kibi-cli 2.22.1 → 2.24.0

package/dist/traceability/staged-inventory-drift.js

@@ -0,0 +1,84 @@
+/*
+ Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ Copyright (C) 2026 Piotr Franczyk
+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU Affero General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU Affero General Public License for more details.
+
+ You should have received a copy of the GNU Affero General Public License
+ along with this program.  If not, see <https://www.gnu.org/licenses/>.
+*/
+import { extractFromMarkdownString } from "../extractors/markdown.js";
+import { analyzeSemanticAdvisorInput } from "../operations/semantic-advisor/analyze-prose.js";
+import { validateSemanticInventoryBoundary } from "../operations/semantic-advisor/ingestion-boundary.js";
+/** A staged requirement whose semantic inventory no longer matches its prose. */
+// implements REQ-kibi-proposition-complete-ingestion
+export const STAGED_INVENTORY_DRIFT_RULE = "semantic-inventory-drift";
+function advertisesContract(entity) {
+    return (entity.semantic_inventory_version !== undefined ||
+        entity.semantic_source_hash !== undefined ||
+        entity.semantic_inventory !== undefined);
+}
+function payloadOf(result) {
+    return {
+        type: result.entity.type,
+        id: result.entity.id,
+        properties: result.entity,
+        relationships: result.relationships,
+    };
+}
+function baseResult(path, readBase) {
+    const content = readBase(path);
+    if (content === null)
+        return null;
+    try {
+        return extractFromMarkdownString(content, path);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The staged requirements that declare a semantic inventory contract (now
+ * or in the base tree) whose inventory no longer matches their prose. The
+ * next `kibi sync` refuses them under the proposition-complete boundary;
+ * the gate applies the same test, so drift is caught at the commit that
+ * introduces it instead of after a later merge. Requirements without a
+ * contract are left to sync, which decides from its own baseline.
+ */
+// implements REQ-kibi-proposition-complete-ingestion
+export function stagedInventoryDriftViolations(input) {
+    const violations = [];
+    for (const result of input.snapshotEntities) {
+        if (result.entity.type !== "req")
+            continue;
+        const source = result.entity.source;
+        if (!input.stagedPaths.has(source))
+            continue;
+        const payload = payloadOf(result);
+        const semantic = analyzeSemanticAdvisorInput({ payload });
+        const boundary = validateSemanticInventoryBoundary(payload, result.relationships, semantic.receipt);
+        if (boundary.errors.length === 0)
+            continue;
+        const base = baseResult(source, input.readBase);
+        const enforce = advertisesContract(result.entity) ||
+            (base !== null && advertisesContract(base.entity));
+        if (!enforce)
+            continue;
+        violations.push({
+            rule: STAGED_INVENTORY_DRIFT_RULE,
+            entityId: result.entity.id,
+            source,
+            errors: boundary.errors,
+            message: `${result.entity.id} (${source}): the semantic inventory does not match the requirement's prose, so the next kibi sync rejects it: ${boundary.errors.join("; ")}. Run 'kibi migrate' to re-derive it, or kb_model mode analyze with the complete prose and keep its inventory contract.`,
+        });
+    }
+    return violations.sort((left, right) => left.entityId.localeCompare(right.entityId));
+}

package/dist/traceability/staged-symbols-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"staged-symbols-manifest.d.ts","sourceRoot":"","sources":["../../src/traceability/staged-symbols-manifest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,iBAAiB,CAAC;AAKzB,OAAO,EACL,KAAK,wBAAwB,EAG9B,MAAM,qCAAqC,CAAC;AAI7C,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AA0ClD,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,cAAc,CAAC;IACtD,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,WAAW,CAAC,EAAE,mCAAmC,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,qCAAqC;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAC5D,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AA6ED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,wBAAwB,GACpC,wBAAwB,GAAG,IAAI,CAOjC;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,MAAM,GAAG,IAAI,CAMhB;AAqTD,wBAAgB,2BAA2B,CAAC,OAAO,EAAE;IACnD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACnD,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,oBAAoB,CAAC;CAC7E,GAAG,+BAA+B,CAoLlC;AAED,wBAAgB,4CAA4C,CAAC,OAAO,EAAE;IACpE,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACpD,GAAG,qCAAqC,CAqExC"}
+{"version":3,"file":"staged-symbols-manifest.d.ts","sourceRoot":"","sources":["../../src/traceability/staged-symbols-manifest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,iBAAiB,CAAC;AAKzB,OAAO,EACL,KAAK,wBAAwB,EAG9B,MAAM,qCAAqC,CAAC;AAI7C,OAAO,KAAK,EAAE,mCAAmC,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AA0ClD,MAAM,WAAW,+BAA+B;IAC9C,KAAK,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,cAAc,CAAC;IACtD,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,WAAW,CAAC,EAAE,mCAAmC,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,qCAAqC;IACpD,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAC5D,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AA6ED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,wBAAwB,GACpC,wBAAwB,GAAG,IAAI,CAOjC;AAED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE;IAC/C,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,MAAM,GAAG,IAAI,CAMhB;AAoTD,wBAAgB,2BAA2B,CAAC,OAAO,EAAE;IACnD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACnD,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,oBAAoB,CAAC;CAC7E,GAAG,+BAA+B,CAoLlC;AAED,wBAAgB,4CAA4C,CAAC,OAAO,EAAE;IACpE,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,WAAW,EAAE,UAAU,EAAE,CAAC;IAC1B,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACpD,GAAG,qCAAqC,CAqExC"}

