@evomap/evolver-core 2.0.0-beta.2 → 2.0.0-beta.22

package/dist/bootstrap/v1EnvCompat.js

@@ -0,0 +1,303 @@
+/**
+ * V1 → V2 environment variable compatibility layer (#698).
+ *
+ * Evolver V1 used several env var names that are no longer recognized by V2
+ * resolvers. When operators upgrade from V1 to V2 without updating their env
+ * files, these legacy names silently do nothing. This module detects the
+ * presence of deprecated V1 env vars and emits structured warnings so
+ * operators know which knobs to migrate.
+ *
+ * ## Migration map
+ *
+ * | V1 name | V2 equivalent | Notes |
+ * |---|---|---|
+ * | `OPENCLAW_WORKSPACE` | *(manual)* | Partial V2 support does not preserve V1 workspace and bridge semantics |
+ * | `EVOLVER_NO_PARENT_GIT` | *(none)* | V2 uses `EVOLVER_REPO_ROOT` or nearest Git root |
+ * | `EVOLVER_VERBOSE` | *(none)* | V2 has no global switch; opt in to feature-specific diagnostics manually |
+ * | `EVOLVER_OPENAI_COMPATIBLE_BASE_URLS` | *(manual)* | Defensive compatibility spelling; canonical V1 used the EVOMAP-prefixed key |
+ * | `EVOMAP_OPENAI_COMPATIBLE_BASE_URLS` | *(manual)* | Canonical V1 compatible-origin allowlist; selected base and credential were separate |
+ * | `EVOLVER_AUTO_ISSUE` | *(none)* | V2 creates local drafts; submit requires explicit approval-gated flow |
+ * | `EVOLVER_ROLLBACK_MODE` | *(none)* | V2 uses worktree/snapshot/recovery policy |
+ * | `WORKER_ENABLED` | *(none)* | No merchant-worker resolver in V2 |
+ * | `WORKER_DOMAINS` | *(none)* | No merchant-worker resolver in V2 |
+ * | `WORKER_MAX_LOAD` | *(none)* | No merchant-worker resolver in V2 |
+ * | `EVOLVER_MEMORY_GRAPH_AUTO_ROTATE` | *(none)* | V2 LocalMemoryGraph always performs bounded maintenance |
+ * | `EVOLVER_MEMORY_GRAPH_MAX_SIZE_MB` | *(none)* | V2 LocalMemoryGraph uses a fixed 4 MiB active-file limit |
+ * | `EVOLVER_MEMORY_GRAPH_RETENTION_COUNT` | *(none)* | V2 LocalMemoryGraph retains three archives by default |
+ * | `GITHUB_TOKEN` | `GITHUB_TOKEN` | Already supported by V2 issue reporter and PR tooling |
+ *
+ * GITHUB_TOKEN is NOT deprecated — it's actively used. We only note its
+ * presence for observability.
+ */
+/**
+ * The canonical table of V1 → V2 env var deprecations.
+ *
+ * Order matters for deterministic output; the scan iterates this list
+ * and checks each entry against the provided `env` object.
+ */
+export const V1_DEPRECATION_TABLE = [
+    {
+        v1Name: 'OPENCLAW_WORKSPACE',
+        v2Equivalent: null,
+        migrationAction: 'manual',
+        guidance: 'OPENCLAW_WORKSPACE is still read directly by the pending-signals resolver. ' +
+            'Do not copy it verbatim: identify the Git repo root before setting EVOLVER_REPO_ROOT, ' +
+            'and migrate V1 bridge behavior separately.',
+    },
+    {
+        v1Name: 'EVOLVER_NO_PARENT_GIT',
+        v2Equivalent: null,
+        migrationAction: 'remove',
+        guidance: 'V2 uses EVOLVER_REPO_ROOT or the nearest Git root for workspace detection. ' +
+            'Prefer EVOLVER_REPO_ROOT; EVOLVER_NO_PARENT_GIT has no V2 effect.',
+    },
+    {
+        v1Name: 'EVOLVER_VERBOSE',
+        v2Equivalent: null,
+        migrationAction: 'remove',
+        guidance: 'V2 has no global verbose switch. Remove this variable and opt in to a ' +
+            'feature-specific flag such as EVOLVER_HOOK_VERBOSE=1 only when hook diagnostics are needed.',
+    },
+    {
+        v1Name: 'EVOLVER_OPENAI_COMPATIBLE_BASE_URLS',
+        v2Equivalent: null,
+        migrationAction: 'manual',
+        guidance: 'This compatibility spelling was not resolved by the canonical V1 runtime, but it is tracked defensively. ' +
+            'V2 has no multi-base or arbitrary OpenAI-compatible resolver. Review the workload before cutover. ' +
+            'While either legacy list key remains set, configure the exact canonical pair EVOLVER_LLM_OPENAI_BASE_URL ' +
+            'and EVOLVER_LLM_OPENAI_API_KEY for one official https://*.api.openai.com/v1 endpoint. ' +
+            'LiteLLM, OpenRouter, Azure OpenAI, MiniMax, DeepSeek, Moonshot, and custom endpoints are not drop-in routes; ' +
+            'do not copy their credentials into the V2 OpenAI route.',
+    },
+    {
+        v1Name: 'EVOMAP_OPENAI_COMPATIBLE_BASE_URLS',
+        v2Equivalent: null,
+        migrationAction: 'manual',
+        guidance: 'Canonical V1 treated this comma-separated value as an allowed-origin list; EVOMAP_OPENAI_BASE_URL still selected one ' +
+            'endpoint and EVOMAP_OPENAI_API_KEY or OPENAI_API_KEY supplied its credential. V2 requires a workload-by-workload review ' +
+            'and has no automatic mapping. While the legacy list remains set, only the exact canonical pair ' +
+            'EVOLVER_LLM_OPENAI_BASE_URL and EVOLVER_LLM_OPENAI_API_KEY acknowledges migration; otherwise keep the incompatible ' +
+            'workload outside the V2 OpenAI route.',
+    },
+    {
+        v1Name: 'EVOLVER_AUTO_ISSUE',
