devloop 0.2.0__tar.gz → 0.2.2__tar.gz

{devloop-0.2.0 → devloop-0.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devloop
-Version: 0.2.0
+Version: 0.2.2
 Summary: Intelligent background agents for development workflow automation
 License: MIT
 License-File: LICENSE
@@ -38,12 +38,32 @@ Description-Content-Type: text/markdown
 
 [![Python 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/downloads/)
 [![Tests Passing](https://img.shields.io/badge/tests-167%20passing-green.svg)](#testing)
-[![Production Ready](https://img.shields.io/badge/status-production%20ready-brightgreen.svg)](#status)
+[![Alpha Release](https://img.shields.io/badge/status-alpha-orange.svg)](#status)
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 
+## ⚠️ ALPHA SOFTWARE - NOT FOR PRODUCTION
+
+**DevLoop is currently in active development and is not recommended for production use.**
+
+This is **research-quality software**. Use at your own risk. See [Known Limitations & Risks](./history/RISK_ASSESSMENT.md) for details on:
+
+- ✗ Subprocess execution not sandboxed (security risk)
+- ✗ Auto-fix may corrupt code (enable only if willing to review changes)
+- ✗ Race conditions possible in file operations (concurrent agent modifications)
+- ✗ Limited error recovery (daemon may not restart automatically)
+- ✗ Configuration migrations not yet supported
+- ✗ No process supervision (manual daemon management)
+
+**Suitable for:** Development on side projects, testing automation, research  
+**Not suitable for:** Critical code, production systems, untrusted projects
+
+[View complete risk assessment →](./history/RISK_ASSESSMENT.md)
+
+---
+
 ## Status
 
-✅ **PRODUCTION READY** — Full-featured development automation system. [View detailed implementation status →](./IMPLEMENTATION_STATUS.md)
+🔬 **ALPHA** — Full-featured development automation system in active development. [View detailed implementation status →](./IMPLEMENTATION_STATUS.md)
 
 ---
 
@@ -68,9 +88,26 @@ All agents run **non-intrusively in the background**, respecting your workflow.
 
 ## Quick Start
 
+### ⚠️ Before You Start
+
+**ALPHA SOFTWARE DISCLAIMER:**
+- This is research-quality code. Data loss is possible.
+- Only use on projects you can afford to lose or easily recover.
+- Make sure to commit your code to git before enabling DevLoop.
+- Do not enable auto-fix on important code.
+- Some agents may fail silently (see logs for details).
+
 ### Installation
 
-**Prerequisites:** Python 3.11+, Poetry
+**Prerequisites:** Python 3.11+
+
+#### Option 1: From PyPI (Recommended)
+
+```bash
+pip install devloop
+```
+
+#### Option 2: From Source
 
 ```bash
 # Clone the repository
@@ -316,7 +353,7 @@ Configure agent behavior in `.devloop/agents.json`:
 {
   "global": {
     "autonomousFixes": {
-      "enabled": true,
+      "enabled": false,
       "safetyLevel": "safe_only"
     },
     "maxConcurrentAgents": 5,
@@ -338,11 +375,13 @@ Configure agent behavior in `.devloop/agents.json`:
 }
 ```
 
-**Safety levels:**
-- `safe_only` — Only fix whitespace/indentation
+**Safety levels (Auto-fix):**
+- `safe_only` — Only fix whitespace/indentation (default, recommended)
 - `medium_risk` — Include import/formatting fixes
 - `all` — Apply all fixes (use with caution)
 
+⚠️ **Auto-fix Warning:** Currently auto-fixes run without backups or review. **DO NOT enable auto-fix in production** or on critical code. Track [secure auto-fix with backups issue](https://github.com/wioota/devloop/issues/emc).
+
 [Full configuration reference →](./docs/configuration.md)
 
 ---
@@ -552,17 +591,26 @@ DevLoop follows these core principles:
 
 ## Troubleshooting
 
+### ⚠️ If Something Goes Wrong
+
+**Recovery steps:**
+1. Stop the daemon: `devloop stop .`
+2. Check the logs: `tail -100 .devloop/devloop.log`
+3. Verify your code in git: `git status`
+4. Recover from git if files were modified: `git checkout <file>`
+5. Report the issue: [GitHub Issues](https://github.com/wioota/devloop/issues)
+
 ### Agents not running
 
 ```bash
 # Check status
 devloop status
 
-# View logs
-tail -f .devloop/agent.log
+# View logs (useful for debugging)
+tail -f .devloop/devloop.log
 
-# Enable verbose mode
-devloop watch . --verbose
+# Enable verbose mode for more details
+devloop watch . --foreground --verbose
 ```
 
