kibi-cli 2.15.0 → 2.16.0

package/dist/cli-register-proof.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-register-proof.d.ts","sourceRoot":"","sources":["../src/cli-register-proof.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIzC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAsL3D"}
+{"version":3,"file":"cli-register-proof.d.ts","sourceRoot":"","sources":["../src/cli-register-proof.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIzC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA6L3D"}

package/dist/cli-register-proof.js

@@ -39,10 +39,11 @@ export function registerProofCommand(program) {
         .description("Inspect proof integration and maintain proof evidence");
     proof
         .command("inspect")
-        .description("Detect test infrastructure and recommend the strongest available proof integration")
+        .description("Detect test infrastructure, propose a proof integration and return the reviewed plan that writes .kb/proof/integrations.json")
+        .option("--update <id>", "Plan adding or replacing this integration in an existing .kb/proof/integrations.json")
         .option("--json", "Emit structured JSON", false)
         .action(withExitCode(async (options) => {
-        const result = await (await import("./proof/inspect.js")).inspectProofEnvironment(process.cwd());
+        const result = await (await import("./proof/inspect.js")).inspectProofEnvironment(process.cwd(), options.update === undefined ? {} : { update: options.update });
         if (options.json) {
             process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
             return undefined;
@@ -136,5 +137,18 @@ function renderInspection(result) {
         for (const entry of inspection.missing)
             lines.push(`  - ${entry}`);
     }
+    if (inspection.proposedIntegration) {
+        const proposed = inspection.proposedIntegration;
+        lines.push("");
+        lines.push(`Proposed integration: ${proposed.id} (${proposed.producer}: ${proposed.command.join(" ")})`);
+    }
+    if (inspection.integrationPlan) {
+        const plan = inspection.integrationPlan;
+        lines.push(`Integration plan: ${plan.planHash.slice(0, 12)} (actions: ${plan.actions.map((action) => action.id).join(", ")}); rerun with --json for the plan to pass to kb_apply_plan.`);
+    }
+    else if (inspection.integrationPlanReason) {
+        lines.push("");
+        lines.push(`Integration plan: none. ${inspection.integrationPlanReason}`);
+    }
     return `${lines.join("\n")}\n`;
 }

package/dist/commands/check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/commands/check.ts"],"names":[],"mappings":"AAqCA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AA8E7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAE3D,YAAY,EAAE,SAAS,EAAE,CAAC;AAE1B,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1B;AA8gBD,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,CAAC,EACtC,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,EAC5B,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GAC3B,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAMpB;AAGD,wBAAsB,YAAY,CAChC,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA0nB/B;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAoDtB;AAID,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,MAAM,EAAE,CAAC,CAgBnB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,aAAa,EACrB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,EAAE,CAAC,CAiBnB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAkEtB;AAID,wBAAsB,aAAa,CACjC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAmGtB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,SAAS,EAAE,CAAC,CAyCtB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAgDtB;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CA0BtB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqBtB;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqBtB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqBtB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CA+BtB"}
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/commands/check.ts"],"names":[],"mappings":"AAqCA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AA8E7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAE3D,YAAY,EAAE,SAAS,EAAE,CAAC;AAE1B,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1B;AA8gBD,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,CAAC,EACtC,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,EAC5B,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GAC3B,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAMpB;AAGD,wBAAsB,YAAY,CAChC,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA8nB/B;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAoDtB;AAID,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,MAAM,EAAE,CAAC,CAgBnB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,aAAa,EACrB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,EAAE,CAAC,CAiBnB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAkEtB;AAID,wBAAsB,aAAa,CACjC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAmGtB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,SAAS,EAAE,CAAC,CAyCtB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAgDtB;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CA0BtB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqBtB;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqBtB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqBtB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CA+BtB"}

package/dist/commands/check.js

@@ -885,7 +885,11 @@ export async function checkCommand(options) {
                 invalidateCache: () => activeProlog.invalidateCache(),
                 save: () => activeProlog.query("kb_save"),
             },
-        }, { collectFullQualityDiagnosticsForExplicitRules: true });
+        }, {
+            collectFullQualityDiagnosticsForExplicitRules: true,
+            // The engine reads the branch store; an explicit --kb-path does not.
+            branchStoreAttached: options.kbPath === undefined,
+        });
         const violations = result.structuredContent?.violations ?? [];
         const qualityDiagnostics = result.structuredContent?.qualityDiagnostics ?? [];
         if (options.format === "json") {

