kibi-cli 2.15.0 → 2.17.0

package/dist/public/skills/kibi-bootstrap/SKILL.md

@@ -2,7 +2,7 @@
 id: kibi-bootstrap
 name: kibi-bootstrap
 description: "Use for any Kibi bootstrap or onboarding task: seeding a new or thin knowledge base; reviewing a bootstrap or onboarding plan, preview, or evidence; judging approval readiness or coverage; diagnosing a blocked, partial, or failed bootstrap or its repair; applying an approved bootstrap plan; or asking the human which knowledge sources hold intent. Covers kb_status first, source interview, cited intent claims, read-only kb_plan_bootstrap preview, explicit approval, exact-plan kb_apply_plan, and repair-safe close-out."
-version: 3.10.0
+version: 3.11.0
 kibiCompatibility: ">=1.0.0"
 tags:
   - kibi
@@ -46,6 +46,7 @@ Seed branch-local Kibi knowledge from cited product intent, without creating a p
     - **Scenarios.** Write scenarios from the cited ticket's acceptance criteria, one scenario per criterion, not bulk drafts from the requirement title; ask the human when the source states none. Give each a plain title, the scenario prose in `document.body` (never in `properties`), and `assumes` links to the `property_value` facts whose values the scenario relies on. Set `expects` only when the scenario links `assumes` facts (or its criterion names concrete values that become them); `expects` without `assumes` only yields a feasibility-unknown warning, so a draft tagged `needs-human-review` omits `expects`. Then link the requirement with `specified_by` (upsert the `req` with its stored `title`, a `status` and that relationship only). Example: criterion "Given an annotation in draft state, when the user deletes it, the draft is cleared" becomes `{"type":"scenario","id":"SCEN-annotation-delete-clears-draft","properties":{"title":"Deleting a draft annotation clears the draft","status":"active","expects":"success"},"document":{"body":"Given an annotation in draft state, when the user deletes it, then the draft is cleared and nothing is published.\n\nThe acceptance criterion comes from the cited ticket; reviewers asked for it so a deleted draft never reappears after reload.\n"},"relationships":[{"type":"assumes","from":"SCEN-annotation-delete-clears-draft","to":"FACT-annotation-state-draft"}]}`, where the assumed fact is a `property_value` (`annotation.state` `eq` `draft`). Link existing tests that exercise it; never invent test evidence.
     - **Predicates.** Run `kb_model` with `mode: "predicates"` and `requirementId` on each persisted requirement and apply a returned plan with `requires_predicate` to its `relationshipTarget` (the planned `FACT-PRED-…` id, never a `SUGGEST-…` candidate id), or record the `review:ontology-gap` observation it returns, with its prose in `document.body`. A non-empty `existingGrounding` means the bootstrap already grounded that claim: on `replace_grounding` leave it unless the human wants the `replacementPlan` swap; on `provide_argument_bindings` retry with the listed arguments bound; on `record_ontology_gap` still write the returned gap observation, which is not a grounding link. Count what `kb_query` shows afterwards, not the calls you made.
     - **Unrecorded ambiguity.** Record any conflict or open question you found but did not declare in step 3 as a cited `fact_kind: observation` tagged `review:conflict` or `review:open-question`.
+    - **Proof integration.** Run `kibi proof inspect --json`. When it returns an `integrationPlan` (a `command` integration for the detected test runner), show the human the proposed command and `contractDefaults`, and on approval apply that exact plan with `kb_apply_plan` (`plan`, `approvedPlanHash` = its `planHash`, `approvedActionIds`); it writes `.kb/proof/integrations.json`, which you never hand-write. With no runner detected, report that proof stays deferred. Proof-bearing tests then name the integration in `proof_contract.integration`, and `kibi prove` records their evidence.
     Finish with `kb_check` and `kb_status`.
 12. **Report** calls made, result statuses, applied scope, what step 11 authored, gaps, and follow-ups. Classify as complete, partial, awaiting approval, or blocked.
 

package/dist/public/skills/kibi-usage/SKILL.md

@@ -2,7 +2,7 @@
 id: kibi-usage
 name: Kibi Usage
 description: Use Kibi's source-first, exact-Git, migration-aware, proof-aware operations safely across MCP or the trusted local CLI, including partial completion repair.
-version: 2.11.0
+version: 2.13.0
 kibiCompatibility: ">=1.0.0"
 tags:
   - kibi
@@ -148,7 +148,13 @@ error `BOOTSTRAP_PLAN_REJECTED` can follow earlier committed actions: inspect
 `data.actionResults` and `data.applied`, then re-plan from the current state.
