agentlinter 0.2.0__tar.gz → 0.3.2__tar.gz

agentlinter-0.3.2/.agent-lint.toml.example

@@ -0,0 +1,32 @@
+# ---------------------------------------------------------------------------
+# Example project-level configuration for agent-lint.
+# Place this file in your project root as .agent-lint.toml
+# or add [tool.agent-lint] to pyproject.toml instead.
+# ---------------------------------------------------------------------------
+
+[agent-lint]
+# Minimum score before CI exits with failure.
+fail-under = 80
+
+# Output format: table | json | markdown | sarif
+format = "table"
+
+# Rules to suppress globally (equivalent to # agent-lint: ignore=RULE_ID)
+exclude-rules = ["B004", "E003"]
+
+# Override default severities per rule.
+[agent-lint.custom-severities]
+S001 = "warning"   # Demote shell variable interpolation from ERROR to WARNING.
+R003 = "warning"   # Demote retry-without-max from INFO to WARNING.
+
+# Paths to lint recursively.
+include-paths = ["workflows/", "agents/"]
+
+# Paths to ignore.
+exclude-paths = ["workflows/templates/", "agents/examples/"]
+
+# Default category filter (optional).
+# category = "security"
+
+# Default severity filter (optional).
+# severity = "error"

agentlinter-0.3.2/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,66 @@
+name: Bug Report
+description: Report a bug in agent-lint
+title: "[Bug]: "
+labels: ["bug", "triage"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for reporting a bug. Please fill in the details below so we can reproduce and fix it.
+  - type: input
+    id: version
+    attributes:
+      label: agent-lint Version
+      description: What version of agent-lint are you running?
+      placeholder: e.g., 0.2.1
+    validations:
+      required: true
+  - type: input
+    id: python
+    attributes:
+      label: Python Version
+      description: What Python version are you using?
+      placeholder: e.g., 3.12.3
+    validations:
+      required: true
+  - type: dropdown
+    id: os
+    attributes:
+      label: Operating System
+      options:
+        - macOS
+        - Linux
+        - Windows
+        - Other
+    validations:
+      required: true
+  - type: textarea
+    id: what-happened
+    attributes:
+      label: What happened?
+      description: Describe the bug in clear steps.
+      placeholder: |
+        1. Ran `agent-lint lint workflow.yaml`
+        2. Expected to see a score of 85
+        3. Got a crash with `PricingError: Unknown provider`
+    validations:
+      required: true
+  - type: textarea
+    id: workflow
+    attributes:
+      label: Workflow YAML (if applicable)
+      description: Paste the minimal YAML that triggers the bug.
+      render: yaml
+  - type: textarea
+    id: logs
+    attributes:
+      label: Output / Logs
+      description: Paste the full error output or traceback.
+      render: shell
+  - type: checkboxes
+    id: terms
+    attributes:
+      label: Code of Conduct
+      options:
+        - label: I agree to follow this project's Code of Conduct
+          required: true

agentlinter-0.3.2/.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,41 @@
+name: Feature Request
+description: Suggest a new feature or enhancement for agent-lint
+title: "[Feature]: "
+labels: ["enhancement", "triage"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for suggesting a feature. Please describe the use case and proposed solution.
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem Statement
+      description: What problem does this feature solve?
+      placeholder: |
+        Currently, agent-lint only supports Gorgon, CrewAI, and LangChain workflows.
+        I need support for OpenAI Swarm YAML configs.
+    validations:
+      required: true
+  - type: textarea
+    id: solution
+    attributes:
+      label: Proposed Solution
+      description: How should this feature work?
+      placeholder: |
+        Add a new `WorkflowFormat.SWARM` and `parsers/swarm.py` that detects
+        OpenAI Swarm configs by the presence of `agents` and `handoffs` keys.
+    validations:
+      required: true
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives Considered
+      description: What other approaches have you tried?
+  - type: checkboxes
+    id: terms
+    attributes:
+      label: Code of Conduct
+      options:
+        - label: I agree to follow this project's Code of Conduct
+          required: true

