@evomap/evolver-core 2.0.0-beta.19 → 2.0.0-beta.22

package/dist/benchmark/selectionFlatAbstention.js

@@ -0,0 +1,481 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { assessSelectionGuard, engineHealthSelection, } from '../algo/geneSelection.js';
+export const SELECTION_FLAT_ABSTENTION_BENCHMARK_VERSION = 'global-flat-abstention-paired-v1';
+const FULL_COMMIT_RE = /^[0-9a-f]{40}$/;
+const SHA256_RE = /^sha256:[0-9a-f]{64}$/;
+const SAFE_METADATA_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
+const CI95_ALPHA = 0.05;
+function actionForDecision(decision) {
+    if (!decision.selectedGeneId)
+        return { kind: 'innovate' };
+    return {
+        kind: 'reuse',
+        geneId: decision.selectedGeneId,
+        ...(decision.selectedAssetId ? { assetId: decision.selectedAssetId } : {}),
+    };
+}
+function actionsEqual(left, right) {
+    return left.kind === right.kind
+        && (left.kind === 'innovate' || (right.kind === 'reuse'
+            && left.geneId === right.geneId
+            && left.assetId === right.assetId));
+}
+/** Compare production with a benchmark-only global flat-positive abstention counterfactual. */
+export function compareOutsidePlateauFlatSelection(input) {
+    const currentDecision = engineHealthSelection.run({ ...input, selectionGuard: 'enforce' }, { now: 0, cycleId: 'benchmark-global-flat-abstention', rng: () => 0.5 });
+    const currentAction = actionForDecision(currentDecision);
+    const floor = input.floor ?? 0;
+    const eligible = currentDecision.candidates.filter((candidate) => candidate.score > floor);
+    const flatPoolAssessment = assessSelectionGuard(eligible, true);
+    const targeted = input.exploration?.plateau?.active !== true
+        && input.exploration?.driftEnabled !== true
+        && !input.forcedGeneId?.trim()
+        && currentAction.kind === 'reuse'
+        && currentDecision.selectionGuard?.status === 'allowed'
+        && flatPoolAssessment.reason === 'plateau_flat_match';
+    return {
+        targeted,
+        ...(targeted ? { targetReason: 'outside_plateau_flat_positive' } : {}),
+        currentDecision,
+        currentAction,
+        globalFlatAbstainAction: targeted ? { kind: 'innovate' } : currentAction,
+    };
+}
+function assertSafeMetadata(value, field) {
+    if (typeof value !== 'string' || !SAFE_METADATA_RE.test(value)) {
+        throw new Error(`${field} must be a non-sensitive ASCII slug`);
+    }
+}
+function validateExpectedAction(action, field) {
+    if (action?.kind === 'innovate')
+        return;
+    if (action?.kind !== 'reuse' || typeof action.geneId !== 'string' || action.geneId.trim().length === 0) {
+        throw new Error(`${field} must be a valid selection action`);
+    }
+    if (action.assetId !== undefined && (typeof action.assetId !== 'string' || action.assetId.trim().length === 0)) {
+        throw new Error(`${field}.assetId must be non-empty when present`);
+    }
+}
+function sha256(value) {
+    return `sha256:${createHash('sha256').update(value).digest('hex')}`;
+}
+function encodeOwnProperties(value, context) {
+    if (Object.getOwnPropertySymbols(value).length > 0) {
+        throw new Error('task snapshot contains symbol keys');
+    }
+    const descriptors = Object.getOwnPropertyDescriptors(value);
+    return Object.getOwnPropertyNames(value).map((key) => {
+        const descriptor = descriptors[key];
+        if (descriptor.get || descriptor.set)
+            throw new Error('task snapshot contains accessor properties');
+        return `${JSON.stringify(key)}:${canonicalSnapshotValue(descriptor.value, context)}`;
+    }).join(',');
+}
+function canonicalSnapshotValue(value, context = { seen: new Map(), nextId: 0 }) {
+    if (value === null)
+        return 'null';
