agents-shipgate 0.2.0__tar.gz

agents_shipgate-0.2.0/.github/dependabot.yml

@@ -0,0 +1,13 @@
+version: 2
+updates:
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+

agents_shipgate-0.2.0/.github/workflows/ci.yml

@@ -0,0 +1,47 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+
+      - name: Set up Python
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
+        with:
+          python-version: "3.12"
+          cache: pip
+
+      - name: Install
+        run: python -m pip install -e ".[dev]"
+
+      - name: Lint
+        run: python -m ruff check .
+
+      - name: Compile
+        run: python -m compileall -q src tests
+
+      - name: Test
+        run: python -m pytest --cov=agents_shipgate --cov-report=term-missing --cov-fail-under=75
+
+      - name: Build package
+        run: |
+          python -m build
+          python -m twine check dist/*
+
+      - name: Dependency audit
+        run: python -m pip_audit .
+
+      - name: Generate SBOM
+        run: cyclonedx-py environment --pyproject pyproject.toml -o sbom.json

agents_shipgate-0.2.0/.github/workflows/release.yml

@@ -0,0 +1,61 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+
+permissions:
+  contents: write
+  id-token: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    environment: pypi
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+
+      - name: Set up Python
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
+        with:
+          python-version: "3.12"
+          cache: pip
+
+      - name: Install
+        run: |
+          python -m pip install -e ".[dev]"
+          python -m pip install "uv==0.11.7"
+
+      - name: Lint and test
+        run: |
+          python -m ruff check .
+          python -m compileall -q src tests
+          python -m pytest --cov=agents_shipgate --cov-report=term-missing --cov-fail-under=75
+
+      - name: Build package
+        run: |
+          python -m build
+          python -m twine check dist/*
+
+      - name: Dependency audit
+        run: python -m pip_audit .
+
+      - name: Generate SBOM
+        run: cyclonedx-py environment --pyproject pyproject.toml -o dist/agents-shipgate-sbom.json
+
+      - name: Sign release artifacts
+        run: sigstore sign --output-directory dist --overwrite dist/*.whl dist/*.tar.gz dist/agents-shipgate-sbom.json
+
+      - name: Publish to PyPI with Trusted Publishing
+        run: uv publish --trusted-publishing always dist/*.whl dist/*.tar.gz
+
+      - name: Create GitHub release
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          gh release create "${GITHUB_REF_NAME}" dist/* \
+            --title "${GITHUB_REF_NAME}" \
+            --notes "Agents Shipgate ${GITHUB_REF_NAME}"

agents_shipgate-0.2.0/.gitignore

@@ -0,0 +1,21 @@
+__pycache__/
+*.py[cod]
+*$py.class
+
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.coverage
+htmlcov/
+
+.venv/
+venv/
+env/
+
+build/
+dist/
+*.egg-info/
+
+.DS_Store
+agents-shipgate-reports/
+.claude/

agents_shipgate-0.2.0/.hypothesis/.gitignore

@@ -0,0 +1,9 @@
+# This .gitignore file was automatically created by Hypothesis. Hypothesis gitignores
+# .hypothesis by default, because we generally recommend that .hypothesis not be checked
+# into version control.
+#
+# If you *would* like to check .hypothesis into version control, you should delete this
+# file. Hypothesis will not re-create this .gitignore unless .hypothesis is deleted (and
+# if it does, that's a bug - please report it!)
+
+*

agents_shipgate-0.2.0/.hypothesis/constants/045fec4dd7f58343

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/inputs/mcp.py
+# hypothesis_version: 6.152.2
+
+['*', 'annotations', 'auth', 'confidence', 'credential_mode', 'description', 'high', 'inputSchema', 'input_schema', 'mcp', 'mcp_json', 'method', 'name', 'outputSchema', 'output_schema', 'owner', 'scopes', 'tools', 'type', 'wildcard', 'wildcard_tools']

agents_shipgate-0.2.0/.hypothesis/constants/0b5563ab2d2c169e

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/inputs/common.py
+# hypothesis_version: 6.152.2
+
+[1024, '.json', '[', 'array', 'default', 'delete', 'description', 'enum', 'format', 'get', 'head', 'input', 'items', 'maximum', 'minimum', 'object', 'options', 'patch', 'post', 'properties', 'put', 'required', 'trace', 'type', 'utf-8', '{', '|']

