kibi-cli 2.0.0 → 2.2.0

package/dist/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAqCA,UAAU,WAAW;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAoDD,wBAAsB,WAAW,CAC/B,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA2F/B"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AAmGA,UAAU,WAAW;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAoDD,wBAAsB,WAAW,CAC/B,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAwI/B"}

package/dist/commands/init.js

@@ -15,17 +15,74 @@
  You should have received a copy of the GNU Affero General Public License
  along with this program.  If not, see <https://www.gnu.org/licenses/>.
 */
-import { existsSync } from "node:fs";
+import { existsSync, lstatSync, realpathSync } from "node:fs";
 import * as path from "node:path";
 import { fileURLToPath } from "node:url";
 import { classifyActivation } from "../operations/bootstrap/activation.js";
 import { nodeFilesystem } from "../public/operations/node-ports.js";
 import { resolveBranchAttachment } from "../utils/branch-resolver.js";
+import { resolveGitRepository, } from "../utils/git-repository-context.js";
 import { scaffoldGitHubIntegration } from "./github-init.js";
 import { copySchemaFiles, createKbDirectoryStructure, createManifestFile, ensureSymbolsManifestFile, installGitHooks, updateGitIgnore, } from "./init-helpers.js";
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
-async function initNextAction() {
+/**
+ * A hooks directory may be auto-managed only when Git resolves it inside this
+ * repository: under the common Git directory (the default hooks location) or
+ * under the current worktree root (repository-local relative core.hooksPath).
+ * Anything else — global configs, other repositories, external directories —
+ * must never receive auto-installed hooks.
+ * implements REQ-git-hook-effective-install
+ */
+function isRepositoryManagedHooksDir(context) {
+    const realpathAllowMissingTail = (candidate) => {
+        let current = path.resolve(candidate);
+        const missingSegments = [];
+        while (true) {
+            try {
+                return path.resolve(realpathSync.native(current), ...missingSegments);
+            }
+            catch (error) {
+                const code = error.code;
+                if (code !== "ENOENT" && code !== "ENOTDIR")
+                    return null;
+                // A dangling symlink cannot be canonicalized. Do not treat it as an
+                // ordinary missing suffix: mkdir could follow it into an external
+                // directory when Git's hooks path is created.
+                try {
+                    if (lstatSync(current).isSymbolicLink())
+                        return null;
+                }
+                catch (statError) {
+                    const statCode = statError.code;
+                    if (statCode !== "ENOENT" && statCode !== "ENOTDIR")
+                        return null;
+                }
+                const parent = path.dirname(current);
+                if (parent === current)
+                    return null;
+                missingSegments.unshift(path.basename(current));
+                current = parent;
+            }
+        }
+    };
+    const isWithin = (candidate, root) => {
+        const relative = path.relative(root, candidate);
+        return (relative === "" ||
+            (relative !== ".." &&
+                !relative.startsWith(`..${path.sep}`) &&
+                !path.isAbsolute(relative)));
+    };
+    const hooksDir = realpathAllowMissingTail(context.effectiveHooksDir);
+    const commonGitDir = realpathAllowMissingTail(context.commonGitDir);
+    const worktreeRoot = realpathAllowMissingTail(context.worktreeRoot);
+    if (!hooksDir || !commonGitDir || !worktreeRoot)
+        return false;
+    // The default hooks dir in a linked worktree is shared under the common Git
+    // directory, which can sit outside the current worktree root.
+    return isWithin(hooksDir, commonGitDir) || isWithin(hooksDir, worktreeRoot);
+}
+async function initNextAction(projectRoot) {
     const sourceFiles = await nodeFilesystem.glob([
         ".kb/requirements/**/*.md",
         ".kb/scenarios/**/*.md",
@@ -35,9 +92,9 @@ async function initNextAction() {
         ".kb/flags/**/*.md",
         ".kb/events/**/*.md",
         ".kb/facts/**/*.md",
-    ], { cwd: process.cwd() });
+    ], { cwd: projectRoot });
     const activation = await classifyActivation({
-        workspaceRoot: process.cwd(),
+        workspaceRoot: projectRoot,
         signal: new AbortController().signal,
         clock: () => new Date(),
         fs: nodeFilesystem,
@@ -67,12 +124,35 @@ export async function initCommand(options) {
         console.error("Error: --badge-only requires --github. The recommended integration is `kibi init --github` (badge + full report).");
         return { exitCode: 1 };
     }
-    const kbDir = path.join(process.cwd(), ".kb");
+    // Resolve the repository once and derive every project path from Git's own
+    // answer, so init works from linked worktrees (.git is a file there) and
