This document provides complete command-by-command documentation for the kibi CLI. The CLI is both a human-facing command surface and an agent-accessible peer of MCP.
The CLI exposes the canonical public operation catalog as a peer to MCP. Every route accepts one JSON object through --input <file|->, where a path is resolved from the current working directory and - reads standard input exactly once. JSON mode writes one structured JSON value followed by a newline to stdout.
# Read an input object from a file
kibi query --input request.json
# Read the same object from stdin
printf '%s\n' '{"query":"login","limit":10}' | kibi search --input -The input root must be a JSON object that matches the corresponding operation schema. In JSON mode, do not also pass business flags or positional arguments; mixed input is rejected. Optional _diagnostic_telemetry is transport metadata and is removed before business-schema validation. Add the global --diagnostic-mode flag to append the operation outcome to .kb/usage.log; supplied opaque session_id and actor_id fields are preserved for workflow correlation.
| Operation | Dedicated CLI route |
|---|---|
kb_skills_list |
`kibi skills-list --input <file |
kb_skills_load |
`kibi skills-load --input <file |
kb_skills_read |
`kibi skills-read --input <file |
kb_query |
`kibi query --input <file |
kb_search |
`kibi search --input <file |
kb_status |
`kibi status --input <file |
kb_find_gaps |
`kibi find-gaps --input <file |
kb_coverage |
`kibi coverage --input <file |
kb_graph |
`kibi graph --input <file |
kb_semantic_advisor |
`kibi semantic-advisor --input <file |
kb_model_requirement |
`kibi model-requirement --input <file |
kb_suggest_predicates |
`kibi suggest-predicates --input <file |
kb_plan_bootstrap |
`kibi plan-bootstrap --input <file |
kb_compile_intent |
`kibi compile-intent --input <file |
kb_apply_plan |
`kibi apply-plan --input <file |
kb_ingest_verification |
`kibi ingest-verification --input <file |
kb_validate_upsert |
`kibi validate-upsert --input <file |
kb_upsert |
`kibi upsert --input <file |
kb_delete |
`kibi delete --input <file |
kb_check |
`kibi check --input <file |
kb_sparql_remote |
`kibi sparql-remote --input <file |
| Exit code | Meaning |
|---|---|
0 |
Input validated and the operation completed successfully. |
1 |
The operation started but failed, including Prolog, filesystem, network, or other runtime failures. |
2 |
Invocation or input error, including missing/unreadable input, malformed JSON, a non-object root, conflicting flags/positionals, unknown operations, or schema validation failure. |
Errors are written to stderr as Error [CODE]: detail. Failed routes do not write a success JSON object.
Initializes Kibi repository infrastructure in the current directory. It does not infer or write product knowledge.
Behavior:
- Creates
.kb/directory structure with canonical knowledge lanes (requirements/,scenarios/,tests/,facts/,adr/,flags/,events/) - Installs git hooks (pre-commit, post-checkout, post-merge, post-rewrite) by default
- Ignores derived
.kb/runtime state in.gitignore(.kb/branches/,.kb/recovery/,.kb/verification/,.kb/briefs/,.kb/migrations/,.kb/usage.log). Authored knowledge under.kb/stays tracked.kibi migratealso removes the pre-canonical blanket.kb/ignore stanza so migrated knowledge files are not left Git-ignored. - Creates Kibi-owned
.kb/manifest.json(lifecycle metadata only; not a user configuration file) - Creates
.kb/symbols.yamland.kb/symbol-coordinates.yamlwhen they do not already exist
Flags:
--no-hooks- Skip git hook installation (hooks are installed by default)--github- Scaffold the documented GitHub Pages badge + full report integration (workflow, README badge,kibi-report/gitignore entry)--badge-only- With--githubonly: publish the badge without the HTML report. Rejected if used alone.
GitHub integration:
--githubby itself always means badge + full report. It copies the canonical workflow from thekibi-clipackage (the same file as docs/examples/github/kibi-report.yml). That workflow generates the report on pull requests (artifact only) and deploys GitHub Pages only from the repository default branch orworkflow_dispatch.- Re-running is safe: matching files are left as already configured; customized workflows are not overwritten; an existing Kibi badge is not duplicated.
- If no README exists, the workflow is still written and the badge Markdown is printed.
- If a github.com owner/repository cannot be determined from git remotes, the workflow is still written and placeholder badge Markdown is printed instead of inventing a URL.
- After scaffolding, enable Settings → Pages → Source → GitHub Actions. See GitHub badge + report.
