@evomap/evolver 1.90.0 → 2.0.0-beta.1

package/src/gep/validationReport.js

@@ -1,55 +0,0 @@
-// Standardized ValidationReport type for GEP.
-// Machine-readable, self-contained, and interoperable.
-// Can be consumed by external Hubs or Judges for automated assessment.
-
-const { computeAssetId, SCHEMA_VERSION } = require('./contentHash');
-const { captureEnvFingerprint, envFingerprintKey } = require('./envFingerprint');
-
-// Build a standardized ValidationReport from raw validation results.
-function buildValidationReport({ geneId, commands, results, envFp, startedAt, finishedAt }) {
-  const env = envFp || captureEnvFingerprint();
-  const resultsList = Array.isArray(results) ? results : [];
-  const cmdsList = Array.isArray(commands) ? commands : resultsList.map(function (r) { return r && r.cmd ? String(r.cmd) : ''; });
-  const overallOk = resultsList.length > 0 && resultsList.every(function (r) { return r && r.ok; });
-  const durationMs =
-    Number.isFinite(startedAt) && Number.isFinite(finishedAt) ? finishedAt - startedAt : null;
-
-  const report = {
-    type: 'ValidationReport',
-    schema_version: SCHEMA_VERSION,
-    id: 'vr_' + Date.now(),
-    gene_id: geneId || null,
-    env_fingerprint: env,
-    env_fingerprint_key: envFingerprintKey(env),
-    commands: cmdsList.map(function (cmd, i) {
-      const r = resultsList[i] || {};
-      return {
-        command: String(cmd || ''),
-        ok: !!r.ok,
-        stdout: String(r.out || r.stdout || '').slice(0, 4000), // Updated to support both 'out' and 'stdout'
-        stderr: String(r.err || r.stderr || '').slice(0, 4000), // Updated to support both 'err' and 'stderr'
-      };
-    }),
-    overall_ok: overallOk,
-    duration_ms: durationMs,
-    created_at: new Date().toISOString(),
-  };
-
-  report.asset_id = computeAssetId(report);
-  return report;
-}
-
-// Validate that an object is a well-formed ValidationReport.
-function isValidValidationReport(obj) {
-  if (!obj || typeof obj !== 'object') return false;
-  if (obj.type !== 'ValidationReport') return false;
-  if (!obj.id || typeof obj.id !== 'string') return false;
-  if (!Array.isArray(obj.commands)) return false;
-  if (typeof obj.overall_ok !== 'boolean') return false;
-  return true;
-}
-
-module.exports = {
-  buildValidationReport,
-  isValidValidationReport,
-};

package/src/gep/validator/index.js

@@ -1,411 +0,0 @@
-// src/gep/validator/index.js
-//
-// Validator mode entry-point. Feature-gated by EVOLVER_VALIDATOR_ENABLED.
-// Intended usage: called once per evolve cycle, it will fetch assigned
-// validation tasks from the Hub, execute the provided commands in a
-// sandbox, and submit a ValidationReport back to the Hub.
-//
-// Failure modes are all non-fatal -- a validator that cannot reach the Hub
-// or cannot sandbox-execute will simply skip and try again next cycle.
-'use strict';
-
-const { getNodeId, buildHubHeaders, buildNodeScopedHubHeaders } = require('../a2aProtocol');
-const { hubFetch } = require('../hubFetch');
-const { runInSandbox, runPreflight } = require('./sandboxExecutor');
-const { buildReportPayload, submitReport } = require('./reporter');
-const { ensureValidatorStake } = require('./stakeBootstrap');
-const { readFeatureFlag } = require('../featureFlags');
-const { resolveHubUrl: resolveDefaultHubUrl } = require('../../config');
-
-const FETCH_TIMEOUT_MS = Number(process.env.EVOLVER_VALIDATOR_FETCH_TIMEOUT_MS) || 8_000;
-const MAX_TASKS_PER_CYCLE = Math.max(1, Number(process.env.EVOLVER_VALIDATOR_MAX_TASKS_PER_CYCLE) || 2);
-
-function buildValidatorHubHeaders() {
-  const buildHeaders = buildNodeScopedHubHeaders || buildHubHeaders;
-  return buildHeaders();
-}
-
-// Three-tier resolution:
-//   1. Local env (highest priority - user escape hatch). Both ON and OFF are honored.
