kibi-cli 2.31.0 → 2.32.0

package/dist/operations/migration/proof-contract-claims.js

@@ -0,0 +1,182 @@
+/*
+ Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ Copyright (C) 2026 Piotr Franczyk
+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU Affero General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU Affero General Public License for more details.
+
+ You should have received a copy of the GNU Affero General Public License
+ along with this program.  If not, see <https://www.gnu.org/licenses/>.
+*/
+import path from "node:path";
+import { isDeepStrictEqual } from "node:util";
+import { load as loadYaml } from "js-yaml";
+import { readAuthoredEntity } from "../../public/operations/entity-context.js";
+import { listLaneMarkdownFiles, readText, sliceFrontmatter, writeFileAtomically, } from "./kb-sources.js";
+/** Schema 12: pin proves on a certificate contract with one provable claim. */
+// implements REQ-kibi-claim-bound-proofs, REQ-cli-schema-migration
+export const PROOF_CONTRACT_CLAIMS_PIN_CODE = "proof_contract_claims_pin";
+/** Schema 12: certificate contracts a person must bind to their claims. */
+// implements REQ-kibi-claim-bound-proofs, REQ-cli-schema-migration
+export const PROOF_CONTRACT_CLAIMS_REVIEW_CODE = "proof_contract_claims_review";
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+/**
+ * Add proves to a test's proof_contract block, leaving every other byte of
+ * the document unchanged: the list goes after the block's last line, at the
+ * indentation of its other keys. Returns null when the contract is not a
+ * block mapping, already names proves, or the edit would not read back as
+ * exactly that change.
+ */
+// implements REQ-kibi-claim-bound-proofs, REQ-cli-schema-migration
+export function withProofContractProves(content, keys) {
+    const slice = sliceFrontmatter(content);
+    if (slice === null || keys.length === 0)
+        return null;
+    const lines = slice.text.split(/(?<=\n)/);
+    const start = lines.findIndex((line) => /^proof_contract:[ \t]*\r?\n$/.test(line));
+    if (start < 0)
+        return null;
+    let end = start + 1;
+    let indent = null;
+    while (end < lines.length) {
+        const line = lines[end] ?? "";
+        const leading = /^([ \t]+)\S/.exec(line);
+        if (leading === null)
+            break;
+        if (indent === null)
+            indent = leading[1] ?? "";
+        end += 1;
+    }
+    if (indent === null)
+        return null;
+    const inserted = [
+        `${indent}proves:${slice.eol}`,
+        ...keys.map((key) => `${indent}${indent}- ${key}${slice.eol}`),
+    ];
+    const text = [...lines.slice(0, end), ...inserted, ...lines.slice(end)].join("");
+    try {
+        const before = loadYaml(slice.text);
+        const next = loadYaml(text);
+        if (!isRecord(before) || !isRecord(next))
+            return null;
+        const contract = before.proof_contract;
+        if (!isRecord(contract) || contract.proves !== undefined)
+            return null;
+        const expected = {
+            ...before,
+            proof_contract: { ...contract, proves: [...keys] },
+        };
+        if (!isDeepStrictEqual(next, expected))
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return `${slice.prefix}${text}${slice.suffix}`;
+}
+/**
+ * Certificate-kind contracts without proves, judged on the synced store: a
+ * contract whose test reaches exactly one claim its kind can derive an
+ * obligation for gets that claim pinned in proves; any other is left for a
+ * person to bind (review). Read-only.
+ */
+// implements REQ-kibi-claim-bound-proofs, REQ-cli-schema-migration
+export function planProofContractClaimPins(workspaceRoot, rows) {
+    const byTest = new Map((rows ?? []).map((row) => [row.test_id, row]));
+    const targets = [];
+    const review = [];
+    const skipped = [];
+    if (byTest.size === 0)
+        return { targets, review, skipped };
+    for (const file of listLaneMarkdownFiles(workspaceRoot, ["tests"])) {
+        const content = readText(file.absolutePath);
+        if (content === null)
+            continue;
+        const entity = readAuthoredEntity(content, file.relativePath);
+        const row = entity === null ? undefined : byTest.get(entity.id);
+        if (entity === null || row === undefined)
+            continue;
+        const keys = [...new Set(row.candidates.map((c) => c.claim_key))].sort();
+        if (keys.length !== 1) {
+            review.push({
+                id: entity.id,
+                path: file.relativePath,
+                kind: row.kind,
+                candidates: keys,
+            });
+            continue;
+        }
+        const after = withProofContractProves(content, keys);
+        if (after === null) {
+            skipped.push({
+                id: entity.id,
+                path: file.relativePath,
+                reason: "its proof_contract is not a block mapping Kibi can extend in place",
+            });
+            continue;
+        }
+        targets.push({
+            id: entity.id,
+            type: "test",
+            path: file.relativePath,
+            before: content,
+            after,
+        });
+    }
+    return { targets, review, skipped };
+}
+// implements REQ-kibi-claim-bound-proofs, REQ-cli-schema-migration
+export function applyProofContractClaimPins(workspaceRoot, rows) {
+    const plan = planProofContractClaimPins(workspaceRoot, rows);
+    for (const target of plan.targets)
+        writeFileAtomically(path.join(workspaceRoot, target.path), target.after);
+    return plan;
+}
+/**
+ * The claim candidates of every certificate contract without proves, read
+ * from the branch's compiled store. Returns null when no healthy, synced
+ * store is attached or the evaluation fails; the migration then pins
+ * nothing, and proof-contract-claims lists the contracts.
+ */
+// implements REQ-kibi-claim-bound-proofs, REQ-cli-schema-migration
+export async function readProofContractClaimCandidates(workspaceRoot) {
+    try {
+        const [{ createCliRuntime }, { executeOperation }, { statusSpec }, { runOperationJsonQuery },] = await Promise.all([
+            import("../../runtime/cli-runtime.js"),
+            import("../../public/operations/runtime-types.js"),
+            import("../../public/operations/specs/discovery.js"),
+            import("../../public/operations/prolog-json.js"),
+        ]);
+        const runtime = createCliRuntime({ workspaceRoot });
+        const status = (await executeOperation(runtime, statusSpec, {}))
+            .structuredContent;
+        if (status?.branchStore?.state !== "healthy" ||
+            status?.snapshotId === "missing" ||
+            status?.branchAttachment?.kind !== "exact")
+            return null;
+        const rows = await executeOperation(runtime, {
+            name: "kb_migrate_proof_contract_claims_preview",
+            effects: ["kb-read"],
+            requiresProlog: true,
+            execute: async (_input, context) => {
+                const prolog = context.prolog ?? (await context.ensureProlog?.());
+                if (prolog === undefined)
+                    return [];
+                return runOperationJsonQuery(prolog, "claim_obligations.pl", "claim_obligations:proof_contract_claim_candidates_json(JsonString)", "Proof contract claim candidates");
+            },
+        }, {});
+        return Array.isArray(rows) ? rows : null;
+    }
+    catch {
+        return null;
+    }
+}

