@evomap/evolver 1.70.0-beta.5 → 1.72.0

package/assets/gep/candidates.jsonl

@@ -1,3 +1,4 @@
-{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-27T05:31:51.337Z","signals":["memory_missing","user_missing","session_logs_missing"],"tags":["memory_missing","user_missing","session_logs_missing","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
-{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-27T05:31:53.506Z","signals":["memory_missing","user_missing","session_logs_missing"],"tags":["memory_missing","user_missing","session_logs_missing","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
-{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-27T05:31:55.280Z","signals":["memory_missing","user_missing","session_logs_missing"],"tags":["memory_missing","user_missing","session_logs_missing","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
+{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-27T10:30:27.039Z","signals":["memory_missing","user_missing","session_logs_missing"],"tags":["memory_missing","user_missing","session_logs_missing","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
+{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-27T10:30:56.391Z","signals":["memory_missing","user_missing","session_logs_missing"],"tags":["memory_missing","user_missing","session_logs_missing","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
+{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-27T10:31:11.248Z","signals":["memory_missing","user_missing","session_logs_missing"],"tags":["memory_missing","user_missing","session_logs_missing","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}
+{"type":"CapabilityCandidate","id":"cand_b9a66a5c","title":"Harden session log detection and fallback behavior","source":"signals","created_at":"2026-04-27T10:31:26.375Z","signals":["memory_missing","user_missing","session_logs_missing"],"tags":["memory_missing","user_missing","session_logs_missing","area:memory"],"shape":{"title":"Harden session log detection and fallback behavior","input":"Recent session transcript + memory snippets + user instructions","output":"A safe, auditable evolution patch guided by GEP assets","invariants":"Protocol order, small reversible patches, validation, append-only events","params":"Signals: memory_missing, user_missing, session_logs_missing","failure_points":"Missing signals, over-broad changes, skipped validation, missing knowledge solidification","evidence":"Signal present: session_logs_missing"}}

package/index.js

@@ -266,7 +266,10 @@ async function main() {
           console.warn('[ATP] Auto-init failed: ' + (atpInitErr && atpInitErr.message || atpInitErr));
         }
 
-        // ATP: opt-in capability-gap auto-buyer (default OFF, must be explicitly enabled).
+        // ATP: capability-gap auto-buyer. Default ON as of ATP liquidity
+        // unlock; disable with EVOLVER_ATP_AUTOBUY=off. Also starts the
+        // merchant-side auto-deliver daemon so claimed ATP tasks actually
+        // call submitDelivery and settle instead of expiring.
         try {
           try {
             const { runPrompt } = require('./src/atp/cliAutobuyPrompt');
@@ -274,8 +277,8 @@ async function main() {
           } catch (promptErr) {
             console.warn('[ATP-AutoBuyer] first-run prompt failed: ' + (promptErr && promptErr.message || promptErr));
           }
-          const autoBuyRaw = (process.env.EVOLVER_ATP_AUTOBUY || 'off').toLowerCase().trim();
-          const autoBuyOn = autoBuyRaw === 'on' || autoBuyRaw === '1' || autoBuyRaw === 'true';
+          const autoBuyRaw = (process.env.EVOLVER_ATP_AUTOBUY || 'on').toLowerCase().trim();
+          const autoBuyOn = autoBuyRaw !== 'off' && autoBuyRaw !== '0' && autoBuyRaw !== 'false';
           if (autoBuyOn) {
             const hubUrl = process.env.A2A_HUB_URL || process.env.EVOMAP_HUB_URL || '';
             if (hubUrl) {
@@ -285,7 +288,20 @@ async function main() {
                 perOrderCap: Number(process.env.ATP_AUTOBUY_PER_ORDER_CAP_CREDITS) || undefined,
               });
             } else {
-              console.warn('[ATP-AutoBuyer] EVOLVER_ATP_AUTOBUY=on but no hub URL configured, skipping.');
+              console.warn('[ATP-AutoBuyer] autobuy enabled but no hub URL configured, skipping.');
+            }
+          }
+          const autoDeliverRaw = (process.env.EVOLVER_ATP_AUTODELIVER || 'on').toLowerCase().trim();
+          const autoDeliverOn = autoDeliverRaw !== 'off' && autoDeliverRaw !== '0' && autoDeliverRaw !== 'false';
+          if (autoDeliverOn) {
+            const hubUrl = process.env.A2A_HUB_URL || process.env.EVOMAP_HUB_URL || '';
+            if (hubUrl) {
+              const autoDeliver = require('./src/atp/autoDeliver');
+              autoDeliver.start({
+                pollMs: Number(process.env.ATP_AUTODELIVER_POLL_MS) || undefined,
+              });
+            } else {
+              console.warn('[ATP-AutoDeliver] autodeliver enabled but no hub URL configured, skipping.');
             }
           }
         } catch (autoBuyInitErr) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@evomap/evolver",
-  "version": "1.70.0-beta.5",
+  "version": "1.72.0",
   "description": "A GEP-powered self-evolution engine for AI agents. Features automated log analysis and Genome Evolution Protocol (GEP) for auditable, reusable evolution assets.",
   "main": "index.js",
   "bin": {