 Its journal is terminal; never recover or replay it. `BOOTSTRAP_PLAN_INVALID`
 fails preflight before bootstrap writes or a new journal; obtain a corrected
-plan. If the status is
+plan. A migration plan whose actions were refused before changing anything
+returns `status: error`, `MIGRATION_PLAN_REFUSED` and `data.outcome:
+refused`: nothing changed, so read the action `detail` and get a new plan.
+`data.outcome: reconciliation_required` (status success) means an action
+failed mid-way: inspect its effect before retrying. `kb_delete` of an
+authored entity returns status success with `deleted: 0`; its `errors` say
+why nothing was deleted. If the status is
 `committed_with_repairs`, the mutation already committed: inspect failed effects,
 execute each required repair action in order, and never retry the original
 operation. Record effect failures, followed actions, and unsafe retries in
@@ -219,11 +225,19 @@ authored. Each one is the order the write path accepts.
    `semantic_inventory_version`, `semantic_source_field` and
    `semantic_source_hash`, the prose into `semantic_text`, `propositions`
    into `semantic_inventory` and the assertive `claim_key`s into
-   `logic_claims`. `kb_model` mode `predicates` per clause; `kb_upsert` the
-   returned `applyPlan` fact first (it carries the clause's `claim_key`).
-   Then write the requirement in one `kb_upsert` with the ledger (that
-   clause `status: modeled`), a sectioned `document.body`, `constrains` to
-   the subject fact and `requires_predicate` to `relationshipTarget`. A
+   `logic_claims`. Reuse (or `kb_upsert`) the subject fact, then call
+   `kb_model` mode `predicates` per clause with `subjectHint` set to that
+   subject fact's `subject_key`: the requirement constrains nothing yet, so
+   the hint is the planned subject and the planned fact gets its
+   `subject_key` (`subjectKey` is a mode `requirement` parameter; mode
+   `predicates` ignores it and warns). `kb_upsert` the returned `applyPlan`
+   fact first (it carries the clause's `claim_key`). Then write the
+   requirement in one `kb_upsert` with the ledger (that clause `status:
+   modeled`), a sectioned `document.body`, `constrains` to the subject
+   fact, `requires_predicate` to `relationshipTarget` and `specified_by` to
+   its scenario: `specified_by` (req → scenario) is sent in the
+   requirement's write, never in the scenario's, so create the scenario
+   first. A
    `modeled` entry and its grounding link must arrive in the same write
    (`modeled semantic_inventory entries (n) must equal logical grounding
    relationships (m)`); a clause not grounded yet stays `status: missing`

package/dist/public/skills/kibi-usage/resources/fact-lanes.md

@@ -61,16 +61,16 @@ A schema can close an argument with `argument_constants` (allowed values keyed b
 
 ### Deny predicate
 
-Claim: “Suspended users must not publish articles.” When `permission_rule` fits, preserve its positive schema name and encode prohibition as polarity:
+Claim: “Suspended users must not publish articles.” When `permission_rule` fits, preserve its positive schema name and encode prohibition as polarity. `kb_model` (`mode: "predicates"`) plans this fact for the claim; the built-in schema's fourth argument, `decision`, repeats the polarity:
 
 ```yaml
 id: FACT-SUSPENDED-PUBLISH-DENIED
 status: active
 fact_kind: predicate
 predicate_name: permission_rule
-predicate_args: [suspended_user, publish, article]
+predicate_args: [suspended_user, publish, articles, deny]
 polarity: deny
-canonical_key: permission_rule(suspended_user,publish,article)
+canonical_key: permission_rule(suspended_user,publish,articles,deny)
 claim_key: <advisor-issued key for this exact clause>
 claim_text: Suspended users must not publish articles.
 relationship: { type: requires_predicate, from: REQ-SUSPENDED-PUBLISH-DENIED, to: FACT-SUSPENDED-PUBLISH-DENIED }

package/dist/public/skills/kibi-usage/resources/proof.md

@@ -51,14 +51,41 @@ proof_bindings:                 # optional provenance metadata
 
 Provenance lives in `proof_bindings`; the contract stays semantic.
 
+- Every `required_proofs[].symbol_id` must name an existing `symbol` entity,
+  or `kb_check` reports `proof-contract-symbols`. Create the symbols first
+  (`kb_upsert`, narrow method-level granularity, never a `type-shape`
+  symbol): a production symbol `implements` the requirement and is
+  `covered_by` the test; an executable test symbol is `executable_for` it.
+- `proof_bindings[].source_file`, when set, must equal the named symbol's
+  `sourceFile`: for a production symbol that is the production file, not the
+  spec file that exercises it. Omit it when unsure.
