kibi-cli 2.29.0 → 2.31.0

package/dist/cli-operation-metadata.d.ts

@@ -31,19 +31,19 @@ export declare const CLI_OPERATION_METADATA: readonly [{
 }, {
     readonly name: "kb_status";
     readonly cliName: "status";
-    readonly description: "Report current branch, KB snapshot, freshness metadata, schema status, and a typed kibi.migration-plan.v2 action graph. Read-only status inspection with no mutation side effects; damaged stores are diagnosed without starting the engine.";
+    readonly description: "Report current branch, KB snapshot, freshness metadata, schema status, and a typed kibi.migration-plan.v2 action graph. Call it first to orient on a branch or after a failed call; use kb_check for validation findings and kb_coverage for proof status. Read-only status inspection with no mutation side effects; damaged stores are diagnosed without starting the engine.";
 }, {
     readonly name: "kb_find_gaps";
     readonly cliName: "find-gaps";
-    readonly description: "Run bulk missing/present relationship analysis over KB entities. Use for questions like which requirements lack scenarios or tests. No mutation side effects.";
+    readonly description: "List KB entities by the relationships they lack or have. Use for questions like which requirements lack scenarios or tests; all filters must match, and a relationship counts in either direction. Use kb_coverage instead for proof status and repair plans, and kb_check for rule violations. No mutation side effects.";
 }, {
     readonly name: "kb_coverage";
     readonly cliName: "coverage";
-    readonly description: "Generate curated structural coverage and conservative end-to-end requirement proof reports for requirements, symbols, or grouped types. Reports include the compatible repair plan plus typed kibi.migration-plan.v2 actions; semantic and E2E actions remain review/execution work. Paginated plans identify incomplete scope and no mutation occurs.";
+    readonly description: "Generate curated structural coverage and conservative end-to-end requirement proof reports for requirements, symbols, or grouped types. Use it to ask which requirements are tested end to end, how strong each requirement's evidence is (evidenceLevel: proved, tested, asserted or unverified), and what blocks the rest; use kb_find_gaps for a plain list of missing links and kb_check for rule violations. Reports include the compatible repair plan plus typed kibi.migration-plan.v2 actions; semantic and E2E actions remain review/execution work. Paginated plans identify incomplete scope and no mutation occurs.";
 }, {
     readonly name: "kb_graph";
     readonly cliName: "graph";
-    readonly description: "Run bounded graph traversal from one or more seed IDs across curated relationship types. No mutation side effects.";
+    readonly description: "Run bounded graph traversal from one or more seed IDs across curated relationship types and return the nodes and edges reached. Use it to follow links from IDs you already have, such as a requirement to its scenarios and tests or a symbol to the requirements it implements; use kb_query to find entities by filter and kb_search to ask a question. Traversal stops at depth, maxNodes or maxEdges and then sets truncated. No mutation side effects.";
 }, {
     readonly name: "kb_semantic_advisor";
     readonly cliName: "semantic-advisor";
@@ -59,11 +59,11 @@ export declare const CLI_OPERATION_METADATA: readonly [{
 }, {
     readonly name: "kb_model";
     readonly cliName: "model";
-    readonly description: "Turn requirement prose into checkable structure without writing the KB. mode:analyze returns the semantic advisor receipt: the clause ledger, what is grounded, what is ambiguous and suggested modeling (pass clauses for compound prose and optional typed kibi.logic.v1 interpretations). mode:requirement converts one claim (subjectKey, propertyKey, operator, value, or typed logic) into a strict-lane write set and applyPlan. mode:predicates ranks ontology predicate schemas and returns an applicable predicate-fact plan only for reviewed bindings, otherwise an ontology-gap observation. With requirementId, mode:predicates also returns a hash-bound plan (fact write plus requires_predicate link) for kb_apply_plan, whose contradictionAnalysis is the what-if over the current KB; other returned plans apply with kb_upsert, and kb_upsert dryRun with plannedFacts previews a requirement before its facts exist.";
