agentlinter 0.3.2__tar.gz → 0.3.3__tar.gz

agentlinter-0.3.3/.github/workflows/changelog.yml

@@ -0,0 +1,32 @@
+name: Generate Changelog
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: write
+
+jobs:
+  changelog:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Generate changelog
+        run: python scripts/generate-changelog.py
+        env:
+          OUTPUT: CHANGELOG.md
+
+      - name: Upload changelog artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: changelog
+          path: CHANGELOG.md

agentlinter-0.3.3/.github/workflows/docker.yml

@@ -0,0 +1,60 @@
+name: Build and Push Docker Image
+
+on:
+  push:
+    branches:
+      - main
+    tags:
+      - "v*"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  packages: write
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ghcr.io/${{ github.repository_owner }}/agent-lint
+          tags: |
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=ref,event=branch
+            type=sha
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Smoke test Docker image
+        run: |
+          short_sha="${GITHUB_SHA::7}"
+          tag="ghcr.io/${{ github.repository_owner }}/agent-lint:sha-${short_sha}"
+          docker run --rm "$tag" --version

agentlinter-0.3.3/.github/workflows/pricing-update.yml

@@ -0,0 +1,29 @@
+name: Pricing Data Update
+
+on:
+  schedule:
+    # Weekly on Sundays at 05:00 UTC
+    - cron: "0 5 * * 0"
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  update-pricing:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install dependencies
+        run: pip install pyyaml
+
+      - name: Validate pricing YAML
+        id: validate
+        run: python scripts/fetch-pricing.py

agentlinter-0.3.3/.github/workflows/release.yml

@@ -0,0 +1,39 @@
+name: Release
+
+on:
+  workflow_run:
+    workflows: ["Publish to PyPI"]
+    types: [completed]
+
+permissions:
+  contents: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    if: github.event.workflow_run.conclusion == 'success'
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.workflow_run.head_sha }}
+          fetch-depth: 0
+
+      - name: Download artifacts from publish workflow
+        uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+          run-id: ${{ github.event.workflow_run.id }}
+
+      - name: Extract tag name
+        id: tag
+        run: |
+          tag=$(git describe --tags --exact-match 2>/dev/null || echo "")
+          echo "tag=$tag" >> "$GITHUB_OUTPUT"
+
+      - name: Create GitHub Release
+        uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228  # v3.0.2
+        with:
+          tag_name: ${{ steps.tag.outputs.tag }}
+          generate_release_notes: true
+          files: dist/*

{agentlinter-0.3.2/src/agentlinter.egg-info → agentlinter-0.3.3}/PKG-INFO

@@ -1,9 +1,9 @@
 Metadata-Version: 2.4
 Name: agentlinter
-Version: 0.3.2
+Version: 0.3.3
 Summary: Estimate costs and lint agent workflow YAML files
 Author: AreteDriver
-License: BSL-1.1
+License: MIT
 Project-URL: Homepage, https://github.com/AreteDriver/agent-lint
 Project-URL: Repository, https://github.com/AreteDriver/agent-lint
 Project-URL: Issues, https://github.com/AreteDriver/agent-lint/issues
@@ -78,6 +78,9 @@ agent-lint estimate workflow.yaml --provider anthropic
 
 # Generate a full audit report
 agent-lint lint workflows/ --format markdown
+
+# Suggest autofixes as a diff patch
+agent-lint lint workflow.yaml --fix
 ```
 
 ---
@@ -116,6 +119,29 @@ Treat your agent configs like production code. Gate them the same way.
 
 ---
 
+## Licensing & Tiers
+
+`agent-lint` is available in two tiers:
+
+**Free** — Always free, no license key required:
+- `lint` — anti-pattern detection
+- `estimate` — token/cost estimation
+- `status` — show version and tier info
+
+**Pro** — Unlock additional features with a license key:
+- `compare` — compare costs across providers side-by-side
+- Markdown export for audit reports
+- Custom pricing tables
+- Custom rule packs
+- Historical tracking and trend analysis
+
+Activate Pro with an environment variable:
+```bash
+export AGENT_LINT_LICENSE=ALNT-XXXX-XXXX-XXXX
+```
+
+---
+
 ## Why Static Analysis
 
 No LLM dependency. No API calls. No variance between runs.
@@ -129,9 +155,12 @@ Agent configs are deterministic artifacts — they should be audited determinist
 - [x] Cost estimation (Claude, GPT-4)
 - [x] CI integration with threshold gating
 - [x] Markdown audit reports
+- [x] SARIF output for GitHub Advanced Security
+- [x] GitHub PR annotation format
+- [x] Autofix diff generation (`--fix`)
+- [x] Docker images (multi-arch)
 - [ ] Gemini pricing model
 - [ ] VS Code extension
-- [ ] Auto-fix suggestions
 
 ---
 

{agentlinter-0.3.2 → agentlinter-0.3.3}/README.md

@@ -40,6 +40,9 @@ agent-lint estimate workflow.yaml --provider anthropic
 
 # Generate a full audit report
 agent-lint lint workflows/ --format markdown
+
+# Suggest autofixes as a diff patch
+agent-lint lint workflow.yaml --fix
 ```
 
 ---
@@ -78,6 +81,29 @@ Treat your agent configs like production code. Gate them the same way.
 
