kibi-cli 2.0.0 → 2.1.0

package/dist/commands/proof-impact.js

@@ -0,0 +1,39 @@
+/*
+ Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ Copyright (C) 2026 Piotr Franczyk
+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU Affero General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+ */
+import { executeProofImpact, proofImpactExitCode, } from "../operations/proof/impact.js";
+import { createCliRuntime } from "../runtime/cli-runtime.js";
+// implements REQ-kibi-verification-evidence-contract
+export async function proofImpactCommand(options) {
+    const runtime = createCliRuntime();
+    const context = await runtime.open({
+        name: "kibi_proof_impact",
+        effects: [],
+        requiresProlog: true,
+        execute: async () => undefined,
+    }, {});
+    let completed = false;
+    try {
+        const { result, text } = await executeProofImpact(context);
+        if (options.json) {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+        }
+        else {
+            process.stdout.write(text);
+        }
+        completed = true;
+        await runtime.afterSuccess({ name: "kibi_proof_impact" }, context);
+        return { exitCode: proofImpactExitCode(result) };
+    }
+    finally {
+        await runtime.close(context, completed
+            ? { status: "success", result: 0 }
+            : { status: "error", error: 1 });
+    }
+}

package/dist/commands/proof-migrate-legacy.js

@@ -17,7 +17,7 @@
  */
 import { executeMigrateLegacyReceipts } from "../operations/proof/migrate-legacy-receipts.js";
 import { createCliRuntime } from "../runtime/cli-runtime.js";
-// implements REQ-kibi-proof-evidence-protocol
+// implements REQ-kibi-verification-evidence-contract
 export async function proofMigrateLegacyCommand(options) {
     const runtime = createCliRuntime();
     const context = await runtime.open({

package/dist/commands/proof-prune.js

@@ -17,7 +17,7 @@
  */
 import { executePruneReceipts } from "../operations/proof/prune-receipts.js";
 import { createCliRuntime } from "../runtime/cli-runtime.js";
-// implements REQ-kibi-proof-evidence-protocol
+// implements REQ-kibi-verification-evidence-contract
 export async function proofPruneCommand(options) {
     const keepRaw = options.keep ?? "1";
     const keep = Number.parseInt(keepRaw, 10);

package/dist/commands/prove.js

@@ -16,7 +16,7 @@ import { createCliRuntime } from "../runtime/cli-runtime.js";
  * Snapshot-relevant changes come first (receipt-only and ignored edits do
  * not affect the hash), and the list is capped to keep the error readable.
  */
-// implements REQ-kibi-proof-evidence-protocol
+// implements REQ-kibi-verification-evidence-contract
 export function describeWorkspaceDrift(snapshot) {
     if (!snapshot.available)
         return " (workspace snapshot unavailable)";
@@ -40,7 +40,7 @@ export function describeWorkspaceDrift(snapshot) {
  * trimmed, non-empty ids. Empty selectors yield an empty set; blank items
  * fail fast instead of silently narrowing the selection.
  */
-// implements REQ-kibi-proof-evidence-protocol
+// implements REQ-kibi-verification-evidence-contract
 export function parseIntegrationSelector(value, flagName) {
     if (value === undefined || value.trim() === "")
         return new Set();
@@ -84,7 +84,7 @@ async function runChild(commandArgv, cwd, env) {
         child.once("close", (code) => resolve(code ?? 1));
     });
 }
-// implements REQ-kibi-proof-evidence-protocol
+// implements REQ-kibi-verification-evidence-contract
 export function commandEnvironment(integration, commandArgv, snapshot, workspaceRoot, testIds, outputPath) {
     return {
         ...process.env,
@@ -240,7 +240,7 @@ function summarize(result) {
         parts.push(`unchanged ${result.unchanged}`);
     return parts.join(", ");
 }
-// implements REQ-kibi-proof-evidence-protocol
+// implements REQ-kibi-verification-evidence-contract
 export async function proveCommand(options, deps = {}) {
     const workspaceRoot = options.workspaceRoot ?? process.cwd();
     const ingestProof = deps.ingestProof ?? executeIngestProof;

package/dist/commands/report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/commands/report.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,KAAK,kBAAkB,EAExB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,gBAAgB,EAEtB,MAAM,yBAAyB,CAAC;AAIjC,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEH,KAAK,cAAc,GAAG,QAAQ,CAAC;IAC7B,YAAY,EAAE,kBAAkB,CAAC;IACjC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,YAAY,CAAC,EAAE,CACb,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,KAAK,EAAE,MAAM,KACV,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B,CAAC,CAAC;AA4HH,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBhE;AAeD,wBAAsB,aAAa,CACjC,OAAO,EAAE,aAAa,EACtB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAyEjB"}
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/commands/report.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,KAAK,kBAAkB,EAExB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,gBAAgB,EAEtB,MAAM,yBAAyB,CAAC;AAGjC,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEH,KAAK,cAAc,GAAG,QAAQ,CAAC;IAC7B,YAAY,EAAE,kBAAkB,CAAC;IACjC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,YAAY,CAAC,EAAE,CACb,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,KAAK,EAAE,MAAM,KACV,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B,CAAC,CAAC;AA+HH,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgChE;AAeD,wBAAsB,aAAa,CACjC,OAAO,EAAE,aAAa,EACtB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAyEjB"}