+    readonly description: "Turn requirement prose into checkable structure without writing the KB. Use it for one requirement's prose; to plan a whole change request use kb_compile_intent. mode:analyze returns the semantic advisor receipt: the clause ledger, what is grounded, what is ambiguous and suggested modeling (pass clauses for compound prose and optional typed kibi.logic.v1 interpretations). mode:requirement converts one claim (subjectKey, propertyKey, operator, value, or typed logic) into a strict-lane write set and applyPlan. mode:predicates ranks ontology predicate schemas and returns an applicable predicate-fact plan only for reviewed bindings, otherwise an ontology-gap observation. With requirementId, mode:predicates also returns a hash-bound plan (fact write plus requires_predicate link) for kb_apply_plan, whose contradictionAnalysis is the what-if over the current KB; other returned plans apply with kb_upsert, and kb_upsert dryRun with plannedFacts previews a requirement before its facts exist.";
 }, {
     readonly name: "kb_plan_bootstrap";
     readonly cliName: "plan-bootstrap";
-    readonly description: "Generate a deterministic, snapshot-bound kibi.bootstrap-plan.v1 for repository onboarding. Read-only analysis of the repository plus any declared knowledge sources and cited intent claims returns evidence, bounded context questions, exact dependency-ordered actions, a canonical plan hash, and no mutation side effects.";
+    readonly description: "Generate a deterministic, snapshot-bound kibi.bootstrap-plan.v1 for repository onboarding. Use it only to onboard a repository whose KB is empty or incomplete (the kibi-bootstrap skill drives it); for a change in an onboarded project use kb_compile_intent. Read-only analysis of the repository plus any declared knowledge sources and cited intent claims returns evidence, bounded context questions, exact dependency-ordered actions, a canonical plan hash, and no mutation side effects.";
 }, {
     readonly name: "kb_validate_upsert";
     readonly cliName: "validate-upsert";
@@ -83,7 +83,7 @@ export declare const CLI_OPERATION_METADATA: readonly [{
 }, {
     readonly name: "kb_prepare_impact_review";
     readonly cliName: "prepare-impact-review";
-    readonly description: "Prepare complete content-bound impact-review authoring inputs from the current staged snapshot or explicitly selected immutable Git commits. Returns strict reviewer schemas and an unauthored template; it does not decide, approve, sign, stage, or prove the review.";
+    readonly description: "Prepare complete content-bound impact-review authoring inputs from the current staged snapshot or explicitly selected immutable Git commits. Use it when kb_check reports that changed files need an impact review; it does not plan KB changes. Returns strict reviewer schemas and an unauthored template; it does not decide, approve, sign, stage, or prove the review.";
 }, {
     readonly name: "kb_sparql_remote";
     readonly cliName: "sparql-remote";
@@ -91,7 +91,7 @@ export declare const CLI_OPERATION_METADATA: readonly [{
 }, {
     readonly name: "kb_compile_intent";
     readonly cliName: "compile-intent";
-    readonly description: "Compile complete change intent into a deterministic, snapshot-bound read-only plan. Reuses intent-aware discovery and semantic modeling, accounts for every proposition, reports contradiction witnesses, proposes traceability links, and emits dependency-ordered kb_upsert-style steps only for resolved typed claims. contradictionAnalysis.outcome is no_conflict only when the check could decide: an unmodeled proposition or a related current requirement without logic leaves it unresolved with reasons and reviewCandidates to compare and judge through conflictReviews. No mutation side effects.";
+    readonly description: "Compile complete change intent into a deterministic, snapshot-bound read-only plan. Use it before editing code for a change request that may touch several requirements; use kb_model for one requirement's prose and kb_plan_bootstrap for first-time onboarding. Reuses intent-aware discovery and semantic modeling, accounts for every proposition, reports contradiction witnesses, proposes traceability links, and emits dependency-ordered kb_upsert-style steps only for resolved typed claims. contradictionAnalysis.outcome is no_conflict only when the check could decide: an unmodeled proposition or a related current requirement without logic leaves it unresolved with reasons and reviewCandidates to compare and judge through conflictReviews. No mutation side effects.";
 }, {
     readonly name: "kb_apply_plan";
     readonly cliName: "apply-plan";