+        v2Equivalent: null,
+        migrationAction: 'remove',
+        guidance: 'V2 does not auto-submit issues. It creates local drafts and requires ' +
+            'explicit approval-gated submission via `evolver issue-report submit`.',
+    },
+    {
+        v1Name: 'EVOLVER_ROLLBACK_MODE',
+        v2Equivalent: null,
+        migrationAction: 'remove',
+        guidance: 'V2 uses worktree, snapshot, and recovery policy instead of legacy hard-reset. ' +
+            'Remove this variable; it has no effect.',
+    },
+    {
+        v1Name: 'WORKER_ENABLED',
+        v2Equivalent: null,
+        migrationAction: 'remove',
+        guidance: 'V2 has no merchant-worker resolver. Remove this variable; it has no effect.',
+    },
+    {
+        v1Name: 'WORKER_DOMAINS',
+        v2Equivalent: null,
+        migrationAction: 'remove',
+        guidance: 'V2 has no merchant-worker resolver. Remove this variable; it has no effect.',
+    },
+    {
+        v1Name: 'WORKER_MAX_LOAD',
+        v2Equivalent: null,
+        migrationAction: 'remove',
+        guidance: 'V2 has no merchant-worker resolver. Remove this variable; it has no effect.',
+    },
+    {
+        v1Name: 'EVOLVER_MEMORY_GRAPH_AUTO_ROTATE',
+        v2Equivalent: null,
+        migrationAction: 'remove',
+        guidance: 'V2 LocalMemoryGraph always rotates and compacts automatically at its bounded defaults. ' +
+            'There is no environment override; remove this variable.',
+    },
+    {
+        v1Name: 'EVOLVER_MEMORY_GRAPH_MAX_SIZE_MB',
+        v2Equivalent: null,
+        migrationAction: 'remove',
+        guidance: 'V2 LocalMemoryGraph uses a fixed 4 MiB active-file limit before rotation and compaction. ' +
+            'There is no environment override; remove this variable.',
+    },
+    {
+        v1Name: 'EVOLVER_MEMORY_GRAPH_RETENTION_COUNT',
+        v2Equivalent: null,
+        migrationAction: 'remove',
+        guidance: 'V2 LocalMemoryGraph retains three archives by default and prunes older archives automatically. ' +
+            'There is no environment override; remove this variable.',
+    },
+    {
+        v1Name: 'EVOLVER_ATP',
+        v2Equivalent: null,
+        migrationAction: 'manual',
+        guidance: 'V1 auto/on/off controlled merchant/provider lifecycle, which has no one-to-one V2 resolver. '
+            + 'Review the missing merchant workflow before removing this key. Do not map it to `evolver atp enable` '
+            + 'or EVOLVER_ATP_AUTOBUY; those controls authorize autonomous buyer spending. If V1 off meant no '
+            + 'provider or delivery activity, set EVOLVER_ATP_AUTODELIVER=off explicitly as hardening, not as an equivalent mapping.',
+    },
+    {
+        v1Name: 'EVOLVER_SESSION_SOURCE',
+        v2Equivalent: null,
+        migrationAction: 'manual',
+        guidance: 'V1 auto/cursor/openclaw/merge selected session collectors, which has no one-to-one V2 resolver. '
+            + 'Review the workload before removing this key. Supported trajectory export requires explicit runtime '
+            + 'discovery or transcript-directory controls; setting another aggregate key does not restore OpenClaw collection.',
+    },
+];
+/**
+ * Scan the provided environment for deprecated V1 env vars and return
+ * structured results. This function is purely read-only and never mutates
+ * the `env` object.
+ *
+ * @param env  The environment to scan (defaults to `process.env`).
+ * @returns    Structured scan results including detected deprecations.
+ */
+export function scanV1EnvCompat(env = typeof process !== 'undefined' ? process.env : {}) {
+    const detected = [];
+    for (const entry of V1_DEPRECATION_TABLE) {
+        const value = env[entry.v1Name];
+        if (value !== undefined && value.trim() !== '') {
+            detected.push(entry);
+        }
+    }
+    const githubTokenPresent = (env['GITHUB_TOKEN'] !== undefined && env['GITHUB_TOKEN'].trim() !== '') ||
+        (env['GH_TOKEN'] !== undefined && env['GH_TOKEN'].trim() !== '');
+    return { detected, githubTokenPresent };
+}
+/** Resolve the migration action while preserving compatibility with pre-action table entries. */
+export function resolveV1EnvMigrationAction(entry) {
+    return entry.migrationAction ?? (entry.v2Equivalent ? 'map' : 'remove');
+}
+/**
+ * Emit deprecation warnings to the provided logger for all detected
+ * deprecated V1 env vars. This is the primary integration point for
+ * entrypoints that want human-readable console output.
+ *
+ * @param result  The scan result from `scanV1EnvCompat`.
+ * @param warn    Logger function (defaults to `console.warn`).
+ */
+export function emitV1DeprecationWarnings(result, warn = (msg) => console.warn(msg)) {
+    for (const dep of result.detected) {
+        const action = resolveV1EnvMigrationAction(dep);
+        const v2Hint = action === 'map' && dep.v2Equivalent
+            ? ` Use ${dep.v2Equivalent} instead.`
+            : '';
