kibi-cli 2.0.0 → 2.2.0

package/dist/types/relationships.d.ts

@@ -1,5 +1,5 @@
 export interface BaseRelationship {
-    type: "depends_on" | "specified_by" | "verified_by" | "validates" | "implements" | "covered_by" | "executable_for" | "constrained_by" | "constrains" | "requires_property" | "requires_predicate" | "requires_rule" | "guards" | "publishes" | "consumes" | "supersedes" | "relates_to";
+    type: "depends_on" | "specified_by" | "verified_by" | "validates" | "implements" | "covered_by" | "executable_for" | "constrained_by" | "constrains" | "requires_property" | "requires_predicate" | "requires_rule" | "guards" | "publishes" | "consumes" | "supersedes" | "restates" | "relates_to";
     from: string;
     to: string;
     created_at?: string;

package/dist/types/relationships.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"relationships.d.ts","sourceRoot":"","sources":["../../src/types/relationships.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EACA,YAAY,GACZ,cAAc,GACd,aAAa,GACb,WAAW,GACX,YAAY,GACZ,YAAY,GACZ,gBAAgB,GAChB,gBAAgB,GAChB,YAAY,GACZ,mBAAmB,GACnB,oBAAoB,GACpB,eAAe,GACf,QAAQ,GACR,WAAW,GACX,UAAU,GACV,YAAY,GACZ,YAAY,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,eAAe,gBAAgB,CAAC"}
+{"version":3,"file":"relationships.d.ts","sourceRoot":"","sources":["../../src/types/relationships.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EACA,YAAY,GACZ,cAAc,GACd,aAAa,GACb,WAAW,GACX,YAAY,GACZ,YAAY,GACZ,gBAAgB,GAChB,gBAAgB,GAChB,YAAY,GACZ,mBAAmB,GACnB,oBAAoB,GACpB,eAAe,GACf,QAAQ,GACR,WAAW,GACX,UAAU,GACV,YAAY,GACZ,UAAU,GACV,YAAY,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,eAAe,gBAAgB,CAAC"}

package/dist/utils/entity-id-style.d.ts

@@ -0,0 +1,27 @@
+/** Purely numeric entity ID such as `REQ-001` or `ADR-12`. */
+export declare const NUMERIC_ENTITY_ID_PATTERN: RegExp;
+export type EntityIdStyleIssue = Readonly<{
+    code: "numeric_id" | "stem_mismatch";
+    message: string;
+    suggestion: string;
+}>;
+export declare function isNumericEntityId(id: string): boolean;
+/**
+ * Filename stem for an authored Markdown source, or undefined for non-Markdown
+ * sources (symbol manifests, code files, runtime `mcp://` provenance).
+ */
+export declare function markdownSourceStem(sourcePath: string | undefined): string | undefined;
+/**
+ * Style issues for one newly created entity. Callers decide whether the entity
+ * is new; this function never inspects the KB.
+ */
+export declare function entityIdStyleIssues(input: {
+    readonly id: string;
+    readonly sourcePath?: string | undefined;
+}): EntityIdStyleIssue[];
+/** Plain-text warnings for mutation receipts. */
+export declare function entityIdStyleWarnings(input: {
+    readonly id: string;
+    readonly sourcePath?: string | undefined;
+}): string[];
+//# sourceMappingURL=entity-id-style.d.ts.map

package/dist/utils/entity-id-style.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-id-style.d.ts","sourceRoot":"","sources":["../../src/utils/entity-id-style.ts"],"names":[],"mappings":"AAiCA,8DAA8D;AAE9D,eAAO,MAAM,yBAAyB,QAAiB,CAAC;AAGxD,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,IAAI,EAAE,YAAY,GAAG,eAAe,CAAC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC,CAAC;AAGH,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;GAGG;AAEH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,MAAM,GAAG,SAAS,CAOpB;AAED;;;GAGG;AAEH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C,GAAG,kBAAkB,EAAE,CAoBvB;AAED,iDAAiD;AAEjD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C,GAAG,MAAM,EAAE,CAIX"}