-//   2. Persisted feature flag from disk (set by hub mailbox).
-//   3. Code default: ON (validator role is opt-out as of v1.69.0).
-function isValidatorEnabled() {
-  const raw = String(process.env.EVOLVER_VALIDATOR_ENABLED || '').toLowerCase().trim();
-  if (raw === '0' || raw === 'false' || raw === 'no' || raw === 'off') return false;
-  if (raw === '1' || raw === 'true' || raw === 'yes' || raw === 'on') return true;
-  try {
-    const flag = readFeatureFlag('validator_enabled');
-    if (typeof flag === 'boolean') return flag;
-  } catch (_) {}
-  return true;
-}
-
-function resolveHubUrl() {
-  // Always go through config.resolveHubUrl() — it reads the same env vars
-  // getHubUrl() reads plus EVOLVER_DEFAULT_HUB_URL, falls back to the
-  // PUBLIC_DEFAULT_HUB_URL constant, and enforces the https schema check
-  // (with EVOMAP_HUB_ALLOW_INSECURE=1 as the explicit escape hatch).
-  // Preferring the raw getHubUrl() here would let an http:// URL slip past
-  // this frame; hubFetch would still catch it, but the in-validator code
-  // path should not look like it accepts an unvalidated URL.
-  return resolveDefaultHubUrl();
-}
-
-/**
- * Fetch validation tasks assigned to this node.
- */
-async function fetchValidationTasks() {
-  const nodeId = getNodeId();
-  if (!nodeId) return [];
-  const hubUrl = resolveHubUrl();
-  const url = hubUrl.replace(/\/+$/, '') + '/a2a/fetch';
-
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-
-  const msg = {
-    protocol: 'gep-a2a',
-    protocol_version: '1.0.0',
-    message_type: 'fetch',
-    message_id: 'msg_' + Date.now().toString(36),
-    sender_id: nodeId,
-    timestamp: new Date().toISOString(),
-    payload: {
-      // tasks_only short-circuits the Hub's asset search + GDI credit charge.
-      // Pre-v1.77.0 this sent `validation_only: true`, which Hub ignored,
-      // causing ~96 credits per 15s poll to be deducted from the owner. Keep
-      // validation_only as a belt-and-suspenders hint for newer Hubs that
-      // understand it; tasks_only is the universal no-charge switch.
-      tasks_only: true,
-      validation_only: true,
-      include_tasks: true,
-    },
-  };
-
-  try {
-    const res = await hubFetch(url, {
-      method: 'POST',
-      headers: buildValidatorHubHeaders(),
-      body: JSON.stringify(msg),
-      signal: controller.signal,
-    });
-    clearTimeout(timer);
-    if (!res.ok) return [];
-    const data = await res.json();
-    const p = data.payload || data;
-    const list = Array.isArray(p.validation_tasks) ? p.validation_tasks : [];
-    return list;
-  } catch (_) {
-    clearTimeout(timer);
-    return [];
-  }
-}
-
-/**
- * Validate a single task.
- * @param {object} task - Hub-provided validation task
- * @returns {Promise<{ status: string, report?: object, response?: object, reason?: string }>}
- */
-async function validateOneTask(task) {
-  if (!task || !task.task_id || !task.nonce) {
-    return { status: 'skipped', reason: 'invalid_task_shape' };
-  }
-  const commands = Array.isArray(task.validation_commands) ? task.validation_commands : [];
-  if (commands.length === 0) {
-    // Nothing to run -- report overall_ok=false so the Hub records a fail and moves on.
