kibi-cli 2.39.0 → 2.40.0

package/dist/cli-register-foundation.js

@@ -21,8 +21,8 @@ export function registerFoundationCommands(program) {
         .option("--dry-run", "Preview migration changes without writing files")
         .option("--yes", "Apply migration changes without prompting")
         .option("--format <format>", "Output format: json|table", "table")
-        .option("--apply-safe", "Apply only explicitly approved deterministic migration actions")
-        .option("--approved-plan-hash <sha256>", "Exact migration plan hash approved for --apply-safe")
+        .option("--apply-safe [sha256]", "Apply only explicitly approved deterministic migration actions of the plan with this hash")
+        .option("--approved-plan-hash <sha256>", "Exact migration plan hash approved for --apply-safe (same as --apply-safe <sha256>)")
         .option("--backlog", "List every quality and coverage backlog action instead of counts per code")
         .option("--approved-action <id>", "Approve one migration action (repeatable through comma-separated IDs)", (value, previous = []) => [
         ...previous,

package/dist/commands/check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/commands/check.ts"],"names":[],"mappings":"AAqCA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAsF7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAE3D,YAAY,EAAE,SAAS,EAAE,CAAC;AAE1B,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AA6hBD,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,CAAC,EACtC,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,EAC5B,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GAC3B,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAMpB;AAGD,wBAAsB,YAAY,CAChC,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAqsB/B;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAoDtB;AAID,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,MAAM,EAAE,CAAC,CAgBnB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,aAAa,EACrB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,EAAE,CAAC,CAiBnB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAkEtB;AAID,wBAAsB,aAAa,CACjC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAmGtB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,SAAS,EAAE,CAAC,CAyCtB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAgDtB;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CA0BtB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqBtB;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqBtB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqBtB"}
+{"version":3,"file":"check.d.ts","sourceRoot":"","sources":["../../src/commands/check.ts"],"names":[],"mappings":"AAsCA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAuF7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAE3D,YAAY,EAAE,SAAS,EAAE,CAAC;AAE1B,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AA6hBD,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,CAAC,EACtC,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,EAC5B,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,GAC3B,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAMpB;AAGD,wBAAsB,YAAY,CAChC,OAAO,EAAE,YAAY,GACpB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAyuB/B;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAoDtB;AAID,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,MAAM,EAAE,CAAC,CAgBnB;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,aAAa,EACrB,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,EAAE,CAAC,CAiBnB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAkEtB;AAID,wBAAsB,aAAa,CACjC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAmGtB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,EACrB,YAAY,EAAE,MAAM,EAAE,GACrB,OAAO,CAAC,SAAS,EAAE,CAAC,CAyCtB;AAED,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAgDtB;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CA0BtB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqBtB;AAED,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqBtB;AAED,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,SAAS,EAAE,CAAC,CAqBtB"}

