python-vibe-guard 0.8.0__tar.gz → 0.10.0__tar.gz

{python_vibe_guard-0.8.0 → python_vibe_guard-0.10.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-vibe-guard
-Version: 0.8.0
+Version: 0.10.0
 Summary: Runtime anti-pattern scanner for async Python — detects what AI-generated code gets wrong
 License: MIT
 Keywords: async,linter,fastapi,asyncio,static-analysis
@@ -184,22 +184,29 @@ python -m pyvibe explain PYVIBE-002
 
   demo/bad_async.py
 
-  [CRITICAL] [PYVIBE-001] — line 14
+  [CRITICAL] [PYVIBE-001] — line 27
      Function : process_order()
      Problem  : time.sleep() blocks the entire event loop
      Fix      : Use `await asyncio.sleep(n)` instead
+     Suggested fix:
+         await asyncio.sleep(2)
 
-  [CRITICAL] [PYVIBE-002] — line 20
+  [CRITICAL] [PYVIBE-002] — line 33
      Function : fetch_user()
      Problem  : requests.get() is synchronous — blocks the event loop
      Fix      : Use `async with httpx.AsyncClient() as c: await c.get(url)`
+     Suggested fix:
+         async with httpx.AsyncClient() as client:
+             response = await client.get(f"https://api.example.com/users/{user_id}")
 
-  [CRITICAL] [PYVIBE-003] — line 26
+  [CRITICAL] [PYVIBE-003] — line 39
      Function : orchestrate()
      Problem  : asyncio.run() inside async def raises RuntimeError at runtime
      Fix      : Use `await coroutine()` directly — asyncio.run() is for sync entrypoints only
+     Suggested fix:
+         await process_order(42)
 
-  [CRITICAL] [PYVIBE-004] — line 32
+  [CRITICAL] [PYVIBE-004] — line 45
      Function : update_counter()
      Problem  : threading.Lock() blocks the event loop under contention
      Fix      : Use `asyncio.Lock()` with `async with lock:` instead
@@ -208,6 +215,10 @@ python -m pyvibe explain PYVIBE-002
   4 violation(s) in 1 file(s)
 ```
 
+`Suggested fix:` blocks are generated from the real code on the flagged line — they are
+printed to the terminal / JSON output only and are never written back to your files.
+Currently available for PYVIBE-001, 002, 003, 007, and 008.
+
 ### `pyvibe explain`
 
 Every rule's accuracy claims come from `research/accepted/PYVIBE-XXX.md` — a per-rule
@@ -279,6 +290,18 @@ each linking back to its `research/accepted/PYVIBE-XXX.md` evidence file via `he
 
 ---
 
+## GitHub Action
+
+- name: python-vibe-guard
+  uses: joaquinriosheredia/python-vibe-guard-action@v1
+  with:
+    path: src/
+
+Violations appear directly in GitHub Security tab (SARIF).
+Link: https://github.com/Joaquinriosheredia/python-vibe-guard-action
+
+---
+
 ## Pre-commit integration
 
 Add to your `.pre-commit-config.yaml`:

{python_vibe_guard-0.8.0 → python_vibe_guard-0.10.0}/README.md

@@ -169,22 +169,29 @@ python -m pyvibe explain PYVIBE-002
 
   demo/bad_async.py
 
-  [CRITICAL] [PYVIBE-001] — line 14
+  [CRITICAL] [PYVIBE-001] — line 27
      Function : process_order()
      Problem  : time.sleep() blocks the entire event loop
      Fix      : Use `await asyncio.sleep(n)` instead
+     Suggested fix:
+         await asyncio.sleep(2)
 
-  [CRITICAL] [PYVIBE-002] — line 20
+  [CRITICAL] [PYVIBE-002] — line 33
      Function : fetch_user()
      Problem  : requests.get() is synchronous — blocks the event loop
      Fix      : Use `async with httpx.AsyncClient() as c: await c.get(url)`
+     Suggested fix:
+         async with httpx.AsyncClient() as client:
+             response = await client.get(f"https://api.example.com/users/{user_id}")
 
-  [CRITICAL] [PYVIBE-003] — line 26
+  [CRITICAL] [PYVIBE-003] — line 39
      Function : orchestrate()
      Problem  : asyncio.run() inside async def raises RuntimeError at runtime
      Fix      : Use `await coroutine()` directly — asyncio.run() is for sync entrypoints only
+     Suggested fix:
+         await process_order(42)
 
-  [CRITICAL] [PYVIBE-004] — line 32
+  [CRITICAL] [PYVIBE-004] — line 45
      Function : update_counter()
      Problem  : threading.Lock() blocks the event loop under contention
      Fix      : Use `asyncio.Lock()` with `async with lock:` instead
@@ -193,6 +200,10 @@ python -m pyvibe explain PYVIBE-002
   4 violation(s) in 1 file(s)
 ```
 
