@dailephd/my-dev-kit-lab 0.6.1 → 0.6.3

package/dist/src/experiments/plugins/incrementalChangeStaleness/indexClone.js

@@ -0,0 +1,76 @@
+import { existsSync } from "node:fs";
+import { cp, lstat, mkdir, readdir, readFile, realpath } from "node:fs/promises";
+import { createHash } from "node:crypto";
+import path from "node:path";
+import { resolveWithinRoot } from "../../../core/pathSafety.js";
+/**
+ * Narrow v0.6.3 lifecycle-preparation helper: copies one already-produced my-dev-kit index
+ * directory byte-for-byte to a new sibling directory so an upstream incremental refresh can run
+ * in place against the copy while the original baseline stays immutable change authority.
+ *
+ * Both paths must resolve inside `runOwnedRoot` (textually and, for the destination parent, by
+ * real path), the destination must not exist, symlinks in the source are refused, and the copy
+ * is verified file-for-file by SHA-256. Index contents are never edited. Any failure throws.
+ */
+export async function cloneIncrementalChangeStalenessIndexDirectory(runOwnedRoot, sourceDir, destinationDir) {
+    const root = path.resolve(runOwnedRoot);
+    const source = resolveWithinRoot(root, path.resolve(sourceDir));
+    const destination = resolveWithinRoot(root, path.resolve(destinationDir));
+    if (!existsSync(source)) {
+        throw new Error(`Index clone source does not exist: ${source}.`);
+    }
+    if (existsSync(destination)) {
+        throw new Error(`Index clone destination already exists; refusing to overwrite: ${destination}.`);
+    }
+    const relativeToSource = path.relative(source, destination);
+    if (relativeToSource === "" || (!relativeToSource.startsWith("..") && !path.isAbsolute(relativeToSource))) {
+        throw new Error(`Index clone destination ${destination} must not be inside the source ${source}.`);
+    }
+    const sourceFiles = await listRegularFiles(source);
+    // The destination parent must be real-path contained by the real run-owned root (no symlink escape).
+    const parent = path.dirname(destination);
+    await mkdir(parent, { recursive: true });
+    const [realParent, realRoot] = await Promise.all([realpath(parent), realpath(root)]);
+    const parentRelative = path.relative(realRoot, realParent);
+    if (parentRelative === ".." || parentRelative.startsWith(`..${path.sep}`) || path.isAbsolute(parentRelative)) {
+        throw new Error(`Index clone destination parent escapes the run-owned root via a symbolic link: ${parent}.`);
+    }
+    await cp(source, destination, { recursive: true, errorOnExist: true, force: false, dereference: false });
+    const copiedFiles = await listRegularFiles(destination);
+    if (copiedFiles.length !== sourceFiles.length || copiedFiles.some((file, index) => file !== sourceFiles[index])) {
+        throw new Error(`Index clone is incomplete: ${destination} does not contain exactly the files of ${source}.`);
+    }
+    for (const file of sourceFiles) {
+        const [left, right] = await Promise.all([sha256(path.join(source, file)), sha256(path.join(destination, file))]);
+        if (left !== right) {
+            throw new Error(`Index clone content differs for ${file}.`);
+        }
+    }
+}
+async function sha256(filePath) {
+    return createHash("sha256").update(await readFile(filePath)).digest("hex");
+}
+/** Sorted POSIX-relative regular files; refuses symlinks and other non-regular entries. */
+async function listRegularFiles(root) {
+    const files = [];
+    async function walk(dir) {
+        for (const entry of await readdir(dir, { withFileTypes: true })) {
+            const full = path.join(dir, entry.name);
+            const stat = await lstat(full);
+            if (stat.isSymbolicLink()) {
+                throw new Error(`Index directory contains a symbolic link, which is not copied: ${full}.`);
+            }
+            if (stat.isDirectory()) {
+                await walk(full);
+            }
+            else if (stat.isFile()) {
+                files.push(path.relative(root, full).replace(/\\/g, "/"));
+            }
+            else {
+                throw new Error(`Index directory contains a non-regular entry: ${full}.`);
+            }
+        }
+    }
+    await walk(root);
+    return files.sort();
+}

package/dist/src/experiments/plugins/incrementalChangeStaleness/lifecycle.js

@@ -0,0 +1,308 @@
+import { existsSync } from "node:fs";
+import path from "node:path";
+import { resolveWithinRoot } from "../../../core/pathSafety.js";
+import { assessIndexFreshness } from "../../../evaluation/indexFreshness.js";
+import { prepareWarmIndexSession } from "../warmIndexReuse/warmIndexSession.js";
+import { createDisposableTreatmentTarget } from "./disposableTarget.js";
+import { evaluateBaselineStaleFreshness, evaluateChangedPathSymmetry, evaluateIndexEvidence, evaluateRefreshedFreshness, evaluateToolIdentity, normalizeRelativePath, normalizeRootForComparison } from "./lifecyclePolicy.js";
+import { executeIncrementalChangeStalenessMutation } from "./mutationExecution.js";