package/dist/utils/entity-id-style.js

@@ -0,0 +1,81 @@
+/*
+ Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ Copyright (C) 2026 Piotr Franczyk
+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU Affero General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU Affero General Public License for more details.
+
+ You should have received a copy of the GNU Affero General Public License
+ along with this program.  If not, see <https://www.gnu.org/licenses/>.
+*/
+/**
+ * Entity naming style (`entity-id-style`).
+ *
+ * Entities are named by what they govern (`REQ-cli-gc`), never by "the next
+ * number". The compiled KB cannot tell a legacy numbered entity from a new one
+ * (`created_at` is stamped at sync time when frontmatter omits it), so purely
+ * numeric IDs are reported only at creation boundaries: a `kb_upsert` that
+ * creates the entity, and staged added/renamed entity Markdown. Committed
+ * legacy entities such as `REQ-003` are therefore never flagged. The Prolog
+ * half of the rule (`check_entity_id_style/1`) reports filename-stem/`id`
+ * mismatches over the whole KB.
+ */
+import * as path from "node:path";
+/** Purely numeric entity ID such as `REQ-001` or `ADR-12`. */
+// implements REQ-kibi-entity-id-style
+export const NUMERIC_ENTITY_ID_PATTERN = /^[A-Z]+-\d+$/;
+// implements REQ-kibi-entity-id-style
+export function isNumericEntityId(id) {
+    return NUMERIC_ENTITY_ID_PATTERN.test(id.trim());
+}
+/**
+ * Filename stem for an authored Markdown source, or undefined for non-Markdown
+ * sources (symbol manifests, code files, runtime `mcp://` provenance).
+ */
+// implements REQ-kibi-entity-id-style
+export function markdownSourceStem(sourcePath) {
+    if (sourcePath === undefined)
+        return undefined;
+    const normalized = sourcePath.trim().replaceAll("\\", "/");
+    if (!normalized.endsWith(".md") || normalized.includes("://")) {
+        return undefined;
+    }
+    return path.posix.basename(normalized, ".md");
+}
+/**
+ * Style issues for one newly created entity. Callers decide whether the entity
+ * is new; this function never inspects the KB.
+ */
+// implements REQ-kibi-entity-id-style
+export function entityIdStyleIssues(input) {
+    const id = input.id.trim();
+    const issues = [];
+    if (isNumericEntityId(id)) {
+        issues.push({
+            code: "numeric_id",
+            message: `Entity ID ${id} is a sequence number; parallel branches pick the same next number and collide.`,
+            suggestion: "Name the entity by what it governs: <TYPE>-<area>-<behavior> in kebab-case (for example REQ-cli-gc). kb_search the area first and update or supersede an existing entity when one already covers the behavior.",
+        });
+    }
+    const stem = markdownSourceStem(input.sourcePath);
+    if (stem !== undefined && stem !== id) {
+        issues.push({
+            code: "stem_mismatch",
+            message: `Entity ID ${id} does not match its filename stem ${stem}.`,
+            suggestion: `Rename the file to ${id}.md or set frontmatter id: ${stem} so the file name and identity stay aligned.`,
+        });
+    }
+    return issues;
+}
+/** Plain-text warnings for mutation receipts. */
+// implements REQ-kibi-entity-id-style
+export function entityIdStyleWarnings(input) {
+    return entityIdStyleIssues(input).map((issue) => `entity-id-style: ${issue.message} ${issue.suggestion}`);
+}