+`Suggested fix:` blocks are generated from the real code on the flagged line — they are
+printed to the terminal / JSON output only and are never written back to your files.
+Currently available for PYVIBE-001, 002, 003, 007, and 008.
+
 ### `pyvibe explain`
 
 Every rule's accuracy claims come from `research/accepted/PYVIBE-XXX.md` — a per-rule
@@ -264,6 +275,18 @@ each linking back to its `research/accepted/PYVIBE-XXX.md` evidence file via `he
 
 ---
 
+## GitHub Action
+
+- name: python-vibe-guard
+  uses: joaquinriosheredia/python-vibe-guard-action@v1
+  with:
+    path: src/
+
+Violations appear directly in GitHub Security tab (SARIF).
+Link: https://github.com/Joaquinriosheredia/python-vibe-guard-action
+
+---
+
 ## Pre-commit integration
 
 Add to your `.pre-commit-config.yaml`:

{python_vibe_guard-0.8.0 → python_vibe_guard-0.10.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "python-vibe-guard"
-version = "0.8.0"
+version = "0.10.0"
 description = "Runtime anti-pattern scanner for async Python — detects what AI-generated code gets wrong"
 readme = "README.md"
 requires-python = ">=3.10"

{python_vibe_guard-0.8.0 → python_vibe_guard-0.10.0}/python_vibe_guard.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-vibe-guard
-Version: 0.8.0
+Version: 0.10.0
 Summary: Runtime anti-pattern scanner for async Python — detects what AI-generated code gets wrong
 License: MIT
 Keywords: async,linter,fastapi,asyncio,static-analysis
@@ -184,22 +184,29 @@ python -m pyvibe explain PYVIBE-002
 
   demo/bad_async.py
 
-  [CRITICAL] [PYVIBE-001] — line 14
+  [CRITICAL] [PYVIBE-001] — line 27
      Function : process_order()
      Problem  : time.sleep() blocks the entire event loop
      Fix      : Use `await asyncio.sleep(n)` instead
+     Suggested fix:
+         await asyncio.sleep(2)
 
-  [CRITICAL] [PYVIBE-002] — line 20
+  [CRITICAL] [PYVIBE-002] — line 33
      Function : fetch_user()
      Problem  : requests.get() is synchronous — blocks the event loop
      Fix      : Use `async with httpx.AsyncClient() as c: await c.get(url)`
+     Suggested fix:
+         async with httpx.AsyncClient() as client:
+             response = await client.get(f"https://api.example.com/users/{user_id}")
 
-  [CRITICAL] [PYVIBE-003] — line 26
+  [CRITICAL] [PYVIBE-003] — line 39
      Function : orchestrate()
      Problem  : asyncio.run() inside async def raises RuntimeError at runtime
      Fix      : Use `await coroutine()` directly — asyncio.run() is for sync entrypoints only
+     Suggested fix:
+         await process_order(42)
 