 ---
 
+## Licensing & Tiers
+
+`agent-lint` is available in two tiers:
+
+**Free** — Always free, no license key required:
+- `lint` — anti-pattern detection
+- `estimate` — token/cost estimation
+- `status` — show version and tier info
+
+**Pro** — Unlock additional features with a license key:
+- `compare` — compare costs across providers side-by-side
+- Markdown export for audit reports
+- Custom pricing tables
+- Custom rule packs
+- Historical tracking and trend analysis
+
+Activate Pro with an environment variable:
+```bash
+export AGENT_LINT_LICENSE=ALNT-XXXX-XXXX-XXXX
+```
+
+---
+
 ## Why Static Analysis
 
 No LLM dependency. No API calls. No variance between runs.
@@ -91,9 +117,12 @@ Agent configs are deterministic artifacts — they should be audited determinist
 - [x] Cost estimation (Claude, GPT-4)
 - [x] CI integration with threshold gating
 - [x] Markdown audit reports
+- [x] SARIF output for GitHub Advanced Security
+- [x] GitHub PR annotation format
+- [x] Autofix diff generation (`--fix`)
+- [x] Docker images (multi-arch)
 - [ ] Gemini pricing model
 - [ ] VS Code extension
-- [ ] Auto-fix suggestions
 
 ---
 

{agentlinter-0.3.2 → agentlinter-0.3.3}/STATUS.md

@@ -3,10 +3,12 @@
 | Attribute | Value |
 |-----------|-------|
 | Status | **OPERATIONAL** |
-| Last verified | 2026-07-16 |
+| Last verified | 2026-07-19 |
 | Installable? | Yes — `pip install agentlinter` |
 | Tested? | CI green; see badge below |
-| Documented? | README + inline help; no hosted docs |
+| Documented? | README + MkDocs site + inline help |
+| Hosted docs | [aretedriver.github.io/agent-lint](https://aretedriver.github.io/agent-lint/) |
+| Docker image | `ghcr.io/aretedriver/agent-lint:latest` |
 | CI | [![CI](https://github.com/AreteDriver/agent-lint/actions/workflows/ci.yml/badge.svg)](https://github.com/AreteDriver/agent-lint/actions/workflows/ci.yml) |
 
 ## What Works
@@ -15,13 +17,16 @@
 - **Linting:** Detects unbounded loops, missing cost guards, parallel branches without coordination, fragile retry patterns
 - **Cost Estimation:** Token/cost exposure estimates per workflow, per provider
 - **CI Integration:** `--fail-under` flag for gated deployments
-- **Output Formats:** Terminal tables, JSON, Markdown audit reports
+- **Output Formats:** Terminal tables, JSON, Markdown audit reports, SARIF, GitHub PR annotations
+- **Autofix:** `--fix` generates diff patches for fixable findings
+- **Hosted Docs:** MkDocs site deployed via GitHub Actions
+- **Docker:** Multi-arch images (`linux/amd64`, `linux/arm64`) on GHCR
 
 ## What Doesn't Work Yet
 
 - Dashboard for historical lint trends (not planned)
 - Integration with Animus Forge as a native quality gate (roadmap)
-- No hosted documentation
+- VS Code extension
 
 ## Install
 

agentlinter-0.3.3/docs/api/formatters.md

@@ -0,0 +1,34 @@
+# API Reference — Formatters
+
+## `format_lint_table(report: LintReport, console: Console) -> None`
+
+Render a rich text table to the console.
+
+## `format_lint_json(report: LintReport, console: Console) -> None`
+
+Render JSON output to the console.
+
+## `format_lint_markdown(report: LintReport, console: Console) -> None`
+
+Render a Markdown summary to the console.
+
+## `format_sarif(report: LintReport) -> str`
+
+Generate SARIF v2.1.0 JSON string for GitHub Advanced Security upload.
+
+```python
+from agent_lint.sarif_formatter import format_sarif
+
+sarif_json = format_sarif(report)
+```
+
+## `format_github_annotations(report: LintReport) -> str`
+
+Generate GitHub Actions workflow command annotations.
+
+```python
+from agent_lint.github_formatter import format_github_annotations
+
+annotations = format_github_annotations(report)
+print(annotations)
+```