Notes:
- Hooks are installed by default. Only use
--no-hooksif you specifically don't want automated syncing. - The pre-commit hook blocks commits when
.kb/symbol-coordinates.yamlhas unstaged changes, forcing refreshed symbol coordinates to be staged with the related code changes. - The pre-commit hook also blocks behavior-changing source edits that lack staged Kibi impact evidence (KB entity docs or refreshed manifest). Test-only and docs-only edits are exempt.
- Idempotent: safe to run multiple times
- After initialization, ask the coding agent to bootstrap the repository. The
bootstrap planner owns discovery, approval, source-first application, and
repair;
doctorandsyncare diagnostics/internal lifecycle operations. - After running, see the quick start guide in README.md for next steps
Extracts entities and relationships from project documents and updates the knowledge base.
Behavior:
- Extracts entities from Markdown files with frontmatter
- Imports symbols from YAML manifests
- Updates KB for the current git branch
- Runs validation rules on the updated KB
Flags:
--validate-only- Perform validation without making mutations--rebuild- Rebuild branch snapshot from scratch (discards current KB)--refresh-symbol-coordinates- Refresh symbol location data in.kb/symbol-coordinates.yamlduring sync
Notes (sync + MCP):
- Rebuild with
--rebuildreplaces the on-disk branch KB snapshot while MCP can continue running. - A running MCP session detects same-branch snapshot replacement before serving affected operations.
- If auto-refresh cannot complete during a transient publish conflict, MCP returns a recovery error; retry the tool call after the publish settles.
Notes:
- Supports these entity types: req, scenario, test, adr, flag, event, symbol, fact
- Modeling: Use
flagfor runtime/config gates; record bugs and workarounds asfactentities, usually withfact_kind: observationormeta. Strict facts (subject, property_value) drive contradiction checks, while observation/meta facts are non-blocking notes. - Symbol manifests must be in YAML format
- Changes are committed to the branch KB's audit log
Normal sync is a delta compile into the running Node engine: unchanged source
files are skipped, changed/deleted source entities are retracted and reasserted
in the journal, and relationship shards are refreshed only when their content
hash changes. --rebuild is the explicit generation-replacement path.
The engine is automatically started for CLI and MCP operations. engine status
prints the workspace/branch daemon PID and journal status; engine stop asks it
to flush and exit. A daemon is shared by all clients for the same canonical
workspace path and branch and exits after ten minutes without clients.
storage statusreports journaled mode, generation, commit sequence, and journal bytes.storage compactexplicitly compacts the RDF journal; idle engines also compact journals over 16 MiB.storage export --output <directory>writes derived legacykb.rdfandaudit.logfiles outside the active branch store. These exports are not authoritative and are never read by the engine.
Node.js 22 or newer is required for both the CLI/MCP clients and the engine. Bun remains a repository build/test tool, but is not a supported runtime for the published Kibi packages.
Runs an explicit command against a test's current verification contract and
ingests the raw kibi.playwright-run.v1 reporter artifact. The command is
never taken from the KB implicitly: argv after -- must exactly match the
contract, and the child process is spawned with shell: false.
kibi verify --test-id TEST-checkout -- pnpm exec playwright test --project=chromiumThe reporter is available as kibi-cli/playwright-reporter. Set
KIBI_VERIFICATION_OUTPUT when running Playwright directly. A missing,
partial, retried, stale, or contract-drifted artifact is rejected by the same
kb_ingest_verification executor used by MCP and JSON CLI callers.
Queries entities from the knowledge base.
Syntax:
kibi query [type] [--id ID] [--tag TAG] [--source PATH] [--relationships ID] [--format json|table] [--limit N] [--offset N]Arguments:
[type]- Optional entity type to query (req, scenario, test, adr, flag, event, symbol, fact)--id ID- Query by exact entity ID--tag TAG- Filter by tag--source PATH- Filter by source file path substring--relationships ID- Return relationships for a specific entity ID--format json|table- Output format (default: json)--limit N- Maximum number of results to return (default: 100)--offset N- Number of results to skip (pagination)
Examples:
# List all requirements as table
kibi query req --format table
# Find specific test
kibi query test --id TEST-001
# Find all entities with "security" tag
kibi query req --tag security --format table
# Find entities linked to a source file path
kibi query symbol --source src/auth/login.ts --format table
# Show relationships for one entity
kibi query --relationships REQ-001
# Get paginated results
kibi query scenario --limit 10 --offset 0
kibi query scenario --limit 10 --offset 10Notes:
- Returns "No entities found" if query produces no results
- Results are deterministically ordered
- Type, ID, and tag filters can be combined
Searches entity metadata and markdown body text for exploratory discovery. The JSON route also supports deterministic intent-v1 ranking for host-agent facets and changed source locations.