+        const lead = action === 'manual'
+            ? `Deprecated env var ${dep.v1Name} is set and requires manual migration.`
+            : action === 'map'
+                ? `Deprecated env var ${dep.v1Name} is set.`
+                : `Deprecated env var ${dep.v1Name} is set but has no V2 resolver.`;
+        warn(`[evolver:v1-compat] ${lead}${v2Hint} ${dep.guidance}`);
+    }
+    // githubTokenPresent is intentionally not warned: GITHUB_TOKEN/GH_TOKEN remain
+    // supported by V2 issue reporter / PR tooling. Flag retained for callers/tests.
+}
+/**
+ * Convenience function: scan + emit in one call. Intended for early
+ * bootstrap in CLI/proxy/MCP entrypoints.
+ *
+ * @param env  The environment to scan.
+ * @param warn Logger function.
+ * @returns    The scan result (useful for programmatic inspection).
+ */
+export function checkV1EnvCompat(env = typeof process !== 'undefined' ? process.env : {}, warn) {
+    const result = scanV1EnvCompat(env);
+    if (result.detected.length > 0) {
+        emitV1DeprecationWarnings(result, warn);
+    }
+    return result;
+}
+const V1_IMPLICIT_DEFAULT_CAVEATS = [
+    'V1 treated unset EVOLVER_ATP and EVOLVER_SESSION_SOURCE as auto. A clean key scan therefore does not prove '
+        + 'merchant/provider or session-collection workflow parity; audit both before cutover.',
+];
+/**
+ * Build an offline V1→V2 env translation report.
+ * Does not write files; callers decide how to present or apply suggestions.
+ * Raw values are retained only as v2Value for mappable non-secret keys.
+ * GITHUB_TOKEN and GH_TOKEN are reported as keep without retaining their values.
+ */
+export function translateV1Env(env = typeof process !== 'undefined' ? process.env : {}) {
+    const suggestions = [];
+    for (const entry of V1_DEPRECATION_TABLE) {
+        const raw = env[entry.v1Name];
+        if (raw === undefined || raw.trim() === '')
+            continue;
+        const action = resolveV1EnvMigrationAction(entry);
+        if (action === 'map') {
+            if (!entry.v2Equivalent)
+                throw new Error(`missing V2 equivalent for ${entry.v1Name}`);
+            suggestions.push({
+                v1Name: entry.v1Name,
+                action: 'map',
+                v2Name: entry.v2Equivalent,
+                v2Value: raw,
+                guidance: entry.guidance,
+            });
+        }
+        else {
+            suggestions.push({
+                v1Name: entry.v1Name,
+                action,
+                guidance: entry.guidance,
+            });
+        }
+    }
+    const githubTokenPresent = (env['GITHUB_TOKEN'] !== undefined && env['GITHUB_TOKEN'].trim() !== '') ||
+        (env['GH_TOKEN'] !== undefined && env['GH_TOKEN'].trim() !== '');
+    if (githubTokenPresent) {
+        const key = env['GITHUB_TOKEN']?.trim() ? 'GITHUB_TOKEN' : 'GH_TOKEN';
+        suggestions.push({
+            v1Name: key,
+            action: 'keep',
+            v2Name: key,
+            guidance: 'GITHUB_TOKEN/GH_TOKEN remain valid for issue submit and gh-based PR tooling. ' +
+                'Prefer GH_TOKEN when using the GitHub CLI.',
+        });
+    }
+    return {
+        suggestions,
+        detectedCount: suggestions.filter((s) => s.action !== 'keep').length,
+        mappableCount: suggestions.filter((s) => s.action === 'map').length,
+        manualCount: suggestions.filter((s) => s.action === 'manual').length,
+        removableCount: suggestions.filter((s) => s.action === 'remove').length,
+        githubTokenPresent,
+        caveats: V1_IMPLICIT_DEFAULT_CAVEATS,
+    };
+}
+/** Human-readable report (never prints secret-looking values; only key names + actions). */
+export function formatV1EnvTranslationReport(report) {
+    const lines = [
+        'V1 → V2 env translation (offline, no writes):',
+        `  detected_deprecated=${report.detectedCount} map=${report.mappableCount} manual=${report.manualCount} remove=${report.removableCount} github_token=${report.githubTokenPresent ? 'present' : 'absent'}`,
+    ];
+    for (const caveat of report.caveats ?? [])
+        lines.push(`  caveat: ${caveat}`);
+    if (report.suggestions.length === 0) {
+        lines.push('  (no explicit V1-only knobs detected)');
+        return `${lines.join('\n')}\n`;
+    }
+    for (const s of report.suggestions) {
+        if (s.action === 'map') {
+            lines.push(`  map  ${s.v1Name} → ${s.v2Name}`);
+        }
+        else if (s.action === 'manual') {
+            lines.push(`  review ${s.v1Name} (manual migration required)`);
+        }
+        else if (s.action === 'remove') {
+            lines.push(`  drop ${s.v1Name} (no V2 resolver)`);
+        }
+        else {
+            lines.push(`  keep ${s.v1Name} (still valid in V2)`);
+        }
+        lines.push(`       ${s.guidance}`);
+    }
+    lines.push('  See docs/migration-guide.md and docs/config-env.md § V1 变量不再是 V2 的有效配置.');
+    return `${lines.join('\n')}\n`;
+}

