kibi-cli 2.39.0 → 2.40.0

package/dist/plugins/approved-source-analyzers.generated.d.ts

@@ -1,9 +1,9 @@
 export declare const qualifiedSourceAnalyzers: readonly [{
     readonly packageName: "kibi-plugin-treesitter";
-    readonly version: "2.1.0";
+    readonly version: "3.0.0";
     readonly files: {
-        readonly "SBOM.spdx.json": "ffab8e28376a815906c901348cdc9c31ba566c903e832e1f9808c890a0cab3c2";
-        readonly "THIRD_PARTY_NOTICES.md": "fff747633b08a90bf949e998892211702b021c63e3a074ded102700fc447fed3";
+        readonly "SBOM.spdx.json": "35be6f461678e3b04bee9823e6ed8adb631886335bc66590d80f6c8e8a1d0605";
+        readonly "THIRD_PARTY_NOTICES.md": "942f1846cafc59c32d64422fcf1939be7036af4d82d776957aab8f4aeb107029";
         readonly "assets/queries/bash.scm": "6ca535e8fe652b51203ac272831881dab001f7ac508e50551bc2cdc4a15d7b6c";
         readonly "assets/queries/c.scm": "774ca67cfe23b0e0d1d3a4f01788049a822beb1311feee72b20a595a37be1e28";
         readonly "assets/queries/cpp-extra.scm": "7cf486901eaf7e9196bc2c5dfe83785eed70d367136f8008af37eb4f1c12a68a";
@@ -21,40 +21,18 @@ export declare const qualifiedSourceAnalyzers: readonly [{
         readonly "assets/queries/rust-extra.scm": "511a492200e813f15b7ebec324eae69a245986a9d6813ddabe776075fd65976c";
         readonly "assets/queries/rust.scm": "f22867fdebde5cb091861c08d34690dc2540f4318068bf81be9f6b0d348ab8c1";
         readonly "assets/queries/terraform.scm": "8a6974a8eb48e13b5b8cd64e7c81262a825b4251df01ab383aee5cdda8151e7e";
-        readonly "assets/tree-sitter-bash.wasm": "8292919c88a0f7d3fb31d0cd0253ca5a9531bc1ede82b0537f2c63dd8abe6a7a";
-        readonly "assets/tree-sitter-c.wasm": "c852c2a85ebf2beb636aa3b0ef7f7e70458684d74f6741b20dcb296885bed9f9";
-        readonly "assets/tree-sitter-c_sharp.wasm": "6f69e1cae44e1c32c1eccc170dc5a9778fb94ff716f71113fe1f8c4299aa2f40";
-        readonly "assets/tree-sitter-cpp.wasm": "174eb0deb75b2ec7881bcacda9f995648d8e683956e5c2267e69ab6dc503fcbf";
-        readonly "assets/tree-sitter-go.wasm": "9504573f352b20be7f2f1911754d710622aedc15afff16d5ed8fb5645681aee7";
-        readonly "assets/tree-sitter-hcl.release.wasm": "2f9acf63e7c263215f283e2cf0f4ebbb9bfa77f58e18fa42b91094be201372a7";
-        readonly "assets/tree-sitter-java.wasm": "4fdeac4ca6ca089f06c6f7e562abcac1733cd465728cc7031ebb73c2019122c4";
-        readonly "assets/tree-sitter-php.wasm": "d4df6a6ff08c87c3ec4f9cbb785fe09998a0cb570e03f57d7b19b3acfb146aa7";
-        readonly "assets/tree-sitter-python.wasm": "16108b50df4ee9a30168794252ab55e7c93bfc5765d7fa0aa3e335752c515f47";
-        readonly "assets/tree-sitter-ruby.wasm": "09a96427d7c72f0613ed470cd9812223fc4a91d6a9c025c0235cc6bd59ff96f4";
-        readonly "assets/tree-sitter-rust.wasm": "f65f354215611fd94ad34134b3427eb3d58cbb745df7b6509ba722184db73d57";
-        readonly "assets/tree-sitter-swi_prolog.wasm": "a9872f0369b51c1eed2ef04267382c34aeaeba7c97b6f55b829fbf625bdb22dd";
-        readonly "assets/tree-sitter-terraform.release.wasm": "59dbcbb0f08eb78b78f37510834559a48ce5c9d4866c978d62c6390796461cb5";
-        readonly "catalog.json": "c10f0cd5d1989abb9543c4e385ba44fa226cad4186613791061b56dbda2497a7";
-        readonly "dist/analysis-worker.js": "9ef76ad467f6b4e2a117a3b5656838eb5f096890931ec0480566b76b73fd64db";
+        readonly "catalog.json": "88c1139144c89835eed2d8a4dc736e4fe8391b50c7aeecf967dd3cbe8163f937";