package/dist/commands/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAiFA,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3B;AAGD,wBAAsB,aAAa,CACjC,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAoG/B;AAED,wBAAsB,4BAA4B,CAChD,IAAI,GAAE,MAAM,OAAO,CAAC;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAE,CACT,GACxC,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;;;;;;;;;;;;;;;;MAkE3C;AAkGD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGzE;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,MAAM,GAAG,SAAS,CAepB"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AA2FA,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3B;AAGD,wBAAsB,aAAa,CACjC,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAmH/B;AAED,wBAAsB,4BAA4B,CAChD,IAAI,GAAE,MAAM,OAAO,CAAC;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAE,CACT,GACxC,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;;;;;;;;;;;;;;;;MAkE3C;AAkGD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGzE;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,MAAM,GAAG,SAAS,CAepB"}

package/dist/commands/doctor.js

@@ -25,7 +25,8 @@ import { kibiPackageVersions } from "../package-versions.js";
 import { describeConfiguredCapabilityPlugins, readProjectKibiConfig, } from "../plugins/project-config.js";
 import { SwiplResolutionError, inspectSwiplBundle, probeRequiredLibraries, resolveSwipl, } from "../prolog/swipl-resolver.js";
 import { buildMigrationPlan, migrationAction, } from "../public/operations/migration-plan.js";
-import { resolveReadBranchAttachment } from "../utils/branch-resolver.js";
+import { resolveBranchAttachment, resolveReadBranchAttachment, } from "../utils/branch-resolver.js";
+import { branchStoreCompilation, inspectBranchStore, uncompiledBranchStoreReason, } from "../utils/branch-store.js";
 import { resolveGitRepository, } from "../utils/git-repository-context.js";
 import { readKbManifestStatus } from "../utils/kb-manifest.js";
 import { hasManagedHooks, outdatedManagedHooks } from "./init-helpers.js";
@@ -68,6 +69,10 @@ export async function doctorCommand(options = {}) {
             name: "Git repository",
             check: checkGitRepository,
         },
+        {
+            name: "Branch store",
+            check: checkBranchStore,
+        },
         {
             name: "Git hooks",
             check: checkGitHooks,
@@ -98,6 +103,7 @@ export async function doctorCommand(options = {}) {
         results.push({ name, ...(await check()) });
     }
     const allPassed = results.every((result) => result.passed);
+    const warnings = results.filter((result) => result.passed && result.warning === true).length;
     const runtime = await runtimeProvenance();
     const packageActions = await packageMigrationActions(runtime);
     const migrationPlan = buildMigrationPlan({
@@ -113,6 +119,7 @@ export async function doctorCommand(options = {}) {
         console.log(JSON.stringify({
             version: "kibi.doctor.v1",
             passed: allPassed,
+            warnings,
             runtime,
             checks: results,
             migrationPlan,
@@ -121,12 +128,17 @@ export async function doctorCommand(options = {}) {
     }
     console.log("Kibi Environment Diagnostics\n");
     for (const result of results) {
-        const status = result.passed ? "✓" : "✗";
+        const warned = result.passed && result.warning === true;
+        const status = !result.passed ? "✗" : warned ? "!" : "✓";
         console.log(`${status} ${result.name}: ${result.message}`);
-        if (!result.passed && result.remediation)
+        if ((!result.passed || warned) && result.remediation)
             console.log(`  → ${result.remediation}`);
     }
     console.log();
+    if (allPassed && warnings > 0) {
+        console.log(`All required checks passed, with ${warnings} warning(s) above (marked !).`);
+        return { exitCode: 0 };
+    }
     if (allPassed) {
         console.log("All checks passed! Your environment is ready.");
         return { exitCode: 0 };
@@ -644,6 +656,68 @@ function checkGitRepository() {
         };
     }
 }
+/**
+ * The current branch's KB store: it must exist and hold a compilation
+ * (journal sequence above 0) when .kb/ has authored sources. Kibi stores are
+ * per branch and never copied, so a branch created without the post-checkout
+ * hook starts empty until `kibi sync`.
+ */
+// implements REQ-cli-doctor
+function checkBranchStore() {
+    const workspaceRoot = process.cwd();
+    let attachment;
+    try {
+        attachment = resolveBranchAttachment(workspaceRoot);
+    }
+    catch (error) {
+        attachment = {
+            error: error instanceof Error ? error.message : String(error),
+        };
+    }
+    if ("error" in attachment) {
+        return {
+            passed: true,
+            message: `Not checked: no current Git branch (${attachment.error})`,
+        };
+    }
+    const branch = attachment.kbBranch;
+    const store = inspectBranchStore(workspaceRoot, branch);
+    const details = { branch, path: store.path, state: store.state };
+    if (store.state === "incomplete" || store.state === "unreadable") {
+        return {
+            passed: false,
+            message: `Store for ${branch} is ${store.state}: ${store.detail ?? store.errorCode ?? "requires recovery"}`,
+            remediation: "Run: kibi branch recover, then kibi branch recover --apply",
+            details,
+        };
+    }
+    const compilation = branchStoreCompilation(store);
+    if (compilation.compiled) {
+        return {
+            passed: true,
+            message: `Compiled for ${branch}${compilation.generation ? ` (${compilation.generation})` : ""}`,
+            details: { ...details, generation: compilation.generation },
+        };
+    }
+    const reason = uncompiledBranchStoreReason(workspaceRoot, store, branch);
+    if (reason === null) {
+        return {
+            passed: true,
+            message: `Not compiled yet for ${branch}; .kb/ holds no authored sources`,
+            details,
+        };
+    }
+    return {
+        passed: false,
+        message: String(reason.detail),
+        remediation: "Run: kibi sync",
+        details: {
+            ...details,
+            generation: compilation.generation,
+            authoredSources: reason.authoredSources,
+        },
+    };
+}
 // Hook health must be diagnosed against the hooks directory Git actually
 // executes (resolved via git rev-parse --git-path hooks, honoring
 // core.hooksPath and linked worktrees), not against <cwd>/.git/hooks.
@@ -720,10 +794,15 @@ function checkGitHooks() {
     const postMergeExists = existsSync(postMergePath);
     // An existing pre-commit is hard enforcement; the companions being absent
     // must not downgrade the summary to "optional".
+    // implements REQ-cli-doctor
+    // Without the hooks kibi init installs, a new branch starts with an empty
+    // store (post-checkout compiles it) and commits skip kibi check --staged.
     if (!postCheckoutExists && !postMergeExists && !existsSync(preCommitPath)) {
         return {
             passed: true,
-            message: `Not installed (optional)${hooksPathSuffix()}`,
+            warning: true,
+            message: `Not installed: a new branch is not compiled on checkout and commits skip 'kibi check --staged'${hooksPathSuffix()}`,
+            remediation: "Run: kibi init (installs the git hooks)",
         };
     }
     if (postCheckoutExists && postMergeExists) {

