@evomap/evolver 1.88.0 → 1.88.2

package/src/atp/cli.js

@@ -14,6 +14,14 @@
 // injectable for tests. Each runner returns a Promise that resolves to
 // { exitCode: number, output?: string, data?: object }.
 
+const {
+  ATP_VERIFY_MODES,
+  ATP_VERIFY_ACTIONS,
+  ATP_ROUTING_MODES,
+  ATP_PROOF_STATUSES,
+  ATP_ROLES,
+} = require('./protocol');
+
 function _parseNamed(args, longFlag, shortFlag) {
   const long = args.findIndex(a => typeof a === 'string' && (a === longFlag || a.startsWith(longFlag + '=')));
   if (long !== -1) {
@@ -83,11 +91,11 @@ function parseBuyArgs(args) {
 
 function parseOrdersArgs(args) {
   const role = _parseNamed(args, '--role', null);
-  if (role && !['consumer', 'merchant'].includes(role)) {
-    return { ok: false, error: 'invalid --role: ' + role + ' (expected consumer|merchant)' };
+  if (role && !ATP_ROLES.includes(role)) {
+    return { ok: false, error: 'invalid --role: ' + role + ' (expected ' + ATP_ROLES.join('|') + ')' };
   }
   const status = _parseNamed(args, '--status', null);
-  if (status && !['pending', 'verified', 'disputed', 'settled'].includes(status)) {
+  if (status && !ATP_PROOF_STATUSES.includes(status)) {
     return { ok: false, error: 'invalid --status: ' + status };
   }
   const limitRaw = _parseNamed(args, '--limit', null);
@@ -112,8 +120,8 @@ function parseVerifyArgs(args) {
     return { ok: false, error: 'verify requires <orderId>' };
   }
   const action = _parseNamed(args, '--action', null) || 'confirm';
-  if (!['confirm', 'ai_judge'].includes(action)) {
-    return { ok: false, error: 'invalid --action: ' + action + ' (expected confirm|ai_judge)' };
+  if (!ATP_VERIFY_ACTIONS.includes(action)) {
+    return { ok: false, error: 'invalid --action: ' + action + ' (expected ' + ATP_VERIFY_ACTIONS.join('|') + ')' };
   }
   return { ok: true, opts: { orderId, action } };
 }
@@ -324,11 +332,11 @@ async function runAtp(opts, deps) {
 function printUsage() {
   return [
     'ATP subcommands:',
-    '  evolver buy <caps> [--budget=N] [--question "..."] [--routing=fastest|cheapest|auction|swarm]',
-    '              [--verify=auto|ai_judge|bilateral] [--no-wait] [--timeout=<seconds>]',
-    '  evolver orders [--role=consumer|merchant] [--status=pending|verified|disputed|settled]',
+    '  evolver buy <caps> [--budget=N] [--question "..."] [--routing=' + ATP_ROUTING_MODES.join('|') + ']',
+    '              [--verify=' + ATP_VERIFY_MODES.join('|') + '] [--no-wait] [--timeout=<seconds>]',
+    '  evolver orders [--role=' + ATP_ROLES.join('|') + '] [--status=' + ATP_PROOF_STATUSES.join('|') + ']',
     '                 [--limit=N] [--json]',
-    '  evolver verify <orderId> [--action=confirm|ai_judge]',
+    '  evolver verify <orderId> [--action=' + ATP_VERIFY_ACTIONS.join('|') + ']',
     '  evolver atp <enable|disable|status>   -- manage auto-spend consent',
   ].join('\n');
 }