package/dist/commands/report.js

@@ -7,7 +7,6 @@ import { coverageSpec } from "../public/operations/specs/reporting.js";
 import { KIBI_BRAND, renderKibiBadge } from "../report/brand.js";
 import { renderHtmlReport, } from "../report/html-report.js";
 import { resolveReportRepository, } from "../report/repository.js";
-import { createCliRuntime } from "../runtime/cli-runtime.js";
 import { listGitRemotes } from "./github-init.js";
 function gitCommitSha(cwd) {
     try {
@@ -79,6 +78,9 @@ async function executeCoverageInContext(context, tags, limit) {
     };
 }
 async function loadCoverage(tags, limit) {
+    // Lazy-load the CLI runtime so coverage suites that inject loadCoverage do
+    // not pull the engine/plugin graph into every reportCommand import.
+    const { createCliRuntime } = await import("../runtime/cli-runtime.js");
     const runtime = createCliRuntime();
     const runtimeSpec = coverageSpec;
     const context = await runtime.open(runtimeSpec);
@@ -118,8 +120,21 @@ export async function openReport(filePath) {
             detached: true,
             stdio: "ignore",
         });
-        child.once("error", reject);
+        const timer = setTimeout(() => {
+            try {
+                child.unref();
+            }
+            catch {
+                // Best-effort unref if the child never spawned.
+            }
+            reject(new Error(`Timed out opening report via ${command}`));
+        }, 5_000);
+        child.once("error", (error) => {
+            clearTimeout(timer);
+            reject(error);
+        });
         child.once("spawn", () => {
+            clearTimeout(timer);
             child.unref();
             resolve();
         });

package/dist/commands/sync/manifest.d.ts

@@ -31,6 +31,7 @@ export { COARSE_GRANULARITY_REASONS };
 export declare function isCoarseGranularityAnchor(entry: ManifestSymbolEntry): boolean;
 export declare function refreshManifestCoordinates(manifestPath: string, workspaceRoot: string, deps?: Partial<ManifestDeps> & {
     refreshSymbolCoordinates?: boolean;
+    quiet?: boolean;
 }): Promise<void>;
 export declare function hasAllGeneratedCoordinates(entry: ManifestSymbolEntry): boolean;
 export declare function isEligibleForCoordinateRefresh(sourceFile: string | undefined, workspaceRoot: string, deps?: Partial<ManifestDeps>): boolean;

package/dist/commands/sync/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/manifest.ts"],"names":[],"mappings":"AAkBA,OAAO,EACL,UAAU,EACV,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,EACd,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,IAAI,IAAI,SAAS,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAML,uBAAuB,EACxB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,KAAK,mBAAmB,EACxB,uBAAuB,EACxB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,0BAA0B,EAG3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAE5E,UAAU,YAAY;IACpB,QAAQ,EAAE,OAAO,QAAQ,CAAC;IAC1B,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,SAAS,EAAE,OAAO,SAAS,CAAC;IAC5B,YAAY,EAAE,OAAO,YAAY,CAAC;IAClC,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,2BAA2B,EAAE,OAAO,2BAA2B,CAAC;CACjE;AAkBD,eAAO,MAAM,8BAA8B,QAc1C,CAAC;AAaF;;;;;;;;;GASG;AACH,OAAO,EAAE,0BAA0B,EAAE,CAAC;AAEtC,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAG7E;AAoHD,wBAAsB,0BAA0B,CAE9C,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG;IAAE,wBAAwB,CAAC,EAAE,OAAO,CAAA;CAAE,GACpE,OAAO,CAAC,IAAI,CAAC,CAqMf;AAED,wBAAgB,0BAA0B,CAExC,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAOT;AAED,wBAAgB,8BAA8B,CAE5C,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAC3B,OAAO,CAUT"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/manifest.ts"],"names":[],"mappings":"AAkBA,OAAO,EACL,UAAU,EACV,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,EACd,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,IAAI,IAAI,SAAS,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAML,uBAAuB,EACxB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,KAAK,mBAAmB,EACxB,uBAAuB,EACxB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,0BAA0B,EAG3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAE5E,UAAU,YAAY;IACpB,QAAQ,EAAE,OAAO,QAAQ,CAAC;IAC1B,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,SAAS,EAAE,OAAO,SAAS,CAAC;IAC5B,YAAY,EAAE,OAAO,YAAY,CAAC;IAClC,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,2BAA2B,EAAE,OAAO,2BAA2B,CAAC;CACjE;AAkBD,eAAO,MAAM,8BAA8B,QAc1C,CAAC;AAaF;;;;;;;;;GASG;AACH,OAAO,EAAE,0BAA0B,EAAE,CAAC;AAEtC,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAG7E;AAoHD,wBAAsB,0BAA0B,CAE9C,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG;IAC7B,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,GACA,OAAO,CAAC,IAAI,CAAC,CAuMf;AAED,wBAAgB,0BAA0B,CAExC,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAOT;AAED,wBAAgB,8BAA8B,CAE5C,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAC3B,OAAO,CAUT"}