+    if (value === undefined)
+        return 'undefined';
+    if (typeof value === 'string')
+        return `string:${JSON.stringify(value)}`;
+    if (typeof value === 'boolean')
+        return value ? 'boolean:true' : 'boolean:false';
+    if (typeof value === 'number') {
+        if (!Number.isFinite(value))
+            throw new Error('task snapshot contains a non-finite number');
+        return `number:${Object.is(value, -0) ? '-0' : String(value)}`;
+    }
+    if (typeof value === 'bigint')
+        return `bigint:${value.toString()}`;
+    if (typeof value !== 'object') {
+        throw new Error(`task snapshot contains unsupported ${typeof value} data`);
+    }
+    const previousId = context.seen.get(value);
+    if (previousId !== undefined)
+        return `reference:${previousId}`;
+    const id = context.nextId;
+    context.nextId += 1;
+    context.seen.set(value, id);
+    if (Array.isArray(value)) {
+        return `array#${id}:{${encodeOwnProperties(value, context)}}`;
+    }
+    if (value instanceof Date) {
+        if (Number.isNaN(value.getTime()))
+            throw new Error('task snapshot contains an invalid date');
+        return `date#${id}:${value.toISOString()}:{${encodeOwnProperties(value, context)}}`;
+    }
+    if (value instanceof Map) {
+        const entries = [...value.entries()].map(([key, item]) => (`${canonicalSnapshotValue(key, context)}=>${canonicalSnapshotValue(item, context)}`));
+        return `map#${id}:[${entries.join(',')}]:{${encodeOwnProperties(value, context)}}`;
+    }
+    if (value instanceof Set) {
+        const entries = [...value].map((item) => canonicalSnapshotValue(item, context));
+        return `set#${id}:[${entries.join(',')}]:{${encodeOwnProperties(value, context)}}`;
+    }
+    if (ArrayBuffer.isView(value)) {
+        if (typeof SharedArrayBuffer !== 'undefined' && value.buffer instanceof SharedArrayBuffer) {
+            throw new Error('task snapshot must not contain SharedArrayBuffer-backed views');
+        }
+        return `view#${id}:${value.constructor.name}:${value.byteOffset}:${value.byteLength}:${canonicalSnapshotValue(value.buffer, context)}:{${encodeOwnProperties(value, context)}}`;
+    }
+    if (typeof SharedArrayBuffer !== 'undefined' && value instanceof SharedArrayBuffer) {
+        throw new Error('task snapshot must not contain SharedArrayBuffer');
+    }
+    if (value instanceof ArrayBuffer) {
+        return `array-buffer#${id}:${Buffer.from(value).toString('hex')}:{${encodeOwnProperties(value, context)}}`;
+    }
+    const prototype = Object.getPrototypeOf(value);
+    if (prototype !== Object.prototype && prototype !== null) {
+        throw new Error('task snapshot contains unsupported non-plain object data');
+    }
+    return `object#${id}:{${encodeOwnProperties(value, context)}}`;
+}
+function cloneStructured(value, errorMessage) {
+    try {
+        return structuredClone(value);
+    }
+    catch {
+        throw new Error(errorMessage);
+    }
+}
+/** Compute the digest that the cohort manifest must pre-register for this exact task snapshot. */
+export function computeSelectionFlatTaskFingerprint(task) {
+    const snapshot = cloneStructured(task, 'task snapshot must be structured-cloneable for fingerprinting');
+    return sha256(canonicalSnapshotValue([
+        SELECTION_FLAT_ABSTENTION_BENCHMARK_VERSION,
+        snapshot.id,
+        snapshot.workspaceSnapshotDigest,
+        snapshot.split,
+        snapshot.stratum,
+        snapshot.payload,
+        snapshot.selection,
+        snapshot.expectation,
+    ]));
+}
+function isolationKey(datasetDigest, executionNonce, fingerprint, arm) {
+    return sha256(`${datasetDigest}\0${executionNonce}\0${fingerprint}\0${arm}`);
+}
+function validateSuite(suite) {