+import { captureIncrementalChangeStalenessSourceState, compareIncrementalChangeStalenessSourceStates } from "./sourceState.js";
+import { INCREMENTAL_CHANGE_STALENESS_LIFECYCLE_SESSION_SCHEMA_VERSION } from "./treatmentSession.js";
+export const defaultIncrementalChangeStalenessLifecycleDeps = {
+    prepareIndexSession: prepareWarmIndexSession,
+    assessIndexFreshness,
+    executeMutation: executeIncrementalChangeStalenessMutation,
+    captureSourceState: captureIncrementalChangeStalenessSourceState
+};
+/** Deterministic run-owned layout: targets/, indexes/, and commands/ are separate sibling trees. */
+export function incrementalChangeStalenessTargetsRoot(runOwnedRoot) {
+    return path.join(path.resolve(runOwnedRoot), "targets");
+}
+export function incrementalChangeStalenessIndexDir(runOwnedRoot, scenarioId, treatmentId, role) {
+    return resolveWithinRoot(path.resolve(runOwnedRoot), path.join("indexes", scenarioId, treatmentId, role));
+}
+export function incrementalChangeStalenessCommandsDir(runOwnedRoot, scenarioId, treatmentId, role) {
+    return resolveWithinRoot(path.resolve(runOwnedRoot), path.join("commands", scenarioId, treatmentId, role));
+}
+export class LifecycleFailure extends Error {
+    failure;
+    constructor(failure) {
+        super(failure.message);
+        this.failure = failure;
+    }
+}
+export function fail(failure) {
+    if (failure)
+        throw new LifecycleFailure(failure);
+}
+/**
+ * Shared by the v0.6.2 and v0.6.3 lifecycles: runs the index through the established warm-index
+ * session owner (index -> version probe -> snapshot -> graph), then proves target/index identity.
+ * `mode` defaults to an ordinary full build. The index directory must be absent unless
+ * `existingIndexDir` is set (an in-place refresh of an already-cloned baseline).
+ */
+export async function prepareTreatmentIndexEvidence(params) {
+    const { deps, target, role, indexDir, sourceRoots } = params;
+    const treatmentId = target.treatmentId;
+    if (params.existingIndexDir ? !existsSync(indexDir) : existsSync(indexDir)) {
+        fail({
+            code: "index-directory-collision",
+            message: params.existingIndexDir
+                ? `Expected an existing cloned ${treatmentId} ${role} index directory: ${indexDir}.`
+                : `Refusing to overwrite existing ${treatmentId} ${role} index directory: ${indexDir}.`,
+            treatmentId
+        });
+    }
+    const commandsDir = incrementalChangeStalenessCommandsDir(params.runOwnedRoot, params.scenarioId, treatmentId, role);
+    const prepared = await deps.prepareIndexSession({
+        target: { absoluteTargetRoot: target.targetRoot, sourceRoots: [...sourceRoots] },
+        kitCommand: params.kitCommand,
+        indexDir,
+        commandsDir,
+        requireKit: false,
+        ...(params.mode ? { mode: params.mode } : {})
+    });
+    if (!prepared.ok) {
+        fail({
+            code: role === "baseline" ? "baseline-index-build-failed" : "refresh-index-build-failed",
+            message: `${treatmentId} ${role} my-dev-kit index build failed: ${prepared.warnings.join(" ") || `exit code ${prepared.build.command.exitCode}`}`,
+            treatmentId
+        });
+        throw new Error("unreachable");
+    }
+    params.onIndexPrepared?.();
+    const evidence = Object.freeze({
+        role,
+        treatmentId,
+        builtRelativeToMutation: role === "baseline" ? "pre-mutation" : "post-mutation",
+        indexDir: prepared.session.indexDir,
+        commandsDir,
+        targetRoot: prepared.session.targetRoot,
+        sourceRoots: prepared.session.sourceRoots,
+        buildDurationMs: prepared.session.buildDurationMs,
+        buildCommand: prepared.session.buildCommand,
+        snapshot: prepared.session.indexSnapshot,
+        graph: prepared.session.affectedNeighborhoodGraph
+    });
+    fail(evaluateIndexEvidence(evidence, { targetRoot: target.targetRoot, sourceRoots, indexDir }));
+    return { evidence, build: prepared.build };
+}
+/**
+ * Owns the matched Batch 3 lifecycle for ONE frozen scenario:
+ *
+ *  1. two independent disposable copies (stale-index, full-refresh);
+ *  2. pre-mutation controlled source-state equivalence;
+ *  3. stale-index baseline: index -> snapshot -> graph, then identity proof;
+ *  4. full-refresh baseline: index -> snapshot -> graph, then identity proof;
+ *  5. BARRIER: only after both baselines are fully ready, the same frozen
+ *     mutation is applied independently to both copies;
+ *  6. post-mutation controlled source-state equivalence;
+ *  7. each baseline snapshot assessed against its mutated target (complete
+ *     `stale` on exactly the scenario-controlled paths, symmetric across
+ *     treatments);
+ *  8. stale-index keeps its baseline index as active retrieval authority
+ *     (no rebuild);
+ *  9. full-refresh builds a NEW complete index into a separate directory,
+ *     captures its snapshot/graph, and proves it complete `fresh`.