agents_shipgate-0.2.0/.hypothesis/constants/0b9d68b394dbbe5a

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/checks/manifest_consistency.py
+# hypothesis_version: 6.152.2
+
+['*', ':*', 'admin', 'approval', 'check_id', 'confirmation', 'environment', 'high', 'idempotency', 'issues', 'manifest', 'medium', 'missing_tool', 'policy', 'production', 'production_like', 'risk_tags', 'scope', 'tool', 'tool_scopes', 'unknown_check_id', 'write-all']

agents_shipgate-0.2.0/.hypothesis/constants/0d837de9aabf2c9e

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/config/schema.py
+# hypothesis_version: 6.152.2
+
+['0.1', 'advisory', 'after', 'api_model_config', 'before', 'forbid', 'function_schemas', 'json', 'local', 'manual', 'markdown', 'mcp', 'model_config', 'openai_agents_sdk', 'openapi', 'path', 'policy_rules', 'production', 'production_like', 'prompt_files', 'reason', 'response_formats', 'staging', 'strict', 'test_cases', 'tools', 'trace_samples']

agents_shipgate-0.2.0/.hypothesis/constants/10d0fede45f841c7

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/report/json_report.py
+# hypothesis_version: 6.152.2
+
+['utf-8']

agents_shipgate-0.2.0/.hypothesis/constants/125e13b1a1f73e76

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/checks/__init__.py
+# hypothesis_version: 6.152.2
+
+[]

agents_shipgate-0.2.0/.hypothesis/constants/26367d2b196b18f1

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/cli/__init__.py
+# hypothesis_version: 6.152.2
+
+[]

agents_shipgate-0.2.0/.hypothesis/constants/3a3b45671fdb419c

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/core/risk_hints.py
+# hypothesis_version: 6.152.2
+
+['DELETE', 'GET', 'PATCH', 'POST', 'PUT', 'auth_scope', 'aws', 'azure', 'bash', 'cancel', 'charge', 'code_execution', 'command', 'confidence', 'create', 'credential', 'customer', 'customer_email', 'delete', 'deploy', 'destructive', 'destructiveHint', 'email', 'execute', 'external', 'external_write', 'financial_action', 'gcp', 'get', 'high', 'httpMethod', 'invoice', 'issue', 'keyword', 'kubernetes', 'list', 'lookup', 'low', 'manual', 'mcp_annotation', 'medium', 'message', 'method', 'openai_api', 'openai_api_keyword', 'openapi_method', 'payment', 'personal data', 'pii', 'preview', 'preview_only', 'python', 'readOnlyHint', 'read_only', 'reason', 'refund', 'remove', 'scopes', 'sdk_function', 'search', 'secret', 'send', 'send_email', 'shell', 'sms', 'ssn', 'status', 'terraform', 'update', 'write']

agents_shipgate-0.2.0/.hypothesis/constants/446a38b73cd2dd8d

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/ci/exit_policy.py
+# hypothesis_version: 6.152.2
+
+['critical', 'new', 'strict']

agents_shipgate-0.2.0/.hypothesis/constants/45a2f3ececac2119

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/core/context.py
+# hypothesis_version: 6.152.2
+
+[]

agents_shipgate-0.2.0/.hypothesis/constants/473edb7165d7b1cf

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/checks/policy.py
+# hypothesis_version: 6.152.2
+
+['code_execution', 'critical', 'destructive', 'external_write', 'financial_action', 'high', 'medium', 'policy', 'policy_match', 'risk_tags']

agents_shipgate-0.2.0/.hypothesis/constants/55baab0f8575ca40

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/inputs/openai_sdk_static.py
+# hypothesis_version: 6.152.2
+
+['Dict', 'List', 'agents.function_tool', 'array', 'bool', 'boolean', 'confidence', 'context', 'ctx', 'dict', 'dict[', 'float', 'function_tool', 'int', 'list', 'list[', 'medium', 'method', 'name_override', 'number', 'object', 'openai_agents_sdk', 'properties', 'required', 'sdk_function', 'sdk_static', 'self', 'string', 'type', 'utf-8']

agents_shipgate-0.2.0/.hypothesis/constants/59942de603c4777c

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/core/__init__.py
+# hypothesis_version: 6.152.2
+
+[]