+    assertSafeMetadata(suite.name, 'suite.name');
+    assertSafeMetadata(suite.cohort.id, 'cohort.id');
+    assertSafeMetadata(suite.cohort.version, 'cohort.version');
+    assertSafeMetadata(suite.cohort.verifier.id, 'cohort.verifier.id');
+    assertSafeMetadata(suite.cohort.verifier.version, 'cohort.verifier.version');
+    if (typeof suite.cohort.sourceCommit !== 'string'
+        || !FULL_COMMIT_RE.test(suite.cohort.sourceCommit)) {
+        throw new Error('cohort.sourceCommit must be a full lowercase 40-hex commit');
+    }
+    if (suite.cohort.taskFingerprints.length !== suite.tasks.length) {
+        throw new Error('pre-registered cohort does not match the benchmark tasks');
+    }
+    const ids = new Set();
+    const fingerprints = new Set();
+    for (const [index, task] of suite.tasks.entries()) {
+        assertSafeMetadata(task.id, `tasks[${index}].id`);
+        assertSafeMetadata(task.stratum, `tasks[${index}].stratum`);
+        if (task.split !== 'calibration' && task.split !== 'holdout') {
+            throw new Error(`invalid split for task ${task.id}`);
+        }
+        if (typeof task.workspaceSnapshotDigest !== 'string'
+            || !SHA256_RE.test(task.workspaceSnapshotDigest)) {
+            throw new Error(`invalid workspace snapshot digest for task ${task.id}`);
+        }
+        if (task.expectation?.role !== 'target' && task.expectation?.role !== 'control') {
+            throw new Error(`invalid expected role for task ${task.id}`);
+        }
+        validateExpectedAction(task.expectation.currentAction, `task ${task.id} current expectation`);
+        validateExpectedAction(task.expectation.globalFlatAbstainAction, `task ${task.id} global expectation`);
+        if (ids.has(task.id))
+            throw new Error(`duplicate task id: ${task.id}`);
+        if (fingerprints.has(task.taskFingerprint)) {
+            throw new Error(`duplicate task fingerprint: ${task.taskFingerprint}`);
+        }
+        if (typeof task.taskFingerprint !== 'string' || !SHA256_RE.test(task.taskFingerprint)) {
+            throw new Error(`invalid task fingerprint for ${task.id}`);
+        }
+        if (computeSelectionFlatTaskFingerprint(task) !== task.taskFingerprint) {
+            throw new Error(`task content fingerprint mismatch for ${task.id}`);
+        }
+        if (suite.cohort.taskFingerprints[index] !== task.taskFingerprint) {
+            throw new Error(`pre-registered cohort order mismatch at task ${task.id}`);
+        }
+        ids.add(task.id);
+        fingerprints.add(task.taskFingerprint);
+    }
+}
+function cleanOutcome(taskId, expectedVerifier, outcome) {
+    const passed = outcome?.passed;
+    const producedValue = outcome?.producedValue;
+    const unsafe = outcome?.unsafe;
+    const cost = outcome?.cost;
+    const verifier = outcome?.verifier;
+    const verifierId = verifier?.id;
+    const verifierVersion = verifier?.version;
+    const proofSha256 = verifier?.proofSha256;
+    if (typeof passed !== 'boolean'
+        || typeof producedValue !== 'boolean'
+        || typeof unsafe !== 'boolean') {
+        throw new Error(`verifier returned invalid boolean fields for task ${taskId}`);
+    }
+    if (!Number.isFinite(cost) || cost < 0) {
+        throw new Error(`verifier returned invalid cost for task ${taskId}`);
+    }
+    if (verifierId !== expectedVerifier.id || verifierVersion !== expectedVerifier.version) {
+        throw new Error(`verifier identity mismatch for task ${taskId}`);
+    }
+    if (typeof proofSha256 !== 'string' || !SHA256_RE.test(proofSha256)) {
+        throw new Error(`verifier returned invalid proof digest for task ${taskId}`);
+    }
+    // Rebuild the object so adapter-only logs or payloads cannot leak into the persisted report.