+
 ## Integration configuration
 
 `.kb/proof/integrations.json` (`kibi.proof-integration.v1`) is tracked,
-Kibi-managed configuration describing evidence production only:
+Kibi-managed configuration describing evidence production only. Never
+hand-write it: `kibi proof inspect --json` proposes a `command` integration
+for the detected test runner (the `package.json` `test` script first) and
+returns `integrationPlan`, a hash-bound `kibi.migration-plan.v2`, plus the
+`contractDefaults` a proof-bearing test's `proof_contract` uses. Show the
+proposal to the human, then apply the plan with `kb_apply_plan` (or
+`kibi apply-plan --input -`) passing `plan`, `approvedPlanHash` (the plan's
+`planHash`) and `approvedActionIds`. Once the file exists, a create plan is
+refused (`status: error`, `MIGRATION_PLAN_REFUSED`, `data.outcome: refused`;
+nothing is written); `kibi proof inspect --update <id> --json` plans adding or
+replacing one named integration.
 
 - `producer: command` — Kibi synthesizes the envelope from the process
   outcome; obligations are bound with `aggregate_run` provenance and the
-  single process invocation counts as the known first attempt.
+  single process invocation counts as the known first attempt. The run is
+  judged as a whole: any failing test in it fails every obligation of every
+  test that names the integration, so a suite with unrelated failures proves
+  nothing. Narrow the command to the proof-bearing tests with
+  `kibi proof inspect --update <id> --command "<command>" --json` (without
+  `--command` the proposal is the `package.json` `test` script or the
+  detected runner again), or make the run attributable per test: have the
+  command write a `kibi.proof-test-report.v1` to the path in
+  `KIBI_PROOF_TEST_REPORT` so each test is judged by its own steps.
 - `producer: playwright` (or custom) — the child emits `kibi.proof-run.v1`
   itself (bundled reporter: `kibi-cli/playwright-reporter`).
 - `producer: junit` / `tap` — Kibi converts the native report at `artifact`
@@ -82,8 +109,11 @@ effective fingerprint and do.
 
 ## Common rejections
 
-- `No proof integration configuration` — bootstrap has not configured proof
-  for this repository yet; do not hand-wave, run the bootstrap proof step.
+- `No proof integration configuration` — proof is not configured for this
+  repository yet; run `kibi proof inspect --json`, review its
+  `integrationPlan` and apply it with `kb_apply_plan`.
+- `integration '<id>' ... is not configured` — the test names an integration
+  the file lacks; plan it with `kibi proof inspect --update <id> --json`.
 - `captured snapshot is not the live workspace snapshot` — the tree changed
   between capture and ingest; re-run `kibi prove`.
 - `artifact command_argv does not match the configured command` — the

package/dist/utils/branch-store.d.ts

@@ -1,3 +1,7 @@
+/** Stale-reason code of a branch store that was never compiled. */
+export declare const BRANCH_STORE_NOT_COMPILED = "branch_store_not_compiled";
+/** The kb_check rule that reports it. */
+export declare const BRANCH_STORE_NOT_COMPILED_RULE = "branch-store-not-compiled";
 export type BranchStoreState = "healthy" | "missing" | "incomplete" | "unreadable";
 export type BranchStoreInspection = Readonly<{
     state: BranchStoreState;
@@ -18,4 +22,32 @@ export declare function inspectBranchStore(workspaceRoot: string, branch: string
  */
 export declare function storeLockJournalReason(storePath: string): Record<string, unknown> | null;
 export declare function branchStoreReason(inspection: BranchStoreInspection): Record<string, unknown> | null;
+/**
+ * The number of authored source files under `.kb/`: entity Markdown in the
+ * entity lanes plus relationship shards. Filesystem only, like
+ * inspectBranchStore, so a status read never compiles anything.
+ */
+export declare function countAuthoredKbSources(workspaceRoot: string): number;
+export type BranchStoreCompilation = Readonly<{
+    /** True once a sync (or any write) has committed into the store. */
+    compiled: boolean;
+    /** The journal CURRENT pointer (`generation-<id>:<sequence>`), if any. */
+    generation: string | null;
+}>;
+/**
+ * Whether the branch store holds a compilation. A missing store holds none;
+ * a journaled store whose CURRENT sequence is still 0 and whose journal holds
+ * no graph data was created (by `kibi branch ensure` or by an engine
+ * attaching to a new branch) but nothing was ever committed into it, so it is
+ * empty. A legacy kb.rdf store counts as compiled.
+ */
+export declare function branchStoreCompilation(inspection: BranchStoreInspection): BranchStoreCompilation;
+/**
+ * The single blocking reason for a branch whose store was never compiled
+ * while `.kb/` holds authored sources: Kibi stores are per branch and never
+ * copied, so a fresh branch (no post-checkout hook) starts empty. Every
+ * check against that store would report each authored relationship as
+ * missing; the one fix is `kibi sync`.