package/src/atp/protocol.js

@@ -0,0 +1,41 @@
+// Protocol-level enum constants for the Agent Transaction Protocol.
+//
+// These values (verify modes, routing modes, proof statuses, roles,
+// execution modes) live in @evomap/atp-sdk. This module is a thin
+// CommonJS facade so callsites in src/atp/ can `require('./protocol')`
+// for the authoritative sets instead of re-spelling the literals.
+//
+// Why move them out: ATP is the wire contract between this engine, the
+// EvoMap Hub, and (in future) evox-Rust. Hand-maintaining the allowed
+// value sets in each implementation is exactly the drift that the
+// v1.80.8 "explore" enum incident taught us to avoid for GEP. The ATP
+// contract is extracted into its own SDK before a second runtime wires
+// in, while it is still cheap. If you find yourself writing an enum
+// list literal here again (e.g. ['pending','verified',...]), stop --
+// import the constant from this facade instead, and bump
+// @evomap/atp-sdk if the set itself needs to change.
+//
+// Implementation note: @evomap/atp-sdk is published as ESM
+// (`"type": "module"`). Node supports `require()` of synchronous ESM
+// packages on 22.12.0 and later. The SDK itself stays permissive
+// (`engines.node >=18`) so `import`-based consumers on 18/20 aren't
+// blocked; the `>=22.12` guarantee that makes the require() below work
+// is pinned in THIS package's (evolver's) `engines.node`, not the SDK's.
+
+const {
+  ATP_VERIFY_MODES,
+  ATP_VERIFY_ACTIONS,
+  ATP_ROUTING_MODES,
+  ATP_PROOF_STATUSES,
+  ATP_ROLES,
+  ATP_EXECUTION_MODES,
+} = require('@evomap/atp-sdk');
+
+module.exports = {
+  ATP_VERIFY_MODES,
+  ATP_VERIFY_ACTIONS,
+  ATP_ROUTING_MODES,
+  ATP_PROOF_STATUSES,
+  ATP_ROLES,
+  ATP_EXECUTION_MODES,
+};

package/src/config.js

@@ -177,6 +177,26 @@ const SELF_PR_TIMEOUT_MS = envInt('EVOLVER_SELF_PR_TIMEOUT_MS', 30000);
 
 const LEAK_CHECK_MODE = envStr('EVOLVER_LEAK_CHECK', 'strict');
 
+// --- Reuse attribution (P4-a, Slice A) ---
+// Controls whether the evolver attaches a `reuse_attribution` block to the
+// synced `outcome` MemoryGraphEvent so the Hub can LATER (P4-a Slice B, gated +
+// team-signed-off) credit the SOURCE node when its asset is reused. Modes:
+//   off    (default) — attach nothing; byte-identical to pre-P4-a behavior.
+//   shadow           — attach the attribution block; it rides the existing
+//                      syncEventToHub -> /a2a/memory/event into the Hub's
+//                      MemoryGraphEvent.payload blob, which is GDI-inert and
+//                      read by NO payout path today.
+// There is intentionally NO `enforce` on the CLIENT: the evolver cannot move
+// money, so an enforce word would be a lie. The report stays economy-inert
+// until a SIGNED-OFF Hub reader converts it to credit (which MUST add the
+// anti-sybil gating — see P4-a Slice B). Until then it only emits honest,
+// runtime-observed attribution data (never agent-supplied identity).
+const REUSE_ATTRIBUTION_MODE = envStr('EVOLVER_REUSE_ATTRIBUTION', 'off');
+function reuseAttributionMode() {
+  const v = String(process.env.EVOLVER_REUSE_ATTRIBUTION || REUSE_ATTRIBUTION_MODE || 'off').toLowerCase().trim();
+  return v === 'shadow' ? 'shadow' : 'off';
+}
+
 // --- Validator mode (opt-out) ---
 // Node role: the evolver periodically fetches assigned validation tasks from
 // the Hub, runs the commands in an isolated sandbox, and submits
@@ -257,6 +277,9 @@ module.exports = {
   BLAST_RADIUS_HARD_CAP_LINES,
   // Security
   LEAK_CHECK_MODE,
+  // Reuse attribution (P4-a Slice A)
+  REUSE_ATTRIBUTION_MODE,
+  reuseAttributionMode,
   // Validator (opt-in role)
   VALIDATOR_ENABLED,
   VALIDATOR_STAKE_AMOUNT,