evolution-engine 0.1.1__tar.gz → 0.2.1__tar.gz

evolution_engine-0.2.1/LICENSE

@@ -0,0 +1,43 @@
+Business Source License 1.1
+
+Parameters
+
+Licensor: CodeQual LLC
+
+Licensed Work: Evolution Engine Core Analysis Engine v0.2.0 (and all subsequent versions)
+
+Additional Use Grant: You may use the Licensed Work in non-production environments for internal testing and development without a commercial license. Production use requires a valid Pro subscription.
+
+Change Date: 2029-02-20
+
+Change License: MIT
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative works, redistribute, and make non-production use of the Licensed Work. The Licensor may make an Additional Use Grant, above, permitting limited production use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly available distribution of a specific version of the Licensed Work under this License, whichever comes first, the Licensor hereby grants you rights under the terms of the Change License, and the rights granted in the paragraph above terminate.
+
+If your use of the Licensed Work does not comply with the requirements currently in effect as described in this License, you must purchase a commercial license from the Licensor, its affiliated entities, or authorized resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works of the Licensed Work, are subject to this License. This License applies separately for each version of the Licensed Work and the Change Date may vary for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy of the Licensed Work. If you receive the Licensed Work in original or modified form from a third party, the terms and conditions set forth in this License apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically terminate your rights under this License for the current and all other versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of Licensor or its affiliates (provided that you may use a trademark or logo of Licensor as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON AN "AS IS" BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS, EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND TITLE.
+MariaDB hereby grants you permission to use this License's text to license your works, and to refer to it using the trademark "Business Source License", as long as you comply with the Covenants of Licensor below.
+
+Covenants of Licensor
+
+In consideration of the right to use this License's text and the "Business Source License" name and trademark, Licensor covenants to MariaDB, and to all other recipients of the licensed work to be provided by Licensor:
+
+To specify as the Change License the GPL Version 2.0 or any later version, or a license that is compatible with GPL Version 2.0 or a later version, where "compatible" means that software provided under the Change License can be included in a program with software provided under GPL Version 2.0 or a later version. Licensor may specify additional Change Licenses without limitation.
+To either: (a) specify an additional grant of rights to use that does not impose any additional restriction on the right granted in this License, as the Additional Use Grant; or (b) insert the text "None" to specify a Change Date. Not to modify this License in any other way.
+
+Notice
+
+The Business Source License (this document, or the "License") is not an Open Source license. However, the Licensed Work will eventually be made available under an Open Source License, as stated in this License.

evolution_engine-0.2.1/LICENSE-MIT

@@ -0,0 +1,27 @@
+MIT License
+
+Copyright (c) 2025-2026 CodeQual LLC
+
+This license applies to the following components of Evolution Engine:
+- Command-line interface wrapper (evolution/cli.py)
+- Adapter framework (evolution/adapters/)
+- Plugin interfaces
+- GitHub Action wrapper (action/)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of the above-listed components and associated documentation files (the
+"Software"), to deal in the Software without restriction, including without
+limitation the rights to use, copy, modify, merge, publish, distribute,
+sublicense, and/or sell copies of the Software, and to permit persons to whom
+the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

{evolution_engine-0.1.1 → evolution_engine-0.2.1}/PKG-INFO

@@ -1,9 +1,9 @@
 Metadata-Version: 2.4
 Name: evolution-engine
-Version: 0.1.1
+Version: 0.2.1
 Summary: Git-native codebase evolution indexer
 Author: Slava
-License: MIT
+License: BSL-1.1
 Project-URL: Homepage, https://codequal.dev
 Project-URL: Repository, https://github.com/alpsla/evolution_monitor
 Project-URL: Bug Tracker, https://github.com/alpsla/evolution_monitor/issues
@@ -17,10 +17,12 @@ Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
-Classifier: License :: OSI Approved :: MIT License
+Classifier: License :: Other/Proprietary License
 Classifier: Operating System :: OS Independent
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown
+License-File: LICENSE
+License-File: LICENSE-MIT
 Requires-Dist: GitPython>=3.1
 Requires-Dist: click>=8.0
 Requires-Dist: requests>=2.25
@@ -32,83 +34,108 @@ Requires-Dist: pytest>=7.0; extra == "dev"
 Requires-Dist: pytest-cov>=4.0; extra == "dev"
 Requires-Dist: python-dotenv>=0.19; extra == "dev"
 Requires-Dist: stripe>=7.0; extra == "dev"
+Dynamic: license-file
 