+    // from subdirectories (cwd has no .kb or .git at all). Bare repositories,
+    // unreadable contexts, and operational Git refusals are rejected before any
+    // workspace write — even when KIBI_BRANCH makes a standalone fallback
+    // available for genuinely non-repository directories.
+    // implements REQ-git-hook-effective-install
+    const resolution = resolveGitRepository(process.cwd());
+    if (resolution.status === "git-refused") {
+        console.error(`Error: ${resolution.reason}`);
+        console.error("Kibi cannot verify this directory's Git context; refusing to create workspace state.");
+        return { exitCode: 1 };
+    }
+    if (resolution.status === "unsupported") {
+        console.error(`Error: ${resolution.reason}`);
+        console.error("Kibi requires a working-tree checkout; refusing to create workspace state.");
+        return { exitCode: 1 };
+    }
+    const repoContext = resolution.status === "ok" ? resolution.context : null;
+    const projectRoot = repoContext?.worktreeRoot ?? process.cwd();
+    const kbDir = path.join(projectRoot, ".kb");
     const kbExists = existsSync(kbDir);
-    // Resolve the exact active Git branch. Standalone use must be explicit via
-    // KIBI_BRANCH; there is no implicit default branch.
+    // Resolve the exact active Git branch against the project root (not cwd):
+    // recovery journals, legacy stores, and identity manifests are read from
+    // the same .kb tree init is about to write.
+    // Standalone use must be explicit via KIBI_BRANCH; there is no implicit
+    // default branch.
     let currentBranch;
-    const result = resolveBranchAttachment();
+    const result = resolveBranchAttachment(projectRoot);
     if ("error" in result) {
         const isNonGitError = result.code === "NOT_A_GIT_REPO" || result.code === "GIT_NOT_AVAILABLE";
         console.error("Error: Failed to resolve the active git branch.");
@@ -90,7 +170,7 @@ export async function initCommand(options) {
         if (!kbExists) {
             createKbDirectoryStructure(kbDir, currentBranch);
             createManifestFile(kbDir);
-            updateGitIgnore(process.cwd());
+            updateGitIgnore(projectRoot);
             const schemaSourceDir = path.resolve(__dirname, "..", "..", "schema");
             await copySchemaFiles(kbDir, schemaSourceDir);
         }
@@ -104,14 +184,29 @@ export async function initCommand(options) {
                 createManifestFile(kbDir);
             }
         }
-        ensureSymbolsManifestFile(process.cwd());
+        ensureSymbolsManifestFile(projectRoot);
         if (options.hooks) {
-            const gitDir = path.join(process.cwd(), ".git");
-            if (!existsSync(gitDir)) {
+            if (!repoContext) {
                 console.error("Warning: No git repository found, skipping hooks");
             }
+            else if (!isRepositoryManagedHooksDir(repoContext)) {
+                // core.hooksPath is only the culprit when it is configured; the
+                // default hooks directory can also escape the repository through a
+                // symlink, and blaming a setting the operator never made misleads.
+                const cause = repoContext.hooksPathConfig
+                    ? "core.hooksPath points outside this repository"
+                    : "The Git hooks directory resolves outside this repository (for example through a symlink)";
+                console.error(`Warning: ${cause} (${repoContext.effectiveHooksDir}); refusing to install hooks into unrelated directories. Kibi enforcement stays OFF for this repository until the hooks path is repository-managed.`);
+            }
             else {
-                installGitHooks(gitDir);
+                installGitHooks(repoContext.effectiveHooksDir, {
+                    hooksPathOrigin: repoContext.hooksPathOrigin,
+                });
+                if (repoContext.isLinkedWorktree && !repoContext.hooksPathConfig) {
+                    // Only the default common hooks directory is shared by Git across
+                    // worktrees; a configured hooksPath resolves per checkout.
+                    console.log(`✓ Repository-common hooks directory shared with all worktrees (${repoContext.effectiveHooksDir})`);
+                }
             }
         }
         console.log("\n✓ Kibi initialized. Kibi infrastructure is ready for this repository.");
@@ -119,11 +214,11 @@ export async function initCommand(options) {
         if (kbExists) {
             console.log("  Existing Kibi source knowledge was preserved.");
         }
-        console.log((await initNextAction()).message);
+        console.log((await initNextAction(projectRoot)).message);
         console.log("  Optional diagnostic: run 'kibi doctor' if setup appears degraded.");
         if (options.github === true) {
             scaffoldGitHubIntegration({
-                cwd: process.cwd(),
+                cwd: projectRoot,
                 badgeOnly: options.badgeOnly === true,
             });
         }