agentlinter-0.3.3/docs/api/models.md

@@ -0,0 +1,55 @@
+# API Reference — Models
+
+## `ParsedWorkflow`
+
+Represents a parsed agent workflow YAML.
+
+```python
+class ParsedWorkflow(BaseModel):
+    name: str
+    version: str
+    token_budget: int | None
+    steps: list[ParsedStep]
+```
+
+## `ParsedStep`
+
+Represents a single step in a workflow.
+
+```python
+class ParsedStep(BaseModel):
+    id: str
+    step_type: StepType
+    model: str | None
+    estimated_tokens: int | None
+    on_failure: str | None
+    raw_params: dict[str, Any]
+```
+
+## `LintFinding`
+
+Represents a single rule violation.
+
+```python
+class LintFinding(BaseModel):
+    rule_id: str
+    category: RuleCategory
+    severity: Severity
+    message: str
+    step_id: str | None
+    suggestion: str | None
+```
+
+## `LintReport`
+
+Aggregated result of running all rules.
+
+```python
+class LintReport(BaseModel):
+    workflow_name: str
+    score: int
+    findings: list[LintFinding]
+    error_count: int
+    warning_count: int
+    info_count: int
+```

agentlinter-0.3.3/docs/api/parsers.md

@@ -0,0 +1,34 @@
+# API Reference — Parsers
+
+## `parse_workflow(path: Path) -> ParsedWorkflow`
+
+Parse a workflow YAML file into a `ParsedWorkflow` object.
+
+```python
+from agent_lint.parsers import parse_workflow
+from pathlib import Path
+
+wf = parse_workflow(Path("workflow.yaml"))
+```
+
+## `load_yaml(path: Path) -> dict[str, Any]`
+
+Load a YAML file as a raw Python dict. Useful for autofix operations that mutate the raw structure.
+
+```python
+from agent_lint.parsers import load_yaml
+from pathlib import Path
+
+raw = load_yaml(Path("workflow.yaml"))
+```
+
+## Supported Workflow Formats
+
+| Parser | File Patterns |
+|--------|--------------|
+| Generic YAML | Any `.yaml` / `.yml` |
+| LangChain | `langchain_*.yaml` |
+| CrewAI | `crewai_*.yaml` |
+| Gorgon | `gorgon_*.yaml` |
+
+The parser auto-detects format based on file content and naming.

agentlinter-0.3.3/docs/api/rules.md

@@ -0,0 +1,34 @@
+# API Reference — Rules
+
+## `@lint_rule(rule_id, category, severity, description)`
+
+Decorator to register a lint rule function.
+
+```python
+from agent_lint.models import LintFinding, ParsedWorkflow, RuleCategory, Severity
+from agent_lint.rules import lint_rule
+
+@lint_rule(
+    rule_id="X001",
+    category=RuleCategory.BUDGET,
+    severity=Severity.WARNING,
+    description="My custom rule",
+)
+def check_custom(workflow: ParsedWorkflow) -> list[LintFinding]:
+    findings: list[LintFinding] = []
+    # ... check logic ...
+    return findings
+```
+
+## Rule Function Signature
+
+All rule functions must accept a `ParsedWorkflow` and return `list[LintFinding]`.
+
+## Built-in Rule Modules
+
+| Module | Rule IDs | Focus |
+|--------|----------|-------|
+| `rules.budget` | B001–B004 | Cost guards |
+| `rules.resilience` | R001–R005 | Error handling |
+| `rules.efficiency` | E001–E004 | Performance |
+| `rules.security` | S001–S004 | Security |

agentlinter-0.3.3/docs/config.md

@@ -0,0 +1,44 @@
+# Configuration
+
+## Config File Discovery
+
+`agent-lint` loads config from the first source found, in order:
+
+1. CLI flags (highest priority)
+2. Environment variables (`AGENT_LINT_*`)
+3. `.agent-lint.toml` in the current directory
+4. `pyproject.toml` under `[tool.agent-lint]`
+5. Built-in defaults
+
+## Example `.agent-lint.toml`
+
+```toml
+fail_under = 80
+category = "budget"
+severity = "warning"
+```
+
+## Example `pyproject.toml` Section
+
+```toml
+[tool.agent-lint]
+fail_under = 80
+category = "budget"
+severity = "warning"
+```
+
+## Environment Variables
+
+| Variable | Maps To |
+|----------|---------|
+| `AGENT_LINT_FAIL_UNDER` | `fail_under` |
+| `AGENT_LINT_CATEGORY` | `category` |
+| `AGENT_LINT_SEVERITY` | `severity` |
+
+## Full Option Reference
+
+| Option | Type | Default | Description |
+|--------|------|---------|-------------|
+| `fail_under` | int | `None` | Minimum lint score to pass CI |
+| `category` | string | `None` | Filter to one rule category |
+| `severity` | string | `None` | Filter to one severity level |

