kibi-cli 2.31.1 → 2.35.1

package/src/schemas/entity.schema.json

@@ -523,6 +523,16 @@
       ],
       "description": "Requirement and ADR only. How firmly the decision was made. firm: a human stated it as a rule; it needs a ref (origin.ref, or approval_ref on a requirement) to their words, and only a human may change it. default: a delegated or agent choice; a later agent may supersede it with evidence. exploratory: a flagged guess, expected to be revisited. When absent, it reads as default if an agent wrote the entity (origin.kind agent) and as firm otherwise (a person's, imported or migrated decision); set it explicitly when recording a decision."
     },
+    "required_evidence": {
+      "type": "string",
+      "enum": [
+        "proved",
+        "tested",
+        "asserted",
+        "unverified"
+      ],
+      "description": "Requirement-only. The weakest evidence level this current requirement accepts; the evidence-floor check rule fails while its computed evidence level is lower. proved: a re-checkable certificate covers every case. tested: fresh passing E2E receipts cover every linked scenario. asserted: a person stands behind it. unverified: no floor. When absent, it is tested for a firm requirement and unverified otherwise."
+    },
     "expects": {
       "type": "string",
       "enum": [
@@ -762,8 +772,286 @@
         "success_policy": {
           "type": "string",
           "enum": [
-            "all_required_first_attempt"
+            "all_required_first_attempt",
+            "own_results_first_attempt"
           ]
+        },
+        "kind": {
+          "type": "string",
+          "enum": [
+            "e2e",
+            "example",
+            "property",
+            "exhaustive",
+            "typecheck",
+            "arithmetic",
+            "smt",
+            "rule",
+            "state_machine",
+            "regex",
+            "source"
+          ],
+          "description": "What the checker establishes; absent means e2e. exhaustive, typecheck, arithmetic, smt, rule, state_machine and regex must leave a kibi.code-certificate.v1 that Kibi re-checks before the receipt counts as proved. source reads the contract's source itself: the run may leave {version, kind: source, test_id, source} or nothing, and Kibi stores its own read as the certificate."
+        },
+        "source": {
+          "type": "object",
+          "description": "source: the project source a source proof reads. A project source Kibi reads by itself. reader json or yaml: {file, path?, select?: keys|values|items}. glob: {pattern, capture?, ignore?} (capture true reads what each * matched). openapi: {file, select?: operations|unsecured_operations|security_schemes|responses}. references: {files, extract: env|imports|calls|string_args|thrown|property, callee?, key?, ignore?}. schema: {format: drizzle|prisma|sql, file (drizzle, prisma) or files (sql migrations), exports?, table?, select?: tables|columns|required_columns|nullable_columns|foreign_keys}. routes: {file, export, framework?: hono|express, path_prefix?, names_from?, select?: routes|middleware}. validator: {file, export, select?: fields|required_fields|optional_fields}. Paths are repository-relative. A member Kibi cannot read statically fails the read with its location.",
+          "required": [
+            "reader"
+          ],
+          "properties": {
+            "reader": {
+              "type": "string",
+              "enum": [
+                "json",
+                "yaml",
+                "glob",
+                "openapi",
+                "references",
+                "schema",
+                "routes",
+                "validator"
+              ]
+            }
+          },
+          "additionalProperties": true
+        },
+        "domain_source": {
+          "type": "object",
+          "description": "exhaustive and typecheck: the symbol that defines the finite domain (typecheck: also the type whose fields a required_fields fact names). state_machine: the transition table or next-state function. The proof must import it from its source file; a hand-listed domain downgrades the receipt to example. Kibi reads the export named `export`, or the symbol's title when `export` is absent.",
+          "required": [
+            "symbol_id"
+          ],
+          "properties": {
+            "symbol_id": {
+              "type": "string",
+              "minLength": 1
+            },
+            "export": {
+              "type": "string",
+              "minLength": 1,
+              "description": "The name the domain is exported under in the symbol's source file, when the symbol's title is not that name."
+            }
+          },
+          "additionalProperties": false
+        },
+        "witness": {
+          "type": "object",