+ */
+export declare function uncompiledBranchStoreReason(workspaceRoot: string, inspection: BranchStoreInspection, branch: string): Record<string, unknown> | null;
 //# sourceMappingURL=branch-store.d.ts.map

package/dist/utils/branch-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"branch-store.d.ts","sourceRoot":"","sources":["../../src/utils/branch-store.ts"],"names":[],"mappings":"AAiBA,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,SAAS,GACT,YAAY,GACZ,YAAY,CAAC;AAEjB,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAC3C,KAAK,EAAE,gBAAgB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,OAAO,CAAC;CAC3B,CAAC,CAAC;AAEH;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,GACb,qBAAqB,CA0GvB;AAED;;;;GAIG;AAEH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,GAChB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAiBhC;AAED,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,qBAAqB,GAChC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAWhC"}
+{"version":3,"file":"branch-store.d.ts","sourceRoot":"","sources":["../../src/utils/branch-store.ts"],"names":[],"mappings":"AAwBA,mEAAmE;AACnE,eAAO,MAAM,yBAAyB,8BAA8B,CAAC;AACrE,yCAAyC;AACzC,eAAO,MAAM,8BAA8B,8BAA8B,CAAC;AAE1E,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,SAAS,GACT,YAAY,GACZ,YAAY,CAAC;AAEjB,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAC3C,KAAK,EAAE,gBAAgB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,OAAO,CAAC;CAC3B,CAAC,CAAC;AAEH;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,MAAM,GACb,qBAAqB,CA0GvB;AAED;;;;GAIG;AAEH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,MAAM,GAChB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAiBhC;AAED,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,qBAAqB,GAChC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAWhC;AA6BD;;;;GAIG;AAEH,wBAAgB,sBAAsB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAOpE;AAED,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,oEAAoE;IACpE,QAAQ,EAAE,OAAO,CAAC;IAClB,0EAA0E;IAC1E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC,CAAC;AAEH;;;;;;GAMG;AAEH,wBAAgB,sBAAsB,CACpC,UAAU,EAAE,qBAAqB,GAChC,sBAAsB,CAwBxB;AAkBD;;;;;;GAMG;AAEH,wBAAgB,2BAA2B,CACzC,aAAa,EAAE,MAAM,EACrB,UAAU,EAAE,qBAAqB,EACjC,MAAM,EAAE,MAAM,GACb,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAwBhC"}

package/dist/utils/branch-store.js

@@ -2,10 +2,15 @@
  Kibi — repo-local, per-branch, queryable long-term memory for software projects
  Copyright (C) 2026 Piotr Franczyk
 */
-import { existsSync, readFileSync, statSync } from "node:fs";
+import { existsSync, readFileSync, readdirSync, statSync, } from "node:fs";
 import * as path from "node:path";
 import { classifyStoreLockHolder, readStoreLockOwner, } from "../prolog/store-lock.js";
 import { branchStoreManifestMatches, branchStorePath, legacyBranchStorePath, } from "./branch-store-locator.js";
+import { ENTITY_LANES, KB_ROOT } from "./kb-paths.js";
+/** Stale-reason code of a branch store that was never compiled. */
+export const BRANCH_STORE_NOT_COMPILED = "branch_store_not_compiled";
+/** The kb_check rule that reports it. */
+export const BRANCH_STORE_NOT_COMPILED_RULE = "branch-store-not-compiled";
 /**
  * Performs only filesystem checks. It deliberately never starts the engine or
  * attaches Prolog, so callers can still explain a broken branch store.
@@ -155,3 +160,119 @@ export function branchStoreReason(inspection) {
             : { command_argv: ["kibi", "branch", "ensure"], applyRequired: false },
     };
 }
+/** Directories under .kb/ that hold authored, Git-tracked entity sources. */
+const AUTHORED_SOURCE_DIRECTORIES = [
+    ...ENTITY_LANES.map((lane) => [lane, ".md"]),
+    ["adrs", ".md"],
+    ["relationships", ".yaml"],
+];
+function countFiles(directory, extension) {
+    let count = 0;
+    let entries;
+    try {
+        entries = readdirSync(directory, { withFileTypes: true });
+    }
+    catch {
+        return 0;
+    }
+    for (const entry of entries) {
+        if (entry.isDirectory()) {
+            count += countFiles(path.join(directory, entry.name), extension);
+        }
+        else if (entry.isFile() && entry.name.endsWith(extension)) {
+            count += 1;
+        }
+    }
+    return count;
+}
+/**
+ * The number of authored source files under `.kb/`: entity Markdown in the
+ * entity lanes plus relationship shards. Filesystem only, like
+ * inspectBranchStore, so a status read never compiles anything.
