agentlint 2.5.2__tar.gz → 2.5.4__tar.gz

agentlint-2.5.4/.github/CODEOWNERS

@@ -0,0 +1,7 @@
+* @mauhpr
+
+/agentlint.yml @mauhpr
+/.github/workflows/ @mauhpr
+/src/agentlint/cli.py @mauhpr
+/src/agentlint/core/models.py @mauhpr
+/src/agentlint/mcp_server.py @mauhpr

agentlint-2.5.4/.github/dependabot.yml

@@ -0,0 +1,16 @@
+version: 2
+updates:
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    groups:
+      python-development:
+        dependency-type: development
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5

agentlint-2.5.4/.github/workflows/ci.yml

@@ -0,0 +1,78 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  quality:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        with:
+          persist-credentials: false
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0
+
+      - name: Set up Python
+        run: uv python install 3.13
+
+      - name: Install dependencies
+        run: uv sync --extra dev --frozen --python 3.13
+
+      - name: Check formatting
+        run: uv run ruff format --check .
+
+      - name: Lint
+        run: uv run ruff check .
+
+      - name: Build distributions
+        run: uv build
+
+      - name: Smoke-test wheel
+        run: |
+          uv venv --seed .wheel-venv
+          uv pip install --python .wheel-venv/bin/python dist/*.whl
+          .wheel-venv/bin/agentlint --version
+
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.11", "3.12", "3.13"]
+
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        with:
+          persist-credentials: false
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0
+
+      - name: Set up Python
+        run: uv python install ${{ matrix.python-version }}
+
+      - name: Install dependencies
+        run: uv sync --extra dev --frozen --python ${{ matrix.python-version }}
+
+      - name: Run tests
+        run: uv run --python ${{ matrix.python-version }} pytest -v --cov=agentlint --cov-report=term-missing --cov-report=xml
+
+      - name: Upload coverage to Codecov
+        if: matrix.python-version == '3.13'
+        uses: codecov/codecov-action@0fb7174895f61a3b6b78fc075e0cd60383518dac # v5.5.5
+        with:
+          token: ${{ secrets.CODECOV_TOKEN }}
+          files: ./coverage.xml
+          flags: unittests
+          name: agentlint-coverage
+          slug: mauhpr/agentlint
+          fail_ci_if_error: false
+          verbose: true

agentlint-2.5.4/.github/workflows/publish.yml

@@ -0,0 +1,76 @@
+name: Publish to PyPI
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: publish-${{ github.event.release.tag_name }}
+  cancel-in-progress: false
+
+jobs:
+  build:
+    name: Verify and build once
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        with:
+          persist-credentials: false
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0
+
+      - name: Set up Python
+        run: uv python install 3.13
+
+      - name: Install dependencies
+        run: uv sync --extra dev --frozen --python 3.13
+
+      - name: Verify source
+        run: |
+          uv lock --check
+          uv run ruff format --check .
+          uv run ruff check .
+          uv run pytest -q
+
+      - name: Build distributions
+        run: uv build
+
+      - name: Smoke-test wheel
+        run: |
+          uv venv --seed .wheel-venv
+          uv pip install --python .wheel-venv/bin/python dist/*.whl
+          .wheel-venv/bin/agentlint --version
+
+      - name: Upload artifacts
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        with:
+          name: distributions
+          path: dist/
+          if-no-files-found: error
+          retention-days: 7
+
+  publish-pypi:
+    name: Trusted publish
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/agentlint
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - name: Download artifacts
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        with:
+          name: distributions
+          path: dist/
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1
+        with:
+          attestations: true

agentlint-2.5.4/.github/workflows/test-publish.yml

@@ -0,0 +1,55 @@
+name: Publish to TestPyPI
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: test-publish
+  cancel-in-progress: false
+
+jobs:
+  build:
+    name: Build test distribution
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+        with:
+          persist-credentials: false
+      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0
+      - run: uv python install 3.13
+      - run: uv sync --extra dev --frozen --python 3.13
+      - run: uv run pytest -q
+      - run: uv build
+      - run: |
+          uv venv --seed .test-wheel-venv
+          uv pip install --python .test-wheel-venv/bin/python dist/*.whl
+          .test-wheel-venv/bin/agentlint --version
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        with:
+          name: test-distributions
+          path: dist/
+          if-no-files-found: error
+          retention-days: 7
+
+  publish:
+    name: Trusted test publish
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: testpypi
+      url: https://test.pypi.org/p/agentlint
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        with:
+          name: test-distributions
+          path: dist/
+      - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # release/v1
+        with:
+          repository-url: https://test.pypi.org/legacy/
+          attestations: true