package/dist/commands/check.js

@@ -20,7 +20,7 @@ import { EngineClient } from "../engine.js";
 import { extractFromManifestString } from "../extractors/manifest.js";
 import { extractFromMarkdownString, } from "../extractors/markdown.js";
 import { createMaintenanceSourceAnalysisService, fingerprintMaintenanceSourceSet, readSnapshotSourceConfig, } from "../plugins/maintenance-source-analysis.js";
-import { analyzeSourceChanges, assertSourceAnalysisGate, } from "../plugins/source-change-analysis.js";
+import { analyzeSourceChanges, assertSourceAnalysisGate, partialAnalysisReviews, } from "../plugins/source-change-analysis.js";
 import { PrologProcess } from "../prolog.js";
 import { escapeAtom, normalizeEntityId, parseTriples, parseViolationRows, } from "../prolog/codec.js";
 import { createSemanticReviewDiagnostics, createSymbolGranularityDiagnostics, createSymbolQualityDiagnostics, hasBlockingImpactDiagnostics, } from "../public/impact-diagnostics.js";
@@ -45,7 +45,7 @@ import { classifyKibiImpactEvidence, isBehaviorSourceEdit, parseKibiImpactOverri
 import { stagedInventoryDriftViolations } from "../traceability/staged-inventory-drift.js";
 import { stagedCommitCarriesMigration } from "../traceability/staged-migration.js";
 import { assessStagedSymbolsManifest, collectStagedAuthoredSymbolsManifestEvidence, } from "../traceability/staged-symbols-manifest.js";
-import { createManifestLookupSentinelKey, extractSymbolsFromStagedFileAsync, } from "../traceability/symbol-extract.js";
+import { createManifestLookupSentinelKey, extractSymbolsFromStagedFileAsync, partialAnalysisSymbolsUsable, } from "../traceability/symbol-extract.js";
 import { cleanupTempKb, consultOverlay, createOverlayFacts, createTempKb, projectStagedEntities, } from "../traceability/temp-kb.js";
 import { formatCoverageViolations, formatViolations as formatStagedViolations, validateStagedSymbolCoverage, validateStagedSymbols, } from "../traceability/validate.js";
 import { resolveReadBranchAttachment } from "../utils/branch-resolver.js";
@@ -321,7 +321,7 @@ function noValidatedSymbolsMessage(sourceAnalysis) {
         return [`${analysis.path}${provider}`];
     });
     if (partialFiles.length > 0) {
-        return `Partial source analysis was reviewed for ${partialFiles.join(", ")}; no fully analyzed exported symbols or staged entities were available for symbol validation.`;
+        return `Partial source analysis was reviewed for ${partialFiles.join(", ")}; the staged change touches no declaration the analyzer placed and no staged entity.`;
     }
     return "No exported symbols or staged entities found in staged files.";
 }
@@ -480,12 +480,30 @@ export async function checkCommand(options) {
                 const trustedSourceConfig = readSnapshotSourceConfig(snapshot, snapshot.baseTree);
                 const sourceService = createMaintenanceSourceAnalysisService(process.cwd(), trustedSourceConfig);
                 const sourceAnalysis = await analyzeSourceChanges(stagedInventory, sourceService);
+                // A partial result still places its declarations: they are checked
+                // like fully analyzed ones, and only a staged line in a gap outside
+                // them keeps the file at file-level review.
+                const partialReviews = partialAnalysisReviews(stagedInventory, sourceAnalysis);
+                const partialReviewPaths = new Set(partialReviews.map((review) => review.path));
+                const impactPolicyEnabled = stagedInventory.length > 0 && hasValidBaseImpactPolicy(snapshot);
+                const partialSymbolPaths = new Set();
                 for (const file of stagedInventory) {
-                    const analysis = sourceAnalysis.get(file.path);
-                    if (analysis?.after?.status === "ok") {
+                    const after = sourceAnalysis.get(file.path)?.after;
+                    if (after?.status === "ok") {
                         file.analysisDepth = "symbol";
                         file.disposition = "checked";
                     }
+                    else if (after &&
+                        file.status !== "D" &&
+                        !file.skipReason &&
+                        partialAnalysisSymbolsUsable(after)) {
+                        partialSymbolPaths.add(file.path);
+                        // An impact review binds the classified depth; keep it there.
+                        if (!impactPolicyEnabled && !partialReviewPaths.has(file.path)) {
+                            file.analysisDepth = "symbol";
+                            file.disposition = "checked";
+                        }
+                    }
                 }
                 const mergeInherited = snapshot.mergeInherited ?? [];
                 const mergeNote = mergeInherited.length > 0
@@ -495,7 +513,11 @@ export async function checkCommand(options) {
                 const renameNote = renameResolved.length > 0
                     ? `Baseline: HEAD with ${renameResolved.length} staged knowledge rename(s) into .kb/ resolved; renamed files are judged only on what this commit changed in them. Run kibi check for the full report.`
                     : undefined;
-                const baselineNotes = [mergeNote, renameNote].filter((note) => note !== undefined);
+                const baselineNotes = [
+                    mergeNote,
+                    renameNote,
+                    ...partialReviews.map((review) => `Partial source analysis: staged line(s) ${review.lines.map((range) => (range.startLine === range.endLine ? `${range.startLine}` : `${range.startLine}-${range.endLine}`)).join(", ")} of ${review.path} fall outside every declaration the analyzer placed (${review.detail}); review that change at file level.`),
+                ].filter((note) => note !== undefined);
                 const printNotedResult = (input) => {
                     printStagedResult(baselineNotes.length === 0
                         ? input
@@ -535,7 +557,6 @@ export async function checkCommand(options) {
                     record.providerId =
                         analysis.after?.providerId ?? analysis.before?.providerId ?? null;
                 }
-                const impactPolicyEnabled = stagedInventory.length > 0 && hasValidBaseImpactPolicy(snapshot);
                 // One rule decides which analysis gaps block (see analysis-gate): the
                 // committed side never blocks, and an after-side local gap blocks only
                 // where it overlaps the staged lines. With a policy, the impact review
@@ -568,9 +589,12 @@ export async function checkCommand(options) {
                     return { exitCode: 0 };
                 }
                 const symbolPaths = new Set(stagedInventory
-                    .filter((file) => file.analysisDepth === "symbol")
+                    .filter((file) => file.analysisDepth === "symbol" ||
+                    partialSymbolPaths.has(file.path))
                     .map((file) => file.path));
-                const sourceFiles = stagedFiles.filter((file) => symbolPaths.has(file.path));
+                const sourceFiles = supportedStagedFiles(stagedInventory.map((file) => partialSymbolPaths.has(file.path)
+                    ? { ...file, analysisDepth: "symbol" }
+                    : file)).filter((file) => symbolPaths.has(file.path));
                 const markdownFiles = stagedFiles.filter((file) => file.path.endsWith(".md") && isEntityLanePath(file.path));
                 const markdownErrors = [];
                 for (const f of markdownFiles) {

package/dist/commands/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAiHA,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3B;AAGD,wEAAwE;AACxE,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,EAAE,GACpD,MAAM,GAAG,SAAS,CAUpB;AAGD,wBAAsB,aAAa,CACjC,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAyH/B;AAED,wBAAsB,4BAA4B,CAChD,IAAI,GAAE,MAAM,OAAO,CAAC;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAE,CACT,GACxC,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;;;;;;;;;;;;;;;;MAkE3C;AAkGD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGzE;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,MAAM,GAAG,SAAS,CAepB"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAmHA,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAC3B;AAGD,wEAAwE;AACxE,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,SAAS;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,EAAE,GACpD,MAAM,GAAG,SAAS,CAUpB;AAGD,wBAAsB,aAAa,CACjC,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAyH/B;AAED,wBAAsB,4BAA4B,CAChD,IAAI,GAAE,MAAM,OAAO,CAAC;IAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;CAAE,CACT,GACxC,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;;;;;;;;;;;;;;;;MAkE3C;AAkGD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGzE;AAED,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,MAAM,GAAG,SAAS,CAepB"}

package/dist/commands/doctor.js

@@ -22,7 +22,9 @@ import * as path from "node:path";
 import { fileURLToPath } from "node:url";
 import { bootstrapKibiEnvironment, secretSourceFromBootstrap, } from "../env/bootstrap.js";
 import { kibiPackageVersions } from "../package-versions.js";
+import { pluginInstallProblems } from "../plugins/plugin-install-check.js";
 import { describeConfiguredCapabilityPlugins, readProjectKibiConfig, } from "../plugins/project-config.js";
+import { workspaceReferenceLanguageNote } from "../plugins/reference-language-suggestion.js";
 import { SwiplResolutionError, inspectSwiplBundle, probeRequiredLibraries, resolveSwipl, } from "../prolog/swipl-resolver.js";
 import { buildMigrationPlan, migrationAction, } from "../public/operations/migration-plan.js";
 import { noteCliErrorCategory } from "../usage-telemetry.js";
@@ -443,10 +445,14 @@ function checkCapabilityPlugins() {
         const bootstrap = bootstrapKibiEnvironment();
         const workspaceRoot = bootstrap.workspaceRoot;
         const rows = describeConfiguredCapabilityPlugins(workspaceRoot);
+        const languages = workspaceReferenceLanguageNote(workspaceRoot);
         if (rows.length === 0) {
             return {
                 passed: true,
                 message: "None configured; builtin providers only",
+                ...(languages === null
+                    ? {}
+                    : { warning: true, remediation: languages }),
             };
         }
         const parts = rows.map((row) => `${row.package} ${row.capability} ${row.mode} declared=${row.declared ? "yes" : "no"}`);
@@ -461,6 +467,14 @@ function checkCapabilityPlugins() {
         const packages = [
             ...new Set((config.plugins ?? []).map((plugin) => plugin.package)),
         ];
+        const installProblems = pluginInstallProblems(workspaceRoot, packages);
+        if (installProblems.length > 0) {
+            return {
+                passed: false,
+                message: `${parts.join("; ")}; ${installProblems.map((row) => row.problem).join("; ")}`,
+                remediation: installProblems.map((row) => row.fix).join(" "),
+            };
+        }
         const missingSecrets = [];
         // Secrets whose plugin only augments a builtin provider: without them the
         // plugin is skipped and the builtin keeps working, so doctor warns.
@@ -513,6 +527,7 @@ function checkCapabilityPlugins() {
         return {
             passed: true,
             message,
+            ...(languages === null ? {} : { warning: true, remediation: languages }),
         };
     }
     catch (error) {

