kibi-cli 2.0.0 → 2.1.0

package/dist/operations/proof/explain.js

@@ -0,0 +1,294 @@
+/*
+ Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ Copyright (C) 2026 Piotr Franczyk
+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU Affero General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+ */
+import { runOperationJsonQuery, toPrologAtom, } from "../../public/operations/prolog-json.js";
+import { currentProofBindingMode, perContractTestBindings, } from "../../public/operations/specs/reporting.js";
+import { readWorkspaceSnapshot } from "../../public/operations/workspace-snapshot.js";
+import { PROOF_RECEIPT_MAX_AGE_SECONDS } from "../../public/proof-receipt.js";
+function requireProlog(context) {
+    if (context.prolog === undefined) {
+        throw new Error("Proof explain requires a Prolog runtime");
+    }
+    return context.prolog;
+}
+function asRecord(value) {
+    return value !== null && typeof value === "object"
+        ? value
+        : {};
+}
+function asString(value, fallback = "") {
+    return typeof value === "string" ? value : fallback;
+}
+function asStringArray(value) {
+    if (!Array.isArray(value))
+        return [];
+    return value.map((item) => asString(item)).filter((item) => item !== "");
+}
+function asBoolean(value) {
+    return value === true;
+}
+function asRef(value) {
+    const row = asRecord(value);
+    return {
+        ...(typeof row.id === "string" ? { id: row.id } : {}),
+        ...(typeof row.sourceFile === "string"
+            ? { sourceFile: row.sourceFile }
+            : {}),
+        ...(typeof row.path === "string" ? { path: row.path } : {}),
+        ...(typeof row.role === "string" ? { role: row.role } : {}),
+        ...(row.exists === true || row.exists === false
+            ? { exists: row.exists }
+            : {}),
+    };
+}
+function asCandidate(value) {
+    const row = asRecord(value);
+    return {
+        testId: asString(row.testId),
+        relationship: asString(row.relationship, "covered_by"),
+        qualifies: asBoolean(row.qualifies),
+        reason: asString(row.reason),
+        ...(typeof row.reasonText === "string"
+            ? { reasonText: row.reasonText }
+            : {}),
+        secondaryReasons: asStringArray(row.secondaryReasons),
+        ...(typeof row.scope === "string" ? { scope: row.scope } : {}),
+        ...(typeof row.receiptState === "string"
+            ? { receiptState: row.receiptState }
+            : {}),
+    };
+}
+function asSymbolBlock(value) {
+    const row = asRecord(value);
+    return {
+        symbolId: asString(row.symbolId),
+        classification: asString(row.classification, "unknown"),
+        status: asString(row.status),
+        reason: asString(row.reason),
+        ...(typeof row.reasonText === "string"
+            ? { reasonText: row.reasonText }
+            : {}),
+        coverageCandidates: Array.isArray(row.coverageCandidates)
+            ? row.coverageCandidates.map(asCandidate)
+            : [],
+    };
+}
+// implements REQ-kibi-verification-evidence-contract
+export function projectRequirementExplain(proof) {
+    const stages = asRecord(proof.proofStages);
+    const scenarioStage = asRecord(stages.scenarios);
+    const scenarioTestStage = asRecord(stages.scenarioTests);
+    const production = asRecord(stages.productionSymbols);
+    const obligations = Array.isArray(scenarioTestStage.obligations)
+        ? scenarioTestStage.obligations.map(asRecord)
+        : [];
+    const resolutions = Array.isArray(proof.testResolutions ?? scenarioTestStage.resolutions)
+        ? (proof.testResolutions ?? scenarioTestStage.resolutions)
+        : [];
+    const resolutionByTest = new Map();
+    for (const item of resolutions) {
+        const row = asRecord(item);
+        const testId = asString(row.testId);
+        if (testId === "")
+            continue;
+        resolutionByTest.set(testId, {
+            testId,
+            requiredProofs: Array.isArray(row.requiredProofs)