+        readonly "dist/analysis-worker.js": "9120078de07b39fd5caced87610eb262d94e9cf1ba5c19ddf0413baacffab4fe";
         readonly "dist/catalog.js": "c485cd1bf81098c3e2e86d37f78bf9f55af122f5d6b9587c0c57b494d68e4968";
-        readonly "dist/extractor.js": "1d8cd819e7ec8fcc291a44e5ffe4ccfe77099301677913fcfe0d92e7ce971f33";
-        readonly "dist/index.js": "adc03d77d94c0133b3188950b35f79db19e447cf7bfa1f7e1cf1f5c97a582a44";
-        readonly "dist/performance-timing.js": "56cce530f627c8fd079e8ec070322f84378ae50c40a6765d88b418850692940b";
-        readonly "integrity.json": "fabfc50ba1392b4b0f7b9bf39e714de05d093ebfccdcc2225eb9d1fd84ad9a4e";
-        readonly "licenses/tree-sitter-bash-MIT.txt": "49bf33cf78ef5897e4e161ce1517df7de1ae5042a65b6bcfd44401e0fc606559";
-        readonly "licenses/tree-sitter-c-MIT.txt": "2e0110e07abef7c2548b26ec9d6969775617ca539a0dc8dbeeb14d6452c711d1";
-        readonly "licenses/tree-sitter-c-sharp-MIT.txt": "778fb7d63b8c1844da315648c02f325c4713a6f4a5d19644fd413421422776d3";
-        readonly "licenses/tree-sitter-cpp-MIT.txt": "2e0110e07abef7c2548b26ec9d6969775617ca539a0dc8dbeeb14d6452c711d1";
-        readonly "licenses/tree-sitter-go-MIT.txt": "2e0110e07abef7c2548b26ec9d6969775617ca539a0dc8dbeeb14d6452c711d1";
-        readonly "licenses/tree-sitter-hcl-Apache-2.0.txt": "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4";
-        readonly "licenses/tree-sitter-java-MIT.txt": "52ed137b039cd9c46409bc22e89938af911c95b157feae2d040b51e6084369a7";
-        readonly "licenses/tree-sitter-php-MIT.txt": "664764fabf40c0b318e06324a5a12379092a2df25b8cbf2415f71bc0bb352346";
-        readonly "licenses/tree-sitter-python-MIT.txt": "d724405ce238a22c0d35769c5a36b386ad5958192efe8bbb304fb2896254575f";
-        readonly "licenses/tree-sitter-ruby-MIT.txt": "9c99b99e93d3c6461bef9f6bac45d17b8bf014172625c24f76319bbd235a7b80";
-        readonly "licenses/tree-sitter-rust-MIT.txt": "31d5b6f4243d5c7c6e1c4ebbbb9f6407bd1457a08bcc4f706521710341acba36";
-        readonly "licenses/tree-sitter-swi-prolog-MIT.txt": "c51ac4800457c57ddabdee5486605df9452705491f806cb87241b7a8acc7ab2d";
+        readonly "dist/extractor.js": "30e8aaea27afd15d1d4323bf9708b86bae84f1e77c0bae74d50dac85aa737d31";
+        readonly "dist/index.js": "a7dcc81f40848a17a4b7adf4fe573a57a50c18425fab40fbb098489dfd092f3f";
+        readonly "dist/language-packs.js": "4fd7f0e787f12e75d9b8bab9fa49463c782bdf2e9a85c922636154970a4530de";
+        readonly "dist/performance-timing.js": "28f589c29e8759b566ee3fb741a91e30347efe1dfbad0f5b1c5b7d4f785369ff";
+        readonly "dist/preprocessor-idioms.js": "92973c7f0c017fdd340a084e39e5febadd4254bc822c0f86f46a05c1463c1870";
+        readonly "dist/references.js": "13f481356aa17fc1b19ec573430c2235645ea0047e8474ced1373c0d88e19e87";
+        readonly "integrity.json": "53d8a644a2bd4fcba93d60704b1f69c886f4705a8cbe78acc673ba8b50b00e1b";
         readonly "licenses/web-tree-sitter-MIT.txt": "c5cfb43042b6b72045f4ba997834d0a7786d2793d91680868b5815b39f14fc78";
-        readonly "package.json": "5e81c6ce4712add506e576b30d05a80d07a9ad65ba863c2765483b4150687370";
+        readonly "package.json": "5df90de14b219f4ae13c6cfd17206cbb70115c5a29f50ddb62f11d4abf891f9e";
     };
     readonly dependencies: readonly [{
         readonly packageName: "web-tree-sitter";