-    const payload = buildReportPayload(task, { results: [], overallOk: false, durationMs: 0 });
-    const r = await submitReport(payload);
-    return { status: 'reported_empty', report: payload, response: r };
-  }
-
-  let execution;
-  try {
-    execution = await runInSandbox(commands, {});
-  } catch (err) {
-    execution = {
-      results: [{
-        cmd: commands[0],
-        ok: false,
-        stdout: '',
-        stderr: 'sandbox_error: ' + (err && err.message ? err.message : String(err)),
-        exitCode: -1,
-        durationMs: 0,
-        timedOut: false,
-      }],
-      overallOk: false,
-      durationMs: 0,
-      stoppedEarly: true,
-    };
-  }
-
-  const payload = buildReportPayload(task, execution);
-  const response = await submitReport(payload);
-  return {
-    status: response && response.ok ? 'reported' : 'report_failed',
-    report: payload,
-    response,
-  };
-}
-
-// Lazy single-shot preflight cache. Runs once per process, reused by both the
-// daemon and the inline runValidatorCycle() called from the main evolve loop.
-let _preflightPromise = null;
-let _preflightResult = null;
-
-async function _ensurePreflight() {
-  if (_preflightResult) return _preflightResult;
-  if (_preflightPromise) return _preflightPromise;
-  _preflightPromise = (async () => {
-    try {
-      _preflightResult = await runPreflight();
-    } catch (err) {
-      _preflightResult = {
-        ok: false,
-        reason: 'preflight_threw',
-        durationMs: 0,
-        stderrTail: err && err.message ? String(err.message) : String(err),
-      };
-    }
-    _daemonStats.preflight = {
-      ok: !!_preflightResult.ok,
-      reason: _preflightResult.reason || null,
-      duration_ms: _preflightResult.durationMs || 0,
-      at: Date.now(),
-    };
-    if (!_preflightResult.ok) {
-      _preflightDisabled = true;
-      try {
-        console.warn(
-          '[Validator] Preflight FAILED (' + (_preflightResult.reason || 'unknown') + '): ' +
-          'cannot spawn `node <script>` inside the sandbox on this host. ' +
-          'Validator role is being SKIPPED to avoid flooding the Hub with env_fail reports. ' +
-          'Likely causes: node binary not on PATH for headless invocations, missing exec perm, ' +
-          'or unwritable TMPDIR. Diagnostic stderr: ' + (_preflightResult.stderrTail || '<empty>')
-        );
-      } catch (_) { /* console unavailable -- non-fatal */ }
-    }
-    return _preflightResult;
-  })();
-  return _preflightPromise;
-}
-
-/**
- * Run one validator cycle. Intended to be called from the main evolve loop.
- * Returns a summary object (useful for logging/tests).
- *
- * @param {{ skipStake?: boolean }} [opts]
- */
-async function runValidatorCycle(opts) {
-  const options = opts || {};
-  if (!isValidatorEnabled()) {
-    return { skipped: 'disabled' };
-  }
-  // Lazy preflight gate: refuse to talk to the Hub if the local toolchain
-  // cannot even run a trivial `node <script>` in the sandbox. Without this,
-  // every validation task posted to this node returns duration_ms=1 /
-  // commands_passed=0 and the Hub auto-quarantines the node for chronic
-  // env_fail.
-  const pf = await _ensurePreflight();
-  if (!pf.ok) {
-    return { skipped: 'preflight_failed', reason: pf.reason || 'unknown' };
-  }
-  if (!options.skipStake) {
-    try {
-      await ensureValidatorStake({});
-    } catch (err) {
-      // non-fatal -- stake may already exist or will retry later
-    }
-  }
-
-  const tasks = await fetchValidationTasks();
-  if (!tasks || tasks.length === 0) {
-    return { tasks: 0, processed: 0 };
-  }
-
-  const slice = tasks.slice(0, MAX_TASKS_PER_CYCLE);
-  const outcomes = [];
-  for (const t of slice) {
-    try {
-      const outcome = await validateOneTask(t);
-      outcomes.push({ task_id: t.task_id, ...outcome });
-    } catch (err) {
-      outcomes.push({
-        task_id: t.task_id,
-        status: 'error',
-        reason: err && err.message ? err.message : String(err),
-      });
-    }
-  }
-  return { tasks: tasks.length, processed: outcomes.length, outcomes };
-}
-
-// --- Background daemon ---
-//
-// In long-running modes (--loop / --mad-dog) the validator role used to share
-// the main evolve loop and was suppressed by idle gating (skipHubCalls) when
-// the host was saturated. The daemon runs independently on its own timer so
-// that validator participation does not depend on the agent's foreground load.