+    return {
+        passed,
+        producedValue,
+        unsafe,
+        cost,
+        verifier: {
+            id: verifierId,
+            version: verifierVersion,
+            proofSha256,
+        },
+    };
+}
+function logAdd(left, right) {
+    if (left === Number.NEGATIVE_INFINITY)
+        return right;
+    if (right === Number.NEGATIVE_INFINITY)
+        return left;
+    const high = Math.max(left, right);
+    return high + Math.log(Math.exp(left - high) + Math.exp(right - high));
+}
+/** Exact two-sided McNemar p-value over the discordant pairs. */
+export function exactMcNemarTwoSided(globalOnlyPass, currentOnlyPass) {
+    if (!Number.isSafeInteger(globalOnlyPass) || globalOnlyPass < 0
+        || !Number.isSafeInteger(currentOnlyPass) || currentOnlyPass < 0) {
+        throw new Error('McNemar counts must be non-negative safe integers');
+    }
+    const discordant = globalOnlyPass + currentOnlyPass;
+    if (!Number.isSafeInteger(discordant)) {
+        throw new Error('McNemar discordant total must be a safe integer');
+    }
+    if (discordant === 0)
+        return 1;
+    const tail = Math.min(globalOnlyPass, currentOnlyPass);
+    let logProbability = -discordant * Math.log(2);
+    let logCumulative = logProbability;
+    for (let k = 1; k <= tail; k += 1) {
+        logProbability += Math.log(discordant - k + 1) - Math.log(k);
+        logCumulative = logAdd(logCumulative, logProbability);
+    }
+    return Math.min(1, 2 * Math.exp(logCumulative));
+}
+/** Distribution-free Hoeffding 95% CI for the mean paired success difference (global minus current). */
+export function pairedRiskDifference95(pairs) {
+    if (pairs.length === 0)
+        return { difference: 0, ci95Low: -1, ci95High: 1 };
+    const differences = pairs.map((pair) => Number(pair.globalFlatAbstainPassed) - Number(pair.currentPassed));
+    const difference = differences.reduce((sum, value) => sum + value, 0) / differences.length;
+    // Each paired difference lies in [-1, 1], so Hoeffding remains valid at small n and at all-win boundaries.
+    const margin = Math.sqrt((2 * Math.log(2 / CI95_ALPHA)) / differences.length);
+    return {
+        difference,
+        ci95Low: Math.max(-1, difference - margin),
+        ci95High: Math.min(1, difference + margin),
+    };
+}
+function rate(count, total) {
+    return total === 0 ? 0 : count / total;
+}
+function average(values) {
+    return values.length === 0 ? 0 : values.reduce((sum, value) => sum + value, 0) / values.length;
+}
+function summarizeRows(rows) {
+    const n = rows.length;
+    let bothPass = 0;
+    let bothFail = 0;
+    let globalOnlyPass = 0;
+    let currentOnlyPass = 0;
+    for (const row of rows) {
+        const currentPassed = row.current.outcome.passed;
+        const globalPassed = row.globalFlatAbstain.outcome.passed;
+        if (currentPassed && globalPassed)
+            bothPass += 1;
+        else if (!currentPassed && !globalPassed)
+            bothFail += 1;
+        else if (globalPassed)
+            globalOnlyPass += 1;
+        else
+            currentOnlyPass += 1;
+    }
+    const currentPasses = bothPass + currentOnlyPass;
+    const globalFlatAbstainPasses = bothPass + globalOnlyPass;
+    const currentUnsafeRate = rate(rows.filter((row) => row.current.outcome.unsafe).length, n);
+    const globalUnsafeRate = rate(rows.filter((row) => row.globalFlatAbstain.outcome.unsafe).length, n);
+    const currentAverageCost = average(rows.map((row) => row.current.outcome.cost));
+    const globalAverageCost = average(rows.map((row) => row.globalFlatAbstain.outcome.cost));
+    const risk = pairedRiskDifference95(rows.map((row) => ({
+        currentPassed: row.current.outcome.passed,
+        globalFlatAbstainPassed: row.globalFlatAbstain.outcome.passed,
+    })));
+    return {
+        n,
+        currentPasses,
+        globalFlatAbstainPasses,
+        bothPass,
+        bothFail,
+        globalOnlyPass,
+        currentOnlyPass,
+        currentPassRate: rate(currentPasses, n),
+        globalFlatAbstainPassRate: rate(globalFlatAbstainPasses, n),
+        pairedRiskDifference: risk.difference,
+        ci95Low: risk.ci95Low,
+        ci95High: risk.ci95High,