package/dist/traceability/staged-symbols-manifest.js

@@ -281,8 +281,7 @@ function diffSymbolEvidence(sourcePath, expectedSymbols, stagedSymbols) {
     if (missing.length === 0 && extra.length === 0) {
         return null;
     }
-    // Keep the complete lists: human-facing renderers truncate (with an
-    // accurate "… and N more"), while JSON evidence carries every name.
+    // Keep the complete lists: the gate output names every symbol.
     return {
         path: sourcePath,
         expectedCount: expectedSymbols.length,

package/dist/types/entities.d.ts

@@ -67,7 +67,7 @@ export type Requirement = BaseEntity & {
     approval_ref?: string;
     /** Why the requirement exists; explanation, not checked meaning. */
     rationale?: string;
-    /** How firmly it was decided; absent reads as default. */
+    /** How firmly it was decided; absent reads as `default` when an agent wrote it, else `firm`. */
     firmness?: "firm" | "default" | "exploratory";
     /** Exception requirements only: claim keys of the exempted requirement it waives. */
     exempts_claims?: string[];
@@ -80,7 +80,7 @@ export type TestEntity = BaseEntity & TestVerificationFields & {
 };
 export type ADR = BaseEntity & {
     type: "adr";
-    /** How firmly it was decided; absent reads as default. */
+    /** How firmly it was decided; absent reads as `default` when an agent wrote it, else `firm`. */
     firmness?: "firm" | "default" | "exploratory";
 };
 export type Flag = BaseEntity & {

package/dist/types/entities.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entities.d.ts","sourceRoot":"","sources":["../../src/types/entities.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE/D,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAGD,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,EACN,SAAS,GACT,gBAAgB,GAChB,aAAa,GACb,MAAM,GACN,kBAAkB,GAClB,WAAW,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,CAAC;IACtD,UAAU,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,uEAAuE;IACvE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,kBAAkB,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,YAAY,CAAC;IAC3D,wBAAwB,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IACnD,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B,cAAc,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACzC,cAAc,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;CAC1C;AAED,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG;IACrC,IAAI,EAAE,KAAK,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,CAAC;IAC9C,qFAAqF;IACrF,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B,CAAC;AACF,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AACzD,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,sBAAsB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAChF,MAAM,MAAM,GAAG,GAAG,UAAU,GAAG;IAC7B,IAAI,EAAE,KAAK,CAAC;IACZ,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,CAAC;CAC/C,CAAC;AACF,MAAM,MAAM,IAAI,GAAG,UAAU,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AACjD,MAAM,MAAM,KAAK,GAAG,UAAU,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AACnD,MAAM,MAAM,MAAM,GAAG,UAAU,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AACrD,MAAM,MAAM,IAAI,GAAG,UAAU,GAAG,UAAU,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,MAAM,MAAM,MAAM,GACd,WAAW,GACX,QAAQ,GACR,UAAU,GACV,GAAG,GACH,IAAI,GACJ,KAAK,GACL,MAAM,GACN,IAAI,CAAC"}
+{"version":3,"file":"entities.d.ts","sourceRoot":"","sources":["../../src/types/entities.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAE/D,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAGD,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,EACN,SAAS,GACT,gBAAgB,GAChB,aAAa,GACb,MAAM,GACN,kBAAkB,GAClB,WAAW,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,CAAC;IACtD,UAAU,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpD,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,uEAAuE;IACvE,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,kBAAkB,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,YAAY,CAAC;IAC3D,wBAAwB,CAAC,EAAE,UAAU,GAAG,UAAU,CAAC;IACnD,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B,cAAc,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACzC,cAAc,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;CAC1C;AAED,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG;IACrC,IAAI,EAAE,KAAK,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gGAAgG;IAChG,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,CAAC;IAC9C,qFAAqF;IACrF,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B,CAAC;AACF,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AACzD,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,sBAAsB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAChF,MAAM,MAAM,GAAG,GAAG,UAAU,GAAG;IAC7B,IAAI,EAAE,KAAK,CAAC;IACZ,gGAAgG;IAChG,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,aAAa,CAAC;CAC/C,CAAC;AACF,MAAM,MAAM,IAAI,GAAG,UAAU,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AACjD,MAAM,MAAM,KAAK,GAAG,UAAU,GAAG;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AACnD,MAAM,MAAM,MAAM,GAAG,UAAU,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AACrD,MAAM,MAAM,IAAI,GAAG,UAAU,GAAG,UAAU,GAAG;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9D,MAAM,MAAM,MAAM,GACd,WAAW,GACX,QAAQ,GACR,UAAU,GACV,GAAG,GACH,IAAI,GACJ,KAAK,GACL,MAAM,GACN,IAAI,CAAC"}