-
-function _envIntDefault(key, fallback) {
-  const raw = process.env[key];
-  if (raw === undefined || raw === '') return fallback;
-  const n = Number(raw);
-  return Number.isFinite(n) ? n : fallback;
-}
-const DAEMON_INTERVAL_MS = Math.max(15000, _envIntDefault('EVOLVER_VALIDATOR_DAEMON_INTERVAL_MS', 60000));
-const DAEMON_FIRST_DELAY_MS = Math.max(0, _envIntDefault('EVOLVER_VALIDATOR_DAEMON_FIRST_DELAY_MS', 30000));
-
-let _daemonTimer = null;
-let _daemonRunning = false;
-let _daemonInflight = false;
-let _daemonStats = { ticks: 0, processed: 0, lastError: null, lastRunAt: 0, preflight: null };
-let _preflightDisabled = false;
-// Generation counter: every poke / start bumps this. Tick captures
-// its gen at entry; if it doesn't match on resume, the tick refuses
-// to schedule its own next timer (a fresher path already owns it).
-// Mirrors the `_heartbeatGen` pattern in proxy/lifecycle/manager.js.
-let _daemonGen = 0;
-
-async function _daemonTick() {
-  if (_daemonInflight) return;
-  _daemonInflight = true;
-  const myGen = _daemonGen;
-  try {
-    if (!isValidatorEnabled()) {
-      _daemonStats.ticks += 1;
-      return;
-    }
-    if (_preflightDisabled) {
-      // Preflight failed during startup -- stay silent. We still tick so the
-      // operator can re-enable later by restarting the agent after fixing PATH.
-      _daemonStats.ticks += 1;
-      return;
-    }
-    const out = await runValidatorCycle({});
-    _daemonStats.ticks += 1;
-    _daemonStats.lastRunAt = Date.now();
-    if (out && typeof out.processed === 'number') {
-      _daemonStats.processed += out.processed;
-      if (out.processed > 0) {
-        console.log('[ValidatorDaemon] processed ' + out.processed + '/' + (out.tasks || 0) + ' task(s).');
-      }
-    }
-  } catch (err) {
-    _daemonStats.lastError = err && err.message || String(err);
-    console.warn('[ValidatorDaemon] tick failed (non-fatal): ' + _daemonStats.lastError);
-  } finally {
-    _daemonInflight = false;
-    // Generation guard: a poke or start fired while we were awaiting
-    // runValidatorCycle(). The fresher path already armed its own
-    // timer (T2); scheduling here would overwrite the T2 reference
-    // without clearing it, leaving two self-rearming chains running
-    // at doubled cadence.
-    if (_daemonRunning && myGen === _daemonGen) {
-      _daemonTimer = setTimeout(_daemonTick, DAEMON_INTERVAL_MS);
-      if (_daemonTimer && typeof _daemonTimer.unref === 'function') _daemonTimer.unref();
-    }
-  }
-}
-
-/**
- * Start an independent validator daemon. Safe to call once at process boot
- * from --loop / --mad-dog modes. No-op if already running.
- */
-function startValidatorDaemon() {
-  if (_daemonRunning) return false;
-  _daemonRunning = true;
-  _daemonGen += 1;
-  if (isValidatorEnabled()) {
-    // Surface an explicit notice every time validator mode starts so that users
-    // who do not read docs cannot later claim they were unaware the validator
-    // consumes network / stake / CPU. See GH issue #451.
-    try {
-      console.log(
-        '[Validator] Validator mode is ENABLED. Your node will participate in ' +
-        'Hub validation tasks: CPU, network bandwidth, and staked credits WILL ' +
-        'be used. To opt out, set EVOLVER_VALIDATOR_ENABLED=false (or unset it).'
-      );
-    } catch (_) { /* console unavailable -- non-fatal */ }
-    // Fire preflight immediately so the user-visible warning lands before the
-    // first DAEMON_FIRST_DELAY_MS tick. _ensurePreflight is idempotent and the
-    // first call from runValidatorCycle will reuse this promise.