{agentlint-2.5.2 → agentlint-2.5.4}/CHANGELOG.md

@@ -1,5 +1,54 @@
 # Changelog
 
+## v2.5.4 (2026-07-29) — Quality and Release Hardening
+
+This patch release strengthens AgentLint's development and publishing controls
+without intentionally changing its public rule or adapter APIs.
+
+### Changed
+
+- Establishes a repository-wide Ruff formatting and linting baseline and
+  enforces it in CI.
+- Enables branch-aware coverage with a 95% combined floor; the release suite
+  now contains 2,542 tests and reports 96.2% combined coverage.
+- Extracts the local AgentChute queue command group from the main CLI module,
+  creating the first dedicated boundary for continued CLI decomposition.
+- Expands MCP server coverage from 68% to 94%, including generic event checks,
+  session tools/resources, and server startup.
+- Pins GitHub Actions to immutable commit SHAs, disables checkout credential
+  persistence, uses frozen lockfile installs, and smoke-tests the built wheel.
+- Verifies source, tests, wheel installation, and trusted-publishing artifacts
+  before production releases; adds a manual TestPyPI workflow.
+- Adds Dependabot, CODEOWNERS, and regression tests for version consistency,
+  immutable workflow actions, and OIDC-only publishing.
+
+### Compatibility
+
+- Existing configurations, rules, adapters, hook payloads, and CLI command
+  names remain compatible.
+- The legacy `agentlint.setup` re-exports remain available.
+
+---
+
+## v2.5.3 (2026-05-25) — AgentChute Queue Baseline
+
+This patch release fixes AgentChute onboarding for existing AgentLint users
+with local event history.
+
+- Fixes `agentlint queue flush`, which could crash because the CLI wrapper did
+  not pass the newer queue batch/time-budget arguments.
+- Baselines the local AgentChute queue when a machine is paired with a new
+  license key, so pre-pairing local history is not uploaded as fresh dashboard
+  activity.
+- Adds `agentlint queue discard-pending --yes` for support cases where a user
+  intentionally wants to advance the local queue cursor without uploading
+  pending events.
+- Improves `agentlint policy explain` by listing active rule IDs, making policy
+  template debugging easier.
+- Adds regression coverage for the `block-curl-sh` policy template simulation.
+
+---
+
 ## v2.5.2 (2026-05-25) — AgentChute Credential Persistence
 
 This patch release fixes the first-run AgentChute pairing flow so users can run

{agentlint-2.5.2 → agentlint-2.5.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: agentlint
-Version: 2.5.2
+Version: 2.5.4
 Summary: Real-time quality guardrails for AI coding agents
 Project-URL: Homepage, https://github.com/mauhpr/agentlint
 Project-URL: Repository, https://github.com/mauhpr/agentlint
@@ -30,6 +30,7 @@ Requires-Dist: fastmcp>=3.0; extra == 'dev'
 Requires-Dist: pytest-asyncio>=0.24; extra == 'dev'
 Requires-Dist: pytest-cov>=5.0; extra == 'dev'
 Requires-Dist: pytest>=8.0; extra == 'dev'
+Requires-Dist: ruff>=0.9; extra == 'dev'
 Provides-Extra: mcp
 Requires-Dist: fastmcp>=3.0; extra == 'mcp'
 Description-Content-Type: text/markdown
@@ -62,7 +63,7 @@ We don't have a mature answer to that yet. Nobody does. The **autopilot pack** i
 
 AgentLint ships with 77 rules across 8 packs and normalizes tool events across supported AI coding agents. The 24 **universal** rules and 7 **quality** rules work with any tech stack; 4 additional packs auto-activate based on your project files; the **security** pack is opt-in; and the **autopilot** pack is opt-in and experimental.
 
-**v2.5.0 highlights:** Local-first AgentChute NVD enforcement with `no-nvd-critical-cve-install`, which consumes the cached `nvd-cves` feed and blocks exact critical/CISA KEV CPE product+version matches without network access in the hook path. Previous: AgentChute onboarding with `agentlint onboard`, dashboard pairing through `agentlint login`, `doctor --fix`, `status`, `test`, `test-policy`, policy cache diagnostics, durable queue inspection/flush commands, automatic background event upload, safer Codex hook enablement, sync dry-run diagnostics, FastAPI-aware `no-unnecessary-async`, grouped text CI findings, hybrid cloud feeds, privacy-safe event queueing, multi-platform adapter architecture, MCP server, warning suppression, auto-suppress, `diff_only` mode, and `auto-fix` mode.
+**v2.5.4 highlights:** Repository-wide Ruff enforcement, branch-aware coverage floors, immutable CI actions, verified release artifacts, stronger MCP tests, and the first extraction from the main CLI module. Previous: local-first AgentChute NVD enforcement, AgentChute onboarding with `agentlint onboard`, dashboard pairing through `agentlint login`, durable queue delivery, safer Codex hook enablement, multi-platform adapters, MCP server support, warning suppression, and auto-fix workflows.
 