package/src/atp/autoBuyer.js

@@ -1,14 +1,16 @@
-// ATP Auto-Buyer (opt-in)
+// ATP Auto-Buyer (opt-out, default ON as of ATP liquidity unlock)
 // Converts capability gaps into ATP orders with strict budget caps and
-// 24h question-level deduplication. Default OFF; enabled by setting
-// EVOLVER_ATP_AUTOBUY=on (also accepts 1/true). Budget caps:
+// 24h question-level deduplication. Disable by setting
+// EVOLVER_ATP_AUTOBUY=off. Budget caps:
 //   ATP_AUTOBUY_DAILY_CAP_CREDITS     (default 50)
 //   ATP_AUTOBUY_PER_ORDER_CAP_CREDITS (default 10)
 // Cold-start safety: the first 5 minutes after process start use a half-cap
 // to protect against misconfiguration loops on restart storms.
 //
 // Integration contract:
-//   1) Call start({ dailyCap, perOrderCap }) once when EVOLVER_ATP_AUTOBUY=on.
+//   1) Call start({ dailyCap, perOrderCap }) once at Evolver boot. The
+//      evolve loop does this at the top of every cycle; start() is
+//      idempotent so the repeated call is a no-op.
 //   2) Call considerOrder({ signals, question, capabilities, budget, ... })
 //      from the evolve loop whenever a capability gap is detected.
 //   3) Result shape: { ok, skipped?, reason?, data?, error? }.
@@ -48,8 +50,12 @@ function _todayKey(now) {
 }
 
 function _isEnabled() {
-  const raw = (process.env.EVOLVER_ATP_AUTOBUY || 'off').toLowerCase().trim();
-  return raw === 'on' || raw === '1' || raw === 'true';
+  // Default ON: the evolve loop starts autoBuyer at the top of every cycle
+  // so new users get ATP buyer routing out of the box. Disable by setting
+  // EVOLVER_ATP_AUTOBUY=off. Budget caps (DAILY_CAP + PER_ORDER_CAP) keep
+  // the downside bounded even when this is on.
+  const raw = (process.env.EVOLVER_ATP_AUTOBUY || 'on').toLowerCase().trim();
+  return raw !== 'off' && raw !== '0' && raw !== 'false';
 }
 