+ */
+// implements REQ-cli-status-pre-first-sync
+export function countAuthoredKbSources(workspaceRoot) {
+    const kbRoot = path.join(workspaceRoot, KB_ROOT);
+    return AUTHORED_SOURCE_DIRECTORIES.reduce((total, [directory, extension]) => total + countFiles(path.join(kbRoot, directory), extension), 0);
+}
+/**
+ * Whether the branch store holds a compilation. A missing store holds none;
+ * a journaled store whose CURRENT sequence is still 0 and whose journal holds
+ * no graph data was created (by `kibi branch ensure` or by an engine
+ * attaching to a new branch) but nothing was ever committed into it, so it is
+ * empty. A legacy kb.rdf store counts as compiled.
+ */
+// implements REQ-cli-status-pre-first-sync
+export function branchStoreCompilation(inspection) {
+    if (inspection.state === "missing") {
+        return { compiled: false, generation: null };
+    }
+    const currentPath = path.join(inspection.path, "CURRENT");
+    let current = "";
+    try {
+        current = existsSync(currentPath)
+            ? readFileSync(currentPath, "utf8").trim()
+            : "";
+    }
+    catch {
+        current = "";
+    }
+    if (current === "") {
+        // A healthy store without CURRENT is a legacy kb.rdf store.
+        return { compiled: inspection.state === "healthy", generation: null };
+    }
+    const sequence = Number(current.split(":").at(-1));
+    return {
+        compiled: (Number.isFinite(sequence) && sequence > 0) ||
+            journalHoldsGraphData(inspection.path),
+        generation: current,
+    };
+}
+/**
+ * Whether the journal directory holds persisted graph data. An empty store
+ * has only `rdf/lock`; a store migrated from a legacy kb.rdf holds the
+ * imported graph under a fresh `generation-…:0` pointer, so it is compiled
+ * although its sequence is still 0.
+ */
+function journalHoldsGraphData(storePath) {
+    try {
+        return readdirSync(path.join(storePath, "rdf")).some((entry) => entry !== "lock" && !entry.startsWith("."));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The single blocking reason for a branch whose store was never compiled
+ * while `.kb/` holds authored sources: Kibi stores are per branch and never
+ * copied, so a fresh branch (no post-checkout hook) starts empty. Every
+ * check against that store would report each authored relationship as
+ * missing; the one fix is `kibi sync`.
+ */
+// implements REQ-cli-status-pre-first-sync
+export function uncompiledBranchStoreReason(workspaceRoot, inspection, branch) {
+    if (inspection.state !== "healthy" && inspection.state !== "missing") {
+        return null;
+    }
+    const compilation = branchStoreCompilation(inspection);
+    if (compilation.compiled)
+        return null;
+    const authoredSources = countAuthoredKbSources(workspaceRoot);
+    if (authoredSources === 0)
+        return null;
+    const storeState = inspection.state === "missing"
+        ? "does not exist yet"
+        : `is empty (${compilation.generation ?? "no generation"}: nothing compiled)`;
+    return {
+        code: BRANCH_STORE_NOT_COMPILED,
+        path: inspection.path,
+        entityIds: [],
+        detail: `The KB store for branch ${branch} ${storeState}, while .kb/ holds ${authoredSources} authored source file(s). Kibi compiles one store per branch and never copies another branch's, so every query and check reads an empty KB until this branch is compiled.`,
+        remediation: { command_argv: ["kibi", "sync"], applyRequired: false },
+        blocking: true,
+        authoredSources,
+        ...(compilation.generation !== null
+            ? { generation: compilation.generation }
+            : {}),
+    };
+}

package/dist/utils/rule-registry.generated.d.ts

@@ -23,6 +23,11 @@ export declare const GENERATED_RULES: readonly [{
     readonly description: "Authored Markdown and relationship-shard edges must exactly match the compiled KB";
     readonly enforcementClass: "canonical";
     readonly category: "integrity";
+}, {
+    readonly name: "branch-store-not-compiled";
+    readonly description: "The current branch's KB store must be compiled from the authored .kb/ sources; a missing or empty store is reported once, naming kibi sync, instead of every store-backed rule reading an empty KB";
+    readonly enforcementClass: "canonical";
+    readonly category: "integrity";
 }, {
     readonly name: "source-path-dangling";
     readonly description: "An authored entity's source field must name an existing workspace path (a #anchor suffix is ignored), an existing entity id, or an http(s) URL; a missing source is allowed";

package/dist/utils/rule-registry.generated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rule-registry.generated.d.ts","sourceRoot":"","sources":["../../src/utils/rule-registry.generated.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqUlB,CAAC"}
+{"version":3,"file":"rule-registry.generated.d.ts","sourceRoot":"","sources":["../../src/utils/rule-registry.generated.ts"],"names":[],"mappings":"AAUA,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4UlB,CAAC"}

package/dist/utils/rule-registry.generated.js

@@ -38,6 +38,12 @@ export const GENERATED_RULES = [
         enforcementClass: "canonical",
         category: "integrity",
     },
+    {
+        name: "branch-store-not-compiled",
+        description: "The current branch's KB store must be compiled from the authored .kb/ sources; a missing or empty store is reported once, naming kibi sync, instead of every store-backed rule reading an empty KB",
+        enforcementClass: "canonical",
+        category: "integrity",
+    },
     {
         name: "source-path-dangling",
         description: "An authored entity's source field must name an existing workspace path (a #anchor suffix is ignored), an existing entity id, or an http(s) URL; a missing source is allowed",

package/dist/utils/strict-modeling.d.ts

@@ -12,6 +12,12 @@ export interface SemanticClaim {
 export interface StrictModelInput {
     claim: SemanticClaim;
     statement: string;
+    /**
+     * The requirement the write set updates. When set it replaces the minted
+     * REQ-AUTO-<hash> id; fact ids, subject_key and the claim stay derived from
+     * the claim.