package/dist/commands/proof-explain.d.ts

@@ -0,0 +1,10 @@
+export type ProofExplainOptions = Readonly<{
+    id?: string;
+    requirement?: string;
+    symbol?: string;
+    json?: boolean;
+}>;
+export declare function proofExplainCommand(options: ProofExplainOptions): Promise<{
+    exitCode: number;
+}>;
+//# sourceMappingURL=proof-explain.d.ts.map

package/dist/commands/proof-explain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-explain.d.ts","sourceRoot":"","sources":["../../src/commands/proof-explain.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC,CAAC;AAGH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,mBAAmB,GAC3B,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAuC/B"}

package/dist/commands/proof-explain.js

@@ -0,0 +1,45 @@
+/*
+ Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ Copyright (C) 2026 Piotr Franczyk
+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU Affero General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+ */
+import { classifyExplainTarget, executeProofExplain, renderProofExplain, } from "../operations/proof/explain.js";
+import { createCliRuntime } from "../runtime/cli-runtime.js";
+// implements REQ-kibi-verification-evidence-contract
+export async function proofExplainCommand(options) {
+    const target = classifyExplainTarget(options.id, {
+        ...(options.requirement === undefined
+            ? {}
+            : { requirement: options.requirement }),
+        ...(options.symbol === undefined ? {} : { symbol: options.symbol }),
+    });
+    const runtime = createCliRuntime();
+    const context = await runtime.open({
+        name: "kibi_proof_explain",
+        effects: [],
+        requiresProlog: true,
+        execute: async () => undefined,
+    }, {});
+    let completed = false;
+    try {
+        const { view } = await executeProofExplain(target, context);
+        if (options.json) {
+            process.stdout.write(`${JSON.stringify(view, null, 2)}\n`);
+        }
+        else {
+            process.stdout.write(renderProofExplain(view));
+        }
+        completed = true;
+        await runtime.afterSuccess({ name: "kibi_proof_explain" }, context);
+        return { exitCode: 0 };
+    }
+    finally {
+        await runtime.close(context, completed
+            ? { status: "success", result: 0 }
+            : { status: "error", error: 1 });
+    }
+}

package/dist/commands/proof-impact.d.ts

@@ -0,0 +1,7 @@
+export type ProofImpactOptions = Readonly<{
+    json?: boolean;
+}>;
+export declare function proofImpactCommand(options: ProofImpactOptions): Promise<{
+    exitCode: number;
+}>;
+//# sourceMappingURL=proof-impact.d.ts.map

package/dist/commands/proof-impact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-impact.d.ts","sourceRoot":"","sources":["../../src/commands/proof-impact.ts"],"names":[],"mappings":"AAiBA,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC,CAAC;AAGH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA8B/B"}

package/dist/commands/proof-impact.js

@@ -0,0 +1,39 @@
+/*
+ Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ Copyright (C) 2026 Piotr Franczyk
+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU Affero General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+ */
+import { executeProofImpact, proofImpactExitCode, } from "../operations/proof/impact.js";
+import { createCliRuntime } from "../runtime/cli-runtime.js";
+// implements REQ-kibi-verification-evidence-contract
+export async function proofImpactCommand(options) {
+    const runtime = createCliRuntime();
+    const context = await runtime.open({
+        name: "kibi_proof_impact",
+        effects: [],
+        requiresProlog: true,
+        execute: async () => undefined,
+    }, {});
+    let completed = false;
+    try {
+        const { result, text } = await executeProofImpact(context);
+        if (options.json) {
+            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+        }
+        else {
+            process.stdout.write(text);
+        }
+        completed = true;
+        await runtime.afterSuccess({ name: "kibi_proof_impact" }, context);
+        return { exitCode: proofImpactExitCode(result) };
+    }
+    finally {
+        await runtime.close(context, completed
+            ? { status: "success", result: 0 }
+            : { status: "error", error: 1 });
+    }
+}

