kibi-cli 0.8.0 → 0.10.0

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAsCA,0EAA0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAuCA,0EAA0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB"}

package/dist/cli.js

@@ -25,6 +25,7 @@ import { gapsCommand } from "./commands/gaps.js";
 import { gcCommand } from "./commands/gc.js";
 import { graphCommand } from "./commands/graph.js";
 import { initCommand } from "./commands/init.js";
+import { migrateCommand } from "./commands/migrate.js";
 import { queryCommand } from "./commands/query.js";
 import { searchCommand } from "./commands/search.js";
 import { statusCommand } from "./commands/status.js";
@@ -53,6 +54,14 @@ program
     .action(withExitCode(async (options) => {
     return initCommand(options);
 }));
+program
+    .command("migrate")
+    .description("Migrate .kb/config.json to the latest schema version")
+    .option("--dry-run", "Preview migration changes without writing files")
+    .option("--yes", "Apply migration changes without prompting")
+    .action(withExitCode(async (options) => {
+    return migrateCommand(options);
+}));
 program
     .command("sync")
     .description("Sync entities from documents")

package/dist/commands/check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/commands/check.ts"],"names":[],"mappings":"AAuDA,OAAO,EAGL,KAAK,SAAS,EAEf,MAAM,2BAA2B,CAAC;AAEnC,YAAY,EAAE,SAAS,EAAE,CAAC;AAI1B,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AA+GD,wBAAsB,YAAY,CAChC,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAkR/B"}
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/commands/check.ts"],"names":[],"mappings":"AAuDA,OAAO,EAGL,KAAK,SAAS,EAEf,MAAM,2BAA2B,CAAC;AAEnC,YAAY,EAAE,SAAS,EAAE,CAAC;AAI1B,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AA+GD,wBAAsB,YAAY,CAChC,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA0R/B"}

package/dist/commands/check.js

@@ -278,6 +278,7 @@ export async function checkCommand(options) {
             "domain-contradictions",
             "strict-fact-shape",
             "strict-req-fact-pairing",
+            "strict-readiness",
         ];
         const canUseAggregated = Array.from(effectiveRules).every((r) => supportedRules.includes(r));
         if (canUseAggregated) {
@@ -302,6 +303,7 @@ export async function checkCommand(options) {
             await runCheck("domain-contradictions", checkDomainContradictions);
             await runCheck("strict-fact-shape", checkStrictFactShape);
             await runCheck("strict-req-fact-pairing", checkStrictReqFactPairing);
+            await runCheck("strict-readiness", checkStrictReadiness);
         }
         if (violations.length === 0) {
             console.log("✓ No violations found. KB is valid.");
@@ -312,6 +314,12 @@ export async function checkCommand(options) {
         for (const v of violations) {
             const filename = v.source ? path.basename(v.source, ".md") : v.entityId;
             console.log(`[${v.rule}] ${filename}`);
+            if (filename !== v.entityId) {
+                console.log(`  Entity: ${v.entityId}`);
+            }
+            if (v.source) {
+                console.log(`  Source: ${v.source}`);
+            }
             console.log(`  ${v.description}`);
             if (options.fix && v.suggestion) {
                 console.log(`  Suggestion: ${v.suggestion}`);
@@ -620,7 +628,7 @@ async function checkDomainContradictions(prolog) {
         violations.push({
             rule: "domain-contradictions",
             entityId: `${reqA}/${reqB}`,
-            description: reason,
+            description: `${reason} [strict-readiness: contradiction-ready]`,
             suggestion: "Supersede one requirement or align both to the same required property",
         });
     }
@@ -658,6 +666,22 @@ async function checkStrictReqFactPairing(prolog) {
     }
     return violations;
 }
+async function checkStrictReadiness(prolog) {
+    const violations = [];
+    const result = await prolog.query(`findall(violation(Rule, EntityId, Desc, Sugg, Src),
+      checks:strict_readiness_violation(violation(Rule, EntityId, Desc, Sugg, Src)),
+      Violations)`);
+    if (!result.success || !result.bindings.Violations) {
+        return violations;
+    }
+    const violationsStr = result.bindings.Violations;
+    if (violationsStr && violationsStr !== "[]") {
+        for (const v of parseViolationRows(violationsStr)) {
+            violations.push(v);
+        }
+    }
+    return violations;
+}
 async function checkSymbolCoverage(prolog) {
     const violations = [];
     const uncoveredResult = await prolog.query("setof(Symbol, symbol_no_req_coverage(Symbol, _), Symbols)");

