@evomap/evolver 1.87.1 → 1.87.2

package/src/atp/cliAutobuyPrompt.js

@@ -9,55 +9,34 @@
  *   - ack file memory/atp-autobuy-ack.json does not exist (already decided)
  *
  * Outcomes:
- *   - user answers y         -> enabled=true written, session opts in immediately
- *   - user answers n         -> enabled=false written, prompt never shown again
- *   - user answers later     -> no file written, prompt shown next time
+ *   - user answers y         -> autoBuyer.setConsent(true) — opts in for future sessions
+ *   - user answers n         -> autoBuyer.setConsent(false) — prompt never shown again
+ *   - user answers later     -> no ack written, prompt shown next session
  *   - any non-TTY/ack branch -> silent no-op
+ *
+ * setConsent failures (FS permission, disk full) are surfaced to the user
+ * via the output stream and returned as `reason: 'ack_write_failed'`; the
+ * decision field still reflects what the user typed.
  */
 
-const fs = require("fs");
-const path = require("path");
 const readline = require("readline");
+const autoBuyer = require("./autoBuyer");
 
-const ACK_FILE_NAME = "atp-autobuy-ack.json";
-
-function _getMemoryDir() {
-  try {
-    return require("../gep/paths").getMemoryDir();
-  } catch (_) {
-    return process.env.MEMORY_DIR || path.join(process.cwd(), "memory");
-  }
-}
+// All ack file plumbing is owned by autoBuyer: filename constant, path
+// resolution, read (strict validation), and write (atomic tmp+rename).
+// cliAutobuyPrompt delegates through the public API (not __internals) so
+// the two modules cannot diverge on schema or validation — pre-
+// consolidation drift bit us twice (Bugbot PR #141: duplicate writers +
+// lenient-vs-strict reader). Using public exports keeps the "test-only"
+// contract on __internals honest (Bugbot PR #141 R6).
+const ACK_FILE_NAME = autoBuyer.ACK_FILENAME;
 
 function _getAckPath() {
-  return path.join(_getMemoryDir(), ACK_FILE_NAME);
+  return autoBuyer.getAckPath();
 }
 
 function _readAck() {
-  try {
-    const raw = fs.readFileSync(_getAckPath(), "utf8");
-    const parsed = JSON.parse(raw);
-    if (!parsed || typeof parsed !== "object") return null;
-    return parsed;
-  } catch (_) {
-    return null;
-  }
-}
-
-function _writeAck(enabled) {
-  const p = _getAckPath();
-  try {
-    fs.mkdirSync(path.dirname(p), { recursive: true });
-    const body = {
-      enabled: !!enabled,
-      acknowledged_at: new Date().toISOString(),
-      version: 1,
-    };
-    fs.writeFileSync(p, JSON.stringify(body, null, 2) + "\n", "utf8");
-    return true;
-  } catch (_) {
-    return false;
-  }
+  return autoBuyer.readAck();
 }
 
 /**
@@ -116,11 +95,12 @@ async function runPrompt(opts) {
 
   try {
     output.write("\n");
-    output.write("[ATP-AutoBuyer] Your evolver can automatically place small-priced\n");
-    output.write("ATP orders when it detects a capability gap (default ON).\n");
-    output.write("  - daily hard cap:   ATP_AUTOBUY_DAILY_CAP_CREDITS (default applies)\n");
-    output.write("  - per-order cap:    ATP_AUTOBUY_PER_ORDER_CAP_CREDITS\n");
-    output.write("  - set EVOLVER_ATP_AUTOBUY=off and restart to disable at any time.\n");
+    output.write("[ATP-AutoBuyer] Your evolver will automatically place small-priced\n");
+    output.write("ATP orders when it detects a capability gap. This spends real\n");
+    output.write("credits on the EvoMap hub and is ON by default for new installs.\n");
+    output.write("  - daily hard cap:   ATP_AUTOBUY_DAILY_CAP_CREDITS (default 50)\n");
+    output.write("  - per-order cap:    ATP_AUTOBUY_PER_ORDER_CAP_CREDITS (default 10)\n");
+    output.write("  - change later:     evolver atp enable | evolver atp disable\n");
     output.write("\n");
   } catch (_) {
     return { prompted: false, decision: null, reason: "io_error" };
@@ -128,7 +108,7 @@ async function runPrompt(opts) {
 
   let answer;
   try {
-    answer = await ask("Keep autoBuyer enabled for this session? [y/n/later] ", {
+    answer = await ask("Keep ATP auto-spend ON for future sessions? [y=keep enabled / n=disable / later=ask again next session] ", {
       input,
       output,
     });
@@ -136,16 +116,44 @@ async function runPrompt(opts) {
     return { prompted: true, decision: null, reason: "ask_error" };
   }
 
+  // For y/n we persist via autoBuyer.setConsent (atomic tmp+rename, throws
+  // on FS failure). If the write fails we MUST tell the user — for the 'n'
+  // path especially, since auto-spend is default-ON and a failed disable
+  // means the user typed "off" but the runtime keeps charging credits
+  // (Bugbot PR #141 Medium: unchecked ack write). Do NOT mutate process.env
+  // on success: that would double-signal and shadow any explicit operator
+  // preference set later.
+  function _persistConsent(enabled, decision) {
+    try {
+      autoBuyer.setConsent(enabled);
+      return { prompted: true, decision, reason: enabled ? "user_accepted" : "user_declined" };
+    } catch (err) {
+      try {
+        output.write("[ATP-AutoBuyer] WARN: failed to persist consent: " + (err && err.message || err) + "\n");
+        if (enabled) {
+          output.write("                Auto-spend will keep using the default-on policy until\n");
+          output.write("                the ack is saved (capped at the configured caps).\n");
+        } else {
+          output.write("                Auto-spend will STAY ON (default policy) until your opt-out\n");
+          output.write("                can be saved — your decline was not persisted.\n");
+        }
+        output.write("                Check disk space and write permissions on the memory dir, then run\n");
+        output.write("                `evolver atp " + (enabled ? "enable" : "disable") + "` to retry.\n");
+      } catch (_) { /* output stream is broken too — nothing more we can do */ }
+      return { prompted: true, decision, reason: "ack_write_failed" };
+    }
+  }
+
   if (answer === "y" || answer === "yes") {
-    _writeAck(true);
-    env.EVOLVER_ATP_AUTOBUY = "on";
-    return { prompted: true, decision: "yes", reason: "user_accepted" };
+    return _persistConsent(true, "yes");
   }
   if (answer === "n" || answer === "no") {
-    _writeAck(false);
-    env.EVOLVER_ATP_AUTOBUY = "off";
-    return { prompted: true, decision: "no", reason: "user_declined" };
+    return _persistConsent(false, "no");
   }
+  // Postpone: no ack written, so autoBuyer.getConsent() returns
+  // {enabled: true, source: 'default'} this session. Auto-spend keeps
+  // running under the default policy with caps; the prompt will fire again
+  // next interactive session so the user can confirm or opt out.
   return { prompted: true, decision: "later", reason: "user_postponed" };
 }
 
@@ -155,7 +163,6 @@ module.exports = {
   __internals: {
     ACK_FILE_NAME,
     _readAck,
-    _writeAck,
     _getAckPath,
   },
 };