package/dist/utils/content-freshness.d.ts

@@ -9,5 +9,14 @@ export declare function confirmSourceNewerReasons(workspaceRoot: string, storePa
     kept: Reason[];
     dropped: Reason[];
 };
+/**
+ * The `meta` freshness block reporting operations return (kb_graph,
+ * kb_find_gaps, kb_coverage) comes straight from Prolog, which compares file
+ * times only. Apply the same content confirmation kb_status does, so a
+ * checkout or `touch` that changed no byte is not reported as stale.
+ */
+export declare function confirmMetaFreshness<T extends {
+    readonly meta?: Readonly<Record<string, unknown>>;
+}>(payload: T, workspaceRoot: string): T;
 export {};
 //# sourceMappingURL=content-freshness.d.ts.map

package/dist/utils/content-freshness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"content-freshness.d.ts","sourceRoot":"","sources":["../../src/utils/content-freshness.ts"],"names":[],"mappings":"AAYA,uDAAuD;AACvD,eAAO,MAAM,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAIxD,CAAC;AAEH,KAAK,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAyJhD;;;GAGG;AAEH,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB;IAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAkBvC"}
+{"version":3,"file":"content-freshness.d.ts","sourceRoot":"","sources":["../../src/utils/content-freshness.ts"],"names":[],"mappings":"AAYA,uDAAuD;AACvD,eAAO,MAAM,yBAAyB,EAAE,WAAW,CAAC,MAAM,CAIxD,CAAC;AAEH,KAAK,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAyJhD;;;GAGG;AAEH,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,SAAS,MAAM,EAAE,GACzB;IAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAkBvC;AAED;;;;;GAKG;AAEH,wBAAgB,oBAAoB,CAClC,CAAC,SAAS;IAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAAE,EAC/D,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,GAAG,CAAC,CAoCtC"}

package/dist/utils/content-freshness.js

@@ -169,3 +169,36 @@ export function confirmSourceNewerReasons(workspaceRoot, storePath, reasons) {
     }
     return { kept, dropped };
 }
+/**
+ * The `meta` freshness block reporting operations return (kb_graph,
+ * kb_find_gaps, kb_coverage) comes straight from Prolog, which compares file
+ * times only. Apply the same content confirmation kb_status does, so a
+ * checkout or `touch` that changed no byte is not reported as stale.
+ */
+// implements REQ-cli-status-pre-first-sync
+export function confirmMetaFreshness(payload, workspaceRoot) {
+    const meta = payload.meta;
+    if (meta === undefined ||
+        typeof meta.kbPath !== "string" ||
+        !Array.isArray(meta.staleReasons))
+        return payload;
+    const reasons = meta.staleReasons.filter((reason) => record(reason) !== null);
+    const { kept, dropped } = confirmSourceNewerReasons(workspaceRoot, meta.kbPath, reasons);
+    if (dropped.length === 0)
+        return payload;
+    const allConfirmed = kept.length === 0 &&
+        meta.staleReasonsTruncated !== true &&
+        meta.syncState === "stale";
+    return {
+        ...payload,
+        meta: {
+            ...meta,
+            staleReasons: kept,
+            // A truncated list counts more reasons than it carries.
+            staleReasonCount: Math.max(kept.length, (typeof meta.staleReasonCount === "number"
+                ? meta.staleReasonCount
+                : reasons.length) - dropped.length),
+            ...(allConfirmed ? { syncState: "fresh", dirty: false } : {}),
+        },
+    };
+}

