devlyn-cli 4.2.16 → 4.2.18

package/README.md

@@ -231,6 +231,8 @@ Only `__pycache__` directories containing exclusively regular `*.pyc` files coun
 
 On native Windows, use native Node/npm and Python plus Git for Windows Bash for the shipped shell wrapper. Run `npx devlyn-cli -y` in the project (add `--claude` for Claude Code). Skill folders follow the Agent Skills naming standard (for example `devlyn-ideate`), so a project that commits them checks out on Windows. Harness text is UTF-8 without requiring `PYTHONUTF8`.
 
+New default drain roots disable Windows content indexing for new children; names stay indexed and Microsoft Defender scanning is unaffected. For Defender performance, use a Dev Drive via `--worktree-root` or an administrator's exclusion for the root; see [loop options](config/skills/devlyn-ideate/references/loop.md).
+
 Windows completion preserves the workspace, owned refs and recovery receipt when writer cessation cannot be proved, even after merge; resume guidance and delivery status remain separate from product verification. The portability workflow checks out the repository on native Windows and tests the POSIX-packed npm artifact there. A POSIX pass alone does not establish Windows support: acceptance requires the passing Windows job for the exact source SHA/artifact hashes.
 
 ## Contributing

package/bin/skill-history.json

@@ -111,6 +111,7 @@
       "a9c5242608e8b6f660f3ae9daf3fdefb210b6e4603bddee3d26ba59a55be4085",
       "aa0d6fad740ead835720a528f197b29e6cd0b209d3b9db1b312b9895f991b037",
       "ac3d475156af89e2e887118e92b972dbfefde6f0a07bbbdb68ba88fce5f7904d",
+      "ac404e4e846557b4c7b32050dee5f7c83648311b7d1cecdbdcae9eeda1b8eaf7",
       "ac5485ee9218c7038c6d329a3877925995c5afcb2dbd16b1da4495ed769d2083",
       "add41e1257ed525d6f225d9eb976a3978f126e604ca7c0f5aa1b223af78f1902",
       "afb478a981c4fd91f66fbe10d04481cd4562825fd6785ba0aadc6ce3ee3da173",
@@ -322,6 +323,7 @@
       "5954e371659ae1010757f0eec4b80dd65a899f9fcf76d4d84d9a75476a963218",
       "65770e3f20c3a3afd2822e9acdcfc80b827f84a7737010b79332da70d431b05d",
       "65c781764633b912e5947362eba0837c8027461a904975401d79ad4fe8714084",
+      "694c8920e50d92cba46dbb27eb44dd88035a89ed625d3cbf9f2bce9366d44c96",
       "6c3e2e4b84b0b4f81aed3759704da7c14f3cbabf3beeb0d1654feda3a15a8675",
       "6d9df58c117165e9d297aa6be0df8d076bac1ed49dc29ae93906af1969798ab1",
       "6e7228610628fc4bca31dc0b0aaf5eb4445e1f123f2c54bd13921c5cd01129fe",
@@ -338,6 +340,7 @@
       "aba66b674683935e4c28c93333896dc116ffe67e7a35fe30b3599a8be507e94e",
       "b2e4437fa981317362d03ee032e1cfd8b686316e966c6ba12ecd619a009c80a6",
       "c1b8e3ebf38e2be8972aa003e9614a782cb4f195c69d20b95a475ebf9aaaab9e",
+      "c8e375aab574148542f392b093cbbf3f2e8dc623826b45e35df0a1a2c3862226",
       "ce282a55328c2d071cacc377670fbebea4da4b9a7fee81b25293fb26763f17c9",
       "cf61a917a804503ef1e26fbb1cf498181e843a0758ec001f84edb7bcac837448",
       "d6433bf0f96dd9dd485c3623885255738654674b3e23cfcc1a2cfd24f3cda96e",

package/config/skills/_shared/platform-support.py

@@ -115,6 +115,15 @@ def system_exit_code(code):
     return code - 0x100000000 if os.name == "nt" and code >= 0x80000000 else code
 