package/dist/events/eventArchive.d.ts

@@ -61,5 +61,7 @@ export declare function rootEventArchiveSegmentName(firstSeq: number, lastSeq: n
 export declare function planRootEventArchive(opts: RootEventArchiveOptions): RootEventArchivePlan;
 export declare function archiveRootEvents(opts: RootEventArchiveOptions): RootEventArchiveResult;
 export declare function readRootEventHistory(path: string, archiveDir?: string): RootEvent[];
+/** Strict replay for control-plane decisions that must fail closed on partial or conflicting history. */
+export declare function readRootEventHistoryStrict(path: string): RootEvent[];
 export declare function validateRootEventHistory(path: string): void;
 export declare function inspectRootEventArchive(path: string): RootEventArchiveStats;

package/dist/events/eventArchive.js

@@ -131,6 +131,9 @@ export function archiveRootEvents(opts) {
     }
 }
 export function readRootEventHistory(path, archiveDir = rootEventArchiveDir(path)) {
+    // Snapshot active first. Writers publish archive segments before replacing active, so this prevents a reader
+    // from combining an old archive inventory with the new active tail and temporarily dropping the rotated prefix.
+    const active = readEventsLenient(path);
     const bySeq = new Map();
     for (const file of archiveSegmentFiles(archiveDir)) {
         for (const event of readEventsLenient(join(archiveDir, file))) {
@@ -143,13 +146,20 @@ export function readRootEventHistory(path, archiveDir = rootEventArchiveDir(path
     }
     // Preserve the pre-archive fail-soft behavior for routine commands. The active log is the current writer
     // source, so it deterministically wins an active/archive conflict without crashing status/report readers.
-    for (const event of readEventsLenient(path))
+    for (const event of active)
         bySeq.set(event.seq, event);
     return [...bySeq.values()].sort((a, b) => a.seq - b.seq);
 }
-export function validateRootEventHistory(path) {
+/** Strict replay for control-plane decisions that must fail closed on partial or conflicting history. */
+export function readRootEventHistoryStrict(path) {
     const active = readActiveStrict(path);
-    readValidatedArchive(path, active);
+    const bySeq = readValidatedArchive(path, active);
+    for (const line of active)
+        bySeq.set(line.event.seq, line.event);
+    return [...bySeq.values()].sort((left, right) => left.seq - right.seq);
+}
+export function validateRootEventHistory(path) {
+    void readRootEventHistoryStrict(path);
 }
 export function inspectRootEventArchive(path) {
     const archiveDir = rootEventArchiveDir(path);

package/dist/events/eventSchema.d.ts

@@ -81,6 +81,11 @@ export declare const rootEvent: z.ZodObject<{
     }>>;
 }, "strip", z.ZodTypeAny, {
     type: string;
+    actor: {
+        kind: "machine" | "human";
+        id?: string | undefined;
+    };
+    schemaVersion: string;
     ts: string;
     human: {
         severity: "warn" | "info" | "notice" | "error";
@@ -92,12 +97,7 @@ export declare const rootEvent: z.ZodObject<{
     };
     seq: number;
     eventId: string;
-    schemaVersion: string;
     replayability: "deterministic" | "stochastic_recorded" | "stochastic_unreproducible";
-    actor: {
-        kind: "machine" | "human";
-        id?: string | undefined;
-    };
     payload?: unknown;
 }, {
     type: string;
@@ -113,12 +113,12 @@ export declare const rootEvent: z.ZodObject<{
     seq: number;
     eventId: string;
     payload?: unknown;
-    schemaVersion?: string | undefined;
-    replayability?: "deterministic" | "stochastic_recorded" | "stochastic_unreproducible" | undefined;
     actor?: {
         kind?: "machine" | "human" | undefined;
         id?: string | undefined;
     } | undefined;
+    schemaVersion?: string | undefined;
+    replayability?: "deterministic" | "stochastic_recorded" | "stochastic_unreproducible" | undefined;
 }>;
 export type RootEvent = z.infer<typeof rootEvent>;
 /** append 入参: seq/eventId/ts 由 store 生成. */