 # Evolution Engine
 
-**Development Process Intelligence — a local-first CLI tool that observes how software evolves, learns what is structurally normal, and surfaces unexpected change with evidence to act.**
+**AI coding tools write correct code that silently breaks your architecture. Evolution Engine detects the drift, shows you the exact commit, and lets your AI fix it — with evidence.**
+
+Calibrated on 90+ open-source repos. 6.18M signals analyzed. Your code never leaves your machine.
 
 ---
 
-## What It Does
+## The Problem
+
+AI coding assistants (Cursor, Copilot, Claude Code, Codex) generate code that passes tests and looks correct in isolation. But over time, they introduce **architectural drift** — scattered file changes, unexpected dependency growth, broken structural patterns — that no single tool catches.
+
+Evolution Engine is a **drift detector for AI-assisted development**. It learns what is structurally normal for *your* repository, flags when development patterns shift, identifies the exact commit where drift started, and hands evidence to your AI agent to fix it.
+
+### The Loop: Detect → Evidence → Fix → Verify
 
-Run `evo analyze .` on any git repository. The Evolution Engine detects adapters automatically, builds per-repo baselines, and reports when your development process deviates from its own historical norms — across commits, CI, dependencies, deployments, and more.
+```
+  evo analyze .          What changed? Is it unusual for THIS repo?
+       |
+  evo investigate .      AI identifies the root cause commit + drift pattern
+       |
+  evo fix .              AI proposes a fix based on evidence, not guesswork
+       |
+  evo verify .           Did the fix resolve the drift? Or did it make it worse?
+       |
+  evo accept . 1 2       Expected change? Accept it. Move on.
+```
 
-No data leaves your machine. No configuration required. No accounts to create.
+This is the full cycle no other tool offers: detect drift, provide evidence, let AI fix it, verify the fix worked, and let humans decide what's intentional.
 
-### The Pipeline
+### How It Works (5-Phase Pipeline)
 
 ```
-Sources → Phase 1 (Record) → Phase 2 (Measure) → Phase 3 (Explain)
-                                  │                    │
-                                  └──── Phase 4 (Learn) ←──┘
-                                           │
-                                    Phase 5 (Inform)
-                                           │
-                                      HTML Report
-                                           │
-                                       HUMAN / AI
+Your Repo → Phase 1 (Record events) → Phase 2 (Detect deviation from YOUR baseline)
+                                            |
+            Phase 5 (Advisory) ← Phase 4 (Match known patterns) ← Phase 3 (Explain)
+                    |
+               HTML Report + PR/MR Comments
+                    |
+              HUMAN decides: investigate / fix / accept
 ```
 
 | Phase | What It Does |
 |-------|-------------|
-| **Phase 1** | Records immutable events from truth sources |
-| **Phase 2** | Computes baselines and deviation signals (MAD/IQR robust statistics) |
-| **Phase 3** | Explains signals in human language (template + optional LLM) |
-| **Phase 4** | Discovers cross-source patterns (correlation, lift, presence-based) |
-| **Phase 5** | Advisory reports with evidence packages |
+| **Phase 1** | Records immutable events — commits, builds, deps, releases |
+| **Phase 2** | Computes per-repo baselines, flags statistical deviation (MAD/IQR) |
+| **Phase 3** | Explains signals in human language — PM-friendly, evidence-backed |
+| **Phase 4** | Matches against 44 validated patterns from 90+ repos |
+| **Phase 5** | Prioritized advisory with severity, evidence, and action items |
 