package/dist/commands/prove.js

@@ -279,7 +279,7 @@ export async function proveCommand(options, deps = {}) {
         for (const [integrationId, tests] of groups) {
             const integration = resolveIntegration(integrations.integrations, integrationId);
             if (!integration) {
-                failures.push(`integration '${integrationId}' (required by ${tests.map((t) => t.id).join(", ")}) is not configured in .kb/proof/integrations.json`);
+                failures.push(`integration '${integrationId}' (required by ${tests.map((t) => t.id).join(", ")}) is not configured in .kb/proof/integrations.json; plan it with kibi proof inspect --update ${integrationId} --json and apply the plan with kb_apply_plan`);
                 continue;
             }
             const commandArgv = [...integration.command];

package/dist/operations/modeling/model-requirement.d.ts

@@ -1,8 +1,13 @@
+import { type StrictWriteSet } from "../../public/check-types.js";
 import type { OperationContext } from "../../public/operations/runtime-types.js";
 import { strictWriteSetToApplyPlan, writeSetPrimaryEntityId } from "./requirement-applyplan.js";
 import { estimateNormativeSignalConfidence, extractRequirementClaim } from "./requirement-modeler.js";
 import type { ModelRequirementArgs, ModelRequirementResult } from "./requirement-types.js";
 export type { ModelRequirementArgs, ModelRequirementResult, } from "./requirement-types.js";
+export declare function reuseExistingSubject(writeSet: StrictWriteSet, existingFactId: string): {
+    writeSet: StrictWriteSet;
+    replacedSubjectId: string | null;
+};
 export { estimateNormativeSignalConfidence, extractRequirementClaim, strictWriteSetToApplyPlan, writeSetPrimaryEntityId, };
 export declare function annotateModelRequirementStep(step: Record<string, unknown>, context: {
     claimKey: string;

package/dist/operations/modeling/model-requirement.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model-requirement.d.ts","sourceRoot":"","sources":["../../../src/operations/modeling/model-requirement.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAgBjF,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iCAAiC,EACjC,uBAAuB,EACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EACV,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,wBAAwB,CAAC;AAUhC,YAAY,EACV,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAkNhC,OAAO,EACL,iCAAiC,EACjC,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,GACxB,CAAC;AAIF,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE;IACP,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,GACA,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA+CzB;AAwOD,wBAAsB,4BAA4B,CAChD,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAIxB;AAED,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,oBAAoB,EAC1B,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,sBAAsB,CAAC,CAgHjC;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,oBAAoB,EAC1B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,sBAAsB,CAAC,CAajC"}
+{"version":3,"file":"model-requirement.d.ts","sourceRoot":"","sources":["../../../src/operations/modeling/model-requirement.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,cAAc,EAEpB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAiBjF,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,iCAAiC,EACjC,uBAAuB,EACxB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EACV,oBAAoB,EACpB,sBAAsB,EACvB,MAAM,wBAAwB,CAAC;AAUhC,YAAY,EACV,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAuBhC,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,cAAc,EACxB,cAAc,EAAE,MAAM,GACrB;IAAE,QAAQ,EAAE,cAAc,CAAC;IAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAuBhE;AA2KD,OAAO,EACL,iCAAiC,EACjC,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,GACxB,CAAC;AAIF,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,OAAO,EAAE;IACP,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB,GACA,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA+CzB;AAwOD,wBAAsB,4BAA4B,CAChD,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAIxB;AAED,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,oBAAoB,EAC1B,aAAa,EAAE,MAAM,EACrB,OAAO,CAAC,EAAE,gBAAgB,GACzB,OAAO,CAAC,sBAAsB,CAAC,CAwHjC;AAED,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,oBAAoB,EAC1B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,sBAAsB,CAAC,CAajC"}