package/dist/events/eventStore.d.ts

@@ -22,6 +22,8 @@ export declare class EventStore {
     private appendLocked;
     /** 读全部事件 (跳过尾部半行/损坏行). */
     readAll(): RootEvent[];
+    /** Fail-closed replay for decision policies that cannot safely consume a partial history. */
+    readAllStrict(): RootEvent[];
     iterate(fromSeq?: number): Generator<RootEvent>;
     tail(n?: number): RootEvent[];
     /** 截断尾部半行 (崩溃恢复). */

package/dist/events/eventStore.js

@@ -2,7 +2,7 @@ import { openSync, writeSync, fsyncSync, closeSync, statSync, readSync, mkdirSyn
 import { dirname } from 'node:path';
 import { monotonicFactory } from 'ulid';
 import { acquireLock, releaseLock } from '../util/fileLock.js';
-import { readRootEventHistory } from './eventArchive.js';
+import { readRootEventHistory, readRootEventHistoryStrict } from './eventArchive.js';
 // Monotonic ULIDs: plain ulid() randomizes the low 80 bits, so two ids minted in the SAME millisecond can sort
 // out of order — the event log wants time-sortable eventIds (and a flaky CI test proved it). The monotonic
 // factory increments within a millisecond, guaranteeing each successive eventId is strictly greater.
@@ -76,6 +76,10 @@ export class EventStore {
     readAll() {
         return readRootEventHistory(this.path);
     }
+    /** Fail-closed replay for decision policies that cannot safely consume a partial history. */
+    readAllStrict() {
+        return readRootEventHistoryStrict(this.path);
+    }
     *iterate(fromSeq = 0) {
         for (const e of this.readAll())
             if (e.seq >= fromSeq)

package/dist/events/ingest.d.ts

@@ -2,7 +2,7 @@ import { EventStore, type EventStoreOptions } from './eventStore.js';
 import type { RawEvent, RootEvent } from './eventSchema.js';
 import type { EventSink } from './sink.js';
 /** 已知事件类型 (军杰 §9; 可 registerEventType 扩展). */
-export declare const EVENT_TYPES: readonly ["cycle.started", "cycle.signals_collected", "cycle.solidified", "cycle.failed", "cycle.aborted", "cycle.heartbeat", "cycle.consumed", "decision.gene_selected", "decision.triggered", "decision.suppressed", "personality.selected", "personality.risk_gated", "personality.mutated", "personality.stats_updated", "personality.pivoted", "signals.extracted", "mutation.built", "capsule.produced", "evolution_event.projected", "observer.quarantined", "observer.dead_letter", "actor.human.nudge", "actor.human.intervene", "actor.human.teach", "actor.human.observe", "actor.human.review.approve", "actor.human.review.reject", "gene.distilled", "gene.distill_shadowed", "anti_gene.distilled", "anti_gene.distill_shadowed", "anti_gene.benchmark_result", "anti_gene.rollout_result", "reflection.recorded", "material.batch_ready", "value.reuse_hit", "value.inject", "value.reuse_outcome", "value.recall"];
+export declare const EVENT_TYPES: readonly ["cycle.started", "cycle.signals_collected", "cycle.solidified", "cycle.failed", "cycle.aborted", "cycle.heartbeat", "cycle.consumed", "decision.gene_selected", "decision.triggered", "decision.suppressed", "personality.selected", "personality.risk_gated", "personality.mutated", "personality.stats_updated", "personality.pivoted", "signals.extracted", "mutation.built", "capsule.produced", "evolution_event.projected", "observer.quarantined", "observer.dead_letter", "actor.human.nudge", "actor.human.intervene", "actor.human.teach", "actor.human.observe", "actor.human.review.approve", "actor.human.review.reject", "actor.human.trust.promote", "actor.human.trust.revoke", "actor.human.sidecar.recover", "gene.distilled", "gene.distill_shadowed", "anti_gene.distilled", "anti_gene.distill_shadowed", "anti_gene.benchmark_result", "anti_gene.rollout_result", "reflection.recorded", "material.batch_ready", "value.reuse_hit", "value.inject", "value.reuse_outcome", "value.recall", "execution.binding.created", "execution.started", "execution.decision", "execution.terminal", "execution.recovered", "governance.projection.revoked", "governance.projection.reinstated"];
 export type EventType = (typeof EVENT_TYPES)[number];
 export declare function registerEventType(t: string): void;
 export declare function isKnownEventType(t: string): boolean;
@@ -25,6 +25,7 @@ export declare class Ingestor {
     constructor(opts: IngestorOptions);
     ingest(raw: RawEvent): Promise<RootEvent>;
     readAll(): RootEvent[];
+    readAllStrict(): RootEvent[];
     iterate(fromSeq?: number): Generator<RootEvent>;
     tail(n?: number): RootEvent[];
     recover(): {