package/dist/commands/proof-migrate-legacy.js

@@ -17,7 +17,7 @@
  */
 import { executeMigrateLegacyReceipts } from "../operations/proof/migrate-legacy-receipts.js";
 import { createCliRuntime } from "../runtime/cli-runtime.js";
-// implements REQ-kibi-proof-evidence-protocol
+// implements REQ-kibi-verification-evidence-contract
 export async function proofMigrateLegacyCommand(options) {
     const runtime = createCliRuntime();
     const context = await runtime.open({

package/dist/commands/proof-prune.js

@@ -17,7 +17,7 @@
  */
 import { executePruneReceipts } from "../operations/proof/prune-receipts.js";
 import { createCliRuntime } from "../runtime/cli-runtime.js";
-// implements REQ-kibi-proof-evidence-protocol
+// implements REQ-kibi-verification-evidence-contract
 export async function proofPruneCommand(options) {
     const keepRaw = options.keep ?? "1";
     const keep = Number.parseInt(keepRaw, 10);

package/dist/commands/prove.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prove.d.ts","sourceRoot":"","sources":["../../src/commands/prove.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AASjE,OAAO,KAAK,EAEV,gBAAgB,EACjB,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAYnF,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC,CAAC;AAGH,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,WAAW,CAAC,EAAE,OAAO,kBAAkB,CAAC;CACzC,CAAC,CAAC;AAEH,KAAK,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE5C;;;;;GAKG;AAEH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,GAC1D,MAAM,CAiBR;AAED;;;;GAIG;AAEH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,QAAQ,EAAE,MAAM,GACf,GAAG,CAAC,MAAM,CAAC,CAUb;AAQD,wBAAgB,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAEjD;AAkCD,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,gBAAgB,EAC7B,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,UAAU,EAAE,MAAM,GACjB,MAAM,CAAC,UAAU,CAWnB;AA4KD,wBAAsB,YAAY,CAChC,OAAO,EAAE,mBAAmB,EAC5B,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAgL/B"}
+{"version":3,"file":"prove.d.ts","sourceRoot":"","sources":["../../src/commands/prove.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AASjE,OAAO,KAAK,EAEV,gBAAgB,EACjB,MAAM,uCAAuC,CAAC;AAE/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAYnF,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC,CAAC;AAGH,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,WAAW,CAAC,EAAE,OAAO,kBAAkB,CAAC;CACzC,CAAC,CAAC;AAEH,KAAK,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE5C;;;;;GAKG;AAEH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,GAC1D,MAAM,CAiBR;AAED;;;;GAIG;AAEH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,QAAQ,EAAE,MAAM,GACf,GAAG,CAAC,MAAM,CAAC,CAUb;AAQD,wBAAgB,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAEjD;AAkCD,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,gBAAgB,EAC7B,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,UAAU,EAAE,MAAM,GACjB,MAAM,CAAC,UAAU,CAWnB;AAsKD,wBAAsB,YAAY,CAChC,OAAO,EAAE,mBAAmB,EAC5B,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAgL/B"}