agents_shipgate-0.2.0/.hypothesis/constants/5ac8e7be06834a1a

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/checks/api.py
+# hypothesis_version: 6.152.2
+
+['action', 'additionalProperties', 'advice only', 'advise only', 'amount', 'amt', 'api', 'approval', 'approved', 'ask before', 'body', 'cap', 'command', 'confirm', 'confirmation', 'confirmed', 'content', 'count', 'decision', 'destructive', 'do not take action', 'enum', 'error', 'explicit consent', 'external_write', 'financial_action', 'high', 'high_risk_tools', 'human review', 'idempotency_key', 'idempotentHint', 'instructions', 'integer', 'issues', 'limit', 'medium', 'message', 'missing_strict_true', 'needs_review', 'number', 'object', 'only advise', 'openaiStrict', 'openai_api', 'path', 'prompt', 'properties', 'qty', 'quantity', 'read only', 'read-only', 'refusal', 'required', 'requires review', 'retry_policy', 'risk_tags', 'size', 'status', 'string', 'tool_name', 'tool_output_schemas', 'tools', 'type', 'update', 'updates']

agents_shipgate-0.2.0/.hypothesis/constants/5ddbb9b6b9539bfd

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/checks/side_effects.py
+# hypothesis_version: 6.152.2
+
+['critical', 'destructive', 'external_write', 'financial_action', 'high', 'idempotency_key', 'idempotentHint', 'medium', 'retryPolicy', 'retry_policy_known', 'risk_tags', 'side_effects']

agents_shipgate-0.2.0/.hypothesis/constants/61c9d918e742bb34

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/config/loader.py
+# hypothesis_version: 6.152.2
+
+[0.72, '.', '0.1', '<root>', 'agent', 'annotations', 'ci', 'confidence', 'credential_mode', 'declared_purpose', 'deep_import', 'directory', 'entrypoint', 'environment', 'extra_forbidden', 'fail_on', 'formats', 'function_schemas', 'id', 'ignore', 'instructions_preview', 'invalid value', 'loc', 'mode', 'model_config', 'msg', 'name', 'object', 'openai_api', 'optional', 'output', 'owner', 'path', 'permissions', 'policies', 'pr_comment', 'prohibited_actions', 'project', 'prompt_files', 'reason', 'repo', 'response_formats', 'risk_overrides', 'scopes', 'sdk', 'severity_overrides', 'shipgate.yaml', 'static_extract', 'tags', 'target', 'test_cases', 'tool', 'tool_sources', 'tools', 'trace_samples', 'trust', 'type', 'upload_artifact', 'utf-8', 'version']

agents_shipgate-0.2.0/.hypothesis/constants/65ee062b3ed27a35

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/cli/scan.py
+# hypothesis_version: 6.152.2
+
+[500, '..', '.agents-shipgate', 'agent', 'agent_name', 'api_surface', 'baseline', 'baseline.json', 'baseline_status', 'checks completed', 'confidence', 'config', 'config_assisted', 'default_path', 'dynamic_fields', 'dynamic_unknown', 'environment', 'findings', 'high', 'id', 'input', 'json', 'loaded sources', 'manifest', 'markdown', 'mcp', 'medium', 'method', 'missing_fields', 'name', 'new-findings', 'openai_agents_sdk', 'openai_api', 'openapi', 'output', 'present', 'project', 'report.json', 'report.md', 'risk hints generated', 'risk_hints', 'runtime_traces', 'sample_tool', 'sdk_function', 'source', 'sources', 'tag', 'tool', 'tool_count', 'tool_inventory', 'tools', 'total_tools', 'type', 'unknown', 'utf-8', 'value_preview', 'warnings']

agents_shipgate-0.2.0/.hypothesis/constants/6e0c83e84ff62933

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/checks/inventory.py
+# hypothesis_version: 6.152.2
+
+['high', 'inventory', 'medium', 'production', 'source_id', 'source_ref', 'threshold', 'tool_count', 'tool_sources', 'tools', 'wildcard_tools']

agents_shipgate-0.2.0/.hypothesis/constants/70ca871038129781

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/checks/base.py
+# hypothesis_version: 6.152.2
+
+['manifest']

agents_shipgate-0.2.0/.hypothesis/constants/7533d038fb74a4f9

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/report/markdown.py
+# hypothesis_version: 6.152.2
+
+[' (suppressed)', '## Baseline', '## Disclaimer', '## Loaded Plugins', '## Source Warnings', '## Top Findings', '(', ')', ', ', '-', '; ', 'No findings.', '[', '\\', ']', '_', '`', 'auth_scopes', 'check_id', 'critical', 'distribution', 'high', 'name', 'owner', 'risk_tag_confidence', 'risk_tags', 'source_type', 'static metadata', 'unknown check', 'unknown distribution', 'utf-8', 'version', '|']