package/dist/utils/git-repository-context.d.ts

@@ -0,0 +1,50 @@
+export interface GitRepositoryContext {
+    /** Root of the current working tree (the worktree, when linked). */
+    worktreeRoot: string;
+    /** Absolute Git directory of the current worktree. */
+    gitDir: string;
+    /** Absolute repository-common Git directory (shared across worktrees). */
+    commonGitDir: string;
+    /** Absolute hooks directory Git will actually execute (honors core.hooksPath). */
+    effectiveHooksDir: string;
+    isLinkedWorktree: boolean;
+    /**
+     * Primary checkout root, only when it can be validated as a real checkout
+     * (`git -C <candidate> rev-parse --show-toplevel` resolves to the
+     * candidate). Null for bare repositories, separate-git-dir layouts, and any
+     * candidate that is not itself a working tree.
+     */
+    primaryWorktreeRoot: string | null;
+    /** Raw core.hooksPath value when configured, else null. */
+    hooksPathConfig: string | null;
+    /** Config origin line (from --show-origin) for the configured hooksPath. */
+    hooksPathOrigin: string | null;
+}
+export type GitRepositoryResolution = {
+    status: "ok";
+    context: GitRepositoryContext;
+} | {
+    status: "not-a-repository";
+} | {
+    status: "git-unavailable";
+} | {
+    status: "git-refused";
+    /** First Git diagnostic (or fs detail) explaining the refusal. */
+    reason: string;
+} | {
+    status: "unsupported";
+    reason: string;
+};
+/**
+ * Resolve the effective Git repository context for `cwd` by asking Git
+ * instead of assuming `<cwd>/.git`. The result distinguishes "no repository"
+ * (callers may fall back to standalone-workspace behavior) from repositories
+ * Kibi must not touch (bare repositories) and directories where Git refused
+ * operationally (dubious ownership, unreadable `.git`, access failures) — the
+ * last must never be mistaken for "no repository", because that would send
+ * callers into standalone workspace writes.
+ *
+ * implements REQ-git-hook-effective-install
+ */
+export declare function resolveGitRepository(cwd?: string): GitRepositoryResolution;
+//# sourceMappingURL=git-repository-context.d.ts.map

package/dist/utils/git-repository-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-repository-context.d.ts","sourceRoot":"","sources":["../../src/utils/git-repository-context.ts"],"names":[],"mappings":"AAsBA,MAAM,WAAW,oBAAoB;IACnC,oEAAoE;IACpE,YAAY,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,YAAY,EAAE,MAAM,CAAC;IACrB,kFAAkF;IAClF,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,OAAO,CAAC;IAC1B;;;;;OAKG;IACH,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,2DAA2D;IAC3D,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,4EAA4E;IAC5E,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC;AAED,MAAM,MAAM,uBAAuB,GAC/B;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,oBAAoB,CAAA;CAAE,GAC/C;IAAE,MAAM,EAAE,kBAAkB,CAAA;CAAE,GAC9B;IAAE,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAC7B;IACE,MAAM,EAAE,aAAa,CAAC;IACtB,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAqH9C;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,GAAE,MAAsB,GAC1B,uBAAuB,CAmJzB"}