package/dist/operations/migration/schema6.d.ts

@@ -1,5 +1,7 @@
 import { type MigrationAction } from "../../public/operations/migration-plan.js";
 import { CLOSE_SUPERSEDED_REQUIREMENTS_CODE, MIGRATION_SYNC_ACTION_ID, MIGRATION_SYNC_CODE, SOURCE_PATH_REWRITE_CODE } from "../../public/operations/schema6-check-actions.js";
+import { type LadderFloorVerdicts } from "./evidence-floor.js";
+import { type ClaimCandidateRow } from "./proof-contract-claims.js";
 /** The KB schema generation that introduced entity `origin`. */
 export declare const ORIGIN_SCHEMA_VERSION = 6;
 /** The KB schema generation that requires body context on current entities. */
@@ -58,6 +60,10 @@ export type Schema6MigrationFragment = Readonly<{
 export declare function buildSchema6MigrationFragment(input: {
     workspaceRoot: string;
     currentSchemaVersion: number | null;
+    /** The evidence ladder's floor verdicts on the synced store, when read. */
+    ladderFloors?: LadderFloorVerdicts | null;
+    /** Claim candidates of certificate contracts without proves, when read. */
+    claimCandidates?: readonly ClaimCandidateRow[] | null;
 }): Schema6MigrationFragment;
 /**
  * Actions for the superseded-requirement-open and source-path-dangling