package/dist/operations/modeling/model-requirement.js

@@ -1,6 +1,6 @@
 import { buildStrictWriteSet, } from "../../public/check-types.js";
 import { readKbManifestStatus } from "../../utils/kb-manifest.js";
-import { isConventionalSubjectKey, normalizeSubjectKey, } from "../../utils/strict-modeling.js";
+import { factSourcePath, isConventionalSubjectKey, normalizeSubjectKey, } from "../../utils/strict-modeling.js";
 import { modeledClaimRole, normalizeSemanticClause, semanticClaimKey, } from "../semantic-advisor/clauses.js";
 import { detectConditionalRule } from "../semantic-advisor/conditional-rules.js";
 import { advisorPropositionRole } from "../semantic-advisor/proposition-role.js";
@@ -11,7 +11,10 @@ import { estimateNormativeSignalConfidence, extractRequirementClaim, } from "./r
 import { normalizeOptionalString, normalizeSourceFiles, } from "./requirement-utils.js";
 import { alignRequirementVocabulary, } from "./vocabulary-alignment.js";
 const NEW_SUBJECT_REVIEW_SCORE = 0.3;
-function reuseExistingSubject(writeSet, existingFactId) {
+// implements REQ-kibi-subject-vocabulary
+// The write set describes the existing subject fact, so its id and its source
+// both name that fact; the minted fact (and its file) is never created.
+export function reuseExistingSubject(writeSet, existingFactId) {
     if (!writeSet.isStrict)
         return { writeSet, replacedSubjectId: null };
     const replacedSubjectId = writeSet.subjectFact.id;
@@ -22,7 +25,11 @@ function reuseExistingSubject(writeSet, existingFactId) {
             subjectFact: {
                 ...writeSet.subjectFact,
                 id: existingFactId,
-                properties: { ...writeSet.subjectFact.properties, id: existingFactId },
+                properties: {
+                    ...writeSet.subjectFact.properties,
+                    id: existingFactId,
+                    source: factSourcePath(existingFactId),
+                },
             },
             relationships: writeSet.relationships.map((relationship) => relationship.type === "constrains"
                 ? { ...relationship, to: existingFactId }
@@ -57,10 +64,11 @@ function possibleDuplicateObservation(claimKey, statement, source, candidates) {
  * when the keys match. Otherwise the plan explicitly declares a new subject.
  */
 // implements REQ-kibi-subject-vocabulary
-async function applyVocabularyAlignment(context, extracted, claimKey) {
+async function applyVocabularyAlignment(context, extracted, claimKey, requirementId) {
     const initial = buildStrictWriteSet({
         claim: extracted.claim,
         statement: extracted.statement,
+        ...(requirementId !== undefined ? { requirementId } : {}),
     });
     const unchanged = {
         writeSet: initial,
@@ -90,6 +98,7 @@ async function applyVocabularyAlignment(context, extracted, claimKey) {
             const rebuilt = buildStrictWriteSet({
                 claim: { ...extracted.claim, subjectKey: subject.subjectKey },
                 statement: extracted.statement,
+                ...(requirementId !== undefined ? { requirementId } : {}),
             });
             ({ writeSet, replacedSubjectId } = reuseExistingSubject(rebuilt, subject.existingFactId));
         }
@@ -431,7 +440,10 @@ export async function handleKbModelRequirement(_prolog, args, workspaceRoot, con
     if (conditional?.kind === "unparsed")
         return unresolvedConditionalResult(args, extracted, conditional.reason, workspaceRoot);
     const claimKey = semanticClaimKey(extracted.statement);
-    const aligned = await applyVocabularyAlignment(context, extracted, claimKey);
+    // implements REQ-kibi-subject-vocabulary
+    // A caller-named requirement keeps its id: the strict write set updates it
+    // instead of minting REQ-AUTO-<hash>.
+    const aligned = await applyVocabularyAlignment(context, extracted, claimKey, normalizeOptionalString(args.requirementId));
     const writeSet = aligned.writeSet;
     const logicClaims = Array.from(new Set([...(args.existingLogicClaims ?? []), claimKey]));
     const plan = aligned.adjustPlan(strictWriteSetToApplyPlan(writeSet));