package/dist/cli-operation-metadata.js

@@ -35,22 +35,22 @@ export const CLI_OPERATION_METADATA = [
     {
         name: "kb_status",
         cliName: "status",
-        description: "Report current branch, KB snapshot, freshness metadata, schema status, and a typed kibi.migration-plan.v2 action graph. Read-only status inspection with no mutation side effects; damaged stores are diagnosed without starting the engine.",
+        description: "Report current branch, KB snapshot, freshness metadata, schema status, and a typed kibi.migration-plan.v2 action graph. Call it first to orient on a branch or after a failed call; use kb_check for validation findings and kb_coverage for proof status. Read-only status inspection with no mutation side effects; damaged stores are diagnosed without starting the engine.",
     },
     {
         name: "kb_find_gaps",
         cliName: "find-gaps",
-        description: "Run bulk missing/present relationship analysis over KB entities. Use for questions like which requirements lack scenarios or tests. No mutation side effects.",
+        description: "List KB entities by the relationships they lack or have. Use for questions like which requirements lack scenarios or tests; all filters must match, and a relationship counts in either direction. Use kb_coverage instead for proof status and repair plans, and kb_check for rule violations. No mutation side effects.",
     },
     {
         name: "kb_coverage",
         cliName: "coverage",
-        description: "Generate curated structural coverage and conservative end-to-end requirement proof reports for requirements, symbols, or grouped types. Reports include the compatible repair plan plus typed kibi.migration-plan.v2 actions; semantic and E2E actions remain review/execution work. Paginated plans identify incomplete scope and no mutation occurs.",
+        description: "Generate curated structural coverage and conservative end-to-end requirement proof reports for requirements, symbols, or grouped types. Use it to ask which requirements are tested end to end, how strong each requirement's evidence is (evidenceLevel: proved, tested, asserted or unverified), and what blocks the rest; use kb_find_gaps for a plain list of missing links and kb_check for rule violations. Reports include the compatible repair plan plus typed kibi.migration-plan.v2 actions; semantic and E2E actions remain review/execution work. Paginated plans identify incomplete scope and no mutation occurs.",
     },
     {
         name: "kb_graph",
         cliName: "graph",
-        description: "Run bounded graph traversal from one or more seed IDs across curated relationship types. No mutation side effects.",
+        description: "Run bounded graph traversal from one or more seed IDs across curated relationship types and return the nodes and edges reached. Use it to follow links from IDs you already have, such as a requirement to its scenarios and tests or a symbol to the requirements it implements; use kb_query to find entities by filter and kb_search to ask a question. Traversal stops at depth, maxNodes or maxEdges and then sets truncated. No mutation side effects.",
     },
     {
         name: "kb_semantic_advisor",
@@ -70,12 +70,12 @@ export const CLI_OPERATION_METADATA = [
     {
         name: "kb_model",
         cliName: "model",
-        description: "Turn requirement prose into checkable structure without writing the KB. mode:analyze returns the semantic advisor receipt: the clause ledger, what is grounded, what is ambiguous and suggested modeling (pass clauses for compound prose and optional typed kibi.logic.v1 interpretations). mode:requirement converts one claim (subjectKey, propertyKey, operator, value, or typed logic) into a strict-lane write set and applyPlan. mode:predicates ranks ontology predicate schemas and returns an applicable predicate-fact plan only for reviewed bindings, otherwise an ontology-gap observation. With requirementId, mode:predicates also returns a hash-bound plan (fact write plus requires_predicate link) for kb_apply_plan, whose contradictionAnalysis is the what-if over the current KB; other returned plans apply with kb_upsert, and kb_upsert dryRun with plannedFacts previews a requirement before its facts exist.",
+        description: "Turn requirement prose into checkable structure without writing the KB. Use it for one requirement's prose; to plan a whole change request use kb_compile_intent. mode:analyze returns the semantic advisor receipt: the clause ledger, what is grounded, what is ambiguous and suggested modeling (pass clauses for compound prose and optional typed kibi.logic.v1 interpretations). mode:requirement converts one claim (subjectKey, propertyKey, operator, value, or typed logic) into a strict-lane write set and applyPlan. mode:predicates ranks ontology predicate schemas and returns an applicable predicate-fact plan only for reviewed bindings, otherwise an ontology-gap observation. With requirementId, mode:predicates also returns a hash-bound plan (fact write plus requires_predicate link) for kb_apply_plan, whose contradictionAnalysis is the what-if over the current KB; other returned plans apply with kb_upsert, and kb_upsert dryRun with plannedFacts previews a requirement before its facts exist.",
     },
     {
         name: "kb_plan_bootstrap",
         cliName: "plan-bootstrap",
-        description: "Generate a deterministic, snapshot-bound kibi.bootstrap-plan.v1 for repository onboarding. Read-only analysis of the repository plus any declared knowledge sources and cited intent claims returns evidence, bounded context questions, exact dependency-ordered actions, a canonical plan hash, and no mutation side effects.",
+        description: "Generate a deterministic, snapshot-bound kibi.bootstrap-plan.v1 for repository onboarding. Use it only to onboard a repository whose KB is empty or incomplete (the kibi-bootstrap skill drives it); for a change in an onboarded project use kb_compile_intent. Read-only analysis of the repository plus any declared knowledge sources and cited intent claims returns evidence, bounded context questions, exact dependency-ordered actions, a canonical plan hash, and no mutation side effects.",
     },
     {
         name: "kb_validate_upsert",
@@ -100,7 +100,7 @@ export const CLI_OPERATION_METADATA = [
     {
         name: "kb_prepare_impact_review",
         cliName: "prepare-impact-review",
-        description: "Prepare complete content-bound impact-review authoring inputs from the current staged snapshot or explicitly selected immutable Git commits. Returns strict reviewer schemas and an unauthored template; it does not decide, approve, sign, stage, or prove the review.",
+        description: "Prepare complete content-bound impact-review authoring inputs from the current staged snapshot or explicitly selected immutable Git commits. Use it when kb_check reports that changed files need an impact review; it does not plan KB changes. Returns strict reviewer schemas and an unauthored template; it does not decide, approve, sign, stage, or prove the review.",
     },
     {
         name: "kb_sparql_remote",
@@ -110,7 +110,7 @@ export const CLI_OPERATION_METADATA = [
     {
         name: "kb_compile_intent",
         cliName: "compile-intent",
-        description: "Compile complete change intent into a deterministic, snapshot-bound read-only plan. Reuses intent-aware discovery and semantic modeling, accounts for every proposition, reports contradiction witnesses, proposes traceability links, and emits dependency-ordered kb_upsert-style steps only for resolved typed claims. contradictionAnalysis.outcome is no_conflict only when the check could decide: an unmodeled proposition or a related current requirement without logic leaves it unresolved with reasons and reviewCandidates to compare and judge through conflictReviews. No mutation side effects.",
+        description: "Compile complete change intent into a deterministic, snapshot-bound read-only plan. Use it before editing code for a change request that may touch several requirements; use kb_model for one requirement's prose and kb_plan_bootstrap for first-time onboarding. Reuses intent-aware discovery and semantic modeling, accounts for every proposition, reports contradiction witnesses, proposes traceability links, and emits dependency-ordered kb_upsert-style steps only for resolved typed claims. contradictionAnalysis.outcome is no_conflict only when the check could decide: an unmodeled proposition or a related current requirement without logic leaves it unresolved with reasons and reviewCandidates to compare and judge through conflictReviews. No mutation side effects.",
     },
     {
         name: "kb_apply_plan",

