kibi-cli 1.0.1 → 2.1.0

package/dist/env/bootstrap.d.ts

@@ -0,0 +1,84 @@
+/** Preferred project-local Kibi env file (harness-independent). */
+export declare const KIBI_PROJECT_ENV_FILE = ".env.kibi";
+/** Legacy generic dotenv still loaded for compatibility only. */
+export declare const KIBI_LEGACY_ENV_FILE = ".env";
+export type EnvValueSource = "process" | "project_env" | "user_env" | "legacy_env" | "missing";
+export type BootstrapKibiEnvironmentResult = Readonly<{
+    workspaceRoot: string;
+    userEnvPath: string;
+    projectEnvPath: string;
+    legacyEnvPath: string;
+    /** Attribution for keys present after bootstrap (never includes secret values). */
+    sources: Readonly<Record<string, EnvValueSource>>;
+    keysLoadedFromUser: readonly string[];
+    keysLoadedFromProject: readonly string[];
+    keysLoadedFromLegacy: readonly string[];
+}>;
+export type BootstrapKibiEnvironmentOptions = Readonly<{
+    env?: NodeJS.ProcessEnv;
+    startDir?: string;
+    homedir?: string;
+    /** Override XDG config home (defaults to env.XDG_CONFIG_HOME). */
+    xdgConfigHome?: string;
+    /**
+     * Keys that were non-empty on the real process before any Kibi file load.
+     * Callers normally omit this; the first default-env bootstrap remembers it.
+     */
+    initialNonEmptyProcessKeys?: ReadonlySet<string>;
+}>;
+type EnvEntry = Readonly<{
+    key: string;
+    value: string;
+}>;
+/**
+ * Test-only: clear remembered process-key snapshot and last bootstrap result.
+ */
+export declare function resetKibiEnvironmentBootstrapStateForTests(): void;
+/**
+ * Last bootstrap against the real `process.env`, if any.
+ */
+export declare function getLastBootstrapResult(): BootstrapKibiEnvironmentResult | null;
+/**
+ * Canonical workspace root for Kibi env files and KB attachment.
+ * Uses KIBI_WORKSPACE / KIBI_PROJECT_ROOT / KIBI_ROOT, then .kb / .git discovery.
+ */
+export declare function resolveKibiWorkspaceRoot(startDir?: string, env?: NodeJS.ProcessEnv): string;
+export declare function resolveEnvFilePath(envFileName: string, workspaceRoot: string): string;
+/** User-wide Kibi env file: $XDG_CONFIG_HOME/kibi/env or ~/.config/kibi/env. */
+export declare function resolveKibiUserEnvPath(options?: Readonly<{
+    homedir?: string;
+    xdgConfigHome?: string;
+    env?: NodeJS.ProcessEnv;
+}>): string;
+export declare function resolveKibiProjectEnvPath(workspaceRoot: string, env?: NodeJS.ProcessEnv): string;
+export declare function parseEnvContent(content: string): EnvEntry[];
+/**
+ * Load Kibi-owned env files into `process.env` (or an injectable env object).
+ * Blank values are treated as unset (never applied, never overwrite).
+ * Existing non-empty process keys are never overwritten. Project overrides user.
+ * Legacy `.env` only gap-fills and is attributed as `legacy_env`.
+ * Call only from CLI/MCP entrypoints — not on library import.
+ */
+export declare function bootstrapKibiEnvironment(options?: BootstrapKibiEnvironmentOptions): BootstrapKibiEnvironmentResult;
+/**
+ * Resolve a secret source label from an actual bootstrap result.
+ * Never reconstructs attribution by re-reading files alone.
+ */
+export declare function secretSourceFromBootstrap(key: string, bootstrap: BootstrapKibiEnvironmentResult, env?: NodeJS.ProcessEnv): EnvValueSource;
+export type InspectSecretSourceOptions = BootstrapKibiEnvironmentOptions & Readonly<{
+    /** @deprecated Prefer bootstrap result sources; kept for targeted tests. */
+    initialProcessKeys?: ReadonlySet<string>;
+}>;
+/**
+ * Read-only secret attribution via a dry bootstrap on an env snapshot.
+ * Prefer `secretSourceFromBootstrap` with the real entrypoint bootstrap result.
+ * Never returns secret values.
+ */
+export declare function inspectSecretSource(key: string, options?: InspectSecretSourceOptions): EnvValueSource;
+/**
+ * Whether a secret is available for provider use (non-empty after resolution).
+ * Blank values are unset.
+ */
+export declare function isSecretAvailable(key: string, options?: InspectSecretSourceOptions): boolean;
+export {};
+//# sourceMappingURL=bootstrap.d.ts.map

