@evomap/evolver 1.70.0-beta.1 → 1.70.0-beta.2

package/assets/gep/candidates.jsonl

@@ -1,3 +1,3 @@
-{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-23T06:02:57.897Z","signals":["bounty_task","external_task","what","understand","really","dont","explanation.","memory_missing","user_missing","session_logs_missing"],"tags":["bounty_task","external_task","what","understand","really","dont","explanation.","memory_missing","user_missing","session_logs_missing","area:orchestration","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: bounty_task, external_task, what, understand, really, dont, explanation., memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
-{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-23T06:03:00.033Z","signals":["bounty_task","external_task","human","new","very","grow","how","memory_missing","user_missing","session_logs_missing"],"tags":["bounty_task","external_task","human","new","very","grow","how","memory_missing","user_missing","session_logs_missing","area:orchestration","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: bounty_task, external_task, human, new, very, grow, how, memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
-{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-23T06:03:01.960Z","signals":["memory_missing","user_missing","session_logs_missing"],"tags":["memory_missing","user_missing","session_logs_missing","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
+{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-24T04:45:45.103Z","signals":["bounty_task","external_task","learning","for","library","resource","create","resource-list","Engine","Unreal","rendering","real-time","3d-modeling","3d","3d-generation","memory_missing","user_missing","session_logs_missing"],"tags":["bounty_task","external_task","learning","for","library","resource","create","resource-list","Engine","Unreal","rendering","real-time","3d-modeling","3d","3d-generation","memory_missing","user_missing","session_logs_missing","area:orchestration","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: bounty_task, external_task, learning, for, library, resource, create, resource-list, Engine, Unreal, rendering, real-time, 3d-modeling, 3d, 3d-generation, memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
+{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-24T04:45:47.032Z","signals":["bounty_task","external_task","learning","for","library","resource","create","resource-list","Engine","Unreal","rendering","real-time","3d-modeling","3d","3d-generation","memory_missing","user_missing","session_logs_missing"],"tags":["bounty_task","external_task","learning","for","library","resource","create","resource-list","Engine","Unreal","rendering","real-time","3d-modeling","3d","3d-generation","memory_missing","user_missing","session_logs_missing","area:orchestration","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: bounty_task, external_task, learning, for, library, resource, create, resource-list, Engine, Unreal, rendering, real-time, 3d-modeling, 3d, 3d-generation, memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
+{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-24T04:45:48.941Z","signals":["bounty_task","external_task","learning","for","library","resource","create","resource-list","Engine","Unreal","rendering","real-time","3d-modeling","3d","3d-generation","memory_missing","user_missing","session_logs_missing"],"tags":["bounty_task","external_task","learning","for","library","resource","create","resource-list","Engine","Unreal","rendering","real-time","3d-modeling","3d","3d-generation","memory_missing","user_missing","session_logs_missing","area:orchestration","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: bounty_task, external_task, learning, for, library, resource, create, resource-list, Engine, Unreal, rendering, real-time, 3d-modeling, 3d, 3d-generation, memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}