package/dist/commands/prove.js

@@ -16,7 +16,7 @@ import { createCliRuntime } from "../runtime/cli-runtime.js";
  * Snapshot-relevant changes come first (receipt-only and ignored edits do
  * not affect the hash), and the list is capped to keep the error readable.
  */
-// implements REQ-kibi-proof-evidence-protocol
+// implements REQ-kibi-verification-evidence-contract
 export function describeWorkspaceDrift(snapshot) {
     if (!snapshot.available)
         return " (workspace snapshot unavailable)";
@@ -40,7 +40,7 @@ export function describeWorkspaceDrift(snapshot) {
  * trimmed, non-empty ids. Empty selectors yield an empty set; blank items
  * fail fast instead of silently narrowing the selection.
  */
-// implements REQ-kibi-proof-evidence-protocol
+// implements REQ-kibi-verification-evidence-contract
 export function parseIntegrationSelector(value, flagName) {
     if (value === undefined || value.trim() === "")
         return new Set();
@@ -84,7 +84,7 @@ async function runChild(commandArgv, cwd, env) {
         child.once("close", (code) => resolve(code ?? 1));
     });
 }
-// implements REQ-kibi-proof-evidence-protocol
+// implements REQ-kibi-verification-evidence-contract
 export function commandEnvironment(integration, commandArgv, snapshot, workspaceRoot, testIds, outputPath) {
     return {
         ...process.env,
@@ -151,33 +151,25 @@ function markAggregateFailure(results) {
     return results.map((result) => ({ ...result, outcome: "failed" }));
 }
 async function selectTests(context, options) {
-    // Paginated: loading every test entity with full props in one query can
-    // exceed the Prolog output buffer once receipt histories grow.
-    const loadAll = async () => {
-        const pageSize = 25;
-        const all = [];
-        for (let offset = 0;; offset += pageSize) {
-            const page = await loadEntities(context.prolog, {
-                type: "test",
-                limit: pageSize,
-                offset,
-            });
-            all.push(...page);
-            if (page.length < pageSize)
-                return all;
-        }
-    };
+    // Contract plus bindings only. Receipt histories are loaded again at ingest
+    // and blow the Prolog output buffer when selected up front. JUnit and TAP
+    // conversion needs the bindings before that reload.
+    const loadAll = async () => loadEntities(context.prolog, {
+        type: "test",
+        projection: "proof_contract",
+    });
     let candidates = [];
     if (options.testId) {
         const found = await loadEntities(context.prolog, {
             id: options.testId,
             type: "test",
+            projection: "proof_contract",
         });
         candidates = found.map(withId);
     }
     else if (options.requirement) {
         const requirementId = options.requirement;
-        const scenarioResult = await context.prolog?.query(`findall([S,T], (kb_relationship(specified_by, '${requirementId}', S), (kb_relationship(verified_by, S, T) ; kb_relationship(validates, T, S)), kb_entity(T, test, _)), Rows)`);
+        const scenarioResult = await context.prolog?.query(`findall([S,T], (kb_relationship(specified_by, '${requirementId}', S), (kb_relationship(verified_by, S, T) ; kb_relationship(validates, T, S))), Rows)`);
         const rowsRaw = scenarioResult?.success
             ? scenarioResult.bindings.Rows
             : undefined;
@@ -189,7 +181,7 @@ async function selectTests(context, options) {
                     ids.add(test.trim());
             }
         }
-        const directResult = await context.prolog?.query(`findall(T, (kb_relationship(validates, T, '${requirementId}'), kb_entity(T, test, _)), Rows)`);
+        const directResult = await context.prolog?.query(`findall(T, kb_relationship(validates, T, '${requirementId}'), Rows)`);
         const directRaw = directResult?.success
             ? directResult.bindings.Rows
             : undefined;
@@ -240,7 +232,7 @@ function summarize(result) {
         parts.push(`unchanged ${result.unchanged}`);
     return parts.join(", ");
 }
-// implements REQ-kibi-proof-evidence-protocol
+// implements REQ-kibi-verification-evidence-contract
 export async function proveCommand(options, deps = {}) {
     const workspaceRoot = options.workspaceRoot ?? process.cwd();
     const ingestProof = deps.ingestProof ?? executeIngestProof;

package/dist/commands/report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/commands/report.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,KAAK,kBAAkB,EAExB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,gBAAgB,EAEtB,MAAM,yBAAyB,CAAC;AAIjC,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEH,KAAK,cAAc,GAAG,QAAQ,CAAC;IAC7B,YAAY,EAAE,kBAAkB,CAAC;IACjC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,YAAY,CAAC,EAAE,CACb,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,KAAK,EAAE,MAAM,KACV,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B,CAAC,CAAC;AA4HH,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBhE;AAeD,wBAAsB,aAAa,CACjC,OAAO,EAAE,aAAa,EACtB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAyEjB"}
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/commands/report.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,KAAK,kBAAkB,EAExB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,gBAAgB,EAEtB,MAAM,yBAAyB,CAAC;AAGjC,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEH,KAAK,cAAc,GAAG,QAAQ,CAAC;IAC7B,YAAY,EAAE,kBAAkB,CAAC;IACjC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,YAAY,CAAC,EAAE,CACb,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,KAAK,EAAE,MAAM,KACV,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B,CAAC,CAAC;AA+HH,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgChE;AAeD,wBAAsB,aAAa,CACjC,OAAO,EAAE,aAAa,EACtB,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAyEjB"}