+          "description": "typecheck: the repository-relative witness file Kibi compiles (an exhaustive switch ending in never, or a mapped type over the domain).",
+          "required": [
+            "path"
+          ],
+          "properties": {
+            "path": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "additionalProperties": false
+        },
+        "proves": {
+          "type": "array",
+          "description": "Certificate kinds: the requirement claim keys (CLAIM-...) this certificate proves. Each must be a modeled claim of a current requirement the test reaches through its scenarios. Kibi derives what the certificate must establish from the claim's grounding fact (a set fact for exhaustive or typecheck, a numeric fact for arithmetic or smt, a rule, predicate or set fact for rule and state_machine, a string fact for regex); a claim with no such derivation is only attested and never counts as proved.",
+          "minItems": 1,
+          "items": {
+            "type": "string",
+            "pattern": "^CLAIM-"
+          },
+          "uniqueItems": true
+        },
+        "value_source": {
+          "type": "array",
+          "description": "arithmetic and smt: code constants the assumptions read. Kibi evaluates each export at ingest and requires the certificate to assume the variable equals that value, so the proof is about the code and not only the knowledge base. With measure count the value is the size of a list, set, map or object export, so a count claim reads the collection itself. An entry {source, measure: count} counts the members Kibi reads from a project source (routes, tables, environment variables).",
+          "minItems": 1,
+          "items": {
+            "type": "object",
+            "properties": {
+              "symbol_id": {
+                "type": "string",
+                "minLength": 1
+              },
+              "export": {
+                "type": "string",
+                "minLength": 1
+              },
+              "source": {
+                "type": "object",
+                "description": "A project source Kibi reads by itself. reader json or yaml: {file, path?, select?: keys|values|items}. glob: {pattern, capture?, ignore?} (capture true reads what each * matched). openapi: {file, select?: operations|unsecured_operations|security_schemes|responses}. references: {files, extract: env|imports|calls|string_args|thrown|property, callee?, key?, ignore?}. schema: {format: drizzle|prisma|sql, file (drizzle, prisma) or files (sql migrations), exports?, table?, select?: tables|columns|required_columns|nullable_columns|foreign_keys}. routes: {file, export, framework?: hono|express, path_prefix?, names_from?, select?: routes|middleware}. validator: {file, export, select?: fields|required_fields|optional_fields}. Paths are repository-relative. A member Kibi cannot read statically fails the read with its location.",
+                "required": [
+                  "reader"
+                ],
+                "properties": {
+                  "reader": {
+                    "type": "string",
+                    "enum": [
+                      "json",
+                      "yaml",
+                      "glob",
+                      "openapi",
+                      "references",
+                      "schema",
+                      "routes",
+                      "validator"
+                    ]
+                  }
+                },
+                "additionalProperties": true
+              },
+              "measure": {
+                "type": "string",
+                "enum": [
+                  "value",
+                  "count"
+                ],
+                "description": "value (default for an export): the export is a number. count (the only measure of a source): the number of members of a list, set, map or object export, or of a source."
+              }
+            },
+            "additionalProperties": false
+          }
+        },
+        "predicate_source": {
+          "type": "object",
+          "description": "rule: the code function behind each predicate a claim's rule, predicate or set fact names, keyed by predicate name. Each export takes the predicate's arguments in order and returns a boolean; Kibi calls it on every combination of its argument domains.",
+          "minProperties": 1,
+          "additionalProperties": {
+            "type": "object",
+            "required": [
+              "symbol_id"
+            ],
+            "properties": {
+              "symbol_id": {
+                "type": "string",
+                "minLength": 1
+              },
+              "export": {
+                "type": "string",
+                "minLength": 1,
+                "description": "The exported function's name in the symbol's source file. Without it Kibi reads the export named by the symbol's title."
+              },
+              "harness_for": {