package/dist/operations/migration/schema6.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema6.d.ts","sourceRoot":"","sources":["../../../src/operations/migration/schema6.ts"],"names":[],"mappings":"AAwBA,OAAO,EACL,KAAK,eAAe,EAErB,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAEL,kCAAkC,EAClC,wBAAwB,EACxB,mBAAmB,EAEnB,wBAAwB,EAOzB,MAAM,kDAAkD,CAAC;AAwE1D,gEAAgE;AAEhE,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,+EAA+E;AAE/E,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAE7C,4DAA4D;AAE5D,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAElD,yEAAyE;AAEzE,eAAO,MAAM,gCAAgC,gCAAgC,CAAC;AAC9E,gEAAgE;AAEhE,eAAO,MAAM,8BAA8B,8BAA8B,CAAC;AAC1E;;;GAGG;AAEH,eAAO,MAAM,+CAA+C,+CACd,CAAC;AAC/C,iFAAiF;AAEjF,eAAO,MAAM,8BAA8B,8BAA8B,CAAC;AAC1E,+EAA+E;AAE/E,eAAO,MAAM,6BAA6B,6BAA6B,CAAC;AAExE,eAAO,MAAM,kCAAkC,6BAA6B,CAAC;AAC7E,yEAAyE;AAEzE,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AAEpE,eAAO,MAAM,gCAAgC,2BAA2B,CAAC;AACzE,OAAO,EACL,kCAAkC,EAClC,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,GACzB,CAAC;AAiNF;;;;;;;GAOG;AAEH,wBAAgB,wBAAwB,CACtC,aAAa,EAAE,MAAM,GACpB,eAAe,EAAE,CAkFnB;AAyBD;;;GAGG;AAEH,wBAAgB,+BAA+B,CAC7C,aAAa,EAAE,MAAM,GACpB,KAAK,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAsDnE;AAGD,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;IACpC,uDAAuD;IACvD,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC,CAAC,CAAC;AAEH;;;;;;GAMG;AAEH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC,GAAG,wBAAwB,CA0R3B;AAED;;;;;;GAMG;AAEH,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,MAAM,GAAG;IAClE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,sBAAsB,EAAE,MAAM,EAAE,CAAC;CAClC,CAuCA;AAED;;;GAGG;AAEH,wBAAgB,sBAAsB,CACpC,aAAa,EAAE,MAAM,GACpB,eAAe,GAAG,IAAI,CAuBxB;AAED,qEAAqE;AAErE,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,eAAe,CAEjB;AAgDD,KAAK,YAAY,GAAG,QAAQ,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC,CAAC;AAEH,4DAA4D;AAE5D,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC,CAkJf;AAED;;;GAGG;AAEH,eAAO,MAAM,+BAA+B,EAAE,WAAW,CAAC,MAAM,CAK9D,CAAC;AAGH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CActD,CAAC"}
+{"version":3,"file":"schema6.d.ts","sourceRoot":"","sources":["../../../src/operations/migration/schema6.ts"],"names":[],"mappings":"AAyBA,OAAO,EACL,KAAK,eAAe,EAErB,MAAM,2CAA2C,CAAC;AAEnD,OAAO,EAEL,kCAAkC,EAClC,wBAAwB,EACxB,mBAAmB,EAEnB,wBAAwB,EAOzB,MAAM,kDAAkD,CAAC;AAkB1D,OAAO,EAEL,KAAK,mBAAmB,EAGzB,MAAM,qBAAqB,CAAC;AAmB7B,OAAO,EACL,KAAK,iBAAiB,EAIvB,MAAM,4BAA4B,CAAC;AAqCpC,gEAAgE;AAEhE,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,+EAA+E;AAE/E,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAE7C,4DAA4D;AAE5D,eAAO,MAAM,gCAAgC,IAAI,CAAC;AAElD,yEAAyE;AAEzE,eAAO,MAAM,gCAAgC,gCAAgC,CAAC;AAC9E,gEAAgE;AAEhE,eAAO,MAAM,8BAA8B,8BAA8B,CAAC;AAC1E;;;GAGG;AAEH,eAAO,MAAM,+CAA+C,+CACd,CAAC;AAC/C,iFAAiF;AAEjF,eAAO,MAAM,8BAA8B,8BAA8B,CAAC;AAC1E,+EAA+E;AAE/E,eAAO,MAAM,6BAA6B,6BAA6B,CAAC;AAExE,eAAO,MAAM,kCAAkC,6BAA6B,CAAC;AAC7E,yEAAyE;AAEzE,eAAO,MAAM,2BAA2B,2BAA2B,CAAC;AAEpE,eAAO,MAAM,gCAAgC,2BAA2B,CAAC;AACzE,OAAO,EACL,kCAAkC,EAClC,wBAAwB,EACxB,mBAAmB,EACnB,wBAAwB,GACzB,CAAC;AAiNF;;;;;;;GAOG;AAEH,wBAAgB,wBAAwB,CACtC,aAAa,EAAE,MAAM,GACpB,eAAe,EAAE,CAkFnB;AAyBD;;;GAGG;AAEH,wBAAgB,+BAA+B,CAC7C,aAAa,EAAE,MAAM,GACpB,KAAK,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAsDnE;AAGD,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;IACpC,uDAAuD;IACvD,sBAAsB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC,CAAC,CAAC;AAEH;;;;;;GAMG;AAEH,wBAAgB,6BAA6B,CAAC,KAAK,EAAE;IACnD,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,2EAA2E;IAC3E,YAAY,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC1C,2EAA2E;IAC3E,eAAe,CAAC,EAAE,SAAS,iBAAiB,EAAE,GAAG,IAAI,CAAC;CACvD,GAAG,wBAAwB,CA+X3B;AAED;;;;;;GAMG;AAEH,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,MAAM,GAAG;IAClE,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,sBAAsB,EAAE,MAAM,EAAE,CAAC;CAClC,CAuCA;AAED;;;GAGG;AAEH,wBAAgB,sBAAsB,CACpC,aAAa,EAAE,MAAM,GACpB,eAAe,GAAG,IAAI,CAuBxB;AAED,qEAAqE;AAErE,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,SAAS,MAAM,EAAE,GAC3B,eAAe,CAEjB;AAgDD,KAAK,YAAY,GAAG,QAAQ,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAAC,CAAC;AAEH,4DAA4D;AAE5D,wBAAsB,2BAA2B,CAC/C,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC,IAAI,CAAC,CA8Jf;AAED;;;GAGG;AAEH,eAAO,MAAM,+BAA+B,EAAE,WAAW,CAAC,MAAM,CAK9D,CAAC;AAGH,eAAO,MAAM,uBAAuB,EAAE,WAAW,CAAC,MAAM,CAetD,CAAC"}