Syntax:
kibi search <query> [--type TYPE] [--format json|table] [--limit N] [--offset N]Notes:
- Searches markdown-backed knowledge and metadata
- Does not search raw code file bodies
- Use
kibi queryfor exact follow-up lookups
Intent mode is available through kibi search --input -:
printf '%s\n' '{
"query": "download a report",
"rankingMode": "intent-v1",
"semanticFacets": {"actions": ["export"], "objects": ["CSV file"]},
"sourceLocations": [{"path": "src/reports/export.ts", "line": 42}]
}' | kibi search --input -Intent results include queryAnalysis, matched semantic facets, source-location evidence, bounded traceability graph paths, and abstained: true when no result reaches minScore (default 0.18). Source paths must be workspace-relative. The host agent supplies facets; Kibi does not call a model.
Reports the current KB snapshot, branch, and freshness state.
Syntax:
kibi status [--format json|table]JSON output also exposes verificationSnapshot, availability, dirty state, file count, and kibi.workspace-snapshot.v2 version. This deterministic snapshot is the identity coverage uses to accept or reject verification receipts; an unavailable snapshot fails proof closed. Receipt-only frontmatter changes are excluded from the hash so ingesting a receipt cannot invalidate its own proof.
Status also reports the exact branchAttachment (gitBranch, kbBranch,
kind, and migrationRequired), bounded staleReasons, and
verificationSnapshotChanges. A legacy attachment is read-compatible only;
writes and sync are blocked until the sanctioned migration is applied. Dirty
editor/config paths are reported rather than silently ignored.
Status does not initialise a missing branch store or repair a damaged one. It
instead returns branchStore (missing, incomplete, or unreadable) with a
recovery-oriented stale reason. Use the explicit branch commands below after
reviewing that diagnosis.
When migration is needed, JSON status also returns schemaStatus and a
kibi.migration-plan.v2 migrationPlan. Actions are typed with a canonical
planHash, dependencies, safety class, preconditions, postconditions, and
exact operation/CLI guidance. Status remains read-only.
Runs curated missing/present relationship analysis.
Syntax:
kibi find-gaps [type] [--missing-rel RELS] [--present-rel RELS] [--tag TAGS] [--source PATH] [--limit N] [--offset N] [--format json|table]Examples:
# Requirements missing scenarios or tests
kibi find-gaps req --missing-rel specified_by,verified_by --format table
# Source-linked gap analysis
kibi gaps req --source src/auth --missing-rel verified_by --format tablefind-gaps is the canonical command name and dedicated JSON route. gaps is a true Commander alias for the same action, so flag and --input behavior are identical under either spelling.
Generates curated coverage reports.
Syntax:
kibi coverage [--by req|symbol|type] [--tag TAGS] [--include-passing] [--no-include-transitive] [--limit N] [--offset N] [--include-migration-preview] [--migration-limit N] [--migration-offset N] [--migration-predicate-limit N] [--migration-predicate-min-score 0..1] [--format json|table]Notes:
- Requirement coverage summaries distinguish evaluated must-priority requirements from
not_applicablerows. --include-passingadds rows with a proven or not-applicable proof outcome back into requirement results; compatibility-oriented structural coverage remains visible on every returned row.- Requirement coverage rows include coverage-depth labels when evidence can be classified:
direct_passing_e2e,scenario_passing_e2e,unit_only,open_or_nonpassing_tests_only,scenario_only_no_test, orno_test_evidence. - Coverage-depth labels are informational. They do not change existing covered/uncovered pass-fail semantics, and typed test fields (
verification_scope, thenverification_perspective) take precedence over legacye2etags or/e2e/path heuristics. - Requirement rows also expose the additive
kibi.requirement-proof.v2contract.proofStatusisproven,unresolved,missing, ornot_applicablefor a non-current requirement, and is intentionally independent from compatibility-orientedcoverageStatus. proofStagesrecords semantic inventory, logical grounding, contradiction, scenario, scenario-test, passing E2E, executable-symbol, production-symbol, and exact source-coordinate evidence.proofGapslists only blocking issues that preventproven.proofAdvisorieslists non-blocking extra-evidence issues, such as additional scenario-backed tests that still lack a receipt after strict proof already exists.proofRepairsranks concrete recovery actions for blocking gaps only.- Requirement reports also include
repairPlan(kibi.repair-plan.v1). It groups gaps into one small batch per requirement and dependency phase, marks only the earliest unresolved batchready, and links later batches throughdependsOn. Every batch is read-only guidance withautoApplicable: false, a reviewedworkflowStepssequence, targetedvalidationRules, and a sequential-write policy. - Requirement and symbol reports also include the shared