agentlinter-0.3.2/.github/actions/agent-lint/action.yml

@@ -0,0 +1,61 @@
+# ---------------------------------------------------------------------------
+# Composite GitHub Action: agent-lint
+# Usage in downstream workflows:
+#
+#   steps:
+#     - uses: AreteDriver/agent-lint/.github/actions/agent-lint@main
+#       with:
+#         path: workflows/
+#         fail-under: 80
+#         format: github
+# ---------------------------------------------------------------------------
+name: 'agent-lint'
+description: 'Lint agent workflow YAML configs for cost and anti-patterns'
+author: 'AreteDriver'
+
+inputs:
+  path:
+    description: 'Path to workflow YAML file or directory'
+    required: true
+    default: '.'
+  fail-under:
+    description: 'Minimum lint score (0-100)'
+    required: false
+    default: '80'
+  format:
+    description: 'Output format (table|json|markdown|github)'
+    required: false
+    default: 'github'
+  category:
+    description: 'Filter by category (budget|resilience|efficiency|security)'
+    required: false
+    default: ''
+  severity:
+    description: 'Filter by severity (error|warning|info)'
+    required: false
+    default: ''
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: '3.12'
+
+    - name: Install agent-lint
+      shell: bash
+      run: pip install agentlinter
+
+    - name: Run agent-lint
+      shell: bash
+      run: |
+        ARGS=("${{ inputs.path }}")
+        [ -n "${{ inputs.fail-under }}" ] && ARGS+=(--fail-under "${{ inputs.fail-under }}")
+        [ -n "${{ inputs.category }}" ] && ARGS+=(--category "${{ inputs.category }}")
+        [ -n "${{ inputs.severity }}" ] && ARGS+=(--severity "${{ inputs.severity }}")
+        agent-lint lint "${ARGS[@]}" --format "${{ inputs.format }}"
+
+branding:
+  icon: 'shield'
+  color: 'blue'

agentlinter-0.3.2/.github/pull_request_template.md

@@ -0,0 +1,35 @@
+## Summary
+
+Brief description of what this PR does.
+
+## Type of Change
+
+- [ ] Bug fix (`fix:`)
+- [ ] New feature (`feat:`)
+- [ ] Documentation (`docs:`)
+- [ ] CI/CD (`ci:`)
+- [ ] Refactor (`refactor:`)
+- [ ] Tests (`test:`)
+- [ ] Maintenance (`chore:`)
+
+## Changes
+
+- Change 1
+- Change 2
+- Change 3
+
+## Verification
+
+- [ ] `ruff check src/ tests/` passes
+- [ ] `ruff format --check src/ tests/` passes
+- [ ] `mypy src/` passes
+- [ ] `pytest tests/ -v` passes
+- [ ] Coverage stays ≥ 90%
+
+## Related Issues
+
+Fixes # (issue number)
+
+## Additional Notes
+
+Anything else reviewers should know?

agentlinter-0.3.2/.github/workflows/changelog.yml

@@ -0,0 +1,33 @@
+name: Generate Changelog
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: write
+
+jobs:
+  changelog:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Generate changelog
+        uses: orhun/git-cliff-action@v3
+        id: git-cliff
+        with:
+          args: --latest --strip header
+        env:
+          OUTPUT: CHANGELOG.md
+
+      - name: Commit changelog
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git add CHANGELOG.md
+          git commit -m "chore(release): update CHANGELOG.md"
+          git push origin HEAD:main

agentlinter-0.3.2/.github/workflows/ci.yml

@@ -0,0 +1,44 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6
+        with:
+          python-version: "3.12"
+      - run: pip install ruff
+      - run: ruff check src/ tests/
+      - run: ruff format --check src/ tests/
+
+  typecheck:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10  # v6
+      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6
+        with:
+          python-version: "3.12"
+      - run: pip install -e ".[dev]"
+      # Ratchet: src/ is fully typed under strict mode.
+      # tests/ will be added once helper annotations are completed.
+      - run: mypy src/
+
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6
+        with:
+          python-version: ${{ matrix.python-version }}
+      - run: pip install -e ".[dev]"
+      - run: pytest tests/ -v