+ *
+ * Exactly three full index builds and three freshness assessments happen per
+ * scenario. Performs no retrieval, affected-neighborhood traversal, metric
+ * computation, correctness evaluation, or comparison classification, and
+ * never acts on a reindex recommendation. Sequential by design. Does not
+ * delete anything: the caller owns and cleans the run-owned root after the
+ * session has been consumed.
+ */
+export async function prepareIncrementalChangeStalenessScenarioLifecycle(options) {
+    const deps = { ...defaultIncrementalChangeStalenessLifecycleDeps, ...options.deps };
+    const { repoRoot, scenario, baseCase, kitCommand } = options;
+    const runOwnedRoot = path.resolve(options.runOwnedRoot);
+    const events = [];
+    const indexBuildCounts = { "stale-index": 0, "full-refresh": 0 };
+    const sourceRoots = baseCase.sourceRoots;
+    const controlledChangedPaths = scenario.mutation.files.map((file) => normalizeRelativePath(file.path)).sort();
+    async function prepareIndex(target, role, indexDir) {
+        const treatmentId = target.treatmentId;
+        if (existsSync(indexDir)) {
+            fail({ code: "index-directory-collision", message: `Refusing to overwrite existing ${treatmentId} ${role} index directory: ${indexDir}.`, treatmentId });
+        }
+        indexBuildCounts[treatmentId] += 1;
+        const { evidence } = await prepareTreatmentIndexEvidence({
+            deps,
+            runOwnedRoot,
+            scenarioId: scenario.id,
+            kitCommand,
+            sourceRoots,
+            target,
+            role,
+            indexDir,
+            // prepareIndexSession resolves only after the index command, snapshot capture, and graph
+            // loading have all completed, in that order.
+            onIndexPrepared: () => events.push(`${treatmentId}:${role}-index-built`, `${treatmentId}:${role}-snapshot-captured`, `${treatmentId}:${role}-graph-loaded`)
+        });
+        events.push(`${treatmentId}:${role}-identity-verified`);
+        return evidence;
+    }
+    async function captureState(target) {
+        return deps.captureSourceState(target.targetRoot, sourceRoots, target.treatmentId, baseCase.benchmarkProjectId);
+    }
+    async function mutate(target) {
+        const receipt = await deps.executeMutation(scenario, target, sourceRoots, repoRoot);
+        if (receipt.status !== "applied") {
+            fail({ code: "mutation-failed", message: `${target.treatmentId} mutation was rejected: ${receipt.errors.join(" ")}`, treatmentId: target.treatmentId });
+        }
+        events.push(`${target.treatmentId}:mutation-applied`);
+        return receipt;
+    }
+    async function assess(index, target) {
+        return deps.assessIndexFreshness({ snapshot: index.snapshot, targetRoot: target.targetRoot, sourceRoots });
+    }
+    try {
+        const indexDirs = {
+            staleBaseline: incrementalChangeStalenessIndexDir(runOwnedRoot, scenario.id, "stale-index", "baseline"),
+            fullBaseline: incrementalChangeStalenessIndexDir(runOwnedRoot, scenario.id, "full-refresh", "baseline"),
+            fullRefreshed: incrementalChangeStalenessIndexDir(runOwnedRoot, scenario.id, "full-refresh", "refreshed")
+        };
+        if (normalizeRootForComparison(indexDirs.staleBaseline) === normalizeRootForComparison(indexDirs.fullBaseline) ||
+            normalizeRootForComparison(indexDirs.fullBaseline) === normalizeRootForComparison(indexDirs.fullRefreshed) ||
+            normalizeRootForComparison(indexDirs.staleBaseline) === normalizeRootForComparison(indexDirs.fullRefreshed)) {
+            fail({ code: "index-directory-collision", message: "Treatment/phase index directories are not distinct.", treatmentId: null });
+        }
+        // 1. Two independent disposable copies through the Batch 2 owner.