 | Rule | Severity | What it does |
 |------|----------|-------------|
@@ -441,6 +442,7 @@ Create a Python file in your custom rules directory:
 # .agentlint/rules/no_direct_db.py
 from agentlint.models import Rule, RuleContext, Violation, Severity, HookEvent
 
+
 class NoDirectDB(Rule):
     id = "no-direct-db"
     description = "API routes must not import database layer directly"
@@ -452,12 +454,14 @@ class NoDirectDB(Rule):
         if not context.file_path or "/routes/" not in context.file_path:
             return []
         if context.file_content and "from database" in context.file_content:
-            return [Violation(
-                rule_id=self.id,
-                message="Route imports database directly. Use repository pattern.",
-                severity=self.severity,
-                file_path=context.file_path,
-            )]
+            return [
+                Violation(
+                    rule_id=self.id,
+                    message="Route imports database directly. Use repository pattern.",
+                    severity=self.severity,
+                    file_path=context.file_path,
+                )
+            ]
         return []
 ```
 

{agentlint-2.5.2 → agentlint-2.5.4}/README.md

@@ -26,7 +26,7 @@ We don't have a mature answer to that yet. Nobody does. The **autopilot pack** i
 
 AgentLint ships with 77 rules across 8 packs and normalizes tool events across supported AI coding agents. The 24 **universal** rules and 7 **quality** rules work with any tech stack; 4 additional packs auto-activate based on your project files; the **security** pack is opt-in; and the **autopilot** pack is opt-in and experimental.
 
-**v2.5.0 highlights:** Local-first AgentChute NVD enforcement with `no-nvd-critical-cve-install`, which consumes the cached `nvd-cves` feed and blocks exact critical/CISA KEV CPE product+version matches without network access in the hook path. Previous: AgentChute onboarding with `agentlint onboard`, dashboard pairing through `agentlint login`, `doctor --fix`, `status`, `test`, `test-policy`, policy cache diagnostics, durable queue inspection/flush commands, automatic background event upload, safer Codex hook enablement, sync dry-run diagnostics, FastAPI-aware `no-unnecessary-async`, grouped text CI findings, hybrid cloud feeds, privacy-safe event queueing, multi-platform adapter architecture, MCP server, warning suppression, auto-suppress, `diff_only` mode, and `auto-fix` mode.
+**v2.5.4 highlights:** Repository-wide Ruff enforcement, branch-aware coverage floors, immutable CI actions, verified release artifacts, stronger MCP tests, and the first extraction from the main CLI module. Previous: local-first AgentChute NVD enforcement, AgentChute onboarding with `agentlint onboard`, dashboard pairing through `agentlint login`, durable queue delivery, safer Codex hook enablement, multi-platform adapters, MCP server support, warning suppression, and auto-fix workflows.
 
 | Rule | Severity | What it does |
 |------|----------|-------------|
@@ -405,6 +405,7 @@ Create a Python file in your custom rules directory:
 # .agentlint/rules/no_direct_db.py
 from agentlint.models import Rule, RuleContext, Violation, Severity, HookEvent
 
+
 class NoDirectDB(Rule):
     id = "no-direct-db"
     description = "API routes must not import database layer directly"
@@ -416,12 +417,14 @@ class NoDirectDB(Rule):
         if not context.file_path or "/routes/" not in context.file_path:
             return []
         if context.file_content and "from database" in context.file_content:
-            return [Violation(
-                rule_id=self.id,
-                message="Route imports database directly. Use repository pattern.",
-                severity=self.severity,
-                file_path=context.file_path,
-            )]
+            return [
+                Violation(
+                    rule_id=self.id,
+                    message="Route imports database directly. Use repository pattern.",
+                    severity=self.severity,
+                    file_path=context.file_path,
+                )
+            ]
         return []
 ```
 