 ---
 
 ## Quick Start
 
 ```bash
-# Install
 pip install evolution-engine
-
-# Analyze any git repository
 evo analyze .
+```
 
-# With a GitHub token (unlocks CI, deployment, security data)
-evo analyze . --token ghp_xxx
-
-# Generate an HTML report
-evo report .
+### Three Integration Paths
 
-# See what adapters were detected
-evo status
-```
+| Path | Command | When to use |
+|------|---------|-------------|
+| **CLI Explorer** | `evo analyze .` | Start here -- manual analysis, reports, investigation |
+| **Git Hooks** | `evo init . --path hooks` | Automate locally -- analyze on every commit or push |
+| **GitHub Action** | `evo init . --path action` | Automate in CI -- PR comments with risk badges |
 
-### From Source
+Start with the CLI. Graduate to hooks when you trust the output. Add the GitHub Action for team-wide coverage. See [QUICKSTART.md](QUICKSTART.md) for the full walkthrough.
 
 ```bash
-git clone <repo-url>
-cd evolution-engine
-python -m venv .venv
-source .venv/bin/activate
-pip install -e .
+# Path 1: CLI Explorer (start here)
+evo analyze .                    # Run the full pipeline
+evo report . --open              # Visual HTML report
+evo status                       # Detected adapters and run info
+
+# Path 2: Git Hooks (automate locally)
+evo init . --path hooks          # Install post-commit hook
+evo watch .                      # Or poll for commits continuously
 
-# Run the test suite (246 tests)
-python -m pytest tests/ -v
+# Path 3: GitHub Action (CI)
+evo init . --path action         # Generate workflow file, then push
+
+# All paths at once
+evo init . --path all
 ```
 
+Free tier covers Path 1 (CLI). Pro unlocks Path 2 (hooks) and Path 3 (CI integration), plus AI investigation, AI fix loop, and inline PR review comments.
+
+### Founding Member Program
+
+We're looking for 50 developers who use AI coding tools daily. In exchange for monthly feedback, you get founding member pricing: **$9.50/month for 3 months** (regular: $19/month). Use code `FOUNDING50` at checkout.
+
 ### Environment Variables
 
 ```bash
 # .env file (all optional)
 GITHUB_TOKEN=ghp_xxx            # Unlocks CI, deployment, security adapters
-EVO_LICENSE_KEY=xxx              # Pro/Team features (free tier works without)
-OPENROUTER_API_KEY=xxx           # LLM-enhanced explanations (Phase 3.1)
-PHASE31_ENABLED=false            # LLM off by default
+GITLAB_TOKEN=glpat-xxx          # Unlocks GitLab CI, releases adapters
+EVO_LICENSE_KEY=xxx              # Pro features (free tier works without)
+ANTHROPIC_API_KEY=sk-ant-xxx    # For evo investigate / evo fix (Pro)
 ```
 
 ---
@@ -156,25 +183,65 @@ The **Git History Walker** extracts dependency, schema, and config files from gi
 ## CLI Commands
 
 ```bash
-# Core
+# Core Analysis
 evo analyze [path]               # Detect adapters, run full pipeline
 evo analyze . --families git,ci  # Override auto-detection
 evo report [path]                # Generate HTML report from last run
 evo status                       # Show detected adapters and event counts
+evo investigate [path]           # AI root cause analysis (Pro)
+evo fix [path]                   # AI fix-verify loop (Pro)
+evo fix [path] --residual        # Iteration-aware prompt (current vs previous)
+evo verify <advisory>            # Compare current state to a previous advisory
+
+# Setup & Integration
+evo init [path]                  # Detect environment and suggest integration path
+evo init . --path hooks          # Install git hooks for auto-analysis
+evo init . --path action         # Generate GitHub Action workflow
+evo init . --path all            # Set up all integration paths
+evo setup [path]                 # Interactive configuration wizard
+evo setup --ui                   # Browser-based settings page
+evo watch [path]                 # Watch for commits and auto-analyze
+evo watch . --daemon             # Run watcher in background
+evo hooks install [path]         # Install git hooks
+evo hooks uninstall [path]       # Remove git hooks
+evo hooks status [path]          # Show hook status
 