-  [CRITICAL] [PYVIBE-004] — line 32
+  [CRITICAL] [PYVIBE-004] — line 45
      Function : update_counter()
      Problem  : threading.Lock() blocks the event loop under contention
      Fix      : Use `asyncio.Lock()` with `async with lock:` instead
@@ -208,6 +215,10 @@ python -m pyvibe explain PYVIBE-002
   4 violation(s) in 1 file(s)
 ```
 
+`Suggested fix:` blocks are generated from the real code on the flagged line — they are
+printed to the terminal / JSON output only and are never written back to your files.
+Currently available for PYVIBE-001, 002, 003, 007, and 008.
+
 ### `pyvibe explain`
 
 Every rule's accuracy claims come from `research/accepted/PYVIBE-XXX.md` — a per-rule
@@ -279,6 +290,18 @@ each linking back to its `research/accepted/PYVIBE-XXX.md` evidence file via `he
 
 ---
 
+## GitHub Action
+
+- name: python-vibe-guard
+  uses: joaquinriosheredia/python-vibe-guard-action@v1
+  with:
+    path: src/
+
+Violations appear directly in GitHub Security tab (SARIF).
+Link: https://github.com/Joaquinriosheredia/python-vibe-guard-action
+
+---
+
 ## Pre-commit integration
 
 Add to your `.pre-commit-config.yaml`:

{python_vibe_guard-0.8.0 → python_vibe_guard-0.10.0}/python_vibe_guard.egg-info/SOURCES.txt

@@ -8,7 +8,9 @@ python_vibe_guard.egg-info/top_level.txt
 pyvibe/__init__.py
 pyvibe/__main__.py
 pyvibe/analyzer.py
+pyvibe/autofix.py
 pyvibe/cli.py
+pyvibe/diff.py
 pyvibe/explain.py
 pyvibe/rule_docs.py
 pyvibe/sarif.py
@@ -34,6 +36,7 @@ pyvibe/rules/sqlite_async.py
 pyvibe/rules/subprocess_async.py
 pyvibe/rules/threading_lock.py
 pyvibe/rules/while_true_no_await.py
+tests/test_diff.py
 tests/test_exclude.py
 tests/test_explain.py
 tests/test_rules.py

python_vibe_guard-0.10.0/pyvibe/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.10.0"

{python_vibe_guard-0.8.0 → python_vibe_guard-0.10.0}/pyvibe/analyzer.py

@@ -1,6 +1,6 @@
 import ast
 from pathlib import Path
-from typing import FrozenSet, List
+from typing import FrozenSet, List, Optional
 
 from pyvibe.rules.base import Violation
 from pyvibe.rules.async_sleep import AsyncSleepRule
@@ -49,6 +49,17 @@ ALL_RULES = [
 
 ALL_RULE_IDS: FrozenSet[str] = frozenset(r.RULE_ID for r in ALL_RULES)
 
+# Rules that build a concrete "Suggested fix" snippet from the real source
+# text (see pyvibe/autofix.py) and therefore need the full source passed
+# into their constructor.
+_NEEDS_SOURCE: FrozenSet[type] = frozenset({
+    AsyncSleepRule,
+    AsyncRequestsRule,
+    AsyncioRunRule,
+    SubprocessAsyncRule,
+    SqliteAsyncRule,
+})
+
 # Rules downgraded CRITICAL → WARNING when the violation is inside a test file.
 # time.sleep in fixtures, subprocess in service-startup helpers, open() in
 # async test helpers (e.g. asyncssh, aiofiles own test suites), and Celery task
@@ -101,6 +112,8 @@ def analyze_source(
     for RuleClass in ALL_RULES:
         if RuleClass is SilentExceptRule:
             visitor = RuleClass(source_lines)
+        elif RuleClass in _NEEDS_SOURCE:
+            visitor = RuleClass(source)
         else:
             visitor = RuleClass()
         visitor.visit(tree)
@@ -119,9 +132,16 @@ def analyze_file(
     path: Path,
     *,
     downgrade_in_tests: FrozenSet[str] = TEST_FILE_DOWNGRADE,
+    line_filter: Optional[FrozenSet[int]] = None,
 ) -> List[Violation]:
+    """line_filter: if given, only violations whose `line` is in this set
+    are returned (used by `pyvibe review` to report only diff-touched lines).
+    """
     source = path.read_text(encoding="utf-8", errors="ignore")
-    return analyze_source(source, filepath=str(path), downgrade_in_tests=downgrade_in_tests)