agentlint-2.5.4/RELEASE.md

@@ -0,0 +1,83 @@
+# AgentLint release process
+
+This repo publishes the `agentlint` Python package to PyPI from GitHub Actions.
+Do not publish from a local machine.
+
+## Release owner checklist
+
+1. Merge all required product/API/dashboard dependencies first.
+   - If the release depends on AgentChute server behavior, merge and deploy
+     AgentChute before publishing AgentLint.
+
+2. Prepare a release PR from a branch like `release/vX.Y.Z-description`.
+   Update these files together:
+   - `pyproject.toml`
+   - `src/agentlint/__init__.py`
+   - `uv.lock`
+   - `CHANGELOG.md`
+
+3. Run local verification before opening or updating the PR.
+
+   ```bash
+   .venv/bin/pytest tests/test_cli.py tests/test_agentchute_policy_queue_sync.py -k "not test_list_rules_universal_pack"
+   uv run ruff check CHANGELOG.md pyproject.toml src/agentlint/__init__.py src/agentlint/cli.py src/agentlint/agentchute/queue.py tests/test_cli.py tests/test_agentchute_policy_queue_sync.py
+   ```
+
+   Adjust the test list when the release touches other areas.
+
+4. Open the PR and wait for required GitHub checks.
+   - Python matrix must pass.
+   - Codecov patch must pass.
+   - Resolve conflicts by merging `origin/main` into the release branch.
+
+5. Merge the PR into `main`.
+
+6. Create the GitHub Release from the final `main` commit.
+
+   ```bash
+   git fetch origin main --tags
+   TARGET_SHA="$(git rev-parse origin/main)"
+   gh release create vX.Y.Z \
+     --target "$TARGET_SHA" \
+     --title "AgentLint vX.Y.Z" \
+     --notes-file /path/to/release-notes.md
+   ```
+
+   `gh-personal` can be used instead of `gh` on machines configured with that
+   wrapper.
+
+7. Let GitHub Actions publish to PyPI.
+   - The workflow is `.github/workflows/publish.yml`.
+   - It runs on `release.published`.
+   - It builds with `uv build`.
+   - It publishes with trusted publishing through `pypa/gh-action-pypi-publish`.
+
+   Check it with:
+
+   ```bash
+   gh run list --limit 5
+   ```
+
+8. Verify the package after the publish workflow succeeds.
+
+   ```bash
+   uv tool install --upgrade --reinstall agentlint
+   agentlint --version
+   ```
+
+   Expected output:
+
+   ```text
+   agentlint X.Y.Z
+   ```
+
+## Important rules
+
+- Do not run `uv publish` locally. PyPI credentials are intentionally owned by
+  GitHub trusted publishing.
+- Do not move an already published release tag. If a release is wrong after
+  publishing, create a follow-up patch version.
+- Keep release notes focused on user-visible behavior, fixes, and migration
+  notes.
+- If the release changes AgentLint behavior consumed by `agentlint-plugin`,
+  release AgentLint first, verify PyPI, then release the plugin.

{agentlint-2.5.2 → agentlint-2.5.4}/docs/adapters.md

@@ -10,6 +10,7 @@ Create a class that inherits from `AgentAdapter`:
 from agentlint.adapters.base import AgentAdapter
 from agentlint.models import AgentEvent, HookEvent, NormalizedTool, RuleContext
 
+
 class MyFrameworkAdapter(AgentAdapter):
     @property
     def platform_name(self) -> str:
@@ -18,6 +19,7 @@ class MyFrameworkAdapter(AgentAdapter):
     @property
     def formatter(self):
         from agentlint.formats.plain_json import PlainJsonFormatter
+
         return PlainJsonFormatter()
 
     def resolve_project_dir(self) -> str:
@@ -83,6 +85,7 @@ You can also write custom formatters:
 from agentlint.formats.base import OutputFormatter
 from agentlint.models import AgentEvent, Severity, Violation
 
+
 class MyFormatter(OutputFormatter):
     def exit_code(self, violations, event=""):
         return 1 if any(v.severity == Severity.ERROR for v in violations) else 0