+        const targets = {};
+        for (const treatmentId of ["stale-index", "full-refresh"]) {
+            try {
+                targets[treatmentId] = await createDisposableTreatmentTarget({
+                    repoRoot,
+                    runRoot: incrementalChangeStalenessTargetsRoot(runOwnedRoot),
+                    scenarioId: scenario.id,
+                    treatmentId,
+                    benchmarkProjectId: baseCase.benchmarkProjectId,
+                    canonicalProjectRootRelative: baseCase.canonicalProjectRootRelative
+                });
+            }
+            catch (error) {
+                fail({ code: "treatment-target-creation-failed", message: `${treatmentId}: ${error.message}`, treatmentId });
+            }
+        }
+        const stale = targets["stale-index"];
+        const full = targets["full-refresh"];
+        events.push("treatment-targets-created");
+        // 2. Pre-mutation equivalence gates all indexing and mutation.
+        const stalePre = await captureState(stale);
+        const fullPre = await captureState(full);
+        events.push("pre-mutation-source-state-captured");
+        const preMutationEquivalence = compareIncrementalChangeStalenessSourceStates(stalePre, fullPre);
+        if (preMutationEquivalence.result !== "equivalent") {
+            fail({
+                code: "pre-mutation-not-equivalent",
+                message: `Treatment copies are not pre-mutation equivalent (${preMutationEquivalence.result}): ${preMutationEquivalence.reasons.join("; ")}`,
+                treatmentId: null
+            });
+        }
+        events.push("pre-mutation-equivalence-proven");
+        // 3-4. Baselines: each index -> snapshot -> graph -> identity, sequentially.
+        const staleBaseline = await prepareIndex(stale, "baseline", indexDirs.staleBaseline);
+        const fullBaseline = await prepareIndex(full, "baseline", indexDirs.fullBaseline);
+        const baselineTools = evaluateToolIdentity([staleBaseline, fullBaseline]);
+        fail(baselineTools.failure);
+        events.push("baseline-tool-identity-verified");
+        // 5. Barrier: both baselines are index + snapshot + graph READY. Only now may mutation begin.
+        events.push("baseline-barrier-ready");
+        const staleReceipt = await mutate(stale);
+        const fullReceipt = await mutate(full);
+        // 6. Post-mutation equivalence.
+        const stalePost = await captureState(stale);
+        const fullPost = await captureState(full);
+        events.push("post-mutation-source-state-captured");
+        const postMutationEquivalence = compareIncrementalChangeStalenessSourceStates(stalePost, fullPost);
+        if (postMutationEquivalence.result !== "equivalent") {
+            fail({
+                code: "post-mutation-not-equivalent",
+                message: `Treatment copies are not post-mutation equivalent (${postMutationEquivalence.result}): ${postMutationEquivalence.reasons.join("; ")}`,
+                treatmentId: null
+            });
+        }
+        events.push("post-mutation-equivalence-proven");
+        // 7. Baseline (change-authority) freshness against each mutated target.
+        const staleBaselineFreshness = await assess(staleBaseline, stale);
+        fail(evaluateBaselineStaleFreshness(staleBaselineFreshness, controlledChangedPaths, "stale-index"));
+        events.push("stale-index:baseline-freshness-stale");
+        const fullBaselineFreshness = await assess(fullBaseline, full);
+        fail(evaluateBaselineStaleFreshness(fullBaselineFreshness, controlledChangedPaths, "full-refresh"));
+        events.push("full-refresh:baseline-freshness-stale");
+        fail(evaluateChangedPathSymmetry(staleBaselineFreshness, fullBaselineFreshness));
+        events.push("baseline-changed-paths-symmetric");
+        // 8. stale-index: no rebuild; baseline stays the active retrieval index.
+        events.push("stale-index:baseline-retained-as-active");
+        // 9. full-refresh: new complete post-mutation index in a separate directory.