package/dist/env/bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../src/env/bootstrap.ts"],"names":[],"mappings":"AA4BA,mEAAmE;AAEnE,eAAO,MAAM,qBAAqB,cAAc,CAAC;AAEjD,iEAAiE;AAEjE,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAG3C,MAAM,MAAM,cAAc,GACtB,SAAS,GACT,aAAa,GACb,UAAU,GACV,YAAY,GACZ,SAAS,CAAC;AAGd,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IACpD,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,mFAAmF;IACnF,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IAClD,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC,CAAC,CAAC;AAGH,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IACrD,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,0BAA0B,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAClD,CAAC,CAAC;AAEH,KAAK,QAAQ,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAOzD;;GAEG;AAEH,wBAAgB,0CAA0C,IAAI,IAAI,CAGjE;AAED;;GAEG;AAEH,wBAAgB,sBAAsB,IAAI,8BAA8B,GAAG,IAAI,CAE9E;AA6BD;;;GAGG;AAEH,wBAAgB,wBAAwB,CACtC,QAAQ,GAAE,MAAsB,EAChC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAWR;AAGD,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,GACpB,MAAM,CAGR;AAED,gFAAgF;AAEhF,wBAAgB,sBAAsB,CACpC,OAAO,GAAE,QAAQ,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,CAAM,GACN,MAAM,CAOR;AAGD,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,MAAM,EACrB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAIR;AAGD,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,EAAE,CAmB3D;AAkDD;;;;;;GAMG;AAEH,wBAAgB,wBAAwB,CACtC,OAAO,GAAE,+BAAoC,GAC5C,8BAA8B,CAkGhC;AAED;;;GAGG;AAEH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,8BAA8B,EACzC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,cAAc,CAMhB;AAGD,MAAM,MAAM,0BAA0B,GAAG,+BAA+B,GACtE,QAAQ,CAAC;IACP,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC1C,CAAC,CAAC;AAEL;;;;GAIG;AAEH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,0BAA+B,GACvC,cAAc,CA+BhB;AAED;;;GAGG;AAEH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAET"}