package/dist/utils/kb-manifest.d.ts

@@ -26,6 +26,13 @@ export interface KbManifest {
      * supersedes-reason-missing only while every edge it has is listed here.
      */
     supersedesReasonAcknowledged?: string[];
+    /**
+     * Supersede edges (`FROM -> TO`) the schema 10 migration acknowledged:
+     * the target has no `firmness` and only reads as firm since firmness
+     * follows origin, and the superseder is not firm. Only these edges are
+     * exempt from decision-firm-superseded.
+     */
+    firmSupersedeAcknowledged?: string[];
 }
 export declare function defaultKbManifest(): KbManifest;
 export type KbManifestStatus = {

package/dist/utils/kb-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kb-manifest.d.ts","sourceRoot":"","sources":["../../src/utils/kb-manifest.ts"],"names":[],"mappings":"AA8BA;;;;;;;GAOG;AAEH,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,MAAM,MAAM,uBAAuB,GAC/B,SAAS,GACT,WAAW,GACX,gBAAgB,CAAC;AAErB,MAAM,WAAW,UAAU;IACzB,uEAAuE;IACvE,eAAe,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,aAAa,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,uBAAuB,EAAE,uBAAuB,CAAC;IACjD;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B;;;;OAIG;IACH,4BAA4B,CAAC,EAAE,MAAM,EAAE,CAAC;CACzC;AAED,wBAAgB,iBAAiB,IAAI,UAAU,CAM9C;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,UAAU,CAAC;IAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAClE;IACE,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACxC,QAAQ,EAAE,IAAI,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AA+DN,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,gBAAgB,CAyD5E;AAED,wBAAgB,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAGvE;AAED,8EAA8E;AAC9E,wBAAgB,uBAAuB,CAAC,aAAa,EAAE,MAAM,GAAG,UAAU,CAEzE;AASD,wBAAgB,eAAe,CAC7B,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,UAAU,GACnB,MAAM,CAIR"}
+{"version":3,"file":"kb-manifest.d.ts","sourceRoot":"","sources":["../../src/utils/kb-manifest.ts"],"names":[],"mappings":"AA8BA;;;;;;;GAOG;AAEH,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,MAAM,MAAM,uBAAuB,GAC/B,SAAS,GACT,WAAW,GACX,gBAAgB,CAAC;AAErB,MAAM,WAAW,UAAU;IACzB,uEAAuE;IACvE,eAAe,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,aAAa,EAAE,MAAM,CAAC;IACtB,0DAA0D;IAC1D,uBAAuB,EAAE,uBAAuB,CAAC;IACjD;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B;;;;OAIG;IACH,4BAA4B,CAAC,EAAE,MAAM,EAAE,CAAC;IACxC;;;;;OAKG;IACH,yBAAyB,CAAC,EAAE,MAAM,EAAE,CAAC;CACtC;AAED,wBAAgB,iBAAiB,IAAI,UAAU,CAM9C;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,UAAU,CAAC;IAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAClE;IACE,KAAK,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IACxC,QAAQ,EAAE,IAAI,CAAC;IACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAuEN,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,gBAAgB,CAyD5E;AAED,wBAAgB,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAGvE;AAED,8EAA8E;AAC9E,wBAAgB,uBAAuB,CAAC,aAAa,EAAE,MAAM,GAAG,UAAU,CAEzE;AASD,wBAAgB,eAAe,CAC7B,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,UAAU,GACnB,MAAM,CAIR"}

package/dist/utils/kb-manifest.js

@@ -72,6 +72,7 @@ function validateManifest(parsed) {
     }
     const acknowledged = parsed.contextAcknowledged;
     const supersedesAcknowledged = parsed.supersedesReasonAcknowledged;
+    const firmAcknowledged = parsed.firmSupersedeAcknowledged;
     return {
         manifestVersion,
         schemaVersion,
@@ -86,6 +87,11 @@ function validateManifest(parsed) {
                 supersedesReasonAcknowledged: supersedesAcknowledged.filter((id) => typeof id === "string"),
             }
             : {}),
+        ...(Array.isArray(firmAcknowledged)
+            ? {
+                firmSupersedeAcknowledged: firmAcknowledged.filter((id) => typeof id === "string"),
+            }
+            : {}),
     };
 }
 export function readKbManifestStatus(workspaceRoot) {