package/dist/cli-register-reporting.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-register-reporting.d.ts","sourceRoot":"","sources":["../src/cli-register-reporting.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYzC,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAsMhE"}
+{"version":3,"file":"cli-register-reporting.d.ts","sourceRoot":"","sources":["../src/cli-register-reporting.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAYzC,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA+QhE"}

package/dist/cli-register-reporting.js

@@ -46,6 +46,18 @@ export function registerReportingCommands(program) {
         .action(async (options) => {
         await (await import("./commands/report.js")).reportCommand(options);
     });
+    program
+        .command("signoff")
+        .description("Show the requirements a change adds, rewrites or affects (or, with --questions, the decisions waiting for the person) as chat Markdown, a fenced block for host renderers, an HTML page or JSON for signoff")
+        .option("--staged", "Summarize staged changes instead of the working tree", false)
+        .option("--questions <path>", 'Render decision questions from a JSON file (use - for stdin): {"questions":[{"statement":"...","quote":"...","firmness":"firm"}]}')
+        .option("--format <format>", "Output format: chat (plain Markdown for a reply) | md (fenced block for host renderers) | html | json; default chat, or KIBI_SIGNOFF_FORMAT")
+        .option("--output <path>", "HTML file to write (default .kb/briefs/signoff/latest.html)")
+        .option("--open", "Open the HTML page in the default browser", false)
+        .option("--no-proof", "Skip the proof-state lookup (faster; no Prolog)")
+        .action(async (options) => {
+        await (await import("./commands/signoff.js")).signoffCommand(options);
+    });
     program
         .command("coverage")
         .description(getCliOperationMetadata("kb_coverage").description)
@@ -53,7 +65,7 @@ export function registerReportingCommands(program) {
         .option("--by <group>", "Coverage mode: req|symbol|type", "req")
         .option("--tag <tags>", "Comma-separated tag filter")
         .option("--include-passing", "Include passing rows", false)
-        .option("--status <statuses>", "Comma-separated requirement proof-status filter (proven, missing, unresolved, not_applicable); implies include-passing")
+        .option("--status <statuses>", "Comma-separated requirement proof-status filter (tested, missing, unresolved, not_applicable); implies include-passing")
         .option("--no-include-transitive", "Disable transitive symbol coverage")
         .option("--limit <n>", "Limit results", "100")
         .option("--offset <n>", "Skip results", "0")
@@ -108,6 +120,8 @@ export function registerReportingCommands(program) {
         .option("--min-links <n>", "Minimum number of links required for symbol coverage", "1")
         .option("--dry-run", "Do not modify files; only print what would happen")
         .option("--format <format>", "Output format: text|json", "text")
+        .option("--write-certificates <file>", "Also save the kibi.certificates.v1 bundle the kb-consistency rule re-checked")
+        .option("--certificates <file>", "Only re-check a saved kibi.certificates.v1 bundle against the current KB with the independent checker")
         .action(withExitCode(async (options, command) => {
         if (options.input !== undefined) {
             await runJsonInvocation({
@@ -117,7 +131,26 @@ export function registerReportingCommands(program) {
             });
             return undefined;
         }
-        return (await import("./commands/check.js")).checkCommand(options);
+        // implements REQ-kibi-kb-certificates
+        if (options.certificates !== undefined) {
+            if (options.writeCertificates !== undefined ||
+                options.staged ||
+                options.rules !== undefined)
+                throw new Error("check: --certificates only re-checks a saved bundle; it cannot be combined with --write-certificates, --staged or --rules");
+            return (await import("./commands/check-certificates.js")).checkCertificatesCommand({
+                certificates: options.certificates,
+                json: options.format === "json",
+            });
+        }
+        if (options.writeCertificates !== undefined && options.staged)
+            throw new Error("check: --write-certificates saves the full KB's bundle; it cannot be combined with --staged");
+        const { writeCertificates, ...checkOptions } = options;
+        const result = await (await import("./commands/check.js")).checkCommand(checkOptions);
+        if (writeCertificates !== undefined) {
+            const saved = await (await import("./commands/check-certificates.js")).writeCertificates(writeCertificates);
+            process.stderr.write(`Saved ${saved.certificates} certificate(s) to ${saved.path}\n`);
+        }
+        return result;
     }));
     program
         .command("check-diff")