package/dist/utils/git-repository-context.js

@@ -0,0 +1,259 @@
+/*
+ Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ Copyright (C) 2026 Piotr Franczyk
+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU Affero General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU Affero General Public License for more details.
+
+ You should have received a copy of the GNU Affero General Public License
+ along with this program.  If not, see <https://www.gnu.org/licenses/>.
+*/
+import { execFileSync } from "node:child_process";
+import { lstatSync } from "node:fs";
+import * as path from "node:path";
+// `git rev-parse --path-format=absolute` requires git 2.31 (2021-03). Older
+// git returns cwd-relative paths for --git-dir/--git-common-dir/--git-path,
+// which are resolved against the caller's cwd below.
+const PATH_FORMAT_MINIMUM = { major: 2, minor: 31 };
+// Git's generic absence answer also covers directories it cannot read (an
+// unreadable `.git` yields the same "not a git repository" fatal). Only an
+// explicit absence diagnostic may classify a directory as standalone.
+const NOT_A_REPOSITORY_RE = /not a (git )?repository/i;
+/**
+ * Environment for diagnostic-parsing Git subprocesses: failure classification
+ * matches English diagnostics, so the child locale is pinned to C while every
+ * other environment value (and Git configuration) is preserved. The parent
+ * process's locale is never mutated.
+ */
+function gitEnv() {
+    return { ...process.env, LC_ALL: "C", LANG: "C" };
+}
+function runGitChecked(cwd, args) {
+    try {
+        return {
+            output: execFileSync("git", args, {
+                cwd,
+                encoding: "utf8",
+                env: gitEnv(),
+                stdio: ["ignore", "pipe", "pipe"],
+                timeout: 10_000,
+                maxBuffer: 1024 * 1024,
+            }).trim(),
+            failure: null,
+        };
+    }
+    catch (error) {
+        const stderr = error.stderr;
+        const text = typeof stderr === "string" ? stderr : stderr?.toString("utf8");
+        const firstLine = text
+            ?.split("\n")
+            .map((line) => line.trim())
+            .find(Boolean) ?? null;
+        return { output: null, failure: firstLine };
+    }
+}
+function runGit(cwd, args) {
+    return runGitChecked(cwd, args).output;
+}
+/**
+ * Decide whether a failed repository probe means the directory genuinely has
+ * no repository (standalone fallback is allowed) or Git refused for an
+ * operational reason (dubious ownership, access, timeouts, anything
+ * unrecognized) where callers must refuse before writing.
+ */
+function classifyGitFailure(failure) {
+    if (failure !== null && NOT_A_REPOSITORY_RE.test(failure)) {
+        return "not-a-repository";
+    }
+    return "refused";
+}
+/**
+ * On Git's absence answer, find the nearest `.git` entry (file, directory, or
+ * symlink) at or above `start`. Git reports the same generic "not a git
+ * repository" fatal for entries it cannot fully read (restricted permissions
+ * on objects/refs/HEAD, ownership checks) as for true absence, so a present
+ * marker means the context is unresolved: callers must conservatively refuse
+ * with the marker instead of treating the directory as standalone. Null means
+ * no marker exists up to the filesystem root: the directory genuinely has no
+ * repository and standalone handling is legitimate.
+ */
+function findRepositoryMarker(start) {
+    let current = path.resolve(start);
+    for (;;) {
+        const entry = path.join(current, ".git");
+        try {
+            lstatSync(entry);
+            return entry;
+        }
+        catch (error) {
+            const code = error.code;
+            if (code === "EACCES" || code === "EPERM") {
+                // The entry cannot even be inspected: treat it as present.
+                return entry;
+            }
+            // ENOENT and friends: no entry at this level; keep walking.
+        }
+        const parent = path.dirname(current);
+        if (parent === current)
+            return null;
+        current = parent;
+    }
+}
+function parseGitVersion(versionOutput) {
+    const match = /^git version (\d+)\.(\d+)(\.\d+)?/.exec(versionOutput);
+    if (!match)
+        return null;
+    return { major: Number(match[1]), minor: Number(match[2]) };
+}
+function resolveAgainstCwd(candidate, cwd) {
+    return path.isAbsolute(candidate) ? candidate : path.resolve(cwd, candidate);
+}
+/**
+ * Resolve the effective Git repository context for `cwd` by asking Git
+ * instead of assuming `<cwd>/.git`. The result distinguishes "no repository"
+ * (callers may fall back to standalone-workspace behavior) from repositories
+ * Kibi must not touch (bare repositories) and directories where Git refused
+ * operationally (dubious ownership, unreadable `.git`, access failures) — the
+ * last must never be mistaken for "no repository", because that would send
+ * callers into standalone workspace writes.
+ *
+ * implements REQ-git-hook-effective-install
+ */
+export function resolveGitRepository(cwd = process.cwd()) {
+    const versionProbe = runGitChecked(cwd, ["--version"]);