+                ? row.requiredProofs.map(asRef)
+                : [],
+            executableFor: Array.isArray(row.executableFor)
+                ? row.executableFor.map(asRef)
+                : [],
+        });
+    }
+    const tests = asStringArray(scenarioTestStage.tests).map((testId) => {
+        return (resolutionByTest.get(testId) ?? {
+            testId,
+            requiredProofs: [],
+            executableFor: [],
+        });
+    });
+    const scenarios = (Array.isArray(scenarioStage.scenarios)
+        ? scenarioStage.scenarios
+        : asStringArray(scenarioStage.scenarios)).map((scenarioId) => {
+        const id = asString(scenarioId);
+        const obligation = obligations.find((item) => asString(item.scenarioId) === id);
+        return {
+            id,
+            tests: asStringArray(obligation?.tests),
+        };
+    });
+    const explanations = Array.isArray(production.explanations)
+        ? production.explanations.map(asSymbolBlock)
+        : [];
+    const structuralIds = new Set(asStringArray(production.structuralSymbols));
+    return {
+        kind: "requirement",
+        id: asString(proof.id),
+        proofVersion: asString(proof.proofVersion),
+        proofStatus: asString(proof.proofStatus),
+        proofGaps: asStringArray(proof.proofGaps),
+        scenarios,
+        tests,
+        productionSymbols: explanations.filter((item) => !structuralIds.has(item.symbolId)),
+        structuralSymbols: explanations.filter((item) => structuralIds.has(item.symbolId)),
+    };
+}
+// implements REQ-kibi-verification-evidence-contract
+export function projectSymbolExplain(payload) {
+    const proofs = Array.isArray(payload.proofs)
+        ? payload.proofs.map((item) => projectRequirementExplain(asRecord(item)))
+        : [];
+    return {
+        kind: "symbol",
+        id: asString(payload.symbolId ?? payload.id),
+        role: asString(payload.role, "unknown"),
+        executableTest: asBoolean(payload.executableTest),
+        implementingRequirements: asStringArray(payload.implementingRequirements),
+        executableFor: asStringArray(payload.executableFor),
+        coveredBy: asStringArray(payload.coveredBy),
+        proofs,
+    };
+}
+// implements REQ-kibi-verification-evidence-contract
+export function renderProofExplain(view) {
+    if (view.kind === "symbol")
+        return renderSymbolExplain(view);
+    return renderRequirementExplain(view);
+}
+function renderRequirementExplain(view) {
+    const lines = [
+        `Proof explain for ${view.id}`,
+        `proofVersion: ${view.proofVersion}`,
+        `proofStatus: ${view.proofStatus}`,
+        `proofGaps: ${view.proofGaps.join(", ") || "(none)"}`,
+        "",
+        "Scenarios",
+    ];
+    if (view.scenarios.length === 0)
+        lines.push("  (none)");
+    for (const scenario of view.scenarios) {
+        lines.push(`  ${scenario.id} -> ${scenario.tests.join(", ") || "(no tests)"}`);
+    }
+    lines.push("");
+    for (const test of view.tests) {
+        lines.push(`TEST ${test.testId}`);
+        lines.push("  required_proofs");
+        if (test.requiredProofs.length === 0)
+            lines.push("    (none)");
+        for (const ref of test.requiredProofs) {
+            lines.push(`    ${formatRef(ref)}`);
+        }
+        lines.push("  executable_for");
+        if (test.executableFor.length === 0)
+            lines.push("    (none)");
+        for (const ref of test.executableFor) {
+            lines.push(`    ${formatRef(ref)}`);
+        }
+        lines.push("");
+    }
+    lines.push("Production symbols");
+    if (view.productionSymbols.length === 0)
+        lines.push("  (none)");
+    for (const symbol of view.productionSymbols) {
+        lines.push(renderSymbolCoverage(symbol));
+    }
+    if (view.structuralSymbols.length > 0) {
+        lines.push("");
+        lines.push("Structural symbols");
+        for (const symbol of view.structuralSymbols) {
+            lines.push(renderSymbolCoverage(symbol));