 ### Performance issues
@@ -591,6 +639,13 @@ devloop custom-list
 ls -la .devloop/custom_agents/
 ```
 
+### Agent modified my files unexpectedly
+
+1. Check git diff: `git diff`
+2. Revert changes: `git checkout -- .`
+3. Disable the problematic agent in `.devloop/agents.json`
+4. Report issue with: `git show HEAD:.devloop/agents.json`
+
 [Full troubleshooting guide →](./docs/troubleshooting.md)
 
 ---

{devloop-0.2.0 → devloop-0.2.2}/README.md

@@ -4,12 +4,32 @@
 
 [![Python 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/downloads/)
 [![Tests Passing](https://img.shields.io/badge/tests-167%20passing-green.svg)](#testing)
-[![Production Ready](https://img.shields.io/badge/status-production%20ready-brightgreen.svg)](#status)
+[![Alpha Release](https://img.shields.io/badge/status-alpha-orange.svg)](#status)
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 
+## ⚠️ ALPHA SOFTWARE - NOT FOR PRODUCTION
+
+**DevLoop is currently in active development and is not recommended for production use.**
+
+This is **research-quality software**. Use at your own risk. See [Known Limitations & Risks](./history/RISK_ASSESSMENT.md) for details on:
+
+- ✗ Subprocess execution not sandboxed (security risk)
+- ✗ Auto-fix may corrupt code (enable only if willing to review changes)
+- ✗ Race conditions possible in file operations (concurrent agent modifications)
+- ✗ Limited error recovery (daemon may not restart automatically)
+- ✗ Configuration migrations not yet supported
+- ✗ No process supervision (manual daemon management)
+
+**Suitable for:** Development on side projects, testing automation, research  
+**Not suitable for:** Critical code, production systems, untrusted projects
+
+[View complete risk assessment →](./history/RISK_ASSESSMENT.md)
+
+---
+
 ## Status
 
-✅ **PRODUCTION READY** — Full-featured development automation system. [View detailed implementation status →](./IMPLEMENTATION_STATUS.md)
+🔬 **ALPHA** — Full-featured development automation system in active development. [View detailed implementation status →](./IMPLEMENTATION_STATUS.md)
 
 ---
 
@@ -34,9 +54,26 @@ All agents run **non-intrusively in the background**, respecting your workflow.
 
 ## Quick Start
 
+### ⚠️ Before You Start
+
+**ALPHA SOFTWARE DISCLAIMER:**
+- This is research-quality code. Data loss is possible.
+- Only use on projects you can afford to lose or easily recover.
+- Make sure to commit your code to git before enabling DevLoop.
+- Do not enable auto-fix on important code.
+- Some agents may fail silently (see logs for details).
+
 ### Installation
 
-**Prerequisites:** Python 3.11+, Poetry
+**Prerequisites:** Python 3.11+
+
+#### Option 1: From PyPI (Recommended)
+
+```bash
+pip install devloop
+```
+
+#### Option 2: From Source
 
 ```bash
 # Clone the repository
@@ -282,7 +319,7 @@ Configure agent behavior in `.devloop/agents.json`:
 {
   "global": {
     "autonomousFixes": {
-      "enabled": true,
+      "enabled": false,
       "safetyLevel": "safe_only"
     },
     "maxConcurrentAgents": 5,
@@ -304,11 +341,13 @@ Configure agent behavior in `.devloop/agents.json`:
 }
 ```
 
-**Safety levels:**
-- `safe_only` — Only fix whitespace/indentation
+**Safety levels (Auto-fix):**
+- `safe_only` — Only fix whitespace/indentation (default, recommended)
 - `medium_risk` — Include import/formatting fixes
 - `all` — Apply all fixes (use with caution)
 
+⚠️ **Auto-fix Warning:** Currently auto-fixes run without backups or review. **DO NOT enable auto-fix in production** or on critical code. Track [secure auto-fix with backups issue](https://github.com/wioota/devloop/issues/emc).
+
 [Full configuration reference →](./docs/configuration.md)
 
 ---
@@ -518,17 +557,26 @@ DevLoop follows these core principles:
 
 ## Troubleshooting
 
+### ⚠️ If Something Goes Wrong
+
+**Recovery steps:**
+1. Stop the daemon: `devloop stop .`
+2. Check the logs: `tail -100 .devloop/devloop.log`
+3. Verify your code in git: `git status`
+4. Recover from git if files were modified: `git checkout <file>`
+5. Report the issue: [GitHub Issues](https://github.com/wioota/devloop/issues)
+
 ### Agents not running
 