+    if (versionProbe.output === null) {
+        const marker = findRepositoryMarker(cwd);
+        if (marker !== null) {
+            return {
+                status: "git-refused",
+                reason: `Git is unavailable, but a .git entry exists at ${marker}; refusing to guess.`,
+            };
+        }
+        return { status: "git-unavailable" };
+    }
+    const toplevel = runGitChecked(cwd, ["rev-parse", "--show-toplevel"]);
+    if (toplevel.output === null) {
+        // A bare repository has no working tree (--show-toplevel fails) but is
+        // still a repository; treat it as unsupported instead of "no repository"
+        // so callers refuse to write workspace state into it.
+        const gitDirProbe = runGitChecked(cwd, ["rev-parse", "--git-dir"]);
+        if (gitDirProbe.output !== null) {
+            return {
+                status: "unsupported",
+                reason: "Bare repository: no working tree to attach Kibi to.",
+            };
+        }
+        if (classifyGitFailure(toplevel.failure) === "not-a-repository") {
+            // Git's absence answer also fires when a `.git` entry exists but some
+            // of its internals (objects, refs, HEAD) are unreadable; conservatively
+            // refuse with the marker instead of a standalone-directory verdict.
+            const marker = findRepositoryMarker(cwd);
+            if (marker !== null) {
+                return {
+                    status: "git-refused",
+                    reason: `Git reported no repository, but a .git entry exists at ${marker} (${toplevel.failure ?? "git produced no diagnostic output"}); refusing to guess.`,
+                };
+            }
+            return { status: "not-a-repository" };
+        }
+        return {
+            status: "git-refused",
+            reason: `Git refused to inspect this directory: ${toplevel.failure ??
+                gitDirProbe.failure ??
+                "git produced no diagnostic output"}`,
+        };
+    }
+    const version = parseGitVersion(versionProbe.output);
+    const absolute = version !== null &&
+        (version.major > PATH_FORMAT_MINIMUM.major ||
+            (version.major === PATH_FORMAT_MINIMUM.major &&
+                version.minor >= PATH_FORMAT_MINIMUM.minor));
+    const formatArgs = absolute ? ["--path-format=absolute"] : [];
+    const gitDirRaw = runGitChecked(cwd, [
+        "rev-parse",
+        ...formatArgs,
+        "--git-dir",
+    ]);
+    const commonGitDirRaw = runGitChecked(cwd, [
+        "rev-parse",
+        ...formatArgs,
+        "--git-common-dir",
+    ]);
+    const hooksDirRaw = runGitChecked(cwd, [
+        "rev-parse",
+        ...formatArgs,
+        "--git-path",
+        "hooks",
+    ]);
+    if (gitDirRaw.output === null ||
+        commonGitDirRaw.output === null ||
+        hooksDirRaw.output === null) {
+        const detail = gitDirRaw.failure ??
+            commonGitDirRaw.failure ??
+            hooksDirRaw.failure ??
+            "git produced no diagnostic output";
+        return {
+            status: "git-refused",
+            reason: `Git refused to report its directory layout for this repository: ${detail}`,
+        };
+    }
+    // Without --path-format the outputs above are relative to cwd (or absolute
+    // for linked-worktree git dirs); normalize everything against cwd.
+    const worktreeRoot = toplevel.output;
+    const gitDir = resolveAgainstCwd(gitDirRaw.output, cwd);
+    const commonGitDir = resolveAgainstCwd(commonGitDirRaw.output, cwd);
+    const effectiveHooksDir = resolveAgainstCwd(hooksDirRaw.output, cwd);
+    const originLine = runGit(cwd, [
+        "config",
+        "--show-origin",
+        "--get",
+        "core.hooksPath",
+    ]);
+    let hooksPathConfig = null;
+    let hooksPathOrigin = null;
+    if (originLine) {
+        const separator = originLine.lastIndexOf("\t");
+        if (separator >= 0) {
+            hooksPathOrigin = originLine.slice(0, separator).trim();
+            hooksPathConfig = originLine.slice(separator + 1).trim();
+        }
+        else {
+            hooksPathConfig = originLine.trim();
+        }
+    }
+    const isLinkedWorktree = gitDir !== commonGitDir;
+    let primaryWorktreeRoot = null;
+    if (path.basename(commonGitDir) === ".git") {
+        const candidate = path.dirname(commonGitDir);
+        // Validate the candidate as a real checkout: a linked worktree of a bare
+        // repository also has commonDir `<bare>/.git`, and dirname of that is the
+        // bare holder directory, not a checkout.
+        const candidateToplevel = runGit(candidate, [
+            "rev-parse",
+            "--show-toplevel",
+        ]);
+        if (candidateToplevel === candidate) {
+            primaryWorktreeRoot = candidate;
+        }
+    }
+    return {
+        status: "ok",
+        context: {
+            worktreeRoot,
+            gitDir,
+            commonGitDir,
+            effectiveHooksDir,
+            isLinkedWorktree,
+            primaryWorktreeRoot,
+            hooksPathConfig,
+            hooksPathOrigin,
+        },
+    };
+}