package/dist/commands/check-certificates.d.ts

@@ -0,0 +1,52 @@
+import type { OperationContext } from "../public/operations/runtime-types.js";
+type TheoremReport = Readonly<{
+    theorem: string;
+    verdict: "proved" | "disproved" | "unresolved";
+    groups?: number;
+    models?: number;
+    contradictions?: readonly unknown[];
+    unresolved?: readonly unknown[];
+    predicates?: number;
+    edges?: number;
+}>;
+type RejectedCertificate = Readonly<{
+    certificate: number;
+    kind: string;
+    reason: string;
+    group?: unknown;
+}>;
+export type VerificationReport = Readonly<{
+    version: string;
+    status: "verified" | "rejected";
+    certificates: number;
+    verified: number;
+    rejected: readonly RejectedCertificate[];
+    theorems: readonly TheoremReport[];
+    notCovered: readonly string[];
+}>;
+/**
+ * The exit code for re-checking a saved bundle: 0 only when every certificate
+ * re-verifies and no theorem is disproved. An unresolved theorem does not
+ * fail the run; it is reported and never counts as proved.
+ */
+export declare function certificatesExitCode(report: VerificationReport): 0 | 1;
+export declare function renderVerification(report: VerificationReport): string;
+/** Re-check a saved kibi.certificates.v1 bundle against the current KB. */
+export declare function recheckCertificates(bundlePath: string, context: OperationContext): Promise<VerificationReport>;
+/** `kibi check --certificates <file>`: print the re-check report. */
+export declare function checkCertificatesCommand(options: {
+    certificates: string;
+    json?: boolean;
+}): Promise<{
+    exitCode: number;
+}>;
+/**
+ * `kibi check --write-certificates <file>`: save the bundle the
+ * kb-consistency rule re-checked, so another checker can re-check it.
+ */
+export declare function writeCertificates(bundlePath: string): Promise<{
+    path: string;
+    certificates: number;
+}>;
+export {};
+//# sourceMappingURL=check-certificates.d.ts.map

package/dist/commands/check-certificates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-certificates.d.ts","sourceRoot":"","sources":["../../src/commands/check-certificates.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAG9E,KAAK,aAAa,GAAG,QAAQ,CAAC;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,QAAQ,GAAG,WAAW,GAAG,YAAY,CAAC;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IACpC,UAAU,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEH,KAAK,mBAAmB,GAAG,QAAQ,CAAC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC,CAAC;AAGH,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACzC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IACnC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/B,CAAC,CAAC;AA+BH;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,kBAAkB,GAAG,CAAC,GAAG,CAAC,CAKtE;AA4BD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CA4CrE;AAsCD,2EAA2E;AAC3E,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,kBAAkB,CAAC,CAQ7B;AAGD,qEAAqE;AACrE,wBAAsB,wBAAwB,CAAC,OAAO,EAAE;IACtD,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAUhC;AAGD;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,CAUD"}