package/assets/gep/genes.json

@@ -78,7 +78,8 @@
         "perf_bottleneck",
         "capability_gap",
         "stable_success_plateau",
-        "external_opportunity"
+        "external_opportunity",
+        "bounty_task"
       ],
       "preconditions": [
         "at least one opportunity signal is present",
@@ -105,6 +106,43 @@
         "node scripts/validate-suite.js"
       ]
     },
+    {
+      "type": "Gene",
+      "id": "gene_gep_optimize_tool_usage",
+      "summary": "Optimize tool execution patterns by reducing redundant exec calls, improving tool selection strategy, and enforcing tool-use constraints to prevent bypass.",
+      "category": "optimize",
+      "signals_match": [
+        "high_tool_usage:exec",
+        "repeated_tool_usage:exec",
+        "tool_bypass",
+        "tool_loop",
+        "high_tool_usage"
+      ],
+      "preconditions": [
+        "agent repeatedly invokes the same tool (especially exec) without progress",
+        "tool execution bypass patterns detected",
+        "no active error signals (errors would take repair priority)"
+      ],
+      "strategy": [
+        "Analyze tool usage patterns to identify the root cause of repetition (wrong tool, missing context, or lack of guardrails)",
+        "Introduce strategy-level guardrails: prefer single-shot commands, batch related operations, add explicit retry limits",
+        "If tool_bypass detected, strengthen constraint enforcement in prompt assembly or tool routing",
+        "Estimate blast radius; changes should target tool routing, prompt constraints, or signal deduplication logic",
+        "Validate by confirming no regressions in existing tool tests and signal extraction accuracy",
+        "Solidify: record EvolutionEvent with intent=optimize, update Capsule on success"
+      ],
+      "constraints": {
+        "max_files": 15,
+        "forbidden_paths": [
+          ".git",
+          "node_modules"
+        ]
+      },
+      "validation": [
+        "node scripts/validate-modules.js ./src/gep/signals ./src/evolve",
+        "node scripts/validate-suite.js"
+      ]
+    },
     {
       "type": "Gene",
       "id": "gene_distilled_s2g-env-vars",

package/index.js

@@ -143,6 +143,24 @@ async function main() {
     }
 
     console.log('Starting evolver...');
+
+    // Preflight: fail fast if git is not on PATH. On Windows in particular
+    // a missing git binary can cause evolver to hang silently (see #394),
+    // because several cycle-critical steps shell out to git early (repo
+    // resolution, diff, blast-radius). Catching this up front makes the
+    // failure mode obvious.
+    try {
+      const { execSync } = require('child_process');
+      execSync('git --version', { stdio: 'ignore', timeout: 5000 });
+    } catch (_gitErr) {
+      console.error('');
+      console.error('[Preflight] Could not run "git --version". Evolver requires git to be installed and available on PATH.');
+      console.error('[Preflight] On Windows: install Git from https://git-scm.com/download/win and make sure `git --version` works in a fresh terminal.');
+      console.error('[Preflight] On macOS:   xcode-select --install  (or `brew install git`)');
+      console.error('[Preflight] On Linux:   sudo apt-get install -y git  (or your distro equivalent)');
+      console.error('');
+      process.exit(1);
+    }
     
     if (isLoop) {
         // Internal daemon loop (no wrapper required).
@@ -250,6 +268,12 @@ async function main() {
 
         // ATP: opt-in capability-gap auto-buyer (default OFF, must be explicitly enabled).
         try {
+          try {
+            const { runPrompt } = require('./src/atp/cliAutobuyPrompt');
+            await runPrompt();
+          } catch (promptErr) {
+            console.warn('[ATP-AutoBuyer] first-run prompt failed: ' + (promptErr && promptErr.message || promptErr));
+          }
           const autoBuyRaw = (process.env.EVOLVER_ATP_AUTOBUY || 'off').toLowerCase().trim();
           const autoBuyOn = autoBuyRaw === 'on' || autoBuyRaw === '1' || autoBuyRaw === 'true';
           if (autoBuyOn) {
@@ -698,7 +722,13 @@ async function main() {
       console.log('\n[Review] Rejected. Rolling back changes...');
       try {
         execSync('git checkout -- .', { cwd: repoRoot, encoding: 'utf8', timeout: 30000, maxBuffer: MAX_EXEC_BUFFER });
-        execSync('git clean -fd', { cwd: repoRoot, encoding: 'utf8', timeout: 30000, maxBuffer: MAX_EXEC_BUFFER });
+        // Preserve user state on reject: .env files, node_modules, runtime
+        // PID files, and a dedicated workspace/ dir (if one exists) MUST NOT
+        // be wiped by an automated rollback. Users have reported losing
+        // secrets and runtime caches to an aggressive git clean.
+        execSync('git clean -fd -e node_modules -e workspace -e .env -e ".env.*" -e "*.pid"', {
+          cwd: repoRoot, encoding: 'utf8', timeout: 30000, maxBuffer: MAX_EXEC_BUFFER,
+        });
         const evolDir = getEvolutionDir();
         const sp = path.join(evolDir, 'evolution_solidify_state.json');
         if (fs.existsSync(sp)) {
@@ -848,10 +878,30 @@ async function main() {
         fs.writeFileSync(path.join(outDir, 'SKILL.md'), data.content, 'utf8');
       }
 
