC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAsB,GAAG,QAAQ,CAiChE;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAsB,GAAG,QAAQ,CAiCpE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/utils/config.ts"],"names":[],"mappings":"AAoBA,OAAO,EACL,KAAK,YAAY,EAEjB,KAAK,yBAAyB,EAC/B,MAAM,oBAAoB,CAAC;AAE5B;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,aAAa,CAAC;IACrB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,YAAY,EAAE,YAAY,EAAE,yBAAyB,EAAE,CAAC;AAExD;;GAEG;AACH,eAAO,MAAM,cAAc,EAAE,QAAQ,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAcxD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,aAShC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAsB,GAAG,QAAQ,CAoChE;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAsB,GAAG,QAAQ,CAoCpE"}

package/dist/utils/config.js

@@ -56,6 +56,7 @@ export const DEFAULT_SYNC_PATHS = {
  * @returns The merged configuration (defaults + user config)
  */
 export function loadConfig(cwd = process.cwd()) {
+    // implements REQ-003
     const configPath = path.join(cwd, ".kb/config.json");
     let userConfig = {};
     if (existsSync(configPath)) {
@@ -73,7 +74,9 @@ export function loadConfig(cwd = process.cwd()) {
             ...DEFAULT_CONFIG.paths,
             ...userConfig.paths,
         },
-        defaultBranch: userConfig.defaultBranch,
+        ...(userConfig.defaultBranch !== undefined
+            ? { defaultBranch: userConfig.defaultBranch }
+            : {}),
         checks: userConfig.checks
             ? {
                 rules: {
@@ -97,6 +100,7 @@ export function loadConfig(cwd = process.cwd()) {
  * @returns The merged configuration with sync-compatible paths
  */
 export function loadSyncConfig(cwd = process.cwd()) {
+    // implements REQ-003
     const configPath = path.join(cwd, ".kb/config.json");
     let userConfig = {};
     if (existsSync(configPath)) {
@@ -114,7 +118,9 @@ export function loadSyncConfig(cwd = process.cwd()) {
             ...DEFAULT_SYNC_PATHS,
             ...userConfig.paths,
         },
-        defaultBranch: userConfig.defaultBranch,
+        ...(userConfig.defaultBranch !== undefined
+            ? { defaultBranch: userConfig.defaultBranch }
+            : {}),
         checks: userConfig.checks
             ? {
                 rules: {

package/dist/utils/rule-registry.js

@@ -29,13 +29,13 @@ export const RULES = [
     },
     {
         name: "symbol-coverage",
-        description: "Symbols should be traceable to requirements via transitive implements",
+        description: "Production symbols need qualifying coverage via covered_by plus a canonical requirement/scenario test path",
         defaultEnabled: true,
         category: "coverage",
     },
     {
         name: "symbol-traceability",
-        description: "Source symbols must have direct implements links to requirements; optionally constrained_by ADR",
+        description: "Production symbols must directly implement requirements for ownership; covered_by is coverage only, executable_for is test identity only, and ADR constraints are optional unless configured",
         defaultEnabled: true,
         category: "traceability",
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kibi-cli",
-  "version": "0.5.1",
+  "version": "0.6.0",
   "type": "module",
   "description": "Kibi CLI for knowledge base management",
   "engines": {
@@ -11,13 +11,7 @@
   "bin": {
     "kibi": "bin/kibi"
   },
-  "files": [
-    "dist",
-    "bin",
-    "schema",
-    "src/schemas",
-    "src/public"
-  ],
+  "files": ["dist", "bin", "schema", "src/schemas", "src/public"],
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "prepack": "npm run build"
@@ -76,7 +70,7 @@
     "fast-glob": "^3.2.12",
     "gray-matter": "^4.0.3",
     "js-yaml": "^4.1.0",
-    "kibi-core": "^0.4.1",
+    "kibi-core": "^0.5.0",
     "ts-morph": "^23.0.0"
   },
   "devDependencies": {

package/src/public/schemas/relationship.ts

@@ -30,6 +30,7 @@ const relationshipSchema = {
         "validates",
         "implements",
         "covered_by",
+        "executable_for",
         "constrained_by",
         "constrains",
         "requires_property",

package/src/schemas/entity.schema.json

@@ -39,6 +39,14 @@
     "links": { "type": "array", "items": { "type": "string" } },
     "text_ref": { "type": "string" },
     "sourceFile": { "type": "string" },
+    "verification_scope": {
+      "type": "string",
+      "enum": ["unit", "integration", "end_to_end"]
+    },
+    "verification_perspective": {
+      "type": "string",
+      "enum": ["internal", "consumer"]
+    },
     "type": {
       "type": "string",
       "enum": [
@@ -88,6 +96,20 @@
     "type"
   ],
   "allOf": [
+    {
+      "if": {
+        "properties": { "type": { "const": "test" } }
+      },
+      "then": {},
+      "else": {
+        "not": {
+          "anyOf": [
+            { "required": ["verification_scope"] },
+            { "required": ["verification_perspective"] }
+          ]
+        }
+      }
+    },
     {
       "if": {
         "properties": { "type": { "const": "fact" } }

package/src/schemas/relationship.schema.json

@@ -12,6 +12,7 @@
         "validates",
         "implements",
         "covered_by",
+        "executable_for",
         "constrained_by",
         "constrains",
         "requires_property",