+        const refreshed = await prepareIndex(full, "refreshed", indexDirs.fullRefreshed);
+        const refreshedFreshness = await assess(refreshed, full);
+        fail(evaluateRefreshedFreshness(refreshedFreshness));
+        events.push("full-refresh:refreshed-freshness-fresh");
+        const allTools = evaluateToolIdentity([staleBaseline, fullBaseline, refreshed]);
+        fail(allTools.failure);
+        events.push("tool-identity-consistent");
+        events.push("full-refresh:refreshed-active");
+        events.push("lifecycle-ready");
+        const staleSession = Object.freeze({
+            treatmentId: "stale-index",
+            target: stale,
+            preMutationSourceState: stalePre,
+            postMutationSourceState: stalePost,
+            mutationReceipt: staleReceipt,
+            changeAuthority: Object.freeze({ baselineIndex: staleBaseline, postMutationBaselineFreshness: staleBaselineFreshness }),
+            activeRetrieval: Object.freeze({ role: "baseline", index: staleBaseline }),
+            postMutationIndexBuilt: false,
+            refreshedIndex: null,
+            refreshedFreshness: null,
+            indexBuildCount: indexBuildCounts["stale-index"],
+            freshnessAssessmentCount: 1,
+            lifecycleStatus: "ready",
+            warnings: Object.freeze([])
+        });
+        const fullSession = Object.freeze({
+            treatmentId: "full-refresh",
+            target: full,
+            preMutationSourceState: fullPre,
+            postMutationSourceState: fullPost,
+            mutationReceipt: fullReceipt,
+            changeAuthority: Object.freeze({ baselineIndex: fullBaseline, postMutationBaselineFreshness: fullBaselineFreshness }),
+            activeRetrieval: Object.freeze({ role: "refreshed", index: refreshed }),
+            postMutationIndexBuilt: true,
+            refreshedIndex: refreshed,
+            refreshedFreshness,
+            indexBuildCount: indexBuildCounts["full-refresh"],
+            freshnessAssessmentCount: 2,
+            lifecycleStatus: "ready",
+            warnings: Object.freeze([])
+        });
+        const session = Object.freeze({
+            schemaVersion: INCREMENTAL_CHANGE_STALENESS_LIFECYCLE_SESSION_SCHEMA_VERSION,
+            scenarioId: scenario.id,
+            scenario,
+            baseCase,
+            runOwnedRoot,
+            kitCommand,
+            toolIdentity: allTools.tool,
+            controlledChangedPaths: Object.freeze(controlledChangedPaths),
+            preMutationEquivalence,
+            postMutationEquivalence,
+            treatments: Object.freeze({ "stale-index": staleSession, "full-refresh": fullSession }),
+            lifecycleEvents: Object.freeze([...events]),
+            status: "ready"
+        });
+        return { status: "ready", session };
+    }
+    catch (error) {
+        const failure = error instanceof LifecycleFailure
+            ? error.failure
+            : { code: "lifecycle-error", message: `Lifecycle failed unexpectedly: ${error instanceof Error ? error.message : String(error)}`, treatmentId: null };
+        return {
+            status: "failed",
+            scenarioId: scenario.id,
+            failure,
+            lifecycleEvents: Object.freeze([...events]),
+            indexBuildCounts: Object.freeze({ ...indexBuildCounts })
+        };
+    }
+}

package/dist/src/experiments/plugins/incrementalChangeStaleness/lifecyclePolicy.js

@@ -0,0 +1,154 @@
+import path from "node:path";
+/**
+ * Pure v0.6.2 Batch 3 lifecycle-readiness policy. Every function here only
+ * inspects already-produced evidence and returns an explicit failure or
+ * null; none touches the filesystem, runs my-dev-kit, mutates, or retrieves.
+ * These rules are scoped to this experiment's matched production lifecycle
+ * and deliberately do not change the released v0.6.0/v0.6.1 semantics of the
+ * evidence they read.
+ */
+export function normalizeRootForComparison(root) {
+    const resolved = path.resolve(root);
+    return process.platform === "win32" ? resolved.toLowerCase() : resolved;
+}
+export function normalizeRelativePath(relativePath) {
+    return relativePath.replace(/\\/g, "/");
+}
+function normalizeSourceRoot(root) {
+    return root.replace(/\\/g, "/").replace(/\/+$/, "");
+}
+/** Exact, order-preserving source-root equality after separator/trailing-slash normalization. */
+export function sameSourceRoots(left, right) {
+    return left.length === right.length && left.every((root, index) => normalizeSourceRoot(root) === normalizeSourceRoot(right[index]));
+}
+/**
+ * Graph evidence is usable for this lifecycle only when an indexed-file claim
+ * exists (not `unavailable`) AND the code graph was actually loaded, since a
+ * null code graph makes later node mapping impossible.