package/dist/env/bootstrap.js

@@ -0,0 +1,310 @@
+/*
+ Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ Copyright (C) 2026 Piotr Franczyk
+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU Affero General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU Affero General Public License for more details.
+
+ You should have received a copy of the GNU Affero General Public License
+ along with this program. If not, see <https://www.gnu.org/licenses/>.
+*/
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+const WORKSPACE_ENV_KEYS = [
+    "KIBI_WORKSPACE",
+    "KIBI_PROJECT_ROOT",
+    "KIBI_ROOT",
+];
+/** Preferred project-local Kibi env file (harness-independent). */
+// implements REQ-kibi-env-bootstrap
+export const KIBI_PROJECT_ENV_FILE = ".env.kibi";
+/** Legacy generic dotenv still loaded for compatibility only. */
+// implements REQ-kibi-env-bootstrap
+export const KIBI_LEGACY_ENV_FILE = ".env";
+/** Remembered pre-bootstrap non-empty process keys for default `process.env`. */
+let rememberedInitialNonEmptyKeys = null;
+/** Last bootstrap result for default `process.env` (doctor attribution). */
+let lastDefaultBootstrap = null;
+/**
+ * Test-only: clear remembered process-key snapshot and last bootstrap result.
+ */
+// implements REQ-kibi-env-bootstrap
+export function resetKibiEnvironmentBootstrapStateForTests() {
+    rememberedInitialNonEmptyKeys = null;
+    lastDefaultBootstrap = null;
+}
+/**
+ * Last bootstrap against the real `process.env`, if any.
+ */
+// implements REQ-kibi-env-bootstrap
+export function getLastBootstrapResult() {
+    return lastDefaultBootstrap;
+}
+function readFirstEnv(env, keys) {
+    for (const key of keys) {
+        const value = env[key]?.trim();
+        if (value)
+            return value;
+    }
+    return null;
+}
+function nextAncestorDirectory(current) {
+    const parent = path.dirname(current);
+    return parent === current ? undefined : parent;
+}
+function findUpwards(startDir, marker) {
+    let current = path.resolve(startDir);
+    while (current !== undefined) {
+        if (fs.existsSync(path.join(current, marker))) {
+            return current;
+        }
+        current = nextAncestorDirectory(current);
+    }
+    return null;
+}
+/**
+ * Canonical workspace root for Kibi env files and KB attachment.
+ * Uses KIBI_WORKSPACE / KIBI_PROJECT_ROOT / KIBI_ROOT, then .kb / .git discovery.
+ */
+// implements REQ-kibi-env-bootstrap
+export function resolveKibiWorkspaceRoot(startDir = process.cwd(), env = process.env) {
+    const envRoot = readFirstEnv(env, WORKSPACE_ENV_KEYS);
+    if (envRoot)
+        return path.resolve(envRoot);
+    const kbRoot = findUpwards(startDir, ".kb");
+    if (kbRoot)
+        return kbRoot;
+    const gitRoot = findUpwards(startDir, ".git");
+    if (gitRoot)
+        return gitRoot;
+    return path.resolve(startDir);
+}
+// implements REQ-kibi-env-bootstrap
+export function resolveEnvFilePath(envFileName, workspaceRoot) {
+    if (path.isAbsolute(envFileName))
+        return envFileName;
+    return path.resolve(workspaceRoot, envFileName);
+}
+/** User-wide Kibi env file: $XDG_CONFIG_HOME/kibi/env or ~/.config/kibi/env. */
+// implements REQ-kibi-env-bootstrap
+export function resolveKibiUserEnvPath(options = {}) {
+    const env = options.env ?? process.env;
+    const xdg = options.xdgConfigHome?.trim() ||
+        env.XDG_CONFIG_HOME?.trim() ||
+        path.join(options.homedir ?? os.homedir(), ".config");
+    return path.join(xdg, "kibi", "env");
+}
+// implements REQ-kibi-env-bootstrap
+export function resolveKibiProjectEnvPath(workspaceRoot, env = process.env) {
+    const override = env.KIBI_ENV_FILE?.trim();
+    if (override)
+        return resolveEnvFilePath(override, workspaceRoot);
+    return resolveEnvFilePath(KIBI_PROJECT_ENV_FILE, workspaceRoot);
+}
+// implements REQ-kibi-env-bootstrap
+export function parseEnvContent(content) {
+    const entries = [];
+    for (const rawLine of content.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (!line || line.startsWith("#"))
+            continue;
+        const eqIndex = line.indexOf("=");
+        if (eqIndex <= 0)
+            continue;
+        const key = line.slice(0, eqIndex).trim();
+        let value = line.slice(eqIndex + 1).trim();
+        if ((value.startsWith('"') && value.endsWith('"')) ||
+            (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        if (!key)
+            continue;
+        entries.push({ key, value });
+    }
+    return entries;
+}
+function readEnvFileEntries(filePath) {
+    const map = new Map();
+    if (!fs.existsSync(filePath))
+        return map;
+    try {
+        for (const { key, value } of parseEnvContent(fs.readFileSync(filePath, "utf8"))) {
+            map.set(key, value);
+        }
+    }
+    catch {
+        // Unreadable files are treated as absent for bootstrap/inspect.
+    }
+    return map;
+}
+function nonEmpty(value) {
+    return typeof value === "string" && value.trim() !== "";
+}
+function snapshotNonEmptyKeys(env) {
+    return new Set(Object.keys(env).filter((key) => nonEmpty(env[key])));
+}
+function resolveInitialNonEmptyKeys(env, options, isDefaultEnv) {
+    if (options.initialNonEmptyProcessKeys) {
+        return new Set([...options.initialNonEmptyProcessKeys].filter((key) => nonEmpty(env[key])));
+    }
+    if (isDefaultEnv && rememberedInitialNonEmptyKeys) {
+        // Only keys that remain non-empty stay process-owned across re-entry.
+        return new Set([...rememberedInitialNonEmptyKeys].filter((key) => nonEmpty(env[key])));
+    }
+    const snapshot = snapshotNonEmptyKeys(env);