+        }
+    }
+    return `${lines.join("\n")}\n`;
+}
+function renderSymbolExplain(view) {
+    const lines = [
+        `Proof explain for ${view.id}`,
+        `role: ${view.role}`,
+        `executable_test: ${view.executableTest ? "true" : "false"}`,
+        `implementing requirements: ${view.implementingRequirements.join(", ") || "(none)"}`,
+        "executable_for",
+        ...(view.executableFor.length === 0
+            ? ["  (none)"]
+            : view.executableFor.map((id) => `  ${id}`)),
+        "covered_by",
+        ...(view.coveredBy.length === 0
+            ? ["  (none)"]
+            : view.coveredBy.map((id) => `  ${id}`)),
+    ];
+    for (const proof of view.proofs) {
+        lines.push("");
+        lines.push(`Requirement ${proof.id} (${proof.proofStatus})`);
+        lines.push(renderRequirementExplain(proof).trimEnd());
+    }
+    return `${lines.join("\n")}\n`;
+}
+function renderSymbolCoverage(symbol) {
+    const lines = [
+        `  ${symbol.symbolId} [${symbol.classification}] ${symbol.status} ${symbol.reason}`,
+        "    covered_by",
+    ];
+    if (symbol.coverageCandidates.length === 0)
+        lines.push("      (none)");
+    for (const candidate of symbol.coverageCandidates) {
+        const secondaries = candidate.secondaryReasons.length > 0
+            ? ` secondary=${candidate.secondaryReasons.join(",")}`
+            : "";
+        lines.push(`      ${candidate.testId} qualifies=${candidate.qualifies} reason=${candidate.reason}${secondaries}`);
+    }
+    return lines.join("\n");
+}
+function formatRef(ref) {
+    const id = ref.id ?? "(unresolved)";
+    const path = ref.path ?? ref.sourceFile ?? "";
+    const role = ref.role ? ` role=${ref.role}` : "";
+    return path === "" ? `${id}${role}` : `${id} ${path}${role}`;
+}
+// implements REQ-kibi-verification-evidence-contract
+export function classifyExplainTarget(id, options) {
+    if (options.requirement && options.symbol) {
+        throw new Error("proof explain: choose either --requirement or --symbol, not both");
+    }
+    if (options.requirement)
+        return { kind: "requirement", id: options.requirement };
+    if (options.symbol)
+        return { kind: "symbol", id: options.symbol };
+    if (id?.startsWith("REQ-"))
+        return { kind: "requirement", id };
+    if (id?.startsWith("SYM-"))
+        return { kind: "symbol", id };
+    throw new Error("proof explain: pass REQ-* or SYM-* (or --requirement / --symbol)");
+}
+async function proofQueryContext(context) {
+    const snapshotEvidence = await readWorkspaceSnapshot(context);
+    const snapshot = snapshotEvidence.available
+        ? snapshotEvidence.snapshot.hash
+        : "unknown";
+    const checkedAt = context.clock().toISOString();
+    const bindingsDict = await perContractTestBindings(context);
+    const bindingMode = bindingsDict !== null ? "per_contract" : currentProofBindingMode();
+    const bindings = bindingsDict ?? "_{}";
+    return {
+        snapshot,
+        checkedAt,
+        bindingsGoal: `${bindingMode}, ${bindings}, ${toPrologAtom(snapshot)}, ${toPrologAtom(checkedAt)}, ${PROOF_RECEIPT_MAX_AGE_SECONDS}`,
+    };
+}
+// implements REQ-kibi-verification-evidence-contract
+export async function executeProofExplain(target, context) {
+    const query = await proofQueryContext(context);
+    if (target.kind === "requirement") {
+        const payload = await runOperationJsonQuery(requireProlog(context), "discovery.pl", `discovery:requirement_proof_json(${toPrologAtom(target.id)}, ${query.bindingsGoal}, JsonString)`, "Proof explain");
+        const withId = { id: target.id, ...payload };
+        return { view: projectRequirementExplain(withId), payload: withId };
+    }
+    const payload = await runOperationJsonQuery(requireProlog(context), "discovery.pl", `discovery:symbol_proof_json(${toPrologAtom(target.id)}, ${query.bindingsGoal}, JsonString)`, "Proof explain");
+    return { view: projectSymbolExplain(payload), payload };
+}