package/dist/plugins/approved-source-analyzers.generated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approved-source-analyzers.generated.d.ts","sourceRoot":"","sources":["../../src/plugins/approved-source-analyzers.generated.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyI3B,CAAC"}
+{"version":3,"file":"approved-source-analyzers.generated.d.ts","sourceRoot":"","sources":["../../src/plugins/approved-source-analyzers.generated.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA6F3B,CAAC"}

package/dist/plugins/approved-source-analyzers.generated.js

@@ -4,10 +4,10 @@
 export const qualifiedSourceAnalyzers = [
     {
         packageName: "kibi-plugin-treesitter",
-        version: "2.1.0",
+        version: "3.0.0",
         files: {
-            "SBOM.spdx.json": "ffab8e28376a815906c901348cdc9c31ba566c903e832e1f9808c890a0cab3c2",
-            "THIRD_PARTY_NOTICES.md": "fff747633b08a90bf949e998892211702b021c63e3a074ded102700fc447fed3",
+            "SBOM.spdx.json": "35be6f461678e3b04bee9823e6ed8adb631886335bc66590d80f6c8e8a1d0605",
+            "THIRD_PARTY_NOTICES.md": "942f1846cafc59c32d64422fcf1939be7036af4d82d776957aab8f4aeb107029",
             "assets/queries/bash.scm": "6ca535e8fe652b51203ac272831881dab001f7ac508e50551bc2cdc4a15d7b6c",
             "assets/queries/c.scm": "774ca67cfe23b0e0d1d3a4f01788049a822beb1311feee72b20a595a37be1e28",
             "assets/queries/cpp-extra.scm": "7cf486901eaf7e9196bc2c5dfe83785eed70d367136f8008af37eb4f1c12a68a",
@@ -25,40 +25,18 @@ export const qualifiedSourceAnalyzers = [
             "assets/queries/rust-extra.scm": "511a492200e813f15b7ebec324eae69a245986a9d6813ddabe776075fd65976c",
             "assets/queries/rust.scm": "f22867fdebde5cb091861c08d34690dc2540f4318068bf81be9f6b0d348ab8c1",
             "assets/queries/terraform.scm": "8a6974a8eb48e13b5b8cd64e7c81262a825b4251df01ab383aee5cdda8151e7e",
-            "assets/tree-sitter-bash.wasm": "8292919c88a0f7d3fb31d0cd0253ca5a9531bc1ede82b0537f2c63dd8abe6a7a",
-            "assets/tree-sitter-c.wasm": "c852c2a85ebf2beb636aa3b0ef7f7e70458684d74f6741b20dcb296885bed9f9",
-            "assets/tree-sitter-c_sharp.wasm": "6f69e1cae44e1c32c1eccc170dc5a9778fb94ff716f71113fe1f8c4299aa2f40",
-            "assets/tree-sitter-cpp.wasm": "174eb0deb75b2ec7881bcacda9f995648d8e683956e5c2267e69ab6dc503fcbf",
-            "assets/tree-sitter-go.wasm": "9504573f352b20be7f2f1911754d710622aedc15afff16d5ed8fb5645681aee7",
-            "assets/tree-sitter-hcl.release.wasm": "2f9acf63e7c263215f283e2cf0f4ebbb9bfa77f58e18fa42b91094be201372a7",
-            "assets/tree-sitter-java.wasm": "4fdeac4ca6ca089f06c6f7e562abcac1733cd465728cc7031ebb73c2019122c4",
-            "assets/tree-sitter-php.wasm": "d4df6a6ff08c87c3ec4f9cbb785fe09998a0cb570e03f57d7b19b3acfb146aa7",
-            "assets/tree-sitter-python.wasm": "16108b50df4ee9a30168794252ab55e7c93bfc5765d7fa0aa3e335752c515f47",
-            "assets/tree-sitter-ruby.wasm": "09a96427d7c72f0613ed470cd9812223fc4a91d6a9c025c0235cc6bd59ff96f4",
-            "assets/tree-sitter-rust.wasm": "f65f354215611fd94ad34134b3427eb3d58cbb745df7b6509ba722184db73d57",
-            "assets/tree-sitter-swi_prolog.wasm": "a9872f0369b51c1eed2ef04267382c34aeaeba7c97b6f55b829fbf625bdb22dd",
-            "assets/tree-sitter-terraform.release.wasm": "59dbcbb0f08eb78b78f37510834559a48ce5c9d4866c978d62c6390796461cb5",