package/dist/commands/sync/manifest.js

@@ -285,22 +285,24 @@ manifestPath, workspaceRoot, deps) {
     // The generated coordinates live in the artifact beside the manifest, not
     // in the authored symbols.yaml this command also rewrites; naming the
     // artifact keeps diff audits pointed at the file that actually changed.
-    const counts = `(refreshed=${refreshed}, unchanged=${unchanged}, failed=${failures.length})`;
-    if (coordinatesPath !== null) {
-        console.log(`\u2713 Refreshed symbol coordinates in ${path.relative(workspaceRoot, coordinatesPath)} ${counts}`);
-    }
-    else {
-        console.log(`\u2713 Normalized symbol manifest ${path.relative(workspaceRoot, manifestPath)} ${counts}`);
-    }
-    const maxReportedFailures = 10;
-    for (const failure of failures.slice(0, maxReportedFailures)) {
-        console.log(`  failed ${failure.id}: ${failure.reason}`);
-    }
-    if (failures.length > maxReportedFailures) {
-        console.log(`  ... and ${failures.length - maxReportedFailures} more failed symbol(s)`);
-    }
-    if (failures.length > 0) {
-        console.log("  Symbols without a published coordinate entry are dropped from coverage on the next plain sync until they succeed.");
+    if (!deps?.quiet) {
+        const counts = `(refreshed=${refreshed}, unchanged=${unchanged}, failed=${failures.length})`;
+        if (coordinatesPath !== null) {
+            console.log(`\u2713 Refreshed symbol coordinates in ${path.relative(workspaceRoot, coordinatesPath)} ${counts}`);
+        }
+        else {
+            console.log(`\u2713 Normalized symbol manifest ${path.relative(workspaceRoot, manifestPath)} ${counts}`);
+        }
+        const maxReportedFailures = 10;
+        for (const failure of failures.slice(0, maxReportedFailures)) {
+            console.log(`  failed ${failure.id}: ${failure.reason}`);
+        }
+        if (failures.length > maxReportedFailures) {
+            console.log(`  ... and ${failures.length - maxReportedFailures} more failed symbol(s)`);
+        }
+        if (failures.length > 0) {
+            console.log("  Symbols without a published coordinate entry are dropped from coverage on the next plain sync until they succeed.");
+        }
     }
 }
 export function hasAllGeneratedCoordinates(

package/dist/commands/sync/persistence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"persistence.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/persistence.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAEV,qBAAqB,EACrB,gBAAgB,EACjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAiHrD,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,OAAO,CAAC;CACrB;AA8CD,iFAAiF;AACjF,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,SAAS,MAAM,EAAE,GAC7B,OAAO,CAAC,MAAM,CAAC,CAkCjB;AAED,0EAA0E;AAC1E,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,OAAO,CAAC,MAAM,CAAC,CAmBjB;AAED,8EAA8E;AAC9E,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,EACrB,aAAa,EAAE,SAAS,qBAAqB,EAAE,GAC9C,OAAO,CAAC,MAAM,CAAC,CAuBjB;AAmCD,wBAAsB,eAAe,CAEnC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,gBAAgB,EAAE,EAC3B,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EACtB,OAAO,GAAE;IAAE,qBAAqB,CAAC,EAAE,OAAO,CAAA;CAAO,GAChD,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAAC,CAiPvD;AA4BD,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,MAAM,CAER;AAGD,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,gBAAgB,EAAE,EAC3B,kBAAkB,EAAE,qBAAqB,EAAE,EAC3C,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GACvC,OAAO,CAAC;IAAE,iBAAiB,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAAC,CAmO7D"}
+{"version":3,"file":"persistence.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/persistence.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAEV,qBAAqB,EACrB,gBAAgB,EACjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAiHrD,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,OAAO,CAAC;CACrB;AA8CD,iFAAiF;AACjF,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,SAAS,MAAM,EAAE,GAC7B,OAAO,CAAC,MAAM,CAAC,CAkCjB;AAED,0EAA0E;AAC1E,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,OAAO,CAAC,MAAM,CAAC,CAmBjB;AAED,8EAA8E;AAC9E,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,aAAa,EACrB,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,EACrB,aAAa,EAAE,SAAS,qBAAqB,EAAE,GAC9C,OAAO,CAAC,MAAM,CAAC,CAuBjB;AAmCD,wBAAsB,eAAe,CAEnC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,gBAAgB,EAAE,EAC3B,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,EACtB,OAAO,GAAE;IAAE,qBAAqB,CAAC,EAAE,OAAO,CAAA;CAAO,GAChD,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAAC,CAyPvD;AA4BD,wBAAgB,0BAA0B,CACxC,WAAW,EAAE,MAAM,GAAG,SAAS,EAC/B,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,MAAM,CAER;AAGD,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,gBAAgB,EAAE,EAC3B,kBAAkB,EAAE,qBAAqB,EAAE,EAC3C,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAO,GACvC,OAAO,CAAC;IAAE,iBAAiB,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAAC,CAmO7D"}

package/dist/commands/sync/persistence.js

@@ -340,6 +340,12 @@ prolog, results, entityIds, options = {}) {
             if (entity.type === "req" && entity.semantic_inventory) {
                 props.push(`semantic_inventory=${toPrologString(JSON.stringify(entity.semantic_inventory))}`);
             }
+            if (entity.type === "req" && entity.proof_exempt !== undefined) {
+                props.push(`proof_exempt=${entity.proof_exempt}`);
+            }
+            if (entity.type === "req" && entity.proof_exempt_reason !== undefined) {
+                props.push(`proof_exempt_reason=${toPrologString(entity.proof_exempt_reason)}`);
+            }
             if (sourceFile)
                 props.push(`sourceFile=${toPrologString(sourceFile)}`);
             if (entity.type === "symbol") {