+    violations = analyze_source(source, filepath=str(path), downgrade_in_tests=downgrade_in_tests)
+    if line_filter is not None:
+        violations = [v for v in violations if v.line in line_filter]
+    return violations
 
 
 DEFAULT_EXCLUDES = frozenset({

python_vibe_guard-0.10.0/pyvibe/autofix.py

@@ -0,0 +1,31 @@
+"""Shared helpers for building concrete "Suggested fix" snippets from real source context.
+
+Rules that support autofix suggestions receive the original source text and use
+`ast.get_source_segment` to pull the exact expressions the developer wrote
+(variable names, literals, kwargs) into the suggested replacement, instead of
+a synthetic placeholder like `...`.
+"""
+import ast
+from typing import Optional
+
+
+def render_node(source: str, node: ast.AST) -> Optional[str]:
+    """Return the literal source text of an AST node, or None if unavailable."""
+    return ast.get_source_segment(source, node)
+
+
+def render_call_args(source: str, node: ast.Call) -> str:
+    """Reconstruct the literal argument-list text of a Call node from source."""
+    parts = []
+    for arg in node.args:
+        if isinstance(arg, ast.Starred):
+            seg = render_node(source, arg.value)
+            parts.append(f"*{seg}" if seg else "*args")
+        else:
+            seg = render_node(source, arg)
+            parts.append(seg if seg is not None else "...")
+    for kw in node.keywords:
+        seg = render_node(source, kw.value)
+        seg = seg if seg is not None else "..."
+        parts.append(f"**{seg}" if kw.arg is None else f"{kw.arg}={seg}")
+    return ", ".join(parts)

{python_vibe_guard-0.8.0 → python_vibe_guard-0.10.0}/pyvibe/cli.py

@@ -9,6 +9,8 @@ Usage:
     python -m pyvibe <path> --no-test-files   # skip test files entirely
     python -m pyvibe <path> --downgrade-in-tests  # WARNING instead of CRITICAL in all test files
     python -m pyvibe explain PYVIBE-002       # show research evidence for a rule
+    python -m pyvibe review                   # PR review: only diff-touched lines (git diff HEAD~1)
+    python -m pyvibe review --base main       # diff against another ref
 """
 import argparse
 import json
@@ -31,6 +33,10 @@ def main():
         _main_explain(sys.argv[2:])
         return
 
+    if len(sys.argv) > 1 and sys.argv[1] == "review":
+        _main_review(sys.argv[2:])
+        return
+
     parser = argparse.ArgumentParser(
         prog="pyvibe",
         description="Detect runtime anti-patterns in async Python code",
@@ -132,6 +138,7 @@ def main():
                     "function": v.function_name,
                     "message": v.message,
                     "evidence": v.evidence,
+                    "suggested_fix": v.suggested_fix,
                 })
         print(json.dumps(output, indent=2))
     else:
@@ -160,6 +167,10 @@ def _print_human(file_results: dict, total_violations: int, total_files: int):
             print(f"     Function : {v.function_name}()")
             print(f"     Problem  : {v.message}")
             print(f"     Fix      : {v.evidence}")
+            if v.suggested_fix:
+                print("     Suggested fix:")
+                for line in v.suggested_fix.splitlines():
+                    print(f"         {line}")
             print()
 
     print("  ─────────────────────────────────────────────")
@@ -167,6 +178,113 @@ def _print_human(file_results: dict, total_violations: int, total_files: int):
     print()
 
 
+_SEVERITY_ICON = {"CRITICAL": "❌", "WARNING": "⚠️"}
+
+
+def _main_review(argv):
+    parser = argparse.ArgumentParser(
+        prog="pyvibe review",
+        description="PR review mode: analyze only lines added/modified in a git diff",
+    )
+    parser.add_argument(