package/dist/operations/modeling/predicate-applyplan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"predicate-applyplan.d.ts","sourceRoot":"","sources":["../../../src/operations/modeling/predicate-applyplan.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAEV,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,0BAA0B,EAC1B,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAQ9B,wBAAgB,eAAe,CAC7B,MAAM,EAAE,wBAAwB,EAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,gBAAgB,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,EACvD,YAAY,CAAC,EAAE,QAAQ,GAAG,MAAM,EAChC,WAAW,CAAC,EAAE;IACZ,WAAW,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IACtC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,wBAAwB,CAAC;IAC3C,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC,GACA,mBAAmB,CAgKrB;AAGD,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,mBAAmB,EAC/B,IAAI,EAAE,qBAAqB,GAC1B,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA0ChC;AAGD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,SAAS,CAAC,EAAE,MAAM,EAClB,mBAAmB,GAAE,SAAS,MAAM,EAAO,GAC1C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAuBhC;AAoBD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,qBAAqB,GAC1B,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAwBhC;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,0BAA0B,CAoE5B"}
+{"version":3,"file":"predicate-applyplan.d.ts","sourceRoot":"","sources":["../../../src/operations/modeling/predicate-applyplan.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAEV,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,0BAA0B,EAC1B,qBAAqB,EACtB,MAAM,sBAAsB,CAAC;AAQ9B,wBAAgB,eAAe,CAC7B,MAAM,EAAE,wBAAwB,EAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,gBAAgB,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAM,EACvD,YAAY,CAAC,EAAE,QAAQ,GAAG,MAAM,EAChC,WAAW,CAAC,EAAE;IACZ,WAAW,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IACtC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,wBAAwB,CAAC;IAC3C,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC,GACA,mBAAmB,CA2KrB;AAGD,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,mBAAmB,EAC/B,IAAI,EAAE,qBAAqB,GAC1B,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA0ChC;AAGD,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,SAAS,CAAC,EAAE,MAAM,EAClB,mBAAmB,GAAE,SAAS,MAAM,EAAO,GAC1C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAuBhC;AAoBD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,qBAAqB,GAC1B,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAwBhC;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,GACd,0BAA0B,CAoE5B"}

package/dist/operations/modeling/predicate-applyplan.js

@@ -74,17 +74,27 @@ export function buildSuggestion(schema, text, subject, score, argumentBindings =
                     constrainedSubjects,
                 }),
     ]));
-    // The subject the planned predicate fact is about, when the requirement
-    // constrains subjects: the `subject` argument's value, or for a schema
-    // without one the reviewed subject, recorded as the fact's subject_key.
-    const subjectKey = constrainedSubjects.length === 0
+    // The subjects the planned predicate must be about: those the requirement
+    // constrains, or, for a requirement that is not written yet or constrains
+    // nothing, the explicit subjectHint. The hint is then the subject fact the
+    // agent is about to link, so the planned fact carries its subject_key and
+    // kb_check pairs the two once the requirement is written.
+    const plannedSubjects = constrainedSubjects.length > 0
+        ? constrainedSubjects
+        : explicitSubject
+            ? [subject]
+            : [];
+    // The subject the planned predicate fact is about: the `subject`
+    // argument's value, or for a schema without one the reviewed subject,
+    // recorded as the fact's subject_key.
+    const subjectKey = plannedSubjects.length === 0
         ? null
         : subjectArgument >= 0
             ? (predicateArgs[subjectArgument] ?? null)
             : (reviewedSubject ?? null);
-    const subjectPairing = constrainedSubjects.length === 0
+    const subjectPairing = plannedSubjects.length === 0
         ? "not_required"
-        : subjectKey !== null && constrainedSubjects.includes(subjectKey)
+        : subjectKey !== null && plannedSubjects.includes(subjectKey)
             ? "paired"
             : "unpaired";
     const bindingProvenance = aggregateBindingProvenance(Object.values(bindingProvenanceByArgument));