-    _ensurePreflight();
-  }
-  _daemonTimer = setTimeout(_daemonTick, DAEMON_FIRST_DELAY_MS);
-  if (_daemonTimer && typeof _daemonTimer.unref === 'function') _daemonTimer.unref();
-  return true;
-}
-
-function stopValidatorDaemon() {
-  _daemonRunning = false;
-  if (_daemonTimer) {
-    clearTimeout(_daemonTimer);
-    _daemonTimer = null;
-  }
-}
-
-/**
- * Force the daemon to fire its next tick immediately. The internal
- * setTimeout runs on libuv's monotonic clock, which freezes during macOS
- * sleep -- without a poke, the post-wake tick may be up to
- * DAEMON_INTERVAL_MS (default 60s) away on the resumed clock, leaving
- * the node "alive on heartbeat but functionally inert" for that window.
- *
- * Safe to call when the daemon is stopped (no-op) or when a tick is
- * already in flight (the in-flight guard at _daemonTick / the running
- * gate at the top of the function both protect against double-firing).
- *
- * Wired from the index.js SIGCONT handler so wake events fan out to the
- * validator the same way they already do to heartbeat and SSE.
- */
-function pokeValidatorDaemon() {
-  if (!_daemonRunning) return false;
-  if (_daemonTimer) {
-    clearTimeout(_daemonTimer);
-    _daemonTimer = null;
-  }
-  // Bump generation: any in-flight `_daemonTick` from before the
-  // poke will see its captured gen mismatch on resume and skip its
-  // tail-`setTimeout`, so we don't end up with two concurrent timers
-  // self-rearming at doubled cadence.
-  _daemonGen += 1;
-  _daemonTimer = setTimeout(_daemonTick, 0);
-  if (_daemonTimer && typeof _daemonTimer.unref === 'function') _daemonTimer.unref();
-  return true;
-}
-
-function getValidatorDaemonStats() {
-  return Object.assign({ running: _daemonRunning, intervalMs: DAEMON_INTERVAL_MS }, _daemonStats);
-}
-
-function _resetPreflightForTests() {
-  _preflightPromise = null;
-  _preflightResult = null;
-  _preflightDisabled = false;
-  _daemonStats.preflight = null;
-}
-
-function _setPreflightForTests(result) {
-  _preflightResult = result || { ok: true, durationMs: 0 };
-  _preflightPromise = Promise.resolve(_preflightResult);
-  _preflightDisabled = !_preflightResult.ok;
-  _daemonStats.preflight = {
-    ok: !!_preflightResult.ok,
-    reason: _preflightResult.reason || null,
-    duration_ms: _preflightResult.durationMs || 0,
-    at: Date.now(),
-  };
-}
-
-module.exports = {
-  runValidatorCycle,
-  fetchValidationTasks,
-  validateOneTask,
-  isValidatorEnabled,
-  startValidatorDaemon,
-  stopValidatorDaemon,
-  pokeValidatorDaemon,
-  getValidatorDaemonStats,
-  _resetPreflightForTests,
-  _setPreflightForTests,
-};

package/src/gep/validator/reporter.js

@@ -1,210 +0,0 @@
-// src/gep/validator/reporter.js
-//
-// Builds and submits validation reports for validation tasks.
-// Sends via POST /a2a/report with `task_id` + `nonce` so the Hub routes the
-// body into processValidationReport instead of the normal reporting path.
-'use strict';
-
-const crypto = require('crypto');
-const { buildHubHeaders, buildNodeScopedHubHeaders, getHubUrl, getNodeId } = require('../a2aProtocol');
-const { hubFetch } = require('../hubFetch');
-const { captureEnvFingerprint } = require('../envFingerprint');
-const { resolveHubUrl: resolveDefaultHubUrl } = require('../../config');
-
-const REPORT_TIMEOUT_MS = Number(process.env.EVOLVER_VALIDATOR_REPORT_TIMEOUT_MS) || 10_000;
-
-function buildValidatorReportHeaders() {
-  const buildHeaders = buildNodeScopedHubHeaders || buildHubHeaders;
-  return buildHeaders();
-}
-
-// Per-command stderr/stdout tail bundled into the report. Bounded so a noisy
-// validator cannot blow up the Hub's a2a/report payload size.