+        mcnemarPValue: exactMcNemarTwoSided(globalOnlyPass, currentOnlyPass),
+        currentProducedValueRate: rate(rows.filter((row) => row.current.outcome.producedValue).length, n),
+        globalFlatAbstainProducedValueRate: rate(rows.filter((row) => row.globalFlatAbstain.outcome.producedValue).length, n),
+        currentUnsafeRate,
+        globalFlatAbstainUnsafeRate: globalUnsafeRate,
+        unsafeRateDelta: globalUnsafeRate - currentUnsafeRate,
+        currentAverageCost,
+        globalFlatAbstainAverageCost: globalAverageCost,
+        averageCostDelta: globalAverageCost - currentAverageCost,
+        currentInnovateRate: rate(rows.filter((row) => row.current.action === 'innovate').length, n),
+        globalFlatAbstainInnovateRate: rate(rows.filter((row) => row.globalFlatAbstain.action === 'innovate').length, n),
+    };
+}
+function cloneTaskForArm(task) {
+    return cloneStructured(task, `task ${task.id} must be structured-cloneable for isolated arm execution`);
+}
+function cloneSuiteSnapshot(suite) {
+    return cloneStructured(suite, 'benchmark suite must be structured-cloneable before validation');
+}
+function cloneAction(action) {
+    return action.kind === 'innovate'
+        ? { kind: 'innovate' }
+        : {
+            kind: 'reuse',
+            geneId: action.geneId,
+            ...(action.assetId ? { assetId: action.assetId } : {}),
+        };
+}
+function benchmarkDatasetDigest(suite, comparisons) {
+    const material = [
+        SELECTION_FLAT_ABSTENTION_BENCHMARK_VERSION,
+        suite.name,
+        suite.cohort.id,
+        suite.cohort.version,
+        suite.cohort.sourceCommit,
+        suite.cohort.verifier.id,
+        suite.cohort.verifier.version,
+        suite.tasks.map((task, index) => [
+            index,
+            task.taskFingerprint,
+            task.split,
+            task.stratum,
+            comparisons[index]?.targeted === true,
+            comparisons[index]?.currentAction.kind,
+            comparisons[index]?.globalFlatAbstainAction.kind,
+        ]),
+    ];
+    return sha256(JSON.stringify(material));
+}
+function validatePreRegisteredExpectation(task, comparison) {
+    const actualRole = comparison.targeted ? 'target' : 'control';
+    if (task.expectation.role !== actualRole) {
+        throw new Error(`pre-registered role mismatch for task ${task.id}`);
+    }
+    if (!actionsEqual(task.expectation.currentAction, comparison.currentAction)) {
+        throw new Error(`pre-registered current action mismatch for task ${task.id}`);
+    }
+    if (!actionsEqual(task.expectation.globalFlatAbstainAction, comparison.globalFlatAbstainAction)) {
+        throw new Error(`pre-registered global action mismatch for task ${task.id}`);
+    }
+}
+function rowsByStratum(rows) {
+    const result = Object.create(null);
+    const strata = [...new Set(rows.map((row) => row.stratum))].sort();
+    for (const stratum of strata) {
+        result[stratum] = summarizeRows(rows.filter((row) => row.stratum === stratum));
+    }
+    return result;
+}
+/**
+ * Run a pre-registered, full-information paired benchmark. Controls are classification checks only and are never
+ * executed. Target tasks run both arms on separately cloned inputs and caller-owned isolated workspaces.
+ */
+export async function runSelectionFlatAbstentionBenchmark(suite, verifier) {
+    const snapshot = cloneSuiteSnapshot(suite);
+    validateSuite(snapshot);
+    const comparisons = snapshot.tasks.map((task) => compareOutsidePlateauFlatSelection(task.selection));
+    snapshot.tasks.forEach((task, index) => {
+        validatePreRegisteredExpectation(task, comparisons[index]);
+    });
+    const datasetDigest = benchmarkDatasetDigest(snapshot, comparisons);
+    const executionNonce = randomUUID();
+    const rows = [];
+    let targetIndex = 0;
+    for (const [taskIndex, task] of snapshot.tasks.entries()) {
+        const comparison = comparisons[taskIndex];
+        if (!comparison.targeted) {
+            if (!actionsEqual(comparison.currentAction, comparison.globalFlatAbstainAction)) {
+                throw new Error(`control action divergence for task ${task.id}`);
+            }