package/dist/utils/merge-driver-setup.d.ts

@@ -0,0 +1,10 @@
+/** How to route the authored manifests to `kibi merge-driver`. */
+export declare const MERGE_DRIVER_SETUP = "Add to .gitattributes: \".kb/symbols.yaml merge=kibi\" and \".kb/relationships/*.yaml merge=kibi\"; then run: git config merge.kibi.driver \"npm exec --no -- kibi merge-driver %O %A %B\" (see docs/cli-reference.md#kibi-merge-driver-base-current-other).";
+/**
+ * What keeps Git from resolving `.kb/symbols.yaml` with `kibi merge-driver`:
+ * the attribute that routes the file to it, and the driver command. Empty
+ * when both are set, and null outside a Git work tree or while the
+ * manifest holds no symbol records (nothing to conflict on yet).
+ */
+export declare function manifestMergeDriverGaps(cwd: string): string[] | null;
+//# sourceMappingURL=merge-driver-setup.d.ts.map

package/dist/utils/merge-driver-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-driver-setup.d.ts","sourceRoot":"","sources":["../../src/utils/merge-driver-setup.ts"],"names":[],"mappings":"AAsBA,kEAAkE;AAElE,eAAO,MAAM,kBAAkB,iQAC2N,CAAC;AAwB3P;;;;;GAKG;AAEH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAiBpE"}

package/dist/utils/merge-driver-setup.js

@@ -0,0 +1,69 @@
+/*
+ Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ Copyright (C) 2026 Piotr Franczyk
+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU Affero General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU Affero General Public License for more details.
+
+ You should have received a copy of the GNU Affero General Public License
+ along with this program.  If not, see <https://www.gnu.org/licenses/>.
+*/
+import { execFileSync } from "node:child_process";
+import { readFileSync } from "node:fs";
+import path from "node:path";
+/** How to route the authored manifests to `kibi merge-driver`. */
+// implements REQ-cli-doctor
+export const MERGE_DRIVER_SETUP = 'Add to .gitattributes: ".kb/symbols.yaml merge=kibi" and ".kb/relationships/*.yaml merge=kibi"; then run: git config merge.kibi.driver "npm exec --no -- kibi merge-driver %O %A %B" (see docs/cli-reference.md#kibi-merge-driver-base-current-other).';
+function gitOutput(cwd, args) {
+    try {
+        return execFileSync("git", [...args], {
+            cwd,
+            encoding: "utf8",
+            stdio: ["ignore", "pipe", "ignore"],
+        }).trim();
+    }
+    catch {
+        return null;
+    }
+}
+function hasSymbolRecords(cwd) {
+    try {
+        return /^\s*-\s+id\s*:/m.test(readFileSync(path.join(cwd, ".kb", "symbols.yaml"), "utf8"));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * What keeps Git from resolving `.kb/symbols.yaml` with `kibi merge-driver`:
+ * the attribute that routes the file to it, and the driver command. Empty
+ * when both are set, and null outside a Git work tree or while the
+ * manifest holds no symbol records (nothing to conflict on yet).
+ */
+// implements REQ-cli-doctor
+export function manifestMergeDriverGaps(cwd) {
+    if (gitOutput(cwd, ["rev-parse", "--is-inside-work-tree"]) !== "true") {
+        return null;
+    }
+    if (!hasSymbolRecords(cwd))
+        return null;
+    const attribute = gitOutput(cwd, [
+        "check-attr",
+        "merge",
+        "--",
+        ".kb/symbols.yaml",
+    ]);
+    const routed = attribute?.endsWith(": merge: kibi") === true;
+    const driver = gitOutput(cwd, ["config", "--get", "merge.kibi.driver"]);
+    return [
+        ...(routed ? [] : [".kb/symbols.yaml is not routed to merge=kibi"]),
+        ...(driver ? [] : ["merge.kibi.driver is not set"]),
+    ];
+}

package/dist/utils/rule-registry.generated.d.ts

@@ -1,6 +1,6 @@
 export declare const GENERATED_RULES: readonly [{
     readonly name: "must-priority-coverage";
-    readonly description: "Every must-priority requirement must have a scenario and a test";
+    readonly description: "Every current must-priority requirement (not superseded, retired, or closed without the implemented tag) must have a scenario and a test";
     readonly enforcementClass: "canonical";
     readonly category: "coverage";
 }, {