package/dist/utils/rule-registry.d.ts

@@ -21,6 +21,11 @@ export interface RuleDefinition {
     /** Kibi-owned role of this rule in the enforcement contract. */
     enforcementClass: RuleEnforcementClass;
     category: "coverage" | "integrity" | "lifecycle" | "traceability";
+    /**
+     * Severity for non-canonical findings rendered as quality diagnostics.
+     * Omitted means "warning"; "info" marks purely informational signals.
+     */
+    diagnosticSeverity?: "warning" | "info";
 }
 /** A single KB check violation. */
 export interface Violation {

package/dist/utils/rule-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rule-registry.d.ts","sourceRoot":"","sources":["../../src/utils/rule-registry.ts"],"names":[],"mappings":"AAgCA,MAAM,MAAM,oBAAoB;AAC9B;;;;GAIG;AACD,WAAW;AACb;;;GAGG;GACD,UAAU;AACZ;;;GAGG;GACD,WAAW,CAAC;AAEhB,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,gBAAgB,EAAE,oBAAoB,CAAC;IACvC,QAAQ,EAAE,UAAU,GAAG,WAAW,GAAG,WAAW,GAAG,cAAc,CAAC;CACnE;AAED,mCAAmC;AACnC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC9C;AAED,sEAAsE;AACtE,eAAO,MAAM,KAAK,EAAE,SAAS,cAAc,EAAoB,CAAC;AAIhE;;GAEG;AACH,eAAO,MAAM,UAAU,aAAoC,CAAC;AAE5D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAE1E;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,GACX,oBAAoB,GAAG,SAAS,CAElC;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,gBAAgB,EAAE,oBAAoB,GACrC,OAAO,CAET;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,GAAG,CAAC,MAAM,CAAC,CAM7C;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,GAAG,CAAC,MAAM,CAAC,CAM/C;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;;;;;;GAQG;AAEH,wBAAgB,iBAAiB,CAC/B,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,GACjC,GAAG,CAAC,MAAM,CAAC,CAOb;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK5D"}
+{"version":3,"file":"rule-registry.d.ts","sourceRoot":"","sources":["../../src/utils/rule-registry.ts"],"names":[],"mappings":"AAgCA,MAAM,MAAM,oBAAoB;AAC9B;;;;GAIG;AACD,WAAW;AACb;;;GAGG;GACD,UAAU;AACZ;;;GAGG;GACD,WAAW,CAAC;AAEhB,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,gBAAgB,EAAE,oBAAoB,CAAC;IACvC,QAAQ,EAAE,UAAU,GAAG,WAAW,GAAG,WAAW,GAAG,cAAc,CAAC;IAClE;;;OAGG;IACH,kBAAkB,CAAC,EAAE,SAAS,GAAG,MAAM,CAAC;CACzC;AAED,mCAAmC;AACnC,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC9C;AAED,sEAAsE;AACtE,eAAO,MAAM,KAAK,EAAE,SAAS,cAAc,EAAoB,CAAC;AAIhE;;GAEG;AACH,eAAO,MAAM,UAAU,aAAoC,CAAC;AAE5D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAE1E;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,GACX,oBAAoB,GAAG,SAAS,CAElC;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,gBAAgB,EAAE,oBAAoB,GACrC,OAAO,CAET;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,GAAG,CAAC,MAAM,CAAC,CAM7C;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,GAAG,CAAC,MAAM,CAAC,CAM/C;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;;;;;;GAQG;AAEH,wBAAgB,iBAAiB,CAC/B,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,GACjC,GAAG,CAAC,MAAM,CAAC,CAOb;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK5D"}

package/dist/utils/rule-registry.generated.d.ts

@@ -93,5 +93,47 @@ export declare const GENERATED_RULES: readonly [{
     readonly description: "Every inventoried assertive proposition is modeled or explicitly classified";
     readonly enforcementClass: "migration";
     readonly category: "integrity";
+}, {
+    readonly name: "proof-contract-symbols";
+    readonly description: "Detect unresolved required_proofs.symbol_id values, type-shape required proofs, and proof_bindings.source_file disagreement with the named symbol sourceFile";
+    readonly enforcementClass: "advisory";
+    readonly category: "integrity";
+}, {
+    readonly name: "entity-id-style";
+    readonly description: "Entity IDs name the governed behavior and match their filename stem; new purely numeric IDs are reported at creation boundaries";
+    readonly enforcementClass: "advisory";
+    readonly category: "lifecycle";
+}, {
+    readonly name: "domain-redundancy";
+    readonly description: "Two current requirements must not ground the identical logical term or share a ground fact unless linked by supersedes or restates";
+    readonly enforcementClass: "advisory";
+    readonly category: "integrity";
+}, {
+    readonly name: "domain-implication";
+    readonly description: "Informational: one requirement's numeric bound strictly implies another requirement's bound on the same subject and property";
+    readonly enforcementClass: "advisory";
+    readonly category: "integrity";
+    readonly diagnosticSeverity: "info";
+}, {
+    readonly name: "subject-key-identity";
+    readonly description: "Subject keys must name a shared component, not be derived from a requirement ID";
+    readonly enforcementClass: "advisory";
+    readonly category: "integrity";
+}, {
+    readonly name: "subject-key-shape";
+    readonly description: "Subject keys follow dotted component.aspect[.sub] with lowercase snake segments";
+    readonly enforcementClass: "advisory";
+    readonly category: "integrity";
+}, {
+    readonly name: "ontology-quality";
+    readonly description: "Informational: predicate schemas whose argument values mostly occur in only one fact are carrying prose instead of a shared vocabulary";
+    readonly enforcementClass: "advisory";
+    readonly category: "integrity";
+    readonly diagnosticSeverity: "info";
+}, {
+    readonly name: "predicate-schema-conformance";
+    readonly description: "Predicate facts match a predicate_schema (project-local, or the built-in catalog in the default namespace) and use its declared argument constants";
+    readonly enforcementClass: "advisory";
+    readonly category: "integrity";
 }];
 //# sourceMappingURL=rule-registry.generated.d.ts.map