package/dist/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AA8GA,UAAU,WAAW;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAkFD,wBAAsB,WAAW,CAC/B,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA0L/B"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../src/commands/init.ts"],"names":[],"mappings":"AA+GA,UAAU,WAAW;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAkFD,wBAAsB,WAAW,CAC/B,OAAO,EAAE,WAAW,GACnB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA4L/B"}

package/dist/commands/init.js

@@ -19,6 +19,7 @@ import { existsSync, lstatSync, realpathSync } from "node:fs";
 import * as path from "node:path";
 import { fileURLToPath } from "node:url";
 import { classifyActivation } from "../operations/bootstrap/activation.js";
+import { workspaceReferenceLanguageNote } from "../plugins/reference-language-suggestion.js";
 import { nodeFilesystem } from "../public/operations/node-ports.js";
 import { resolveBranchAttachment } from "../utils/branch-resolver.js";
 import { readLegacyKbConfig } from "../utils/config.js";
@@ -268,6 +269,9 @@ export async function initCommand(options) {
         console.log(legacyConfig
             ? "  Next: run 'kibi migrate --yes' to move the legacy knowledge into .kb/."
             : (await initNextAction(projectRoot)).message);
+        const plugins = workspaceReferenceLanguageNote(projectRoot);
+        if (plugins !== null)
+            console.log(`  Suggested plugin: ${plugins}`);
         console.log("  Optional diagnostic: run 'kibi doctor' if setup appears degraded.");
         if (options.github === true) {
             scaffoldGitHubIntegration({

package/dist/commands/migrate-plan-record.d.ts

@@ -0,0 +1,18 @@
+import type { MigrationPlan } from "../public/operations/migration-plan.js";
+export type PrintedPlan = Readonly<{
+    planHash: string;
+    printedAt: string;
+    expected: MigrationPlan["expected"];
+    actions: readonly Readonly<{
+        id: string;
+        code: string;
+        state: string;
+    }>[];
+}>;
+/** Remember a plan `kibi migrate` printed; a write failure is ignored. */
+export declare function recordPrintedPlan(workspaceRoot: string, plan: MigrationPlan, now?: Date): void;
+/** The printed plan with this hash, if `kibi migrate` printed it here. */
+export declare function findPrintedPlan(workspaceRoot: string, planHash: string): PrintedPlan | undefined;
+/** What differs between a printed plan and the current one, one line each. */
+export declare function describePlanChange(printed: PrintedPlan, current: MigrationPlan): string[];
+//# sourceMappingURL=migrate-plan-record.d.ts.map

package/dist/commands/migrate-plan-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrate-plan-record.d.ts","sourceRoot":"","sources":["../../src/commands/migrate-plan-record.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AAY5E,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IACpC,OAAO,EAAE,SAAS,QAAQ,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;CAC3E,CAAC,CAAC;AA0BH,0EAA0E;AAC1E,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,aAAa,EACnB,GAAG,GAAE,IAAiB,GACrB,IAAI,CA0BN;AAGD,0EAA0E;AAC1E,wBAAgB,eAAe,CAC7B,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,GACf,WAAW,GAAG,SAAS,CAIzB;AAmBD,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE,aAAa,GACrB,MAAM,EAAE,CA0BV"}