+                "type": "array",
+                "minItems": 1,
+                "items": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "description": "The predicate is a test harness that decides the predicate by driving these code symbols (for example by calling the handler with each role). The symbols must be covered_by the test; a claim the harness proves is bound with scope harness."
+              }
+            },
+            "additionalProperties": false
+          }
+        },
+        "domains": {
+          "type": "object",
+          "description": "rule: the finite domain of each argument type, keyed by type name (an array, Set, Map or object export, or a Python list, set, dict or Enum), or {source} for the members Kibi reads from a project source (every route, every table, every environment variable). state_machine with a next-state function: the `state` and `event` domains it is called on.",
+          "minProperties": 1,
+          "additionalProperties": {
+            "anyOf": [
+              {
+                "type": "object",
+                "required": [
+                  "symbol_id"
+                ],
+                "properties": {
+                  "symbol_id": {
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "export": {
+                    "type": "string",
+                    "minLength": 1
+                  }
+                },
+                "additionalProperties": false
+              },
+              {
+                "type": "object",
+                "required": [
+                  "source"
+                ],
+                "properties": {
+                  "source": {
+                    "type": "object",
+                    "description": "A project source Kibi reads by itself. reader json or yaml: {file, path?, select?: keys|values|items}. glob: {pattern, capture?, ignore?} (capture true reads what each * matched). openapi: {file, select?: operations|unsecured_operations|security_schemes|responses}. references: {files, extract: env|imports|calls|string_args|thrown|property, callee?, key?, ignore?}. schema: {format: drizzle|prisma|sql, file (drizzle, prisma) or files (sql migrations), exports?, table?, select?: tables|columns|required_columns|nullable_columns|foreign_keys}. routes: {file, export, framework?: hono|express, path_prefix?, names_from?, select?: routes|middleware}. validator: {file, export, select?: fields|required_fields|optional_fields}. Paths are repository-relative. A member Kibi cannot read statically fails the read with its location.",
+                    "required": [
+                      "reader"
+                    ],
+                    "properties": {
+                      "reader": {
+                        "type": "string",
+                        "enum": [
+                          "json",
+                          "yaml",
+                          "glob",
+                          "openapi",
+                          "references",
+                          "schema",
+                          "routes",
+                          "validator"
+                        ]
+                      }
+                    },
+                    "additionalProperties": true
+                  }
+                },
+                "additionalProperties": false
+              }
+            ]
+          }
+        },
+        "initial_source": {
+          "type": "object",
+          "required": [
+            "symbol_id"
+          ],
+          "properties": {
+            "symbol_id": {
+              "type": "string",
+              "minLength": 1
+            },
+            "export": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "additionalProperties": false,
+          "description": "state_machine: the export holding the initial state (or states), needed for initial_states and reachable_states facts."
+        },
+        "pattern_source": {
+          "type": "object",
+          "required": [
+            "symbol_id"
+          ],
+          "properties": {
+            "symbol_id": {
+              "type": "string",
+              "minLength": 1
+            },
+            "export": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "additionalProperties": false,
+          "description": "regex: the export holding the code's pattern (a RegExp, or a Python re.Pattern) or string constant that a string fact is about."
+        },
+        "constraint_source": {
+          "type": "object",
+          "description": "arithmetic and smt: the typed numeric property_value facts the certificate's assumptions come from. Kibi checks the assumptions (or the query's assertions) are exactly these facts' constraints, so the proof is about the knowledge base, not numbers the test chose.",
+          "required": [
+            "fact_ids"
+          ],
+          "properties": {
