hound-tracer 0.4.0__tar.gz

hound_tracer-0.4.0/.dockerignore

@@ -0,0 +1,28 @@
+.venv
+__pycache__
+*.pyc
+hound-output
+examples/demo/work
+examples/demo/output
+examples/demo/**/work
+.pytest_cache
+.mypy_cache
+.ruff_cache
+.coverage
+htmlcov
+dist
+docs/plans
+.vscode
+.git
+.env
+.env.*
+.hound
+.hound.yml
+.hound.yaml
+hound-output
+demo-output
+portfolio-capture-output
+portfolio-redaction-output
+portfolio-screenshots
+*.pem
+*.key

hound_tracer-0.4.0/.env.example

@@ -0,0 +1,75 @@
+# hound LLM configuration
+#
+# Pick ONE provider. Every provider is OpenAI-compatible and can also be
+# configured with the generic variables at the bottom.
+
+# --- Generic OpenAI-compatible (works with any provider) ---
+# OPENAI_API_KEY=
+# OPENAI_BASE_URL=
+# OPENAI_MODEL=
+
+# --- Named providers (HOUND_API_PROVIDER selects which one to use) ---
+# HOUND_API_PROVIDER=openai       # or: anthropic, gemini, groq, ollama, deepseek, azure, 9router, custom
+# HOUND_API_KEY=
+# HOUND_BASE_URL=
+# HOUND_MODEL=
+
+# --- 9Router (local OpenAI-compatible gateway) ---
+# HOUND_API_PROVIDER=9router
+# NINE_ROUTER_API_KEY=9router
+# NINE_ROUTER_BASE_URL=http://127.0.0.1:20128/v1
+# NINE_ROUTER_MODEL=ag/gemini-3.7-flash-low
+
+# --- Anthropic ---
+# HOUND_API_PROVIDER=anthropic
+# HOUND_API_KEY=sk-ant-...
+# HOUND_BASE_URL=https://your-openai-compatible-anthropic-proxy.example/v1
+# HOUND_MODEL=claude-sonnet-4-20250514
+
+# --- Google Gemini ---
+# HOUND_API_PROVIDER=gemini
+# HOUND_API_KEY=AIza...
+# HOUND_BASE_URL=https://generativelanguage.googleapis.com/v1beta/openai
+# HOUND_MODEL=gemini-3.7-flash
+
+# --- Groq ---
+# HOUND_API_PROVIDER=groq
+# HOUND_API_KEY=gsk_...
+# HOUND_BASE_URL=https://api.groq.com/openai/v1
+# HOUND_MODEL=llama-3.3-70b-versatile
+
+# --- Ollama (local, no key) ---
+# HOUND_API_PROVIDER=ollama
+# HOUND_BASE_URL=http://localhost:11434/v1
+# HOUND_MODEL=llama3.1
+
+# --- DeepSeek ---
+# HOUND_API_PROVIDER=deepseek
+# HOUND_API_KEY=sk-...
+# HOUND_BASE_URL=https://api.deepseek.com
+# HOUND_MODEL=deepseek-chat
+
+# --- Azure OpenAI ---
+# HOUND_API_PROVIDER=azure
+# HOUND_API_KEY=...
+# HOUND_BASE_URL=https://<resource>.openai.azure.com/openai/v1
+# HOUND_MODEL=<deployment-name>
+
+# --- Custom (any OpenAI-compatible endpoint, e.g. 9Router gateway) ---
+# HOUND_API_PROVIDER=custom
+# HOUND_API_KEY=any
+# HOUND_BASE_URL=http://localhost:20128/v1
+# HOUND_MODEL=gpt-4o-mini
+
+# --- LLM behavior ---
+# HOUND_TEMPERATURE=0.2
+# HOUND_TIMEOUT=120
+# HOUND_MAX_TOKENS=2048
+# HOUND_REQUIRE_LLM=1             # fail instead of using fallback when online RCA fails
+
+# Legacy TH_* names remain accepted as deprecated aliases.
+
+# --- Optional: GitHub issue filing ---
+# GH_TOKEN=
+# GH_REPO=owner/name
+# GH_API_BASE=https://api.github.com

hound_tracer-0.4.0/.gitattributes

@@ -0,0 +1 @@
+data/eval/real-logchunks/artifacts/*.log text eol=lf

hound_tracer-0.4.0/.github/dependabot.yml

@@ -0,0 +1,28 @@
+version: 2
+updates:
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels: [dependencies]
+    groups:
+      python-non-major:
+        update-types: [minor, patch]
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    open-pull-requests-limit: 5
+    labels: [dependencies, github-actions]
+    groups:
+      actions-non-major:
+        update-types: [minor, patch]
+
+  - package-ecosystem: docker
+    directory: /
+    schedule:
+      interval: monthly
+    open-pull-requests-limit: 3
+    labels: [dependencies, docker]

