prizmkit 1.1.131 → 1.1.135

package/bundled/skills/prizmkit-test/SKILL.md

@@ -15,7 +15,30 @@ Choose project-semantic parameters from the target project: framework, commands,
 
 Fix only the protocol mechanisms needed for safe, replayable evidence: project/evidence/request locators, schema-shaped requests, path confinement, real process execution, complete raw capture, runner-generated chained receipts, hash binding, append-only history, differential isolation/cleanup, and resume invalidation. Read `${SKILL_DIR}/references/trusted-evidence-execution.md` before inventory, execution, differential proof, resume, or replay; it defines the trust boundary and builder commands. Read `${SKILL_DIR}/references/evidence-request-protocol.md` when authoring any request or authoritative JSON record; it defines request ownership, structured N/A, and the schema map.
 
-## Formal Lifecycle Position
+## Canonical Evidence Builder Lifecycle
+
+The Main Agent supplies semantic requests only; it does not author authoritative package records. Initialize and drive one evidence directory through the builder in this order:
+
+```text
+init → capture-change → inventory → prepare-tests → execute/differential → finalize → render-report → validate --attest → resume
+```
+
+Use `${SKILL_DIR}/scripts/build_test_evidence.py` for every lifecycle command:
+
+- `init`: creates the package directories and immutable baseline identity.
+- `capture-change`: captures the complete canonical change, including untracked, deleted, renamed, and copied files; never substitute plain `git diff`. `inventory` then requires its changed-file set to match the capture exactly and rejects stale captures or unaccounted live paths.
+- `inventory`: hashes current source/tests/contracts/lockfiles, rejects category overlap, excludes runtime-only paths, and validates directory roots plus the complete capture-derived changed-file set.
+- `prepare-tests`: discovers repository-native test files from the canonical capture and inventory, generates stable builder-owned test IDs, derives existing/added/modified status, and snapshots only added/modified live test sources.
+- `execute`: runs native project commands and owns `executions.json`, `receipts/`, and `raw/`. For `auto_bind=true`, the builder resolves recognized package-wide commands or explicit file/directory/glob arguments to the prepared tests they cover; ambiguous commands are blocked and must use `test_paths`.
+- `differential`: records executable proof or a mechanically validated `NOT_APPLICABLE` decision only for genuinely new behavior or textual-contract behavior.
+- `finalize`: owns manifest, stage hashes, verdict, generated-test snapshots, and evidence identity.
+- `render-report`: derives `test-report.md`; it is never authoritative.
+- `resume`: preserves prior receipts and refuses to rebind an identity-changing package; create a new package after scope/source identity changes.
+
+`test-plan.json` is the only source of builder-generated test IDs. Execution requests may provide native `test_paths`, `auto_bind=true`, or legacy IDs; the builder resolves paths to IDs before execution and rejects unknown/unbound tests or layer mappings. Assess all five layers explicitly, but set `required=true` only when risk requires it; every omitted layer needs structured N/A evidence. The same binding applies test ↔ behavior ↔ execution ↔ differential proof.
+
+The builder/validator, not the Main Agent, produces or updates `manifest.json`, `executions.json`, `receipts/*`, `validation.json`, `verdict.json`, `test-report.md`, and `source-change.patch`. `validation.json` is produced only by `validate_test_evidence.py --attest`; a package is not a `TEST_PASS` until the second strict validation succeeds.
+
 
 For a formal requirement, `/prizmkit-test` runs after the Main-Agent code-review stage reaches `PASS` and before retrospective:
 
@@ -125,7 +148,7 @@ Coverage metrics are diagnostic signals only and never substitute for this matri
 
 ### 4. TEST_PLAN
 
-Write `test-plan.json`. Select necessary unit, module/component, contract, integration, and code-level E2E tests by risk. Assess the ordered execution layers:
+Write the semantic preparation request under `requests/` and invoke `prepare-tests`; do not hand-author the resulting `test-plan.json`. Provide only repository-native `project_path` values, behavior mappings, selectors/runner hints, and the five layer decisions. The builder derives test IDs, status, snapshots, and hashes from inventory and canonical Git capture. Assess the ordered execution layers:
 