+     */
+    requirementId?: string;
 }
 type EntityProperties = Partial<Omit<BaseEntity, "created_at" | "updated_at"> & FactFields> & {
     id: string;
@@ -65,5 +71,11 @@ export declare function buildStrictWriteSet(input: StrictModelInput): StrictWrit
 export declare function modelRequirementClaims(inputs: ReadonlyArray<StrictModelInput>): StrictWriteSet[];
 export declare function normalizeSourceKey(value: string): string;
 export declare function normalizeTextRef(provenance: string | undefined, source: string): string;
+/**
+ * The file an authored fact lives in: `.kb/facts/<id>.md`. Kibi writes every
+ * fact there (the filename stem equals the id), so a plan that points at an
+ * existing fact names this path.
+ */
+export declare function factSourcePath(factId: string): string;
 export {};
 //# sourceMappingURL=strict-modeling.d.ts.map

package/dist/utils/strict-modeling.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"strict-modeling.d.ts","sourceRoot":"","sources":["../../src/utils/strict-modeling.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAKlE,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,UAAU,CAAC;IAC3E,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,KAAK,gBAAgB,GAAG,OAAO,CAC7B,IAAI,CAAC,UAAU,EAAE,YAAY,GAAG,YAAY,CAAC,GAAG,UAAU,CAC3D,GAAG;IACF,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,WAAW,UAAU,CACzB,KAAK,SAAS,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,EAC7C,WAAW,SAAS,gBAAgB,GAAG,gBAAgB;IAEvD,IAAI,EAAE,KAAK,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,WAAW,CAAC;CACzB;AAED,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,gBAAgB,EAChB,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,QAAQ,GAAG,YAAY,CACjD,CAAC;AAEF,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,yBAAyB;IACjC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACjC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,QAAQ,EAAE,IAAI,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,mBAAmB;IAC3B,eAAe,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,QAAQ,EAAE,KAAK,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GAAG,yBAAyB,GAAG,mBAAmB,CAAC;AAE7E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiBzD;AAED;;;;GAIG;AAEH,eAAO,MAAM,sBAAsB,QACoC,CAAC;AAGxE,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAe1D;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,aAAa,GACnB,oBAAoB,CAwBtB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,cAAc,CAsH3E;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,aAAa,CAAC,gBAAgB,CAAC,GACtC,cAAc,EAAE,CAkBlB;AAQD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAexD;AA0BD,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,MAAM,EAAE,MAAM,GACb,MAAM,CAMR"}
+{"version":3,"file":"strict-modeling.d.ts","sourceRoot":"","sources":["../../src/utils/strict-modeling.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAKlE,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,IAAI,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,UAAU,CAAC;IAC3E,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,KAAK,gBAAgB,GAAG,OAAO,CAC7B,IAAI,CAAC,UAAU,EAAE,YAAY,GAAG,YAAY,CAAC,GAAG,UAAU,CAC3D,GAAG;IACF,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,WAAW,UAAU,CACzB,KAAK,SAAS,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,EAC7C,WAAW,SAAS,gBAAgB,GAAG,gBAAgB;IAEvD,IAAI,EAAE,KAAK,CAAC;IACZ,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,WAAW,CAAC;CACzB;AAED,MAAM,MAAM,gBAAgB,GAAG,IAAI,CACjC,gBAAgB,EAChB,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,QAAQ,GAAG,YAAY,CACjD,CAAC;AAEF,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,yBAAyB;IACjC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IACvB,WAAW,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACjC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,QAAQ,EAAE,IAAI,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,UAAU,mBAAmB;IAC3B,eAAe,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC,QAAQ,EAAE,KAAK,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GAAG,yBAAyB,GAAG,mBAAmB,CAAC;AAE7E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAiBzD;AAED;;;;GAIG;AAEH,eAAO,MAAM,sBAAsB,QACoC,CAAC;AAGxE,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAe1D;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,aAAa,GACnB,oBAAoB,CAwBtB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,cAAc,CAwH3E;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,aAAa,CAAC,gBAAgB,CAAC,GACtC,cAAc,EAAE,CAkBlB;AAQD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAexD;AA0BD,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,MAAM,EAAE,MAAM,GACb,MAAM,CAMR;AAsND;;;;GAIG;AAEH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAErD"}

package/dist/utils/strict-modeling.js