package/dist/operations/planning/apply-plan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apply-plan.d.ts","sourceRoot":"","sources":["../../../src/operations/planning/apply-plan.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAEV,gBAAgB,EAGjB,MAAM,0CAA0C,CAAC;AAQlD,OAAO,EACL,KAAK,eAAe,EAIrB,MAAM,uBAAuB,CAAC;AA+D/B,OAAO,KAAK,EACV,aAAa,EACb,eAAe,EAGhB,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,aAAa,EACb,eAAe,EACf,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAG/B,eAAO,MAAM,yBAAyB,EAAG,2BAAoC,CAAC;AA6G9E,wBAAgB,iCAAiC,CAC/C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAChB,IAAI,CAMN;AAED,wBAAgB,mCAAmC,CACjD,SAAS,EAAE,SAAS;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,EAAE,EACnE,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,GAC3B,IAAI,CAaN;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,SAAS,eAAe,EAAE,EACnC,SAAS,cAAoB,GAC5B,eAAe,EAAE,CA2CnB;AA8zBD;;;;;;GAMG;AAEH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CAiCf;AAyqDD,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC;IACT,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,iBAAiB,EAAE,eAAe,CAAC;CACpC,CAAC,CAkDD"}
+{"version":3,"file":"apply-plan.d.ts","sourceRoot":"","sources":["../../../src/operations/planning/apply-plan.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAEV,gBAAgB,EAGjB,MAAM,0CAA0C,CAAC;AASlD,OAAO,EACL,KAAK,eAAe,EAIrB,MAAM,uBAAuB,CAAC;AA+D/B,OAAO,KAAK,EACV,aAAa,EACb,eAAe,EAGhB,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,aAAa,EACb,eAAe,EACf,kBAAkB,GACnB,MAAM,uBAAuB,CAAC;AAG/B,eAAO,MAAM,yBAAyB,EAAG,2BAAoC,CAAC;AA6G9E,wBAAgB,iCAAiC,CAC/C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAChB,IAAI,CAMN;AAED,wBAAgB,mCAAmC,CACjD,SAAS,EAAE,SAAS;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,EAAE,EACnE,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,GAC3B,IAAI,CAaN;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,SAAS,eAAe,EAAE,EACnC,SAAS,cAAoB,GAC5B,eAAe,EAAE,CA2CnB;AA8zBD;;;;;;GAMG;AAEH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CAiCf;AAyqDD,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,aAAa,EACnB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC;IACT,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,iBAAiB,EAAE,eAAe,CAAC;CACpC,CAAC,CAkDD"}

package/dist/operations/planning/apply-plan.js

@@ -4,12 +4,14 @@ import { OperationError } from "../../cli-errors.js";
 import { branchEnsureCommand, branchMigrateCommand, branchRecoverCommand, } from "../../commands/branch.js";
 import { migrateCommand } from "../../commands/migrate.js";
 import { syncCommand } from "../../commands/sync.js";
+import { PROOF_INTEGRATION_CONFIGURE, applyProofIntegrationAction, } from "../../proof/integration-plan.js";
 import { loadEntities } from "../../public/operations/discovery-entities.js";
 import { executeStatus } from "../../public/operations/discovery-executors.js";
 import { PREDICATE_SCHEMA_ALIGNMENT_CODE, migrationPlanHash, } from "../../public/operations/migration-plan.js";
 import { readMigrationConfigStatus } from "../../public/operations/migration-plan.js";
 import { readWorkspaceSnapshot } from "../../public/operations/workspace-snapshot.js";
 import { computeShardPath, renderShardWithRelationship, } from "../../relationships/shards.js";
+import { BRANCH_STORE_NOT_COMPILED } from "../../utils/branch-store.js";
 import { canonicalFilesystemPath } from "../../utils/canonical-path.js";
 import { isDerivedKbPath } from "../../utils/kb-paths.js";
 import { bootstrapEmptyKbSnapshotId, bootstrapPlanHash, } from "../bootstrap/types.js";
@@ -2278,6 +2280,15 @@ async function applyMigrationAction(action, context) {
         case "missing_exact_branch_store":
             await branchEnsureCommand({ workspaceRoot: context.workspaceRoot });
             return;
+        // implements REQ-cli-status-pre-first-sync
+        case BRANCH_STORE_NOT_COMPILED: {
+            const result = await syncCommand({
+                workspaceRoot: context.workspaceRoot,
+            });
+            if (!result.success)
+                throw new Error("Compiling the branch store (kibi sync) did not complete successfully.");
+            return;
+        }
         case "damaged_exact_branch_store":
             await branchRecoverCommand({
                 apply: true,
@@ -2307,6 +2318,10 @@ async function applyMigrationAction(action, context) {
         case PREDICATE_SCHEMA_ALIGNMENT_CODE:
             await applyPredicateSchemaAlignment(action, context);
             return;
+        // implements REQ-kibi-verification-evidence-contract
+        case PROOF_INTEGRATION_CONFIGURE:
+            applyProofIntegrationAction(action, context.workspaceRoot);
+            return;
         default:
             if (SCHEMA6_AUTOMATIC_CODES.has(action.code)) {
                 await applySchema6MigrationAction(action, context);