 1. focused;
 2. module/component;
@@ -151,7 +174,7 @@ If a valid test reveals a business/contract defect, do not fix production behavi
 
 ### 7. EXECUTE_PROVE
 
-Run required layers in plan order through `${SKILL_DIR}/scripts/build_test_evidence.py execute`. The model selects project-native argv, cwd, timeout, attempts, concurrency, layer, environment classification, and tool probes in schema-shaped requests. The runner performs the actual process execution and appends complete environment/tool versions, raw stdout/stderr hashes, request hash, runner hash, unique receipt, and receipt-chain binding to `executions.json`. Do not accept caller-authored execution JSON and do not retry until green.
+Run required layers in plan order through `${SKILL_DIR}/scripts/build_test_evidence.py execute`. Use `test_paths` or `auto_bind=true` for new requests; the builder resolves and persists canonical test IDs before the native command runs. The model selects project-native argv, cwd, timeout, attempts, concurrency, layer, environment classification, and tool probes in schema-shaped requests. The runner performs the actual process execution and appends complete environment/tool versions, raw stdout/stderr hashes, request hash, runner hash, unique receipt, and receipt-chain binding to `executions.json`. Do not accept caller-authored execution JSON and do not retry until green.
 
 Differentially prove each added/changed necessary behavior test:
 