package/dist/commands/check-certificates.js

@@ -0,0 +1,163 @@
+/*
+ Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ Copyright (C) 2026 Piotr Franczyk
+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU Affero General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import path from "node:path";
+import { escapeAtom } from "../prolog/codec.js";
+import { runOperationJsonQuery } from "../public/operations/prolog-json.js";
+import { createCliRuntime } from "../runtime/cli-runtime.js";
+const THEOREM_LABELS = {
+    properties_consistent: "Property facts are consistent",
+    predicates_consistent: "Predicate facts are consistent",
+    decisions_consistent: "Allow/deny decisions are consistent",
+    rules_stratified: "Stored rules are stratified",
+};
+const NOT_COVERED_LABELS = {
+    rule_conflicts: "opposing rule pairs (kibi check domain-contradictions)",
+    scenario_feasibility: "scenario feasibility (kibi check scenario-feasibility)",
+};
+function assertReadableBundle(filePath) {
+    if (!existsSync(filePath)) {
+        throw new Error(`check: no certificate bundle at ${filePath}`);
+    }
+    try {
+        JSON.parse(readFileSync(filePath, "utf8"));
+    }
+    catch {
+        throw new Error(`check: ${filePath} is not valid JSON`);
+    }
+}
+function prologPath(filePath) {
+    return escapeAtom(path.resolve(filePath).replaceAll("\\", "/"));
+}
+// implements REQ-kibi-kb-certificates
+/**
+ * The exit code for re-checking a saved bundle: 0 only when every certificate
+ * re-verifies and no theorem is disproved. An unresolved theorem does not
+ * fail the run; it is reported and never counts as proved.
+ */
+export function certificatesExitCode(report) {
+    if (report.status !== "verified")
+        return 1;
+    return report.theorems.some((theorem) => theorem.verdict === "disproved")
+        ? 1
+        : 0;
+}
+function describeGroup(entry) {
+    if (entry === null || typeof entry !== "object")
+        return String(entry);
+    const record = entry;
+    if (typeof record.subjectKey === "string") {
+        const scope = typeof record.scope === "string" && record.scope !== ""
+            ? ` (scope ${record.scope})`
+            : "";
+        const reason = typeof record.reason === "string" ? `: ${record.reason}` : "";
+        return `${record.subjectKey}.${String(record.propertyKey)}${scope}${reason}`;
+    }
+    if (typeof record.name === "string") {
+        const args = Array.isArray(record.args)
+            ? record.args
+            : Array.isArray(record.key)
+                ? record.key
+                : [];
+        const reason = typeof record.reason === "string" ? `: ${record.reason}` : "";
+        return `${String(record.namespace)}:${record.name}(${args.join(", ")})${reason}`;
+    }
+    return JSON.stringify(entry);
+}
+// implements REQ-kibi-kb-certificates
+export function renderVerification(report) {
+    const lines = [];
+    lines.push(report.status === "verified"
+        ? `Kibi certificates: all ${report.certificates} re-verified`
+        : `Kibi certificates: ${report.rejected.length} problem(s); ${report.verified} of ${report.certificates} certificates re-verified`);
+    lines.push("");
+    for (const theorem of report.theorems) {
+        const label = THEOREM_LABELS[theorem.theorem] ?? theorem.theorem;
+        const detail = theorem.theorem === "rules_stratified"
+            ? `${theorem.predicates ?? 0} predicates, ${theorem.edges ?? 0} dependencies`
+            : (theorem.groups ?? 0) === 0
+                ? "no facts of this kind"
+                : `${theorem.models ?? 0} of ${theorem.groups ?? 0} groups have a model`;
+        lines.push(`- ${label}: ${theorem.verdict} (${detail})`);
+        for (const contradiction of theorem.contradictions ?? []) {
+            lines.push(`    contradiction: ${describeGroup(contradiction)}`);
+        }
+        for (const unresolved of theorem.unresolved ?? []) {
+            lines.push(`    unresolved: ${describeGroup(unresolved)}`);
+        }
+    }
+    if (report.rejected.length > 0) {
+        lines.push("");
+        lines.push("Rejected:");
+        for (const rejected of report.rejected) {
+            const where = rejected.certificate > 0
+                ? `certificate ${rejected.certificate} (${rejected.kind})`
+                : describeGroup(rejected.group ?? rejected.kind);
+            lines.push(`- ${where}: ${rejected.reason}`);
+        }
+    }
+    if (report.notCovered.length > 0) {
+        lines.push("");
+        lines.push(`Not certified yet: ${report.notCovered
+            .map((name) => NOT_COVERED_LABELS[name] ?? name)
+            .join("; ")}`);
+    }
+    return `${lines.join("\n")}\n`;
+}
+async function withEngine(run) {
+    const runtime = createCliRuntime();
+    const context = await runtime.open({
+        name: "kibi_check_certificates",
+        effects: [],
+        requiresProlog: true,
+        execute: async () => undefined,
+    }, {});
+    let completed = false;
+    try {
+        const result = await run(context);
+        completed = true;
+        return result;
+    }
+    finally {
+        await runtime.close(context, completed
+            ? { status: "success", result: 0 }
+            : { status: "error", error: 1 });
+    }
+}
+function prologOf(context) {
+    if (context.prolog === undefined) {
+        throw new Error("check: the Kibi engine is not available");
+    }
+    return context.prolog;
+}
+// implements REQ-kibi-kb-certificates
+/** Re-check a saved kibi.certificates.v1 bundle against the current KB. */
+export async function recheckCertificates(bundlePath, context) {
+    assertReadableBundle(bundlePath);
+    return await runOperationJsonQuery(prologOf(context), "certificate_check.pl", `certificate_check:kb_verify_certificates_file('${prologPath(bundlePath)}', JsonString)`, "Certificate verification");
+}
+// implements REQ-kibi-kb-certificates
+/** `kibi check --certificates <file>`: print the re-check report. */
+export async function checkCertificatesCommand(options) {
+    const report = await withEngine((context) => recheckCertificates(options.certificates, context));
+    process.stdout.write(options.json
+        ? `${JSON.stringify(report, null, 2)}\n`
+        : renderVerification(report));
+    return { exitCode: certificatesExitCode(report) };
+}
+// implements REQ-kibi-kb-certificates
+/**
+ * `kibi check --write-certificates <file>`: save the bundle the
+ * kb-consistency rule re-checked, so another checker can re-check it.
+ */
+export async function writeCertificates(bundlePath) {
+    const target = path.resolve(bundlePath);
+    return await withEngine((context) => runOperationJsonQuery(prologOf(context), "certificates.pl", `certificates:kb_write_certificates('${prologPath(target)}', JsonString)`, "Certificate generation"));
+}