{agentlint-2.5.2 → agentlint-2.5.4}/docs/custom-rules.md

@@ -47,13 +47,15 @@ class NoRawSQL(Rule):
         sql_keywords = ["execute(", "raw_sql(", "cursor.execute("]
         for keyword in sql_keywords:
             if keyword in content:
-                return [Violation(
-                    rule_id=self.id,
-                    message=f"Raw SQL detected ({keyword}). Use the ORM.",
-                    severity=self.severity,
-                    file_path=context.file_path,
-                    suggestion="Use Model.objects or the query builder instead.",
-                )]
+                return [
+                    Violation(
+                        rule_id=self.id,
+                        message=f"Raw SQL detected ({keyword}). Use the ORM.",
+                        severity=self.severity,
+                        file_path=context.file_path,
+                        suggestion="Use Model.objects or the query builder instead.",
+                    )
+                ]
         return []
 ```
 

{agentlint-2.5.2 → agentlint-2.5.4}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "agentlint"
-version = "2.5.2"
+version = "2.5.4"
 description = "Real-time quality guardrails for AI coding agents"
 readme = "README.md"
 license = "MIT"
@@ -33,6 +33,7 @@ dev = [
     "pytest-cov>=5.0",
     "pytest-asyncio>=0.24",
     "fastmcp>=3.0",
+    "ruff>=0.9",
 ]
 mcp = [
     "fastmcp>=3.0",
@@ -64,3 +65,16 @@ asyncio_mode = "auto"
 [tool.coverage.run]
 relative_files = true
 source = ["src/agentlint"]
+branch = true
+
+[tool.coverage.report]
+fail_under = 95
+show_missing = true
+skip_covered = true
+
+[tool.ruff]
+target-version = "py311"
+line-length = 100
+
+[tool.ruff.lint]
+select = ["E4", "E7", "E9", "F", "I", "UP", "B", "SIM"]

{agentlint-2.5.2 → agentlint-2.5.4}/src/agentlint/__init__.py

@@ -1,6 +1,6 @@
 """AgentLint - Real-time quality guardrails for AI coding agents."""
 
-__version__ = "2.5.2"
+__version__ = "2.5.4"
 
 from agentlint.core.models import (
     AgentEvent,

{agentlint-2.5.2 → agentlint-2.5.4}/src/agentlint/__main__.py

@@ -1,4 +1,5 @@
 """Allow running agentlint as a module: python -m agentlint."""
+
 from agentlint.cli import main
 
 if __name__ == "__main__":

{agentlint-2.5.2 → agentlint-2.5.4}/src/agentlint/adapters/__init__.py

@@ -3,6 +3,7 @@
 Each adapter translates a specific agent framework's events, tool names,
 session identifiers, and output expectations into AgentLint's generic core.
 """
+
 from __future__ import annotations
 
 from agentlint.adapters.base import AgentAdapter

{agentlint-2.5.2 → agentlint-2.5.4}/src/agentlint/adapters/_utils.py

@@ -2,6 +2,7 @@
 
 Internal module — not part of the public API. Subject to change without notice.
 """
+
 from __future__ import annotations
 
 import json

{agentlint-2.5.2 → agentlint-2.5.4}/src/agentlint/adapters/base.py

@@ -1,8 +1,8 @@
 """Base adapter protocol for agent platform integration."""
+
 from __future__ import annotations
 
 from abc import ABC, abstractmethod
-from pathlib import Path
 from typing import Any
 
 from agentlint.formats.base import OutputFormatter

{agentlint-2.5.2 → agentlint-2.5.4}/src/agentlint/adapters/claude.py

@@ -1,4 +1,5 @@
 """Claude Code adapter for AgentLint."""
+
 from __future__ import annotations
 
 import json
@@ -16,7 +17,6 @@ from agentlint.adapters.base import AgentAdapter
 from agentlint.formats.claude_hooks import ClaudeHookFormatter
 from agentlint.models import AgentEvent, HookEvent, NormalizedTool, RuleContext
 
-
 # Mapping from Claude Code native event names to generic AgentEvent
 _CLAUDE_EVENT_MAP: dict[str, AgentEvent] = {
     "PreToolUse": AgentEvent.PRE_TOOL_USE,
@@ -183,8 +183,8 @@ class ClaudeAdapter(AgentAdapter):
     def translate_event(self, native_event: str) -> AgentEvent:
         try:
             return _CLAUDE_EVENT_MAP[native_event]
-        except KeyError:
-            raise ValueError(f"Unknown Claude event: {native_event}")
+        except KeyError as exc:
+            raise ValueError(f"Unknown Claude event: {native_event}") from exc
 
     def normalize_tool_name(self, native_tool: str) -> str:
         return _CLAUDE_TOOL_MAP.get(native_tool, NormalizedTool.UNKNOWN).value
@@ -205,7 +205,8 @@ class ClaudeAdapter(AgentAdapter):
             config={},
             session_state=session_state,
             prompt=raw_payload.get("prompt"),
-            subagent_output=raw_payload.get("last_assistant_message") or raw_payload.get("subagent_output"),
+            subagent_output=raw_payload.get("last_assistant_message")
+            or raw_payload.get("subagent_output"),
             notification_type=raw_payload.get("notification_type"),
             compact_source=raw_payload.get("compact_source"),
             agent_transcript_path=raw_payload.get("agent_transcript_path"),
@@ -240,6 +241,7 @@ class ClaudeAdapter(AgentAdapter):
 
         if dry_run:
             import click
+
             click.echo(f"\nDry run — would write to {path}:")
             click.echo(json.dumps(settings, indent=2))
             return