 ```bash
 # Check status
 devloop status
 
-# View logs
-tail -f .devloop/agent.log
+# View logs (useful for debugging)
+tail -f .devloop/devloop.log
 
-# Enable verbose mode
-devloop watch . --verbose
+# Enable verbose mode for more details
+devloop watch . --foreground --verbose
 ```
 
 ### Performance issues
@@ -557,6 +605,13 @@ devloop custom-list
 ls -la .devloop/custom_agents/
 ```
 
+### Agent modified my files unexpectedly
+
+1. Check git diff: `git diff`
+2. Revert changes: `git checkout -- .`
+3. Disable the problematic agent in `.devloop/agents.json`
+4. Report issue with: `git show HEAD:.devloop/agents.json`
+
 [Full troubleshooting guide →](./docs/troubleshooting.md)
 
 ---

{devloop-0.2.0 → devloop-0.2.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "devloop"
-version = "0.2.0"
+version = "0.2.2"
 description = "Intelligent background agents for development workflow automation"
 authors = ["DevLoop Contributors <devloop@example.com>"]
 license = "MIT"

{devloop-0.2.0 → devloop-0.2.2}/src/devloop/__init__.py

@@ -1,3 +1,3 @@
 """DevLoop - Background agents for development workflow automation."""
 
-__version__ = "0.2.0"
+__version__ = "0.2.2"

{devloop-0.2.0 → devloop-0.2.2}/src/devloop/cli/main.py

@@ -98,10 +98,44 @@ def setup_logging(verbose: bool = False):
     )
 
 
+def setup_logging_with_rotation(verbose: bool = False, project_dir: Path | None = None):
+    """Setup logging configuration with file rotation for daemon mode."""
+    from logging.handlers import RotatingFileHandler
+
+    if project_dir is None:
+        project_dir = Path.cwd()
+
+    level = logging.DEBUG if verbose else logging.INFO
+    log_file = project_dir / ".devloop" / "devloop.log"
+    log_file.parent.mkdir(parents=True, exist_ok=True)
+
+    # Create rotating file handler
+    # maxBytes: 10MB per file
+    # backupCount: keep 3 rotated files (total ~40MB max)
+    rotating_handler = RotatingFileHandler(
+        filename=str(log_file),
+        maxBytes=10 * 1024 * 1024,  # 10MB
+        backupCount=3,
+    )
+
+    # Format: timestamp | level | logger | message
+    formatter = logging.Formatter(
+        "%(asctime)s | %(levelname)-8s | %(name)-20s | %(message)s",
+        datefmt="%Y-%m-%d %H:%M:%S",
+    )
+    rotating_handler.setFormatter(formatter)
+
+    # Configure root logger
+    root_logger = logging.getLogger()
+    root_logger.setLevel(level)
+    root_logger.addHandler(rotating_handler)
+
+
 def run_daemon(path: Path, config_path: Path | None, verbose: bool):
     """Run devloop in daemon/background mode."""
     import os
     import sys
+    from logging.handlers import RotatingFileHandler
 
     # Fork to background
     try:
@@ -125,16 +159,11 @@ def run_daemon(path: Path, config_path: Path | None, verbose: bool):
     os.setsid()
     os.umask(0)
 
-    # Redirect stdout/stderr to log file
-    log_file = project_dir / ".devloop" / "devloop.log"
-    log_file.parent.mkdir(parents=True, exist_ok=True)
+    # Setup logging with rotation BEFORE redirecting file descriptors
+    setup_logging_with_rotation(verbose, project_dir)
 