package/dist/commands/migrate.d.ts

@@ -0,0 +1,9 @@
+interface MigrateOptions {
+    dryRun?: boolean;
+    yes?: boolean;
+}
+export declare function migrateCommand(options?: MigrateOptions): Promise<{
+    exitCode: number;
+}>;
+export {};
+//# sourceMappingURL=migrate.d.ts.map

package/dist/commands/migrate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/commands/migrate.ts"],"names":[],"mappings":"AAkCA,UAAU,cAAc;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AA6ID,wBAAsB,cAAc,CAClC,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAwG/B"}

package/dist/commands/migrate.js

@@ -0,0 +1,183 @@
+/*
+ * Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ * Copyright (C) 2026 Piotr Franczyk
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ */
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync, } from "node:fs";
+import * as path from "node:path";
+import { resolveActiveBranch } from "../utils/branch-resolver.js";
+import { LATEST_KB_SCHEMA_VERSION, getSchemaVersionStatus, normalizeSchemaVersion, } from "../utils/schema-version.js";
+const MIGRATION_AUDIT_VERSION = 1;
+function printWarning(message) {
+    console.log(`Warning: ${message}`);
+}
+function toRelativePath(cwd, filePath) {
+    const relativePath = path.relative(cwd, filePath);
+    return relativePath.length > 0 ? relativePath : path.basename(filePath);
+}
+function resolveMigrationBranch(cwd) {
+    const result = resolveActiveBranch(cwd);
+    if ("error" in result) {
+        const isNonGitContext = result.code === "NOT_A_GIT_REPO" || result.code === "GIT_NOT_AVAILABLE";
+        if (isNonGitContext) {
+            return {
+                branch: "main",
+                warnings: [
+                    "Not in a git repository; using 'main' for migration audit metadata.",
+                ],
+            };
+        }
+        return {
+            error: `Failed to resolve active branch: ${result.error}`,
+        };
+    }
+    return {
+        branch: result.branch,
+        warnings: [],
+    };
+}
+function loadRawConfigDocument(cwd) {
+    const kbDir = path.join(cwd, ".kb");
+    const configPath = path.join(kbDir, "config.json");
+    if (!existsSync(kbDir)) {
+        return {
+            error: "Missing .kb/ directory. Run 'kibi init' before 'kibi migrate'.",
+        };
+    }
+    if (!existsSync(configPath)) {
+        return {
+            error: "Missing .kb/config.json. Run 'kibi init' to create a baseline config before migrating.",
+        };
+    }
+    try {
+        const parsed = JSON.parse(readFileSync(configPath, "utf8"));
+        if (parsed === null || Array.isArray(parsed) || typeof parsed !== "object") {
+            return {
+                error: ".kb/config.json must contain a JSON object. Fix the file and retry 'kibi migrate'.",
+            };
+        }
+        return {
+            config: parsed,
+            configPath,
+        };
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        return {
+            error: `Invalid .kb/config.json: ${message}. Fix the JSON or re-run 'kibi init'.`,
+        };
+    }
+}
+function writeJsonAtomically(filePath, value) {
+    mkdirSync(path.dirname(filePath), { recursive: true });
+    const tempPath = `${filePath}.tmp-${process.pid}-${Date.now()}`;
+    writeFileSync(tempPath, `${JSON.stringify(value, null, 2)}\n`, "utf8");
+    renameSync(tempPath, filePath);
+}
+function formatSchemaVersion(rawSchemaVersion, normalized) {
+    if (normalized === null) {
+        if (rawSchemaVersion === undefined) {
+            return "missing";
+        }
+        return `invalid (${JSON.stringify(rawSchemaVersion)})`;
+    }
+    return String(normalized);
+}
+function buildMigrationAuditRecord(args) {
+    return {
+        auditVersion: MIGRATION_AUDIT_VERSION,
+        branch: args.branch,
+        configPath: args.configPath,
+        fromVersion: args.fromVersion,
+        migratedAt: args.migratedAt,
+        status: "applied",
+        toVersion: LATEST_KB_SCHEMA_VERSION,
+        warning: args.warning,
+    };
+}
+// implements REQ-003
+export async function migrateCommand(options = {}) {
+    const cwd = process.cwd();
+    const branchResult = resolveMigrationBranch(cwd);
+    if ("error" in branchResult) {
+        console.error(branchResult.error);
+        return { exitCode: 1 };
+    }
+    const configResult = loadRawConfigDocument(cwd);
+    if ("error" in configResult) {
+        console.error(configResult.error);
+        return { exitCode: 1 };
+    }
+    const { branch, warnings: branchWarnings } = branchResult;
+    const { config, configPath } = configResult;
+    const configStatus = getSchemaVersionStatus(config);
+    const normalizedVersion = normalizeSchemaVersion(config.schemaVersion);
+    const rawSchemaVersion = config.schemaVersion;
+    const needsCanonicalSchemaWrite = normalizedVersion === LATEST_KB_SCHEMA_VERSION &&
+        rawSchemaVersion !== undefined &&
+        rawSchemaVersion !== LATEST_KB_SCHEMA_VERSION;
+    const migrationWarning = needsCanonicalSchemaWrite
+        ? "KB config schemaVersion should be normalized to the latest numeric version."
+        : configStatus.warning;
+    const warnings = [...branchWarnings, ...(migrationWarning ? [migrationWarning] : [])];
+    const auditPath = path.join(cwd, ".kb", "migrations", `${branch}.json`);
+    const configPathRelative = toRelativePath(cwd, configPath);
+    const auditPathRelative = toRelativePath(cwd, auditPath);
+    for (const warning of warnings) {
+        printWarning(warning);
+    }
+    if (configStatus.currentVersion !== null &&
+        configStatus.currentVersion > configStatus.latestVersion) {
+        console.error(`Unsupported schemaVersion ${configStatus.currentVersion}. Upgrade kibi-cli before migrating this KB.`);
+        return { exitCode: 1 };
+    }
+    if (!configStatus.needsMigration && !needsCanonicalSchemaWrite) {
+        console.log(`No migration needed: ${configPathRelative} is already at schemaVersion ${LATEST_KB_SCHEMA_VERSION}.`);
+        if (existsSync(auditPath)) {
+            console.log(`Existing migration audit metadata: ${auditPathRelative}`);
+        }
+        return { exitCode: 0 };
+    }
+    const fromVersionLabel = formatSchemaVersion(rawSchemaVersion, normalizedVersion);
+    if (options.dryRun) {
+        console.log(`dry run: would migrate ${configPathRelative} schemaVersion from ${fromVersionLabel} to ${LATEST_KB_SCHEMA_VERSION}.`);
+        console.log(`dry run: would write migration audit metadata to ${auditPathRelative}.`);
+        console.log("Re-run with --yes to apply these changes.");
+        return { exitCode: 0 };
+    }
+    if (!options.yes) {
+        printWarning(`Migration required for ${configPathRelative}.`);
+        console.log("No changes applied.");
+        console.log("Use --dry-run to preview or --yes to apply the migration.");
+        return { exitCode: 0 };
+    }
+    const nextConfig = {
+        ...config,
+        schemaVersion: LATEST_KB_SCHEMA_VERSION,
+    };
+    const migratedAt = new Date().toISOString();
+    writeJsonAtomically(configPath, nextConfig);
+    writeJsonAtomically(auditPath, buildMigrationAuditRecord({
+        branch,
+        configPath: configPathRelative,
+        fromVersion: configStatus.currentVersion,
+        migratedAt,
+        warning: migrationWarning,
+    }));
+    console.log(`Migrated ${configPathRelative} schemaVersion from ${fromVersionLabel} to ${LATEST_KB_SCHEMA_VERSION}.`);
+    console.log(`Wrote migration audit metadata to ${auditPathRelative}.`);
+    console.log("Migration complete. Future 'kibi migrate' runs will be a no-op.");
+    return { exitCode: 0 };
+}