+            continue;
+        }
+        const armOrder = targetIndex % 2 === 0
+            ? ['current', 'global-flat-abstain']
+            : ['global-flat-abstain', 'current'];
+        targetIndex += 1;
+        const outcomes = new Map();
+        for (const [order, arm] of armOrder.entries()) {
+            const action = arm === 'current'
+                ? comparison.currentAction
+                : comparison.globalFlatAbstainAction;
+            const rawOutcome = await verifier({
+                task: cloneTaskForArm(task),
+                arm,
+                action: cloneAction(action),
+                isolationKey: isolationKey(datasetDigest, executionNonce, task.taskFingerprint, arm),
+                order: order,
+            });
+            outcomes.set(arm, cleanOutcome(task.id, snapshot.cohort.verifier, rawOutcome));
+        }
+        rows.push({
+            taskFingerprint: task.taskFingerprint,
+            split: task.split,
+            stratum: task.stratum,
+            armOrder,
+            current: {
+                action: comparison.currentAction.kind,
+                outcome: outcomes.get('current'),
+            },
+            globalFlatAbstain: {
+                action: comparison.globalFlatAbstainAction.kind,
+                outcome: outcomes.get('global-flat-abstain'),
+            },
+        });
+    }
+    return {
+        benchmarkVersion: SELECTION_FLAT_ABSTENTION_BENCHMARK_VERSION,
+        statisticalMethods: {
+            mcnemar: 'exact-two-sided-binomial',
+            riskDifferenceCi: 'paired-hoeffding-95',
+        },
+        suite: snapshot.name,
+        cohort: {
+            id: snapshot.cohort.id,
+            version: snapshot.cohort.version,
+            sourceCommit: snapshot.cohort.sourceCommit,
+            verifier: { ...snapshot.cohort.verifier },
+            registeredTasks: snapshot.cohort.taskFingerprints.length,
+        },
+        datasetDigest,
+        targetTasks: rows.length,
+        controlTasks: snapshot.tasks.length - rows.length,
+        controlDivergences: 0,
+        rows,
+        overall: summarizeRows(rows),
+        calibration: summarizeRows(rows.filter((row) => row.split === 'calibration')),
+        holdout: summarizeRows(rows.filter((row) => row.split === 'holdout')),
+        strata: rowsByStratum(rows),
+    };
+}

package/dist/bootstrap/envFingerprint.d.ts

@@ -15,6 +15,12 @@ export interface EnvFingerprint {
      * as its own field (e.g. so the Hub can index assets by model / feed the by-model leaderboard).
      */
     model: string;
+    /**
+     * Reported Evolver client version for Hub anti-abuse trust (#555). The owning runtime resolves this from its
+     * own package/build metadata and supplies it explicitly, so a host application's npm environment cannot be
+     * mistaken for the Evolver version. Optional so older callers keep working.
+     */
+    evolver_version?: string;
 }
 export interface EnvCaptureDeps {
     platform?: string;
@@ -24,7 +30,10 @@ export interface EnvCaptureDeps {
     hostname?: string;
     env?: Record<string, string | undefined>;
     isContainer?: () => boolean;
+    /** Explicit Evolver version for fingerprint (Refs #555). */
+    evolverVersion?: string;
 }
+export declare function normalizeEvolverVersion(value: string | undefined): string | undefined;
 /**
  * Resolve the underlying LLM model name powering this evolver node (ported from v1 PR #174). Until now the
  * only source was the explicit EVOLVER_MODEL_NAME, so nodes that never set it published assets with no model

package/dist/bootstrap/envFingerprint.js

@@ -6,6 +6,9 @@ import { hostname as osHostname, release as osRelease } from 'node:os';
 import { existsSync } from 'node:fs';
 import { createHash } from 'node:crypto';
 const sha12 = (s) => createHash('sha256').update(s).digest('hex').slice(0, 12);
+export function normalizeEvolverVersion(value) {
+    return value?.trim().slice(0, 64) || undefined;
+}
 /** Heuristic container detection (Docker / Kubernetes). */
 function detectContainer(env) {
     if (env['KUBERNETES_SERVICE_HOST'])
@@ -50,6 +53,7 @@ export function detectModelName(env = (typeof process !== 'undefined' ? process.