package/dist/utils/rule-registry.generated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rule-registry.generated.d.ts","sourceRoot":"","sources":["../../src/utils/rule-registry.generated.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmIlB,CAAC"}
+{"version":3,"file":"rule-registry.generated.d.ts","sourceRoot":"","sources":["../../src/utils/rule-registry.generated.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6LlB,CAAC"}

package/dist/utils/rule-registry.generated.js

@@ -122,4 +122,54 @@ export const GENERATED_RULES = [
         enforcementClass: "migration",
         category: "integrity",
     },
+    {
+        name: "proof-contract-symbols",
+        description: "Detect unresolved required_proofs.symbol_id values, type-shape required proofs, and proof_bindings.source_file disagreement with the named symbol sourceFile",
+        enforcementClass: "advisory",
+        category: "integrity",
+    },
+    {
+        name: "entity-id-style",
+        description: "Entity IDs name the governed behavior and match their filename stem; new purely numeric IDs are reported at creation boundaries",
+        enforcementClass: "advisory",
+        category: "lifecycle",
+    },
+    {
+        name: "domain-redundancy",
+        description: "Two current requirements must not ground the identical logical term or share a ground fact unless linked by supersedes or restates",
+        enforcementClass: "advisory",
+        category: "integrity",
+    },
+    {
+        name: "domain-implication",
+        description: "Informational: one requirement's numeric bound strictly implies another requirement's bound on the same subject and property",
+        enforcementClass: "advisory",
+        category: "integrity",
+        diagnosticSeverity: "info",
+    },
+    {
+        name: "subject-key-identity",
+        description: "Subject keys must name a shared component, not be derived from a requirement ID",
+        enforcementClass: "advisory",
+        category: "integrity",
+    },
+    {
+        name: "subject-key-shape",
+        description: "Subject keys follow dotted component.aspect[.sub] with lowercase snake segments",
+        enforcementClass: "advisory",
+        category: "integrity",
+    },
+    {
+        name: "ontology-quality",
+        description: "Informational: predicate schemas whose argument values mostly occur in only one fact are carrying prose instead of a shared vocabulary",
+        enforcementClass: "advisory",
+        category: "integrity",
+        diagnosticSeverity: "info",
+    },
+    {
+        name: "predicate-schema-conformance",
+        description: "Predicate facts match a predicate_schema (project-local, or the built-in catalog in the default namespace) and use its declared argument constants",
+        enforcementClass: "advisory",
+        category: "integrity",
+    },
 ];

package/dist/utils/strict-modeling.d.ts

@@ -52,6 +52,13 @@ interface ObservationWriteSet {
 }
 export type StrictWriteSet = StrictRequirementWriteSet | ObservationWriteSet;
 export declare function normalizeSubjectKey(value: string): string;
+/**
+ * Subject-key convention checked by `subject-key-shape`: dotted
+ * component.aspect[.sub] with lowercase snake segments. Mirrors
+ * valid_subject_key/1 in packages/core/src/semantic_quality.pl.
+ */
+export declare const SUBJECT_KEY_CONVENTION: RegExp;
+export declare function isConventionalSubjectKey(value: string): boolean;
 export declare function normalizePropertyKey(value: string): string;
 export declare function buildStableRequirementIds(claim: SemanticClaim): StableRequirementIds;
 export declare function buildStrictWriteSet(input: StrictModelInput): StrictWriteSet;