package/dist/engine.d.ts

@@ -58,6 +58,8 @@ export declare class EngineClient {
     start(allowSpawn?: boolean): Promise<void>;
     private connect;
     private attachSocket;
+    /** Settle a pending RPC at most once (abort vs response race-safe). */
+    private settlePending;
     private handleResponse;
     private request;
     query(goal: string, signal?: AbortSignal): Promise<PrologQueryResult>;
@@ -73,7 +75,7 @@ export declare class EngineClient {
     save(signal?: AbortSignal): Promise<PrologQueryResult>;
     storageStatus(): Promise<PrologQueryResult>;
     checkpoint(): Promise<PrologQueryResult>;
-    queryStatusJson(): Promise<PrologQueryResult>;
+    queryStatusJson(signal?: AbortSignal): Promise<PrologQueryResult>;
     compact(): Promise<PrologQueryResult>;
     exportStorage(targetDirectory: string): Promise<PrologQueryResult>;
     invalidateCache(): void;

package/dist/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EACV,wBAAwB,EACxB,eAAe,EAEhB,MAAM,mBAAmB,CAAC;AAI3B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,sCAAsC,CAAC;AAO9C,YAAY,EACV,wBAAwB,EACxB,eAAe,EACf,aAAa,GACd,MAAM,mBAAmB,CAAC;AAE3B,eAAO,MAAM,uBAAuB,IAAI,CAAC;AACzC,eAAO,MAAM,sBAAsB,QAAiB,CAAC;AACrD,eAAO,MAAM,uBAAuB,QACY,CAAC;AAOjD,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,OAAO,GACtB,MAAM,IAAI,CAIZ;AAED,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAKhE;AAED,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,GACjB,wBAAwB,GAAG,IAAI,CAgBjC;AAED,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,wBAAwB,GAAG,IAAI,CAyBjC;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,wBAAwB,GAAG,IAAI,EACzC,QAAQ,EAAE,wBAAwB,GAAG,IAAI,GACxC,OAAO,CAWT;AAED,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,wBAAwB,GAAG,IAAI,EACzC,QAAQ,EAAE,wBAAwB,GAAG,IAAI,GACxC,MAAM,CASR;AAoLD,wBAAgB,gBAAgB,IAAI,MAAM,CAqBzC;AAaD;;;;;GAKG;AAEH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAuBlE;AAGD,wBAAgB,gBAAgB,CAC9B,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,GACb,MAAM,CAkBR;AAED,wBAAgB,aAAa,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAW3E;AAED,wBAAgB,mBAAmB,CACjC,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,GACb,MAAM,CAUR;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,GACb,MAAM,CAER;AA2DD,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;CAC9B,CAAC,CAAC;AAEH,wBAAgB,6BAA6B,CAC3C,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,GACb,sBAAsB,CAuDxB;AAwLD,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,8EAA8E;IAC9E,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC,CAAC;AAEF,2EAA2E;AAE3E,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAU;IAC/C,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,WAAW,CAA4C;IAC/D,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,OAAO,CAAqC;IACpD,OAAO,CAAC,WAAW,CAAoC;IACvD,OAAO,CAAC,UAAU,CAAkC;IACpD,OAAO,CAAC,oBAAoB,CAAS;gBAEzB,OAAO,EAAE,mBAAmB;IAelC,KAAK,CAAC,UAAU,UAAO,GAAG,OAAO,CAAC,IAAI,CAAC;YAQ/B,OAAO;IA8FrB,OAAO,CAAC,YAAY;IA0BpB,OAAO,CAAC,cAAc;YAYR,OAAO;IA4Cf,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAoB3E;uEACmE;IAC7D,OAAO,CAAC,CAAC,GAAG,iBAAiB,EACjC,OAAO,EAAE,eAAe,EACxB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,CAAC,CAAC;IAIP,UAAU,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAKhE,aAAa,CACjB,KAAK,EAAE,sBAAsB,EAC7B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,uBAAuB,CAAC;IA6B7B,cAAc,CAClB,KAAK,EAAE,sBAAsB,EAC7B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,uBAAuB,CAAC;IAyBnC,qDAAqD;IACrD,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAiBzB,YAAY,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAMjD,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAItD,aAAa,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAI3C,UAAU,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAIxC,eAAe,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAI7C,OAAO,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAIrC,aAAa,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAOxE,eAAe,IAAI,IAAI;IAIvB,SAAS,IAAI