migrationPlan(kibi.migration-plan.v2). Apply only ready automatic actions after explicitly approving its exact hash and action IDs; review, operator, and E2E execution actions remain agent/operator work. repairPlan.scope.completeis false andstatusispartialwheneverlimit/offsetexclude actionable requirements. Increase the limit and reset the offset before using a plan as a project-wide migration inventory. The plan ID is stable for the same snapshot, filters, evidence, and gaps; receipt ages and check timestamps do not churn it.--include-migration-previewaddskibi.legacy-migration-plan.v1for ready semantic-inventory batches. It defaults to one requirement, reconstructs normalized authored Markdown with exact SHA-256 source identity and UTF-8 proposition spans, ranks project-local schemas before built-ins, and emits review-only property patches. The patch stores authored prose in requirement-onlysemantic_textand never replaces an independenttext_ref; only an existingsemantic_textthat differs from the current normalized Markdown blocks the batch as source drift. All candidates remainwriteEligible: falseand all batchesautoApplicable: false.- The passing-E2E stage requires append-only verification-receipt history on a scenario-backed test. New evidence is produced by
kibi verifyaskibi.verification-receipt.v2; olderv1entries remain readable historical compatibility data. Only a fresh passed receipt bound to the liveverificationSnapshotand current contract qualifies; authoredstatus: passingremains structural metadata. - Symbol rows classify
traceabilityRoleasproduction,executable_test, ormixed. Executable-only test symbols arenot_applicableto production coverage instead of being counted as fully covered.
Generates a polished, self-contained HTML view of requirement health and a
matching SVG badge. This is a human-facing presentation command over the
existing kb_coverage operation, not an additional JSON/MCP operation.
Syntax:
kibi report [--output PATH] [--open] [--tag TAGS] [--limit N]Options:
--output <path>writes to an HTML file or toindex.htmlinside a directory. Directory output also writesbadge.svg; explicit file output writes<name>.badge.svgbeside the HTML. The default iskibi-report/index.htmlpluskibi-report/badge.svg.--openopens the report with the operating system's default browser after the file is written successfully.--tag <tags>limits requirement and symbol health to comma-separated tags.--limit <n>sets the maximum complete requirement row set. It defaults to 10,000 and fails instead of publishing partial per-requirement metrics.
Report contents:
- Proven percentage and count use current requirements only; superseded and otherwise non-current requirements are reported as excluded rather than lowering the score.
- Summary metrics show current requirements, strict proof coverage, missing scenarios, stale E2E evidence, unique contradiction witnesses, unmapped production symbols, and requirements without implementation.
- Requirement cards separate semantic grounding, scenario, implementation, E2E-test, and fresh-receipt stages. Search, health filters, and proof-gate filters run entirely in the generated file. Filter buttons include counts. Relative evidence and generation ages are computed in the viewer from preserved absolute timestamps.
- Stale KB state and dirty workspace proof evaluation are shown as a prominent snapshot warning.
- Stale KB state and dirty workspace proof evaluation are shown as a prominent snapshot warning.
- All KB-provided values are HTML-escaped. The report has no CDN, font, script, or other network dependency, so the output directory can be hosted as-is.
- The generated SVG badge uses the same complete coverage snapshot as the report. It pairs the Kibi logo with a
kibilabel in Codecov/Shields chrome (regular 11px type,#555label pane, reserved padding, and white status text), sizes itself to the proven-percentage message, and uses conservative colors for contradictions and stale snapshots.
Examples:
# Generate kibi-report/index.html and open it
kibi report --open
# Write the single-file site to a CI staging directory
kibi report --output public/requirement-health
# Publish a focused report
kibi report --tag billing,security --output artifacts/kibi.htmlFor GitHub Pages, follow the copyable workflow in
docs/examples/github/kibi-report.yml or run
kibi init --github. That command scaffolds the same documented integration.
Pull requests generate and validate kibi report, then upload kibi-pr-report;
only the default branch publishes the canonical Pages site. Enable
Settings → Pages → Source → GitHub Actions. Details, package-manager
adaptations, owner-site URLs, and the badge-only opt-out are in
GitHub badge + report.