package/bundled/skills/prizmkit-test/assets/authoritative-records.schema.json

@@ -183,17 +183,64 @@
           }
         },
         "changed_files": { "$ref": "#/$defs/stringArray" },
-        "module_roots": { "$ref": "#/$defs/stringArray" },
+        "module_roots": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "oneOf": [
+              { "$ref": "#/$defs/path" },
+              {
+                "type": "object",
+                "additionalProperties": false,
+                "required": ["path", "changed_files"],
+                "properties": {
+                  "path": { "$ref": "#/$defs/path" },
+                  "changed_files": { "$ref": "#/$defs/stringArray" }
+                }
+              }
+            ]
+          }
+        },
         "module_root_files": {
           "type": "object",
           "minProperties": 1,
           "additionalProperties": { "$ref": "#/$defs/stringArray" }
         },
+        "module_root_changed_files": {
+          "type": "object",
+          "additionalProperties": { "$ref": "#/$defs/stringArray" }
+        },
         "exclusions": { "type": "array", "items": { "$ref": "#/$defs/path" } },
         "discovery_evidence": { "type": "array", "minItems": 1, "items": { "$ref": "#/$defs/discoveryEvidence" } },
         "plan_inputs": { "type": "object", "minProperties": 1 }
       }
     },
+    "changeCapture": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["capture_format", "baseline_commit", "patch_path", "patch_sha256", "changed_files", "source_tree_sha256"],
+      "properties": {
+        "capture_format": { "const": "prizmkit-canonical-change-v1" },
+        "baseline_commit": { "type": "string", "minLength": 1 },
+        "patch_path": { "$ref": "#/$defs/path" },
+        "patch_sha256": { "$ref": "#/$defs/sha256" },
+        "changed_files": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["path", "status", "old_path"],
+            "properties": {
+              "path": { "$ref": "#/$defs/path" },
+              "status": { "type": "string", "minLength": 1 },
+              "old_path": { "type": ["string", "null"] },
+              "role": { "const": "source" }
+            }
+          }
+        },
+        "source_tree_sha256": { "$ref": "#/$defs/sha256" }
+      }
+    },
     "testPlan": {
       "type": "object",
       "additionalProperties": false,
@@ -225,19 +272,72 @@
             "properties": {
               "id": { "type": "string", "minLength": 1 },
               "behavior_ids": { "$ref": "#/$defs/stringArray" },
+              "change_status": { "enum": ["existing", "added", "modified"] },
               "project_path": { "$ref": "#/$defs/path" },
-              "snapshot_path": { "$ref": "#/$defs/path" },
+              "snapshot_path": { "type": ["string", "null"] },
               "inventory_path": { "$ref": "#/$defs/path" },
-              "layers": { "$ref": "#/$defs/stringArray" }
+              "layers": { "$ref": "#/$defs/stringArray" },
+              "selector": { "type": "string", "minLength": 1 },
+              "runner": { "type": "string", "minLength": 1 }
+            }
+          }
+        }
+      }
+    },
+    "testPreparationRequest": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["request_version", "layers", "tests"],
+      "properties": {
+        "request_version": { "const": "1.0" },
+        "layers": {
+          "type": "array",
+          "minItems": 5,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["name", "required", "not_applicable"],
+            "properties": {
+              "name": { "enum": ["focused", "module-component", "contract-integration", "affected-module-regression", "regression-ring"] },
+              "required": { "type": "boolean" },
+              "not_applicable": { "type": ["object", "null"] }
+            }
+          }
+        },
+        "tests": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["project_path", "behavior_ids", "layers"],
+            "properties": {
+              "project_path": { "$ref": "#/$defs/path" },
+              "behavior_ids": { "$ref": "#/$defs/stringArray" },
+              "layers": { "$ref": "#/$defs/stringArray" },
+              "selector": { "type": "string", "minLength": 1 },
+              "runner": { "type": "string", "minLength": 1 }
             }
           }
         }
       }
     },
+    "testPreparation": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["format", "request_path", "request_sha256", "tests", "changed_test_statuses"],
+      "properties": {
+        "format": { "const": "prizmkit-native-test-preparation-v1" },
+        "request_path": { "$ref": "#/$defs/path" },
+        "request_sha256": { "$ref": "#/$defs/sha256" },
+        "tests": { "type": "array", "minItems": 1, "items": { "type": "object" } },
+        "changed_test_statuses": { "type": "object", "additionalProperties": { "enum": ["added", "modified"] } }
+      }
+    },
     "executionRequest": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["request_version", "purpose", "command", "cwd", "environment", "tool_version_commands", "layer", "test_ids", "external_targets"],
+      "required": ["request_version", "purpose", "command", "cwd", "environment", "tool_version_commands", "layer", "external_targets"],
       "properties": {
         "request_version": { "const": "1.0" },
         "purpose": { "type": "string", "minLength": 1 },
@@ -247,6 +347,8 @@
         "tool_version_commands": { "type": "object" },
         "layer": { "enum": ["focused", "module-component", "contract-integration", "affected-module-regression", "regression-ring", "lightweight"] },
         "test_ids": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+        "test_paths": { "type": "array", "items": { "$ref": "#/$defs/path" } },
+        "auto_bind": { "type": "boolean" },
         "external_targets": { "type": "array", "items": { "$ref": "#/$defs/externalTarget" } },
         "timeout_seconds": { "type": "number", "exclusiveMinimum": 0 },
         "attempt_policy": { "type": "object" },
@@ -272,6 +374,8 @@
         "tool_versions": { "type": "object" },
         "layer": { "enum": ["focused", "module-component", "contract-integration", "affected-module-regression", "regression-ring", "lightweight"] },
         "test_ids": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+        "test_paths": { "type": "array", "items": { "$ref": "#/$defs/path" } },
+        "auto_bind": { "type": "boolean" },
         "external_targets": { "type": "array", "items": { "$ref": "#/$defs/externalTarget" } },
         "exit_code": { "type": "integer" },
         "stdout_path": { "$ref": "#/$defs/path" },
@@ -289,19 +393,47 @@
     },
     "executionLog": { "type": "array", "minItems": 1, "items": { "$ref": "#/$defs/executionReceipt" } },
     "differentialRequest": {
+      "type": "object",
+      "oneOf": [
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["request_version", "behavior_id", "method", "execution_request", "baseline_commit", "current_tree_sha256", "mutation_patch_path", "test_overlay_paths", "expected_failure_signals"],
+          "properties": {
+            "request_version": { "const": "1.0" },
+            "behavior_id": { "type": "string", "minLength": 1 },
+            "method": { "enum": ["baseline", "controlled-mutation"] },
+            "execution_request": { "$ref": "#/$defs/executionRequest" },
+            "baseline_commit": { "type": "string", "minLength": 1 },
+            "current_tree_sha256": { "$ref": "#/$defs/sha256" },
+            "mutation_patch_path": { "type": ["string", "null"] },
+            "test_overlay_paths": { "$ref": "#/$defs/stringArray" },
+            "expected_failure_signals": { "$ref": "#/$defs/stringArray" }
+          }
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["request_version", "behavior_id", "method", "not_applicable"],
+          "properties": {
+            "request_version": { "const": "1.0" },
+            "behavior_id": { "type": "string", "minLength": 1 },
+            "method": { "const": "not-applicable" },
+            "not_applicable": { "$ref": "#/$defs/differentialNotApplicable" }
+          }
+        }
+      ]
+    },
+    "differentialNotApplicable": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["request_version", "behavior_id", "method", "execution_request", "baseline_commit", "current_tree_sha256", "mutation_patch_path", "test_overlay_paths", "expected_failure_signals"],
+      "required": ["reason", "rationale", "evidence", "considered_signals", "conflicts"],
       "properties": {
-        "request_version": { "const": "1.0" },
-        "behavior_id": { "type": "string", "minLength": 1 },
-        "method": { "enum": ["baseline", "controlled-mutation"] },
-        "execution_request": { "$ref": "#/$defs/executionRequest" },
-        "baseline_commit": { "type": "string", "minLength": 1 },
-        "current_tree_sha256": { "$ref": "#/$defs/sha256" },
-        "mutation_patch_path": { "type": ["string", "null"] },
-        "test_overlay_paths": { "$ref": "#/$defs/stringArray" },
-        "expected_failure_signals": { "$ref": "#/$defs/stringArray" }
+        "reason": { "enum": ["new-behavior", "textual-contract"] },
+        "rationale": { "type": "string", "minLength": 16 },
+        "evidence": { "$ref": "#/$defs/stringArray" },
+        "considered_signals": { "$ref": "#/$defs/stringArray" },
+        "conflicts": { "type": "array", "items": { "type": "object" } }
       }
     },
     "differentialProof": {
@@ -375,6 +507,7 @@
         "real_environment_validated": { "const": false },
         "repairs_business_defects": { "const": false },
         "code_evidence_replayable": { "type": "boolean" },
+        "repair_scope": { "enum": ["test-infrastructure", "production", "runtime", "schema", "dependency", "public-interface"] },
         "blockers": { "type": "array", "items": { "type": "string", "minLength": 1 } },
         "reproduced_failures": { "type": "array", "items": { "type": "string", "minLength": 1 } }
       }