package/dist/operations/proof/impact.d.ts

@@ -0,0 +1,45 @@
+import type { OperationContext } from "../../public/operations/runtime-types.js";
+import { type CoverageRowLike, type RequirementFingerprints, diffFingerprints } from "./baseline-diff.js";
+export declare const COMMITTED_BASELINE_PATH = "proof/baseline.json";
+export type ProofBaselineFile = {
+    readonly version?: string;
+    readonly mode?: string;
+    readonly currentRequirements?: number;
+    readonly proofProven?: number;
+    readonly currentUnproven?: number;
+    readonly trackedGaps?: Record<string, number>;
+    readonly requirements?: RequirementFingerprints;
+};
+export type ProofImpactResult = {
+    readonly comparisonTarget: typeof COMMITTED_BASELINE_PATH;
+    readonly baselineVersion: string;
+    readonly currentRequirements: number;
+    readonly proofProven: number;
+    readonly currentUnproven: number;
+    readonly changes: ReturnType<typeof diffFingerprints>;
+};
+export type ReadCommittedFile = (workspaceRoot: string, relativePath: string) => string | Promise<string>;
+export type ProofImpactExecuteOptions = {
+    readonly readCommittedFile?: ReadCommittedFile;
+    readonly loadCoverage?: (context: OperationContext) => Promise<{
+        structuredContent: unknown;
+    }>;
+};
+export declare function readCommittedHeadFile(workspaceRoot: string, relativePath: string): string;
+export declare function loadCommittedBaseline(workspaceRoot: string, readCommittedFile?: ReadCommittedFile): Promise<ProofBaselineFile>;
+/** Diagnostic only: successful evaluation always exits 0. Ratchet lives in check-proof-baseline.mjs. */
+export declare function proofImpactExitCode(_result: ProofImpactResult): 0;
+export declare function buildProofImpact(baseline: ProofBaselineFile, coverage: {
+    summary?: Record<string, unknown>;
+    rows?: unknown;
+}): {
+    result: ProofImpactResult;
+    rows: CoverageRowLike[];
+};
+export declare function renderProofImpact(result: ProofImpactResult, rows: readonly CoverageRowLike[]): string;
+export declare function executeProofImpact(context: OperationContext, options?: ProofImpactExecuteOptions): Promise<{
+    result: ProofImpactResult;
+    rows: CoverageRowLike[];
+    text: string;
+}>;
+//# sourceMappingURL=impact.d.ts.map

package/dist/operations/proof/impact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"impact.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/impact.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAEjF,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,uBAAuB,EAC5B,gBAAgB,EAGjB,MAAM,oBAAoB,CAAC;AAG5B,eAAO,MAAM,uBAAuB,wBAAwB,CAAC;AAE7D,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,QAAQ,CAAC,YAAY,CAAC,EAAE,uBAAuB,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,OAAO,uBAAuB,CAAC;IAC1D,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;CACvD,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG,CAC9B,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,KACjB,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAE9B,MAAM,MAAM,yBAAyB,GAAG;IACtC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,CACtB,OAAO,EAAE,gBAAgB,KACtB,OAAO,CAAC;QAAE,iBAAiB,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAC9C,CAAC;AAgDF,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,GACnB,MAAM,CAcR;AAGD,wBAAsB,qBAAqB,CACzC,aAAa,EAAE,MAAM,EACrB,iBAAiB,GAAE,iBAAyC,GAC3D,OAAO,CAAC,iBAAiB,CAAC,CAS5B;AAED,wGAAwG;AACxG,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,GAAG,CAAC,CAEjE;AAGD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,iBAAiB,EAC3B,QAAQ,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9D;IAAE,MAAM,EAAE,iBAAiB,CAAC;IAAC,IAAI,EAAE,eAAe,EAAE,CAAA;CAAE,CAuBxD;AAGD,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,iBAAiB,EACzB,IAAI,EAAE,SAAS,eAAe,EAAE,GAC/B,MAAM,CAYR;AAGD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,gBAAgB,EACzB,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC;IACT,MAAM,EAAE,iBAAiB,CAAC;IAC1B,IAAI,EAAE,eAAe,EAAE,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC,CAmBD"}