package/dist/commands/migrate-plan-record.js

@@ -0,0 +1,112 @@
+/*
+ Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ Copyright (C) 2026 Piotr Franczyk
+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU Affero General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU Affero General Public License for more details.
+
+ You should have received a copy of the GNU Affero General Public License
+ along with this program.  If not, see <https://www.gnu.org/licenses/>.
+*/
+import * as fs from "node:fs";
+import * as path from "node:path";
+/**
+ * The migration plans `kibi migrate` printed recently, so an approval of a
+ * plan that has since changed can say what changed. The file lives in the
+ * gitignored `.kb/migrations/` and is only a reading aid: a plan applies only
+ * with its current hash whatever this file says.
+ */
+const RECORD_FILE = "printed-plans.json";
+const MAX_RECORDS = 8;
+function recordPath(workspaceRoot) {
+    return path.join(workspaceRoot, ".kb", "migrations", RECORD_FILE);
+}
+function readRecords(workspaceRoot) {
+    try {
+        const parsed = JSON.parse(fs.readFileSync(recordPath(workspaceRoot), "utf8"));
+        return Array.isArray(parsed)
+            ? parsed.filter((entry) => typeof entry === "object" &&
+                entry !== null &&
+                typeof entry.planHash === "string" &&
+                Array.isArray(entry.actions))
+            : [];
+    }
+    catch {
+        return [];
+    }
+}
+// implements REQ-cli-schema-migration
+/** Remember a plan `kibi migrate` printed; a write failure is ignored. */
+export function recordPrintedPlan(workspaceRoot, plan, now = new Date()) {
+    const entry = {
+        planHash: plan.planHash,
+        printedAt: now.toISOString(),
+        expected: plan.expected,
+        actions: plan.actions.map((action) => ({
+            id: action.id,
+            code: action.code,
+            state: action.state,
+        })),
+    };
+    const records = [
+        entry,
+        ...readRecords(workspaceRoot).filter((record) => record.planHash !== plan.planHash),
+    ].slice(0, MAX_RECORDS);
+    try {
+        fs.mkdirSync(path.dirname(recordPath(workspaceRoot)), { recursive: true });
+        fs.writeFileSync(recordPath(workspaceRoot), `${JSON.stringify(records, null, 2)}\n`);
+    }
+    catch {
+        // The record only explains a changed plan; never fail a preview on it.
+    }
+}
+// implements REQ-cli-schema-migration
+/** The printed plan with this hash, if `kibi migrate` printed it here. */
+export function findPrintedPlan(workspaceRoot, planHash) {
+    return readRecords(workspaceRoot).find((record) => record.planHash === planHash);
+}
+const EXPECTED_LABELS = {
+    branch: "the Git branch",
+    kbBranch: "the KB branch",
+    kbSnapshotId: "the KB snapshot",
+    workspaceSnapshot: "the workspace files",
+    configHash: "the KB config",
+};
+/** A long hash cut to its first 12 characters; other values as they are. */
+function short(value) {
+    if (value === null)
+        return "none";
+    return /^[0-9a-f]{20,}$/i.test(value) ? value.slice(0, 12) : value;
+}
+// implements REQ-cli-schema-migration
+/** What differs between a printed plan and the current one, one line each. */
+export function describePlanChange(printed, current) {
+    const lines = [];
+    const before = new Map(printed.actions.map((action) => [action.id, action]));
+    const after = new Map(current.actions.map((action) => [action.id, action]));
+    for (const action of current.actions) {
+        const old = before.get(action.id);
+        if (old === undefined)
+            lines.push(`added ${action.state} ${action.code}: ${action.id}`);
+        else if (old.state !== action.state)
+            lines.push(`${action.id} went from ${old.state} to ${action.state}`);
+    }
+    for (const action of printed.actions) {
+        if (!after.has(action.id))
+            lines.push(`removed ${action.state} ${action.code}: ${action.id}`);
+    }
+    for (const key of Object.keys(EXPECTED_LABELS)) {
+        const was = printed.expected?.[key] ?? null;
+        const now = current.expected[key];
+        if (was !== now)
+            lines.push(`${EXPECTED_LABELS[key]} changed (${short(was)} -> ${short(now)})`);
+    }
+    return lines;
+}

package/dist/commands/migrate.d.ts

@@ -1,9 +1,10 @@
-import type { MigrationAction } from "../public/operations/migration-plan.js";
+import type { MigrationAction, MigrationPlan } from "../public/operations/migration-plan.js";
 interface MigrateOptions {
     dryRun?: boolean;
     yes?: boolean;
     format?: "json" | "table";
-    applySafe?: boolean;
+    /** `--apply-safe [sha256]`: true, or the approved plan hash given with it. */
+    applySafe?: boolean | string;
     approvedPlanHash?: string;
     approvedActionIds?: string[];
     /** `--approved-action <id>` as the CLI parser spells it; same as approvedActionIds. */
@@ -60,6 +61,14 @@ export declare function migrateCommand(options?: MigrateOptions): Promise<{
  * (for example legacy links an earlier plan action already marked).
  */
 export declare function describeMigrationRun(summary: MigrationRunSummary): string;
+/** The exact command that applies the plan with this hash. */
+export declare function applyPlanCommand(planHash: string): string;
+/**
+ * Why an approved hash is not the current plan's: what changed since that
+ * plan was printed here, when Kibi recorded it, and the command for the
+ * current plan.
+ */
+export declare function planChangedMessage(workspaceRoot: string, approvedPlanHash: string, plan: MigrationPlan): string;
 /**
  * Review findings `kibi check` and `kb_status` report at any schema version:
  * quality and coverage work, not steps of the migration. A plan lists them

package/dist/commands/migrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/commands/migrate.ts"],"names":[],"mappings":"AAmEA,OAAO,KAAK,EACV,eAAe,EAGhB,MAAM,wCAAwC,CAAC;AAyBhD,UAAU,cAAc;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,uFAAuF;IACvF,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,6EAA6E;IAC7E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qFAAqF;IACrF,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,uBAAuB,EAAE,SAAS,GAAG,WAAW,GAAG,gBAAgB,GAAG,IAAI,CAAC;IAC3E,MAAM,EAAE,SAAS,CAAC;IAClB,4BAA4B,EAAE,MAAM,CAAC;IACrC,8EAA8E;IAC9E,oBAAoB,EAAE,MAAM,CAAC;IAC7B,8DAA8D;IAC9D,4BAA4B,EAAE,MAAM,CAAC;IACrC,sEAAsE;IACtE,oBAAoB,EAAE,MAAM,CAAC;IAC7B,4FAA4F;IAC5F,kBAAkB,EAAE,MAAM,CAAC;IAC3B,wHAAwH;IACxH,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B;AAED,iFAAiF;AACjF,MAAM,WAAW,mBAAmB;IAClC,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,oBAAoB,CAAC;IAC5B,0EAA0E;IAC1E,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAqLD,wBAAgB,mBAAmB,CACjC,gBAAgB,EAAE,OAAO,EACzB,UAAU,EAAE,MAAM,GAAG,IAAI,GACxB,MAAM,CAUR;AAwXD,wBAAgB,+BAA+B,IAAI;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAKtE;AAGD,wBAAsB,cAAc,CAClC,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,mBAAmB,CAAA;CAAE,CAAC,CAgkB9D;AAED;;;;GAIG;AAEH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAGzE;AAoZD;;;;;GAKG;AAEH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,GACpC,OAAO,CAOT"}
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/commands/migrate.ts"],"names":[],"mappings":"AAmEA,OAAO,KAAK,EACV,eAAe,EACf,aAAa,EAEd,MAAM,wCAAwC,CAAC;AA8BhD,UAAU,cAAc;IACtB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1B,8EAA8E;IAC9E,SAAS,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,uFAAuF;IACvF,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,6EAA6E;IAC7E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qFAAqF;IACrF,uBAAuB,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,uBAAuB,EAAE,SAAS,GAAG,WAAW,GAAG,gBAAgB,GAAG,IAAI,CAAC;IAC3E,MAAM,EAAE,SAAS,CAAC;IAClB,4BAA4B,EAAE,MAAM,CAAC;IACrC,8EAA8E;IAC9E,oBAAoB,EAAE,MAAM,CAAC;IAC7B,8DAA8D;IAC9D,4BAA4B,EAAE,MAAM,CAAC;IACrC,sEAAsE;IACtE,oBAAoB,EAAE,MAAM,CAAC;IAC7B,4FAA4F;IAC5F,kBAAkB,EAAE,MAAM,CAAC;IAC3B,wHAAwH;IACxH,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B;AAED,iFAAiF;AACjF,MAAM,WAAW,mBAAmB;IAClC,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,oBAAoB,CAAC;IAC5B,0EAA0E;IAC1E,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAqLD,wBAAgB,mBAAmB,CACjC,gBAAgB,EAAE,OAAO,EACzB,UAAU,EAAE,MAAM,GAAG,IAAI,GACxB,MAAM,CAUR;AAwXD,wBAAgB,+BAA+B,IAAI;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAKtE;AAGD,wBAAsB,cAAc,CAClC,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,mBAAmB,CAAA;CAAE,CAAC,CAgkB9D;AAED;;;;GAIG;AAEH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAGzE;AAoUD,8DAA8D;AAE9D,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;;;GAIG;AAEH,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,MAAM,EACrB,gBAAgB,EAAE,MAAM,EACxB,IAAI,EAAE,aAAa,GAClB,MAAM,CAeR;AAuGD;;;;;GAKG;AAEH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,MAAM,CAAC,GACpC,OAAO,CAOT"}