package/bundled/skills/prizmkit-test/assets/evidence-manifest.schema.json

@@ -56,7 +56,7 @@
     },
     "files": {
       "type": "array",
-      "minItems": 10,
+      "minItems": 1,
       "items": { "$ref": "#/$defs/file" }
     },
     "final_verdict": { "enum": ["TEST_PASS", "TEST_FAIL", "TEST_BLOCKED"] },

package/bundled/skills/prizmkit-test/assets/evidence-package-template.json

@@ -1,5 +1,17 @@
 {
   "protocol_version": "1.0",
+  "lifecycle_commands": [
+    "init",
+    "capture-change",
+    "inventory",
+    "prepare-tests",
+    "execute",
+    "differential",
+    "finalize",
+    "render-report",
+    "resume"
+  ],
+  "generated_tests_policy": "Only added or modified repository-native tests are snapshotted; existing tests have no generated snapshot.",
   "records": {
     "change_classification": "change-classification.json",
     "scope": "scope.json",
@@ -7,12 +19,15 @@
     "environment": "environment.json",
     "behavior_risk_matrix": "behavior-risk-matrix.json",
     "test_plan": "test-plan.json",
+    "test_preparation": "test-preparation.json",
     "infrastructure_changes": "infrastructure-changes.json",
     "differential_proof": "differential-proof.json",
     "executions": "executions.json",
     "verdict": "verdict.json",
     "validation": "validation.json",
     "source_patch": "source-change.patch",
+    "change_capture": "change-capture.json",
+    "lifecycle": "lifecycle.json",
     "derived_report": "test-report.md"
   },
   "directories": {

package/bundled/skills/prizmkit-test/references/evidence-protocol.md

@@ -23,7 +23,12 @@ Hashes and validator receipts provide byte-level binding and drift detection, no
 
 `source-change.patch` preserves the complete target diff. Snapshot generated/changed tests under `generated-tests/`, contracts under `contracts/`, and raw stdout/stderr under `raw/`. Never replace old execution/output records.
 