package/dist/operations/proof/impact.js

@@ -0,0 +1,118 @@
+/*
+ Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ Copyright (C) 2026 Piotr Franczyk
+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU Affero General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+ */
+import { execFileSync } from "node:child_process";
+import { executeCoverage } from "../../public/operations/specs/reporting.js";
+import { diffFingerprints, fingerprintRequirements, renderRequirementDiffs, } from "./baseline-diff.js";
+// implements REQ-kibi-verification-evidence-contract
+export const COMMITTED_BASELINE_PATH = "proof/baseline.json";
+function asNumber(value) {
+    return typeof value === "number" && Number.isFinite(value) ? value : 0;
+}
+function gitErrorText(error) {
+    if (error && typeof error === "object" && "stderr" in error) {
+        const stderr = error.stderr;
+        if (typeof stderr === "string" && stderr.trim() !== "")
+            return stderr;
+        if (Buffer.isBuffer(stderr) && stderr.length > 0) {
+            return stderr.toString("utf8");
+        }
+    }
+    return error instanceof Error ? error.message : String(error);
+}
+function committedBaselineReadError(relativePath, error) {
+    const text = gitErrorText(error);
+    if (/not a git repository/i.test(text) ||
+        /ambiguous argument 'HEAD'/i.test(text) ||
+        /unknown revision/i.test(text) ||
+        /needed a single revision/i.test(text) ||
+        /bad revision 'HEAD'/i.test(text)) {
+        return new Error(`proof impact: repository is not in a suitable Git state to read HEAD:${relativePath}`);
+    }
+    if (/does not exist in 'HEAD'/i.test(text) ||
+        /exists on disk, but not in 'HEAD'/i.test(text) ||
+        /path '.*' does not exist/i.test(text)) {
+        return new Error(`proof impact: HEAD:${relativePath} is missing or unreadable`);
+    }
+    return new Error(`proof impact: could not read HEAD:${relativePath}: ${text.trim()}`);
+}
+// implements REQ-kibi-verification-evidence-contract
+export function readCommittedHeadFile(workspaceRoot, relativePath) {
+    try {
+        return execFileSync("git", ["-C", workspaceRoot, "show", `HEAD:${relativePath}`], {
+            encoding: "utf8",
+            maxBuffer: 64 * 1024 * 1024,
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+    }
+    catch (error) {
+        throw committedBaselineReadError(relativePath, error);
+    }
+}
+// implements REQ-kibi-verification-evidence-contract
+export async function loadCommittedBaseline(workspaceRoot, readCommittedFile = readCommittedHeadFile) {
+    const raw = await readCommittedFile(workspaceRoot, COMMITTED_BASELINE_PATH);
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        throw new Error(`proof impact: HEAD:${COMMITTED_BASELINE_PATH} is not valid JSON`);
+    }
+}
+/** Diagnostic only: successful evaluation always exits 0. Ratchet lives in check-proof-baseline.mjs. */
+export function proofImpactExitCode(_result) {
+    return 0;
+}
+// implements REQ-kibi-verification-evidence-contract
+export function buildProofImpact(baseline, coverage) {
+    const rows = Array.isArray(coverage.rows)
+        ? coverage.rows
+        : [];
+    const summary = coverage.summary ?? {};
+    const proofNotApplicable = asNumber(summary.proofNotApplicable);
+    const total = asNumber(summary.total);
+    const proofProven = asNumber(summary.proofProven);
+    const currentUnproven = asNumber(summary.proofMissing) + asNumber(summary.proofUnresolved);
+    const current = fingerprintRequirements(rows);
+    const changes = diffFingerprints(baseline.requirements, current);
+    return {
+        rows,
+        result: {
+            comparisonTarget: COMMITTED_BASELINE_PATH,
+            baselineVersion: baseline.version ?? "unknown",
+            currentRequirements: total - proofNotApplicable,
+            proofProven,
+            currentUnproven,
+            changes,
+        },
+    };
+}
+// implements REQ-kibi-verification-evidence-contract
+export function renderProofImpact(result, rows) {
+    const header = [
+        `Proof impact compared to committed ${result.comparisonTarget}`,
+        `baseline version: ${result.baselineVersion}`,
+        `current requirements: ${result.currentRequirements}`,
+        `proofProven: ${result.proofProven}`,
+        `currentUnproven: ${result.currentUnproven}`,
+        `changed requirements: ${result.changes.length}`,
+        "",
+    ];
+    const diff = renderRequirementDiffs(result.changes, rows);
+    return `${header.join("\n")}${diff || "No requirement fingerprint changes versus the committed baseline.\n"}`;
+}
+// implements REQ-kibi-verification-evidence-contract
+export async function executeProofImpact(context, options = {}) {
+    const baseline = await loadCommittedBaseline(context.workspaceRoot, options.readCommittedFile ?? readCommittedHeadFile);
+    const coverage = options.loadCoverage
+        ? await options.loadCoverage(context)
+        : await executeCoverage({ by: "req", includePassing: true, limit: 100_000, offset: 0 }, context);
+    const { result, rows } = buildProofImpact(baseline, coverage.structuredContent);
+    return { result, rows, text: renderProofImpact(result, rows) };
+}