package/dist/commands/migrate.js

@@ -35,6 +35,7 @@ import { manifestMergeDriverGaps, mergeDriverSetup, } from "../utils/merge-drive
 import { LATEST_KB_SCHEMA_VERSION, getSchemaVersionStatus, normalizeSchemaVersion, } from "../utils/schema-version.js";
 import { updateGitIgnore } from "./init-helpers.js";
 import { applyLegacyStorageMigration, planLegacyStorageMigration, } from "./legacy-storage-migration.js";
+import { describePlanChange, findPrintedPlan, recordPrintedPlan, } from "./migrate-plan-record.js";
 const MIGRATION_AUDIT_VERSION = 1;
 const SCHEMA_MIGRATION_STEPS = [
     {
@@ -441,7 +442,7 @@ export function warnMigrationRequiredWithoutYes() {
 }
 // implements REQ-003
 export async function migrateCommand(options = {}) {
-    if (options.applySafe === true ||
+    if (applySafeRequested(options) ||
         options.format === "json" ||
         (options.yes !== true && options.dryRun !== true)) {
         return migratePlanCommand(options);
@@ -1054,27 +1055,68 @@ function printApplySummary(content) {
     }
     console.log("Run 'kibi migrate' for the remaining actions, or add --format json for the full result.");
 }
+/** True for `--apply-safe`, with or without the hash it may carry. */
+function applySafeRequested(options) {
+    return (options.applySafe === true ||
+        (typeof options.applySafe === "string" && options.applySafe !== ""));
+}
+/** The exact command that applies the plan with this hash. */
+// implements REQ-cli-schema-migration
+export function applyPlanCommand(planHash) {
+    return `kibi migrate --apply-safe ${planHash}`;
+}
+/**
+ * Why an approved hash is not the current plan's: what changed since that
+ * plan was printed here, when Kibi recorded it, and the command for the
+ * current plan.
+ */
+// implements REQ-cli-schema-migration
+export function planChangedMessage(workspaceRoot, approvedPlanHash, plan) {
+    const printed = findPrintedPlan(workspaceRoot, approvedPlanHash);
+    const changes = printed ? describePlanChange(printed, plan) : [];
+    const lines = [
+        printed
+            ? `The migration plan changed since ${approvedPlanHash} was printed (${printed.printedAt}); its hash is now ${plan.planHash}. Nothing was applied.`
+            : `${approvedPlanHash} is not the current migration plan; its hash is now ${plan.planHash}. Kibi has no record of printing ${approvedPlanHash} here, so it cannot say what changed. Nothing was applied.`,
+        ...(printed
+            ? changes.length > 0
+                ? ["What changed:", ...changes.map((change) => `- ${change}`)]
+                : ["Its actions and inputs are the same; only their details changed."]
+            : []),
+        `Review the current plan with 'kibi migrate', then apply it with: ${applyPlanCommand(plan.planHash)}`,
+    ];
+    return lines.join("\n");
+}
 async function migratePlanCommand(options) {
     const workspaceRoot = path.resolve(options.workspaceRoot ?? process.cwd());
     const plan = await buildWorkspaceMigrationPlan(workspaceRoot);
+    const applySafe = applySafeRequested(options);
     // `--yes` with JSON output applies every ready automatic action of the plan
     // it would otherwise only print; `--dry-run` still only prints it.
-    const approveWholePlan = options.applySafe !== true &&
+    const approveWholePlan = !applySafe &&
         options.yes === true &&
         options.dryRun !== true &&
         options.format === "json";
-    if (options.applySafe === true || approveWholePlan) {
+    if (applySafe || approveWholePlan) {
+        const inlineHash = typeof options.applySafe === "string" ? options.applySafe : undefined;
+        if (inlineHash !== undefined &&
+            options.approvedPlanHash !== undefined &&
+            inlineHash !== options.approvedPlanHash) {
+            noteCliErrorCategory("migrate:approved_plan_hash_conflict");
+            console.error(`--apply-safe ${inlineHash} and --approved-plan-hash ${options.approvedPlanHash} name different plans; give one hash. The current plan applies with: ${applyPlanCommand(plan.planHash)}`);
+            return { exitCode: 2 };
+        }
         const approvedPlanHash = approveWholePlan
             ? plan.planHash
-            : options.approvedPlanHash;
+            : (inlineHash ?? options.approvedPlanHash);
         if (!approvedPlanHash) {
             noteCliErrorCategory("migrate:approved_plan_hash_missing");
-            console.error(`--apply-safe requires --approved-plan-hash <sha256>. Review the plan with 'kibi migrate', then approve its current hash: kibi migrate --apply-safe --approved-plan-hash ${plan.planHash}`);
+            console.error(`--apply-safe needs the hash of the plan you reviewed. Review the plan with 'kibi migrate', then apply its current hash: ${applyPlanCommand(plan.planHash)}`);
             return { exitCode: 2 };
         }
         if (approvedPlanHash !== plan.planHash) {
             noteCliErrorCategory("migrate:plan_hash_changed");
-            console.error(`Migration plan changed; regenerate the plan and approve its current hash: kibi migrate --apply-safe --approved-plan-hash ${plan.planHash}`);
+            console.error(planChangedMessage(workspaceRoot, approvedPlanHash, plan));
             return { exitCode: 2 };
         }
         const explicitActionIds = approveWholePlan
@@ -1125,6 +1167,8 @@ async function migratePlanCommand(options) {
     else {
         printPlanText(plan, options.backlog === true);
     }
+    if (options.dryRun !== true)
+        recordPrintedPlan(workspaceRoot, plan);
     return { exitCode: 0 };
 }
 /**
@@ -1174,5 +1218,7 @@ function printPlanText(plan, listBacklog) {
             console.log("  List each item with --backlog.");
         }
     }
-    console.log(`Plan status: ${plan.status} (covers both sections). Use --format json for structured actions, or --apply-safe with the approved plan hash.`);
+    console.log(`Plan status: ${plan.status} (covers both sections). Use --format json for structured actions.`);
+    if (automaticReady > 0)
+        console.log(`Apply the ${automaticReady} ready automatic action(s) of this plan: ${applyPlanCommand(plan.planHash)}`);
 }