-## Ordered State Machine
+## Existing Tests and Package Finalization
+
+The evidence package is an audit of repository behavior, not a request to invent a parallel test suite. Discover and execute the smallest relevant native tests before adding anything. Add, modify, or delete tests only in the target repository. The builder's `prepare-tests` command derives stable test IDs and change status from canonical Git capture, and snapshots only added or modified repository-native tests. `generated-tests/` is an evidence archive, never an execution workspace; it may be empty when existing tests cover the behavior.
+
+The canonical package lifecycle is `init → capture-change → inventory → prepare-tests → execute/differential → finalize → render-report → validate --attest → resume`. Builder commands own `source-change.patch`, native test preparation, receipts, raw outputs, manifest, verdict, and report. The validator alone owns `validation.json`. Inventory must consume a fresh capture and exactly preserve its complete changed-file set. Canonical behavior packages require a schema-valid `test-preparation.json` bound byte-for-byte to the builder-generated `test-plan.json` and its hashed semantic request. Evidence identity is derived from the resolved baseline, canonical patch hash, and scope hash; identity-changing resume creates a new package instead of rewriting the old directory.
+
 
 Run exactly these states in order:
 

package/bundled/skills/prizmkit-test/references/evidence-request-protocol.md

@@ -2,7 +2,14 @@
 
 Load this reference when writing an inventory, execution, differential, resume, or replay request. Validate every authoritative record against `${SKILL_DIR}/assets/authoritative-records.schema.json`; the validator loads the named `$defs` for each file.
 
-## Request Ownership
+## Canonical Lifecycle Ownership
+
+Start every new package with `init`, then run builder-owned `capture-change` before semantic inventory. `capture-change` is the only producer of `source-change.patch`; it records tracked, untracked, deleted, renamed, and copied paths against the resolved baseline. The Main Agent must not create or edit the patch.
+
+Use existing project-native tests first. The Main Agent supplies only semantic test paths, behavior mappings, selectors, runner hints, and layer decisions. Run `prepare-tests` after inventory: it derives stable file/test-unit IDs and existing/added/modified status from canonical capture, snapshots added/modified repository tests, and writes normalized `test-plan.json`. The Main Agent must not hand-author IDs, status, snapshot paths, hashes, or receipt fields. Inventory `changed_files` must exactly match the fresh canonical capture, and every live captured path must be inventoried or explicitly excluded. Execution requests may use `test_paths`, `auto_bind: true`, or legacy IDs; `auto_bind` resolves only recognized package-wide commands or explicit file/directory/glob command scope, while ambiguous commands must provide `test_paths`. The builder records canonical test IDs before running. Every changed native test must be bound, and package-wide commands must not silently hide added or modified tests.
+
+`finalize` creates the manifest, stage dependency hashes, verdict, evidence identity, and deterministic report inputs. `render-report` only renders the derived Markdown view. The validator alone creates `validation.json` during `--attest`; never hand-author a validation attestation or rebind a finalized package after identity inputs change.
+
 
 The model writes project-semantic requests after inspecting manifests, runner configuration, contracts, test conventions, changed files, and module boundaries. The bundled builder owns process execution, raw output, receipts, isolation, tree hashes, and invalidation calculations.
 

package/bundled/skills/prizmkit-test/references/test-generation-steps.md

@@ -2,7 +2,10 @@
 
 Use this reference during `INFRA_READY`, `TEST_BUILD`, and `EXECUTE_PROVE`. The authoritative scope and completeness inputs are `scope.json`, `behavior-risk-matrix.json`, and `test-plan.json`.
 
