@evomap/evolver 1.69.19 → 1.69.21

package/assets/gep/candidates.jsonl

@@ -1,6 +1,9 @@
-{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-23T06:00:44.714Z","signals":["bounty_task","external_task","human","new","very","grow","how","memory_missing","user_missing","session_logs_missing"],"tags":["bounty_task","external_task","human","new","very","grow","how","memory_missing","user_missing","session_logs_missing","area:orchestration","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: bounty_task, external_task, human, new, very, grow, how, memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
-{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-23T06:00:46.677Z","signals":["memory_missing","user_missing","session_logs_missing"],"tags":["memory_missing","user_missing","session_logs_missing","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
-{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-23T06:00:48.536Z","signals":["memory_missing","user_missing","session_logs_missing"],"tags":["memory_missing","user_missing","session_logs_missing","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
-{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-23T06:01:00.086Z","signals":["bounty_task","external_task","mismatch","components","server","react","troubleshooting","dynamic routes","hydration","React Server Components","memory_missing","user_missing","session_logs_missing"],"tags":["bounty_task","external_task","mismatch","components","server","react","troubleshooting","dynamic routes","hydration","React Server Components","memory_missing","user_missing","session_logs_missing","area:orchestration","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: bounty_task, external_task, mismatch, components, server, react, troubleshooting, dynamic routes, hydration, React Server Components, memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
-{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-23T06:01:02.498Z","signals":["bounty_task","external_task","mismatch","components","server","react","troubleshooting","dynamic routes","hydration","React Server Components","memory_missing","user_missing","session_logs_missing"],"tags":["bounty_task","external_task","mismatch","components","server","react","troubleshooting","dynamic routes","hydration","React Server Components","memory_missing","user_missing","session_logs_missing","area:orchestration","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: bounty_task, external_task, mismatch, components, server, react, troubleshooting, dynamic routes, hydration, React Server Components, memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
-{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-23T06:01:04.594Z","signals":["bounty_task","external_task","what","understand","really","dont","explanation.","memory_missing","user_missing","session_logs_missing"],"tags":["bounty_task","external_task","what","understand","really","dont","explanation.","memory_missing","user_missing","session_logs_missing","area:orchestration","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: bounty_task, external_task, what, understand, really, dont, explanation., memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
+{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-24T03:53:54.271Z","signals":["bounty_task","external_task","设计etl批处理任务时，如何有效地处理源数据中存在的重复记录以确保目标表的幂等性？","data-deduplication","idempotency","batch-processing","ETL","memory_missing","user_missing","session_logs_missing"],"tags":["bounty_task","external_task","设计etl批处理任务时，如何有效地处理源数据中存在的重复记录以确保目标表的幂等性？","data-deduplication","idempotency","batch-processing","ETL","memory_missing","user_missing","session_logs_missing","area:orchestration","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: bounty_task, external_task, 设计etl批处理任务时，如何有效地处理源数据中存在的重复记录以确保目标表的幂等性？, data-deduplication, idempotency, batch-processing, ETL, memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
+{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-24T03:53:56.218Z","signals":["bounty_task","external_task","设计etl批处理任务时，如何有效地处理源数据中存在的重复记录以确保目标表的幂等性？","data-deduplication","idempotency","batch-processing","ETL","memory_missing","user_missing","session_logs_missing"],"tags":["bounty_task","external_task","设计etl批处理任务时，如何有效地处理源数据中存在的重复记录以确保目标表的幂等性？","data-deduplication","idempotency","batch-processing","ETL","memory_missing","user_missing","session_logs_missing","area:orchestration","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: bounty_task, external_task, 设计etl批处理任务时，如何有效地处理源数据中存在的重复记录以确保目标表的幂等性？, data-deduplication, idempotency, batch-processing, ETL, memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
+{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-24T03:53:58.128Z","signals":["bounty_task","external_task","设计etl批处理任务时，如何有效地处理源数据中存在的重复记录以确保目标表的幂等性？","data-deduplication","idempotency","batch-processing","ETL","memory_missing","user_missing","session_logs_missing"],"tags":["bounty_task","external_task","设计etl批处理任务时，如何有效地处理源数据中存在的重复记录以确保目标表的幂等性？","data-deduplication","idempotency","batch-processing","ETL","memory_missing","user_missing","session_logs_missing","area:orchestration","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: bounty_task, external_task, 设计etl批处理任务时，如何有效地处理源数据中存在的重复记录以确保目标表的幂等性？, data-deduplication, idempotency, batch-processing, ETL, memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
+{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-24T03:54:05.469Z","signals":["bounty_task","external_task","设计etl批处理任务时，如何有效地处理源数据中存在的重复记录以确保目标表的幂等性？","data-deduplication","idempotency","batch-processing","ETL","memory_missing","user_missing","session_logs_missing"],"tags":["bounty_task","external_task","设计etl批处理任务时，如何有效地处理源数据中存在的重复记录以确保目标表的幂等性？","data-deduplication","idempotency","batch-processing","ETL","memory_missing","user_missing","session_logs_missing","area:orchestration","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: bounty_task, external_task, 设计etl批处理任务时，如何有效地处理源数据中存在的重复记录以确保目标表的幂等性？, data-deduplication, idempotency, batch-processing, ETL, memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
+{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-24T03:54:07.587Z","signals":["bounty_task","external_task","设计etl批处理任务时，如何有效地处理源数据中存在的重复记录以确保目标表的幂等性？","data-deduplication","idempotency","batch-processing","ETL","memory_missing","user_missing","session_logs_missing"],"tags":["bounty_task","external_task","设计etl批处理任务时，如何有效地处理源数据中存在的重复记录以确保目标表的幂等性？","data-deduplication","idempotency","batch-processing","ETL","memory_missing","user_missing","session_logs_missing","area:orchestration","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: bounty_task, external_task, 设计etl批处理任务时，如何有效地处理源数据中存在的重复记录以确保目标表的幂等性？, data-deduplication, idempotency, batch-processing, ETL, memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
+{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-24T03:54:09.368Z","signals":["memory_missing","user_missing","session_logs_missing"],"tags":["memory_missing","user_missing","session_logs_missing","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
+{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-24T03:54:28.498Z","signals":["memory_missing","user_missing","session_logs_missing"],"tags":["memory_missing","user_missing","session_logs_missing","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
+{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-24T03:54:30.437Z","signals":["memory_missing","user_missing","session_logs_missing"],"tags":["memory_missing","user_missing","session_logs_missing","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
+{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-24T03:54:32.245Z","signals":["memory_missing","user_missing","session_logs_missing"],"tags":["memory_missing","user_missing","session_logs_missing","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}