package/dist/utils/rule-registry.generated.js

@@ -10,7 +10,7 @@
 export const GENERATED_RULES = [
     {
         name: "must-priority-coverage",
-        description: "Every must-priority requirement must have a scenario and a test",
+        description: "Every current must-priority requirement (not superseded, retired, or closed without the implemented tag) must have a scenario and a test",
         enforcementClass: "canonical",
         category: "coverage",
     },

package/dist/utils/schema-version.d.ts

@@ -1,4 +1,4 @@
-export declare const LATEST_KB_SCHEMA_VERSION = 9;
+export declare const LATEST_KB_SCHEMA_VERSION = 10;
 export interface SchemaVersionStatus {
     status: "missing" | "invalid" | "older" | "current" | "newer";
     currentVersion: number | null;

package/dist/utils/schema-version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-version.d.ts","sourceRoot":"","sources":["../../src/utils/schema-version.ts"],"names":[],"mappings":"AAuBA,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAE1C,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC;IAC9D,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAA;CAAE,GACrD,IAAI,GACJ,SAAS,CAAC;AAGd,wBAAgB,sBAAsB,CACpC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GAChD,MAAM,GAAG,IAAI,CAgBf;AAGD,wBAAgB,sBAAsB,CACpC,MAAM,CAAC,EAAE,mBAAmB,GAC3B,mBAAmB,CAgDrB"}
+{"version":3,"file":"schema-version.d.ts","sourceRoot":"","sources":["../../src/utils/schema-version.ts"],"names":[],"mappings":"AAyBA,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAE3C,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,CAAC;IAC9D,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAA;CAAE,GACrD,IAAI,GACJ,SAAS,CAAC;AAGd,wBAAgB,sBAAsB,CACpC,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GAChD,MAAM,GAAG,IAAI,CAgBf;AAGD,wBAAgB,sBAAsB,CACpC,MAAM,CAAC,EAAE,mBAAmB,GAC3B,mBAAmB,CAgDrB"}

package/dist/utils/schema-version.js

@@ -20,7 +20,9 @@
 // semantic_text so context sections never change a requirement's meaning.
 // Schema 9 adds decision firmness on requirements and ADRs and requires a
 // "Why this changed" section on new supersedes.
-export const LATEST_KB_SCHEMA_VERSION = 9;
+// Schema 10 reads a requirement or ADR without firmness as firm unless an
+// agent wrote it.
+export const LATEST_KB_SCHEMA_VERSION = 10;
 // implements REQ-003
 export function normalizeSchemaVersion(schemaVersion) {
     if (schemaVersion === undefined || schemaVersion === null) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kibi-cli",
-  "version": "2.22.1",
+  "version": "2.24.0",
   "type": "module",
   "description": "Kibi CLI for knowledge base management",
   "engines": {
@@ -235,7 +235,7 @@
     "fast-glob": "^3.2.12",
     "gray-matter": "^4.0.3",
     "js-yaml": "^4.1.0",
-    "kibi-core": "^0.22.0",
+    "kibi-core": "^0.22.1",
     "kibi-plugin-builtin": "^0.5.2",
     "kibi-plugin-sdk": "^0.5.0",
     "kibi-swipl": "^1.0.1",

package/src/public/impact/analyzer.ts

@@ -11,6 +11,7 @@ import { captureStagedSnapshot } from "../../traceability/git-change-snapshot.js
 import { readSnapshotKnowledge } from "../../traceability/snapshot-knowledge.js";
 import type { ExtractedSymbol } from "../../traceability/symbol-extract.js";
 import { extractSymbolsFromStagedFileAsync } from "../../traceability/symbol-extract.js";
+import { isTraceabilityRelationshipType } from "../symbol-granularity.js";
 import {
   createSemanticReviewDiagnostics,
   createSymbolGranularityDiagnostics,
@@ -153,7 +154,18 @@ export async function analyzeChangedFileImpact(
             manifestResults: activeManifestResults,
             symbolsByFile,
           }),
-          ...createSemanticReviewDiagnostics({ symbolsByFile }),
+          ...createSemanticReviewDiagnostics({
+            symbolsByFile,
+            linkedSourceFiles: new Set(
+              activeManifestResults
+                .filter((result) =>
+                  result.relationships.some((relationship) =>
+                    isTraceabilityRelationshipType(relationship.type),
+                  ),
+                )
+                .map((result) => result.sourceFile as string),
+            ),
+          }),
         ];
   const maxDiagnostics = options.maxDiagnostics;
   const cappedDiagnostics =