-## Scope Guard
+## Existing-Test-First Rule
+
+Before creating a test, inspect the repository's native test files, runner configuration, and existing behavior assertions. Execute the smallest relevant existing tests first. Add, modify, or delete a repository-native test only when a concrete behavior gap is identified and recorded in the semantic preparation request. Supply project paths and behavior/layer mappings only; `prepare-tests` derives IDs, status, snapshots, and hashes from the repository and canonical Git capture. An unchanged existing test has no generated snapshot, and `generated-tests/` is never an execution workspace.
+
 
 For `scope=this-change`, changed files locate the affected module; they do not restrict tests to changed lines. Fill observable behavior/risk gaps across the whole affected module and execute its Regression Ring. Unrelated modules remain out of scope unless they are direct callers, consumers, shared contracts, or state dependencies.
 
@@ -29,7 +32,7 @@ For every behavior row:
 1. Read the public interface, contract source, preconditions, inputs/boundaries, outputs, side effects, transitions, and errors.
 2. Inspect existing test assertions—not names—to find proven cells.
 3. Assess all eight risks: functional, boundary, permission, concurrency, idempotency, time, dependency, and consumer.
-4. For every applicable risk, create a distinct test ID and expected execution layer.
+4. For every applicable risk, map one or more builder-generated test units and expected execution layer; do not invent a separate AI-maintained ID for every test function.
 5. For every non-applicable risk, record a concrete rationale tied to this behavior.
 6. Keep unresolved truth or untestable necessary behavior explicit; it blocks rather than becoming guessed expected behavior.
 

package/bundled/skills/prizmkit-test/references/trusted-evidence-execution.md

@@ -41,6 +41,21 @@ Treat evidence as auditable project-controlled provenance, not a defense against
 
 ## Builder Commands
 
+Drive a new package through the canonical lifecycle. Semantic request files remain model-authored; authoritative package records remain tool-owned:
+
+```bash
+python3 ${SKILL_DIR}/scripts/build_test_evidence.py --project-root <root> --evidence-dir <staging> init --baseline <commit>
+python3 ${SKILL_DIR}/scripts/build_test_evidence.py --project-root <root> --evidence-dir <staging> capture-change
+python3 ${SKILL_DIR}/scripts/build_test_evidence.py --project-root <root> --evidence-dir <staging> inventory --request requests/inventory.json
+python3 ${SKILL_DIR}/scripts/build_test_evidence.py --project-root <root> --evidence-dir <staging> execute --request requests/focused.json
+python3 ${SKILL_DIR}/scripts/build_test_evidence.py --project-root <root> --evidence-dir <staging> differential --request requests/differential.json
+python3 ${SKILL_DIR}/scripts/build_test_evidence.py --project-root <root> --evidence-dir <staging> finalize --request requests/finalize.json
+python3 ${SKILL_DIR}/scripts/build_test_evidence.py --project-root <root> --evidence-dir <staging> render-report
+```
+
+`capture-change` includes tracked modifications, untracked files, deletions, renames, and copies. `finalize` owns the manifest, verdict, stage hashes, evidence identity, and generated-test snapshots. The validator is the only producer of `validation.json`.
+
+
 Write requests beneath the evidence directory, then invoke the bundled script:
 
 ```bash

package/bundled/skills/prizmkit-test/references/workflow-state-protocol.md

@@ -157,12 +157,12 @@ Trusted headless execution:
 ```text
 a trusted host explicitly authorizes the current local task commit
 → host injects mode=<host-defined-headless-mode>, owner=<trusted-host-identifier>,
-  local_commit_authorized=true, push_authorized=false
+  local_commit_authorized=true
 → committer verifies gates and commits automatically
-→ no question, wait, or push is permitted
+→ no question or wait is permitted
 ```
 
-A self-declared or otherwise untrusted headless context does not authorize a commit. Push is never implied by either mode.
+A self-declared or otherwise untrusted headless context does not authorize a commit. Remote publication remains a separate host-runtime decision.
 
 ## Recovery