 export function captureEnvFingerprint(deps = {}) {
     const env = deps.env ?? (typeof process !== 'undefined' ? process.env : {});
     const region = (env['EVOLVER_REGION'] ?? '').trim().toLowerCase().slice(0, 5) || undefined;
+    const evolverVersion = normalizeEvolverVersion(deps.evolverVersion);
     return {
         device: sha12(deps.hostname ?? osHostname()),
         node_version: deps.nodeVersion ?? process.version,
@@ -59,6 +63,7 @@ export function captureEnvFingerprint(deps = {}) {
         ...(region ? { region } : {}),
         container: deps.isContainer ? deps.isContainer() : detectContainer(env),
         model: detectModelName(env),
+        ...(evolverVersion ? { evolver_version: evolverVersion } : {}),
     };
 }
 /**

package/dist/bootstrap/index.d.ts

@@ -1,3 +1,4 @@
 export * from './selfEvolve.js';
 export * from './envFingerprint.js';
-export * from './v1EnvCompat.js';
+export * from './v1EnvCompat.js';
+export * from './lifecycleBootstrap.js';

package/dist/bootstrap/index.js

@@ -1,3 +1,4 @@
 export * from './selfEvolve.js';
 export * from './envFingerprint.js';
-export * from './v1EnvCompat.js';
+export * from './v1EnvCompat.js';
+export * from './lifecycleBootstrap.js';

package/dist/bootstrap/lifecycleBootstrap.d.ts

@@ -0,0 +1,111 @@
+import { type FileLockProcessStartIdentity } from '../util/fileLock.js';
+export declare const LIFECYCLE_BOOTSTRAP_MARKER_SCHEMA = "evolver.lifecycle-bootstrap.v1";
+export declare const LIFECYCLE_BOOTSTRAP_LEGACY_BINDING = "legacy-v907";
+export declare const LIFECYCLE_BOOTSTRAP_LEGACY_ENV_FILE_STATE_ROOT_PROOF = "legacy-v907-env-file";
+export declare const LIFECYCLE_BOOTSTRAP_DEADLINE_ENV = "EVOLVER_INTERNAL_BOOTSTRAP_DEADLINE_MS";
+export declare const LIFECYCLE_BOOTSTRAP_TRANSACTION_ENV = "EVOLVER_INTERNAL_BOOTSTRAP_TRANSACTION_ID";
+export declare const LIFECYCLE_BOOTSTRAP_SUCCESS_FILE = "bootstrap.json";
+export declare const LIFECYCLE_BOOTSTRAP_JOURNAL_FILE = "bootstrap-transaction.json";
+export declare const LIFECYCLE_BOOTSTRAP_OWNER_LOCK_FILE = "bootstrap-owner.lock";
+export declare const LIFECYCLE_BOOTSTRAP_READINESS_FILE = "bootstrap-readiness.json";
+export declare const LIFECYCLE_BOOTSTRAP_READINESS_LOCK_FILE = "bootstrap-readiness.lock";
+export declare const LIFECYCLE_BOOTSTRAP_READINESS_SCHEMA = "evolver.lifecycle-bootstrap-readiness.v1";
+export declare const LIFECYCLE_BOOTSTRAP_MANUAL_TRANSITION_FILE = "bootstrap-manual-transition.json";
+export declare const LIFECYCLE_BOOTSTRAP_MANUAL_TRANSITION_SCHEMA = "evolver.lifecycle-bootstrap-manual-transition.v1";
+export declare const MAX_LIFECYCLE_BOOTSTRAP_MANUAL_TRANSITION_BYTES: number;
+export declare const LIFECYCLE_BOOTSTRAP_REGISTRATION_INTENT_FILE = "bootstrap-registration.intent.json";
+export declare const LIFECYCLE_BOOTSTRAP_REGISTRATION_INTENT_TERMINAL_FILE = "bootstrap-registration.intent.terminal";
+export declare const LIFECYCLE_BOOTSTRAP_REGISTRATION_INTENT_CLEARING_FILE = "bootstrap-registration.intent.clearing";
+export declare const LIFECYCLE_BOOTSTRAP_REGISTRATION_INTENT_SCHEMA = "evolver.bootstrap-registration-intent.v1";
+export declare const LIFECYCLE_BOOTSTRAP_REGISTRATION_TOKEN_ENV = "EVOLVER_INTERNAL_BOOTSTRAP_REGISTRATION_TOKEN";
+export declare const MAX_LIFECYCLE_BOOTSTRAP_REGISTRATION_INTENT_BYTES: number;
+export type LifecycleBootstrapTarget = 'launchd' | 'systemd' | 'windows';
+export type LifecycleBootstrapManagerBindingKind = 'transaction' | typeof LIFECYCLE_BOOTSTRAP_LEGACY_BINDING;
+export interface LifecycleBootstrapLegacyStateRootProof {
+    kind: typeof LIFECYCLE_BOOTSTRAP_LEGACY_ENV_FILE_STATE_ROOT_PROOF;
+    envFilePath: string;
+    stateDir: string;
+}
+export interface LifecycleBootstrapMarker {
+    schema: typeof LIFECYCLE_BOOTSTRAP_MARKER_SCHEMA;
+    transactionId: string;