-            "catalog.json": "c10f0cd5d1989abb9543c4e385ba44fa226cad4186613791061b56dbda2497a7",
-            "dist/analysis-worker.js": "9ef76ad467f6b4e2a117a3b5656838eb5f096890931ec0480566b76b73fd64db",
+            "catalog.json": "88c1139144c89835eed2d8a4dc736e4fe8391b50c7aeecf967dd3cbe8163f937",
+            "dist/analysis-worker.js": "9120078de07b39fd5caced87610eb262d94e9cf1ba5c19ddf0413baacffab4fe",
             "dist/catalog.js": "c485cd1bf81098c3e2e86d37f78bf9f55af122f5d6b9587c0c57b494d68e4968",
-            "dist/extractor.js": "1d8cd819e7ec8fcc291a44e5ffe4ccfe77099301677913fcfe0d92e7ce971f33",
-            "dist/index.js": "adc03d77d94c0133b3188950b35f79db19e447cf7bfa1f7e1cf1f5c97a582a44",
-            "dist/performance-timing.js": "56cce530f627c8fd079e8ec070322f84378ae50c40a6765d88b418850692940b",
-            "integrity.json": "fabfc50ba1392b4b0f7b9bf39e714de05d093ebfccdcc2225eb9d1fd84ad9a4e",
-            "licenses/tree-sitter-bash-MIT.txt": "49bf33cf78ef5897e4e161ce1517df7de1ae5042a65b6bcfd44401e0fc606559",
-            "licenses/tree-sitter-c-MIT.txt": "2e0110e07abef7c2548b26ec9d6969775617ca539a0dc8dbeeb14d6452c711d1",
-            "licenses/tree-sitter-c-sharp-MIT.txt": "778fb7d63b8c1844da315648c02f325c4713a6f4a5d19644fd413421422776d3",
-            "licenses/tree-sitter-cpp-MIT.txt": "2e0110e07abef7c2548b26ec9d6969775617ca539a0dc8dbeeb14d6452c711d1",
-            "licenses/tree-sitter-go-MIT.txt": "2e0110e07abef7c2548b26ec9d6969775617ca539a0dc8dbeeb14d6452c711d1",
-            "licenses/tree-sitter-hcl-Apache-2.0.txt": "c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4",
-            "licenses/tree-sitter-java-MIT.txt": "52ed137b039cd9c46409bc22e89938af911c95b157feae2d040b51e6084369a7",
-            "licenses/tree-sitter-php-MIT.txt": "664764fabf40c0b318e06324a5a12379092a2df25b8cbf2415f71bc0bb352346",
-            "licenses/tree-sitter-python-MIT.txt": "d724405ce238a22c0d35769c5a36b386ad5958192efe8bbb304fb2896254575f",
-            "licenses/tree-sitter-ruby-MIT.txt": "9c99b99e93d3c6461bef9f6bac45d17b8bf014172625c24f76319bbd235a7b80",
-            "licenses/tree-sitter-rust-MIT.txt": "31d5b6f4243d5c7c6e1c4ebbbb9f6407bd1457a08bcc4f706521710341acba36",
-            "licenses/tree-sitter-swi-prolog-MIT.txt": "c51ac4800457c57ddabdee5486605df9452705491f806cb87241b7a8acc7ab2d",
+            "dist/extractor.js": "30e8aaea27afd15d1d4323bf9708b86bae84f1e77c0bae74d50dac85aa737d31",
+            "dist/index.js": "a7dcc81f40848a17a4b7adf4fe573a57a50c18425fab40fbb098489dfd092f3f",
+            "dist/language-packs.js": "4fd7f0e787f12e75d9b8bab9fa49463c782bdf2e9a85c922636154970a4530de",
+            "dist/performance-timing.js": "28f589c29e8759b566ee3fb741a91e30347efe1dfbad0f5b1c5b7d4f785369ff",
+            "dist/preprocessor-idioms.js": "92973c7f0c017fdd340a084e39e5febadd4254bc822c0f86f46a05c1463c1870",
+            "dist/references.js": "13f481356aa17fc1b19ec573430c2235645ea0047e8474ced1373c0d88e19e87",
+            "integrity.json": "53d8a644a2bd4fcba93d60704b1f69c886f4705a8cbe78acc673ba8b50b00e1b",
             "licenses/web-tree-sitter-MIT.txt": "c5cfb43042b6b72045f4ba997834d0a7786d2793d91680868b5815b39f14fc78",
-            "package.json": "5e81c6ce4712add506e576b30d05a80d07a9ad65ba863c2765483b4150687370",
+            "package.json": "5df90de14b219f4ae13c6cfd17206cbb70115c5a29f50ddb62f11d4abf891f9e",
         },
         dependencies: [
             {