Wrap the published badge image in a link to the report so clicking it opens the dashboard:
[](https://OWNER.github.io/REPOSITORY/kibi-report/)Actions artifacts expire and do not provide a stable anonymous URL, so the badge and its target should use the GitHub Pages deployment rather than the ordinary downloadable artifact. The Pages URL must be anonymously reachable for the badge to render in a public README; use an appropriate authenticated static host when the report must remain private.
Runs bounded graph traversal from one or more seed IDs.
Syntax:
kibi graph --from IDS [--relationships RELS] [--direction outgoing|incoming|both] [--depth N] [--entity-types TYPES] [--max-nodes N] [--max-edges N] [--format json|table]Examples:
# Follow requirement links outward
kibi graph --from REQ-001 --direction outgoing --depth 2 --format table
# Inspect both incoming and outgoing relationships
kibi graph --from REQ-001,TEST-001 --direction both --depth 2 --format jsonValidates knowledge base integrity and runs inference rules.
Behavior:
- Validates required fields are present
- Checks requirement coverage (must-priority rules)
- Detects dangling references (entities that reference non-existent IDs)
- Detects cycles in dependency graphs
- Supports strict advisory modeling checks (
strict-fact-shape,strict-req-fact-pairing,predicate-verifiability) that run by default as non-blockingqualityDiagnostics, and default-off migration diagnostics (strict-readiness,semantic-completeness) that run only when explicitly selected with--rules. Canonical rules always populate blockingviolations[].--rulesis an invocation-time diagnostic filter only; leftover.kb/config.jsoncannot disable canonical checks. - With
--staged, runs commit-time changed-file impact enforcement for behavior-changing source edits, including missing Kibi impact evidence, stale symbol coordinates, and changed behavioral symbols that are only linked through coarse class/module ownership - Reports blocking
violations[]with actionable suggestions and additivequalityDiagnostics[]audit signals for modeling quality, coverage depth, broad requirements, duplicate coordinates, symbol fanout, and strict-fact review - When
.kb/usage.logexists, an unfiltered check also turns failed or insufficientkibi.telemetry-acceptance.v1metrics into ranked, non-blockingcategory: telemetryquality diagnostics; a missing log is skipped because diagnostic logging is opt-in - Keeps advisory quality diagnostics non-blocking by default:
review,info, and non-blockingwarningdiagnostics do not change the exit code; hard violations,severity: "error", orblocking: truestill fail the check
Flags:
--staged- Only check staged files (not whole repo)--kb-path <path>- Path to KB directory (optional)--rules <rule1,rule2>- Comma-separated list of rules to run (optional)--min-links <N>- Minimum requirement links per symbol for staged traceability (default: 1)--dry-run- Show staged-traceability effects without modifying files--format json|text- Output structured JSON for integrations such as OpenCode scheduled checks, or human-readable text output (default: text)
When kibi check --staged reports kibi_impact_evidence_missing, first use Kibi discovery (kb_search, then kb_query) through visible MCP tools or trusted CLI JSON routes to inspect existing requirements, scenarios, tests, facts, and symbols for the edited source file. If the edit changes behavior, update the KB through either peer surface and also stage tracked evidence that the commit can carry: related entity markdown under .kb/, authored .kb/symbols.yaml entries, or refreshed .kb/symbol-coordinates.yaml output.
KB writes through MCP or CLI JSON routes update branch state, but they do not automatically stage markdown or manifest files. The staged hook can only accept evidence present in the staged change-set, so run the required sync/authoring step and git add the tracked evidence before rerunning kibi check --staged.
Examples:
# Check entire KB
kibi check
# Export structured two-lane check output for automation
kibi check --format json
# Check only staged changes
kibi check --staged
# Run specific rules
kibi check --rules must-priority-coverage,no-dangling-refs
# Audit advisory strict-fact modeling without failing canonical health
kibi check --rules strict-fact-shape
# Audit strict requirement/fact pairing without failing canonical health
kibi check --rules strict-req-fact-pairing
# Audit predicate ontology links without failing canonical health
kibi check --rules predicate-verifiability
# Audit Prolog validation query plans
kibi check --rules query-plan-safetyWhile editing, agents can run impact diagnostics through MCP kb_check({sourceFiles:[...], includeImpactDiagnostics:true, includeWorkingTreeDiff:true}) or the equivalent kibi check --input <file|-> JSON route. kibi check --staged remains the commit-time git-hook gate once files are staged.