package/dist/public/check-types.d.ts

@@ -1,7 +1,9 @@
 /**
- * Public re-export barrel for shared check types.
+ * Public re-export barrel for shared check types and MCP-consumed modeling helpers.
  * Import from "kibi-cli/public/check-types" in MCP or external consumers.
  */
 export type { ChecksConfig, RuleDefinition, SymbolTraceabilityOptions, Violation, } from "../utils/rule-registry.js";
+export type { SemanticClaim, StableRequirementIds, StrictModelInput, StrictWriteSet, } from "../utils/strict-modeling.js";
 export { DEFAULT_CHECKS_CONFIG, RULE_NAMES, RULES, getEffectiveRules, mergeChecksConfig, validateRuleName, } from "../utils/rule-registry.js";
+export { buildStableRequirementIds, buildStrictWriteSet, modelRequirementClaims, normalizePropertyKey, normalizeSubjectKey, } from "../utils/strict-modeling.js";
 //# sourceMappingURL=check-types.d.ts.map

package/dist/public/check-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"check-types.d.ts","sourceRoot":"","sources":["../../src/public/check-types.ts"],"names":[],"mappings":"AAkBA;;;GAGG;AACH,YAAY,EACV,YAAY,EACZ,cAAc,EACd,yBAAyB,EACzB,SAAS,GACV,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,qBAAqB,EACrB,UAAU,EACV,KAAK,EACL,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"check-types.d.ts","sourceRoot":"","sources":["../../src/public/check-types.ts"],"names":[],"mappings":"AAkBA;;;GAGG;AACH,YAAY,EACV,YAAY,EACZ,cAAc,EACd,yBAAyB,EACzB,SAAS,GACV,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,GACf,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACL,qBAAqB,EACrB,UAAU,EACV,KAAK,EACL,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,yBAAyB,EACzB,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,6BAA6B,CAAC"}

package/dist/public/check-types.js

@@ -16,3 +16,4 @@
  along with this program.  If not, see <https://www.gnu.org/licenses/>.
  */
 export { DEFAULT_CHECKS_CONFIG, RULE_NAMES, RULES, getEffectiveRules, mergeChecksConfig, validateRuleName, } from "../utils/rule-registry.js";
+export { buildStableRequirementIds, buildStrictWriteSet, modelRequirementClaims, normalizePropertyKey, normalizeSubjectKey, } from "../utils/strict-modeling.js";

package/dist/public/ignore-policy.d.ts

@@ -0,0 +1,10 @@
+export interface IgnorePolicy {
+    isIgnored(inputPath: string): boolean;
+    getFastGlobIgnoreGlobs(): string[];
+    explain(inputPath: string): {
+        ignored: boolean;
+        reason?: string;
+    };
+}
+export declare function createRepoIgnorePolicy(workspaceRoot: string): IgnorePolicy;
+//# sourceMappingURL=ignore-policy.d.ts.map

package/dist/public/ignore-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ignore-policy.d.ts","sourceRoot":"","sources":["../../src/public/ignore-policy.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IACtC,sBAAsB,IAAI,MAAM,EAAE,CAAC;IACnC,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACnE;AAoBD,wBAAgB,sBAAsB,CAAC,aAAa,EAAE,MAAM,GAAG,YAAY,CA8L1E"}