+    if (isDefaultEnv) {
+        rememberedInitialNonEmptyKeys = new Set(snapshot);
+    }
+    return snapshot;
+}
+/**
+ * Load Kibi-owned env files into `process.env` (or an injectable env object).
+ * Blank values are treated as unset (never applied, never overwrite).
+ * Existing non-empty process keys are never overwritten. Project overrides user.
+ * Legacy `.env` only gap-fills and is attributed as `legacy_env`.
+ * Call only from CLI/MCP entrypoints — not on library import.
+ */
+// implements REQ-kibi-env-bootstrap
+export function bootstrapKibiEnvironment(options = {}) {
+    const env = options.env ?? process.env;
+    const isDefaultEnv = options.env === undefined;
+    const workspaceRoot = resolveKibiWorkspaceRoot(options.startDir, env);
+    if (isDefaultEnv &&
+        lastDefaultBootstrap &&
+        lastDefaultBootstrap.workspaceRoot !== workspaceRoot) {
+        // New workspace (e.g. doctor under KIBI_WORKSPACE): re-snapshot process keys.
+        rememberedInitialNonEmptyKeys = null;
+    }
+    const userEnvPath = resolveKibiUserEnvPath({
+        ...(options.homedir !== undefined ? { homedir: options.homedir } : {}),
+        ...(options.xdgConfigHome !== undefined
+            ? { xdgConfigHome: options.xdgConfigHome }
+            : {}),
+        env,
+    });
+    const projectEnvPath = resolveKibiProjectEnvPath(workspaceRoot, env);
+    const legacyEnvPath = resolveEnvFilePath(KIBI_LEGACY_ENV_FILE, workspaceRoot);
+    const initialNonEmpty = resolveInitialNonEmptyKeys(env, options, isDefaultEnv);
+    const sources = {};
+    for (const key of initialNonEmpty) {
+        sources[key] = "process";
+    }
+    const keysLoadedFromUser = [];
+    const keysLoadedFromProject = [];
+    const keysLoadedFromLegacy = [];
+    const userEntries = readEnvFileEntries(userEnvPath);
+    const projectEntries = readEnvFileEntries(projectEnvPath);
+    const legacyEntries = readEnvFileEntries(legacyEnvPath);
+    // User first, then project (project may overwrite user-sourced keys).
+    // Blank file values are unset — never applied, never overwrite.
+    for (const [key, value] of userEntries) {
+        if (!nonEmpty(value))
+            continue;
+        if (initialNonEmpty.has(key))
+            continue;
+        if (!nonEmpty(env[key])) {
+            env[key] = value;
+            keysLoadedFromUser.push(key);
+        }
+        sources[key] = "user_env";
+    }
+    for (const [key, value] of projectEntries) {
+        if (!nonEmpty(value))
+            continue;
+        if (initialNonEmpty.has(key))
+            continue;
+        const previousSource = sources[key];
+        env[key] = value;
+        if (previousSource !== "project_env" &&
+            !keysLoadedFromProject.includes(key)) {
+            keysLoadedFromProject.push(key);
+        }
+        sources[key] = "project_env";
+    }
+    // Legacy .env fills only keys still unset (compatibility; not preferred).
+    for (const [key, value] of legacyEntries) {
+        if (!nonEmpty(value))
+            continue;
+        if (initialNonEmpty.has(key))
+            continue;
+        if (sources[key] === "user_env" || sources[key] === "project_env") {
+            continue;
+        }
+        if (!nonEmpty(env[key])) {
+            env[key] = value;
+            keysLoadedFromLegacy.push(key);
+        }
+        sources[key] = "legacy_env";
+    }
+    const result = {
+        workspaceRoot,
+        userEnvPath,
+        projectEnvPath,
+        legacyEnvPath,
+        sources,
+        keysLoadedFromUser,
+        keysLoadedFromProject,
+        keysLoadedFromLegacy,
+    };
+    if (isDefaultEnv) {
+        lastDefaultBootstrap = result;
+    }
+    return result;
+}
+/**
+ * Resolve a secret source label from an actual bootstrap result.
+ * Never reconstructs attribution by re-reading files alone.
+ */
+// implements REQ-kibi-env-bootstrap
+export function secretSourceFromBootstrap(key, bootstrap, env = process.env) {
+    const attributed = bootstrap.sources[key];
+    if (attributed) {
+        return nonEmpty(env[key]) ? attributed : "missing";
+    }
+    return nonEmpty(env[key]) ? "process" : "missing";
+}
+/**
+ * Read-only secret attribution via a dry bootstrap on an env snapshot.
+ * Prefer `secretSourceFromBootstrap` with the real entrypoint bootstrap result.
+ * Never returns secret values.
+ */
+// implements REQ-kibi-env-bootstrap
+export function inspectSecretSource(key, options = {}) {
+    if (options.env === undefined &&
+        lastDefaultBootstrap &&
+        !options.startDir &&
+        !options.xdgConfigHome &&
+        !options.homedir &&
+        !options.initialNonEmptyProcessKeys &&
+        !options.initialProcessKeys) {
+        return secretSourceFromBootstrap(key, lastDefaultBootstrap);
+    }
+    const envCopy = { ...(options.env ?? process.env) };
+    const initial = options.initialNonEmptyProcessKeys ??
+        options.initialProcessKeys ??
+        (options.env === undefined && rememberedInitialNonEmptyKeys
+            ? new Set([...rememberedInitialNonEmptyKeys].filter((key) => nonEmpty(envCopy[key])))
+            : snapshotNonEmptyKeys(envCopy));
+    const result = bootstrapKibiEnvironment({
+        ...options,
+        env: envCopy,
+        initialNonEmptyProcessKeys: initial,
+    });
+    return secretSourceFromBootstrap(key, result, envCopy);
+}
+/**
+ * Whether a secret is available for provider use (non-empty after resolution).
+ * Blank values are unset.
+ */
+// implements REQ-kibi-env-bootstrap
+export function isSecretAvailable(key, options = {}) {
+    return inspectSecretSource(key, options) !== "missing";
+}