package/dist/utils/strict-modeling.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"strict-modeling.d.ts","sourceRoot":"","sources":["../../src/utils/strict-modeling.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAKlE,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,UAAU,CAAC;IAC7D,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,KAAK,gBAAgB,GAAG,OAAO,CAC7B,IAAI,CAAC,UAAU,EAAE,YAAY,GAAG,YAAY,CAAC,GAAG,UAAU,CAC3D,GAAG;IACF,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,WAAW,UAAU,CACzB,KAAK,SAAS,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,EAC7C,WAAW,SAAS,gBAAgB,GAAG,gBAAgB;IAEvD,IAAI,EAAE,KAAK,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,WAAW,CAAC;CACzB;AAED,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,gBAAgB,EAChB,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,QAAQ,GAAG,YAAY,CACjD,CAAC;AAEF,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,yBAAyB;IACjC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACjC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,QAAQ,EAAE,IAAI,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,mBAAmB;IAC3B,eAAe,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,QAAQ,EAAE,KAAK,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GAAG,yBAAyB,GAAG,mBAAmB,CAAC;AAE7E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiBzD;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAe1D;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,aAAa,GACnB,oBAAoB,CAwBtB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,cAAc,CAsH3E;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,aAAa,CAAC,gBAAgB,CAAC,GACtC,cAAc,EAAE,CAkBlB;AAiDD,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,MAAM,EAAE,MAAM,GACb,MAAM,CAMR"}
+{"version":3,"file":"strict-modeling.d.ts","sourceRoot":"","sources":["../../src/utils/strict-modeling.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAKlE,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,UAAU,CAAC;IAC7D,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,KAAK,gBAAgB,GAAG,OAAO,CAC7B,IAAI,CAAC,UAAU,EAAE,YAAY,GAAG,YAAY,CAAC,GAAG,UAAU,CAC3D,GAAG;IACF,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,WAAW,UAAU,CACzB,KAAK,SAAS,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,EAC7C,WAAW,SAAS,gBAAgB,GAAG,gBAAgB;IAEvD,IAAI,EAAE,KAAK,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,WAAW,CAAC;CACzB;AAED,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,gBAAgB,EAChB,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,QAAQ,GAAG,YAAY,CACjD,CAAC;AAEF,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,yBAAyB;IACjC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACjC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,QAAQ,EAAE,IAAI,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,mBAAmB;IAC3B,eAAe,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,QAAQ,EAAE,KAAK,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GAAG,yBAAyB,GAAG,mBAAmB,CAAC;AAE7E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiBzD;AAED;;;;GAIG;AAEH,eAAO,MAAM,sBAAsB,QACoC,CAAC;AAGxE,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAe1D;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,aAAa,GACnB,oBAAoB,CAwBtB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,cAAc,CAsH3E;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,aAAa,CAAC,gBAAgB,CAAC,GACtC,cAAc,EAAE,CAkBlB;AAiDD,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,MAAM,EAAE,MAAM,GACb,MAAM,CAMR"}

package/dist/utils/strict-modeling.js

@@ -33,6 +33,17 @@ export function normalizeSubjectKey(value) {
     }
     return normalized;
 }
+/**
+ * Subject-key convention checked by `subject-key-shape`: dotted
+ * component.aspect[.sub] with lowercase snake segments. Mirrors
+ * valid_subject_key/1 in packages/core/src/semantic_quality.pl.
+ */
+// implements REQ-kibi-subject-vocabulary
+export const SUBJECT_KEY_CONVENTION = /^[a-z][a-z0-9]*(?:_[a-z0-9]+)*(?:\.[a-z][a-z0-9]*(?:_[a-z0-9]+)*)+$/;
+// implements REQ-kibi-subject-vocabulary
+export function isConventionalSubjectKey(value) {
+    return SUBJECT_KEY_CONVENTION.test(value);
+}
 export function normalizePropertyKey(value) {
     const normalized = value
         .trim()