package/dist/plugins/plugin-install-check.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Each plugin package.json#kibi.plugins declares must be installed in the
+ * workspace, and a release-qualified source analyzer must be the exact build
+ * this Kibi pins: otherwise every refresh drops symbol coordinates and every
+ * proof that needs the plugin is refused. Resolution reads package.json and
+ * hashes the pinned files; it never imports plugin code.
+ */
+export declare function pluginInstallProblems(workspaceRoot: string, packages: readonly string[]): {
+    problem: string;
+    fix: string;
+}[];
+/**
+ * The install problems of the plugins package.json#kibi.plugins activates
+ * for symbol extraction. An explicit coordinate refresh refuses on any of
+ * them rather than replacing every coordinate those plugins place.
+ */
+export declare function sourceAnalyzerInstallProblems(workspaceRoot: string): {
+    problem: string;
+    fix: string;
+}[];
+//# sourceMappingURL=plugin-install-check.d.ts.map

package/dist/plugins/plugin-install-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-install-check.d.ts","sourceRoot":"","sources":["../../src/plugins/plugin-install-check.ts"],"names":[],"mappings":"AAMA;;;;;;GAMG;AAEH,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,SAAS,MAAM,EAAE,GAC1B;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,CAkCpC;AAED;;;;GAIG;AAEH,wBAAgB,6BAA6B,CAC3C,aAAa,EAAE,MAAM,GACpB;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,CAWpC"}

package/dist/plugins/plugin-install-check.js

@@ -0,0 +1,62 @@
+import { SYMBOL_EXTRACTOR_V2_CAPABILITY_ID } from "kibi-plugin-sdk";
+import { APPROVED_SOURCE_ANALYZERS } from "./approved-source-analyzers.js";
+import { verifyApprovedSourceAnalyzer } from "./maintenance-source-analysis.js";
+import { readProjectKibiConfig } from "./project-config.js";
+import { resolveProjectLocalPackage } from "./resolve-package.js";
+/**
+ * Each plugin package.json#kibi.plugins declares must be installed in the
+ * workspace, and a release-qualified source analyzer must be the exact build
+ * this Kibi pins: otherwise every refresh drops symbol coordinates and every
+ * proof that needs the plugin is refused. Resolution reads package.json and
+ * hashes the pinned files; it never imports plugin code.
+ */
+// implements REQ-cli-doctor, REQ-capability-plugin-activation-disclosure-v1
+export function pluginInstallProblems(workspaceRoot, packages) {
+    const problems = [];
+    for (const packageName of packages) {
+        let resolved;
+        try {
+            resolved = resolveProjectLocalPackage(workspaceRoot, packageName);
+        }
+        catch {
+            problems.push({
+                problem: `${packageName} is declared but not installed`,
+                fix: `Install the declared plugins (npm install in ${workspaceRoot}); until then kibi sync --refresh-symbol-coordinates drops the coordinates it places and proofs that need ${packageName} are refused.`,
+            });
+            continue;
+        }
+        const approval = APPROVED_SOURCE_ANALYZERS.find((item) => item.packageName === packageName);
+        if (approval === undefined)
+            continue;
+        try {
+            verifyApprovedSourceAnalyzer(resolved.packageRoot, approval);
+        }
+        catch (error) {
+            // Resolution already parsed the package.json; its version only names
+            // the build, since the hash check already failed.
+            const installed = typeof resolved.packageJson.version === "string"
+                ? resolved.packageJson.version
+                : "unknown version";
+            const reason = error instanceof Error ? error.message : String(error);
+            problems.push({
+                problem: `installed ${packageName} ${installed} is not the release-qualified build this Kibi pins (${packageName} ${approval.version}: ${reason})`,
+                fix: `Remove node_modules/${packageName} and install the build qualified with this Kibi release (npm install --save-dev ${packageName}@${approval.version}); if the registry's ${approval.version} is another build, upgrade kibi-cli and ${packageName} together. Until then symbol refresh and proofs through ${packageName} fail.`,
+            });
+        }
+    }
+    return problems;
+}
+/**
+ * The install problems of the plugins package.json#kibi.plugins activates
+ * for symbol extraction. An explicit coordinate refresh refuses on any of
+ * them rather than replacing every coordinate those plugins place.
+ */
+// implements REQ-symbol-coordinates-derived-locally
+export function sourceAnalyzerInstallProblems(workspaceRoot) {
+    const packages = [
+        ...new Set((readProjectKibiConfig(workspaceRoot).plugins ?? [])
+            .filter((entry) => entry.capabilities[SYMBOL_EXTRACTOR_V2_CAPABILITY_ID])
+            .map((entry) => entry.package)),
+    ];
+    return pluginInstallProblems(workspaceRoot, packages);
+}