package/dist/commands/report.js

@@ -7,7 +7,6 @@ import { coverageSpec } from "../public/operations/specs/reporting.js";
 import { KIBI_BRAND, renderKibiBadge } from "../report/brand.js";
 import { renderHtmlReport, } from "../report/html-report.js";
 import { resolveReportRepository, } from "../report/repository.js";
-import { createCliRuntime } from "../runtime/cli-runtime.js";
 import { listGitRemotes } from "./github-init.js";
 function gitCommitSha(cwd) {
     try {
@@ -79,6 +78,9 @@ async function executeCoverageInContext(context, tags, limit) {
     };
 }
 async function loadCoverage(tags, limit) {
+    // Lazy-load the CLI runtime so coverage suites that inject loadCoverage do
+    // not pull the engine/plugin graph into every reportCommand import.
+    const { createCliRuntime } = await import("../runtime/cli-runtime.js");
     const runtime = createCliRuntime();
     const runtimeSpec = coverageSpec;
     const context = await runtime.open(runtimeSpec);
@@ -118,8 +120,21 @@ export async function openReport(filePath) {
             detached: true,
             stdio: "ignore",
         });
-        child.once("error", reject);
+        const timer = setTimeout(() => {
+            try {
+                child.unref();
+            }
+            catch {
+                // Best-effort unref if the child never spawned.
+            }
+            reject(new Error(`Timed out opening report via ${command}`));
+        }, 5_000);
+        child.once("error", (error) => {
+            clearTimeout(timer);
+            reject(error);
+        });
         child.once("spawn", () => {
+            clearTimeout(timer);
             child.unref();
             resolve();
         });

package/dist/commands/sync/cache.d.ts

@@ -21,6 +21,8 @@ export type SyncCache = {
     seenAt: Record<string, string>;
     semanticHashes: Record<string, string>;
     semanticContracts: Record<string, boolean>;
+    /** Compiler contract that produced the cached compilation; see below. */
+    compilerFingerprint?: string;
 };
 /**
  * v2: cache identities are workspace-root relative instead of process-cwd
@@ -30,6 +32,20 @@ export type SyncCache = {
  */
 export declare const SYNC_CACHE_VERSION = 2;
 export declare const SYNC_CACHE_TTL_MS: number;
+/**
+ * Identity of the entity property contract this CLI compiles against. Sync
+ * skips unchanged sources by content hash, so a store compiled by a CLI with a
+ * different contract (an older build that drops properties it does not know)
+ * would otherwise keep that lossy compilation forever. A cache stamped with a
+ * different fingerprint is discarded, which re-imports every source once.
+ */
+export declare const SYNC_COMPILER_FINGERPRINT: string;
+/**
+ * Stale reason for a branch store whose last compilation used a different
+ * compiler contract than the running CLI. Status reports it so a lossy store is
+ * visible before the next sync repairs it.
+ */
+export declare function compilerFingerprintReason(storePath: string, deps?: Partial<SyncCacheDeps>): Record<string, unknown> | null;
 export declare function toCacheKey(workspaceRoot: string, filePath: string): string;
 export declare function hashFile(workspaceRoot: string, filePath: string, deps?: Partial<SyncCacheDeps>): string;
 /** Deterministically hash a JSON-compatible compiler payload. */
@@ -41,7 +57,10 @@ export declare function hashNormalized(value: unknown): string;
  * source hash even though the authored YAML bytes stay identical.
  */
 export declare function hashManifestWithCoordinates(workspaceRoot: string, manifestPath: string, coordinatesPath: string | null, deps?: Partial<SyncCacheDeps>): string;
-export declare function readSyncCache(cachePath: string, deps?: Partial<SyncCacheDeps>): SyncCache;
+export declare function readSyncCache(cachePath: string, deps?: Partial<SyncCacheDeps>, options?: {
+    /** Discard a cache produced under a different compiler contract. */
+    readonly compilerFingerprint?: string;
+}): SyncCache;
 export declare function writeSyncCache(cachePath: string, cache: SyncCache, deps?: Partial<SyncCacheDeps>): void;
 export declare function copySyncCache(livePath: string, stagingPath: string, deps?: Partial<SyncCacheDeps>): void;
 export {};