agents_shipgate-0.2.0/.hypothesis/constants/78017d02d729a509

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/checks/auth.py
+# hypothesis_version: 6.152.2
+
+['*', ':*', 'admin', 'auth', 'high', 'manifest_scopes', 'medium', 'missing_scopes', 'risk_tags', 'scopes', 'tool_scopes', 'write-all']

agents_shipgate-0.2.0/.hypothesis/constants/7912350aed40e15e

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/report/__init__.py
+# hypothesis_version: 6.152.2
+
+[]

agents_shipgate-0.2.0/.hypothesis/constants/82c478e9bab89dc4

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/checks/documentation.py
+# hypothesis_version: 6.152.2
+
+['\\bAKIA[0-9A-Z]{16}\\b', '_./+=-', 'description_length', 'documentation', 'high', 'labeled_secret_value', 'matched', 'medium', 'security']

agents_shipgate-0.2.0/.hypothesis/constants/83001b28c6de5c54

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/core/logging.py
+# hypothesis_version: 6.152.2
+
+['agents_shipgate', 'agents_shipgate_', 'exception', 'json', 'level', 'logger', 'message', 'timestamp']

agents_shipgate-0.2.0/.hypothesis/constants/849889251d5ef6f9

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/cli/discovery.py
+# hypothesis_version: 6.152.2
+
+['    - CHANGE_ME', '    - json', '    - markdown', '    type: openapi', '  - id: CHANGE_ME', '  declared_purpose:', '  formats:', '  mode: advisory', '  model_config:', '  name: CHANGE_ME', '  policy_rules:', '  prompt_files:', '  response_formats:', '  scopes: []', '  target: local', '  test_cases:', '  tools:', '  trace_samples:', '*mcp*.json', '*openapi*.json', '*openapi*.yaml', '*openapi*.yml', '*swagger*.json', '*swagger*.yaml', '*swagger*.yml', '-', '.', '.git', '_', '__pycache__', 'agent:', 'ci:', 'environment:', 'id', 'mcp', 'model_config', 'openai-config.json', 'openai_api:', 'openapi', 'output:', 'path', 'permissions:', 'policies/*api*.yaml', 'policies:', 'policy_rules', 'project:', 'prompt_files', 'prompts/*.md', 'response_formats', 'shipgate.yaml', 'test_cases', 'tool_sources:', 'tools', 'trace_samples', 'traces/*.json', 'traces/*.jsonl', 'type', 'version: "0.1"']

agents_shipgate-0.2.0/.hypothesis/constants/8c5413d81fa0f702

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/__init__.py
+# hypothesis_version: 6.152.2
+
+['0.2.0']

agents_shipgate-0.2.0/.hypothesis/constants/8f2a55b3f9964317

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/inputs/__init__.py
+# hypothesis_version: 6.152.2
+
+[]

agents_shipgate-0.2.0/.hypothesis/constants/a9b11637db1557ac

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/ci/__init__.py
+# hypothesis_version: 6.152.2
+
+[]

agents_shipgate-0.2.0/.hypothesis/constants/ad515af1c1923a06

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/config/__init__.py
+# hypothesis_version: 6.152.2
+
+[]

agents_shipgate-0.2.0/.hypothesis/constants/b5953d7c9a9f2821

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/checks/schema.py
+# hypothesis_version: 6.152.2
+
+['-> str', 'action', 'amount', 'body', 'code_execution', 'command', 'content', 'count', 'destructive', 'external_write', 'financial_action', 'high', 'instructions', 'integer', 'limit', 'max', 'maximum', 'medium', 'message', 'number', 'object', 'output_schema', 'parameter', 'prompt', 'quantity', 'refund_amount', 'schema', 'sdk_function', 'string', 'total', 'type', 'update', 'updates']

agents_shipgate-0.2.0/.hypothesis/constants/b8222c767a411a6a

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/inputs/openai_api.py
+# hypothesis_version: 6.152.2
+
+['.jsonl', '.markdown', '.md', '.txt', 'additionalProperties', 'confidence', 'description', 'events', 'function', 'function_schemas', 'high', 'json_schema', 'method', 'model_config', 'name', 'openaiApiFunction', 'openaiStrict', 'openai_api', 'openai_api_artifact', 'parameters', 'policy_rules', 'properties', 'required', 'response_formats', 'schema', 'strict', 'test_cases', 'tool_calls', 'tool_name', 'tools', 'trace_samples', 'type']