package/dist/public/ignore-policy.js

@@ -0,0 +1,219 @@
+import { readFileSync, existsSync, readdirSync } from "node:fs";
+import * as path from "node:path";
+import ignore from "ignore";
+const HARD_DENYLIST = [
+    ".kb",
+    ".git",
+    "node_modules",
+    "vendor",
+    "third_party",
+    ".sisyphus",
+    ".opencode",
+];
+function readIgnoreFileLines(filePath) {
+    if (!existsSync(filePath))
+        return [];
+    try {
+        const content = readFileSync(filePath, "utf8");
+        return content
+            .split(/\r?\n/)
+            .map((l) => l.trim())
+            .filter((l) => l.length > 0 && !l.startsWith("#"));
+    }
+    catch {
+        return [];
+    }
+}
+function toPosix(p) {
+    return p.split(path.sep).join("/");
+}
+// implements REQ-001
+export function createRepoIgnorePolicy(workspaceRoot) {
+    const root = path.resolve(workspaceRoot);
+    // Load root .gitignore
+    const rootGitignorePath = path.join(root, ".gitignore");
+    const rootGitPatterns = readIgnoreFileLines(rootGitignorePath);
+    // Load .git/info/exclude
+    const gitInfoExcludePath = path.join(root, ".git", "info", "exclude");
+    const gitInfoPatterns = readIgnoreFileLines(gitInfoExcludePath);
+    // Find nested .gitignore files (skip scanning inside hard denylist directories)
+    const nestedPatterns = new Map();
+    function walk(dirAbs) {
+        let entries;
+        try {
+            entries = readdirSync(dirAbs, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const ent of entries) {
+            const name = String(ent.name);
+            const abs = path.join(dirAbs, name);
+            if (ent.isDirectory()) {
+                // avoid descending into common heavy or control directories
+                if (HARD_DENYLIST.includes(name))
+                    continue;
+                // also avoid .git itself to prevent reading internal excludes as nested
+                if (name === ".git")
+                    continue;
+                walk(abs);
+            }
+            else if (ent.isFile()) {
+                if (name === ".gitignore") {
+                    // skip root .gitignore (we already loaded it)
+                    if (path.resolve(dirAbs) === root)
+                        continue;
+                    const patterns = readIgnoreFileLines(abs);
+                    const relDir = path.relative(root, dirAbs) || ".";
+                    nestedPatterns.set(toPosix(relDir), patterns);
+                }
+            }
+        }
+    }
+    walk(root);
+    // Create ignore instances
+    const rootIgnore = ignore();
+    if (rootGitPatterns.length > 0)
+        rootIgnore.add(rootGitPatterns);
+    const gitInfoIgnore = ignore();
+    if (gitInfoPatterns.length > 0)
+        gitInfoIgnore.add(gitInfoPatterns);
+    const nestedIgnoreMap = new Map();
+    for (const [dirRel, pats] of nestedPatterns.entries()) {
+        const ig = ignore();
+        if (pats.length > 0)
+            ig.add(pats);
+        nestedIgnoreMap.set(dirRel, ig);
+    }
+    // Prepare nested directories sorted by specificity (longest first)
+    const nestedDirsSorted = Array.from(nestedIgnoreMap.keys()).sort((a, b) => b.length - a.length);
+    function isPathOutsideWorkspace(absPath) {
+        const rel = path.relative(root, absPath);
+        // path.relative returns paths starting with '..' for outside
+        return rel === "" ? false : rel.split(path.sep)[0] === "..";
+    }
+    function matchesHardDeny(relPosix) {
+        const segments = relPosix.split("/").filter(Boolean);
+        for (const deny of HARD_DENYLIST) {
+            if (segments.includes(deny))
+                return true;
+        }
+        return false;
+    }
+    function isIgnoredInternal(inputPath) {
+        // Resolve to absolute and relative path inside workspace
+        const abs = path.isAbsolute(inputPath) ? path.resolve(inputPath) : path.resolve(root, inputPath);
+        if (path.isAbsolute(inputPath) && isPathOutsideWorkspace(abs)) {
+            return { ignored: true, reason: "outside_workspace" };
+        }
+        const rel = path.relative(root, abs) || ".";