hound_tracer-0.4.0/.github/workflows/canary.yml

@@ -0,0 +1,45 @@
+name: 9Router Canary
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "17 3 * * *"
+
+permissions:
+  contents: read
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    env:
+      NINE_ROUTER_API_KEY: ${{ secrets.NINE_ROUTER_API_KEY }}
+      NINE_ROUTER_BASE_URL: ${{ secrets.NINE_ROUTER_BASE_URL }}
+      NINE_ROUTER_MODEL: ag/gemini-3.7-flash-low
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: astral-sh/setup-uv@2af22b5b2dcfc0729ee842c635f300f1fc5a9e9a # v5.0.0
+      - run: uv sync --frozen
+      - name: Verify credential configuration
+        shell: bash
+        run: test -n "$NINE_ROUTER_API_KEY" && test -n "$NINE_ROUTER_BASE_URL"
+      - name: Run strict live analysis
+        shell: bash
+        run: |
+          mkdir canary-input
+          cp tests/fixtures/pytest_fail.log canary-input/
+          uv run hound analyze canary-input --output-dir canary-output \
+            --provider 9router --no-dedup --require-llm
+      - name: Verify live contract
+        shell: bash
+        run: |
+          python - <<'PY'
+          import json
+          from pathlib import Path
+
+          report = json.loads(next(Path("canary-output").glob("**/report.json")).read_text())
+          assert report["meta"]["engine"] == "merged", report["meta"]
+          assert report["meta"]["llm"]["status"] == "succeeded", report["meta"]
+          assert report["meta"]["model"].startswith("9router:"), report["meta"]
+          assert report["meta"]["usage"].get("total_tokens", 0) > 0, report["meta"]
+          PY