 function _emptyLedger() {

package/src/atp/autoDeliver.js

@@ -0,0 +1,199 @@
+// ATP Auto-Deliver (opt-out, merchant-side)
+// Closes the ATP settlement loop for Evolver merchants by auto-calling
+// submitDelivery for every claimed task that carries an atp_order_id.
+//
+// Without this module, an ATP order sits in `pending` until the 7-day escrow
+// timeout refunds the buyer: the Hub routes the task to a merchant node and
+// marks it claimed, but nothing in the Evolver runtime actually calls
+// /a2a/atp/deliver. This was the root cause of the 0-settled-in-13-days
+// pipeline stall observed in prod on 2026-04-27.
+//
+// Integration contract:
+//   1) Call start({ pollMs }) once at Evolver boot. Default ON.
+//      Disable by setting EVOLVER_ATP_AUTODELIVER=off.
+//   2) The module polls /a2a/task/my every pollMs milliseconds, finds tasks
+//      with atp_order_id + a `result_asset_id` (meaning the task already
+//      completed through solidify), and submits a minimal proofPayload.
+//   3) Each submitted order is remembered in a local ledger so we never
+//      double-submit, even across restarts.
+//
+// Dedup ledger lives alongside autoBuyer's ledger under memory/.
+// Failure modes are non-fatal: network errors are logged, not thrown.
+
+const fs = require('fs');
+const path = require('path');
+
+const { getMemoryDir } = require('../gep/paths');
+const hubClient = require('./hubClient');
+
+const DEFAULT_POLL_MS = 60 * 1000; // 1 min
+const MIN_POLL_MS = 15 * 1000;
+const LEDGER_FILENAME = 'atp-autodeliver-ledger.json';
+const LEDGER_MAX_ENTRIES = 500;
+
+let _started = false;
+let _pollInterval = null;
+let _pollMs = DEFAULT_POLL_MS;
+let _inflight = false;
+
+function _ledgerPath() {
+  return path.join(getMemoryDir(), LEDGER_FILENAME);
+}
+
+function _isEnabled() {
+  const raw = (process.env.EVOLVER_ATP_AUTODELIVER || 'on').toLowerCase().trim();
+  return raw !== 'off' && raw !== '0' && raw !== 'false';
+}
+
+function _emptyLedger() {
+  return { version: 1, submitted: {} };
+}
+
+function _readLedger() {
+  try {
+    const p = _ledgerPath();
+    if (!fs.existsSync(p)) return _emptyLedger();
+    const raw = fs.readFileSync(p, 'utf8');
+    const parsed = JSON.parse(raw);
+    if (!parsed || typeof parsed !== 'object' || !parsed.submitted) return _emptyLedger();
+    return parsed;
+  } catch (_) {
+    return _emptyLedger();
+  }
+}
+
+function _writeLedger(ledger) {
+  try {
+    const dir = getMemoryDir();
+    if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+    // Bound the ledger size so it cannot grow without limit on long-running
+    // merchants. Keep the most-recent entries by insertion order.
+    const entries = Object.entries(ledger.submitted || {});
+    if (entries.length > LEDGER_MAX_ENTRIES) {
+      const trimmed = Object.fromEntries(entries.slice(-LEDGER_MAX_ENTRIES));
+      ledger.submitted = trimmed;
+    }
+    const tmp = _ledgerPath() + '.tmp';
+    fs.writeFileSync(tmp, JSON.stringify(ledger, null, 2));
+    fs.renameSync(tmp, _ledgerPath());
+  } catch (_) {
+    // Non-fatal: next poll will re-attempt from Hub state. Hub-side
+    // submitDelivery is itself idempotent per order id.
+  }
+}
+
+function _buildProofPayload(task) {
+  // Minimal evidence the Hub's auto verifier will accept. Matches the shape
+  // documented in /a2a/atp/deliver: result/output/pass_rate/signals.
+  const now = new Date().toISOString();
+  return {
+    result: 'completed',
+    asset_id: task.result_asset_id || null,
+    completed_at: task.claimed_at || now,