,OAAO;YAIN,oBAAoB;YAMpB,mBAAmB;YA0BnB,uBAAuB;IA6BrC,MAAM,IAAI,MAAM;IASV,IAAI,CAAC,cAAc,UAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAqB1C,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;CASjC;AAGD,wBAAsB,+BAA+B,CACnD,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAoJf;AAkFD,wBAAsB,eAAe,CAAC,OAAO,EAAE;IAC7C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GAAG,OAAO,CAAC,IAAI,CAAC,CA0lBhB"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EACV,wBAAwB,EACxB,eAAe,EAEhB,MAAM,mBAAmB,CAAC;AAI3B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAC9E,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,sCAAsC,CAAC;AAO9C,YAAY,EACV,wBAAwB,EACxB,eAAe,EACf,aAAa,GACd,MAAM,mBAAmB,CAAC;AAE3B,eAAO,MAAM,uBAAuB,IAAI,CAAC;AACzC,eAAO,MAAM,sBAAsB,QAAiB,CAAC;AACrD,eAAO,MAAM,uBAAuB,QACY,CAAC;AAOjD,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,OAAO,GACtB,MAAM,IAAI,CAIZ;AAED,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAKhE;AAED,wBAAgB,4BAA4B,CAC1C,UAAU,EAAE,MAAM,GACjB,wBAAwB,GAAG,IAAI,CAgBjC;AAED,wBAAgB,6BAA6B,CAC3C,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,wBAAwB,GAAG,IAAI,CAyBjC;AAED,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,wBAAwB,GAAG,IAAI,EACzC,QAAQ,EAAE,wBAAwB,GAAG,IAAI,GACxC,OAAO,CAWT;AAED,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,wBAAwB,GAAG,IAAI,EACzC,QAAQ,EAAE,wBAAwB,GAAG,IAAI,GACxC,MAAM,CASR;AAqLD,wBAAgB,gBAAgB,IAAI,MAAM,CAqBzC;AAaD;;;;;GAKG;AAEH,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAuBlE;AAGD,wBAAgB,gBAAgB,CAC9B,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,GACb,MAAM,CAkBR;AAED,wBAAgB,aAAa,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAW3E;AAED,wBAAgB,mBAAmB,CACjC,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,GACb,MAAM,CAUR;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,GACb,MAAM,CAER;AA2DD,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;CAC9B,CAAC,CAAC;AAEH,wBAAgB,6BAA6B,CAC3C,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,GACb,sBAAsB,CAuDxB;AAwLD,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,8EAA8E;IAC9E,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC,CAAC;AAEF,2EAA2E;AAE3E,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAU;IAC/C,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,WAAW,CAA4C;IAC/D,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,OAAO,CAAqC;IACpD,OAAO,CAAC,WAAW,CAAoC;IACvD,OAAO,CAAC,UAAU,CAAkC;IACpD,OAAO,CAAC,oBAAoB,CAAS;gBAEzB,OAAO,EAAE,mBAAmB;IAelC,KAAK,CAAC,UAAU,UAAO,GAAG,OAAO,CAAC,IAAI,CAAC;YAQ/B,OAAO;IA8FrB,OAAO,CAAC,YAAY;IA8BpB,uEAAuE;IACvE,OAAO,CAAC,aAAa;IAOrB,OAAO,CAAC,cAAc;YAkBR,OAAO;IAmEf,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAS3E;uEACmE;IAC7D,OAAO,CAAC,CAAC,GAAG,iBAAiB,EACjC,OAAO,EAAE,eAAe,EACxB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,CAAC,CAAC;IAIP,UAAU,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAKhE,aAAa,CACjB,KAAK,EAAE,sBAAsB,EAC7B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,uBAAuB,CAAC;IA6B7B,cAAc,CAClB,KAAK,EAAE,sBAAsB,EAC7B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,uBAAuB,CAAC;IAyBnC,qDAAqD;IACrD,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAiBzB,YAAY,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAMjD,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAItD,aAAa,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAI3C,UAAU,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAIxC,eAAe,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAOjE,OAAO,IAAI,OAAO,CAAC,iBAAiB,CAAC;IAIrC,aAAa,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAOxE,eAAe,IAAI,IAAI;IAIvB,SAAS,IAAI,OAAO;YAIN,oBAAoB;YAMpB,mBAAmB;YA0BnB,uBAAuB;IA6BrC,MAAM,IAAI,MAAM;IASV,IAAI,CAAC,cAAc,UAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAqB1C,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;CASjC;AAGD,wBAAsB,+BAA+B,CACnD,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAoJf;AAkFD,wBAAsB,eAAe,CAAC,OAAO,EAAE;IAC7C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GAAG,OAAO,CAAC,IAAI,CAAC,CA+oBhB"}