package/dist/operations/proof/ingest-proof.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ingest-proof.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/ingest-proof.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,QAAQ,EAEd,MAAM,yBAAyB,CAAC;AAOjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAkBjF,OAAO,EAEL,KAAK,YAAY,EAGlB,MAAM,+BAA+B,CAAC;AAYvC,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,SAAS,QAAQ,EAAE,CAAC;CAC3B,CAAC,CAAC;AAGH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;CAC3C,CAAC,CAAC;AAqFH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC;IACT,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CAAC,CA2RD"}
+{"version":3,"file":"ingest-proof.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/ingest-proof.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,QAAQ,EAEd,MAAM,yBAAyB,CAAC;AAOjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAkBjF,OAAO,EAEL,KAAK,YAAY,EAGlB,MAAM,+BAA+B,CAAC;AAUvC,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5C,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,SAAS,QAAQ,EAAE,CAAC;CAC3B,CAAC,CAAC;AAGH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;CAC3C,CAAC,CAAC;AAoKH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC;IACT,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,iBAAiB,EAAE,iBAAiB,CAAC;CACtC,CAAC,CAgSD"}

package/dist/operations/proof/ingest-proof.js

@@ -1,3 +1,5 @@
+import { join } from "node:path";
+import { resolveBoundSymbolScope } from "../../extractors/manifest.js";
 import { evaluateContractAgainstRun, } from "../../proof/evaluate.js";
 import { loadProofIntegrations, resolveIntegration, toExecution, } from "../../proof/integrations.js";
 import { loadEntities } from "../../public/operations/discovery-entities.js";
@@ -6,8 +8,6 @@ import { environmentHash as canonicalEnvironmentHash, effectiveProofFingerprint,
 import { PROOF_CONTRACT_VERSION, PROOF_RECEIPT_VERSION, proofBindingsErrors, proofRunArtifactErrors, } from "../../public/proof-protocol.js";
 import { MAX_PROOF_RECEIPTS, proofReceiptCurrentBindingErrors, proofReceiptHistoryErrors, } from "../../public/proof-receipt.js";
 import { projectEntityProperties } from "../mutation/entity-projection.js";
-import { join } from "node:path";
-import { resolveBoundSymbolScope } from "../../extractors/manifest.js";
 import { resolveContainedSourcePath } from "../mutation/source-authoring.js";
 import { executeUpsert } from "../mutation/upsert.js";
 import { patchReceiptsIntoDocument, removeFrontmatterBlock, } from "./receipt-document.js";
@@ -74,12 +74,52 @@ function parseBindings(test) {
         };
     });
 }
+function enforceNativeCaseBindings(testId, contract, bindings, artifact) {
+    const requiredKeys = new Set(contract.required_proofs.map((obligation) => `${obligation.target}\0${obligation.symbol_id}`));
+    const nativeResults = artifact.proof_results.filter((result) => result.binding === "native_case" &&
+        requiredKeys.has(`${result.target}\0${result.symbol_id}`));
+    const seenNativeIds = new Set();
+    for (const result of nativeResults) {
+        const nativeId = typeof result.native_id === "string" ? result.native_id : "";
+        const resultLabel = `${result.symbol_id}/${result.target}`;
+        if (!nativeId) {
+            throw new Error(`Proof ingest failed: test ${testId} native_case result ${resultLabel} has no native_id`);
+        }
+        if (seenNativeIds.has(nativeId)) {
+            throw new Error(`Proof ingest failed: test ${testId} duplicate native result for native_id '${nativeId}'`);
+        }
+        seenNativeIds.add(nativeId);
+        const matchingBindings = bindings.filter((binding) => binding.symbol_id === result.symbol_id &&
+            binding.target === result.target);
+        if (matchingBindings.length === 0) {
+            throw new Error(`Proof ingest failed: test ${testId} native_case result ${resultLabel} has no matching proof_binding`);
+        }
+        if (matchingBindings.length !== 1) {
+            throw new Error(`Proof ingest failed: test ${testId} native_case result ${resultLabel} has an ambiguous proof_binding`);
+        }
+        const binding = matchingBindings[0];
+        if (binding === undefined) {
+            throw new Error(`Proof ingest failed: test ${testId} native_case result ${resultLabel} has an ambiguous proof_binding`);
+        }
+        const boundNativeIds = [
+            binding.native_id,
+            ...(binding.aliases ?? []),
+        ].filter((value) => typeof value === "string" && value !== "");
+        if (!boundNativeIds.includes(nativeId)) {
+            throw new Error(`Proof ingest failed: test ${testId} native_case result ${resultLabel} native_id '${nativeId}' does not match its proof_binding native_id or aliases`);
+        }
+        const ambiguousOwners = bindings.filter((candidate) => [candidate.native_id, ...(candidate.aliases ?? [])].includes(nativeId));
+        if (ambiguousOwners.length !== 1) {
+            throw new Error(`Proof ingest failed: test ${testId} native_id '${nativeId}' has an ambiguous proof_binding`);
+        }
+    }
+}
 function existingReceipts(test) {
     return Array.isArray(test.proof_receipts)
         ? test.proof_receipts.filter(record).map((value) => ({ ...value }))
         : [];
 }
-// implements REQ-kibi-proof-evidence-protocol
+// implements REQ-kibi-verification-evidence-contract
 export async function executeIngestProof(args, context) {
     if (!context.prolog)
         throw new Error("Proof ingest requires a Prolog runtime");
@@ -147,6 +187,7 @@ export async function executeIngestProof(args, context) {
         if (jsonDigest(artifact.command_argv) !== jsonDigest([...integration.command]))
             throw new Error(`Proof ingest failed: artifact command_argv does not match the configured command for integration '${effectiveIntegrationId}'`);
         const bindings = parseBindings(test);
+        enforceNativeCaseBindings(testId, contract, bindings, artifact);
         const { fingerprint, components } = effectiveProofFingerprint({
             contract,
             integration: toExecution(integration),