package/dist/proof/inspect.d.ts

@@ -1,3 +1,5 @@
+import type { MigrationPlan } from "../public/operations/migration-plan.js";
+import { type ProposedIntegration } from "./integration-plan.js";
 export type ProofInspection = Readonly<{
     languages: readonly string[];
     buildSystems: readonly string[];
@@ -6,7 +8,22 @@ export type ProofInspection = Readonly<{
     currentIntegration: string | null;
     recommendation: string;
     missing: readonly string[];
+    /** The integration Kibi proposes for the detected runner, if any. */
+    proposedIntegration: ProposedIntegration["integration"] | null;
+    /** What a proof-bearing test's proof_contract names for that integration. */
+    contractDefaults: ProposedIntegration["contractDefaults"] | null;
+    /**
+     * Hash-bound kibi.migration-plan.v2 that writes the integrations file;
+     * review it, then apply it with kb_apply_plan / `kibi apply-plan`.
+     */
+    integrationPlan: MigrationPlan | null;
+    /** Why there is no plan, or what applying it does. */
+    integrationPlanReason: string;
+}>;
+export type ProofInspectionOptions = Readonly<{
+    /** Plan a replacement of this existing integration id. */
+    update?: string;
 }>;
 export declare function directoryEntriesMatch(directory: string, regex: RegExp): boolean;
-export declare function inspectProofEnvironment(root: string): ProofInspection;
+export declare function inspectProofEnvironment(root: string, options?: ProofInspectionOptions): ProofInspection;
 //# sourceMappingURL=inspect.d.ts.map

package/dist/proof/inspect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inspect.d.ts","sourceRoot":"","sources":["../../src/proof/inspect.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B,CAAC,CAAC;AAwIH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAMT;AA2BD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAoFrE"}
+{"version":3,"file":"inspect.d.ts","sourceRoot":"","sources":["../../src/proof/inspect.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EACL,KAAK,mBAAmB,EAEzB,MAAM,uBAAuB,CAAC;AAM/B,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IACrC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7B,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,qEAAqE;IACrE,mBAAmB,EAAE,mBAAmB,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;IAC/D,6EAA6E;IAC7E,gBAAgB,EAAE,mBAAmB,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC;IACjE;;;OAGG;IACH,eAAe,EAAE,aAAa,GAAG,IAAI,CAAC;IACtC,sDAAsD;IACtD,qBAAqB,EAAE,MAAM,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAwIH,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ,OAAO,CAMT;AA2BD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,sBAA2B,GACnC,eAAe,CAgGjB"}

package/dist/proof/inspect.js

@@ -1,6 +1,7 @@
 import { existsSync, readFileSync, readdirSync } from "node:fs";
 import path from "node:path";
-import { loadProofIntegrations } from "./integrations.js";
+import { buildProofIntegrationPlan, } from "./integration-plan.js";
+import { PROOF_INTEGRATIONS_PATH, loadProofIntegrations, } from "./integrations.js";
 /**
  * Declarative detection manifests. Deterministic CLI logic consumes these;
  * agents consume the inspection output and never reinvent runner discovery.
@@ -149,7 +150,7 @@ function directoryExists(root, relative) {
     }
 }
 // implements REQ-kibi-verification-evidence-contract
-export function inspectProofEnvironment(root) {
+export function inspectProofEnvironment(root, options = {}) {
     const languages = new Set();
     const buildSystems = new Set();
     const runners = [];
@@ -207,17 +208,21 @@ export function inspectProofEnvironment(root) {
     const currentIntegration = integrations.available
         ? integrations.integrations.integrations.map((entry) => entry.id).join(", ")
         : null;
+    const planned = buildProofIntegrationPlan(root, options);
+    const applyHint = "review integrationPlan, then apply it with kb_apply_plan (or `kibi apply-plan --input -`) passing plan, approvedPlanHash = plan.planHash and approvedActionIds";
     let recommendation;
-    if (!integrations.available) {
-        if (runners.length === 0) {
+    if (planned.plan !== null && options.update !== undefined) {
+        recommendation = `To replace integration '${options.update}', ${applyHint}.`;
+    }
+    else if (!integrations.available) {
+        if (planned.plan === null) {
             recommendation =
                 "No test harness detected. Proof integration is deferred until the first proof-bearing test introduces one; command proof can prove any command.";
-            missing.push(".kb/proof/integrations.json (created by bootstrap)");
+            missing.push(`${PROOF_INTEGRATIONS_PATH} (written by applying the plan from kibi proof inspect --json)`);
         }
         else {
-            recommendation =
-                "Run bootstrap to configure proof integrations: native producers or standard-format adapters for detected runners, or command proof as the universal fallback.";
-            missing.push(".kb/proof/integrations.json (created by bootstrap)");
+            recommendation = `Kibi proposes a command integration for the detected runner. To configure it, ${applyHint}. Proof-bearing tests then name it in proof_contract.integration and kibi prove runs it.`;
+            missing.push(`${PROOF_INTEGRATIONS_PATH} (written by applying integrationPlan)`);
         }
     }
     else {
@@ -232,5 +237,9 @@ export function inspectProofEnvironment(root) {
         currentIntegration,
         recommendation,
         missing,
+        proposedIntegration: planned.proposal?.integration ?? null,
+        contractDefaults: planned.proposal?.contractDefaults ?? null,
+        integrationPlan: planned.plan,
+        integrationPlanReason: planned.reason,
     };
 }