package/dist/extractors/manifest.d.ts

@@ -67,4 +67,9 @@ export declare function extractFromManifestString(content: string, filePath: str
 export declare function extractManifestSymbolRecordsString(content: string, filePath: string): ManifestSymbolRecord[];
 export declare function extractFromManifest(filePath: string): ExtractionResult[];
 export declare function readManifestWithCoordinateOverlay(manifestPath: string, coordinatesPath?: string): ManifestSymbolRecord[];
+export interface ReceiptCodeScopeEntry {
+    readonly symbolId: string;
+    readonly sourceHash: string;
+}
+export declare function resolveBoundSymbolScope(manifestPath: string, symbolIds: readonly string[]): ReceiptCodeScopeEntry[];
 //# sourceMappingURL=manifest.d.ts.map

package/dist/extractors/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/extractors/manifest.ts"],"names":[],"mappings":"AA6BA,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,eAAe,CAAC;IACxB,aAAa,EAAE,qBAAqB,EAAE,CAAC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA6JD,qBAAa,aAAc,SAAQ,KAAK;IAG7B,QAAQ,EAAE,MAAM;aACP,cAAc,CAAC,EAAE,qBAAqB;gBAFtD,OAAO,EAAE,MAAM,EACR,QAAQ,EAAE,MAAM,EACP,cAAc,CAAC,EAAE,qBAAqB,YAAA;CAKzD;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzD,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAsFD;;;;GAIG;AAEH,wBAAgB,4BAA4B,CAC1C,eAAe,EAAE,oBAAoB,EAAE,EACvC,QAAQ,EAAE,MAAM,GACf,gBAAgB,EAAE,CAkDpB;AAYD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,gBAAgB,EAAE,CAmBpB;AAED,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,oBAAoB,EAAE,CAmBxB;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAKxE;AA4ED,wBAAgB,iCAAiC,CAC/C,YAAY,EAAE,MAAM,EACpB,eAAe,CAAC,EAAE,MAAM,GACvB,oBAAoB,EAAE,CAaxB"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/extractors/manifest.ts"],"names":[],"mappings":"AA6BA,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,eAAe,CAAC;IACxB,aAAa,EAAE,qBAAqB,EAAE,CAAC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA6JD,qBAAa,aAAc,SAAQ,KAAK;IAG7B,QAAQ,EAAE,MAAM;aACP,cAAc,CAAC,EAAE,qBAAqB;gBAFtD,OAAO,EAAE,MAAM,EACR,QAAQ,EAAE,MAAM,EACP,cAAc,CAAC,EAAE,qBAAqB,YAAA;CAKzD;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzD,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAsFD;;;;GAIG;AAEH,wBAAgB,4BAA4B,CAC1C,eAAe,EAAE,oBAAoB,EAAE,EACvC,QAAQ,EAAE,MAAM,GACf,gBAAgB,EAAE,CAkDpB;AAYD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,gBAAgB,EAAE,CAmBpB;AAED,wBAAgB,kCAAkC,CAChD,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,oBAAoB,EAAE,CAmBxB;AAED,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAKxE;AA4ED,wBAAgB,iCAAiC,CAC/C,YAAY,EAAE,MAAM,EACpB,eAAe,CAAC,EAAE,MAAM,GACvB,oBAAoB,EAAE,CAaxB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAgCD,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,qBAAqB,EAAE,CAezB"}