package/dist/commands/check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/commands/check.ts"],"names":[],"mappings":"AAqCA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAoF7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAE3D,YAAY,EAAE,SAAS,EAAE,CAAC;AAE1B,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1B;AA6hBD,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,CAAC,EACtC,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,EAC5B,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GAC3B,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAMpB;AAGD,wBAAsB,YAAY,CAChC,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA0rB/B;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAoDtB;AAID,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,MAAM,EAAE,CAAC,CAgBnB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,aAAa,EACrB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,EAAE,CAAC,CAiBnB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAkEtB;AAID,wBAAsB,aAAa,CACjC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAmGtB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,SAAS,EAAE,CAAC,CAyCtB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAgDtB;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CA0BtB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqBtB;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqBtB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqBtB"}
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/commands/check.ts"],"names":[],"mappings":"AAqCA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAqF7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAE3D,YAAY,EAAE,SAAS,EAAE,CAAC;AAE1B,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1B;AA6hBD,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,CAAC,EACtC,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,EAC5B,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GAC3B,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAMpB;AAGD,wBAAsB,YAAY,CAChC,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA6rB/B;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAoDtB;AAID,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,MAAM,EAAE,CAAC,CAgBnB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,aAAa,EACrB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,EAAE,CAAC,CAiBnB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAkEtB;AAID,wBAAsB,aAAa,CACjC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAmGtB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,SAAS,EAAE,CAAC,CAyCtB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAgDtB;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CA0BtB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqBtB;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqBtB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqBtB"}

package/dist/commands/check.js

@@ -25,6 +25,7 @@ import { PrologProcess } from "../prolog.js";
 import { escapeAtom, normalizeEntityId, parseTriples, parseViolationRows, } from "../prolog/codec.js";
 import { createSemanticReviewDiagnostics, createSymbolGranularityDiagnostics, createSymbolQualityDiagnostics, hasBlockingImpactDiagnostics, } from "../public/impact-diagnostics.js";
 import { executeCheck } from "../public/operations/check-executor.js";
+import { nodeGit } from "../public/operations/node-ports.js";
 import { refreshDetachedSnapshot } from "../runtime/detached-snapshot.js";
 import { amendsRootCommit } from "../traceability/commit-amend.js";
 import { KIBI_NO_IMPACT_DECLARATION, KIBI_SYMBOLS_MANIFEST_PATH, KIBI_SYMBOL_COORDINATES_PATH, } from "../traceability/evidence-model.js";
@@ -930,6 +931,9 @@ export async function checkCommand(options) {
             workspaceRoot: process.cwd(),
             signal: new AbortController().signal,
             clock: () => new Date(),
+            // The workspace snapshot lets quality diagnostics read the same
+            // proof receipt evidence as kibi coverage.
+            git: nodeGit,
             prolog: {
                 query: (goal) => activeProlog.query(goal),
                 ...(activeProlog instanceof EngineClient

package/dist/commands/discovery-table.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"discovery-table.d.ts","sourceRoot":"","sources":["../../src/commands/discovery-table.ts"],"names":[],"mappings":"AAIA,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAmCvE;AA4ED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACzC,MAAM,CA4ER"}
+{"version":3,"file":"discovery-table.d.ts","sourceRoot":"","sources":["../../src/commands/discovery-table.ts"],"names":[],"mappings":"AAIA,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAmCvE;AA4ED,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACzC,MAAM,CA+ER"}

package/dist/commands/discovery-table.js

@@ -87,9 +87,10 @@ export function renderCoverageTable(payload) {
     const summaryTable = new Table({
         head: ["Metric", "Value"],
         colWidths: [24, 16],
+        wordWrap: true,
     });
     for (const [key, value] of Object.entries(summary)) {
-        summaryTable.push([key, stringifyCell(value)]);
+        summaryTable.push([key, summaryCell(value)]);
     }
     const firstRow = firstFields(rows);
     const isRequirementCoverage = firstRow !== undefined && Object.hasOwn(firstRow, "scenarioCount");
@@ -102,13 +103,14 @@ export function renderCoverageTable(payload) {
                 "Coverage",
                 "Depth",
                 "Proof",
+                "Evidence",
                 "Scen",
                 "Tests",
                 "Symbols",
                 "Structural gaps",
                 "Proof gaps",
             ],
-            colWidths: [20, 12, 12, 18, 36, 12, 8, 8, 10, 24, 36],
+            colWidths: [20, 12, 12, 18, 36, 12, 12, 8, 8, 10, 24, 36],
             wordWrap: true,
         })
         : new Table({
@@ -126,6 +128,7 @@ export function renderCoverageTable(payload) {
                 stringifyCell(item.coverageStatus),
                 stringifyCell(item.coverageDepth),
                 stringifyCell(item.proofStatus),
+                stringifyCell(item.evidenceLevel),
                 stringifyCell(item.scenarioCount),
                 stringifyCell(item.testCount),
                 stringifyCell(item.transitiveSymbolCount),
@@ -287,6 +290,15 @@ function stringifyCell(value) {
     }
     return String(value);
 }
+// A nested summary count, such as evidenceLevels, reads as key=value pairs.
+function summaryCell(value) {
+    if (value !== null && typeof value === "object" && !Array.isArray(value)) {
+        return Object.entries(value)
+            .map(([key, count]) => `${key}=${stringifyCell(count)}`)
+            .join(" ");
+    }
+    return stringifyCell(value);
+}
 function joinCells(value) {
     if (!Array.isArray(value) || value.length === 0) {
         return "-";