+            "fact_ids": {
+              "type": "array",
+              "minItems": 1,
+              "items": {
+                "type": "string",
+                "minLength": 1
+              }
+            }
+          },
+          "additionalProperties": false
         }
       },
       "additionalProperties": false
@@ -813,7 +1101,7 @@
       "type": "array",
       "items": {
         "type": "object",
-        "description": "Kibi-derived kibi.proof-receipt.v1. Receipts are never caller-authored; kb_ingest_proof derives them from kibi.proof-run.v1 artifacts.",
+        "description": "Kibi-derived kibi.proof-receipt.v2 (kibi.proof-receipt.v1 entries are still read). Receipts are never caller-authored; kb_ingest_proof derives them from kibi.proof-run.v1 artifacts.",
         "required": [
           "version",
           "receipt_id",
@@ -837,7 +1125,10 @@
         "properties": {
           "version": {
             "type": "string",
-            "const": "kibi.proof-receipt.v1"
+            "enum": [
+              "kibi.proof-receipt.v1",
+              "kibi.proof-receipt.v2"
+            ]
           },
           "receipt_id": {
             "type": "string",
@@ -1080,6 +1371,90 @@
               "additionalProperties": false
             }
           },
+          "kind": {
+            "type": "string",
+            "enum": [
+              "e2e",
+              "example",
+              "property",
+              "exhaustive",
+              "typecheck",
+              "arithmetic",
+              "smt",
+              "rule",
+              "state_machine",
+              "regex",
+              "source"
+            ]
+          },
+          "evidence_level": {
+            "type": "string",
+            "enum": [
+              "proved",
+              "tested"
+            ]
+          },
+          "certificate": {
+            "type": "object"
+          },
+          "certificate_digest": {
+            "type": "string",
+            "pattern": "^[a-f0-9]{64}$"
+          },
+          "certificate_rejection": {
+            "type": "string",
+            "minLength": 1
+          },
+          "claim_bindings": {
+            "type": "array",
+            "description": "Certificate kinds: how the certificate binds to each claim its contract names in proves, judged at ingest. derived means Kibi derived the certificate's obligation from the claim's grounding fact and the certificate satisfies it; attested means no derivation exists and the author vouches for it (never proved); rejected names why.",
+            "items": {
+              "type": "object",
+              "required": [
+                "claim_key",
+                "binding"
+              ],
+              "properties": {
+                "claim_key": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "requirement_id": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "fact_id": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "binding": {
+                  "type": "string",
+                  "enum": [
+                    "derived",
+                    "attested",
+                    "rejected"
+                  ]
+                },
+                "scope": {
+                  "type": "string",
+                  "enum": [
+                    "code",
+                    "source",
+                    "harness",
+                    "intent"
+                  ]
+                },
+                "obligation": {
+                  "type": "object"
+                },
+                "reason": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "additionalProperties": false
+            }
+          },
           "gaps": {
             "type": "array",
             "items": {
@@ -1150,7 +1525,11 @@
         "lt",
         "lte",
         "gt",
-        "gte"
+        "gte",
+        "matches",
+        "includes",
+        "subset_of",
+        "excludes"
       ]
     },
     "value_type": {
@@ -1159,12 +1538,22 @@
         "string",
         "int",
         "number",
-        "bool"
+        "bool",
+        "set"
       ]
     },
     "value_string": {
       "type": "string"
     },
+    "value_set": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "minLength": 1
+      },
+      "minItems": 1,
+      "uniqueItems": true
+    },
     "value_int": {
       "type": "integer"
     },
@@ -1395,6 +1784,11 @@
                 "value_bool"
               ]
             },
+            {
+              "required": [
+                "value_set"
+              ]
+            },
             {
               "required": [
                 "unit"
@@ -1661,6 +2055,11 @@
               "required": [
                 "exempts_claims"
               ]
+            },
+            {
+              "required": [
+                "required_evidence"
+              ]
             }
           ]
         }