package/dist/events/ingest.js

@@ -1,4 +1,6 @@
+import { dirname, join } from 'node:path';
 import { EventStore } from './eventStore.js';
+import { createIssueDraftForEventBestEffort } from '../issueReporter/index.js';
 /** 已知事件类型 (军杰 §9; 可 registerEventType 扩展). */
 export const EVENT_TYPES = [
     'cycle.started', 'cycle.signals_collected', 'cycle.solidified', 'cycle.failed',
@@ -10,12 +12,19 @@ export const EVENT_TYPES = [
     'observer.quarantined', 'observer.dead_letter',
     'actor.human.nudge', 'actor.human.intervene', 'actor.human.teach', 'actor.human.observe',
     'actor.human.review.approve', 'actor.human.review.reject',
+    'actor.human.trust.promote', 'actor.human.trust.revoke',
+    'actor.human.sidecar.recover',
     'gene.distilled', 'gene.distill_shadowed',
     'anti_gene.distilled', 'anti_gene.distill_shadowed',
     'anti_gene.benchmark_result', 'anti_gene.rollout_result',
     'reflection.recorded',
     'material.batch_ready',
     'value.reuse_hit', 'value.inject', 'value.reuse_outcome', 'value.recall',
+    'execution.binding.created', 'execution.started', 'execution.decision', 'execution.terminal', 'execution.recovered',
+    // K_auto EvidenceProjection: coordinate-level partial revocation over (version, claim, scope, runtime,
+    // verifier). A revoked event distrusts one (coordinate, value) pair; a reinstated event withdraws it. The
+    // authoritative root-event stream is the single source of truth (see algo/kautoProjection.projectRevocations).
+    'governance.projection.revoked', 'governance.projection.reinstated',
 ];
 const knownTypes = new Set(EVENT_TYPES);
 export function registerEventType(t) { knownTypes.add(t); }
@@ -49,11 +58,17 @@ export class Ingestor {
         if (raw.actor?.kind === 'human' && !raw.actor.id)
             throw new IngestValidationError('actor.kind=human 必带 actor.id (审计, 军杰 §9.7)');
         const evt = await this.store.append(raw);
+        createIssueDraftForEventBestEffort(evt, {
+            rootDir: join(dirname(this.store.path), 'issue-reporter'),
+            workspaceScope: process.cwd(),
+            env: process.env,
+        });
         this.sink?.dispatch(evt);
         return evt;
     }
     // 读 passthrough (写只能经 ingest)
     readAll() { return this.store.readAll(); }
+    readAllStrict() { return this.store.readAllStrict(); }
     iterate(fromSeq = 0) { return this.store.iterate(fromSeq); }
     tail(n = 1) { return this.store.tail(n); }
     recover() { return this.store.recover(); }

package/dist/events/paths.d.ts

@@ -1,22 +1,24 @@
 /** ~/.evomap, 可 EVOLVER_HOME/EVOMAP_HOME 覆盖. */
-export declare function evomapHome(): string;
-export declare function rootEventsPath(): string;
-export declare function mvDir(): string;
+export declare function evomapHome(env?: Readonly<Record<string, string | undefined>>): string;
+export declare function rootEventsPath(env?: Readonly<Record<string, string | undefined>>): string;
+export declare function mvDir(env?: Readonly<Record<string, string | undefined>>): string;
 /** 可进化人格模型持久化文件 (五维向量 + 各键统计 + 变更历史). v1 personality_state.json 的 v2 落点. */
-export declare function personalityStatePath(): string;
-export declare function assetsDir(): string;
+export declare function personalityStatePath(env?: Readonly<Record<string, string | undefined>>): string;
+export declare function assetsDir(env?: Readonly<Record<string, string | undefined>>): string;
 /** M1 raw-material substrate (append-only jsonl consumed by the cycle). */
-export declare function materialDir(): string;
+export declare function materialDir(env?: Readonly<Record<string, string | undefined>>): string;
 /** MaterialStore backing file. */
-export declare function materialStorePath(): string;
+export declare function materialStorePath(env?: Readonly<Record<string, string | undefined>>): string;
 /** Per-source watermark cursor used to make re-ingest idempotent (file-level dedup). */
-export declare function materialWatermarkPath(): string;
+export declare function materialWatermarkPath(env?: Readonly<Record<string, string | undefined>>): string;
 /** Proxy LLM-trace day-files dir (`llm-trace-YYYYMMDD.jsonl`), the route-savings source for the value ledger.
  *  Mirrors the proxy's EVOLVER_LLM_TRACE_DIR default so the outreach layer reads what the proxy wrote. */
-export declare function tracesDir(): string;
+export declare function tracesDir(env?: Readonly<Record<string, string | undefined>>): string;
 /** Hub-asset audit trail (`asset_call_log.jsonl`): one JSONL line per hub-asset interaction (search hit/miss,
  *  reuse/reference, publish, review). Written best-effort by AssetCallLog; the desktop's RecallHistory / 召回历程
  *  reads it. Defaults to the evomap home root, beside assets/ + evolution/.
  *  NOTE(reuse/#234): confirm this matches where the proxy/RecallHistory reads — best-effort append, so a path
  *  mismatch degrades the audit line, never the reuse write itself. */
-export declare function assetCallLogPath(): string;
+export declare function assetCallLogPath(env?: Readonly<Record<string, string | undefined>>): string;
+/** Learning Ops local output dir: per-run LearningPacket drafts + trace-event JSONL (hub upload is a later slice). */
+export declare function learningTraceDir(env?: Readonly<Record<string, string | undefined>>): string;