package/dist/commands/sync/cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/cache.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAI7E,UAAU,aAAa;IACrB,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,SAAS,EAAE,OAAO,SAAS,CAAC;IAC5B,YAAY,EAAE,OAAO,YAAY,CAAC;IAClC,aAAa,EAAE,OAAO,aAAa,CAAC;CACrC;AAaD,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,sEAAsE;IACtE,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,kEAAkE;IAClE,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,iBAAiB,QAA2B,CAAC;AAE1D,wBAAgB,UAAU,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAM1E;AAED,wBAAgB,QAAQ,CAEtB,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC5B,MAAM,CAIR;AAED,iEAAiE;AACjE,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAerD;AAED;;;;;GAKG;AAEH,wBAAgB,2BAA2B,CACzC,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,MAAM,GAAG,IAAI,EAC9B,IAAI,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC5B,MAAM,CA4FR;AAED,wBAAgB,aAAa,CAE3B,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC5B,SAAS,CAuDX;AAED,wBAAgB,cAAc,CAE5B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,SAAS,EAChB,IAAI,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC5B,IAAI,CAaN;AAED,wBAAgB,aAAa,CAE3B,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC5B,IAAI,CASN"}
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/cache.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAO7E,UAAU,aAAa;IACrB,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,SAAS,EAAE,OAAO,SAAS,CAAC;IAC5B,YAAY,EAAE,OAAO,YAAY,CAAC;IAClC,aAAa,EAAE,OAAO,aAAa,CAAC;CACrC;AAaD,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,sEAAsE;IACtE,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3C,kEAAkE;IAClE,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,yEAAyE;IACzE,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,iBAAiB,QAA2B,CAAC;AAE1D;;;;;;GAMG;AAEH,eAAO,MAAM,yBAAyB,QAEtB,CAAC;AAEjB;;;;GAIG;AAEH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC5B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAyBhC;AAED,wBAAgB,UAAU,CAAC,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAM1E;AAED,wBAAgB,QAAQ,CAEtB,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC5B,MAAM,CAIR;AAED,iEAAiE;AACjE,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAerD;AAED;;;;;GAKG;AAEH,wBAAgB,2BAA2B,CACzC,aAAa,EAAE,MAAM,EACrB,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,MAAM,GAAG,IAAI,EAC9B,IAAI,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC5B,MAAM,CA4FR;AAED,wBAAgB,aAAa,CAE3B,SAAS,EAAE,MAAM,EACjB,IAAI,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,EAC7B,OAAO,GAAE;IACP,oEAAoE;IACpE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAClC,GACL,SAAS,CA8DX;AAED,wBAAgB,cAAc,CAE5B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,SAAS,EAChB,IAAI,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC5B,IAAI,CAaN;AAED,wBAAgB,aAAa,CAE3B,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,GAC5B,IAAI,CASN"}

package/dist/commands/sync/cache.js

@@ -19,6 +19,9 @@ import { createHash } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import * as path from "node:path";
 import { load as parseYAML } from "js-yaml";
+import entitySchema from "../../schemas/entity.schema.json" with {
+    type: "json"
+};
 function resolveDeps(overrides) {
     return {
         createHash,
@@ -37,6 +40,47 @@ function resolveDeps(overrides) {
  */
 export const SYNC_CACHE_VERSION = 2;
 export const SYNC_CACHE_TTL_MS = 30 * 24 * 60 * 60 * 1000;
+/**
+ * Identity of the entity property contract this CLI compiles against. Sync
+ * skips unchanged sources by content hash, so a store compiled by a CLI with a
+ * different contract (an older build that drops properties it does not know)
+ * would otherwise keep that lossy compilation forever. A cache stamped with a
+ * different fingerprint is discarded, which re-imports every source once.
+ */
+// implements REQ-cli-canonical-runtime
+export const SYNC_COMPILER_FINGERPRINT = createHash("sha256")
+    .update(JSON.stringify(entitySchema))
+    .digest("hex");
+/**
+ * Stale reason for a branch store whose last compilation used a different
+ * compiler contract than the running CLI. Status reports it so a lossy store is
+ * visible before the next sync repairs it.
+ */
+// implements REQ-cli-canonical-runtime
+export function compilerFingerprintReason(storePath, deps) {
+    const resolved = resolveDeps(deps);
+    const cachePath = path.join(storePath, "sync-cache.json");
+    if (!resolved.existsSync(cachePath))
+        return null;
+    let recorded;
+    try {
+        recorded = JSON.parse(resolved.readFileSync(cachePath, "utf8")).compilerFingerprint;
+    }
+    catch {
+        return null;
+    }
+    if (recorded === SYNC_COMPILER_FINGERPRINT)
+        return null;
+    return {
+        code: "compiler_changed",
+        path: cachePath,
+        entityIds: [],
+        detail: typeof recorded === "string"
+            ? "The branch KB was compiled by a Kibi CLI with a different entity property contract, so unchanged sources may lack properties this CLI keeps. The next kibi sync re-imports every source."
+            : "The branch KB was compiled by a Kibi CLI that did not record its entity property contract, so unchanged sources may lack properties this CLI keeps. The next kibi sync re-imports every source.",
+        remediation: { command_argv: ["kibi", "sync"], applyRequired: false },
+    };
+}
 export function toCacheKey(workspaceRoot, filePath) {
     const root = path.resolve(workspaceRoot);
     const target = path.isAbsolute(filePath)
@@ -165,7 +209,7 @@ export function hashManifestWithCoordinates(workspaceRoot, manifestPath, coordin
 }
 export function readSyncCache(
 // implements REQ-003
-cachePath, deps) {
+cachePath, deps, options = {}) {
     const resolved = resolveDeps(deps);
     if (!resolved.existsSync(cachePath)) {
         return {
@@ -178,7 +222,9 @@ cachePath, deps) {
     }
     try {
         const parsed = JSON.parse(resolved.readFileSync(cachePath, "utf8"));
-        if (parsed.version !== SYNC_CACHE_VERSION) {
+        if (parsed.version !== SYNC_CACHE_VERSION ||
+            (options.compilerFingerprint !== undefined &&
+                parsed.compilerFingerprint !== options.compilerFingerprint)) {
             return {
                 version: SYNC_CACHE_VERSION,
                 hashes: {},
@@ -206,6 +252,9 @@ cachePath, deps) {
         if (parsed.shardRelationships !== undefined) {
             cache.shardRelationships = parsed.shardRelationships;
         }
+        if (parsed.compilerFingerprint !== undefined) {
+            cache.compilerFingerprint = parsed.compilerFingerprint;
+        }
         return cache;
     }
     catch {