+    pass_rate: 1.0,
+    signals: Array.isArray(task.signals) ? task.signals.slice(0, 10) : [],
+    submitter: 'evolver_auto_deliver',
+  };
+}
+
+async function _tick() {
+  if (_inflight) return;
+  _inflight = true;
+  try {
+    const result = await hubClient.listMyTasks(20);
+    if (!result || !result.ok || !result.data) return;
+    const tasks = Array.isArray(result.data.tasks) ? result.data.tasks : [];
+    if (tasks.length === 0) return;
+
+    const ledger = _readLedger();
+    let wroteLedger = false;
+
+    for (const task of tasks) {
+      const orderId = task && task.atp_order_id;
+      if (!orderId) continue;
+      if (ledger.submitted[orderId]) continue;
+      // Only deliver once the task has a result asset (i.e. solidify finished).
+      if (!task.result_asset_id) continue;
+      // Don't try to deliver on already-terminal statuses.
+      if (task.status && task.status !== 'claimed' && task.status !== 'completed') continue;
+
+      const proofPayload = _buildProofPayload(task);
+      const resp = await hubClient.submitDelivery(orderId, proofPayload);
+      if (resp && resp.ok) {
+        ledger.submitted[orderId] = Date.now();
+        wroteLedger = true;
+        console.log('[ATP-AutoDeliver] Delivered order=' + orderId + ' asset=' + (task.result_asset_id || 'none'));
+      } else {
+        // Record terminal-ish errors in the ledger so we do not hammer the
+        // same order every minute. Everything else (transient network) is
+        // retried on the next tick.
+        const err = (resp && resp.error) || 'unknown_error';
+        const status = resp && resp.status;
+        const terminal = status === 400 || status === 404 || status === 409;
+        if (terminal) {
+          ledger.submitted[orderId] = -Date.now();
+          wroteLedger = true;
+        }
+        console.log('[ATP-AutoDeliver] Delivery failed order=' + orderId + ' status=' + (status || 'n/a') + ' err=' + String(err).slice(0, 120));
+      }
+    }
+
+    if (wroteLedger) _writeLedger(ledger);
+  } catch (err) {
+    console.log('[ATP-AutoDeliver] Tick threw (non-fatal): ' + (err && err.message || err));
+  } finally {
+    _inflight = false;
+  }
+}
+
+function start(opts) {
+  if (_started) return;
+  if (!_isEnabled()) return;
+  const requested = Number((opts && opts.pollMs) || process.env.ATP_AUTODELIVER_POLL_MS || DEFAULT_POLL_MS);
+  _pollMs = Math.max(MIN_POLL_MS, Math.floor(requested) || DEFAULT_POLL_MS);
+  _started = true;
+  _pollInterval = setInterval(function () {
+    _tick().catch(function () { /* swallowed in _tick */ });
+  }, _pollMs);
+  // Do not await -- fire the first tick asynchronously so start() returns
+  // immediately. This matches the autoBuyer start() semantics.
+  _tick().catch(function () { /* swallowed in _tick */ });
+  console.log('[ATP-AutoDeliver] Started (pollMs=' + _pollMs + ')');
+}
+
+function stop() {
+  if (_pollInterval) {
+    clearInterval(_pollInterval);
+    _pollInterval = null;
+  }
+  _started = false;
+}
+
+function isStarted() {
+  return _started;
+}
+
+function _resetForTests() {
+  stop();
+  _inflight = false;
+  _pollMs = DEFAULT_POLL_MS;
+}
+
+module.exports = {
+  start,
+  stop,
+  isStarted,
+  __internals: {
+    tick: _tick,
+    readLedger: _readLedger,
+    writeLedger: _writeLedger,
+    buildProofPayload: _buildProofPayload,
+    resetForTests: _resetForTests,
+    constants: {
+      DEFAULT_POLL_MS,
+      MIN_POLL_MS,
+      LEDGER_FILENAME,
+      LEDGER_MAX_ENTRIES,
+    },
+  },
+};