 
+def mark_not_content_indexed(path):
+    """Disable Windows content indexing for a directory and children created afterwards."""
+    if os.name != "nt":
+        return
+    attrs = _kernel.GetFileAttributesW(str(path))
+    _checked(attrs != 0xFFFFFFFF, _kernel.GetFileAttributesW, (str(path),))  # INVALID_FILE_ATTRIBUTES.
+    _kernel.SetFileAttributesW(str(path), attrs | stat.FILE_ATTRIBUTE_NOT_CONTENT_INDEXED)
+
+
 if os.name == "nt":
     import _winapi
     import ctypes
@@ -164,6 +173,7 @@ if os.name == "nt":
         ("DuplicateHandle", [wintypes.HANDLE, wintypes.HANDLE, wintypes.HANDLE, ctypes.POINTER(wintypes.HANDLE), wintypes.DWORD, wintypes.BOOL, wintypes.DWORD], wintypes.BOOL),
         ("CloseHandle", [wintypes.HANDLE], wintypes.BOOL),
         ("PeekNamedPipe", [wintypes.HANDLE, ctypes.c_void_p, wintypes.DWORD, ctypes.c_void_p, ctypes.POINTER(wintypes.DWORD), ctypes.c_void_p], wintypes.BOOL),
+        ("SetFileAttributesW", [wintypes.LPCWSTR, wintypes.DWORD], wintypes.BOOL),
     ):
         _function = getattr(_kernel, _name)
         _function.argtypes, _function.restype, _function.errcheck = _args, _result, _checked
@@ -171,6 +181,9 @@ if os.name == "nt":
     _kernel.WaitForSingleObject.argtypes = [wintypes.HANDLE, wintypes.DWORD]
     _kernel.WaitForSingleObject.restype = wintypes.DWORD  # WAIT_OBJECT_0 is successful zero, not BOOL.
 
+    _kernel.GetFileAttributesW.argtypes = [wintypes.LPCWSTR]
+    _kernel.GetFileAttributesW.restype = wintypes.DWORD  # Failure is INVALID_FILE_ATTRIBUTES, not zero.
+
     def _read_control(fd, count):
         deadline = time.monotonic() + 10
         data = b""

package/config/skills/_shared/task-completion.md

@@ -52,10 +52,12 @@ not write to the shared checkout. Queue drains retain their allocation order.
 ```sh
 python3 "$DEVLYN_SHARED_DIR/task-complete.py" allocate --repo . \
   --task '<task identity>' --branch '<absent task branch>' \
-  --worktree '<absent path>' --repository '<owner/repo>' --remote origin --base main
+  --worktree '<repo parent>/<repo name>.devlyn.noindex/<task directory>' \
+  --repository '<owner/repo>' --remote origin --base main
 ```
 
-Every delivery allocation owns a linked worktree; `--worktree` is required.
+Every delivery allocation owns a linked worktree; `--worktree` is required and
+must name an absent path.
 A publication allocation normally starts at the exact fetched remote base,
 independent of the anchor's branch or dirty state, and leaves the anchor's
 HEAD, index and files untouched. For a commit request, local-only work or

package/config/skills/devlyn-ideate/SKILL.md

@@ -96,7 +96,7 @@ An absolute path to a package's `meta.md` is added as it is; anything else is pl
 
 ## status
 
-Run `python3 "$DEVLYN_SKILL_DIR/scripts/queue.py" status --repo .` and report its counts, `next`, `blockers`, pending deliveries with their resume commands and any `cleanup` entry.
+Run `python3 "$DEVLYN_SKILL_DIR/scripts/queue.py" status --repo .` and report its counts, `next`, `blockers`, `warnings`, pending deliveries with their resume commands and any `cleanup` entry.
 