package/dist/operations/migration/schema6.js

@@ -18,17 +18,21 @@
 import path from "node:path";
 import { extractFromMarkdown, } from "../../extractors/markdown.js";
 import { FIRMNESS_FROM_ORIGIN_SCHEMA_VERSION } from "../../public/operations/decision-firmness.js";
+import { EVIDENCE_FLOOR_SCHEMA_VERSION } from "../../public/operations/evidence-floor.js";
 import { migrationAction, } from "../../public/operations/migration-plan.js";
+import { CLAIM_BINDING_SCHEMA_VERSION } from "../../public/operations/proof-contract-claims.js";
 import { CLOSE_SUPERSEDED_REQUIREMENTS_ACTION_ID, CLOSE_SUPERSEDED_REQUIREMENTS_CODE, MIGRATION_SYNC_ACTION_ID, MIGRATION_SYNC_CODE, SOURCE_PATH_REWRITE_ACTION_ID, SOURCE_PATH_REWRITE_CODE, closeSupersededRequirementsActionInput, exceptionUnapprovedActionInput, migrationSyncActionInput, sourcePathReviewActionInput, sourcePathRewriteActionInput, supersessionCycleReviewActionInput, } from "../../public/operations/schema6-check-actions.js";
 import { readAllShards } from "../../relationships/shards.js";
 import { KB_PATHS } from "../../utils/kb-paths.js";
 import { CONTEXT_MISSING_TAG_CODE, SEMANTIC_TEXT_PIN_CODE, applyContextMissingTags, applySemanticTextPins, countByType, planContextMissingTags, planSemanticTextPins, } from "./entity-body-context.js";
 import { ENTITY_TYPE_BACKFILL_ACTION_ID, ENTITY_TYPE_BACKFILL_CODE, applyEntityTypeBackfill, planEntityTypeBackfill, } from "./entity-type.js";
+import { EVIDENCE_FLOOR_PIN_CODE, applyEvidenceFloorPins, planEvidenceFloorPins, } from "./evidence-floor.js";
 import { FIRM_SUPERSEDE_ACKNOWLEDGE_CODE, applyFirmSupersedeAcknowledgement, planFirmSupersedeAcknowledgement, } from "./firm-supersede.js";
 import { applyInventoryRederivation, applyInventoryRederivationDroppingGrounding, planInventoryRederivation, } from "./inventory-rederive.js";
 import { listLaneMarkdownFiles } from "./kb-sources.js";
 import { applyOriginBackfill, planOriginBackfill } from "./origin-backfill.js";
 import { POLARITY_VALUE_BACKFILL_CODE, applyPolarityValueBackfill, planPolarityValueBackfill, } from "./polarity-values.js";
+import { PROOF_CONTRACT_CLAIMS_PIN_CODE, PROOF_CONTRACT_CLAIMS_REVIEW_CODE, planProofContractClaimPins, } from "./proof-contract-claims.js";
 import { DELIVERED_REQUIREMENT_TAG, applyDeliveredStatusMappings, applyRequirementStatusMapping, planRequirementStatusMappings, } from "./requirement-status.js";
 import { applySourcePathRepairs, findSourceRepairs, plannedSourcePathRepairs, } from "./source-paths.js";
 import { applySupersededClosures, planSupersededClosures, } from "./superseded-closure.js";
@@ -581,6 +585,88 @@ export function buildSchema6MigrationFragment(input) {
             }));
         }
     }
+    // Schema 11: a firm requirement needs tested evidence. Record an asserted
+    // floor on current firm requirements without a passing proof path, so the
+    // upgraded knowledge base passes evidence-floor.
+    if (input.currentSchemaVersion === null ||
+        input.currentSchemaVersion < EVIDENCE_FLOOR_SCHEMA_VERSION) {
+        const floors = planEvidenceFloorPins(input.workspaceRoot, input.ladderFloors);
+        if (floors.targets.length > 0) {
+            const id = "evidence-floor-pin";
+            sourceRewriteActionIds.push(id);
+            actions.push(migrationAction({
+                id,
+                code: EVIDENCE_FLOOR_PIN_CODE,
+                category: "schema",
+                safety: "automatic",
+                autoApplicable: true,
+                invocation: {
+                    kind: "cli",
+                    command_argv: ["kibi", "migrate", "--yes"],
+                },
+                affectedEntityIds: floors.targets.map((row) => row.id),
+                affectedFiles: floors.targets.map((row) => row.path),
+                postconditions: [{ rule: "evidence-floor", findings: 0 }],
+                evidence: {
+                    reason: "Schema 11 fails a current requirement whose evidence is below its floor, and a firm requirement without required_evidence needs tested evidence. These firm requirements are below tested (judged by the evidence ladder on the synced store when one could be read, else by their latest end-to-end receipt), so each records required_evidence: asserted in its front matter, where a reviewer can raise it once a proof exists.",
+                    count: floors.targets.length,
+                    skipped: floors.skipped,
+                    preserves: "every other front matter key and the body bytes",
+                },
+            }));
+        }
+    }
+    // Schema 12: a certificate contract names the claims it proves. Pin proves
+    // where the test reaches one provable claim; list the rest for review.
+    if ((input.currentSchemaVersion === null ||
+        input.currentSchemaVersion < CLAIM_BINDING_SCHEMA_VERSION) &&
+        input.claimCandidates) {
+        const claims = planProofContractClaimPins(input.workspaceRoot, input.claimCandidates);
+        if (claims.targets.length > 0) {
+            const id = "proof-contract-claims-pin";
+            sourceRewriteActionIds.push(id);
+            actions.push(migrationAction({
+                id,
+                code: PROOF_CONTRACT_CLAIMS_PIN_CODE,
+                category: "schema",
+                safety: "automatic",
+                autoApplicable: true,
+                invocation: {
+                    kind: "cli",
+                    command_argv: ["kibi", "migrate", "--yes"],
+                },
+                affectedEntityIds: claims.targets.map((row) => row.id),
+                affectedFiles: claims.targets.map((row) => row.path),
+                evidence: {
+                    reason: "Schema 12 requires every certificate-kind proof contract to name the claims it proves. Each of these tests reaches exactly one claim its proof kind can derive an obligation for, so the migration writes it to proof_contract.proves. The contract changes, so run kibi prove for these tests afterwards.",
+                    count: claims.targets.length,
+                    skipped: claims.skipped,
+                    preserves: "every other front matter key and the body bytes",
+                },
+            }));
+        }
+        for (const row of claims.review)
+            actions.push(migrationAction({
+                id: `proof-contract-claims-review-${row.id}`,
+                code: PROOF_CONTRACT_CLAIMS_REVIEW_CODE,
+                category: "semantic",
+                safety: "review",
+                invocation: {
+                    kind: "review",
+                    instruction: row.candidates.length === 0
+                        ? `${row.id} (${row.path}) has a ${row.kind} proof contract but reaches no claim ${/^[aeiou]/.test(row.kind) ? "an" : "a"} ${row.kind} certificate can derive an obligation for. Add proof_contract.proves with the claim key its certificate establishes (it then counts as attested, not proved), or model that claim's grounding fact as a ${row.kind === "exhaustive" || row.kind === "typecheck" ? "set" : "numeric"} fact first. Then run kibi prove --test ${row.id}.`
+                        : `${row.id} (${row.path}) has a ${row.kind} proof contract and could prove any of ${row.candidates.join(", ")}. Add proof_contract.proves with the claim keys its certificate establishes, then run kibi prove --test ${row.id}.`,
+                },
+                affectedEntityIds: [row.id],
+                affectedFiles: [row.path],
+                postconditions: [
+                    { rule: "proof-contract-claims", entityId: row.id, findings: 0 },
+                ],
+                dispositionRequired: true,
+                allowedDispositions: ["fixed", "deferred"],
+                evidence: { kind: row.kind, candidates: row.candidates },
+            }));
+    }
     const drift = planInventoryRederivation(input.workspaceRoot);
     for (const plan of drift) {
         const action = plan.safe ? rederiveAction(plan) : reviewAction(plan);
@@ -797,6 +883,13 @@ export async function applySchema6MigrationAction(action, context) {
             applyFirmSupersedeAcknowledgement(context.workspaceRoot);
             return;
         }
+        case EVIDENCE_FLOOR_PIN_CODE: {
+            // The plan decided the pins with the evidence ladder; apply the same
+            // set even though source rewrites before it may have left the store
+            // behind the authored files.
+            applyEvidenceFloorPins(context.workspaceRoot, new Map((action.affectedEntityIds ?? []).map((id) => [id, "below"])));
+            return;
+        }
         case SEMANTIC_INVENTORY_REDERIVE_CODE: {
             const requirementId = action.affectedEntityIds[0];
             if (requirementId === undefined)
@@ -890,6 +983,7 @@ export const SCHEMA6_AUTOMATIC_CODES = new Set([
     CONTEXT_MISSING_TAG_CODE,
     SUPERSEDES_REASON_ACKNOWLEDGE_CODE,
     FIRM_SUPERSEDE_ACKNOWLEDGE_CODE,
+    EVIDENCE_FLOOR_PIN_CODE,
     SEMANTIC_INVENTORY_REDERIVE_CODE,
     REQ_STATUS_DELIVERED_MAP_CODE,
     ENTITY_ORIGIN_BACKFILL_CODE,