package/dist/commands/prove.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prove.d.ts","sourceRoot":"","sources":["../../src/commands/prove.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,OAAO,EAIL,KAAK,mBAAmB,EAGzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAajE,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EACjB,MAAM,uCAAuC,CAAC;AAM/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAEnF,OAAO,EAIL,KAAK,gBAAgB,EAGtB,MAAM,6BAA6B,CAAC;AAKrC,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,kEAAkE;IAClE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC,CAAC;AAGH,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,WAAW,CAAC,EAAE,OAAO,kBAAkB,CAAC;CACzC,CAAC,CAAC;AAEH,KAAK,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE5C;;;;;GAKG;AAEH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,GAC1D,MAAM,CAiBR;AAED;;;;GAIG;AAEH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,QAAQ,EAAE,MAAM,GACf,GAAG,CAAC,MAAM,CAAC,CAUb;AAQD,wBAAgB,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAEjD;AAaD,wEAAwE;AAExE,wBAAsB,QAAQ,CAC5B,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,CAAC,UAAU,GACrB,OAAO,CAAC,MAAM,CAAC,CA8CjB;AAGD,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,gBAAgB,EAC7B,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,UAAU,EAAE,MAAM,GACjB,MAAM,CAAC,UAAU,CAWnB;AAED,qEAAqE;AACrE,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AAEzD,KAAK,aAAa,GAAG;IACnB,OAAO,EAAE,wBAAwB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CACpC,CAAC;AAEF,yEAAyE;AACzE,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAgB/B;AAcD;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,aAAa,GAAG,IAAI,EAC9B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC,GACnD,GAAG,CAAC,MAAM,CAAC,CASb;AAED;;;;;;GAMG;AAEH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,KAAK,EAAE,SAAS,YAAY,EAAE,GAC7B;IAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAyBxD;AA8ED;;;;GAIG;AAEH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAiBtC;AA2ID,wBAAsB,YAAY,CAChC,OAAO,EAAE,mBAAmB,EAC5B,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAwV/B;AAED,sEAAsE;AAEtE,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAoBpC;AAED;;;;GAIG;AAEH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,YAAY,EACvB,YAAY,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAC/C,YAAY,CAsCd;AAED,8DAA8D;AAE9D,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAClC,+DAA+D;IAC/D,SAAS,EAAE,SAAS,QAAQ,CAAC;QAC3B,QAAQ,EAAE,gBAAgB,CAAC;QAC3B,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;KAC5B,CAAC,EAAE,CAAC;IACL,qEAAqE;IACrE,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,WAAW,CAAC,EAAE,mBAAmB,CAAC;CACnC,CAAC,CAAC;AAEH,8EAA8E;AAE9E,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,EAClB,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,CAAC,CAsB9B;AAED,+EAA+E;AAE/E,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,MAAM,CAKR;AAMD;;;;;;;;;;GAUG;AAEH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,WAAW,EAAE,gBAAgB,CAAC;IAC9B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;IAC/B,WAAW,EAAE,mBAAmB,CAAC;CAClC,GAAG,YAAY,CAuFf"}
+{"version":3,"file":"prove.d.ts","sourceRoot":"","sources":["../../src/commands/prove.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAEzE,OAAO,EAIL,KAAK,mBAAmB,EAGzB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAajE,OAAO,KAAK,EACV,gBAAgB,EAChB,gBAAgB,EACjB,MAAM,uCAAuC,CAAC;AAM/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AAEnF,OAAO,EAIL,KAAK,gBAAgB,EAGtB,MAAM,6BAA6B,CAAC;AAKrC,MAAM,MAAM,mBAAmB,GAAG,QAAQ,CAAC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,kEAAkE;IAClE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,8EAA8E;IAC9E,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC,CAAC;AAGH,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,WAAW,CAAC,EAAE,OAAO,kBAAkB,CAAC;CACzC,CAAC,CAAC;AAEH,KAAK,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE5C;;;;;GAKG;AAEH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC,GAC1D,MAAM,CAiBR;AAED;;;;GAIG;AAEH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,QAAQ,EAAE,MAAM,GACf,GAAG,CAAC,MAAM,CAAC,CAUb;AAQD,wBAAgB,MAAM,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAEjD;AAaD,wEAAwE;AAExE,wBAAsB,QAAQ,CAC5B,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,CAAC,UAAU,GACrB,OAAO,CAAC,MAAM,CAAC,CA8CjB;AAGD,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,gBAAgB,EAC7B,WAAW,EAAE,SAAS,MAAM,EAAE,EAC9B,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,UAAU,EAAE,MAAM,GACjB,MAAM,CAAC,UAAU,CAWnB;AAED,qEAAqE;AACrE,eAAO,MAAM,mBAAmB,wBAAwB,CAAC;AAEzD,KAAK,aAAa,GAAG;IACnB,OAAO,EAAE,wBAAwB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CACpC,CAAC;AAEF,yEAAyE;AACzE,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAgB/B;AAcD;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,aAAa,GAAG,IAAI,EAC9B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAC,GACnD,GAAG,CAAC,MAAM,CAAC,CASb;AAED;;;;;;GAMG;AAEH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,KAAK,EAAE,SAAS,YAAY,EAAE,GAC7B;IAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAyBxD;AA8ED;;;;GAIG;AAEH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAiBtC;AA8JD,wBAAsB,YAAY,CAChC,OAAO,EAAE,mBAAmB,EAC5B,IAAI,GAAE,wBAA6B,GAClC,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CA2V/B;AAED,sEAAsE;AAEtE,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAoBpC;AAED;;;;GAIG;AAEH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,YAAY,EACvB,YAAY,EAAE,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAC/C,YAAY,CAsCd;AAED,8DAA8D;AAE9D,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAClC,+DAA+D;IAC/D,SAAS,EAAE,SAAS,QAAQ,CAAC;QAC3B,QAAQ,EAAE,gBAAgB,CAAC;QAC3B,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;KAC5B,CAAC,EAAE,CAAC;IACL,qEAAqE;IACrE,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,WAAW,CAAC,EAAE,mBAAmB,CAAC;CACnC,CAAC,CAAC;AAEH,8EAA8E;AAE9E,wBAAsB,sBAAsB,CAC1C,UAAU,EAAE,MAAM,EAClB,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,CAAC,CAsB9B;AAED,+EAA+E;AAE/E,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,MAAM,CAKR;AAMD;;;;;;;;;;GAUG;AAEH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,WAAW,EAAE,gBAAgB,CAAC;IAC9B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;IAC/B,WAAW,EAAE,mBAAmB,CAAC;CAClC,GAAG,YAAY,CAuFf"}