package/dist/events/paths.js

@@ -1,44 +1,48 @@
 import { homedir } from 'node:os';
 import { join } from 'node:path';
 /** ~/.evomap, 可 EVOLVER_HOME/EVOMAP_HOME 覆盖. */
-export function evomapHome() {
-    return process.env['EVOLVER_HOME'] ?? process.env['EVOMAP_HOME'] ?? join(homedir(), '.evomap');
+export function evomapHome(env = process.env) {
+    return env['EVOLVER_HOME'] ?? env['EVOMAP_HOME'] ?? join(homedir(), '.evomap');
 }
-export function rootEventsPath() {
-    return join(evomapHome(), 'evolution', 'root_events.jsonl');
+export function rootEventsPath(env = process.env) {
+    return join(evomapHome(env), 'evolution', 'root_events.jsonl');
 }
-export function mvDir() {
-    return join(evomapHome(), 'evolution', 'mv');
+export function mvDir(env = process.env) {
+    return join(evomapHome(env), 'evolution', 'mv');
 }
 /** 可进化人格模型持久化文件 (五维向量 + 各键统计 + 变更历史). v1 personality_state.json 的 v2 落点. */
-export function personalityStatePath() {
-    return join(evomapHome(), 'evolution', 'personality_state.json');
+export function personalityStatePath(env = process.env) {
+    return join(evomapHome(env), 'evolution', 'personality_state.json');
 }
-export function assetsDir() {
-    return join(evomapHome(), 'assets');
+export function assetsDir(env = process.env) {
+    return join(evomapHome(env), 'assets');
 }
 /** M1 raw-material substrate (append-only jsonl consumed by the cycle). */
-export function materialDir() {
-    return join(evomapHome(), 'evolution', 'material');
+export function materialDir(env = process.env) {
+    return join(evomapHome(env), 'evolution', 'material');
 }
 /** MaterialStore backing file. */
-export function materialStorePath() {
-    return join(materialDir(), 'material.jsonl');
+export function materialStorePath(env = process.env) {
+    return join(materialDir(env), 'material.jsonl');
 }
 /** Per-source watermark cursor used to make re-ingest idempotent (file-level dedup). */
-export function materialWatermarkPath() {
-    return join(materialDir(), 'watermark.json');
+export function materialWatermarkPath(env = process.env) {
+    return join(materialDir(env), 'watermark.json');
 }
 /** Proxy LLM-trace day-files dir (`llm-trace-YYYYMMDD.jsonl`), the route-savings source for the value ledger.
  *  Mirrors the proxy's EVOLVER_LLM_TRACE_DIR default so the outreach layer reads what the proxy wrote. */
-export function tracesDir() {
-    return process.env['EVOLVER_LLM_TRACE_DIR'] ?? join(evomapHome(), 'proxy', 'traces');
+export function tracesDir(env = process.env) {
+    return env['EVOLVER_LLM_TRACE_DIR'] ?? join(evomapHome(env), 'proxy', 'traces');
 }
 /** Hub-asset audit trail (`asset_call_log.jsonl`): one JSONL line per hub-asset interaction (search hit/miss,
  *  reuse/reference, publish, review). Written best-effort by AssetCallLog; the desktop's RecallHistory / 召回历程
  *  reads it. Defaults to the evomap home root, beside assets/ + evolution/.
  *  NOTE(reuse/#234): confirm this matches where the proxy/RecallHistory reads — best-effort append, so a path
  *  mismatch degrades the audit line, never the reuse write itself. */
-export function assetCallLogPath() {
-    return join(evomapHome(), 'asset_call_log.jsonl');
+export function assetCallLogPath(env = process.env) {
+    return join(evomapHome(env), 'asset_call_log.jsonl');
+}
+/** Learning Ops local output dir: per-run LearningPacket drafts + trace-event JSONL (hub upload is a later slice). */
+export function learningTraceDir(env = process.env) {
+    return env['EVOLVER_LEARNING_TRACE_DIR'] ?? join(evomapHome(env), 'evolution', 'learning-trace');
 }