 # Patterns & Knowledge Base
 evo patterns list                # Show discovered patterns
+evo patterns pull [path]         # Fetch community patterns from registry
+evo patterns push [path]         # Share anonymized patterns (requires privacy_level >= 1)
 evo patterns export              # Export anonymized pattern digests
 evo patterns import <file>       # Import community patterns
-evo patterns sync                # Sync universal patterns
+evo patterns packages            # List pattern packages + cache status
+evo patterns new <name>          # Scaffold a pattern package
+evo patterns validate <path>     # Validate a pattern package
+evo patterns publish <path>      # Publish pattern package to PyPI
+evo patterns add <package>       # Subscribe to a pattern package
+evo patterns remove <package>    # Unsubscribe from a pattern package
+evo patterns block <name>        # Block a pattern package
+evo patterns unblock <name>      # Unblock a pattern package
 
 # Adapter Ecosystem
-evo adapter list                 # Show detected + installed adapters
+evo adapter list                 # Show detected adapters with trust badges
+evo adapter discover [path]      # Find available adapters for your tools
 evo adapter validate <class>     # Run 13-check certification
+evo adapter validate <class> --security  # + security scan
+evo adapter security-check <mod> # Standalone security scan
 evo adapter guide                # How to build an adapter
 evo adapter new <name> --family ci   # Scaffold a pip-installable package
 evo adapter prompt <name> --family ci  # Generate AI prompt for building
 evo adapter request <description>     # Request an adapter from the community
+evo adapter block <name> -r "reason"  # Block an adapter locally
+evo adapter unblock <name>       # Unblock a blocked adapter
+evo adapter check-updates        # Check PyPI for plugin updates
+evo adapter report <name>        # Report a broken/malicious adapter
+
+# Configuration & History
+evo config list                  # Show all settings
+evo config set <key> <val>       # Update a setting
+evo license status               # Check license tier
+evo history list [path]          # Show run history
+evo history diff [r1 r2]         # Compare two runs
 ```
 
 ---
@@ -203,7 +270,7 @@ pip install -e .
 evo adapter validate evo_jenkins.JenkinsAdapter
 ```
 
-Checks include: required class attributes, valid family, iter_events yields valid events, JSON serialization, attestation structure, and more.
+Adapters pass 13 structural checks + security scanning before certification.
 
 ### Learn More
 
@@ -221,9 +288,38 @@ The Evolution Engine discovers cross-family patterns automatically:
 - **Lift-based co-occurrence**: deviations co-occur more than chance (lift >= 1.5)
 - **Presence-based**: metric distributions differ when events co-occur (Cohen's d >= 0.2)
 
-Patterns progress through scopes: **local** (this repo) -> **community** (shared anonymously) -> **confirmed** (local + community match) -> **universal** (bundled in package).
+Patterns progress through scopes: **local** (this repo) -> **community** (shared anonymously) -> **confirmed** (local + community match).
 
-Universal patterns ship with the pip package and are recognized instantly on new repositories.
+Community patterns are distributed through two redundant channels:
+- **Registry** (real-time) — patterns pushed by users are immediately available via `codequal.dev/api`
+- **PyPI packages** (durable) — periodic snapshots published as [`evo-patterns-community`](https://pypi.org/project/evo-patterns-community/), auto-fetched without `pip install`
+
+If the registry is unavailable, PyPI packages still work. Both are checked automatically on `evo analyze`.
+
+### Pattern Distribution
+
+```bash
+# Auto-fetch happens on every `evo analyze` — no manual install needed
+evo analyze .
+#   Imported 25 pattern(s) from community registry
+#   Imported 25 pattern(s) from community packages
+
+# Pull/push patterns from the community registry
+evo patterns pull .
+evo patterns push .   # requires: evo config set sync.privacy_level 2
+
+# Add a third-party pattern package to your sources
+evo patterns add evo-patterns-web-security
+
+# Block an unwanted package
+evo patterns block evo-patterns-untrusted
+
+# Build and publish your own pattern package
+evo patterns new my-patterns
+# ... edit patterns.json ...
+evo patterns validate evo-patterns-my-patterns
+evo patterns publish evo-patterns-my-patterns
+```
 