+      const ALLOWED_SKILL_EXTENSIONS = new Set([
+        '.js', '.mjs', '.cjs', '.ts',
+        '.json', '.md', '.txt',
+        '.sh', '.py',
+        '.yml', '.yaml',
+      ]);
+      const MAX_SKILL_FILE_BYTES = 512 * 1024;
+
       const bundled = Array.isArray(data.bundled_files) ? data.bundled_files : [];
+      const skippedFiles = [];
       for (const file of bundled) {
         if (!file || !file.name || typeof file.content !== 'string') continue;
         const safeName = path.basename(file.name);
+        const ext = path.extname(safeName).toLowerCase();
+        if (!ALLOWED_SKILL_EXTENSIONS.has(ext)) {
+          console.warn('[fetch] Skipped skill file with disallowed extension: ' + safeName);
+          skippedFiles.push(safeName);
+          continue;
+        }
+        if (Buffer.byteLength(file.content, 'utf8') > MAX_SKILL_FILE_BYTES) {
+          console.warn('[fetch] Skipped skill file exceeding ' + MAX_SKILL_FILE_BYTES + ' bytes: ' + safeName);
+          skippedFiles.push(safeName);
+          continue;
+        }
         fs.writeFileSync(path.join(outDir, safeName), file.content, 'utf8');
       }
 
@@ -860,9 +910,9 @@ async function main() {
       console.log('  Version: ' + (data.version || '?'));
       console.log('  Files:   SKILL.md' + (bundled.length > 0 ? ', ' + bundled.map(f => f.name).join(', ') : ''));
       if (data.already_purchased) {
-        console.log('  Cost:    free (already purchased)');
+        console.log('  Fetch cost: free (already purchased)');
       } else {
-        console.log('  Cost:    ' + (data.credit_cost || 0) + ' credits');
+        console.log('  Fetch cost: ' + (data.credit_cost || 0) + ' credits');
       }
     } catch (error) {
       if (error && error.name === 'TimeoutError') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@evomap/evolver",
-  "version": "1.70.0-beta.1",
+  "version": "1.70.0-beta.2",
   "description": "A GEP-powered self-evolution engine for AI agents. Features automated log analysis and Genome Evolution Protocol (GEP) for auditable, reusable evolution assets.",
   "main": "index.js",
   "bin": {