+    bootstrappedAt: string;
+    target: LifecycleBootstrapTarget;
+    service: string;
+    files: string[];
+    managerArtifactPath: string;
+    managerBindingKind?: LifecycleBootstrapManagerBindingKind;
+    artifacts: Array<{
+        path: string;
+        size: number;
+        sha256: string;
+        device?: string;
+        inode?: string;
+    }>;
+    /** Exact legacy companion artifacts retained on disk but never owned by proxy rollback. */
+    preservedArtifacts?: Array<{
+        path: string;
+        size: number;
+        sha256: string;
+        device?: string;
+        inode?: string;
+    }>;
+    /** Exact env-file attestation required by unpinned #907 launchers. */
+    legacyStateRootProof?: LifecycleBootstrapLegacyStateRootProof;
+}
+/** Exact success marker emitted by the pre-transaction first-run bootstrap merged in #907. */
+export interface LegacyLifecycleBootstrapMarker {
+    bootstrappedAt: string;
+    target: LifecycleBootstrapTarget;
+    service: string;
+    files: string[];
+}
+export interface LifecycleBootstrapReadiness {
+    schema: typeof LIFECYCLE_BOOTSTRAP_READINESS_SCHEMA;
+    transactionId: string;
+    pid: number;
+    pidProcessStartIdentity: FileLockProcessStartIdentity;
+    supervisorPid: number;
+    supervisorProcessStartIdentity: FileLockProcessStartIdentity;
+    startedAt: string;
+    ipcUrl: string;
+}
+export interface LifecycleBootstrapManualTransition {
+    schema: typeof LIFECYCLE_BOOTSTRAP_MANUAL_TRANSITION_SCHEMA;
+    transitionId: string;
+    removedTransactionId: string;
+    target: LifecycleBootstrapTarget;
+    service: string;
+    createdAt: string;
+}
+export interface LifecycleBootstrapRegistrationIntentOwner {
+    pid: number;
+    token: string;
+    processStartIdentity: FileLockProcessStartIdentity;
+}
+interface LifecycleBootstrapRegistrationIntentBase {
+    schema: typeof LIFECYCLE_BOOTSTRAP_REGISTRATION_INTENT_SCHEMA;
+    owner: LifecycleBootstrapRegistrationIntentOwner;
+    createdAt: string;
+}
+export type LifecycleBootstrapRegistrationTerminalOutcome = 'committed' | 'rolled_back' | 'no_child' | 'cancelled';
+export type LifecycleBootstrapRegistrationIntent = (LifecycleBootstrapRegistrationIntentBase & {
+    state: 'registering';
+}) | (LifecycleBootstrapRegistrationIntentBase & {
+    state: 'terminal';
+    outcome: LifecycleBootstrapRegistrationTerminalOutcome;
+    terminalAt: string;
+    transactionId?: string;
+});
+export declare function parseLifecycleBootstrapRegistrationToken(value: unknown): string | undefined;
+export declare function parseLifecycleBootstrapManualTransition(value: unknown): LifecycleBootstrapManualTransition | undefined;
+export declare function parseLifecycleBootstrapManualTransitionJson(raw: string): LifecycleBootstrapManualTransition | undefined;
+export declare function parseLifecycleBootstrapRegistrationIntent(value: unknown): LifecycleBootstrapRegistrationIntent | undefined;
+export declare function parseLifecycleBootstrapRegistrationIntentJson(raw: string): LifecycleBootstrapRegistrationIntent | undefined;
+export declare function parseLifecycleBootstrapMarker(value: unknown): LifecycleBootstrapMarker | undefined;
+export declare function parseLegacyLifecycleBootstrapMarker(value: unknown): LegacyLifecycleBootstrapMarker | undefined;
+export declare function parseLegacyLifecycleBootstrapMarkerJson(raw: string): LegacyLifecycleBootstrapMarker | undefined;
+export declare function parseLifecycleBootstrapMarkerJson(raw: string): LifecycleBootstrapMarker | undefined;
+export declare function parseLifecycleBootstrapReadiness(value: unknown): LifecycleBootstrapReadiness | undefined;
+export declare function parseLifecycleBootstrapReadinessJson(raw: string): LifecycleBootstrapReadiness | undefined;
+export {};