package/dist/operations/proof/migrate-legacy-receipts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrate-legacy-receipts.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/migrate-legacy-receipts.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAOjF,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAC/C,yCAAyC;IAEzC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAGH,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IAEjD,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC/C,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AAEH,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,yBAAyB,EAC/B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC;IACT,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,iBAAiB,EAAE,2BAA2B,CAAC;CAChD,CAAC,CA6ED"}
+{"version":3,"file":"migrate-legacy-receipts.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/migrate-legacy-receipts.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAOjF,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAC/C,yCAAyC;IAEzC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAGH,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IAEjD,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC/C,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AAEH,wBAAsB,4BAA4B,CAChD,IAAI,EAAE,yBAAyB,EAC/B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC;IACT,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,iBAAiB,EAAE,2BAA2B,CAAC;CAChD,CAAC,CAkFD"}

package/dist/operations/proof/migrate-legacy-receipts.js

@@ -31,7 +31,7 @@ import { removeFrontmatterBlock } from "./receipt-document.js";
  * the authored document and the compiled entity — one block splice, no
  * canonical re-render.
  */
-// implements REQ-kibi-proof-evidence-protocol
+// implements REQ-kibi-verification-evidence-contract
 export async function executeMigrateLegacyReceipts(args, context) {
     if (!context.prolog)
         throw new Error("Legacy receipt migration requires a Prolog runtime");
@@ -47,35 +47,39 @@ export async function executeMigrateLegacyReceipts(args, context) {
     const migratedTests = [];
     for (const test of tests) {
         const testId = String(test.id);
-        const hasLegacy = Array.isArray(test.verification_receipts);
+        // The compiled lane only survives in stores compiled by older versions:
+        // current sync does not extract verification_receipts, so the authored
+        // document is the durable carrier of the legacy block. Both signals must
+        // trigger the migration.
+        const hasCompiledLegacy = Array.isArray(test.verification_receipts);
         const hasProofContract = test.proof_contract !== null && typeof test.proof_contract === "object";
-        if (!hasLegacy || !hasProofContract)
+        if (!hasProofContract)
             continue;
         const source = typeof test.source === "string" ? test.source : "";
-        let patchedContent;
-        if (context.fs && source !== "" && /\.(md|mdx)$/i.test(source)) {
-            const absolute = resolveContainedSourcePath(context.workspaceRoot, source);
-            const before = await context.fs.readFile(absolute);
-            patchedContent =
-                removeFrontmatterBlock(before, "verification_receipts") ?? undefined;
-            if (patchedContent === undefined) {
-                throw new Error(`Legacy receipt migration failed for ${testId}: ${source} is not a patchable frontmatter document`);
+        const patchableSource = source !== "" && /\.(md|mdx)$/i.test(source) && context.fs !== undefined;
+        if (!patchableSource) {
+            if (hasCompiledLegacy) {
+                throw new Error(`Legacy receipt migration failed for ${testId}: test source '${source || "unknown"}' is not an authored markdown document`);
             }
+            continue;
         }
-        else {
-            throw new Error(`Legacy receipt migration failed for ${testId}: test source '${source || "unknown"}' is not an authored markdown document`);
+        const absolute = resolveContainedSourcePath(context.workspaceRoot, source);
+        const before = await context.fs.readFile(absolute);
+        const patchedContent = removeFrontmatterBlock(before, "verification_receipts");
+        if (patchedContent === null) {
+            if (hasCompiledLegacy) {
+                throw new Error(`Legacy receipt migration failed for ${testId}: ${source} is not a patchable frontmatter document`);
+            }
+            continue;
         }
         const properties = Object.fromEntries(Object.entries(projectEntityProperties(test)).filter(([key]) => key !== "verification_receipts"));
         // Drop the legacy lane from the compiled entity; proof_receipts stay
         // untouched so append-only validation keeps holding.
-        const upsertOptions = patchedContent === undefined
-            ? {}
-            : { sourceDocumentOverride: patchedContent };
         await executeUpsert({
             type: "test",
             id: testId,
             properties: { ...properties },
-        }, context, upsertOptions);
+        }, context, { sourceDocumentOverride: patchedContent });
         migratedTests.push({ testId });
     }
     const summary = migratedTests.length === 0