package/dist/extractors/manifest.js

@@ -16,7 +16,7 @@
  along with this program.  If not, see <https://www.gnu.org/licenses/>.
 */
 import { createHash } from "node:crypto";
-import { existsSync, readFileSync } from "node:fs";
+import { existsSync, readFileSync, statSync } from "node:fs";
 import * as path from "node:path";
 import { load as parseYAML } from "js-yaml";
 import { DEFAULT_COORDINATES_PATH } from "../utils/manifest-paths.js";
@@ -324,6 +324,51 @@ export function readManifestWithCoordinateOverlay(manifestPath, coordinatesPath)
         resolveSourceText: sourceTextResolver(manifestPath),
     });
 }
+/**
+ * Resolve the code scope of a receipt binding: for each proof-bound symbol,
+ * its coordinate-recorded source hash. A receipt's binding covers these, so
+ * editing the production code behind a test stales only that test's receipts
+ * (per-contract binding mode).
+ */
+// implements REQ-kibi-verification-evidence-contract
+// Receipt-binding scope reads run once per proof-bearing test; a campaign
+// touches dozens-to-hundreds of tests, so the parsed overlay is memoized per
+// manifest state (path + mtime + size) and invalidated when the file changes.
+const boundSymbolScopeCache = new Map();
+function boundSymbolScopeRecords(manifestPath) {
+    let stamp = "";
+    try {
+        const stats = statSync(manifestPath);
+        stamp = `${stats.mtimeMs}:${stats.size}`;
+    }
+    catch {
+        stamp = "missing";
+    }
+    const hit = boundSymbolScopeCache.get(manifestPath);
+    if (hit && hit.stamp === stamp)
+        return hit.records;
+    const records = readManifestWithCoordinateOverlay(manifestPath);
+    boundSymbolScopeCache.set(manifestPath, { stamp, records });
+    return records;
+}
+export function resolveBoundSymbolScope(manifestPath, symbolIds) {
+    const wanted = new Set(symbolIds);
+    if (wanted.size === 0)
+        return [];
+    const records = boundSymbolScopeRecords(manifestPath);
+    const scope = [];
+    for (const record of records) {
+        const symbolId = typeof record.id === "string" ? record.id : undefined;
+        if (symbolId === undefined || !wanted.has(symbolId))
+            continue;
+        const sourceHash = record.sourceHash;
+        if (typeof sourceHash === "string" && sourceHash !== "") {
+            scope.push({ symbolId, sourceHash });
+        }
+    }
+    scope.sort((left, right) => left.symbolId.localeCompare(right.symbolId));
+    return scope;
+}
 function generateId(filePath, title) {
     const hash = createHash("sha256");
     hash.update(`${filePath}:${title}`);

package/dist/extractors/markdown.d.ts

@@ -1,4 +1,5 @@
-import { type VerificationContract, type VerificationReceipt } from "../public/verification-receipt.js";
+import { type ProofBinding, type ProofContract } from "../public/proof-protocol.js";
+import { type ProofReceipt } from "../public/proof-receipt.js";
 export interface ExtractedEntity {
     id: string;
     type: string;
@@ -27,8 +28,11 @@ export interface ExtractedEntity {
     sourceEndColumn?: number;
     verification_scope?: "unit" | "integration" | "end_to_end";
     verification_perspective?: "internal" | "consumer";
-    verification_contract?: VerificationContract;
-    verification_receipts?: readonly VerificationReceipt[];
+    proof_exempt?: boolean;
+    proof_exempt_reason?: string;
+    proof_contract?: ProofContract;
+    proof_bindings?: readonly ProofBinding[];
+    proof_receipts?: readonly ProofReceipt[];
     fact_kind?: "subject" | "property_value" | "observation" | "meta" | "predicate_schema" | "predicate" | "rule_schema" | "rule";
     subject_key?: string;
     property_key?: string;

package/dist/extractors/markdown.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"markdown.d.ts","sourceRoot":"","sources":["../../src/extractors/markdown.ts"],"names":[],"mappings":"AAuBA,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EAEzB,MAAM,mCAAmC,CAAC;AA6D3C,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,0BAA0B,CAAC,EAAE,4BAA4B,CAAC;IAC1D,qBAAqB,CAAC,EAAE,eAAe,GAAG,UAAU,GAAG,OAAO,CAAC;IAC/D,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,YAAY,CAAC;IAC3D,wBAAwB,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IACnD,qBAAqB,CAAC,EAAE,oBAAoB,CAAC;IAC7C,qBAAqB,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAEvD,SAAS,CAAC,EACN,SAAS,GACT,gBAAgB,GAChB,aAAa,GACb,MAAM,GACN,kBAAkB,GAClB,WAAW,GACX,aAAa,GACb,MAAM,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,CAAC;IACtD,UAAU,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;CACzD;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,eAAe,CAAC;IACxB,aAAa,EAAE,qBAAqB,EAAE,CAAC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA8LD,qBAAa,gBAAiB,SAAQ,KAAK;IAOhC,QAAQ,EAAE,MAAM;IANlB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;gBAG5B,OAAO,EAAE,MAAM,EACR,QAAQ,EAAE,MAAM,EACvB,OAAO,CAAC,EAAE;QACR,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB;IAYM,QAAQ;CAUlB;AA+CD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQ5D;AAkBD,wBAAgB,sBAAsB,CAEpC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,UAAU,EAAE,MAAM,GACjB,MAAM,EAAE,CAkDV;AA+ZD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,gBAAgB,CAElB;AAGD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAatE;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASjE;AASD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAQpE"}
+{"version":3,"file":"markdown.d.ts","sourceRoot":"","sources":["../../src/extractors/markdown.ts"],"names":[],"mappings":"AAuBA,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,aAAa,EACnB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,YAAY,EAElB,MAAM,4BAA4B,CAAC;AA8DpC,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,0BAA0B,CAAC,EAAE,4BAA4B,CAAC;IAC1D,qBAAqB,CAAC,EAAE,eAAe,GAAG,UAAU,GAAG,OAAO,CAAC;IAC/D,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,YAAY,CAAC;IAC3D,wBAAwB,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IACnD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B,cAAc,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACzC,cAAc,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IAEzC,SAAS,CAAC,EACN,SAAS,GACT,gBAAgB,GAChB,aAAa,GACb,MAAM,GACN,kBAAkB,GAClB,WAAW,GACX,aAAa,GACb,MAAM,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,CAAC;IACtD,UAAU,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;CACzD;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,eAAe,CAAC;IACxB,aAAa,EAAE,qBAAqB,EAAE,CAAC;IACvC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA8LD,qBAAa,gBAAiB,SAAQ,KAAK;IAOhC,QAAQ,EAAE,MAAM;IANlB,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;gBAG5B,OAAO,EAAE,MAAM,EACR,QAAQ,EAAE,MAAM,EACvB,OAAO,CAAC,EAAE;QACR,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB;IAYM,QAAQ;CAUlB;AA+CD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAQ5D;AAkBD,wBAAgB,sBAAsB,CAEpC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,UAAU,EAAE,MAAM,GACjB,MAAM,EAAE,CAkDV;AAodD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,gBAAgB,CAElB;AAGD,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAatE;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CASjE;AASD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAQpE"}