package/dist/engine.js

@@ -783,16 +783,26 @@ export class EngineClient {
         socket.on("close", () => {
             this.socket = null;
             const error = new Error("Kibi engine connection closed");
-            for (const pending of this.pending.values())
-                pending.reject(error);
+            for (const pending of this.pending.values()) {
+                this.settlePending(pending, () => pending.reject(error));
+            }
             this.pending.clear();
         });
         socket.on("error", (error) => {
-            for (const pending of this.pending.values())
-                pending.reject(error);
+            for (const pending of this.pending.values()) {
+                this.settlePending(pending, () => pending.reject(error));
+            }
             this.pending.clear();
         });
     }
+    /** Settle a pending RPC at most once (abort vs response race-safe). */
+    settlePending(pending, settle) {
+        if (pending.settled)
+            return false;
+        pending.settled = true;
+        settle();
+        return true;
+    }
     handleResponse(value) {
         if (value === null || typeof value !== "object")
             return;
@@ -803,55 +813,20 @@ export class EngineClient {
         if (!pending)
             return;
         this.pending.delete(response.id);
-        if (response.ok)
-            pending.resolve(response.result);
-        else
-            pending.reject(new Error(response.error ?? "Kibi engine request failed"));
+        if (response.ok) {
+            this.settlePending(pending, () => pending.resolve(response.result));
+        }
+        else {
+            this.settlePending(pending, () => pending.reject(new Error(response.error ?? "Kibi engine request failed")));
+        }
     }
     async request(request, signal) {
+        // Connect/reconcile before taking the client queue. Holding requestTail
+        // across start()→reconcileAttachment()→queryStatusJson() deadlocks because
+        // that nested status RPC needs the same queue (see command-first clients).
         await this.start();
-        const socket = this.socket;
-        if (socket === null || socket.destroyed)
-            throw new Error("Kibi engine is not connected");
-        const id = ++this.requestId;
-        const result = new Promise((resolve, reject) => {
-            this.pending.set(id, {
-                resolve: resolve,
-                reject,
-            });
-            try {
-                socket.write(frame({
-                    ...request,
-                    id,
-                    protocolVersion: ENGINE_PROTOCOL_VERSION,
-                    packageVersions: ENGINE_PACKAGE_VERSIONS,
-                    workspaceRoot: this.workspaceRoot,
-                    branch: this.branch,
-                }));
-            }
-            catch (error) {
-                this.pending.delete(id);
-                reject(error instanceof Error ? error : new Error(String(error)));
-                return;
-            }
-            if (signal !== undefined) {
-                const abort = () => {
-                    if (!this.pending.has(id))
-                        return;
-                    this.pending.delete(id);
-                    this.cancel(id);
-                    reject(new Error("Kibi engine request cancelled"));
-                };
-                if (signal.aborted)
-                    abort();
-                else
-                    signal.addEventListener("abort", abort, { once: true });
-            }
-        });
-        return result;
-    }
-    async query(goal, signal) {
-        let result;
+        // Serialize query and command frames on one socket so concurrent MCP
+        // traffic cannot interleave length-prefixed writes/responses.
         const previous = this.requestTail;
         let release;
         this.requestTail = new Promise((resolve) => {
@@ -859,14 +834,59 @@ export class EngineClient {
         });
         await previous;
         try {
-            result = await this.request({ method: "query", goal }, signal);
-            this.lastResult = result;
-            return result;
+            const socket = this.socket;
+            if (socket === null || socket.destroyed)
+                throw new Error("Kibi engine is not connected");
+            const id = ++this.requestId;
+            return await new Promise((resolve, reject) => {
+                this.pending.set(id, {
+                    resolve: resolve,
+                    reject,
+                    settled: false,
+                });
+                try {
+                    socket.write(frame({
+                        ...request,
+                        id,
+                        protocolVersion: ENGINE_PROTOCOL_VERSION,
+                        packageVersions: ENGINE_PACKAGE_VERSIONS,
+                        workspaceRoot: this.workspaceRoot,
+                        branch: this.branch,
+                    }));
+                }
+                catch (error) {
+                    const pending = this.pending.get(id);
+                    this.pending.delete(id);
+                    if (pending) {
+                        this.settlePending(pending, () => reject(error instanceof Error ? error : new Error(String(error))));
+                    }
+                    return;
+                }
+                if (signal !== undefined) {
+                    const abort = () => {
+                        const pending = this.pending.get(id);
+                        if (!pending || pending.settled)
+                            return;
+                        this.pending.delete(id);
+                        this.cancel(id);
+                        this.settlePending(pending, () => reject(new Error("Kibi engine request cancelled")));
+                    };
+                    if (signal.aborted)
+                        abort();
+                    else
+                        signal.addEventListener("abort", abort, { once: true });
+                }
+            });
         }
         finally {
             release();
         }
     }
+    async query(goal, signal) {
+        const result = await this.request({ method: "query", goal }, signal);
+        this.lastResult = result;
+        return result;
+    }