package/assets/gep/genes.json

@@ -78,7 +78,8 @@
         "perf_bottleneck",
         "capability_gap",
         "stable_success_plateau",
-        "external_opportunity"
+        "external_opportunity",
+        "bounty_task"
       ],
       "preconditions": [
         "at least one opportunity signal is present",
@@ -105,6 +106,43 @@
         "node scripts/validate-suite.js"
       ]
     },
+    {
+      "type": "Gene",
+      "id": "gene_gep_optimize_tool_usage",
+      "summary": "Optimize tool execution patterns by reducing redundant exec calls, improving tool selection strategy, and enforcing tool-use constraints to prevent bypass.",
+      "category": "optimize",
+      "signals_match": [
+        "high_tool_usage:exec",
+        "repeated_tool_usage:exec",
+        "tool_bypass",
+        "tool_loop",
+        "high_tool_usage"
+      ],
+      "preconditions": [
+        "agent repeatedly invokes the same tool (especially exec) without progress",
+        "tool execution bypass patterns detected",
+        "no active error signals (errors would take repair priority)"
+      ],
+      "strategy": [
+        "Analyze tool usage patterns to identify the root cause of repetition (wrong tool, missing context, or lack of guardrails)",
+        "Introduce strategy-level guardrails: prefer single-shot commands, batch related operations, add explicit retry limits",
+        "If tool_bypass detected, strengthen constraint enforcement in prompt assembly or tool routing",
+        "Estimate blast radius; changes should target tool routing, prompt constraints, or signal deduplication logic",
+        "Validate by confirming no regressions in existing tool tests and signal extraction accuracy",
+        "Solidify: record EvolutionEvent with intent=optimize, update Capsule on success"
+      ],
+      "constraints": {
+        "max_files": 15,
+        "forbidden_paths": [
+          ".git",
+          "node_modules"
+        ]
+      },
+      "validation": [
+        "node scripts/validate-modules.js ./src/gep/signals ./src/evolve",
+        "node scripts/validate-suite.js"
+      ]
+    },
     {
       "type": "Gene",
       "id": "gene_distilled_s2g-env-vars",