package/dist/operations/mutation/omitted-properties.d.ts

@@ -0,0 +1,11 @@
+import type { StoredEntityLookup } from "./stored-entity.js";
+import type { StagedUpsertState, UpsertInput } from "./types.js";
+/**
+ * An update keeps every property it leaves out. The authored file already
+ * does (the writer patches its front matter), so the compiled entity must
+ * too: otherwise a relationship-only upsert stores the requirement without,
+ * say, its `required_evidence`, and the store disagrees with the file until a
+ * rebuild.
+ */
+export declare function withStoredOmittedProperties(input: UpsertInput, lookup: StoredEntityLookup, staged?: StagedUpsertState): Promise<UpsertInput>;
+//# sourceMappingURL=omitted-properties.d.ts.map

package/dist/operations/mutation/omitted-properties.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"omitted-properties.d.ts","sourceRoot":"","sources":["../../../src/operations/mutation/omitted-properties.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA8BjE;;;;;;GAMG;AAEH,wBAAsB,2BAA2B,CAC/C,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,kBAAkB,EAC1B,MAAM,CAAC,EAAE,iBAAiB,GACzB,OAAO,CAAC,WAAW,CAAC,CAiBtB"}

package/dist/operations/mutation/omitted-properties.js

@@ -0,0 +1,76 @@
+/*
+ Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ Copyright (C) 2026 Piotr Franczyk
+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU Affero General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU Affero General Public License for more details.
+
+ You should have received a copy of the GNU Affero General Public License
+ along with this program.  If not, see <https://www.gnu.org/licenses/>.
+*/
+import { isUpsertEntityProperty } from "./validation.js";
+/**
+ * Stored fields an update never inherits by omission: identity and write
+ * times, fields derived from other fields, and fields other upsert steps
+ * resolve with their own rules (origin, firmness, receipt history, the
+ * requirement proposition ledger).
+ */
+const NOT_INHERITED = new Set([
+    "id",
+    "type",
+    "created_at",
+    "updated_at",
+    "source",
+    "origin",
+    "firmness",
+    "approval_ref",
+    "proof_receipts",
+    "claim_key",
+    "text_ref",
+    "semantic_text",
+    "semantic_clauses",
+    "semantic_inventory",
+    "semantic_inventory_version",
+    "semantic_source_field",
+    "semantic_source_hash",
+    "logic_claims",
+]);
+/**
+ * An update keeps every property it leaves out. The authored file already
+ * does (the writer patches its front matter), so the compiled entity must
+ * too: otherwise a relationship-only upsert stores the requirement without,
+ * say, its `required_evidence`, and the store disagrees with the file until a
+ * rebuild.
+ */
+// implements REQ-kibi-operation-interface-parity
+export async function withStoredOmittedProperties(input, lookup, staged) {
+    const stored = staged?.entities.get(input.id) ?? (await lookup.entity());
+    if (stored === undefined || stored === null)
+        return input;
+    if (stored.type !== undefined && stored.type !== input.type)
+        return input;
+    const properties = (input.properties ?? {});
+    const inherited = {};
+    for (const [key, value] of Object.entries(stored)) {
+        if (value === undefined || value === null)
+            continue;
+        if (NOT_INHERITED.has(key) || !isUpsertEntityProperty(key))
+            continue;
+        if (properties[key] !== undefined)
+            continue;
+        inherited[key] = value;
+    }
+    if (Object.keys(inherited).length === 0)
+        return input;
+    return {
+        ...input,
+        properties: { ...inherited, ...properties },
+    };
+}