package/dist/commands/sync/discovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/discovery.ts"],"names":[],"mappings":"AAkCA,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IACtC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,+EAA+E;IAC/E,6BAA6B,CAAC,EAAE,OAAO,CAAC;CACzC,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAyFH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAOlD;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAShE;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAUxD;AAED,wBAAgB,mCAAmC,CACjD,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,SAAS,4BAA4B,EAAE,GAChD,IAAI,CA6CN;AAsBD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,MAAM,GAAG,IAAI,CAIf;AAED,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC;IACT,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,4BAA4B,EAAE,4BAA4B,EAAE,CAAC;CAC9D,CAAC,CA+FD"}
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/discovery.ts"],"names":[],"mappings":"AAkCA,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IACtC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,+EAA+E;IAC/E,6BAA6B,CAAC,EAAE,OAAO,CAAC;CACzC,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AA2FH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAOlD;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAShE;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAUxD;AAED,wBAAgB,mCAAmC,CACjD,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,SAAS,4BAA4B,EAAE,GAChD,IAAI,CA6CN;AAsBD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,GAAG,SAAS,GAC1B,MAAM,GAAG,IAAI,CAIf;AAED,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,MAAM,EACX,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC;IACT,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,gBAAgB,EAAE,MAAM,CAAC;IACzB,4BAA4B,EAAE,4BAA4B,EAAE,CAAC;CAC9D,CAAC,CA+FD"}

package/dist/commands/sync/discovery.js

@@ -67,7 +67,7 @@ function pendingSourcePaths(cwd, recoverMissing) {
                         });
                         continue;
                     }
-                    throw new Error(`Pending source is missing: ${relative}`);
+                    throw new Error(`Pending source is missing: ${relative}. If the file was deleted on purpose, run 'kibi branch recover --apply' to rebuild the branch KB from the sources that remain.`);
                 }
                 const actual = createHash("sha256")
                     .update(readFileSync(absolute))

package/dist/commands/sync/manifest.d.ts

@@ -31,6 +31,7 @@ export { COARSE_GRANULARITY_REASONS };
 export declare function isCoarseGranularityAnchor(entry: ManifestSymbolEntry): boolean;
 export declare function refreshManifestCoordinates(manifestPath: string, workspaceRoot: string, deps?: Partial<ManifestDeps> & {
     refreshSymbolCoordinates?: boolean;
+    quiet?: boolean;
 }): Promise<void>;
 export declare function hasAllGeneratedCoordinates(entry: ManifestSymbolEntry): boolean;
 export declare function isEligibleForCoordinateRefresh(sourceFile: string | undefined, workspaceRoot: string, deps?: Partial<ManifestDeps>): boolean;