-    with open(log_file, "a") as f:
-        os.dup2(f.fileno(), sys.stdout.fileno())
-        os.dup2(f.fileno(), sys.stderr.fileno())
-
-    # Setup logging for daemon
-    setup_logging(verbose)
+    # Don't redirect stdout/stderr - let logging handlers manage it
+    # This prevents unbounded log file growth
 
     # Write PID file
     pid_file = project_dir / ".devloop" / "devloop.pid"
@@ -200,6 +229,42 @@ def watch(
         console.print("\n[yellow]Shutting down...[/yellow]")
 
 
+async def _cleanup_old_data(context_store, event_store, interval_hours: int = 1):
+    """Periodically clean up old findings and events to prevent disk fill-up.
+    
+    Args:
+        context_store: Context store instance
+        event_store: Event store instance
+        interval_hours: How often to run cleanup (default: 1 hour)
+    """
+    cleanup_interval = interval_hours * 60 * 60  # Convert to seconds
+    context_retention_hours = 7 * 24  # Keep 7 days of findings
+    event_retention_days = 30  # Keep 30 days of events
+
+    while True:
+        try:
+            await asyncio.sleep(cleanup_interval)
+            
+            # Clean up old context findings
+            findings_removed = await context_store.cleanup_old_findings(
+                hours_to_keep=context_retention_hours
+            )
+            
+            # Clean up old events
+            events_removed = await event_store.cleanup_old_events(
+                days_to_keep=event_retention_days
+            )
+            
+            console.print(
+                f"[dim]Cleanup: removed {findings_removed} old findings, {events_removed} old events[/dim]"
+            )
+            
+        except asyncio.CancelledError:
+            break
+        except Exception as e:
+            console.print(f"[yellow]Cleanup error: {e}[/yellow]")
+
+
 async def watch_async(path: Path, config_path: Path | None):
     """Async watch implementation."""
     # Load configuration
@@ -232,6 +297,9 @@ async def watch_async(path: Path, config_path: Path | None):
     fs_config = {"watch_paths": [str(path)]}
     fs_collector = FileSystemCollector(event_bus=event_bus, config=fs_config)
 
+    # Start cleanup task (run every hour to remove old findings/events)
+    cleanup_task = asyncio.create_task(_cleanup_old_data(context_store, event_store))
+
     # Create and register agents based on configuration
     if config.is_agent_enabled("linter"):
         linter_config = config.get_agent_config("linter") or {}
@@ -324,8 +392,15 @@ async def watch_async(path: Path, config_path: Path | None):
     await shutdown_event.wait()
 
     # Stop everything
+    cleanup_task.cancel()
     await agent_manager.stop_all()
     await fs_collector.stop()
+    
+    # Wait for cleanup task to finish
+    try:
+        await cleanup_task
+    except asyncio.CancelledError:
+        pass
 
 
 @app.command()

{devloop-0.2.0 → devloop-0.2.2}/src/devloop/core/context_store.py

@@ -525,6 +525,48 @@ class ContextStore:
                     logger.error(f"Failed to load {tier_file}: {e}")
                     # Continue with other tiers
 
+    async def cleanup_old_findings(self, hours_to_keep: int = 168) -> int:
+        """
+        Clean up findings older than specified hours.
+
+        Args:
+            hours_to_keep: Number of hours to retain findings (default: 7 days = 168 hours)
+
+        Returns:
+            Number of findings removed
+        """
+        from datetime import datetime, UTC, timedelta
+
+        cutoff_time = datetime.now(UTC) - timedelta(hours=hours_to_keep)
+        cutoff_iso = cutoff_time.isoformat()
+
+        count = 0
+        async with self._lock:
+            for tier in Tier:
+                original_count = len(self._findings[tier])
+
+                # Filter out old findings
+                self._findings[tier] = [
+                    f
+                    for f in self._findings[tier]
+                    if f.timestamp > cutoff_iso  # ISO strings compare correctly
+                ]
+
+                count += original_count - len(self._findings[tier])
+
+                # Write cleaned tier to disk
+                await self._write_tier(tier)
+
+            # Update index after cleanup
+            await self._update_index()
+
+        if count > 0:
+            logger.info(
+                f"Cleaned up {count} findings older than {hours_to_keep} hours"
+            )
+
+        return count
+
 
 # Global instance
 context_store = ContextStore()