package/src/atp/cliAutobuyPrompt.js

@@ -117,10 +117,10 @@ async function runPrompt(opts) {
   try {
     output.write("\n");
     output.write("[ATP-AutoBuyer] Your evolver can automatically place small-priced\n");
-    output.write("ATP orders when it detects a capability gap (default OFF).\n");
+    output.write("ATP orders when it detects a capability gap (default ON).\n");
     output.write("  - daily hard cap:   ATP_AUTOBUY_DAILY_CAP_CREDITS (default applies)\n");
     output.write("  - per-order cap:    ATP_AUTOBUY_PER_ORDER_CAP_CREDITS\n");
-    output.write("  - unset EVOLVER_ATP_AUTOBUY and restart to disable at any time.\n");
+    output.write("  - set EVOLVER_ATP_AUTOBUY=off and restart to disable at any time.\n");
     output.write("\n");
   } catch (_) {
     return { prompted: false, decision: null, reason: "io_error" };
@@ -128,7 +128,7 @@ async function runPrompt(opts) {
 
   let answer;
   try {
-    answer = await ask("Enable autoBuyer for this session? [y/n/later] ", {
+    answer = await ask("Keep autoBuyer enabled for this session? [y/n/later] ", {
       input,
       output,
     });
@@ -143,6 +143,7 @@ async function runPrompt(opts) {
   }
   if (answer === "n" || answer === "no") {
     _writeAck(false);
+    env.EVOLVER_ATP_AUTOBUY = "off";
     return { prompted: true, decision: "no", reason: "user_declined" };
   }
   return { prompted: true, decision: "later", reason: "user_postponed" };

package/src/atp/hubClient.js

@@ -240,6 +240,25 @@ function getAtpPolicy() {
   return _get('/atp/policy', '/a2a/atp/policy');
 }
 
+/**
+ * GET /a2a/task/my?node_id=... -- list this node's claimed tasks
+ *
+ * ATP-originated tasks include an `atp_order_id` field on each task so the
+ * merchant side can pair a completed task with its DeliveryProof and call
+ * submitDelivery. Non-ATP tasks simply omit the field. This is NOT an
+ * /atp/* endpoint so it never routes through the proxy passthrough.
+ *
+ * @param {number} [limit]
+ */
+function listMyTasks(limit) {
+  const nid = getNodeId();
+  const params = new URLSearchParams();
+  params.set('node_id', nid);
+  if (limit) params.set('limit', String(limit));
+  const suffix = '/a2a/task/my?' + params.toString();
+  return _hubGet(suffix);
+}
+
 module.exports = {
   placeOrder,
   submitDelivery,
@@ -250,6 +269,7 @@ module.exports = {
   getOrderStatus,
   listProofs,
   getAtpPolicy,
+  listMyTasks,
   // exported for tests only
   _isProxyMode: _isProxyMode,
 };

package/src/atp/index.js

@@ -7,7 +7,8 @@
 //   consumerAgent   - ready-to-use consumer agent template
 //   serviceHelper   - service publishing helper
 //   defaultHandler  - default order handler + config helpers for auto-ATP
-//   autoBuyer       - opt-in capability-gap auto order helper with budget caps
+//   autoBuyer       - opt-out capability-gap auto order helper with budget caps
+//   autoDeliver     - opt-out merchant-side submitDelivery daemon
 //   cli             - parsers and runners for the `buy`/`orders`/`verify` subcommands
 
 const hubClient = require('./hubClient');
@@ -16,6 +17,7 @@ const consumerAgent = require('./consumerAgent');
 const serviceHelper = require('./serviceHelper');
 const defaultHandler = require('./defaultHandler');
 const autoBuyer = require('./autoBuyer');
+const autoDeliver = require('./autoDeliver');
 const cli = require('./cli');
 
 module.exports = {
@@ -25,5 +27,6 @@ module.exports = {
   serviceHelper,
   defaultHandler,
   autoBuyer,
+  autoDeliver,
   cli,
 };