package/dist/extractors/markdown.js

@@ -20,7 +20,8 @@ import { readFileSync } from "node:fs";
 import Ajv from "ajv";
 import { load as yamlLoad } from "js-yaml";
 import { semanticClaimKey } from "../operations/semantic-advisor/clauses.js";
-import { VERIFICATION_CONTRACT_SCHEMA, verificationReceiptHistoryErrors, } from "../public/verification-receipt.js";
+import { PROOF_BINDINGS_SCHEMA, PROOF_CONTRACT_SCHEMA, } from "../public/proof-protocol.js";
+import { proofReceiptHistoryErrors, } from "../public/proof-receipt.js";
 import entitySchema from "../schemas/entity.schema.json" with { type: "json" };
 // Typed fact field constants for extraction
 const FACT_STRING_FIELDS = [
@@ -71,8 +72,9 @@ const FACT_ONLY_FIELDS = [
 const TEST_ENUM_FIELDS = [
     "verification_scope",
     "verification_perspective",
-    "verification_contract",
-    "verification_receipts",
+    "proof_contract",
+    "proof_bindings",
+    "proof_receipts",
 ];
 const ajv = new Ajv({ strict: false, allErrors: true });
 const validateExtractedEntity = ajv.compile(entitySchema);
@@ -409,6 +411,25 @@ function extractFromMarkdownContent(content, filePath) {
         if (type === "req" && data.semantic_source_hash !== undefined) {
             entity.semantic_source_hash = data.semantic_source_hash;
         }
+        if (type === "req" && data.proof_exempt !== undefined) {
+            if (typeof data.proof_exempt !== "boolean") {
+                throw new FrontmatterError("Invalid proof_exempt; expected true or false", filePath, {
+                    classification: "Invalid Proof Exemption Flag",
+                    hint: "Set proof_exempt: true with a non-empty proof_exempt_reason.",
+                });
+            }
+            entity.proof_exempt = data.proof_exempt;
+        }
+        if (type === "req" && data.proof_exempt_reason !== undefined) {
+            if (typeof data.proof_exempt_reason !== "string" ||
+                data.proof_exempt_reason.trim() === "") {
+                throw new FrontmatterError("Invalid proof_exempt_reason; expected a non-empty string", filePath, {
+                    classification: "Invalid Proof Exemption Reason",
+                    hint: "proof_exempt requires a non-empty proof_exempt_reason explaining why the requirement is outside E2E-proof scope.",
+                });
+            }
+            entity.proof_exempt_reason = data.proof_exempt_reason;
+        }
         if (type !== "fact") {
             const invalidFactField = FACT_ONLY_FIELDS.find((field) => data[field] !== undefined);
             if (invalidFactField) {
@@ -446,31 +467,46 @@ function extractFromMarkdownContent(content, filePath) {
                 }
                 entity.verification_perspective = data.verification_perspective;
             }
-            if (data.verification_contract !== undefined) {
-                if (!isObjectRecord(data.verification_contract)) {
-                    throw new FrontmatterError("Invalid verification_contract; expected an object", filePath, {
-                        classification: "Invalid Test Verification Contract",
-                        hint: "Use the kibi.verification-contract.v1 object shape.",
+            if (data.proof_contract !== undefined) {
+                if (!isObjectRecord(data.proof_contract)) {
+                    throw new FrontmatterError("Invalid proof_contract; expected an object", filePath, {
+                        classification: "Invalid Test Proof Contract",
+                        hint: "Use the kibi.proof-contract.v1 object shape.",
+                    });
+                }
+                const validateContract = ajv.compile(PROOF_CONTRACT_SCHEMA);
+                if (!validateContract(data.proof_contract)) {
+                    throw new FrontmatterError(`Invalid proof_contract: ${ajv.errorsText(validateContract.errors)}`, filePath, {
+                        classification: "Invalid Test Proof Contract",
+                        hint: "Use the kibi.proof-contract.v1 object shape with explicit required_proofs obligations.",
+                    });
+                }
+                entity.proof_contract = data.proof_contract;
+            }
+            if (data.proof_bindings !== undefined) {
+                if (!Array.isArray(data.proof_bindings)) {