package/src/atp/cliAutobuyPrompt.js

@@ -0,0 +1,160 @@
+"use strict";
+
+/**
+ * First-run prompt that introduces the ATP autoBuyer to interactive users.
+ *
+ * Triggers when ALL conditions hold:
+ *   - process.stdin.isTTY === true (skipped under systemd, Docker, CI)
+ *   - EVOLVER_ATP_AUTOBUY is not already set (neither on nor off)
+ *   - ack file memory/atp-autobuy-ack.json does not exist (already decided)
+ *
+ * Outcomes:
+ *   - user answers y         -> enabled=true written, session opts in immediately
+ *   - user answers n         -> enabled=false written, prompt never shown again
+ *   - user answers later     -> no file written, prompt shown next time
+ *   - any non-TTY/ack branch -> silent no-op
+ */
+
+const fs = require("fs");
+const path = require("path");
+const readline = require("readline");
+
+const ACK_FILE_NAME = "atp-autobuy-ack.json";
+
+function _getMemoryDir() {
+  try {
+    return require("../gep/paths").getMemoryDir();
+  } catch (_) {
+    return process.env.MEMORY_DIR || path.join(process.cwd(), "memory");
+  }
+}
+
+function _getAckPath() {
+  return path.join(_getMemoryDir(), ACK_FILE_NAME);
+}
+
+function _readAck() {
+  try {
+    const raw = fs.readFileSync(_getAckPath(), "utf8");
+    const parsed = JSON.parse(raw);
+    if (!parsed || typeof parsed !== "object") return null;
+    return parsed;
+  } catch (_) {
+    return null;
+  }
+}
+
+function _writeAck(enabled) {
+  const p = _getAckPath();
+  try {
+    fs.mkdirSync(path.dirname(p), { recursive: true });
+    const body = {
+      enabled: !!enabled,
+      acknowledged_at: new Date().toISOString(),
+      version: 1,
+    };
+    fs.writeFileSync(p, JSON.stringify(body, null, 2) + "\n", "utf8");
+    return true;
+  } catch (_) {
+    return false;
+  }
+}
+
+/**
+ * @returns {"ack_present"|"env_set"|"non_tty"|"eligible"}
+ */
+function classify(env, stdin) {
+  const envVal = env && env.EVOLVER_ATP_AUTOBUY;
+  if (typeof envVal === "string" && envVal.trim().length > 0) {
+    return "env_set";
+  }
+  if (!stdin || !stdin.isTTY) {
+    return "non_tty";
+  }
+  if (_readAck()) {
+    return "ack_present";
+  }
+  return "eligible";
+}
+
+function _ask(question, { input, output }) {
+  return new Promise((resolve) => {
+    const rl = readline.createInterface({ input, output });
+    rl.question(question, (answer) => {
+      rl.close();
+      resolve((answer || "").trim().toLowerCase());
+    });
+  });
+}
+
+/**
+ * Synchronously decide whether to prompt (TTY + no ack + env unset) and,
+ * if prompting, block on user answer. Resolves with:
+ *   { prompted: bool, decision: "yes"|"no"|"later"|null, reason: string }
+ *
+ * Should be called at most once per `evolver run` invocation, BEFORE the
+ * autoBuyer.start() branch in the run loop.
+ *
+ * @param {object} [opts]
+ * @param {NodeJS.ReadableStream} [opts.input]
+ * @param {NodeJS.WritableStream} [opts.output]
+ * @param {NodeJS.ProcessEnv} [opts.env]
+ * @param {(q: string, io: object) => Promise<string>} [opts.ask]
+ * @returns {Promise<{ prompted: boolean, decision: string|null, reason: string }>}
+ */
+async function runPrompt(opts) {
+  opts = opts || {};
+  const input = opts.input || process.stdin;
+  const output = opts.output || process.stdout;
+  const env = opts.env || process.env;
+  const ask = typeof opts.ask === "function" ? opts.ask : _ask;
+
+  const state = classify(env, input);
+  if (state !== "eligible") {
+    return { prompted: false, decision: null, reason: state };
+  }
+
+  try {
+    output.write("\n");
+    output.write("[ATP-AutoBuyer] Your evolver can automatically place small-priced\n");
+    output.write("ATP orders when it detects a capability gap (default OFF).\n");
+    output.write("  - daily hard cap:   ATP_AUTOBUY_DAILY_CAP_CREDITS (default applies)\n");
+    output.write("  - per-order cap:    ATP_AUTOBUY_PER_ORDER_CAP_CREDITS\n");
+    output.write("  - unset EVOLVER_ATP_AUTOBUY and restart to disable at any time.\n");
+    output.write("\n");
+  } catch (_) {
+    return { prompted: false, decision: null, reason: "io_error" };
+  }
+
+  let answer;
+  try {
+    answer = await ask("Enable autoBuyer for this session? [y/n/later] ", {
+      input,
+      output,
+    });
+  } catch (_) {
+    return { prompted: true, decision: null, reason: "ask_error" };
+  }
+
+  if (answer === "y" || answer === "yes") {
+    _writeAck(true);
+    env.EVOLVER_ATP_AUTOBUY = "on";
+    return { prompted: true, decision: "yes", reason: "user_accepted" };
+  }
+  if (answer === "n" || answer === "no") {
+    _writeAck(false);
+    return { prompted: true, decision: "no", reason: "user_declined" };
+  }
+  return { prompted: true, decision: "later", reason: "user_postponed" };
+}
+
+module.exports = {
+  runPrompt,
+  classify,
+  __internals: {
+    ACK_FILE_NAME,
+    _readAck,
+    _writeAck,
+    _getAckPath,
+  },
+};