+        "--base",
+        default="HEAD~1",
+        help="Git ref to diff against (default: HEAD~1)",
+    )
+    parser.add_argument("--json", action="store_true", help="Output as JSON")
+    parser.add_argument(
+        "--sarif",
+        action="store_true",
+        help="Also write SARIF 2.1.0 output (for GitHub Code Scanning)",
+    )
+    parser.add_argument(
+        "--sarif-output",
+        metavar="PATH",
+        default="results.sarif",
+        help="Path to write SARIF output to (default: results.sarif)",
+    )
+    args = parser.parse_args(argv)
+
+    from pyvibe.diff import GitDiffError, get_changed_python_files, get_repo_root
+
+    try:
+        repo_root = get_repo_root()
+        changed = get_changed_python_files(args.base, cwd=repo_root)
+    except GitDiffError as e:
+        print(f"Error: {e}", file=sys.stderr)
+        sys.exit(2)
+
+    file_results = {}
+    for rel_path, added_lines in changed.items():
+        abs_path = repo_root / rel_path
+        if not abs_path.exists():
+            continue
+        violations = analyze_file(abs_path, line_filter=added_lines)
+        if violations:
+            file_results[rel_path] = violations
+
+    total_violations = sum(len(v) for v in file_results.values())
+
+    if args.sarif:
+        from pyvibe.sarif import write_sarif
+
+        write_sarif(file_results, args.sarif_output)
+        print(f"SARIF results written to {args.sarif_output}")
+
+    if args.json:
+        output = []
+        for path, violations in file_results.items():
+            for v in violations:
+                output.append({
+                    "file": str(path),
+                    "rule": v.rule_id,
+                    "severity": v.severity,
+                    "line": v.line,
+                    "function": v.function_name,
+                    "message": v.message,
+                    "evidence": v.evidence,
+                    "suggested_fix": v.suggested_fix,
+                })
+        print(json.dumps(output, indent=2))
+    else:
+        _print_review(file_results, changed, total_violations)
+
+    sys.exit(1 if total_violations > 0 else 0)
+
+
+def _print_review(file_results: dict, changed: dict, total_violations: int):
+    print()
+    print("  🐍 python-vibe-guard — PR Review")
+    print("  ─────────────────────────────────")
+    print(f"  Analyzing {len(changed)} changed file(s)...")
+    print()
+
+    if not file_results:
+        print("  No violations found in new/modified code")
+        print()
+        return
+
+    for path, violations in file_results.items():
+        lines_reviewed = len(changed.get(path, frozenset()))
+        print(f"  📄 {path} (+{lines_reviewed} lines reviewed)")
+        print()
+        for v in violations:
+            icon = _SEVERITY_ICON.get(v.severity, "•")
+            print(f"  {icon} {v.severity} [{v.rule_id}] — line {v.line} (NEW)")
+            print(f"     Function : {v.function_name}()")
+            print(f"     Problem  : {v.message}")
+            print(f"     Fix      : {v.evidence}")
+            if v.suggested_fix:
+                print("     Suggested fix:")
+                for line in v.suggested_fix.splitlines():
+                    print(f"         {line}")
+            print()
+
+    print("  ─────────────────────────────────")
+    print(f"  {total_violations} violation(s) in new/modified code")
+    print()
+
+
 def _main_explain(argv):
     parser = argparse.ArgumentParser(
         prog="pyvibe explain",

python_vibe_guard-0.10.0/pyvibe/diff.py

@@ -0,0 +1,121 @@
+"""Diff parsing for `pyvibe review` — extracts changed .py files and the