hound_tracer-0.4.0/.github/workflows/ci.yml

@@ -0,0 +1,206 @@
+name: CI
+
+on:
+  pull_request:
+    branches: ["main"]
+  push:
+    branches: ["main"]
+  schedule:
+    - cron: "17 3 * * 1"
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  quality:
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: astral-sh/setup-uv@2af22b5b2dcfc0729ee842c635f300f1fc5a9e9a # v5.0.0
+      - run: uv sync --frozen --extra dev
+      - run: uv run ruff check .
+      - run: uv run mypy src/hound
+      - run: uv run pytest -m integration -q
+      - name: Check diagnostic regressions before merge
+        run: uv run pytest tests/e2e/test_eval.py -q
+      - name: Smoke critical CLI workflows before merge
+        run: uv run pytest tests/e2e/test_action_entrypoint.py tests/e2e/test_cli.py tests/e2e/test_batch.py tests/e2e/test_cli_gh.py -q
+      - name: Smoke critical TUI workflows before merge
+        run: uv run pytest tests/e2e/test_tui.py -k "test_tui_compose or test_tui_analyze or test_tui_no_logs or test_tui_back_navigation_and_shortcuts" -q
+      - run: uv run python -m hound.eval --offline --check --format json
+      - name: Smoke canonical CLI command help
+        shell: bash
+        run: |
+          for command in analyze batch console serve log gate insights doctor init config providers models runs report feedback delivery incidents client clean; do
+            uv run hound "$command" --help >/dev/null
+          done
+
+  compatibility:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    strategy:
+      matrix:
+        python: ["3.10", "3.11", "3.12"]
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: astral-sh/setup-uv@2af22b5b2dcfc0729ee842c635f300f1fc5a9e9a # v5.0.0
+      - run: uv python install ${{ matrix.python }}
+      - run: uv sync --frozen --extra dev --python ${{ matrix.python }}
+      - run: uv run --python ${{ matrix.python }} pytest -m "unit and not slow" -q
+
+  package-security:
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: astral-sh/setup-uv@2af22b5b2dcfc0729ee842c635f300f1fc5a9e9a # v5.0.0
+      - run: uv sync --frozen --extra dev
+      - name: Audit locked production dependencies
+        run: |
+          uv export --frozen --no-dev --no-emit-project --format requirements-txt --output-file audited-requirements.txt
+          uv run pip-audit --requirement audited-requirements.txt
+      - run: uv build
+      - run: uv run twine check dist/*.whl dist/*.tar.gz
+      - name: Smoke-test wheel and source distribution
+        shell: bash
+        run: |
+          smoke="$RUNNER_TEMP/hound-package-smoke"
+          mkdir -p "$smoke"
+          wheel="$(realpath dist/*.whl)"
+          sdist="$(realpath dist/*.tar.gz)"
+          uv venv "$smoke/wheel-venv"
+          uv pip install --python "$smoke/wheel-venv/bin/python" "$wheel"
+          uv venv "$smoke/sdist-venv"
+          uv pip install --python "$smoke/sdist-venv/bin/python" "$sdist"
+          cd "$smoke"
+          wheel-venv/bin/python -c 'import hound'
+          wheel-venv/bin/hound --version
+          wheel-venv/bin/hound doctor --output-dir wheel-doctor --json
+          sdist-venv/bin/python -c 'import hound'
+          sdist-venv/bin/hound --version
+          sdist-venv/bin/hound doctor --output-dir sdist-doctor --json
+          set +e
+          wheel-venv/bin/hound analyze --log "$GITHUB_WORKSPACE/tests/fixtures/pytest_fail.log" --output-dir wheel-output --offline
+          wheel_status=$?
+          sdist-venv/bin/hound analyze --log "$GITHUB_WORKSPACE/tests/fixtures/pytest_fail.log" --output-dir sdist-output --offline
+          sdist_status=$?
+          set -e
+          test "$wheel_status" -eq 1
+          test "$sdist_status" -eq 1
+          test "$(jq -r .failure.kind wheel-output/report.json)" = "test_failure"
+          test "$(jq -r .failure.kind sdist-output/report.json)" = "test_failure"
+      - name: Scan repository and generated artifacts
+        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
+        with:
+          scan-type: fs
+          scan-ref: .
+          scanners: vuln,secret
+          severity: HIGH,CRITICAL
+          skip-dirs: tests,examples,dist,.venv
+          ignore-unfixed: true
+          exit-code: "1"
+
+  extended:
+    if: github.event_name != 'pull_request'
+    runs-on: ubuntu-latest
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: astral-sh/setup-uv@2af22b5b2dcfc0729ee842c635f300f1fc5a9e9a # v5.0.0
+      - run: uv sync --frozen --extra dev
+      - run: uv run pytest --cov=hound --cov-report=term --cov-fail-under=80 -q
+      - run: uv run python -m hound.eval --offline --check --format json
+      - run: docker build -t hound:test .
+      - run: docker build -f Dockerfile.action -t hound-action:test .
+      - name: Smoke-test GitHub Action contract
+        shell: bash
+        run: |
+          mkdir action-smoke
+          cp tests/fixtures/pytest_fail.log action-smoke/failure.log
+          touch action-smoke/github-output
+          set +e
+          output=$(docker run --rm \
+            -w /workspace \
+            -e GITHUB_WORKSPACE=/workspace \
+            -e GITHUB_OUTPUT=/workspace/github-output \
+            -v "$PWD/action-smoke:/workspace" \
+            hound-action:test analyze --log failure.log --repo-dir . --output-dir out --offline-value true 2>&1)
+          status=$?
+          set -e
+          echo "Status: $status"
+          echo "Output from docker run:"
+          echo "$output"
+          cat action-smoke/github-output || true
+          ls -la action-smoke || true
+          ls -la action-smoke/out || true
+          test "$status" -eq 1
+          test -f action-smoke/out/report.json
+          grep -q '^report<<TRACEHOUND_' action-smoke/github-output
+          grep -q '^severity<<TRACEHOUND_' action-smoke/github-output
+          grep -q '"kind": "test_failure"' action-smoke/out/report.json
+      - name: Scan runtime image
+        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
+        with:
+          image-ref: hound:test
+          scanners: vuln,secret
+          severity: HIGH,CRITICAL
+          ignore-unfixed: true
+          exit-code: "1"
+      - name: Scan Action image
+        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
+        with:
+          image-ref: hound-action:test
+          scanners: vuln,secret
+          severity: HIGH,CRITICAL
+          ignore-unfixed: true
+          exit-code: "1"
+
+  windows:
+    if: github.event_name != 'pull_request'
+    runs-on: windows-latest
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: astral-sh/setup-uv@2af22b5b2dcfc0729ee842c635f300f1fc5a9e9a # v5.0.0
+      - run: uv sync --frozen --extra dev
+      - run: uv run pytest -m "not slow and not network" -q
+      - run: uv build
+      - shell: pwsh
+        run: |
+          $smoke = Join-Path $env:RUNNER_TEMP "hound-wheel-smoke"
+          uv venv "$smoke\venv"
+          $wheel = (Get-ChildItem dist\*.whl | Select-Object -First 1).FullName
+          uv pip install --python "$smoke\venv\Scripts\python.exe" $wheel
+          Push-Location $smoke
+          & "$smoke\venv\Scripts\hound.exe" --version
+          & "$smoke\venv\Scripts\hound.exe" doctor --output-dir doctor-output --json
+          Pop-Location
+
+  ci-result:
+    if: always()
+    needs: [quality, compatibility, package-security, extended, windows]
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      - name: Summarize required checks
+        env:
+          QUALITY: ${{ needs.quality.result }}
+          COMPATIBILITY: ${{ needs.compatibility.result }}
+          PACKAGE_SECURITY: ${{ needs.package-security.result }}
+          EXTENDED: ${{ needs.extended.result }}
+          WINDOWS: ${{ needs.windows.result }}
+        run: |
+          printf '| Check | Result |\n|---|---|\n' >> "$GITHUB_STEP_SUMMARY"
+          printf '| quality | %s |\n| compatibility | %s |\n| package-security | %s |\n| extended | %s |\n| windows | %s |\n' \
+            "$QUALITY" "$COMPATIBILITY" "$PACKAGE_SECURITY" "$EXTENDED" "$WINDOWS" >> "$GITHUB_STEP_SUMMARY"
+          test "$QUALITY" = success
+          test "$COMPATIBILITY" = success
+          test "$PACKAGE_SECURITY" = success
+          test "$EXTENDED" = success -o "$EXTENDED" = skipped
+          test "$WINDOWS" = success -o "$WINDOWS" = skipped