{agentlinter-0.2.0 → agentlinter-0.3.2}/.github/workflows/codeql.yml

@@ -17,7 +17,7 @@ jobs:
       contents: read
       actions: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
       - uses: github/codeql-action/init@v4
         with:
           languages: python

agentlinter-0.3.2/.github/workflows/docs.yml

@@ -0,0 +1,42 @@
+name: Docs
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - "docs/**"
+      - "mkdocs.yml"
+      - "src/**"
+
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+concurrency:
+  group: "pages"
+  cancel-in-progress: false
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10
+      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
+        with:
+          python-version: "3.12"
+      - run: pip install mkdocs-material mkdocstrings[python]
+      - run: mkdocs build --strict
+      - uses: actions/upload-pages-artifact@v3
+        with:
+          path: site/
+
+  deploy:
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - id: deployment
+        uses: actions/deploy-pages@v4

agentlinter-0.3.2/.github/workflows/pricing-update.yml

@@ -0,0 +1,47 @@
+name: Pricing Data Update
+
+on:
+  schedule:
+    # Weekly on Sundays at 05:00 UTC
+    - cron: "0 5 * * 0"
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  update-pricing:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install dependencies
+        run: pip install requests
+
+      - name: Fetch latest pricing
+        id: fetch
+        run: |
+          python scripts/fetch-pricing.py
+        env:
+          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
+          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
+
+      - name: Create Pull Request
+        uses: peter-evans/create-pull-request@v6
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          branch: chore/update-pricing
+          title: "chore: update pricing data"
+          body: |
+            Automated pricing data refresh.
+
+            - Triggered by: ${{ github.event_name }}
+            - Run: ${{ github.run_id }}
+          commit-message: "chore: update pricing data"
+          delete-branch: true

agentlinter-0.3.2/.github/workflows/publish.yml

@@ -0,0 +1,48 @@
+name: Publish to PyPI
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: read
+  id-token: write
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install build tools
+        run: pip install build
+
+      - name: Build wheel and sdist
+        run: python -m build
+
+      - name: Upload artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+  publish:
+    needs: build
+    runs-on: ubuntu-latest
+    environment: pypi
+    steps:
+      - name: Download artifacts
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          packages-dir: dist/

{agentlinter-0.2.0 → agentlinter-0.3.2}/.github/workflows/release.yml

@@ -13,10 +13,10 @@ jobs:
     runs-on: ubuntu-latest
     environment: pypi
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6
         with:
           python-version: "3.12"
 
@@ -32,7 +32,7 @@ jobs:
           python -m build
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228  # v3.0.2
         with:
           generate_release_notes: true
           files: dist/*

{agentlinter-0.2.0 → agentlinter-0.3.2}/.github/workflows/secret-scan.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 

{agentlinter-0.2.0 → agentlinter-0.3.2}/.github/workflows/security.yml

@@ -13,8 +13,8 @@ jobs:
     name: Dependency Audit
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v6
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6
         with:
           python-version: "3.12"
       - name: Install dependencies

{agentlinter-0.2.0 → agentlinter-0.3.2}/.gitignore

@@ -16,3 +16,15 @@ venv/
 htmlcov/
 .env
 *.log
+
+# Security: prevent secret files from being committed
+.env
+.env.local
+.envrc
+*.pem
+*.key
+id_rsa*
+id_ecdsa*
+id_ed25519*
+*.p12
+secrets.json

agentlinter-0.3.2/.pre-commit-config.yaml

@@ -0,0 +1,20 @@
+# ---------------------------------------------------------------------------
+# Pre-commit config for the agent-lint repository itself.
+# ---------------------------------------------------------------------------
+repos:
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.11.0
+    hooks:
+      - id: ruff
+        args: [--fix]
+      - id: ruff-format
+
+  - repo: https://github.com/pre-commit/mirrors-mypy
+    rev: v1.15.0
+    hooks:
+      - id: mypy
+        additional_dependencies:
+          - pydantic>=2.0
+          - typer>=0.9.0
+          - rich>=13.0
+          - pyyaml>=6.0