 ---
 
@@ -237,22 +333,25 @@ evolution-engine/
 │   ├── registry.py                # 3-tier adapter auto-detection
 │   ├── phase1_engine.py           # Phase 1: Observation
 │   ├── phase2_engine.py           # Phase 2: Baselines (MAD/IQR)
-│   ├── phase3_engine.py           # Phase 3: Explanations
-│   ├── phase3_1_renderer.py       # Phase 3.1: LLM enhancement
+│   ├── phase3_engine.py           # Phase 3: Explanations (template-based)
 │   ├── phase4_engine.py           # Phase 4: Pattern discovery
 │   ├── phase5_engine.py           # Phase 5: Advisory
 │   ├── knowledge_store.py         # SQLite knowledge base
 │   ├── kb_export.py               # Anonymized pattern export/import
 │   ├── kb_security.py             # Import validation (XSS, injection, traversal)
+│   ├── pattern_registry.py        # Auto-fetch pattern packages from PyPI
+│   ├── pattern_validator.py       # Pattern package validation
+│   ├── pattern_scaffold.py        # Pattern package scaffolding
 │   ├── report_generator.py        # Standalone HTML report generator
+│   ├── investigator.py            # AI investigation (evo investigate, Pro)
+│   ├── fixer.py                   # AI fix-verify loop (evo fix, Pro)
 │   ├── adapter_validator.py       # 13-check adapter certification
 │   ├── adapter_scaffold.py        # Package scaffolding + AI prompt gen
 │   ├── license.py                 # License tier gating
-│   ├── llm_openrouter.py          # OpenRouter LLM client
-│   ├── llm_anthropic.py           # Anthropic LLM client
-│   ├── validation_gate.py         # LLM output validation
 │   ├── data/
-│   │   └── universal_patterns.json  # Bundled universal patterns
+│   │   ├── universal_patterns.json  # Bundled universal patterns
+│   │   ├── pattern_index.json       # Known pattern packages
+│   │   └── pattern_blocklist.json   # Blocked pattern packages
 │   └── adapters/
 │       ├── git/                   # Version Control (+ Git History Walker)
 │       ├── ci/                    # CI / Build Pipeline (GitHub Actions)
@@ -264,7 +363,7 @@ evolution-engine/
 │       └── security/              # Security Scanning (Trivy, Dependabot)
 ├── tests/
 │   ├── conftest.py                # Shared fixtures
-│   ├── unit/                      # 200+ unit tests
+│   ├── unit/                      # 1500+ unit tests
 │   │   ├── test_phase2_deviation.py
 │   │   ├── test_phase4_cooccurrence.py
 │   │   ├── test_phase5_advisory.py
@@ -294,9 +393,15 @@ evolution-engine/
 
 ---
 
+## Why Now
+
+AI coding tools are generating more code than ever. Teams ship faster — but structural quality is invisible until something breaks. EE provides the missing feedback loop: a guardrail that tells you (and your AI) when development patterns drift from what's normal for your project.
+
+Calibrated on **90+ open-source repos**, **6.18 million SDLC signals**, and **2.1 million commits**. 44 validated cross-signal patterns. 1.6% false positive rate.
+
 ## Open-Core Model
 
-| Open Source (MIT) | Proprietary |
+| Open Source (MIT) | Proprietary (BSL 1.1) |
 |-------------------|-------------|
 | All adapters | Phase 2-5 engines |
 | CLI, registry, orchestrator | Knowledge store |
@@ -335,4 +440,12 @@ Key documents:
 
 ## License
 
-Open-core: adapters and CLI under MIT, analysis engines proprietary.
+Evolution Engine uses a dual-license model:
+
+| Component | License | File |
+|-----------|---------|------|
+| CLI, adapters, plugins, GitHub Action | [MIT](LICENSE-MIT) | `LICENSE-MIT` |
+| Core analysis engine (Phases 2-5) | [BSL 1.1](LICENSE) | `LICENSE` |
+| Community patterns | CC0-1.0 | — |
+
+The BSL 1.1 license permits non-production use without a commercial license. Production use requires a [Pro subscription](https://codequal.dev/#pricing). On **2029-02-20** the core engine automatically converts to MIT.