     /** Execute a versioned, goal-free engine command. Raw query remains private
      * compatibility traffic for the in-process Prolog adapter only. */
     async command(command, signal) {
@@ -952,8 +972,8 @@ export class EngineClient {
     async checkpoint() {
         return this.command({ version: 1, kind: "checkpoint" });
     }
-    async queryStatusJson() {
-        return this.command({ version: 1, kind: "status" });
+    async queryStatusJson(signal) {
+        return this.command({ version: 1, kind: "status" }, signal);
     }
     async compact() {
         return this.command({ version: 1, kind: "compact" });
@@ -1299,16 +1319,55 @@ export async function runEngineDaemon(options) {
     }
     mkdirSync(path.dirname(options.socketPath), { recursive: true, mode: 0o700 });
     if (existsSync(options.socketPath)) {
+        const isLivePeerSignal = (error) => {
+            if (error && typeof error === "object") {
+                const code = "code" in error ? String(error.code) : "";
+                if (code === "EPIPE" || code === "ECONNRESET")
+                    return true;
+                const errno = "errno" in error
+                    ? Number(error.errno)
+                    : Number.NaN;
+                // POSIX EPIPE
+                if (errno === -32)
+                    return true;
+            }
+            const message = error instanceof Error ? error.message : String(error);
+            return /\bEPIPE\b|\bECONNRESET\b|broken pipe/i.test(message);
+        };
         let live = false;
         try {
             const existing = await connectSocket(options.socketPath, 100);
-            existing.destroy();
+            // Keep a permanent error sink. Bun 1.4 can surface write EPIPE from
+            // teardown into the caller promise on some CI runners, replacing the
+            // intended live-listener error.
+            existing.on("error", () => undefined);
             live = true;
+            try {
+                existing.destroy();
+            }
+            catch {
+                // Ignore destroy races; live detection already succeeded.
+            }
+            existing.unref?.();
         }
-        catch {
-            // A refused connection means this is a stale filesystem socket.
+        catch (error) {
+            // Bun 1.4 can reject the probe with EPIPE/ECONNRESET against a live
+            // unix listener instead of resolving connect.
+            if (isLivePeerSignal(error)) {
+                live = true;
+            }
+            // Otherwise a refused connection means a stale filesystem socket.
         }
         if (live) {
+            try {
+                await prolog.terminate();
+            }
+            catch (error) {
+                // Best-effort cleanup; Bun may surface late EPIPE here too.
+                if (!isLivePeerSignal(error)) {
+                    // Ignore non-EPIPE terminate failures.
+                }
+            }
             throw new Error(`A Kibi engine is already listening at ${options.socketPath}`);
         }
         try {
@@ -1326,7 +1385,6 @@ export async function runEngineDaemon(options) {
     let idleCompactionQueued = false;
     const queryCache = new Map();
     let freshnessCache = null;
-    const cancelledRequests = new Set();
     const clients = new Set();
     let shuttingDown = false;
     const exactBranchStatus = (result) => {
@@ -1398,7 +1456,7 @@ export async function runEngineDaemon(options) {
                 void shutdown();
         }, engineIdleTimeoutMs());
     };
-    const handle = async (request) => {
+    const handle = async (request, cancelledRequests) => {
         if (request.protocolVersion !== ENGINE_PROTOCOL_VERSION) {
             throw new Error(`Kibi engine protocol mismatch: client=${request.protocolVersion ?? "missing"}, server=${ENGINE_PROTOCOL_VERSION}`);
         }
@@ -1661,6 +1719,13 @@ export async function runEngineDaemon(options) {
                 setImmediate(() => void shutdown());
                 return { stopped: true };
             case "cancel":
+                // Best-effort: marks the id so a *queued* request on this connection
+                // is skipped before handle(). A request already inside
+                // `await prolog.query(...)` cannot be interrupted without redesigning
+                // SWI interactive cancellation; the client still rejects locally on
+                // AbortSignal, but the daemon queue remains occupied until that Prolog
+                // call returns. Cancel marks are per-connection. See
+                // docs/mcp-reference.md ("Engine cancellation limits").
                 if (typeof request.cancelOf === "number") {
                     cancelledRequests.add(request.cancelOf);
                 }
@@ -1720,6 +1785,9 @@ export async function runEngineDaemon(options) {
     server.on("connection", (socket) => {
         clients.add(socket);
         activeClients += 1;
+        // Request ids are per-connection. Cancel marks must not be daemon-global
+        // or Client B's id=1 is poisoned by Client A's cancelOf=1.
+        const cancelledRequests = new Set();
         let buffer = Buffer.alloc(0);
         socket.on("data", (chunk) => {
             try {
@@ -1742,7 +1810,7 @@ export async function runEngineDaemon(options) {
                             return;
                         }
                         try {
-                            const result = await handle(request);
+                            const result = await handle(request, cancelledRequests);
                             writeSocketFrame(socket, {
                                 id: request.id,
                                 ok: true,
@@ -1758,6 +1826,11 @@ export async function runEngineDaemon(options) {
                                 serverPackageVersions: ENGINE_PACKAGE_VERSIONS,
                             });
                         }
+                        finally {
+                            // Drop stale cancel marks for in-flight goals that still ran
+                            // to completion after cancelOf (SWI cannot interrupt them).
+                            cancelledRequests.delete(request.id);
+                        }
                     })
                         .catch(() => undefined);
                 });