 ## drain
 
@@ -125,4 +125,4 @@ A drain can run for hours. Do not end the turn until it exits: run it in the for
 - Other `WAITING`: report each task’s reason and recovery command. Task-local failures leave dependents and barrier-held siblings waiting while independent work continues; the next drain retries eligible work once. An interrupted executor is observed once per drain and cannot be adopted or respawned until it stops. `BLOCKED` means authoritative queue reconstruction or preflight failed, including a held drain lock. Never edit receipts, refs or queue rows to get past either result.
 - An interrupted drain is resumed by running `drain` again; accepted work is never replayed, and a failed task is never rerun: plan its work again as a new loop.
 
-Report each task's product result, delivery status, PR URL, resume command, assumptions and unresolved questions, plus whole-loop acceptance, the package's `## Decisions and assumptions`, the drain report paths and its exact `Bring into` command; leave running it to the user. Report every `cleanup` diagnostic, including unavailable reports and retained parents; completed products keep their verdict. A package copy left in the checkout can prevent the `Bring into` command until it is removed.
+Report each task's product result, delivery status, PR URL, resume command, assumptions and unresolved questions, plus whole-loop acceptance, the package's `## Decisions and assumptions`, the drain report paths and its exact `Bring into` command; leave running it to the user. Report every `cleanup` diagnostic, including unavailable reports and retained parents, and all `warnings`; completed products keep their verdict. A package copy left in the checkout can prevent the `Bring into` command until it is removed.

package/config/skills/devlyn-ideate/references/loop.md

@@ -11,10 +11,10 @@ python3 "$DEVLYN_SKILL_DIR/scripts/queue.py" drain --repo . [--local-only] [--wo
 
 Both print one JSON object; exit 1 is `BLOCKED` with a `reason`.
 
-- `status` takes `queue.lock` in the repository's Git directory and finishes `add`'s cleanup (step 1); it reports reconciled counts (`pending`, `active`, `accepted`, `failed`, `blocked`, `legacy_pending`), the `next` task, `blockers`, deliveries still pending with their resume (drain again until the terminal commit is attached, then the printed completion command; add `--writers-stopped` only after stopping the task's writers), and under `cleanup` the package copies `add` kept or could not remove.
+- `status` takes `queue.lock` in the repository's Git directory and finishes `add`'s cleanup (step 1); it reports the running `skill` root and version, any `warnings`, reconciled counts (`pending`, `active`, `accepted`, `failed`, `blocked`, `legacy_pending`), the `next` task, `blockers`, deliveries still pending with their resume (drain again until the terminal commit is attached, then the printed completion command; add `--writers-stopped` only after stopping the task's writers), and under `cleanup` the package copies `add` kept or could not remove.
 - `drain` ends `DRAINED` (no runnable task remains; open deliveries show per task), `WAITING` (a task waits with its reason, or legacy rows need planning) or `BLOCKED` (unreadable or ambiguous authoritative queue, invalid invocation, preflight refusal or held drain lock). Progress lines `devlyn-loop: <task>: <event>` go to stderr.
 - `--local-only` (alias `--no-push`) keeps the loop local. A manifest `delivery: local-only` and any earlier local receipt of the loop keep that restriction for later drains. A local loop needs no remote; nothing is fetched or pushed. An `auto`/`pr` loop none of whose tasks has a pushed PR runs as a local loop from its capture and the branch it was added on. Once one has, that PR is never rewritten to local and the loop is never run locally: its tasks wait, naming the PR, while other work continues.
-- Worktrees default to `<repo parent>/<repo name>.devlyn/<loop-id>/<task-id>`.
+- Worktrees default to `<repo parent>/<repo name>.devlyn.noindex/<loop-id>/<task-id>`; tasks already allocated under an earlier default resume where their receipts record them. On Windows, a default root newly created by the drain gets the not-content-indexed attribute, inherited by new children (content only; names stay indexed). Microsoft Defender scanning is unaffected; use a Dev Drive via `--worktree-root` or an administrator's Defender exclusion for the root.
 