package/dist/events/public.d.ts

@@ -7,10 +7,10 @@ export type { EventCountsMV } from './projectors.js';
 export { LineTooLargeError, MAX_LINE_BYTES } from './eventStore.js';
 export { ArchiveSegmentConflictError, InvalidRootEventArchiveError, InvalidRootEventLogError, RootEventHistoryGapError, archiveRootEvents, inspectRootEventArchive, planRootEventArchive, readRootEventHistory, rootEventArchiveDir, rootEventArchiveSegmentName, validateRootEventHistory, ROOT_EVENT_ARCHIVE_DEFAULT_KEEP_EVENTS, } from './eventArchive.js';
 export type { RootEventArchiveOptions, RootEventArchivePlan, RootEventArchiveResult, RootEventArchiveStats, } from './eventArchive.js';
-export { rootEventsPath, evomapHome, mvDir, personalityStatePath, assetsDir, materialDir, materialStorePath, materialWatermarkPath, tracesDir, assetCallLogPath } from './paths.js';
+export { rootEventsPath, evomapHome, mvDir, personalityStatePath, assetsDir, materialDir, materialStorePath, materialWatermarkPath, tracesDir, assetCallLogPath, learningTraceDir } from './paths.js';
 export { EVENT_SCHEMA_VERSION } from './eventSchema.js';
 export type { RootEvent, RawEvent, HumanNarrative, Actor, Replayability } from './eventSchema.js';
-export { readEvents, statusReport, listCycles, showCycle, listTriggers, dailySummary, buildNarrativeSnapshot, NARRATIVE_DEFAULT_LIMIT, NARRATIVE_MAX_LIMIT, } from './reports.js';
+export { readEvents, statusReport, listCycles, showCycle, listTriggers, dailySummary, dailyCapsuleCount, buildNarrativeSnapshot, NARRATIVE_DEFAULT_LIMIT, NARRATIVE_MAX_LIMIT, } from './reports.js';
 export { buildRetentionReport, defaultMaterialCursorPath, defaultMaterialCursorPaths, RETENTION_DEFAULT_MAX_MATERIAL_BYTES, RETENTION_DEFAULT_MAX_MATERIAL_RECORDS, RETENTION_DEFAULT_MAX_ROOT_BYTES, RETENTION_DEFAULT_MAX_ROOT_EVENTS, RETENTION_DEFAULT_ROOT_TAIL_EVENTS, RETENTION_DEFAULT_WATCH_RATIO, } from './retention.js';
 export type { ReportEvent, StatusReport, CycleSummary, CycleTimeline, TriggerRow, DailySummary, NarrativeEntry, NarrativeOutcome, NarrativeSnapshot, NarrativeSnapshotOptions, } from './reports.js';
 export type { MaterialRetentionSnapshot, RetentionReport, RetentionReportOptions, RetentionState, RetentionThresholds, RootRetentionSnapshot, } from './retention.js';

package/dist/events/public.js

@@ -3,7 +3,7 @@ export { Replayer } from './replayer.js';
 export { eventCountsProjector, DEFAULT_PROJECTORS } from './projectors.js';
 export { LineTooLargeError, MAX_LINE_BYTES } from './eventStore.js';
 export { ArchiveSegmentConflictError, InvalidRootEventArchiveError, InvalidRootEventLogError, RootEventHistoryGapError, archiveRootEvents, inspectRootEventArchive, planRootEventArchive, readRootEventHistory, rootEventArchiveDir, rootEventArchiveSegmentName, validateRootEventHistory, ROOT_EVENT_ARCHIVE_DEFAULT_KEEP_EVENTS, } from './eventArchive.js';
-export { rootEventsPath, evomapHome, mvDir, personalityStatePath, assetsDir, materialDir, materialStorePath, materialWatermarkPath, tracesDir, assetCallLogPath } from './paths.js';
+export { rootEventsPath, evomapHome, mvDir, personalityStatePath, assetsDir, materialDir, materialStorePath, materialWatermarkPath, tracesDir, assetCallLogPath, learningTraceDir } from './paths.js';
 export { EVENT_SCHEMA_VERSION } from './eventSchema.js';
-export { readEvents, statusReport, listCycles, showCycle, listTriggers, dailySummary, buildNarrativeSnapshot, NARRATIVE_DEFAULT_LIMIT, NARRATIVE_MAX_LIMIT, } from './reports.js';
+export { readEvents, statusReport, listCycles, showCycle, listTriggers, dailySummary, dailyCapsuleCount, buildNarrativeSnapshot, NARRATIVE_DEFAULT_LIMIT, NARRATIVE_MAX_LIMIT, } from './reports.js';
 export { buildRetentionReport, defaultMaterialCursorPath, defaultMaterialCursorPaths, RETENTION_DEFAULT_MAX_MATERIAL_BYTES, RETENTION_DEFAULT_MAX_MATERIAL_RECORDS, RETENTION_DEFAULT_MAX_ROOT_BYTES, RETENTION_DEFAULT_MAX_ROOT_EVENTS, RETENTION_DEFAULT_ROOT_TAIL_EVENTS, RETENTION_DEFAULT_WATCH_RATIO, } from './retention.js';

package/dist/events/reports.d.ts

@@ -61,6 +61,8 @@ export interface DailySummary {
     suppressedFailures: number;
 }
 export declare function dailySummary(evts: readonly ReportEvent[], dayPrefix: string): DailySummary;
+/** 统计指定日期前缀的 capsule.produced 事件数. */
+export declare function dailyCapsuleCount(evts: readonly ReportEvent[], dayPrefix: string): number;
 export type NarrativeOutcome = 'success' | 'failed' | 'inert' | 'unknown';
 export interface NarrativeEntry {
     seq: number;

package/dist/events/reports.js

@@ -85,6 +85,10 @@ export function dailySummary(evts, dayPrefix) {
         suppressedFailures,
     };
 }
+/** 统计指定日期前缀的 capsule.produced 事件数. */
+export function dailyCapsuleCount(evts, dayPrefix) {
+    return evts.filter((e) => e.type === 'capsule.produced' && e.ts.startsWith(dayPrefix)).length;
+}
 export const NARRATIVE_DEFAULT_LIMIT = 30;
 export const NARRATIVE_MAX_LIMIT = 200;
 const NARRATIVE_EVENTS = new Set([