@@ -83,7 +83,9 @@ export function buildStableRequirementIds(claim) {
 export function buildStrictWriteSet(input) {
     const statement = normalizeStatement(input.statement);
     const confidence = normalizeConfidence(input.claim.confidence);
-    const ids = buildStableRequirementIds(input.claim);
+    const minted = buildStableRequirementIds(input.claim);
+    const requirementId = input.requirementId?.trim();
+    const ids = requirementId ? { ...minted, reqId: requirementId } : minted;
     const textRef = normalizeTextRef(input.claim.provenance, input.claim.source);
     const metadataTags = buildMetadataTags({
         confidence,
@@ -409,3 +411,12 @@ function normalizeEntityDirectory(directory) {
 function buildEntitySourcePath(directory, entityId) {
     return `${directory}/${entityId}.md`;
 }
+/**
+ * The file an authored fact lives in: `.kb/facts/<id>.md`. Kibi writes every
+ * fact there (the filename stem equals the id), so a plan that points at an
+ * existing fact names this path.
+ */
+// implements REQ-kibi-subject-vocabulary
+export function factSourcePath(factId) {
+    return buildEntitySourcePath(resolveEntitySourcePaths().facts, factId);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kibi-cli",
-  "version": "2.15.0",
+  "version": "2.17.0",
   "type": "module",
   "description": "Kibi CLI for knowledge base management",
   "engines": {
@@ -235,7 +235,7 @@
     "fast-glob": "^3.2.12",
     "gray-matter": "^4.0.3",
     "js-yaml": "^4.1.0",
-    "kibi-core": "^0.18.0",
+    "kibi-core": "^0.18.2",
     "kibi-plugin-builtin": "^0.5.0",
     "kibi-plugin-sdk": "^0.5.0",
     "kibi-swipl": "^1.0.1",

package/src/public/impact/coverage-depth-quality.ts

@@ -276,6 +276,46 @@ function coverageForRequirement(
   };
 }
 
+/**
+ * Requirement statuses that keep a requirement in the coverage-depth review.
+ * `closed` is reviewed only when tagged `implemented` (the documented
+ * "done, with evidence" shape); a plain closed, deprecated or superseded
+ * requirement is retired history, not a coverage gap.
+ */
+const REVIEWED_REQUIREMENT_STATUSES = new Set([
+  "open",
+  "in_progress",
+  "active",
+  "approved",
+]);
+
+function supersededRequirementIds(
+  manifestResults: readonly ExtractionResult[],
+): ReadonlySet<string> {
+  return new Set(
+    manifestResults.flatMap((result) =>
+      result.entity.type === "req"
+        ? result.relationships.flatMap((relationship) =>
+            relationship.type === "supersedes" ? [relationship.to] : [],
+          )
+        : [],
+    ),
+  );
+}
+
+// implements REQ-audit-quality-diagnostics-v1
+function isReviewableRequirement(
+  requirement: ExtractedEntity,
+  superseded: ReadonlySet<string>,
+): boolean {
+  if (superseded.has(requirement.id)) return false;
+  const status = requirement.status.trim().toLowerCase();
+  if (REVIEWED_REQUIREMENT_STATUSES.has(status)) return true;
+  return (
+    status === "closed" && (requirement.tags ?? []).includes("implemented")
+  );
+}
+
 export function createCoverageDepthQualityDiagnostics(
   manifestResults: readonly ExtractionResult[],
   proofByRequirement: ReadonlyMap<
@@ -289,8 +329,13 @@ export function createCoverageDepthQualityDiagnostics(
   > = new Map(),
 ): readonly QualityDiagnostic[] {
   const entities = entitiesById(manifestResults);
+  const superseded = supersededRequirementIds(manifestResults);
   return manifestResults
-    .filter((result) => result.entity.type === "req")
+    .filter(
+      (result) =>
+        result.entity.type === "req" &&
+        isReviewableRequirement(result.entity, superseded),
+    )
     .flatMap((result) => {
       const diagnostic = createDiagnostic(
         coverageForRequirement(result, manifestResults, entities),

package/src/public/operations/check-executor.ts

@@ -1,4 +1,10 @@
 import { runAggregatedChecks } from "../../commands/aggregated-checks.js";
+import { resolveBranchAttachment } from "../../utils/branch-resolver.js";
+import {
+  BRANCH_STORE_NOT_COMPILED_RULE,
+  inspectBranchStore,
+  uncompiledBranchStoreReason,
+} from "../../utils/branch-store.js";
 /*
  Kibi — repo-local, per-branch, queryable long-term memory for software projects
  Copyright (C) 2026 Piotr Franczyk
@@ -74,6 +80,14 @@ export {
 
 export type CheckExecutionOptions = {
   readonly collectFullQualityDiagnosticsForExplicitRules?: boolean;
+  /**
+   * The engine reads the current branch's store although the context carries
+   * no branch attachment (the `kibi check` engine path). A context with a
+   * branch attachment (the CLI and MCP runtimes) implies it; without either,
+   * the attached store is unknown (an explicit --kb-path store or an injected
+   * test store) and the branch-store compilation check is skipped.