package/dist/commands/prove.js

@@ -373,7 +373,7 @@ async function selectTestsBySelector(context, options) {
 // One line per claim a certificate test names in proves: derived (with its
 // scope), attested, or rejected with the reason.
 function claimBindingLines(result) {
-    return result.results.flatMap((row) => (row.claimBindings ?? []).map((binding) => `${row.testId} ${binding.claim_key}${binding.requirement_id ? ` (${binding.requirement_id})` : ""}: ${binding.binding}${binding.binding === "derived" && binding.scope ? `, ${binding.scope} scope` : ""}${binding.reason ? `: ${binding.reason}` : ""}`));
+    return result.results.flatMap((row) => (row.claimBindings ?? []).map((binding) => `${row.testId} ${binding.claim_key}${binding.requirement_id ? ` (${binding.requirement_id})` : ""}: ${binding.binding}${binding.binding === "derived" && binding.scope ? `, ${binding.scope} scope` : ""}${binding.reason ? `: ${binding.reason}` : ""}${binding.binding === "derived" && row.scope !== undefined && row.scope !== "end_to_end" ? `; the receipt's verification_scope is ${row.scope}, and a claim is proved only once its requirement is tested end to end, so kibi proof explain keeps it unproved until an end_to_end receipt covers the scenario` : ""}`));
 }
 // implements REQ-kibi-code-proof-kinds
 // One line per certificate test whose certificate did not re-check: the test
@@ -385,8 +385,21 @@ function certificateRejectionLines(result) {
             `${row.testId} ${row.kind ?? "certificate"}: certificate rejected, ${row.certificateRejection}`,
         ]);
 }
+// implements REQ-kibi-code-proof-kinds
+// A test whose run passed but whose certificate or claim binding Kibi
+// rejected is refused, not passed: it proves nothing about the code.
+function refusedCount(result) {
+    return result.results.filter((row) => row.outcome === "passed" &&
+        (row.certificateRejection !== undefined ||
+            (row.claimBindings ?? []).some((binding) => binding.binding === "rejected"))).length;
+}
 function summarize(result) {
-    const parts = [`passed ${result.passed}`, `failed ${result.failed}`];
+    const refused = refusedCount(result);
+    const parts = [
+        `passed ${result.passed - refused}`,
+        ...(refused > 0 ? [`refused ${refused}`] : []),
+        `failed ${result.failed}`,
+    ];
     if (result.unchanged > 0)
         parts.push(`unchanged ${result.unchanged}`);
     return parts.join(", ");
@@ -599,7 +612,8 @@ export async function proveCommand(options, deps = {}) {
                 failures.push(`the tracked workspace changed while receipts were applied; re-run kibi prove${describeWorkspaceDrift(afterIngest)}`);
             }
         }
-        const passed = ingestResults.reduce((sum, result) => sum + result.passed, 0);
+        const refused = ingestResults.reduce((sum, result) => sum + refusedCount(result), 0);
+        const passed = ingestResults.reduce((sum, result) => sum + result.passed, 0) - refused;
         const failed = ingestResults.reduce((sum, result) => sum + result.failed, 0);
         const unchanged = ingestResults.reduce((sum, result) => sum + result.unchanged, 0);
         // implements REQ-kibi-code-proof-kinds
@@ -609,6 +623,7 @@ export async function proveCommand(options, deps = {}) {
             result.results.filter((row) => row.outcome === "passed" && row.evidenceLevel === "proved").length, 0);
         const summary = {
             passed,
+            ...(refused > 0 ? { refused } : {}),
             certified,
             failed,
             unchanged,