agents_shipgate-0.2.0/.hypothesis/constants/cdfd83c248effd35

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/cli/main.py
+# hypothesis_version: 6.152.2
+
+['*?[]', ',', '- none', '--baseline', '--baseline-mode', '--ci-mode', '--config', '--deep-import', '--fail-on', '--format', '--json', '--no-plugins', '--out', '--verbose', '--version', '--workspace', '--write', '-c', '.', 'Emit JSON.', 'Enable debug logs.', 'Path or quoted glob.', 'Reports:', 'Source warnings:', 'Top findings:', 'Warnings:', '[^A-Za-z0-9_-]+', '_', 'advisory', 'agents-shipgate', 'api_surface', 'baseline', 'critical', 'high', 'info', 'json', 'list-checks', 'low', 'markdown', 'markdown,json', 'medium', 'new-findings', 'root', 'sample_tool', 'save', 'shipgate.yaml', 'sources', 'strict', 'unhandled exception', 'utf-8', 'warnings']

agents_shipgate-0.2.0/.hypothesis/constants/d05ee1c296a90c1c

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/core/models.py
+# hypothesis_version: 6.152.2
+
+['0.1', '0.2', 'after', 'allow', 'approval_required', 'confidence', 'critical', 'high', 'idempotency_required', 'info', 'low', 'matched', 'medium', 'model_config', 'model_config_present', 'new', 'policy_rule_count', 'prompt_file_count', 'resolved', 'retry_policy', 'schema', 'static', 'test_case_count', 'timeouts', 'tool_file_count', 'tool_output_schemas', 'trace_sample_count']

agents_shipgate-0.2.0/.hypothesis/constants/d2daadc405b9d15f

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/core/baseline.py
+# hypothesis_version: 6.152.2
+
+['+00:00', '0.2', 'Z', 'forbid', 'matched', 'new', 'utf-8']

agents_shipgate-0.2.0/.hypothesis/constants/da523675d9c4b986

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/core/errors.py
+# hypothesis_version: 6.152.2
+
+[]

agents_shipgate-0.2.0/.hypothesis/constants/de6a9a8817ede715

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/inputs/openapi.py
+# hypothesis_version: 6.152.2
+
+[5000, '#/', '$ref', '-', '/', '200', '201', '_', 'allOf', 'anyOf', 'application/json', 'body', 'components', 'confidence', 'content', 'description', 'destructiveHint', 'high', 'httpMethod', 'idempotentHint', 'items', 'max_depth', 'max_nodes', 'method', 'name', 'object', 'oneOf', 'openWorldHint', 'openapi', 'operationId', 'parameters', 'path', 'paths', 'properties', 'readOnlyHint', 'requestBody', 'required', 'responses', 'retryPolicy', 'root', 'schema', 'security', 'securitySchemes', 'summary', 'type', 'x-agents-shipgate', 'x-destructiveHint', 'x-idempotentHint', 'x-openWorldHint', 'x-readOnlyHint', 'x-retryPolicy', '{', '}', '~', '~0', '~1']

agents_shipgate-0.2.0/.hypothesis/constants/e45724350b67358e

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/checks/manifest_scope.py
+# hypothesis_version: 6.152.2
+
+['-', '_', 'a', 'an', 'and', 'answer', 'approval', 'before', 'cancel', 'confirmation', 'create', 'declared_purpose', 'delete', 'destructive', 'email', 'external', 'external_write', 'financial_action', 'for', 'from', 'high', 'idempotency', 'issue', 'lookup', 'lookups', 'medium', 'modify', 'prohibited_action', 'read', 'read-only', 'readonly', 'refund', 'remove', 'risk_tags', 'scope', 'search', 'send', 'status', 'the', 'to', 'update', 'view', 'with', 'without', 'write']

agents_shipgate-0.2.0/.hypothesis/constants/f0ec78e2350f8f59

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/core/findings.py
+# hypothesis_version: 6.152.2
+
+['agent_id', 'auth_scopes', 'category', 'check_id', 'confidence', 'critical', 'default_severity', 'evidence', 'high', 'info', 'json', 'low', 'medium', 'mixed', 'name', 'owner', 'recommendation', 'risk_tag_confidence', 'risk_tags', 'sdk_function', 'source', 'source_ref', 'source_type', 'static', 'title', 'tool:', 'tool_id', 'tool_name', 'utf-8', 'warnings_detected', 'wildcard_tools']