 The host supplies the executor and maps its configured engine to the argv; the loop has no model preference. Each `{packet}` in the argv is replaced by the task packet path, and each `{worktree_git_dir}` by the task worktree's absolute Git directory. The executor runs with the task worktree as its working directory and the null device as stdin; its stdout and stderr are appended to `executor.stdout` and `executor.stderr` in the packet's `evidence_dir`, never a pipe.
 

package/config/skills/devlyn-ideate/scripts/queue.py

@@ -112,6 +112,34 @@ def read_json(path):
         raise LoopError(f"{path}: {exc}") from exc
 
 
+def skill_diagnostics(anchor):
+    running = SKILLS / ".devlyn-install.json"
+    markers = dict.fromkeys([running, *(anchor / host / "skills/.devlyn-install.json" for host in (".claude", ".agents"))])
+    versions, errors = {}, {}
+    for marker in markers:
+        try:
+            data = json.loads(marker.read_text(encoding="utf-8"))
+            if not isinstance(data, dict) or not isinstance(data.get("version"), (str, type(None))):
+                raise ValueError("install marker must be an object with a string or null version")
+            versions[marker] = data.get("version")
+        except FileNotFoundError:
+            continue  # Global-only and source checkouts need no repository install marker.
+        except (OSError, ValueError, RecursionError) as exc:
+            errors[marker] = str(exc)
+    skill = {"root": str(SKILLS), "version": versions.get(running)}
+    warnings = []
+    for marker in markers:
+        if marker in errors:
+            detail = f"unreadable: {errors[marker]}"
+        elif running not in errors and marker in versions and versions[marker] != skill["version"]:
+            detail = f"version {json.dumps(versions[marker])}"
+        else:
+            continue
+        warnings.append(f"Running skill {skill['root']} (version {json.dumps(skill['version'])}); "
+                        f"install marker {marker} ({detail}); run npx devlyn-cli@latest update.")
+    return {"skill": skill, "warnings": warnings}
+
+
 def write_json(path, value):
     acceptance()["write_json"](path, value)
 
@@ -1034,6 +1062,17 @@ def allocate(v, row, opts):
     if values["start"] and (drift := instruction_drift(anchor, start)):
         return (f"the installed instructions ({drift}) in this checkout differ from those in its start commit {start}, so it would run "
                 f"without them; commit them and push them to origin/{manifest['base_ref']}")
+    if os.name == "nt" and opts.default_worktree_root:
+        try:
+            opts.worktree_root.mkdir(exist_ok=False)
+        except FileExistsError:
+            pass  # An existing root belongs to its owner; never change its attributes.
+        else:
+            try:
+                shared("platform-support")["mark_not_content_indexed"](opts.worktree_root)
+            except OSError as exc:
+                opts.root_diagnostics.append(
+                    f"content indexing unchanged: {opts.worktree_root}: could not set FILE_ATTRIBUTE_NOT_CONTENT_INDEXED: {exc}; continuing")
     result = task_complete("allocate", exclude_receipts=v["invalid_receipts"], **values)
     progress(identity, f"allocated {result['worktree']}")
     return None
@@ -1314,7 +1353,7 @@ def bring_in(v, loop):
     return f"{receipt['base']}: git merge --ff {receipt['remote']}/{receipt['base']}"
 
 
-def write_reports(v, status, reason):
+def write_reports(v, status, reason, warnings):
     paths = []
     for loop in dict.fromkeys(row["loop"] for row in v["rows"] if row["identity"]):
         path = v["common"] / "devlyn-loops" / loop / "drain-report.md"
@@ -1324,6 +1363,8 @@ def write_reports(v, status, reason):
                      f"- Queue: {f'{CAPTURES}{loop}:{loop_queue(loop)}' if loop in v['records'] else v['anchor'] / loop_queue(loop)}",
                      f"- Drain: {status}" + (f" — {reason}" if reason else ""), f"- Whole-loop acceptance: {loop_acceptance(v, loop, items)}",
                      *([f"- Bring into {line}"] if (line := bring_in(v, loop)) else []), ""]
+            if warnings:
+                lines += ["## Warnings", "", *(f"- {warning}" for warning in warnings), ""]
             try:
                 meta, _ = load_manifest(v["anchor"], loop, capture(v, loop))
                 decisions = sections(
@@ -1393,8 +1434,12 @@ def prune_parents(v, root):
 