agentlinter-0.3.2/.pre-commit-hooks.yaml

@@ -0,0 +1,12 @@
+# ---------------------------------------------------------------------------
+# Pre-commit hook definition for consumers who want to lint agent workflows.
+# ---------------------------------------------------------------------------
+- id: agent-lint
+  name: agent-lint
+  description: "Lint agent workflow YAML configs for cost and anti-patterns"
+  entry: agent-lint lint
+  language: python
+  files: \.(yaml|yml)$
+  pass_filenames: true
+  require_serial: false
+  additional_dependencies: []

agentlinter-0.3.2/CHANGELOG.md

@@ -0,0 +1,69 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.3.0] - 2026-07-20
+
+### Added
+
+#### Output Formats
+- **SARIF v2.1.0** output format (`--format sarif`) for GitHub Advanced Security integration (#16)
+- **GitHub PR annotations** output format (`--format github`) that emits `::error`, `::warning`, and `::notice` workflow commands (#18)
+
+#### Configuration
+- **Project-level config file support** via `.agent-lint.toml` or `pyproject.toml [tool.agent-lint]` with cascading precedence: CLI flags → env vars → config file → defaults (#17)
+
+#### Autofix
+- **Autofix engine** with `--fix` flag on `lint` command. Generates unified diff patches for fixable findings including B001, R003, R004, S003, and E004 (#21)
+
+#### CI / CD
+- **Composite GitHub Action** at `.github/actions/agent-lint/action.yml` for reusable workflow integration (#15)
+- **PyPI publish workflow** triggered on `v*` tags using OIDC trusted publishing (#24)
+- **Docker image** with multi-stage build and `docker-bake.hcl` for `linux/amd64` + `linux/arm64` (#24)
+- **Automated changelog generation** on releases via git-cliff (#25)
+
+#### Quality Assurance
+- **Accuracy benchmark scaffold** with annotated workflow fixtures for measuring precision / recall / F1 per rule (#22)
+- **Performance benchmark** (`scripts/benchmark-performance.py`) validating lint latency and memory thresholds across 10–1000 step workflows (#25)
+- **Real-world corpus test** (`scripts/fetch-corpus.py`) for false-positive rate measurement against public agent workflow YAMLs (#25)
+- **Mypy typecheck** job in CI with ratchet strategy (#12)
+- **Pre-commit hooks** configuration for downstream consumers (#13)
+
+#### Documentation
+- **MkDocs site** with Material theme, API reference, and CI deploy to GitHub Pages (#20)
+- **CONTRIBUTING.md**, issue templates, and pull request template (#19)
+
+### Fixed
+- License metadata in `pyproject.toml` aligned to MIT (#11)
+- Asymmetric rule imports in `linter.py` replaced with uniform top-level imports (#14)
+- Rich `console.print()` soft-wrap corruption of SARIF JSON replaced with plain `print()` (#16)
+- Config file kebab-case normalization ordering bug with env overrides (#17)
+
+## [0.2.1] - 2026-07-07
+
+### Added
+- Pro-gated coverage tests and tiered coverage gates (90% for open-source, 95% for Pro)
+- Free vs Pro pricing documentation with Stripe payment links
+
+### Security
+- Scrubbed local paths from repository
+- License switched to BSL-1.1 for Pro feature differentiation
+
+## [0.2.0] - 2026-06-15
+
+### Added
+- License server validation and Stripe integration scaffolding
+- Coverage gate CI job (85%)
+- Release workflow and gitleaks secret scanning
+- Rename package to `agentlinter` for PyPI availability
+
+## [0.1.1] - 2026-06-01
+
+### Added
+- Initial release of `agent-lint` CLI tool
+- Cost estimation and anti-pattern detection for agent workflow YAML configs