-const REPORT_CMD_TAIL_CHARS = 240;
-const REPORT_MAX_COMMANDS = 8;
-
-// Failure classes attached to each command result so the Hub can distinguish
-// "validator host is broken" (env_fail) from "Gene's validation cmd cannot
-// run in our hardened sandbox" (sandbox_block) from a real assertion failure
-// (exit_nonzero).
-const FAILURE_CLASS = {
-  OK: 'ok',
-  PARSE_FAILED: 'parse_failed',
-  EXEC_NOT_ALLOWED: 'executable_not_allowed',
-  SANDBOX_BLOCK_NODE_FLAG: 'sandbox_block_node_flag',
-  SPAWN_FAILED: 'spawn_failed',
-  TIMEOUT: 'timeout',
-  EXIT_NONZERO: 'exit_nonzero',
-  UNKNOWN: 'unknown',
-};
-
-function classifyCommandFailure(result) {
-  if (!result) return FAILURE_CLASS.UNKNOWN;
-  if (result.ok) return FAILURE_CLASS.OK;
-  const stderr = String(result.stderr || '');
-  if (result.timedOut) return FAILURE_CLASS.TIMEOUT;
-  // Check sandbox-block-on-node-flag BEFORE the generic parse_failed check
-  // because assertNodeCommandSafe wraps its rejection inside the
-  // `command_parse_failed:` stderr prefix; a plain prefix check would
-  // misclassify the Gene/Hub-incompatibility case as a parse error.
-  if (stderr.includes('node flag not allowed in sandbox')
-      || stderr.includes('node requires a script file argument')) {
-    return FAILURE_CLASS.SANDBOX_BLOCK_NODE_FLAG;
-  }
-  if (stderr.startsWith('executable_not_allowed:')) return FAILURE_CLASS.EXEC_NOT_ALLOWED;
-  if (stderr.startsWith('command_parse_failed:')) return FAILURE_CLASS.PARSE_FAILED;
-  if (stderr.startsWith('spawn_failed:')) return FAILURE_CLASS.SPAWN_FAILED;
-  if (typeof result.exitCode === 'number' && result.exitCode !== 0) {
-    return FAILURE_CLASS.EXIT_NONZERO;
-  }
-  return FAILURE_CLASS.UNKNOWN;
-}
-
-function tailString(s, n) {
-  const str = typeof s === 'string' ? s : '';
-  if (str.length <= n) return str;
-  return str.slice(-n);
-}
-
-function summarizeResult(result) {
-  return {
-    cmd: typeof result.cmd === 'string' ? result.cmd.slice(0, 200) : '',
-    ok: !!result.ok,
-    exit_code: typeof result.exitCode === 'number' ? result.exitCode : null,
-    duration_ms: typeof result.durationMs === 'number' ? result.durationMs : 0,
-    timed_out: !!result.timedOut,
-    failure_class: classifyCommandFailure(result),
-    stderr_tail: tailString(result.stderr, REPORT_CMD_TAIL_CHARS),
-  };
-}
-
-// Aggregate failure_class for the whole report -- the first non-OK class wins.
-// Surfaces a single label in `failure_class` at the top of the report so that
-// the Hub can route on it without iterating per-command.