package/src/public/impact/diagnostics.ts

@@ -81,6 +81,12 @@ function getGranularSymbolsForSourceFile(
   };
 }
 
+function hasTraceabilityLinks(symbol: ExtractedSymbol): boolean {
+  return (symbol.relationships ?? []).some((relationship) =>
+    isTraceabilityRelationshipType(relationship.type),
+  );
+}
+
 function formatRelationshipTargets(symbol: ExtractedSymbol): string {
   const targets = [
     ...new Set(
@@ -183,15 +189,26 @@ export function createSemanticReviewDiagnostics(
       if (!isChangedBehavioralReviewCandidate(symbol)) continue;
 
       const linkedTargets = formatRelationshipTargets(symbol);
+      const file = symbol.location.file;
+      // In a file no requirement owns at all, the changed behavior has no
+      // recorded intent, so the review is "record it", not "compare it with
+      // its links". Elsewhere a coarser symbol of the file may still own it.
+      const unlinked =
+        !hasTraceabilityLinks(symbol) &&
+        !(options.linkedSourceFiles?.has(file) ?? false);
       diagnostics.push({
         id: "symbol_semantic_review_needed",
         severity: "warning",
         blocking: false,
         category: "symbol",
-        files: [symbol.location.file],
+        files: [file],
         docs: ["docs/symbol-traceability-taxonomy.md"],
-        message: `Changed behavioral symbol ${symbol.name} needs semantic review against linked Kibi coverage: ${linkedTargets}`,
-        suggestion: `Use kb_search and kb_query for ${symbol.location.file}, then verify that ${linkedTargets} actually describe and test the changed behavior or UI copy. Update Kibi links or requirements/tests while the edit context is fresh.`,
+        message: unlinked
+          ? `Changed behavioral symbol ${symbol.name} is in a file no requirement owns, so no recorded intent covers the behavior it has after this change`
+          : `Changed behavioral symbol ${symbol.name} needs semantic review against linked Kibi coverage: ${linkedTargets}`,
+        suggestion: unlinked
+          ? `If the change adds or alters behavior, record it with the change: kb_search({query:"<the behavior>", sourceLocations:[{path:"${file}"}]}) for a requirement that already describes it and link ${symbol.name} to it; if none does, kb_upsert a requirement with a scenario and link the symbol with implements. If behavior is unchanged (a refactor, renaming), say so in the final report instead.`
+          : `Use kb_search and kb_query for ${file}, then verify that ${linkedTargets} actually describe and test the changed behavior or UI copy. Update Kibi links or requirements/tests while the edit context is fresh.`,
       });
     }
   }

package/src/public/impact/types.ts

@@ -49,6 +49,8 @@ export type SymbolGranularityDiagnosticsOptions = {
 
 export type SemanticReviewDiagnosticsOptions = {
   readonly symbolsByFile: SymbolsByFile;
+  /** Source files where some manifest symbol carries a traceability link. */
+  readonly linkedSourceFiles?: ReadonlySet<string>;
 };
 
 export type SymbolQualityDiagnosticsOptions = {

package/src/public/operations/check-executor.ts

@@ -32,12 +32,14 @@ import {
   buildSummary,
 } from "./check-format-shared.js";
 import {
+  SCOPED_CHECK_OMITTED_ID,
   analyzeKbCheckImpact,
   collectQueryPlanSafetyViolations,
   getEffectiveRules,
   partitionCheckFindings,
   qualityDiagnosticsFromImpact,
   resolveCheckRules,
+  scopeQualityDiagnosticsToImpact,
   stagedEntityIdStyleDiagnostics,
 } from "./check-helpers.js";
 import { collectCheckPolicyViolations } from "./check-policy-rules.js";
@@ -430,8 +432,17 @@ export async function executeCheck(
             now: context.clock(),
             ...maxDiagnosticsOption,
           });
+    // A check scoped to sourceFiles answers about those files; the KB-wide
+    // advisory scan only lists what concerns them.
+    const advisoryQualityDiagnostics =
+      impactResult && args.sourceFiles !== undefined && !hasExplicitRules
+        ? scopeQualityDiagnosticsToImpact(
+            partitioned.qualityDiagnostics,
+            impactResult,
+          )
+        : partitioned.qualityDiagnostics;
     const qualityDiagnostics = [
-      ...partitioned.qualityDiagnostics,
+      ...advisoryQualityDiagnostics,
       ...extraQualityDiagnostics,
     ];
 