agents_shipgate-0.2.0/.hypothesis/constants/f84de8d134574937

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/ci/github_summary.py
+# hypothesis_version: 6.152.2
+
+['## Agents Shipgate', 'GITHUB_STEP_SUMMARY', 'a', 'utf-8']

agents_shipgate-0.2.0/.hypothesis/constants/fbad946c1cfeaa00

@@ -0,0 +1,4 @@
+# file: /home/runner/work/agents-shipgate/agents-shipgate/src/agents_shipgate/checks/registry.py
+# hypothesis_version: 6.152.2
+
+['-', '1', 'Name', '_', 'agents-shipgate', 'api', 'auth', 'check_id', 'critical', 'declared_purpose', 'description_length', 'dist', 'distribution', 'documentation', 'environment', 'high', 'high_risk_tools', 'id', 'inventory', 'issues', 'manifest', 'manifest_scopes', 'matched', 'medium', 'metadata', 'missing_scopes', 'name', 'on', 'output_schema', 'parameter', 'path', 'policy', 'policy_match', 'prohibited_action', 'retry_policy', 'retry_policy_known', 'risk_tags', 'schema', 'scope', 'scopes', 'security', 'side_effects', 'source_id', 'source_ref', 'threshold', 'tool', 'tool_count', 'tool_output_schemas', 'tool_scopes', 'tool_sources', 'tools', 'true', 'type', 'value', 'version', 'yes']

agents_shipgate-0.2.0/CHANGELOG.md

@@ -0,0 +1,14 @@
+# Changelog
+
+## 0.2.0 - 2026-04-26
+
+- Added manifest-aware checks, deterministic report metadata, check severity overrides, `fail_on`, `init`, `doctor`, `explain`, multi-config scan support, and check entry-point hooks.
+- Renamed the project to Agents Shipgate and hardened v0.1 release-readiness behavior.
+
+## 0.1.0
+
+- Initial Agents Shipgate MVP.
+- Manifest-first scan over local MCP JSON, OpenAPI specs, and optional OpenAI Agents SDK AST metadata.
+- Markdown and JSON reports.
+- Advisory and strict CI modes.
+- GitHub composite action.

agents_shipgate-0.2.0/CONTRIBUTING.md

@@ -0,0 +1,51 @@
+# Contributing
+
+Yes, please contribute.
+
+## Local Setup
+
+```bash
+python -m pip install -e ".[dev]"
+pytest
+```
+
+## Useful Commands
+
+```bash
+agents-shipgate init --workspace samples/support_refund_agent
+agents-shipgate doctor --config samples/support_refund_agent/shipgate.yaml
+agents-shipgate scan --config samples/support_refund_agent/shipgate.yaml
+agents-shipgate list-checks
+```
+
+## Contribution Areas
+
+- new deterministic checks;
+- loader hardening and OpenAPI edge cases;
+- docs and integration recipes;
+- false-positive reduction tests;
+- report/schema compatibility tests.
+
+## Check Contributions
+
+Checks should be deterministic, explainable, and covered by tests. Avoid LLM calls, network calls, user-code import, or runtime tool execution.
+
+Each new check should include catalog metadata, a test fixture, and documentation in `docs/checks.md`.
+
+## Adding A Check End To End
+
+1. Create or update a module under `src/agents_shipgate/checks/`.
+2. Implement a pure function with the shape `run(context: ScanContext) -> list[Finding]`.
+3. Use `tool_finding(...)` or `agent_finding(...)` from `src/agents_shipgate/checks/base.py` so evidence, recommendations, and source references stay consistent.
+4. Register the function and metadata in `src/agents_shipgate/checks/registry.py`.
+5. Add a unit test that proves the check fires and a false-positive test that proves it does not fire on a nearby safe case.
+6. Add the check ID, severity, and plain-language meaning to `docs/checks.md`.
+7. Run:
+
+```bash
+pytest
+agents-shipgate list-checks
+agents-shipgate explain YOUR-CHECK-ID
+```
+
+Good checks are narrow, evidence-backed, and easy to suppress with a reason when a team has intentionally accepted the risk.