package/dist/commands/report.js

@@ -170,16 +170,16 @@ export async function reportCommand(options, deps = {}) {
     const summary = coverage.requirements.summary;
     const total = Number(summary.total ?? 0);
     const notApplicable = Number(summary.proofNotApplicable ?? 0);
-    const proven = Number(summary.proofProven ?? 0);
+    const tested = Number(summary.proofTested ?? 0);
     const currentRequirements = Math.max(0, total - notApplicable);
     const proofPercent = currentRequirements === 0
         ? 0
-        : Math.round((proven / currentRequirements) * 100);
+        : Math.round((tested / currentRequirements) * 100);
     const hasContradiction = coverage.requirements.rows.some((row) => Array.isArray(row.proofGaps) &&
         row.proofGaps.includes("blocking_contradiction"));
     const snapshotStale = coverage.requirements.meta?.dirty === true ||
         coverage.requirements.meta?.proofSnapshotDirty === true;
-    const badgeMessage = currentRequirements === 0 ? "no requirements" : `${proofPercent}% proven`;
+    const badgeMessage = currentRequirements === 0 ? "no requirements" : `${proofPercent}% tested`;
     const badgeColor = currentRequirements === 0
         ? KIBI_BRAND.rail
         : hasContradiction

package/dist/commands/signoff.d.ts

@@ -0,0 +1,37 @@
+import { type SignoffCollectDeps } from "../signoff/collect.js";
+import { type SignoffView } from "../signoff/model.js";
+export type SignoffOptions = Readonly<{
+    staged?: boolean;
+    questions?: string;
+    format?: string;
+    output?: string;
+    open?: boolean;
+    proof?: boolean;
+}>;
+export type SignoffCommandDeps = SignoffCollectDeps & Readonly<{
+    cwd?: () => string;
+    readStdin?: () => string;
+    write?: (text: string) => void;
+    writeNote?: (text: string) => void;
+    env?: NodeJS.ProcessEnv;
+    openReport?: (filePath: string) => Promise<void>;
+}>;
+/** Sets the default signoff format for a host (`chat`, `md`, `html`, `json`). */
+export declare const SIGNOFF_FORMAT_ENV = "KIBI_SIGNOFF_FORMAT";
+/**
+ * The format `kibi signoff` prints when `--format` is not given. A fenced
+ * block only helps where a host renderer draws it (the OpenCode TUI, which
+ * sets KIBI_SIGNOFF_FORMAT=md for its shell); every other host renders
+ * assistant or message Markdown directly and shows a fence as code, so the
+ * default is the unfenced `chat` Markdown.
+ */
+export declare function defaultSignoffFormat(env: NodeJS.ProcessEnv): string;
+/**
+ * `kibi signoff`: print the requirements signoff view for the current change
+ * (or, with `--questions`, the decisions the agent asks the person to
+ * confirm) as chat Markdown, a fenced Markdown block, HTML or JSON, and keep the latest view
+ * in `.kb/briefs/signoff/` (latest.json, latest.md, latest.html) for editor
+ * plugins.
+ */
+export declare function signoffCommand(options: SignoffOptions, deps?: SignoffCommandDeps): Promise<SignoffView>;
+//# sourceMappingURL=signoff.d.ts.map

package/dist/commands/signoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signoff.d.ts","sourceRoot":"","sources":["../../src/commands/signoff.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,KAAK,kBAAkB,EAKxB,MAAM,uBAAuB,CAAC;AAQ/B,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,qBAAqB,CAAC;AAG7B,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC;IACpC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC,CAAC;AAGH,MAAM,MAAM,kBAAkB,GAAG,kBAAkB,GACjD,QAAQ,CAAC;IACP,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAClD,CAAC,CAAC;AAKL,iFAAiF;AACjF,eAAO,MAAM,kBAAkB,wBAAwB,CAAC;AAGxD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAGnE;AAuFD;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,WAAW,CAAC,CA4EtB"}