package/dist/proof/integration-plan.d.ts

@@ -0,0 +1,57 @@
+import { type MigrationAction, type MigrationPlan } from "../public/operations/migration-plan.js";
+import { PROOF_CONTRACT_VERSION } from "../public/proof-protocol.js";
+import { type ProofIntegration } from "./integrations.js";
+/** Migration action code of a reviewed proof integration write. */
+export declare const PROOF_INTEGRATION_CONFIGURE = "proof_integration_configure";
+export type ProposedIntegration = Readonly<{
+    integration: ProofIntegration;
+    /** The runner the proposal was derived from (for the review summary). */
+    runner: string;
+    /** What a proof-bearing test's proof_contract names for this integration. */
+    contractDefaults: Readonly<{
+        version: typeof PROOF_CONTRACT_VERSION;
+        integration: string;
+        required_proofs: ReadonlyArray<{
+            symbol_id: string;
+            target: string;
+        }>;
+        success_policy: "all_required_first_attempt";
+    }>;
+}>;
+export type ProofIntegrationPlanResult = Readonly<{
+    /** The hash-bound plan to review and apply with kb_apply_plan, if any. */
+    plan: MigrationPlan | null;
+    proposal: ProposedIntegration | null;
+    /** Why no plan was produced, or what applying it does. */
+    reason: string;
+}>;
+/**
+ * The command-producer integration Kibi proposes for the repository's test
+ * runner: the package.json `test` script when there is one (it is what the
+ * project already runs), otherwise the first detected runner. A command
+ * integration is the universal floor: Kibi judges the run by its exit code
+ * (aggregate-run provenance), so it works for every runner without a
+ * reporter; a native producer can replace it later through an update plan.
+ */
+export declare function proposeProofIntegration(root: string, overrideId?: string): ProposedIntegration | null;
+/**
+ * Build the hash-bound `kibi.migration-plan.v2` that writes
+ * `.kb/proof/integrations.json` through Kibi. Without `update`, a plan is
+ * produced only while the file does not exist; with `update` it adds or
+ * replaces the named integration of an existing, valid file. The plan carries the file's
+ * current hash and the hashes of the files the proposal was derived from;
+ * `kb_apply_plan` refuses it once either changed.
+ */
+export declare function buildProofIntegrationPlan(root: string, options?: Readonly<{
+    update?: string;
+}>): ProofIntegrationPlanResult;
+/**
+ * Apply one reviewed `proof_integration_configure` action: write
+ * `.kb/proof/integrations.json` (`kibi.proof-integration.v1`). A create is
+ * refused when the file exists; an update is refused unless the file still
+ * has the hash the plan was built against, and it adds or replaces only the
+ * named integration. Either is refused when
+ * a file the proposal was derived from changed since planning.
+ */
+export declare function applyProofIntegrationAction(action: MigrationAction, root: string): void;
+//# sourceMappingURL=integration-plan.d.ts.map

package/dist/proof/integration-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integration-plan.d.ts","sourceRoot":"","sources":["../../src/proof/integration-plan.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,aAAa,EAGnB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,sBAAsB,EAEvB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEL,KAAK,gBAAgB,EAGtB,MAAM,mBAAmB,CAAC;AAE3B,mEAAmE;AACnE,eAAO,MAAM,2BAA2B,gCAAgC,CAAC;AAqCzE,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,WAAW,EAAE,gBAAgB,CAAC;IAC9B,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,gBAAgB,EAAE,QAAQ,CAAC;QACzB,OAAO,EAAE,OAAO,sBAAsB,CAAC;QACvC,WAAW,EAAE,MAAM,CAAC;QACpB,eAAe,EAAE,aAAa,CAAC;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QACtE,cAAc,EAAE,4BAA4B,CAAC;KAC9C,CAAC,CAAC;CACJ,CAAC,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IAChD,0EAA0E;IAC1E,IAAI,EAAE,aAAa,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACrC,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAyGH;;;;;;;GAOG;AAEH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,UAAU,CAAC,EAAE,MAAM,GAClB,mBAAmB,GAAG,IAAI,CA8B5B;AAsCD;;;;;;;GAOG;AAEH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,QAAQ,CAAC;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAM,GAC1C,0BAA0B,CAiE5B;AAMD;;;;;;;GAOG;AAEH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,eAAe,EACvB,IAAI,EAAE,MAAM,GACX,IAAI,CAyDN"}