package/index.js

@@ -143,6 +143,24 @@ async function main() {
     }
 
     console.log('Starting evolver...');
+
+    // Preflight: fail fast if git is not on PATH. On Windows in particular
+    // a missing git binary can cause evolver to hang silently (see #394),
+    // because several cycle-critical steps shell out to git early (repo
+    // resolution, diff, blast-radius). Catching this up front makes the
+    // failure mode obvious.
+    try {
+      const { execSync } = require('child_process');
+      execSync('git --version', { stdio: 'ignore', timeout: 5000 });
+    } catch (_gitErr) {
+      console.error('');
+      console.error('[Preflight] Could not run "git --version". Evolver requires git to be installed and available on PATH.');
+      console.error('[Preflight] On Windows: install Git from https://git-scm.com/download/win and make sure `git --version` works in a fresh terminal.');
+      console.error('[Preflight] On macOS:   xcode-select --install  (or `brew install git`)');
+      console.error('[Preflight] On Linux:   sudo apt-get install -y git  (or your distro equivalent)');
+      console.error('');
+      process.exit(1);
+    }
     
     if (isLoop) {
         // Internal daemon loop (no wrapper required).
@@ -698,7 +716,13 @@ async function main() {
       console.log('\n[Review] Rejected. Rolling back changes...');
       try {
         execSync('git checkout -- .', { cwd: repoRoot, encoding: 'utf8', timeout: 30000, maxBuffer: MAX_EXEC_BUFFER });
-        execSync('git clean -fd', { cwd: repoRoot, encoding: 'utf8', timeout: 30000, maxBuffer: MAX_EXEC_BUFFER });
+        // Preserve user state on reject: .env files, node_modules, runtime
+        // PID files, and a dedicated workspace/ dir (if one exists) MUST NOT
+        // be wiped by an automated rollback. Users have reported losing
+        // secrets and runtime caches to an aggressive git clean.
+        execSync('git clean -fd -e node_modules -e workspace -e .env -e ".env.*" -e "*.pid"', {
+          cwd: repoRoot, encoding: 'utf8', timeout: 30000, maxBuffer: MAX_EXEC_BUFFER,
+        });
         const evolDir = getEvolutionDir();
         const sp = path.join(evolDir, 'evolution_solidify_state.json');
         if (fs.existsSync(sp)) {
@@ -848,10 +872,30 @@ async function main() {
         fs.writeFileSync(path.join(outDir, 'SKILL.md'), data.content, 'utf8');
       }
 
+      const ALLOWED_SKILL_EXTENSIONS = new Set([
+        '.js', '.mjs', '.cjs', '.ts',
+        '.json', '.md', '.txt',
+        '.sh', '.py',
+        '.yml', '.yaml',
+      ]);
+      const MAX_SKILL_FILE_BYTES = 512 * 1024;
+
       const bundled = Array.isArray(data.bundled_files) ? data.bundled_files : [];
+      const skippedFiles = [];
       for (const file of bundled) {
         if (!file || !file.name || typeof file.content !== 'string') continue;
         const safeName = path.basename(file.name);
+        const ext = path.extname(safeName).toLowerCase();
+        if (!ALLOWED_SKILL_EXTENSIONS.has(ext)) {
+          console.warn('[fetch] Skipped skill file with disallowed extension: ' + safeName);
+          skippedFiles.push(safeName);
+          continue;
+        }
+        if (Buffer.byteLength(file.content, 'utf8') > MAX_SKILL_FILE_BYTES) {
+          console.warn('[fetch] Skipped skill file exceeding ' + MAX_SKILL_FILE_BYTES + ' bytes: ' + safeName);
+          skippedFiles.push(safeName);
+          continue;
+        }
         fs.writeFileSync(path.join(outDir, safeName), file.content, 'utf8');
       }
 
@@ -860,9 +904,9 @@ async function main() {
       console.log('  Version: ' + (data.version || '?'));
       console.log('  Files:   SKILL.md' + (bundled.length > 0 ? ', ' + bundled.map(f => f.name).join(', ') : ''));
       if (data.already_purchased) {
-        console.log('  Cost:    free (already purchased)');
+        console.log('  Fetch cost: free (already purchased)');
       } else {
-        console.log('  Cost:    ' + (data.credit_cost || 0) + ' credits');
+        console.log('  Fetch cost: ' + (data.credit_cost || 0) + ' credits');
       }
     } catch (error) {
       if (error && error.name === 'TimeoutError') {
@@ -955,7 +999,7 @@ async function main() {
   } else if (command === 'buy' || command === 'orders' || command === 'verify') {
     try {
       const atpCli = require('./src/atp/cli');
-      const subArgs = args.slice(); // args already exclude the command token
+      const subArgs = args.slice(1); // drop the command token (e.g. "buy") itself
       let parsed;
       let runner;
       if (command === 'buy') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@evomap/evolver",
-  "version": "1.69.19",
+  "version": "1.69.21",
   "description": "A GEP-powered self-evolution engine for AI agents. Features automated log analysis and Genome Evolution Protocol (GEP) for auditable, reusable evolution assets.",
   "main": "index.js",
   "bin": {