package/dist/plugins/proof-reference-extractors.d.ts

@@ -0,0 +1,20 @@
+import { type ReferenceExtractorV1 } from "kibi-plugin-sdk";
+/** The plugin Kibi suggests for reading references of these languages. */
+export declare const REFERENCE_PLUGIN_PACKAGE = "kibi-plugin-treesitter";
+export type ProofReferenceExtractors = Readonly<{
+    extractors: readonly ReferenceExtractorV1[];
+    /** Why a configured provider was not used, for the refusal text. */
+    problems: readonly string[];
+}>;
+/**
+ * Load the reference extractors a proof may use: providers activated for
+ * kibi.reference-extractor.v1 whose installed bytes match a release-qualified
+ * closure. A proof is evidence, so an unqualified or modified provider is
+ * never imported; the read is refused instead and names the reason.
+ */
+export declare function loadProofReferenceExtractors(workspaceRoot: string): Promise<ProofReferenceExtractors>;
+/** Replaceable loader, so tests can supply providers without installing a package. */
+export declare const proofReferenceExtractorLoader: {
+    load: (workspaceRoot: string) => Promise<ProofReferenceExtractors>;
+};
+//# sourceMappingURL=proof-reference-extractors.d.ts.map

package/dist/plugins/proof-reference-extractors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-reference-extractors.d.ts","sourceRoot":"","sources":["../../src/plugins/proof-reference-extractors.ts"],"names":[],"mappings":"AAoBA,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,iBAAiB,CAAC;AAOzB,0EAA0E;AAC1E,eAAO,MAAM,wBAAwB,2BAA2B,CAAC;AAEjE,MAAM,MAAM,wBAAwB,GAAG,QAAQ,CAAC;IAC9C,UAAU,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC5C,oEAAoE;IACpE,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B,CAAC,CAAC;AAEH;;;;;GAKG;AAEH,wBAAsB,4BAA4B,CAChD,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,wBAAwB,CAAC,CA6CnC;AAYD,sFAAsF;AACtF,eAAO,MAAM,6BAA6B,EAAE;IAC1C,IAAI,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,wBAAwB,CAAC,CAAC;CA+BpE,CAAC"}