 def drain(args):
     anchor, common = repository(args.repo)
+    args.repo = anchor  # Preserve the repository root for failures reported by main.
+    diagnostics = skill_diagnostics(anchor)
     require(any("{packet}" in part for part in args.executor), "executor argv must contain {packet}, replaced by the task packet path")
-    args.worktree_root = Path(args.worktree_root).resolve() if args.worktree_root else anchor.parent / f"{anchor.name}.devlyn"
+    args.default_worktree_root = args.worktree_root is None
+    args.root_diagnostics = []
+    args.worktree_root = Path(args.worktree_root).resolve() if args.worktree_root else anchor.parent / f"{anchor.name}.devlyn.noindex"
     with lock(common, "drain.lock", blocking=False):
         attempted, last, status, reason, refused = set(), None, "DRAINED", None, {}
         try:
@@ -1422,20 +1467,23 @@ def drain(args):
             with contextlib.suppress(LoopError, OSError):
                 last = view(anchor, common, args.local_only)
         if last is None:
-            return {"status": status, "reason": reason}
+            return {"status": status, "reason": reason, **diagnostics}
+        last["cleanup"].extend(args.root_diagnostics)
         annotate(last, refused)
         prune_parents(last, args.worktree_root)
-        return {"status": status, "reason": reason, "reports": write_reports(last, status, reason), "counts": counts(last),
+        return {"status": status, "reason": reason, **diagnostics,
+                "reports": write_reports(last, status, reason, diagnostics["warnings"]), "counts": counts(last),
                 "tasks": [summary(last, row) for row in last["rows"] if row["identity"]], "cleanup": last["cleanup"]}
 
 
 def status(args):
     anchor, common = repository(args.repo)
+    args.repo = anchor  # Preserve the repository root for failures reported by main.
     v = view(anchor, common, args.local_only)
     row = next_task(v, set())
     annotate(v, {})
     tasks = [summary(v, r) for r in v["rows"] if r["identity"]]
-    return {"status": "OK", "counts": counts(v), "next": row["identity"] if row else None,
+    return {"status": "OK", **skill_diagnostics(anchor), "counts": counts(v), "next": row["identity"] if row else None,
             "blockers": [f"{t['identity']}: {t['reason']}" for t in tasks if t.get("reason") and t["result"] in {"pending", "active", "blocked"}]
             + [f"legacy row {r['index'] + 1} needs planning: {r['text']}" for r in v["rows"] if not r["identity"] and r["mark"] == " "]
             + [f"unreadable receipt {item}" for item in v["unreadable"]],
@@ -1997,6 +2045,8 @@ def main():
         result = {"check": check, "add": add, "status": status, "drain": drain}[args.action](args)
     except (LoopError, OSError) as exc:
         result = {"status": "BLOCKED", "reason": str(exc)}
+        if args.action in {"status", "drain"}:
+            result.update(skill_diagnostics(Path(args.repo)))
     print(json.dumps(result, ensure_ascii=False, sort_keys=True))
     return 1 if result["status"] == "BLOCKED" else 0
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devlyn-cli",
-  "version": "4.2.16",
+  "version": "4.2.18",
   "description": "Loop & harness engineering for AI coding agents (Claude Code, Codex, and any AGENTS.md-driven agent) — core engineering principles for CLAUDE.md/AGENTS.md and a loop designer that splits one intent into tasks agents drain hands-free",
   "homepage": "https://github.com/fysoul17/devlyn-cli#readme",
   "bin": {