package/dist/commands/sync/manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/manifest.ts"],"names":[],"mappings":"AAkBA,OAAO,EACL,UAAU,EACV,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,EACd,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,IAAI,IAAI,SAAS,EAAE,MAAM,SAAS,CAAC;AAE9D,OAAO,EAML,uBAAuB,EACxB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,KAAK,mBAAmB,EACxB,uBAAuB,EACxB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,0BAA0B,EAG3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAI5E,UAAU,YAAY;IACpB,QAAQ,EAAE,OAAO,QAAQ,CAAC;IAC1B,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,SAAS,EAAE,OAAO,SAAS,CAAC;IAC5B,YAAY,EAAE,OAAO,YAAY,CAAC;IAClC,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,2BAA2B,EAAE,OAAO,2BAA2B,CAAC;CACjE;AAkBD,eAAO,MAAM,8BAA8B,QAc1C,CAAC;AA+BF;;;;;;;;;GASG;AACH,OAAO,EAAE,0BAA0B,EAAE,CAAC;AAEtC,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAG7E;AA0HD,wBAAsB,0BAA0B,CAE9C,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG;IAC7B,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GACA,OAAO,CAAC;IAAE,eAAe,EAAE,OAAO,CAAA;CAAE,CAAC,CAwSvC;AAED;;;;;;;;GAQG;AAEH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAC3B,MAAM,GAAG,IAAI,CAWf;AAED,wBAAgB,0BAA0B,CAExC,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAOT;AAED,wBAAgB,8BAA8B,CAE5C,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAC3B,OAAO,CAST"}
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../src/commands/sync/manifest.ts"],"names":[],"mappings":"AAkBA,OAAO,EACL,UAAU,EACV,YAAY,EACZ,UAAU,EACV,UAAU,EACV,aAAa,EACd,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,IAAI,IAAI,SAAS,EAAE,MAAM,SAAS,CAAC;AAE9D,OAAO,EAML,uBAAuB,EACxB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EACL,KAAK,mBAAmB,EACxB,uBAAuB,EACxB,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,0BAA0B,EAG3B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,+BAA+B,CAAC;AAI5E,UAAU,YAAY;IACpB,QAAQ,EAAE,OAAO,QAAQ,CAAC;IAC1B,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,SAAS,EAAE,OAAO,SAAS,CAAC;IAC5B,YAAY,EAAE,OAAO,YAAY,CAAC;IAClC,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,UAAU,EAAE,OAAO,UAAU,CAAC;IAC9B,aAAa,EAAE,OAAO,aAAa,CAAC;IACpC,uBAAuB,EAAE,OAAO,uBAAuB,CAAC;IACxD,2BAA2B,EAAE,OAAO,2BAA2B,CAAC;CACjE;AAkBD,eAAO,MAAM,8BAA8B,QAc1C,CAAC;AAqCF;;;;;;;;;GASG;AACH,OAAO,EAAE,0BAA0B,EAAE,CAAC;AAEtC,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAG7E;AA2HD,wBAAsB,0BAA0B,CAE9C,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG;IAC7B,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GACA,OAAO,CAAC;IAAE,eAAe,EAAE,OAAO,CAAA;CAAE,CAAC,CA+SvC;AAED;;;;;;;;GAQG;AAEH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAC3B,MAAM,GAAG,IAAI,CAWf;AAED,wBAAgB,0BAA0B,CAExC,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAOT;AAED,wBAAgB,8BAA8B,CAE5C,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,aAAa,EAAE,MAAM,EACrB,IAAI,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,GAC3B,OAAO,CAST"}

package/dist/commands/sync/manifest.js

@@ -66,6 +66,12 @@ const GENERATED_COORD_FIELDS = [
     "sourceEndLine",
     "sourceEndColumn",
 ];
+const INACTIVE_SYMBOL_STATUSES = new Set([
+    "deprecated",
+    "removed",
+    "retired",
+    "superseded",
+]);
 const GENERATED_MANIFEST_FIELDS = new Set([
     ...GENERATED_COORD_FIELDS,
     "coordinatesGeneratedAt",
@@ -173,11 +179,12 @@ function coarseAnchorFailureReason(entry) {
     if (typeof entry.coordinateRefreshFailure === "string") {
         return entry.coordinateRefreshFailure;
     }
+    const missed = `no unique declaration titled '${String(entry.title ?? "")}' was found in ${String(entry.sourceFile ?? "its source file")}`;
     const reason = entry.granularity_reason;
     if (!isCoarseGranularityReason(reason)) {
-        return `extractor produced no coordinates; add symbol_role and granularity_reason ${COARSE_GRANULARITY_REASONS_PARENTHESIZED} to enable the whole-file coarse fallback`;
+        return `${missed}; use the name the extractor gives the declaration`;
     }
-    return "extractor produced no coordinates and the whole-file coarse fallback found no span for this symbol";
+    return `${missed} and the whole-file coarse fallback found no span for this symbol`;
 }
 // implements REQ-symbol-coordinates-derived-locally
 export async function refreshManifestCoordinates(
@@ -333,7 +340,13 @@ manifestPath, workspaceRoot, deps) {
                 : typeof previous.sourceFile === "string"
                     ? previous.sourceFile
                     : undefined, workspaceRoot, resolved);
-        if (eligible && !hasAllGeneratedCoordinates(current)) {
+        // A missing source file is no refresh candidate, but an active symbol
+        // that names one still gets no coordinates, so it is reported.
+        const unreadable = !coarseAnchor &&
+            !eligible &&
+            typeof current.coordinateRefreshFailure === "string" &&
+            !INACTIVE_SYMBOL_STATUSES.has(String(current.status ?? ""));
+        if ((eligible || unreadable) && !hasAllGeneratedCoordinates(current)) {
             failures.push({
                 id: typeof current.id === "string" ? current.id : `#${i}`,
                 reason: coarseAnchorFailureReason(current),
@@ -401,7 +414,7 @@ manifestPath, workspaceRoot, deps) {
             console.log(`  ... and ${failures.length - maxReportedFailures} more failed symbol(s)`);
         }
         if (failures.length > 0) {
-            console.log("  Symbols without a published coordinate entry are dropped from coverage until they succeed.");
+            console.log(`  Symbols without a published coordinate entry are dropped from coverage until they succeed. To link a whole file instead, add symbol_role and granularity_reason ${COARSE_GRANULARITY_REASONS_PARENTHESIZED} to the symbol.`);
         }
     }
     return { artifactChanged };