+   */
+  readonly branchStoreAttached?: boolean;
 };
 
 function requireProlog(context: OperationContext): PrologPort {
@@ -126,6 +140,50 @@ async function readStatusMigrationPlan(
   }
 }
 
+/**
+ * The one finding for a branch whose store was never compiled while .kb/
+ * holds authored sources. Every store-backed rule would read an empty KB
+ * (source-relationship-parity alone reports each authored relationship as
+ * missing), so kb_check reports this instead of any of them.
+ */
+// implements REQ-cli-status-pre-first-sync
+export function uncompiledBranchStoreViolation(
+  context: OperationContext,
+  workspaceRoot: string,
+): Violation | null {
+  let attachment: ReturnType<typeof resolveBranchAttachment>;
+  try {
+    attachment =
+      context.branchAttachment ?? resolveBranchAttachment(workspaceRoot);
+  } catch {
+    return null;
+  }
+  if ("error" in attachment) return null;
+  const store = inspectBranchStore(workspaceRoot, attachment.kbBranch);
+  const reason = uncompiledBranchStoreReason(
+    workspaceRoot,
+    store,
+    attachment.kbBranch,
+  );
+  if (reason === null) return null;
+  return {
+    rule: BRANCH_STORE_NOT_COMPILED_RULE,
+    entityId: attachment.kbBranch,
+    description: String(reason.detail),
+    suggestion:
+      "Run kibi sync to compile this branch's store from the authored .kb/ sources (or apply the branch-store-compile action of the returned migrationPlan with kb_apply_plan), then rerun kb_check. Run kibi init once to install the git hooks that compile a new branch on checkout.",
+    source: store.path,
+    evidence: {
+      store: { state: store.state, path: store.path },
+      authoredSources: reason.authoredSources,
+      ...(reason.generation !== undefined
+        ? { generation: reason.generation }
+        : {}),
+      remediation: reason.remediation,
+    },
+  };
+}
+
 // implements REQ-kibi-operation-interface-parity, REQ-002
 export async function executeCheck(
   args: CheckInput,
@@ -154,6 +212,53 @@ export async function executeCheck(
         ? { maxDiagnostics: args.maxDiagnostics }
         : {};
 
+    const uncompiled =
+      context.branchAttachment !== undefined ||
+      options.branchStoreAttached === true
+        ? uncompiledBranchStoreViolation(context, workspaceRoot)
+        : null;
+    if (uncompiled !== null) {
+      const violations = [uncompiled];
+      const statusPlan = await readStatusMigrationPlan(context);
+      const migrationPlan = await migrationPlanForCheck(
+        context,
+        violations,
+        [],
+        statusPlan,
+      );
+      return {
+        content: [
+          {
+            type: "text",
+            text: buildSummary({
+              violations,
+              impactResult,
+              qualityDiagnostics: [],
+            }),
+          },
+        ],
+        structuredContent: buildStructuredContent({
+          violations,
+          diagnostics: [
+            {
+              category: "SYNC_ERROR",
+              severity: "error",
+              message: uncompiled.description,
+              ...(uncompiled.source !== undefined
+                ? { file: uncompiled.source }
+                : {}),
+              ...(uncompiled.suggestion !== undefined
+                ? { suggestion: uncompiled.suggestion }
+                : {}),
+            },
+          ],
+          qualityDiagnostics: [],
+          impactResult,
+          migrationPlan,
+        }),
+      };
+    }
+
     if (rulesAllowlist.size === 0) {
       const qualityDiagnostics =
         hasExplicitRules &&