+ */
+export function isUsableGraphEvidence(graph) {
+    return graph.status !== "unavailable" && graph.codeGraph !== null;
+}
+function failure(code, message, treatmentId) {
+    return { code, message, treatmentId };
+}
+/**
+ * Proves one prepared index belongs to the intended treatment target, uses
+ * the canonical source roots, carries a complete IndexSnapshotV1 (whose
+ * manifest projectRoot/sourceRoots were already checked against the target by
+ * captureIndexSnapshot), and carries usable graph evidence loaded from the
+ * same index directory. Never relies on directory naming alone.
+ */
+export function evaluateIndexEvidence(evidence, expected) {
+    const refreshed = evidence.role === "refreshed";
+    const label = `${evidence.treatmentId} ${evidence.role} index`;
+    const targetMismatchCode = refreshed ? "active-index-target-mismatch" : "index-target-mismatch";
+    if (normalizeRootForComparison(evidence.targetRoot) !== normalizeRootForComparison(expected.targetRoot)) {
+        return failure(targetMismatchCode, `${label} target root ${evidence.targetRoot} does not match treatment target ${expected.targetRoot}.`, evidence.treatmentId);
+    }
+    if (normalizeRootForComparison(evidence.indexDir) !== normalizeRootForComparison(expected.indexDir)) {
+        return failure(targetMismatchCode, `${label} directory ${evidence.indexDir} does not match the owned index directory ${expected.indexDir}.`, evidence.treatmentId);
+    }
+    if (!sameSourceRoots(evidence.sourceRoots, expected.sourceRoots)) {
+        return failure("source-root-mismatch", `${label} source roots [${evidence.sourceRoots.join(", ")}] do not match canonical base-case source roots [${expected.sourceRoots.join(", ")}].`, evidence.treatmentId);
+    }
+    const snapshot = evidence.snapshot;
+    if (snapshot.status === "unavailable" && snapshot.unavailable?.code === "manifest-target-mismatch") {
+        return failure(targetMismatchCode, `${label} manifest does not belong to the treatment target: ${snapshot.unavailable.message}`, evidence.treatmentId);
+    }
+    if (snapshot.status !== "complete") {
+        const reason = snapshot.unavailable ? `${snapshot.unavailable.code}: ${snapshot.unavailable.message}` : `${snapshot.unresolvedFileCount} unresolved indexed file(s)`;
+        return failure(refreshed ? "refreshed-snapshot-unavailable" : "baseline-snapshot-unavailable", `${label} IndexSnapshotV1 is ${snapshot.status} (${reason}).`, evidence.treatmentId);
+    }
+    if (normalizeRootForComparison(evidence.graph.indexRoot) !== normalizeRootForComparison(expected.indexDir)) {
+        return failure(targetMismatchCode, `${label} graph evidence was loaded from ${evidence.graph.indexRoot}, not ${expected.indexDir}.`, evidence.treatmentId);
+    }
+    if (!isUsableGraphEvidence(evidence.graph)) {
+        const reason = evidence.graph.unavailable ? `${evidence.graph.unavailable.code}: ${evidence.graph.unavailable.message}` : "code graph was not loaded";
+        return failure(refreshed ? "refreshed-graph-unavailable" : "baseline-graph-unavailable", `${label} graph evidence is not usable (${evidence.graph.status}; ${reason}).`, evidence.treatmentId);
+    }
+    return null;
+}
+/**
+ * Every index of one matched scenario must come from the same configured
+ * my-dev-kit command and the same probed tool version. An unavailable
+ * version is never guessed: identity that cannot be established blocks
+ * readiness explicitly.
+ */
+export function evaluateToolIdentity(indexes) {
+    for (const index of indexes) {
+        if (index.snapshot.tool.availability !== "available" || index.snapshot.tool.version === null) {
+            return {
+                failure: failure("tool-identity-unavailable", `${index.treatmentId} ${index.role} index my-dev-kit version could not be established: ${index.snapshot.tool.reason ?? "unavailable"}.`, index.treatmentId),
+                tool: null
+            };
+        }
+    }
+    const versions = [...new Set(indexes.map((index) => index.snapshot.tool.version))];
+    if (versions.length > 1) {
+        return {
+            failure: failure("tool-identity-mismatch", `Matched scenario indexes were built with different my-dev-kit versions: ${indexes.map((index) => `${index.treatmentId}/${index.role}=${index.snapshot.tool.version}`).join(", ")}.`, null),
+            tool: null
+        };
+    }
+    const commands = [...new Set(indexes.map((index) => index.snapshot.indexCommand.commandString))];
+    if (commands.length > 1) {
+        return {
+            failure: failure("tool-identity-mismatch", `Matched scenario indexes were built with different my-dev-kit commands: ${commands.join(" | ")}.`, null),
+            tool: null
+        };
+    }
+    return { failure: null, tool: indexes.length > 0 ? { ...indexes[0].snapshot.tool } : null };
+}
+function changedPaths(assessment) {
+    return assessment.changes.map((change) => normalizeRelativePath(change.path)).sort();
+}
+/**
+ * A frozen production scenario must be observed as COMPLETE `stale` against
+ * the pre-mutation baseline snapshot, and the confirmed changed set must be
+ * exactly the scenario-declared controlled file(s) (all modifications, none
+ * missing). `fresh`, `unknown`, and `partially-stale` never count as a proven
+ * controlled stale state.