Structured JSON output preserves the same two-lane model used by MCP: hard correctness failures appear under structuredContent.violations[], while advisory audit signals appear under structuredContent.qualityDiagnostics[]. Advisory-only output is still a successful check; integrations should inspect blocking and severity instead of treating every diagnostic as a failure.
See also: Staged Symbol Traceability for --staged usage details.
Verifies environment setup and diagnostics.
Behavior:
- Checks SWI-Prolog installation and version
- Verifies
.kb/directory exists - Validates
.kb/manifest.jsonsyntax - Recognizes leftover
.kb/config.jsonand recommendskibi migrate --yes - Checks git repository presence
- Verifies git hooks are installed and executable
- Reports issues with remediation suggestions
Examples:
kibi doctor
kibi doctor --format jsonJSON mode emits kibi.doctor.v1 with resolved CLI, core, and MCP versions and
their entrypoint/package locations so release validation can prove which
artifacts are executing.
Common Issues Found:
- SWI-Prolog not found → See install guide
.kb/missing → Runkibi init- Git hooks missing → Run
kibi init - Config invalid → Check
.kb/manifest.jsonsyntax; leftover.kb/config.jsonis retired withkibi migrate --yes
Release validation packs the published packages in dependency order, verifies their compiled entrypoints and dependency ranges, and exercises isolated npm and pnpm consumers. Consumer repositories own their local update scripts and dependency overrides; Kibi does not rewrite a consumer's manifests or workspace configuration.
Reports adoption and quality metrics from .kb/usage.log.
Syntax:
kibi usage-metrics [--format json|table] [--limit N] [--require-acceptance]Behavior:
- Reads
.kb/usage.logfrom the current repository - Summarizes tool usage, branch activity, and success/error outcomes
- Reports telemetry completeness and zero-result rates
- Shows
kb_checkviolation trend entries and groupedkb_upserterror categories - Limits the zero-result source-file leaderboard with
--limit - Adds a versioned
kibi.telemetry-acceptance.v1report over the latest 200 events. It measures telemetry completeness, advisor-before-requirement-write use, exact validation-before-upsert use, source-linked zero-result rate, proof-gap recovery, receipt freshness, and repeated mutation failures. - Separates
failedfrominsufficient_evidence: an empty, stale (older than seven days), future-dated, partial-coverage, or pre-field-upgrade log cannot pass merely because no failure was observable
Flags:
--format json|table- Output format (default: table)--limit N- Maximum number of top zero-result source files to include (default: 10)--require-acceptance- Exit non-zero unless the acceptance status is exactlypassed; the report is still printed for repair automation
Examples:
# Show the default table report
kibi usage-metrics
# Export the full report structure as JSON
kibi usage-metrics --format json
# Show only the top 5 zero-result source files
kibi usage-metrics --limit 5
# Enforce the telemetry report as a completion gate
kibi usage-metrics --format json --require-acceptanceNotes:
- Returns an error if
.kb/usage.logdoes not exist in the current repository --limitmust be a positive integer- Default thresholds are conservative and inspectable in
acceptance.policy: at least 95% telemetry completeness, 100% advisor/preflight sequencing when applicable, no more than 20% zero-result source lookups, no receipt-specific gaps, and fewer than three consecutive failures for any mutation target
Builds a read-only kibi.telemetry-remediation.v1 report from .kb/usage.log.
kibi usage-remediation [--format json|table] [--limit N]- Enumerates the exact log line, request, timestamp, tool, target, reason, and repair action for events behind failed or insufficient acceptance metrics
- Preserves session and actor identifiers when available; advisor and preflight evidence cannot match a write when both records expose different correlation identifiers
- Keeps missing complete coverage evidence as an explicit report-level item
- Sorts deterministically by repair rank, log line, and stable item identity
- Does not write to the knowledge base or usage log;
--limitonly bounds rendered table rows and never truncates JSON evidence - The report uses exact canonical payload fingerprints for validation correlation when available and a deterministic legacy fingerprint otherwise. Requirement-advisor correlation requires the same requirement and, when both events expose it, the same semantic source hash.
Previews or applies the structured branch migration plan. With no mutation
flags, it is a read-only preview; --format json returns the complete
kibi.migration-plan.v2 action graph.