package/dist/operations/mutation/serialization.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serialization.d.ts","sourceRoot":"","sources":["../../../src/operations/mutation/serialization.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAyDpD,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACxC,MAAM,CAMR;AAGD,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,iBAAiB,GAAG,MAAM,CAOxE;AAGD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAkBtD"}
+{"version":3,"file":"serialization.d.ts","sourceRoot":"","sources":["../../../src/operations/mutation/serialization.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AA0DpD,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACxC,MAAM,CAMR;AAGD,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,iBAAiB,GAAG,MAAM,CAOxE;AAGD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAkBtD"}

package/dist/operations/mutation/serialization.js

@@ -14,6 +14,7 @@ const ATOM_FIELDS = [
     "polarity",
     "expects",
     "firmness",
+    "required_evidence",
 ];
 const STRING_FIELDS = [
     "id",

package/dist/operations/mutation/strict-fact.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"strict-fact.d.ts","sourceRoot":"","sources":["../../../src/operations/mutation/strict-fact.ts"],"names":[],"mappings":"AAWA,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAarD;AAGD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACxC,MAAM,EAAE,CA+EV;AAED,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,OAAO,EACtB,aAAa,EAAE,OAAO,GACrB,IAAI,CAUN;AAGD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACxC,IAAI,CAmDN"}
+{"version":3,"file":"strict-fact.d.ts","sourceRoot":"","sources":["../../../src/operations/mutation/strict-fact.ts"],"names":[],"mappings":"AAYA,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAgBrD;AAGD,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACxC,MAAM,EAAE,CA+EV;AAED,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,OAAO,EACtB,aAAa,EAAE,OAAO,GACrB,IAAI,CAUN;AAGD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GACxC,IAAI,CAmDN"}

package/dist/operations/mutation/strict-fact.js

@@ -5,6 +5,7 @@ const PROPERTY_VALUE_FIELDS = [
     "value_int",
     "value_number",
     "value_bool",
+    "value_set",
 ];
 // implements REQ-kibi-operation-interface-parity
 export function valueFieldHint(value) {
@@ -19,7 +20,10 @@ export function valueFieldHint(value) {
     if (typeof value === "string") {
         return `Use value_type: "string" plus value_string: ${JSON.stringify(value)}.`;
     }
-    return "Use value_type plus exactly one of value_string, value_int, value_number, or value_bool.";
+    if (Array.isArray(value)) {
+        return `Use value_type: "set" plus value_set: ${JSON.stringify(value)}.`;
+    }
+    return "Use value_type plus exactly one of value_string, value_int, value_number, value_bool, or value_set.";
 }
 // implements REQ-kibi-operation-interface-parity
 export function factKindShapeHints(entity) {
@@ -38,7 +42,7 @@ export function factKindShapeHints(entity) {
             hints.push(`fact_kind 'property_value' requires ${missing.join(", ")}.`);
         }
         if (present.length !== 1) {
-            hints.push("fact_kind 'property_value' requires exactly one typed value field: value_string, value_int, value_number, or value_bool.");
+            hints.push("fact_kind 'property_value' requires exactly one typed value field: value_string, value_int, value_number, value_bool, or value_set.");
         }
         if (hints.length > 0) {
             hints.push("Next action: use kb_model_requirement for prose claims, or provide subject_key, property_key, operator, value_type, and one value_* field in kb_upsert.properties.");

package/dist/operations/mutation/symbol-granularity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"symbol-granularity.d.ts","sourceRoot":"","sources":["../../../src/operations/mutation/symbol-granularity.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAajF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AA0BpD;;;;GAIG;AAEH,eAAO,MAAM,4BAA4B,iCAAiC,CAAC;AA+B3E,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC1C,aAAa,EAAE,SAAS,iBAAiB,EAAE,EAC3C,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC,GAC3E,OAAO,CAAC,IAAI,CAAC,CAmDf"}
+{"version":3,"file":"symbol-granularity.d.ts","sourceRoot":"","sources":["../../../src/operations/mutation/symbol-granularity.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAajF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AA0BpD;;;;GAIG;AAEH,eAAO,MAAM,4BAA4B,iCAAiC,CAAC;AA+B3E,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAC1C,aAAa,EAAE,SAAS,iBAAiB,EAAE,EAC3C,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC,GAC3E,OAAO,CAAC,IAAI,CAAC,CAoDf"}