+ */
+export function evaluateBaselineStaleFreshness(assessment, controlledChangedPaths, treatmentId) {
+    if (assessment.status !== "stale") {
+        return failure("baseline-freshness-not-stale", `${treatmentId} baseline freshness after mutation is ${assessment.status}, not complete stale.`, treatmentId);
+    }
+    if (assessment.baselineSnapshotStatus !== "complete" || assessment.unresolvedFileCount !== 0 || assessment.changesTruncated) {
+        return failure("baseline-freshness-not-stale", `${treatmentId} baseline freshness comparison is incomplete (snapshot ${assessment.baselineSnapshotStatus}, ${assessment.unresolvedFileCount} unresolved, truncated=${assessment.changesTruncated}).`, treatmentId);
+    }
+    const expected = [...controlledChangedPaths].map(normalizeRelativePath).sort();
+    const observed = changedPaths(assessment);
+    const sameSet = observed.length === expected.length && observed.every((value, index) => value === expected[index]);
+    if (!sameSet || assessment.missingFileCount !== 0) {
+        return failure("baseline-changed-paths-mismatch", `${treatmentId} baseline freshness changed paths [${observed.join(", ")}] (missing=${assessment.missingFileCount}) do not match scenario-controlled paths [${expected.join(", ")}].`, treatmentId);
+    }
+    return null;
+}
+/**
+ * Both treatments applied the same mutation to equivalent copies, so their
+ * baseline freshness change evidence must agree path-for-path, including
+ * baseline and current content identity.
+ */
+export function evaluateChangedPathSymmetry(stale, fullRefresh, labels = { reference: "stale-index", other: "full-refresh" }) {
+    const key = (assessment) => assessment.changes
+        .map((change) => `${normalizeRelativePath(change.path)}\t${change.changeType}\t${change.baselineSha256}\t${change.currentSha256 ?? "null"}`)
+        .sort();
+    const left = key(stale);
+    const right = key(fullRefresh);
+    const same = left.length === right.length && left.every((value, index) => value === right[index]);
+    if (!same) {
+        return failure("treatment-changed-paths-conflict", `${labels.reference} and ${labels.other} baseline freshness disagree about the controlled change: ${labels.reference}=[${left.join("; ")}] ${labels.other}=[${right.join("; ")}].`, null);
+    }
+    return null;
+}
+/** The refreshed index must be proven complete `fresh` against the unchanged mutated target. */
+export function evaluateRefreshedFreshness(assessment, treatmentId = "full-refresh") {
+    const complete = assessment.baselineSnapshotStatus === "complete" && assessment.unresolvedFileCount === 0;
+    if (assessment.status !== "fresh" || !complete || assessment.changedFileCount !== 0 || assessment.missingFileCount !== 0) {
+        return failure("refreshed-freshness-not-fresh", `${treatmentId} refreshed index freshness is ${assessment.status} (snapshot ${assessment.baselineSnapshotStatus}, ${assessment.changedFileCount} changed, ${assessment.missingFileCount} missing, ${assessment.unresolvedFileCount} unresolved); complete fresh is required.`, treatmentId);
+    }
+    return null;
+}
+/** Shared failure constructor for the v0.6.3 lifecycle policy module. */
+export { failure as lifecycleFailure };

package/dist/src/experiments/plugins/incrementalChangeStaleness/lifecyclePolicyV2.js

@@ -0,0 +1,78 @@
+import { lifecycleFailure } from "./lifecyclePolicy.js";
+/** Pure v0.6.3 four-treatment lifecycle policy; inspects already-produced evidence only. */
+/**
+ * v0.6.3: every treatment baseline is bootstrapped with `--incremental --refresh-scope changed-files`
+ * against a brand-new index directory. Upstream must truthfully report the expected bootstrap full
+ * fallback (`cache-missing`); this is bootstrap evidence, never an experimental partial-refresh fallback.