-function aggregateFailureClass(commands) {
-  if (!Array.isArray(commands) || commands.length === 0) return FAILURE_CLASS.UNKNOWN;
-  if (commands.every((c) => c.failure_class === FAILURE_CLASS.OK)) return FAILURE_CLASS.OK;
-  for (const c of commands) {
-    if (c.failure_class && c.failure_class !== FAILURE_CLASS.OK) return c.failure_class;
-  }
-  return FAILURE_CLASS.UNKNOWN;
-}
-
-function resolveHubUrl() {
-  try {
-    const u = getHubUrl && getHubUrl();
-    if (u && typeof u === 'string') return u;
-  } catch (_) {}
-  return resolveDefaultHubUrl();
-}
-
-function hashExecutionLog(results) {
-  const list = Array.isArray(results) ? results : [];
-  const hash = crypto.createHash('sha256');
-  for (const r of list) {
-    hash.update(String(r.cmd || ''));
-    hash.update('\0');
-    hash.update(String(r.ok ? 1 : 0));
-    hash.update('\0');
-    hash.update(String(r.exitCode || 0));
-    hash.update('\0');
-    hash.update((r.stdout || '').slice(0, 4000));
-    hash.update('\0');
-    hash.update((r.stderr || '').slice(0, 4000));
-    hash.update('\0');
-  }
-  return hash.digest('hex');
-}
-
-/**
- * Build the validation report payload the Hub expects.
- *
- * @param {{ task_id: string, nonce: string }} task
- * @param {{ results: Array, overallOk: boolean, durationMs: number }} execution
- * @param {{ reproductionScore?: number }} [opts]
- */
-function buildReportPayload(task, execution, opts) {
-  const options = opts || {};
-  const results = Array.isArray(execution && execution.results) ? execution.results : [];
-  const commandsTotal = results.length;
-  const commandsPassed = results.filter((r) => r && r.ok).length;
-  const env = captureEnvFingerprint();
-
-  const reproductionScore = Number.isFinite(options.reproductionScore)
-    ? options.reproductionScore
-    : (commandsTotal > 0 ? commandsPassed / commandsTotal : 0);
-
-  // Per-command summaries. Bounded to REPORT_MAX_COMMANDS so a runaway batch
-  // cannot blow up the Hub payload size.
-  const commands = results.slice(0, REPORT_MAX_COMMANDS).map(summarizeResult);
-  const failureClass = !execution.overallOk
-    ? aggregateFailureClass(commands)
-    : FAILURE_CLASS.OK;
-
-  return {
-    task_id: task.task_id,
-    nonce: task.nonce,
-    overall_ok: !!execution.overallOk,
-    commands_passed: commandsPassed,
-    commands_total: commandsTotal,
-    duration_ms: execution.durationMs || 0,
-    execution_log_hash: hashExecutionLog(results),
-    env_fingerprint: env,
-    reproduction_score: Math.max(0, Math.min(1, reproductionScore)),
-    // New diagnostic surface (Hub-side classifier should prefer these when
-    // present; older Hubs that ignore unknown fields keep working unchanged).
-    failure_class: failureClass,
-    commands,
-  };
-}
-
-async function submitReport(payload) {
-  const nodeId = getNodeId();
-  if (!nodeId) return { ok: false, error: 'no_node_id' };
-  const hubUrl = resolveHubUrl();
-  const url = hubUrl.replace(/\/+$/, '') + '/a2a/report';
-
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), REPORT_TIMEOUT_MS);
-
-  const msg = {
-    protocol: 'gep-a2a',
-    protocol_version: '1.0.0',
-    message_type: 'report',
-    message_id: 'msg_' + Date.now().toString(36) + '_' + crypto.randomBytes(3).toString('hex'),
-    sender_id: nodeId,
-    timestamp: new Date().toISOString(),
-    payload,
-  };
-
-  try {
-    const res = await hubFetch(url, {
-      method: 'POST',
-      headers: buildValidatorReportHeaders(),
-      body: JSON.stringify(msg),
-      signal: controller.signal,
-    });
-    clearTimeout(timer);
-    const text = await res.text();
-    if (!res.ok) {
-      return { ok: false, status: res.status, error: text.slice(0, 400) };
-    }
-    try {
-      return { ok: true, data: JSON.parse(text) };
-    } catch {
-      return { ok: true, data: text };
-    }
-  } catch (err) {
-    clearTimeout(timer);
-    return { ok: false, error: err && err.message ? err.message : String(err) };
-  }
-}
-
-module.exports = {
-  buildReportPayload,
-  submitReport,
-  hashExecutionLog,
-  classifyCommandFailure,
-  aggregateFailureClass,
-  FAILURE_CLASS,
-};