package/dist/commands/proof-impact.d.ts

@@ -1,7 +0,0 @@
-export type ProofImpactOptions = Readonly<{
-    json?: boolean;
-}>;
-export declare function proofImpactCommand(options: ProofImpactOptions): Promise<{
-    exitCode: number;
-}>;
-//# sourceMappingURL=proof-impact.d.ts.map

package/dist/commands/proof-impact.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"proof-impact.d.ts","sourceRoot":"","sources":["../../src/commands/proof-impact.ts"],"names":[],"mappings":"AAiBA,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC,CAAC;AAGH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA8B/B"}

package/dist/commands/proof-impact.js

@@ -1,39 +0,0 @@
-/*
- Kibi — repo-local, per-branch, queryable long-term memory for software projects
- Copyright (C) 2026 Piotr Franczyk
-
- This program is free software: you can redistribute it and/or modify
- it under the terms of the GNU Affero General Public License as published by
- the Free Software Foundation, either version 3 of the License, or
- (at your option) any later version.
- */
-import { executeProofImpact, proofImpactExitCode, } from "../operations/proof/impact.js";
-import { createCliRuntime } from "../runtime/cli-runtime.js";
-// implements REQ-kibi-verification-evidence-contract
-export async function proofImpactCommand(options) {
-    const runtime = createCliRuntime();
-    const context = await runtime.open({
-        name: "kibi_proof_impact",
-        effects: [],
-        requiresProlog: true,
-        execute: async () => undefined,
-    }, {});
-    let completed = false;
-    try {
-        const { result, text } = await executeProofImpact(context);
-        if (options.json) {
-            process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
-        }
-        else {
-            process.stdout.write(text);
-        }
-        completed = true;
-        await runtime.afterSuccess({ name: "kibi_proof_impact" }, context);
-        return { exitCode: proofImpactExitCode(result) };
-    }
-    finally {
-        await runtime.close(context, completed
-            ? { status: "success", result: 0 }
-            : { status: "error", error: 1 });
-    }
-}

package/dist/operations/proof/baseline-diff.d.ts

@@ -1,41 +0,0 @@
-export declare const PROOF_BASELINE_VERSION = "kibi.proof-baseline.v3";
-export type RequirementFingerprint = {
-    readonly proofStatus: string;
-    readonly gaps: readonly string[];
-    readonly uncoveredSymbols: readonly string[];
-};
-export type RequirementFingerprints = Readonly<Record<string, RequirementFingerprint>>;
-export type CoverageRowLike = {
-    readonly id?: unknown;
-    readonly proofStatus?: unknown;
-    readonly proofGaps?: unknown;
-    readonly proofStages?: {
-        readonly productionSymbols?: {
-            readonly uncoveredSymbols?: unknown;
-            readonly explanations?: unknown;
-        };
-    };
-};
-export type FingerprintChange = {
-    readonly id: string;
-    readonly kind: "added" | "removed" | "changed";
-    readonly before?: RequirementFingerprint;
-    readonly after?: RequirementFingerprint;
-};
-export declare function fingerprintRequirements(rows: readonly CoverageRowLike[]): RequirementFingerprints;
-export declare function diffFingerprints(baseline: RequirementFingerprints | undefined, current: RequirementFingerprints): FingerprintChange[];
-type ExplanationLike = {
-    readonly symbolId?: unknown;
-    readonly reason?: unknown;
-    readonly coverageCandidates?: unknown;
-};
-export declare function explanationsForRequirement(rows: readonly CoverageRowLike[], requirementId: string): readonly ExplanationLike[];
-export declare function renderRequirementDiffs(changes: readonly FingerprintChange[], rows?: readonly CoverageRowLike[]): string;
-export declare function parseSpawnJson(result: {
-    readonly error?: unknown;
-    readonly status?: number | null;
-    readonly stdout?: string | null;
-    readonly stderr?: string | null;
-}): unknown;
-export {};
-//# sourceMappingURL=baseline-diff.d.ts.map

package/dist/operations/proof/baseline-diff.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"baseline-diff.d.ts","sourceRoot":"","sources":["../../../src/operations/proof/baseline-diff.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,sBAAsB,2BAA2B,CAAC;AAE/D,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,QAAQ,CAC5C,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CACvC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE;QACrB,QAAQ,CAAC,iBAAiB,CAAC,EAAE;YAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;YACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;SACjC,CAAC;KACH,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,sBAAsB,CAAC;CACzC,CAAC;AAUF,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,SAAS,eAAe,EAAE,GAC/B,uBAAuB,CAgBzB;AAGD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,uBAAuB,GAAG,SAAS,EAC7C,OAAO,EAAE,uBAAuB,GAC/B,iBAAiB,EAAE,CA4BrB;AASD,KAAK,eAAe,GAAG;IACrB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;CACvC,CAAC;AAEF,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,SAAS,eAAe,EAAE,EAChC,aAAa,EAAE,MAAM,GACpB,SAAS,eAAe,EAAE,CAM5B;AAgBD,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,SAAS,iBAAiB,EAAE,EACrC,IAAI,GAAE,SAAS,eAAe,EAAO,GACpC,MAAM,CAwDR;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,GAAG,OAAO,CAYV"}