package/dist/env/bootstrap.d.ts

@@ -0,0 +1,84 @@
+/** Preferred project-local Kibi env file (harness-independent). */
+export declare const KIBI_PROJECT_ENV_FILE = ".env.kibi";
+/** Legacy generic dotenv still loaded for compatibility only. */
+export declare const KIBI_LEGACY_ENV_FILE = ".env";
+export type EnvValueSource = "process" | "project_env" | "user_env" | "legacy_env" | "missing";
+export type BootstrapKibiEnvironmentResult = Readonly<{
+    workspaceRoot: string;
+    userEnvPath: string;
+    projectEnvPath: string;
+    legacyEnvPath: string;
+    /** Attribution for keys present after bootstrap (never includes secret values). */
+    sources: Readonly<Record<string, EnvValueSource>>;
+    keysLoadedFromUser: readonly string[];
+    keysLoadedFromProject: readonly string[];
+    keysLoadedFromLegacy: readonly string[];
+}>;
+export type BootstrapKibiEnvironmentOptions = Readonly<{
+    env?: NodeJS.ProcessEnv;
+    startDir?: string;
+    homedir?: string;
+    /** Override XDG config home (defaults to env.XDG_CONFIG_HOME). */
+    xdgConfigHome?: string;
+    /**
+     * Keys that were non-empty on the real process before any Kibi file load.
+     * Callers normally omit this; the first default-env bootstrap remembers it.
+     */
+    initialNonEmptyProcessKeys?: ReadonlySet<string>;
+}>;
+type EnvEntry = Readonly<{
+    key: string;
+    value: string;
+}>;
+/**
+ * Test-only: clear remembered process-key snapshot and last bootstrap result.
+ */
+export declare function resetKibiEnvironmentBootstrapStateForTests(): void;
+/**
+ * Last bootstrap against the real `process.env`, if any.
+ */
+export declare function getLastBootstrapResult(): BootstrapKibiEnvironmentResult | null;
+/**
+ * Canonical workspace root for Kibi env files and KB attachment.
+ * Uses KIBI_WORKSPACE / KIBI_PROJECT_ROOT / KIBI_ROOT, then .kb / .git discovery.
+ */
+export declare function resolveKibiWorkspaceRoot(startDir?: string, env?: NodeJS.ProcessEnv): string;
+export declare function resolveEnvFilePath(envFileName: string, workspaceRoot: string): string;
+/** User-wide Kibi env file: $XDG_CONFIG_HOME/kibi/env or ~/.config/kibi/env. */
+export declare function resolveKibiUserEnvPath(options?: Readonly<{
+    homedir?: string;
+    xdgConfigHome?: string;
+    env?: NodeJS.ProcessEnv;
+}>): string;
+export declare function resolveKibiProjectEnvPath(workspaceRoot: string, env?: NodeJS.ProcessEnv): string;
+export declare function parseEnvContent(content: string): EnvEntry[];
+/**
+ * Load Kibi-owned env files into `process.env` (or an injectable env object).
+ * Blank values are treated as unset (never applied, never overwrite).
+ * Existing non-empty process keys are never overwritten. Project overrides user.
+ * Legacy `.env` only gap-fills and is attributed as `legacy_env`.
+ * Call only from CLI/MCP entrypoints — not on library import.
+ */
+export declare function bootstrapKibiEnvironment(options?: BootstrapKibiEnvironmentOptions): BootstrapKibiEnvironmentResult;
+/**
+ * Resolve a secret source label from an actual bootstrap result.
+ * Never reconstructs attribution by re-reading files alone.
+ */
+export declare function secretSourceFromBootstrap(key: string, bootstrap: BootstrapKibiEnvironmentResult, env?: NodeJS.ProcessEnv): EnvValueSource;
+export type InspectSecretSourceOptions = BootstrapKibiEnvironmentOptions & Readonly<{
+    /** @deprecated Prefer bootstrap result sources; kept for targeted tests. */
+    initialProcessKeys?: ReadonlySet<string>;
+}>;
+/**
+ * Read-only secret attribution via a dry bootstrap on an env snapshot.
+ * Prefer `secretSourceFromBootstrap` with the real entrypoint bootstrap result.
+ * Never returns secret values.
+ */
+export declare function inspectSecretSource(key: string, options?: InspectSecretSourceOptions): EnvValueSource;
+/**
+ * Whether a secret is available for provider use (non-empty after resolution).
+ * Blank values are unset.
+ */
+export declare function isSecretAvailable(key: string, options?: InspectSecretSourceOptions): boolean;
+export {};
+//# sourceMappingURL=bootstrap.d.ts.map

package/dist/env/bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../../src/env/bootstrap.ts"],"names":[],"mappings":"AA4BA,mEAAmE;AAEnE,eAAO,MAAM,qBAAqB,cAAc,CAAC;AAEjD,iEAAiE;AAEjE,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAG3C,MAAM,MAAM,cAAc,GACtB,SAAS,GACT,aAAa,GACb,UAAU,GACV,YAAY,GACZ,SAAS,CAAC;AAGd,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IACpD,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,mFAAmF;IACnF,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IAClD,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC,CAAC,CAAC;AAGH,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IACrD,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,0BAA0B,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAClD,CAAC,CAAC;AAEH,KAAK,QAAQ,GAAG,QAAQ,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAOzD;;GAEG;AAEH,wBAAgB,0CAA0C,IAAI,IAAI,CAGjE;AAED;;GAEG;AAEH,wBAAgB,sBAAsB,IAAI,8BAA8B,GAAG,IAAI,CAE9E;AA6BD;;;GAGG;AAEH,wBAAgB,wBAAwB,CACtC,QAAQ,GAAE,MAAsB,EAChC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAWR;AAGD,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,GACpB,MAAM,CAGR;AAED,gFAAgF;AAEhF,wBAAgB,sBAAsB,CACpC,OAAO,GAAE,QAAQ,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,CAAM,GACN,MAAM,CAOR;AAGD,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,MAAM,EACrB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,CAIR;AAGD,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,EAAE,CAmB3D;AAkDD;;;;;;GAMG;AAEH,wBAAgB,wBAAwB,CACtC,OAAO,GAAE,+BAAoC,GAC5C,8BAA8B,CAkGhC;AAED;;;GAGG;AAEH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,8BAA8B,EACzC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,cAAc,CAMhB;AAGD,MAAM,MAAM,0BAA0B,GAAG,+BAA+B,GACtE,QAAQ,CAAC;IACP,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CAC1C,CAAC,CAAC;AAEL;;;;GAIG;AAEH,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,0BAA+B,GACvC,cAAc,CA+BhB;AAED;;;GAGG;AAEH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,0BAA+B,GACvC,OAAO,CAET"}