Behavior:
- Upgrades entity schemas and internal storage formats
- Marks pre-existing coarse symbol links with
granularity_reason: legacy-linkwhen narrower exported symbols or class methods (ClassName.methodName) are already available - Fixes legacy requirement modeling to follow strict fact-pairing rules
- Moves legacy
documentation/knowledge lanes and leftover.kb/config.jsoninto the canonical.kb/layout - Replaces the pre-canonical blanket
.kb/gitignore stanza with derived-runtime ignores so migrated.kb/<lane>/files are trackable - Treats malformed
.kb/config.jsonas a blocker instead of guessingdocumentation/paths - Writes
.kb/manifest.jsonwith the latestschemaVersion - Idempotent: safe to run if already on the latest version
Flags:
--dry-run- Show what would be migrated without making changes--yes- Apply migration changes without prompting--format json|table- Render the structured plan or a concise table--apply-safe- Apply only approved deterministic actions--approved-plan-hash SHA256- Required exact plan hash for--apply-safe--approved-action ID- Explicit automatic action ID (repeatable or comma-separated)
Notes:
- Use
kibi statusto check if a migration is pending for your branch. - Safe application rejects stale hashes, blocked actions, review/operator actions,
and actions omitted from
--approved-action. - Migration is recommended when upgrading
kibi-cliorkibi-mcppackages. - After migration, run
kibi sync --refresh-symbol-coordinatesif symbol coordinate diagnostics remain.
Garbage collects stale branch knowledge bases.
Behavior:
- Lists branch KBs that no longer exist in git
- Quarantines stale stores first; irreversible deletion requires explicit purge
- Keeps quarantined stores restorable during the retention window (30 days by default)
- Safe by default (dry-run mode)
Flags:
--dry-run- Only list stale branches (default)--force- Quarantine stale branches (reversible)--purge- Permanently purge quarantined stores past retention--retention-days <n>- Retention window for purge (default: 30)
Examples:
# List stale branches (safe)
kibi gc --dry-run
# Quarantine stale branches
kibi gc --force
# Purge expired quarantined stores
kibi gc --purge --retention-days 30Notes:
- Use
--dry-runfirst to see what would be deleted - Stale = an exact or legacy store whose branch is not a local Git head or worktree branch; remote-only refs do not keep stores live
Lists and manages branch knowledge bases.
Syntax:
kibi branch ensure
kibi branch migrate --from <legacy-branch> --to <active-branch> [--apply --approval-hash <sha256>]
kibi branch recover [--apply]
kibi branch restore --branch <branch> [--apply]Arguments:
ensure- Ensure the active branch has a branch-local KB snapshotmigrate- Preview (or, with--apply, atomically move) a legacy branch KB into the exact active Git branch namespacerecover- Preview (or, with--apply, rebuild) an incomplete or unreadable exact branch store from authored sources while preserving the original bytesrestore- Preview (or, with--apply, restore) the newest quarantined exact branch store within its retention window
Flags:
--to <active-branch>- Explicit exact Git identity receiving a legacy-store migration; it must match the active branch--approval-hash <sha256>- Required hash copied from the preview; source bytes and identities must still match exactly
Behavior:
- Ensures the active git branch has a compiled KB under
.kb/branches/<exact-ref-sha256>/branch.json - A missing exact branch store is compiled from the current checkout's tracked sources; no other branch store is copied
- Branch names are never normalized;
masterandmainare separate namespaces and remote-only refs do not keep stores live migratepreviews by default, stops an attached branch engine before applying, requires the exact target namespace to be absent, and preserves journals/audit/cache files.migrateis an explicit old/new legacy-literal-path migration. It rejects inferred renames and arbitrary branch-store cloning. The old and new identities may be equal when moving a literal store for the current branch into its hashed path.recoverpublishes only after a clean rebuild has succeeded, moves the prior store to.kb/recovery/<branch>/..., and writes an audit record. It never renames a Git branch.
Examples:
# Ensure the current branch has a KB
kibi branch ensure
# Preview then apply a legacy literal-store migration while on the target branch
kibi branch migrate --from old-ref --to feature/target
kibi branch migrate --from old-ref --to feature/target --apply --approval-hash <preview-hash>
# Preview then recover an unreadable store for the active exact branch
kibi branch recover
kibi branch recover --applyHT|## kibi skills
QN|
MV|Manage and inspect bundled agent skills. Skills are reusable Markdown guidance packages shipped with Kibi.
QN|
XW|Behavior:
TY|- Lists available bundled skills
TZ|- Loads a skill's manifest and body
BH|- Reads individual resources declared by a skill
JM|- Validates a local skill bundle directory
QN|
XQ|Subcommands:
PJ|
BV|bash QN|kibi skills list [--format json|table] SV|kibi skills load <id> [--format json|markdown] HY|kibi skills read <id> <resource> [--format text|json] QB|kibi skills validate <path> [--format json|table] BP|
ZS|
JK|Arguments:
JB|- list - Show all bundled skills with ID, name, version, and description
XY|- load <id> - Load a skill by its bundled ID. Returns the skill body and manifest.