+ */
+export function evaluateBaselineBootstrapEvidence(build, treatmentId) {
+    const evidence = build.incrementalRefresh;
+    const label = `${treatmentId} baseline bootstrap`;
+    if (build.mode.kind !== "incremental" || build.mode.refreshScope !== "changed-files") {
+        return lifecycleFailure("baseline-bootstrap-contract-mismatch", `${label} was not requested as incremental changed-files.`, treatmentId);
+    }
+    if (!evidence) {
+        return lifecycleFailure("baseline-bootstrap-contract-mismatch", `${label} returned no incrementalRefresh evidence.`, treatmentId);
+    }
+    if (evidence.requestedScope !== "changed-files" ||
+        evidence.appliedScope !== "full" ||
+        evidence.selectionStatus !== "fallback-full" ||
+        evidence.fallbackReason !== "cache-missing") {
+        return lifecycleFailure("baseline-bootstrap-contract-mismatch", `${label} expected requested=changed-files applied=full status=fallback-full reason=cache-missing but observed requested=${evidence.requestedScope} applied=${evidence.appliedScope} status=${evidence.selectionStatus} reason=${evidence.fallbackReason}.`, treatmentId);
+    }
+    return null;
+}
+/**
+ * v0.6.3: classifies a post-mutation partial-refresh build. A truthful `fallback-full` is a valid
+ * realization (FALLBACK_FULL), never collapsed to APPLIED_PARTIAL. `not-needed` after an already
+ * proven controlled mutation contradicts that mutation and fails the lifecycle. Missing or invalid
+ * evidence fails too.
+ */
+export function evaluatePartialRefreshRealization(build, requestedScope, treatmentId) {
+    const evidence = build.incrementalRefresh;
+    if (build.mode.kind !== "incremental" || build.mode.refreshScope !== requestedScope || !evidence || evidence.requestedScope !== requestedScope) {
+        return {
+            failure: lifecycleFailure("refresh-evidence-invalid", `${treatmentId} refresh did not carry valid ${requestedScope} incrementalRefresh evidence.`, treatmentId),
+            realization: null
+        };
+    }
+    if (evidence.selectionStatus === "not-needed" || evidence.appliedScope === "none") {
+        return {
+            failure: lifecycleFailure("refresh-not-needed-after-mutation", `${treatmentId} refresh reported not-needed (applied=${evidence.appliedScope}) although the controlled mutation was already proven.`, treatmentId),
+            realization: null
+        };
+    }
+    if (evidence.selectionStatus === "applied" && evidence.appliedScope === requestedScope) {
+        return { failure: null, realization: "APPLIED_PARTIAL" };
+    }
+    if (evidence.selectionStatus === "fallback-full" && evidence.appliedScope === "full") {
+        return { failure: null, realization: "FALLBACK_FULL" };
+    }
+    return {
+        failure: lifecycleFailure("refresh-evidence-invalid", `${treatmentId} refresh reported an unclassifiable outcome (status=${evidence.selectionStatus}, applied=${evidence.appliedScope}).`, treatmentId),
+        realization: null
+    };
+}
+/** v0.6.3 per-scenario counts: 7 index invocations and 7 freshness assessments. */
+export const INCREMENTAL_CHANGE_STALENESS_V2_EXPECTED_INDEX_INVOCATIONS = {
+    "stale-index": 1,
+    "changed-files-refresh": 2,
+    "affected-neighborhood-refresh": 2,
+    "full-refresh": 2
+};
+export const INCREMENTAL_CHANGE_STALENESS_V2_EXPECTED_FRESHNESS_ASSESSMENTS = {
+    "stale-index": 1,
+    "changed-files-refresh": 2,
+    "affected-neighborhood-refresh": 2,
+    "full-refresh": 2
+};
+export function evaluateV2InvocationCounts(indexInvocationCounts, freshnessAssessmentCounts) {
+    for (const treatmentId of Object.keys(INCREMENTAL_CHANGE_STALENESS_V2_EXPECTED_INDEX_INVOCATIONS)) {
+        const expectedIndex = INCREMENTAL_CHANGE_STALENESS_V2_EXPECTED_INDEX_INVOCATIONS[treatmentId];
+        const expectedFreshness = INCREMENTAL_CHANGE_STALENESS_V2_EXPECTED_FRESHNESS_ASSESSMENTS[treatmentId];
+        if (indexInvocationCounts[treatmentId] !== expectedIndex || freshnessAssessmentCounts[treatmentId] !== expectedFreshness) {
+            return lifecycleFailure("invocation-count-mismatch", `${treatmentId} performed ${indexInvocationCounts[treatmentId]} index invocation(s) and ${freshnessAssessmentCounts[treatmentId]} freshness assessment(s); expected ${expectedIndex} and ${expectedFreshness}.`, treatmentId);
+        }
+    }
+    return null;
+}