package/dist/plugins/proof-reference-extractors.js

@@ -0,0 +1,104 @@
+/*
+ Kibi — repo-local, per-branch, queryable long-term memory for software projects
+ Copyright (C) 2026 Piotr Franczyk
+
+ This program is free software: you can redistribute it and/or modify
+ it under the terms of the GNU Affero General Public License as published by
+ the Free Software Foundation, either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ GNU Affero General Public License for more details.
+
+ You should have received a copy of the GNU Affero General Public License
+ along with this program.  If not, see <https://www.gnu.org/licenses/>.
+*/
+import { statSync } from "node:fs";
+import { join, relative } from "node:path";
+import { REFERENCE_EXTRACTOR_CAPABILITY_ID, } from "kibi-plugin-sdk";
+import { APPROVED_SOURCE_ANALYZERS } from "./approved-source-analyzers.js";
+import { loadPluginPackage } from "./load-plugin.js";
+import { verifyApprovedSourceAnalyzer } from "./maintenance-source-analysis.js";
+import { readProjectKibiConfig } from "./project-config.js";
+import { resolveProjectLocalPackage } from "./resolve-package.js";
+/** The plugin Kibi suggests for reading references of these languages. */
+export const REFERENCE_PLUGIN_PACKAGE = "kibi-plugin-treesitter";
+/**
+ * Load the reference extractors a proof may use: providers activated for
+ * kibi.reference-extractor.v1 whose installed bytes match a release-qualified
+ * closure. A proof is evidence, so an unqualified or modified provider is
+ * never imported; the read is refused instead and names the reason.
+ */
+// implements REQ-kibi-tree-sitter-references
+export async function loadProofReferenceExtractors(workspaceRoot) {
+    const problems = [];
+    let entries;
+    try {
+        entries = (readProjectKibiConfig(workspaceRoot).plugins ?? []).filter((entry) => entry.capabilities[REFERENCE_EXTRACTOR_CAPABILITY_ID]);
+    }
+    catch (error) {
+        return {
+            extractors: [],
+            problems: [error instanceof Error ? error.message : String(error)],
+        };
+    }
+    const extractors = [];
+    for (const entry of entries) {
+        try {
+            const approval = APPROVED_SOURCE_ANALYZERS.find((item) => item.packageName === entry.package);
+            if (!approval)
+                throw new Error(`${entry.package} is not a release-qualified reference reader`);
+            const resolved = resolveProjectLocalPackage(workspaceRoot, entry.package);
+            const entryRelative = relative(resolved.packageRoot, resolved.entryPath).replaceAll("\\", "/");
+            if (!approval.files[entryRelative])
+                throw new Error(`${entry.package}'s entrypoint is outside its qualified closure`);
+            verifyApprovedSourceAnalyzer(resolved.packageRoot, approval);
+            const loaded = await loadPluginPackage(workspaceRoot, entry.package);
+            const extractor = loaded.plugin.capabilities.referenceExtractor;
+            if (extractor === undefined)
+                throw new Error(`${entry.package} ${loaded.plugin.version} has no reference extractor`);
+            extractors.push(extractor);
+        }
+        catch (error) {
+            problems.push(error instanceof Error ? error.message : String(error));
+        }
+    }
+    return { extractors, problems };
+}
+const cache = new Map();
+function mtimeOf(path) {
+    try {
+        return String(statSync(path).mtimeMs);
+    }
+    catch {
+        return "none";
+    }
+}
+/** Replaceable loader, so tests can supply providers without installing a package. */
+export const proofReferenceExtractorLoader = {
+    load(workspaceRoot) {
+        // A changed package.json (a plugin activated) or an installed plugin
+        // whose manifest changed (installed, upgraded) loads afresh.
+        const key = [
+            workspaceRoot,
+            mtimeOf(join(workspaceRoot, "package.json")),
+            mtimeOf(join(workspaceRoot, "node_modules", REFERENCE_PLUGIN_PACKAGE, "package.json")),
+        ].join("\0");
+        let loaded = cache.get(key);
+        if (loaded === undefined) {
+            loaded = loadProofReferenceExtractors(workspaceRoot);
+            cache.set(key, loaded);
+            // Only a load that found every provider is kept: a refusal is read
+            // again next time, so a fix is seen without restarting the host.
+            const pending = loaded;
+            void pending.then((result) => {
+                if (result.problems.length > 0 || result.extractors.length === 0)
+                    if (cache.get(key) === pending)
+                        cache.delete(key);
+            });
+        }
+        return loaded;
+    },
+};