+new-file line numbers touched by a `git diff`, so review only reports
+violations on lines that are actually part of the diff (deleted lines and
+untouched context are never reported).
+"""
+from __future__ import annotations
+
+import re
+import subprocess
+from pathlib import Path
+from typing import Dict, FrozenSet, Optional
+
+_PLUS_PLUS_RE = re.compile(r"^\+\+\+ (?:b/(?P<path>.+)|(?P<devnull>/dev/null))$")
+_HUNK_RE = re.compile(r"^@@ -\d+(?:,\d+)? \+(?P<new_start>\d+)(?:,\d+)? @@")
+
+
+class GitDiffError(Exception):
+    """Raised when `git diff`/`git rev-parse` can't be run or the base ref is invalid."""
+
+
+def get_repo_root(cwd: Optional[Path] = None) -> Path:
+    """Resolve the top-level directory of the current git repository.
+
+    Needed because `git diff` always reports paths relative to the repo
+    root, not the caller's cwd — file paths from the diff must be resolved
+    against this root, not against Path.cwd().
+    """
+    result = subprocess.run(
+        ["git", "rev-parse", "--show-toplevel"],
+        cwd=cwd,
+        capture_output=True,
+        text=True,
+    )
+    if result.returncode != 0:
+        raise GitDiffError("Not inside a git repository")
+    return Path(result.stdout.strip())
+
+
+def get_git_diff(base: str, cwd: Optional[Path] = None) -> str:
+    """Run `git diff <base> -- '*.py'` and return its raw text output.
+
+    Only ever invoked with a list-form subprocess call (no shell=True), so
+    `base` can't break out into arbitrary shell commands. It's still
+    rejected up front if it looks like a flag, since git itself would
+    otherwise interpret e.g. "--upload-pack=..." as an option rather than
+    a ref.
+    """
+    if base.startswith("-"):
+        raise GitDiffError(f"Invalid base ref: {base!r}")
+
+    try:
+        result = subprocess.run(
+            ["git", "diff", base, "--", "*.py"],
+            cwd=cwd,
+            capture_output=True,
+            text=True,
+        )
+    except FileNotFoundError as e:
+        raise GitDiffError("git executable not found") from e
+
+    if result.returncode != 0:
+        raise GitDiffError(result.stderr.strip() or f"git diff failed for base {base!r}")
+
+    return result.stdout
+
+
+def parse_diff(diff_text: str) -> Dict[str, FrozenSet[int]]:
+    """Parse unified `git diff` output into {file_path: {added_line_numbers}}.
+
+    Only .py files are kept. Deleted lines (prefix "-") and unchanged
+    context lines never appear in the result — only lines that are actually
+    added/modified in the new version of the file.
+    """
+    files: Dict[str, set] = {}
+    current_file: Optional[str] = None
+    current_line: Optional[int] = None
+
+    for line in diff_text.splitlines():
+        if line.startswith("diff --git "):
+            current_file = None
+            current_line = None
+            continue
+
+        if line.startswith("+++ "):
+            m = _PLUS_PLUS_RE.match(line)
+            current_file = m.group("path") if (m and m.group("path")) else None
+            current_line = None
+            continue
+
+        if current_file is None or not current_file.endswith(".py"):
+            continue
+
+        hunk_match = _HUNK_RE.match(line)
+        if hunk_match:
+            current_line = int(hunk_match.group("new_start"))
+            continue
+
+        if current_line is None:
+            continue
+
+        if line.startswith("\\"):
+            continue  # ""
+        elif line.startswith("+"):
+            files.setdefault(current_file, set()).add(current_line)
+            current_line += 1
+        elif line.startswith("-"):
+            continue  # removed line — doesn't exist in the new file