@@ -439,9 +450,10 @@ export async function executeCheck(
     const migrationPlan = await migrationPlanForCheck(
       context,
       violations,
-      qualityDiagnostics as unknown as readonly Readonly<
-        Record<string, unknown>
-      >[],
+      // The omitted-findings count is a pointer, not a repair to plan.
+      qualityDiagnostics.filter(
+        (diagnostic) => diagnostic.id !== SCOPED_CHECK_OMITTED_ID,
+      ) as unknown as readonly Readonly<Record<string, unknown>>[],
       statusPlan,
     );
     return {

package/src/public/operations/check-helpers.ts

@@ -80,6 +80,71 @@ export function partitionCheckFindings(findings: readonly Violation[]): {
   return { violations, qualityDiagnostics };
 }
 
+export const SCOPED_CHECK_OMITTED_ID = "scoped_check_omitted_quality";
+const OMITTED_RULES_SHOWN = 5;
+
+/**
+ * Advisory rule findings of a check scoped to `sourceFiles` that concern
+ * those files: findings on an entity a changed file's symbols link to (or on
+ * those symbols) and findings whose source is one of the files. The KB-wide rest (unapproved requirements elsewhere,
+ * unrelated scenarios) is reduced to one info diagnostic with per-rule counts,
+ * so a check after a small edit answers about that edit; kb_check without
+ * sourceFiles still lists every finding.
+ */
+// implements REQ-cli-check
+export function scopeQualityDiagnosticsToImpact(
+  diagnostics: readonly QualityDiagnostic[],
+  impactResult: ChangedFileImpactResult,
+): QualityDiagnostic[] {
+  const normalizePath = (value: string) =>
+    value.replace(/\\/g, "/").replace(/^\.\//, "");
+  const files = new Set(impactResult.sourceFiles.map(normalizePath));
+  const entityIds = new Set<string>();
+  for (const linked of impactResult.linkedEntities) {
+    entityIds.add(linked.id);
+    entityIds.add(linked.sourceSymbolId);
+  }
+  const inScope = (diagnostic: QualityDiagnostic) =>
+    (diagnostic.entityId !== undefined && entityIds.has(diagnostic.entityId)) ||
+    (diagnostic.source !== undefined &&
+      files.has(normalizePath(diagnostic.source))) ||
+    (diagnostic.files ?? []).some((file) => files.has(normalizePath(file)));
+
+  const kept: QualityDiagnostic[] = [];
+  const omittedByRule = new Map<string, number>();
+  for (const diagnostic of diagnostics) {
+    if (inScope(diagnostic)) {
+      kept.push(diagnostic);
+      continue;
+    }
+    const rule = diagnostic.id.replace(/^rule\./, "");
+    omittedByRule.set(rule, (omittedByRule.get(rule) ?? 0) + 1);
+  }
+  if (omittedByRule.size === 0) return kept;
+
+  const omitted = [...omittedByRule.values()].reduce((a, b) => a + b, 0);
+  const rules = [...omittedByRule.entries()].sort(
+    (a, b) => b[1] - a[1] || a[0].localeCompare(b[0]),
+  );
+  const shown = rules
+    .slice(0, OMITTED_RULES_SHOWN)
+    .map(([rule, count]) => `${rule} ×${count}`);
+  if (rules.length > OMITTED_RULES_SHOWN) {
+    shown.push(`${rules.length - OMITTED_RULES_SHOWN} more rules`);
+  }
+  kept.push({
+    id: SCOPED_CHECK_OMITTED_ID,
+    severity: "info",
+    blocking: false,
+    category: "integrity",
+    message: `This check is scoped to ${files.size} source ${files.size === 1 ? "file" : "files"}; ${omitted} advisory ${omitted === 1 ? "finding" : "findings"} elsewhere in the KB ${omitted === 1 ? "is" : "are"} not listed (${shown.join(", ")}). None of them concerns the checked files.`,
+    suggestion:
+      "Run kb_check without sourceFiles for the full KB audit when it matters to the task.",
+    evidence: { omitted, byRule: Object.fromEntries(rules) },
+  });
+  return kept;
+}
+
 function resolveChecksPlPath(): string {
   const override = getKbPlPathOverride();
   return path.join(path.dirname(override ?? resolveKbPlPath()), "checks.pl");

package/src/public/operations/contracts.ts

@@ -447,6 +447,7 @@ const BASE_DATA_SCHEMAS: Readonly<
       count: integerValue,
       factQuery: recordValue,
       branchStore: recordValue,
+      body: recordValue,
     },
     ["entities", "count"],
   ),