Function main

index.js:833–3649

()

}

async function main() {
  const args = process.argv.slice(2);
  const command = args[0];
  // Solo mode (--solo): the "constrained wild" profile. Implies loop (a solo
  // run IS a Mad Dog loop) but hard-cuts the network + ATP, snapshots the
  // target repo each cycle and rolls back on failure, and circuit-breaks on
  // repeated failures instead of blind-respawning. It is a NEW side path — the
  // wild --mad-dog / controlled-daemon behavior below is untouched when isSolo
  // is false.
  const isSolo = args.includes('--solo');
  const isLoop = args.includes('--loop') || args.includes('--mad-dog') || isSolo;
  // Solo lockdown: hard-cut network + autonomous spend at the SOURCE, in-process,
  // before any module reads these envs. The block-level `if (!isSolo)` gates
  // below are belt-and-suspenders for the startup path; THIS is what also closes
  // the in-cycle paths (src/evolve/guards.js starts autoBuyer/autoDeliver from
  // inside evolve.run()) and the validator daemon (network + staked credits).
  // These are overwrites, not defaults — a user cannot re-enable ATP/hub/validator
  // under --solo by setting the env themselves. That is the "no escape valve" the
  // boss pinned. Numeric knobs (e.g. EVOLVER_SOLO_MAX_FAILS) stay tunable; the
  // four safety cuts do not.
  if (isSolo) {
    process.env.A2A_HUB_URL = '';
    process.env.EVOMAP_HUB_URL = '';
    process.env.EVOLVER_ATP = 'off';           // getAtpMode() → 'off'
    process.env.EVOLVER_ATP_AUTOBUY = 'off';    // getConsent() → disabled (env wins over ack)
    process.env.EVOLVER_ATP_AUTODELIVER = 'off';
    process.env.EVOLVER_VALIDATOR_ENABLED = 'false';
    process.env.EVOMAP_PROXY = '0';
  }
  const isVerbose = args.includes('--verbose') || args.includes('-v') ||
    String(process.env.EVOLVER_VERBOSE || '').toLowerCase() === 'true';
  if (isVerbose) process.env.EVOLVER_VERBOSE = 'true';

  if (!command || command === 'run' || command === '/evolve' || isLoop) {
    if (isLoop) {
        // EPIPE protection. The daemon may outlive the controlling
        // terminal (user closes the iTerm tab, ssh session drops, parent
        // shell exits). The SIGHUP handler below covers the signal side,
        // but the underlying pty fd is gone and the FIRST subsequent
        // console.log writes to a closed pipe -> stdout emits 'error'
        // with EPIPE. Without a listener attached, Node escalates EPIPE
        // to uncaughtException, which our handler then turns into
        // process.exit(1). Net result: daemon silently dies the next
        // time it tries to log, with no useful trace. Swallow EPIPE
        // explicitly so the daemon stays alive when its terminal goes
        // away (matching standard daemonization practice).
        try {
          // EPIPE: swallow (daemon must outlive its controlling terminal).
          // Non-EPIPE (EIO, ENOSPC on redirected log, etc.): the listener
          // already prevents 'error' from escalating to uncaughtException,
          // so write a one-line trace to the *other* stream so operators
          // can see the failure mode instead of finding a silent daemon.
          process.stdout.on('error', function (err) {
            if (err && err.code === 'EPIPE') return;
            try { process.stderr.write('[evolver] stdout error: ' + (err && (err.code || err.message) || err) + '\n'); } catch (_) {}
          });
          process.stderr.on('error', function (err) {
            if (err && err.code === 'EPIPE') return;