package/dist/operations/proof/prune-receipts.js

@@ -37,7 +37,7 @@ function parseKeep(value) {
  * with the prune carve-out (append-only validation is skipped for exactly
  * this maintenance action).
  */
-// implements REQ-kibi-proof-evidence-protocol
+// implements REQ-kibi-verification-evidence-contract
 export async function executePruneReceipts(args, context) {
     if (!context.prolog)
         throw new Error("Proof prune requires a Prolog runtime");

package/dist/operations/proof/receipt-document.js

@@ -25,7 +25,7 @@ import { dump as dumpYaml } from "js-yaml";
  * Used by proof maintenance to drop legacy `verification_receipts` blocks
  * once a `proof_contract` exists, without canonicalizing the document.
  */
-// implements REQ-kibi-proof-evidence-protocol
+// implements REQ-kibi-verification-evidence-contract
 export function removeFrontmatterBlock(content, key) {
     const lines = content.match(/[^\n]*\n|[^\n]+$/g) ?? [];
     if (lines.length === 0 || lines[0]?.trim() !== "---")
@@ -75,7 +75,7 @@ export function removeFrontmatterBlock(content, key) {
  * patcher can safely splice; the caller then falls back to the canonical
  * render.
  */
-// implements REQ-kibi-proof-evidence-protocol
+// implements REQ-kibi-verification-evidence-contract
 export function patchReceiptsIntoDocument(content, receipts) {
     const lines = content.match(/[^\n]*\n|[^\n]+$/g) ?? [];
     if (lines.length === 0 || lines[0]?.trim() !== "---")

package/dist/operations/semantic-advisor/analysis-receipt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"analysis-receipt.d.ts","sourceRoot":"","sources":["../../../src/operations/semantic-advisor/analysis-receipt.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EACL,KAAK,OAAO,EAMb,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACV,6BAA6B,EAI7B,4BAA4B,EAC5B,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACf,MAAM,YAAY,CAAC;AA0CpB,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,SAAS,cAAc,EAAE,EAClC,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,SAAS,0BAA0B,EAAE,EAClD,OAAO,EAAE,SAAS,cAAc,EAAE,EAClC,YAAY,EAAE,SAAS,mBAAmB,EAAE,EAC5C,eAAe,EAAE,SAAS,4BAA4B,EAAE,EACxD,cAAc,EAAE,SAAS,iBAAiB,EAAE,GAC3C,6BAA6B,CAkH/B"}
+{"version":3,"file":"analysis-receipt.d.ts","sourceRoot":"","sources":["../../../src/operations/semantic-advisor/analysis-receipt.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EACL,KAAK,OAAO,EAMb,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EACV,6BAA6B,EAI7B,4BAA4B,EAC5B,0BAA0B,EAC1B,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACf,MAAM,YAAY,CAAC;AAyBpB,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,SAAS,cAAc,EAAE,EAClC,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,SAAS,0BAA0B,EAAE,EAClD,OAAO,EAAE,SAAS,cAAc,EAAE,EAClC,YAAY,EAAE,SAAS,mBAAmB,EAAE,EAC5C,eAAe,EAAE,SAAS,4BAA4B,EAAE,EACxD,cAAc,EAAE,SAAS,iBAAiB,EAAE,GAC3C,6BAA6B,CAkH/B"}