+        const relPosix = toPosix(rel);
+        // Hard denylist always wins
+        if (matchesHardDeny(relPosix))
+            return { ignored: true, reason: "hard_deny" };
+        // Root .gitignore
+        try {
+            if (rootGitPatterns.length > 0 && rootIgnore.ignores(relPosix)) {
+                return { ignored: true, reason: "gitignored" };
+            }
+        }
+        catch (e) {
+            // ignore errors from library usage; continue
+        }
+        // .git/info/exclude
+        try {
+            if (gitInfoPatterns.length > 0 && gitInfoIgnore.ignores(relPosix)) {
+                return { ignored: true, reason: "git_info_exclude" };
+            }
+        }
+        catch (e) {
+            // noop
+        }
+        // Nested .gitignore (apply relative to their directory)
+        for (const dirRel of nestedDirsSorted) {
+            // dirRel is '.' for nested at root which we skipped, so dirRel will be like 'docs'
+            if (dirRel === ".")
+                continue;
+            if (relPosix === dirRel || relPosix.startsWith(dirRel + "/")) {
+                const sub = relPosix === dirRel ? "." : relPosix.slice(dirRel.length + 1);
+                const ig = nestedIgnoreMap.get(dirRel);
+                try {
+                    if (ig && ig.ignores(sub))
+                        return { ignored: true, reason: "gitignored" };
+                }
+                catch (e) {
+                    // noop
+                }
+            }
+        }
+        return { ignored: false };
+    }
+    function getFastGlobIgnoreGlobs() {
+        const globs = [];
+        // Hard denylist globs
+        for (const d of HARD_DENYLIST) {
+            // match directory and its contents anywhere
+            globs.push(`**/${d}/**`);
+            globs.push(`**/${d}`);
+        }
+        // Root .gitignore patterns (convert to simple globs)
+        for (const p of rootGitPatterns) {
+            if (!p || p.startsWith("#") || p.startsWith("!"))
+                continue;
+            let pat = p;
+            if (pat.startsWith("/"))
+                pat = pat.slice(1);
+            if (pat.includes("/")) {
+                // anchored path
+                globs.push(`**/${toPosix(pat)}`);
+            }
+            else {
+                globs.push(`**/${pat}`);
+            }
+        }
+        // .git/info/exclude patterns
+        for (const p of gitInfoPatterns) {
+            if (!p || p.startsWith("#") || p.startsWith("!"))
+                continue;
+            let pat = p;
+            if (pat.startsWith("/"))
+                pat = pat.slice(1);
+            if (pat.includes("/")) {
+                globs.push(`**/${toPosix(pat)}`);
+            }
+            else {
+                globs.push(`**/${pat}`);
+            }
+        }
+        // Nested .gitignore patterns - prefix with directory path
+        // Use the raw patterns collected in nestedPatterns so we scope patterns
+        // to the nested directory instead of ignoring the entire directory.
+        // Debug: print nested patterns and the computed globs to help diagnosing test failures.
+        for (const [dirRel, patterns] of nestedPatterns.entries()) {
+            for (const p of patterns) {
+                if (!p || p.startsWith("#") || p.startsWith("!"))
+                    continue;
+                let pat = p;
+                if (pat.startsWith("/"))
+                    pat = pat.slice(1);
+                const prefix = dirRel === "." ? "" : `${dirRel}/`;
+                if (pat.includes("/")) {
+                    globs.push(`**/${prefix}${toPosix(pat)}`);
+                }
+                else {
+                    globs.push(`**/${prefix}${pat}`);
+                }
+            }
+        }
+        return Array.from(new Set(globs));
+    }
+    return {
+        isIgnored(inputPath) {
+            return isIgnoredInternal(inputPath).ignored;
+        },
+        getFastGlobIgnoreGlobs,
+        explain(inputPath) {
+            return isIgnoredInternal(inputPath);
+        },
+    };
+}