package/dist/operations/mutation/symbol-granularity.js

@@ -1,7 +1,7 @@
 import { collectGranularityCandidates } from "kibi-plugin-builtin";
 import { InputError } from "../../cli-errors.js";
-import { resolveWorkspaceSourceAbsolute } from "../../utils/repo-relative-path.js";
 import { ALLOWED_GRANULARITY_REASONS_PROSE, coarseLinkBehavioralNames, getBehavioralSymbolNames, getNonBehavioralSymbolNames, inferSymbolRole, isAllowedGranularityReason, isTraceabilityRelationshipType, } from "../../public/symbol-granularity.js";
+import { resolveWorkspaceSourceAbsolute } from "../../utils/repo-relative-path.js";
 function candidate(name, kind) {
     return { name, kind, role: inferSymbolRole(kind) };
 }
@@ -86,8 +86,10 @@ export async function validateSymbolGranularity(payload, relationships, context,
     // A declaration named like the symbol is coarse only through its own
     // behavioral members (a class and its public methods), the same test the
     // staged gate and `kibi check` apply; any other title is judged against
-    // every behavioral declaration in the file.
-    const behavioral = exact && (exact.kind !== "variable" || entity.symbol_role === "config")
+    // every behavioral declaration in the file. An exported constant is its
+    // own declaration with exact coordinates (a certificate proof's domain is
+    // one), so it is granular whatever its role.
+    const behavioral = exact
         ? coarseLinkBehavioralNames(entity.title, available)
         : getBehavioralSymbolNames(available);
     if (behavioral.length === 0)

package/dist/operations/mutation/upsert.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upsert.d.ts","sourceRoot":"","sources":["../../../src/operations/mutation/upsert.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AACjF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAexE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AA6B3E,OAAO,EACL,KAAK,kBAAkB,EAExB,MAAM,oBAAoB,CAAC;AAQ5B,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,eAAe,EAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,wBAAwB,EAI9B,MAAM,wBAAwB,CAAC;AAsEhC,wBAAgB,gCAAgC,CAC9C,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,GAChB,IAAI,CAkBN;AA8CD;;;;;;;GAOG;AAEH,wBAAsB,+BAA+B,CACnD,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACzC,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,iBAAiB,GACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAmCxD;AAED,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACzC,aAAa,EAAE,SAAS,iBAAiB,EAAE,EAC3C,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,iBAAiB,EAC1B,MAAM,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAgCvC;AAmCD,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAC7C,kEAAkE;IAClE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;CACrC,CAAC,CAAC;AAGH,uFAAuF;AACvF,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,WAAW,GAAG;IACrB,QAAQ,CAAC,aAAa,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACtD,GACA,sBAAsB,CASxB;AAGD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;IACrD,yEAAyE;IACzE,QAAQ,CAAC,aAAa,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACrD,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;CAC3C,CAAC,CAAC;AAGH;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,gBAAgB,EACzB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,gBAAgB,CAAC,CA+H3B;AAgDD,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C;;;;;;OAMG;IAEH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC;;;;OAIG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;CACxC,CAAC,CAAC;AAGH;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC;IACT,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;CAClE,GAAG,IAAI,CAAC,CAmBR;AAyBD,wBAAsB,aAAa,CACjC,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,gBAAgB,EACzB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CA4gBzC"}
+{"version":3,"file":"upsert.d.ts","sourceRoot":"","sources":["../../../src/operations/mutation/upsert.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AACjF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AAexE,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AA8B3E,OAAO,EACL,KAAK,kBAAkB,EAExB,MAAM,oBAAoB,CAAC;AAQ5B,OAAO,KAAK,EACV,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,eAAe,EAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,wBAAwB,EAI9B,MAAM,wBAAwB,CAAC;AAsEhC,wBAAgB,gCAAgC,CAC9C,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,GAChB,IAAI,CAkBN;AA8CD;;;;;;;GAOG;AAEH,wBAAsB,+BAA+B,CACnD,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACzC,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,iBAAiB,GACzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAmCxD;AAED,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,WAAW,EAClB,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACzC,aAAa,EAAE,SAAS,iBAAiB,EAAE,EAC3C,OAAO,EAAE,gBAAgB,EACzB,MAAM,CAAC,EAAE,iBAAiB,EAC1B,MAAM,CAAC,EAAE,kBAAkB,GAC1B,OAAO,CAAC,SAAS,iBAAiB,EAAE,CAAC,CAgCvC;AAmCD,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAAC;IAC7C,kEAAkE;IAClE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,iBAAiB,CAAC;CACrC,CAAC,CAAC;AAGH,uFAAuF;AACvF,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,WAAW,GAAG;IACrB,QAAQ,CAAC,aAAa,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACtD,GACA,sBAAsB,CASxB;AAGD,MAAM,MAAM,gBAAgB,GAAG,QAAQ,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,wBAAwB,CAAC;IACrD,yEAAyE;IACzE,QAAQ,CAAC,aAAa,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACrD,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;CAC3C,CAAC,CAAC;AAGH;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,gBAAgB,EACzB,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,gBAAgB,CAAC,CAqI3B;AAgDD,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C;;;;;;OAMG;IAEH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC;;;;OAIG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;CACxC,CAAC,CAAC;AAGH;;;;;;;;;;GAUG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC;IACT,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;CAClE,GAAG,IAAI,CAAC,CAmBR;AAyBD,wBAAsB,aAAa,CACjC,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,gBAAgB,EACzB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CA4gBzC"}