+        else:
+            current_line += 1  # unchanged context line
+
+    return {path: frozenset(lines) for path, lines in files.items()}
+
+
+def get_changed_python_files(base: str, cwd: Optional[Path] = None) -> Dict[str, FrozenSet[int]]:
+    """High-level entry point used by `pyvibe review`.
+
+    Returns {repo-relative path: {added line numbers}} for every .py file
+    touched in `git diff <base>`.
+    """
+    diff_text = get_git_diff(base, cwd=cwd)
+    return parse_diff(diff_text)

{python_vibe_guard-0.8.0 → python_vibe_guard-0.10.0}/pyvibe/rules/async_requests.py

@@ -1,5 +1,6 @@
 import ast
-from typing import List, Set
+from typing import List, Optional, Set
+from pyvibe.autofix import render_call_args
 from pyvibe.rules.base import Violation, AsyncBlockingCallVisitor
 
 REQUESTS_METHODS = {"get", "post", "put", "patch", "delete", "head", "options", "request"}
@@ -19,8 +20,9 @@ class AsyncRequestsRule(AsyncBlockingCallVisitor):
     RULE_ID = "PYVIBE-002"
     SEVERITY = "CRITICAL"
 
-    def __init__(self):
+    def __init__(self, source: Optional[str] = None):
         super().__init__()
+        self._source = source
         # Names bound to the `requests` module via `import requests [as X]`
         self._requests_aliases: Set[str] = set()
 
@@ -44,10 +46,20 @@ class AsyncRequestsRule(AsyncBlockingCallVisitor):
                 function_name=self._current_async_func,
                 message=f"requests.{method}() is synchronous — blocks the event loop",
                 evidence=f"Use `async with httpx.AsyncClient() as c: await c.{method}(url)`",
+                suggested_fix=self._suggest_fix(node, method),
             ))
 
         self.generic_visit(node)
 
+    def _suggest_fix(self, node: ast.Call, method: str) -> Optional[str]:
+        if not self._source:
+            return None
+        args_src = render_call_args(self._source, node)
+        return (
+            "async with httpx.AsyncClient() as client:\n"
+            f"    response = await client.{method}({args_src})"
+        )
+
     def _get_requests_method(self, node: ast.Call):
         # requests.get(...), requests.post(...), etc. — qualified form only.
         # Guard against NAME_COLLISION: only flag when the receiver name is

{python_vibe_guard-0.8.0 → python_vibe_guard-0.10.0}/pyvibe/rules/async_sleep.py

@@ -1,5 +1,6 @@
 import ast
-from typing import List
+from typing import List, Optional
+from pyvibe.autofix import render_call_args
 from pyvibe.rules.base import Violation, AsyncBlockingCallVisitor
 
 
@@ -17,6 +18,10 @@ class AsyncSleepRule(AsyncBlockingCallVisitor):
     RULE_ID = "PYVIBE-001"
     SEVERITY = "CRITICAL"
 
+    def __init__(self, source: Optional[str] = None):
+        super().__init__()
+        self._source = source
+
     def visit_Call(self, node: ast.Call):
         if self._current_async_func is None:
             self.generic_visit(node)
@@ -30,10 +35,17 @@ class AsyncSleepRule(AsyncBlockingCallVisitor):
                 function_name=self._current_async_func,
                 message="time.sleep() blocks the entire event loop",
                 evidence="Use `await asyncio.sleep(n)` instead",
+                suggested_fix=self._suggest_fix(node),
             ))
 
         self.generic_visit(node)
 
+    def _suggest_fix(self, node: ast.Call) -> Optional[str]:
+        if not self._source:
+            return None
+        args_src = render_call_args(self._source, node)
+        return f"await asyncio.sleep({args_src})"
+
     def _is_time_sleep(self, node: ast.Call) -> bool:
         # time.sleep(n) — qualified form only; bare sleep() excluded (false positives)
         return (