package/dist/public/schema-version.d.ts

@@ -0,0 +1,3 @@
+export type { SchemaVersionStatus } from "../utils/schema-version.js";
+export { LATEST_KB_SCHEMA_VERSION, getSchemaVersionStatus, normalizeSchemaVersion, } from "../utils/schema-version.js";
+//# sourceMappingURL=schema-version.d.ts.map

package/dist/public/schema-version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-version.d.ts","sourceRoot":"","sources":["../../src/public/schema-version.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC"}

package/dist/public/schema-version.js

@@ -0,0 +1 @@
+export { LATEST_KB_SCHEMA_VERSION, getSchemaVersionStatus, normalizeSchemaVersion, } from "../utils/schema-version.js";

package/dist/utils/config.d.ts

@@ -35,6 +35,7 @@ export interface BriefsConfig {
  */
 export interface KbConfig {
     paths: KbConfigPaths;
+    schemaVersion?: number | string;
     briefs?: BriefsConfig;
     /**
      * @deprecated defaultBranch is deprecated. Branch lifecycle now follows git naturally

package/dist/utils/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/utils/config.ts"],"names":[],"mappings":"AAoBA,OAAO,EACL,KAAK,YAAY,EAEjB,KAAK,yBAAyB,EAC/B,MAAM,oBAAoB,CAAC;AAE5B;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE;QACV,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,OAAO,CAAC;KACtB,CAAC;IACF,QAAQ,EAAE;QACR,MAAM,EAAE,OAAO,CAAC;QAChB,GAAG,EAAE,OAAO,CAAC;KACd,CAAC;IACF,GAAG,EAAE;QACH,KAAK,EAAE,OAAO,CAAC;QACf,YAAY,EAAE,OAAO,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,YAAY,EAAE,YAAY,EAAE,yBAAyB,EAAE,CAAC;AAwBxD,eAAO,MAAM,cAAc,EAAE,QAAQ,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAexD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,aAShC,CAAC;AAqBF;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAsB,GAAG,QAAQ,CAqChE;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAsB,GAAG,QAAQ,CAqCpE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/utils/config.ts"],"names":[],"mappings":"AAoBA,OAAO,EACL,KAAK,YAAY,EAEjB,KAAK,yBAAyB,EAC/B,MAAM,oBAAoB,CAAC;AAG5B;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE;QACV,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,OAAO,CAAC;KACtB,CAAC;IACF,QAAQ,EAAE;QACR,MAAM,EAAE,OAAO,CAAC;QAChB,GAAG,EAAE,OAAO,CAAC;KACd,CAAC;IACF,GAAG,EAAE;QACH,KAAK,EAAE,OAAO,CAAC;QACf,YAAY,EAAE,OAAO,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,aAAa,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,YAAY,EAAE,YAAY,EAAE,yBAAyB,EAAE,CAAC;AAwBxD,eAAO,MAAM,cAAc,EAAE,QAAQ,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAgBxD,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,aAShC,CAAC;AA8CF;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAsB,GAAG,QAAQ,CAiChE;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAsB,GAAG,QAAQ,CAiCpE"}