agentlinter-0.3.3/docs/contributing.md

@@ -0,0 +1,54 @@
+# Contributing
+
+Thank you for your interest in `agent-lint`! This is a small but opinionated project. To keep quality high, please follow the guidelines below.
+
+## Development Setup
+
+```bash
+git clone https://github.com/AreteDriver/agent-lint.git
+cd agent-lint
+pip install -e ".[dev]"
+```
+
+## Running Tests
+
+```bash
+pytest tests/ -v
+```
+
+Coverage gate is 90%. PRs that drop coverage below this will fail CI.
+
+## Linting and Formatting
+
+```bash
+ruff check src/ tests/
+ruff format src/ tests/
+```
+
+## Type Checking
+
+```bash
+mypy src/
+```
+
+## Adding a New Rule
+
+1. Add the rule function in the appropriate `src/agent_lint/rules/*.py` file.
+2. Decorate it with `@lint_rule(rule_id=..., category=..., severity=..., description=...)`.
+3. Add tests in `tests/test_rules.py`.
+4. Update the relevant docs page under `docs/rules/`.
+
+## Commit Messages
+
+Use [Conventional Commits](https://www.conventionalcommits.org/):
+
+- `feat:` — new feature or rule
+- `fix:` — bug fix
+- `docs:` — documentation changes
+- `test:` — test-only changes
+- `ci:` — CI/CD changes
+- `chore:` — maintenance
+
+## License
+
+By contributing, you agree that your contributions will be licensed under the MIT License.

agentlinter-0.3.3/docs/install.md

@@ -0,0 +1,35 @@
+# Installation
+
+## PyPI (Recommended)
+
+```bash
+pip install agentlinter
+```
+
+Requires Python 3.11 or newer.
+
+## Docker
+
+```bash
+docker pull ghcr.io/aretedriver/agent-lint:latest
+```
+
+Run the container:
+
+```bash
+docker run --rm -v "$(pwd):/work" ghcr.io/aretedriver/agent-lint lint /work/workflows/
+```
+
+## From Source
+
+```bash
+git clone https://github.com/AreteDriver/agent-lint.git
+cd agent-lint
+pip install -e .
+```
+
+## Verify Installation
+
+```bash
+agent-lint --version
+```

agentlinter-0.3.3/docs/quickstart.md

@@ -0,0 +1,39 @@
+# Quick Start
+
+## Lint a Single Workflow
+
+```bash
+agent-lint lint workflow.yaml
+```
+
+Output is a table by default. Use `--format json` or `--format markdown` for machine-readable output.
+
+## Estimate Cost
+
+```bash
+agent-lint estimate workflow.yaml --provider anthropic
+```
+
+Supported providers: `openai`, `anthropic`, `google`, `ollama`.
+
+## Compare Two Workflows
+
+```bash
+agent-lint compare workflow-a.yaml workflow-b.yaml
+```
+
+## CI Gate with Threshold
+
+```bash
+agent-lint lint workflows/ --fail-under 80
+```
+
+Exits with code 1 if the lint score is below 80.
+
+## Get Auto-fix Suggestions
+
+```bash
+agent-lint lint workflow.yaml --fix
+```
+
+Prints a unified diff patch for fixable findings.

agentlinter-0.3.3/docs/rules/budget.md

@@ -0,0 +1,28 @@
+# Budget Rules (B001-B004)
+
+Budget rules detect cost risks in agent workflows.
+
+## B001: Missing Workflow Token Budget
+
+**Severity:** Warning  
+**Autofix:** ✅ Yes — adds `token_budget: 50000`
+
+Flags workflows that have no top-level `token_budget` declared. Without a budget cap, a runaway loop or oversized prompt can generate unlimited API costs.
+
+## B002: Step Exceeds 50% of Budget
+
+**Severity:** Warning
+
+Flags individual steps whose `estimated_tokens` exceeds 50% of the workflow's total `token_budget`. This indicates a single step is disproportionately expensive.
+
+## B003: Missing Step Token Estimate
+
+**Severity:** Info
+
+Flags LLM steps that lack an `estimated_tokens` field. Cost estimation requires either a declared value or a fallback archetype.
+
+## B004: Budget Archetype Fallback
+
+**Severity:** Info
+
+Informational finding when a step's token estimate falls back to a role-based or step-type archetype because no explicit value was provided.