BJ|- read <id> <resource> - Read a specific resource file declared in the skill manifest
PX|- validate <path> - Validate a local skill bundle directory against the skill schema
PS|
XQ|Flags:
PX|- --format json|table - Output format for list and validate (default: table)
YR|- --format json|markdown - Output format for load (default: markdown)
SP|- --format text|json - Output format for read (default: text)
PT|
MT|Examples:
BV|bash QQ|# List all bundled skills NZ|kibi skills list TM| MS|# Load the canonical usage skill as markdown NB|kibi skills load kibi-usage --format markdown NZ| VW|# Read a specific resource from a skill MB|kibi skills read kibi-usage resources/fact-lanes.md --format text QJ|
PY|
HX|Notes:
YS|- Skills are bundled with Kibi. Remote installation, marketplace, and script execution are not supported in v1.
QT|- OpenCode is an adapter for skill discovery, not the source of truth. The bundled skill set is authoritative.
- Generic MCP/CLI agents should start with generic-agent onboarding and load
kibi-usage. Do not copy a long prompt as a substitute for skill discovery. XB
The kibi check --staged command enforces traceability on code before commit.
Purpose: Every new or modified code symbol (function, class, method, accessor, behavioral class property, or module) must be explicitly linked to at least one requirement before it can be committed. This prevents "orphan" code from being merged and catches edits hidden behind broad class/module links when a narrower changed anchor exists.
Workflow Options:
- Relationship-based (Preferred for Test/e2e): Model the code as a symbol in your manifest (e.g.,
.kb/symbols.yaml), link it to aTEST-*entity withexecutable_forto establish its identity. The canonical traceability chain isREQ-xxx→SCEN-xxx→TEST-xxx. Usecovered_byto link symbols to the tests that exercise them. This satisfies the staged check without modifying source code. Note that physical symbol coordinates are maintained separately in.kb/symbol-coordinates.yamland must be refreshed viakibi sync --refresh-symbol-coordinateswhen code changes. - Comment-based (Optional Shortcut): Add an inline
// implements REQ-xxxcomment. This remains backward-compatible and useful for quick code-only changes.
How to use:
# Check staged files for traceability coverage
kibi check --stagedThis command scans only files staged for commit and reports any new or modified symbols that do not have requirement links (either via inline comments or explicit KB relationships). It also reports stale symbol-coordinate evidence and symbol_granularity_violation when a changed behavioral member such as UploadPageComponent.processingProgressLabel is covered only by a coarse class/module relationship without an audited granularity_reason. If violations are found and this is run as a pre-commit hook, the commit will be blocked.
The staged CLI gate does not prove that linked prose still matches the source edit. Use an impact-enabled kb_check through MCP or CLI JSON mode while editing to get symbol_semantic_review_needed guidance and inspect linked requirements/scenarios/tests before deciding whether to update KB entities.
Quality diagnostics may also appear during full or staged checks. They are designed to surface auditability problems automatically without creating a new command agents must remember: broad requirement reviews, multi-requirement symbol fanout, mixed-purpose class/component reviews, duplicate symbol-coordinate reviews, status misuse, strict-fact modeling gaps, and coverage-depth labels are review signals unless explicitly marked blocking.
Scope Note: Staged check handles explicitly modeled symbols and extracted TypeScript/JavaScript anchors, including exported class methods, accessors, and behavior-bearing class properties. Automatic extraction of framework-specific test() or it() callbacks is not currently supported.
Inline Directive Syntax (Optional):
Link a code symbol to a requirement by adding a comment:
export function myFunc() { } // implements REQ-001Link to multiple requirements:
export class MyClass { } // implements REQ-001, REQ-002Supported languages:
- TypeScript (
.ts,.tsx) - JavaScript (
.js,.jsx)
CLI Flags for staged checking:
--staged- Only check staged files--min-links <N>- Minimum requirement links per symbol (default: 1)--kb-path <path>- Path to KB directory--rules <rule1,rule2>- Specific rules to run--dry-run- Show what would be blocked without blocking commit
See also:
- Troubleshooting - Hook repair and remediation
- AGENTS.md - Agent-specific workflows
For detailed system architecture, see architecture.md For entity and relationship schemas, see entity-schema.md For MCP server reference, see mcp-reference.md