package/dist/operations/mutation/upsert.js

@@ -16,6 +16,7 @@ import { assertLogicalGroundingClaimKeys, assertSemanticInventoryBoundary, } fro
 import { entityContextWarnings } from "./context-warning.js";
 import { buildUpsertCommitGoal, formatUpsertError } from "./contradictions.js";
 import { assertFirmDecisionUnchanged } from "./firm-decision-guard.js";
+import { withStoredOmittedProperties } from "./omitted-properties.js";
 import { resolveUpsertOrigin } from "./origin.js";
 import { planRecoveryNotes, settlePendingPlanApplyJournals, withPlanRecoveryNotes, } from "./plan-apply-journal.js";
 import { assertPredicateArgumentVocabulary } from "./predicate-vocabulary-guard.js";
@@ -279,7 +280,12 @@ export async function validateUpsertForCommit(payload, context, options = {}) {
     // than later by the staged gate.
     if (checked.entity.sourceFile === undefined)
         await validateSymbolGranularity(checked.entity, checked.relationships, context, async () => staged?.entities.get(payload.id) ?? (await lookup.entity()));
-    let input = await withStoredRequirementSemantics(payload, prolog, staged, lookup);
+    const withSemantics = await withStoredRequirementSemantics(payload, prolog, staged, lookup);
+    // An uncompiled file is judged as the writer will patch it (below), so only
+    // a compiled entity lends its omitted properties to the stored write.
+    let input = uncompiledSource === null
+        ? await withStoredOmittedProperties(withSemantics, lookup, staged)
+        : withSemantics;
     let validated = input === payload ? checked : validateUpsertInput(input, context.clock());
     if (uncompiledSource !== null)
         lookup = {

package/dist/operations/mutation/validation.d.ts

@@ -1,5 +1,7 @@
 import { isAllowedGranularityReason } from "../../public/symbol-granularity.js";
 import type { UpsertInput, ValidatedUpsert } from "./types.js";
+/** Whether the upsert entity schema defines `key` as an entity property. */
+export declare function isUpsertEntityProperty(key: string): boolean;
 export declare function validateUpsertInput(input: UpsertInput, now: Date): ValidatedUpsert;
 export { isAllowedGranularityReason };
 //# sourceMappingURL=validation.d.ts.map

package/dist/operations/mutation/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../src/operations/mutation/validation.ts"],"names":[],"mappings":"AAKA,OAAO,EAEL,0BAA0B,EAC3B,MAAM,oCAAoC,CAAC;AAU5C,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAqN/D,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,WAAW,EAClB,GAAG,EAAE,IAAI,GACR,eAAe,CA6DjB;AAED,OAAO,EAAE,0BAA0B,EAAE,CAAC"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../src/operations/mutation/validation.ts"],"names":[],"mappings":"AAKA,OAAO,EAEL,0BAA0B,EAC3B,MAAM,oCAAoC,CAAC;AAU5C,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AA2D/D,4EAA4E;AAC5E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAK3D;AA4JD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,WAAW,EAClB,GAAG,EAAE,IAAI,GACR,eAAe,CA6DjB;AAED,OAAO,EAAE,0BAA0B,EAAE,CAAC"}

package/dist/operations/mutation/validation.js

@@ -59,6 +59,10 @@ const DOCUMENT_TEXT_PROPERTIES = new Set([
     "summary",
     "details",
 ]);
+/** Whether the upsert entity schema defines `key` as an entity property. */
+export function isUpsertEntityProperty(key) {
+    return Object.hasOwn(upsertEntitySchema.properties, key);
+}
 /** Every top-level entity key the upsert entity schema does not define. */
 function unknownEntityProperties(entity) {
     const known = upsertEntitySchema.properties;

package/dist/operations/proof/claim-bindings.d.ts

@@ -0,0 +1,23 @@
+import type { OperationContext } from "../../public/operations/runtime-types.js";
+import type { ProofContract } from "../../public/proof-protocol.js";
+import type { ClaimBinding } from "../../public/proof-receipt.js";
+import { type CertificateVerdict } from "./code-certificates.js";
+/**
+ * The type-level witness Kibi writes for a typecheck claim binding: it
+ * compiles only when the domain type has exactly the fact's members.
+ */
+export declare function setEqualityWitness(importPath: string, members: readonly string[], membersType: string): string;
+/**
+ * How a certificate binds to each claim its contract names in proves. Kibi
+ * derives what the certificate must establish from each claim's grounding
+ * fact (claim_obligations.pl) and checks the certificate against it; a claim
+ * whose fact has no derivation is only attested by the author. Returns
+ * undefined for a contract that names no claims.
+ */
+export declare function judgeClaimBindings(context: OperationContext, input: Readonly<{
+    testId: string;
+    contract: ProofContract;
+    verdict: CertificateVerdict;
+    coveredBySymbols: readonly string[];
+}>): Promise<ClaimBinding[] | undefined>;
+//# sourceMappingURL=claim-bindings.d.ts.map

package/dist/operations/proof/claim-bindings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claim-bindings.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/claim-bindings.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AACjF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EACL,KAAK,kBAAkB,EAIxB,MAAM,wBAAwB,CAAC;AA+ChC;;;GAGG;AAEH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,WAAW,EAAE,MAAM,GAClB,MAAM,CAWR;AA8GD;;;;;;GAMG;AAEH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,QAAQ,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC,CAAC,GACD,OAAO,CAAC,YAAY,EAAE,GAAG,SAAS,CAAC,CAuErC"}