+                    throw new FrontmatterError("Invalid proof_bindings; expected an array", filePath, {
+                        classification: "Invalid Test Proof Bindings",
+                        hint: "Each binding requires symbol_id and target; native_id, aliases, source_file, and line are optional.",
                     });
                 }
-                const validateContract = ajv.compile(VERIFICATION_CONTRACT_SCHEMA);
-                if (!validateContract(data.verification_contract)) {
-                    throw new FrontmatterError(`Invalid verification_contract: ${ajv.errorsText(validateContract.errors)}`, filePath, {
-                        classification: "Invalid Test Verification Contract",
-                        hint: "Use the kibi.verification-contract.v1 object shape.",
+                const validateBindings = ajv.compile(PROOF_BINDINGS_SCHEMA);
+                if (!validateBindings(data.proof_bindings)) {
+                    throw new FrontmatterError(`Invalid proof_bindings: ${ajv.errorsText(validateBindings.errors)}`, filePath, {
+                        classification: "Invalid Test Proof Bindings",
+                        hint: "Each binding requires symbol_id and target; native_id, aliases, source_file, and line are optional.",
                     });
                 }
-                entity.verification_contract =
-                    data.verification_contract;
+                entity.proof_bindings = data.proof_bindings;
             }
-            if (data.verification_receipts !== undefined) {
-                if (!Array.isArray(data.verification_receipts)) {
-                    throw new FrontmatterError("Invalid verification_receipts; expected an array", filePath, {
-                        classification: "Invalid Test Verification Receipts",
-                        hint: "Use kibi verify to append kibi.verification-receipt.v2 objects; older v1 entries remain historical compatibility data.",
+            if (data.proof_receipts !== undefined) {
+                if (!Array.isArray(data.proof_receipts)) {
+                    throw new FrontmatterError("Invalid proof_receipts; expected an array", filePath, {
+                        classification: "Invalid Test Proof Receipts",
+                        hint: "Use kibi prove to append kibi.proof-receipt.v1 objects; receipts are engine-derived, never hand-authored.",
                     });
                 }
-                const normalizedReceipts = data.verification_receipts.map((value) => {
+                const normalizedReceipts = data.proof_receipts.map((value) => {
                     if (typeof value !== "object" ||
                         value === null ||
                         Array.isArray(value)) {
@@ -486,13 +522,13 @@ function extractFromMarkdownContent(content, filePath) {
                             : {}),
                     };
                 });
-                entity.verification_receipts = normalizedReceipts;
-                const errors = verificationReceiptHistoryErrors(entity.id, entity.verification_scope, normalizedReceipts.filter((value) => typeof value === "object" &&
+                entity.proof_receipts = normalizedReceipts;
+                const errors = proofReceiptHistoryErrors(entity.id, entity.verification_scope, normalizedReceipts.filter((value) => typeof value === "object" &&
                     value !== null &&
                     !Array.isArray(value)));
                 if (errors.length > 0) {
                     throw new FrontmatterError(errors.join("; "), filePath, {
-                        classification: "Invalid Test Verification Receipts",
+                        classification: "Invalid Test Proof Receipts",
                         hint: "Bind every receipt to this test and its typed verification_scope, with unique IDs and ordered ISO-8601 timestamps.",
                     });
                 }

package/dist/extractors/playwright-cases.js

@@ -1,4 +1,4 @@
-import { playwrightCaseId } from "../public/playwright-case-id.js";
+import { playwrightCaseId } from "../proof/producers/playwright-case-id.js";
 function lineColumn(source, offset) {
     const prefix = source.slice(0, offset);
     const line = prefix.split("\n").length;