package/dist/plugins/reference-language-suggestion.d.ts

@@ -0,0 +1,51 @@
+import { type ProjectKibiConfig } from "kibi-plugin-sdk";
+export type ReferenceLanguageSuggestion = Readonly<{
+    package: string;
+    /** Capabilities to activate, each in augment mode; empty when all are active. */
+    capabilities: readonly string[];
+    languages: readonly Readonly<{
+        name: string;
+        files: number;
+    }>[];
+    evidence: readonly string[];
+    /** The project already lists the plugin, but not for proofs. */
+    activeForSymbolsOnly: boolean;
+    /** The plugin package is declared in package.json and resolves. */
+    pluginInstalled: boolean;
+    /** kibi-lang-* packs the tracked sources need that are not installed. */
+    packs: readonly string[];
+    /** Installed packs whose grammar bytes differ from the pinned SHA-256. */
+    modified: readonly string[];
+}>;
+/** Whether a package.json lists a package in any dependency field. */
+export declare function manifestDeclares(manifest: unknown, packageName: string): boolean;
+/** Whether a package resolves from the workspace root, and at which version. */
+export type InstalledVersion = (packageName: string) => string | null;
+/** The version of a package installed for the workspace, or null. */
+export declare function workspaceInstalledVersion(workspaceRoot: string): InstalledVersion;
+/** The pack versions the installed kibi-plugin-treesitter pins. */
+export declare function pinnedPackVersions(workspaceRoot: string | undefined): ReadonlyMap<string, string>;
+/**
+ * The installed kibi-lang-* packs, at the version the installed plugin pins,
+ * whose grammar file does not hash to the SHA-256 the plugin pins. Doctor
+ * names them so a changed grammar is not shown as healthy.
+ */
+export declare function modifiedPacks(workspaceRoot: string | undefined): ReadonlySet<string>;
+/**
+ * Whether the project has sources kibi-plugin-treesitter must read for it:
+ * Go, Java, C# or Rust files whose references source proofs read only
+ * through the plugin while it is not activated for that, or files of a
+ * language whose kibi-lang-* pack is not installed (at the version the
+ * installed plugin pins) while the plugin is listed or being suggested.
+ * Reads file names and package manifests only; never imports a plugin.
+ */
+export declare function referenceLanguageSuggestion(files: readonly string[], config: ProjectKibiConfig, installedVersion?: InstalledVersion, pinned?: ReadonlyMap<string, string>, modified?: ReadonlySet<string>, pluginDeclared?: boolean): ReferenceLanguageSuggestion | null;
+/** One line naming the languages and what to install or activate. */
+export declare function describeReferenceLanguageSuggestion(suggestion: ReferenceLanguageSuggestion): string;
+/**
+ * The suggestion for a workspace, from its tracked files, as one line for
+ * `kibi init` and `kibi doctor`, or null when nothing is missing. A project
+ * without a package.json is told to create a minimal one first.
+ */
+export declare function workspaceReferenceLanguageNote(workspaceRoot: string): string | null;
+//# sourceMappingURL=reference-language-suggestion.d.ts.map

package/dist/plugins/reference-language-suggestion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reference-language-suggestion.d.ts","sourceRoot":"","sources":["../../src/plugins/reference-language-suggestion.ts"],"names":[],"mappings":"AAuBA,OAAO,EACL,KAAK,iBAAiB,EAGvB,MAAM,iBAAiB,CAAC;AAWzB,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,SAAS,EAAE,SAAS,QAAQ,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IAChE,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,gEAAgE;IAChE,oBAAoB,EAAE,OAAO,CAAC;IAC9B,mEAAmE;IACnE,eAAe,EAAE,OAAO,CAAC;IACzB,yEAAyE;IACzE,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,0EAA0E;IAC1E,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B,CAAC,CAAC;AAEH,sEAAsE;AACtE,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,OAAO,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAYT;AAED,gFAAgF;AAChF,MAAM,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;AAEtE,qEAAqE;AACrE,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,MAAM,GACpB,gBAAgB,CAuBlB;AAED,mEAAmE;AACnE,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,MAAM,GAAG,SAAS,GAChC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAoB7B;AAED;;;;GAIG;AAEH,wBAAgB,aAAa,CAC3B,aAAa,EAAE,MAAM,GAAG,SAAS,GAChC,WAAW,CAAC,MAAM,CAAC,CAmDrB;AAED;;;;;;;GAOG;AAEH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,MAAM,EAAE,iBAAiB,EACzB,gBAAgB,GAAE,gBAA6B,EAC/C,MAAM,GAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAa,EAC/C,QAAQ,GAAE,WAAW,CAAC,MAAM,CAAa,EACzC,cAAc,UAAO,GACpB,2BAA2B,GAAG,IAAI,CAoEpC;AAED,qEAAqE;AACrE,wBAAgB,mCAAmC,CACjD,UAAU,EAAE,2BAA2B,GACtC,MAAM,CAyCR;AAYD;;;;GAIG;AAEH,wBAAgB,8BAA8B,CAC5C,aAAa,EAAE,MAAM,GACpB,MAAM,GAAG,IAAI,CA0Cf"}