python-vibe-guard 0.8.0__tar.gz → 0.9.0__tar.gz

{python_vibe_guard-0.8.0 → python_vibe_guard-0.9.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-vibe-guard
-Version: 0.8.0
+Version: 0.9.0
 Summary: Runtime anti-pattern scanner for async Python — detects what AI-generated code gets wrong
 License: MIT
 Keywords: async,linter,fastapi,asyncio,static-analysis
@@ -184,22 +184,29 @@ python -m pyvibe explain PYVIBE-002
 
   demo/bad_async.py
 
-  [CRITICAL] [PYVIBE-001] — line 14
+  [CRITICAL] [PYVIBE-001] — line 27
      Function : process_order()
      Problem  : time.sleep() blocks the entire event loop
      Fix      : Use `await asyncio.sleep(n)` instead
+     Suggested fix:
+         await asyncio.sleep(2)
 
-  [CRITICAL] [PYVIBE-002] — line 20
+  [CRITICAL] [PYVIBE-002] — line 33
      Function : fetch_user()
      Problem  : requests.get() is synchronous — blocks the event loop
      Fix      : Use `async with httpx.AsyncClient() as c: await c.get(url)`
+     Suggested fix:
+         async with httpx.AsyncClient() as client:
+             response = await client.get(f"https://api.example.com/users/{user_id}")
 
-  [CRITICAL] [PYVIBE-003] — line 26
+  [CRITICAL] [PYVIBE-003] — line 39
      Function : orchestrate()
      Problem  : asyncio.run() inside async def raises RuntimeError at runtime
      Fix      : Use `await coroutine()` directly — asyncio.run() is for sync entrypoints only
+     Suggested fix:
+         await process_order(42)
 
-  [CRITICAL] [PYVIBE-004] — line 32
+  [CRITICAL] [PYVIBE-004] — line 45
      Function : update_counter()
      Problem  : threading.Lock() blocks the event loop under contention
      Fix      : Use `asyncio.Lock()` with `async with lock:` instead
@@ -208,6 +215,10 @@ python -m pyvibe explain PYVIBE-002
   4 violation(s) in 1 file(s)
 ```
 
+`Suggested fix:` blocks are generated from the real code on the flagged line — they are
+printed to the terminal / JSON output only and are never written back to your files.
+Currently available for PYVIBE-001, 002, 003, 007, and 008.
+
 ### `pyvibe explain`
 
 Every rule's accuracy claims come from `research/accepted/PYVIBE-XXX.md` — a per-rule
@@ -279,6 +290,18 @@ each linking back to its `research/accepted/PYVIBE-XXX.md` evidence file via `he
 
 ---
 
+## GitHub Action
+
+- name: python-vibe-guard
+  uses: joaquinriosheredia/python-vibe-guard-action@v1
+  with:
+    path: src/
+
+Violations appear directly in GitHub Security tab (SARIF).
+Link: https://github.com/Joaquinriosheredia/python-vibe-guard-action
+
+---
+
 ## Pre-commit integration
 
 Add to your `.pre-commit-config.yaml`:

{python_vibe_guard-0.8.0 → python_vibe_guard-0.9.0}/README.md

@@ -169,22 +169,29 @@ python -m pyvibe explain PYVIBE-002
 
   demo/bad_async.py
 
-  [CRITICAL] [PYVIBE-001] — line 14
+  [CRITICAL] [PYVIBE-001] — line 27
      Function : process_order()
      Problem  : time.sleep() blocks the entire event loop
      Fix      : Use `await asyncio.sleep(n)` instead
+     Suggested fix:
+         await asyncio.sleep(2)
 
-  [CRITICAL] [PYVIBE-002] — line 20
+  [CRITICAL] [PYVIBE-002] — line 33
      Function : fetch_user()
      Problem  : requests.get() is synchronous — blocks the event loop
      Fix      : Use `async with httpx.AsyncClient() as c: await c.get(url)`
+     Suggested fix:
+         async with httpx.AsyncClient() as client:
+             response = await client.get(f"https://api.example.com/users/{user_id}")
 
-  [CRITICAL] [PYVIBE-003] — line 26
+  [CRITICAL] [PYVIBE-003] — line 39
      Function : orchestrate()
      Problem  : asyncio.run() inside async def raises RuntimeError at runtime
      Fix      : Use `await coroutine()` directly — asyncio.run() is for sync entrypoints only
+     Suggested fix:
+         await process_order(42)
 
-  [CRITICAL] [PYVIBE-004] — line 32
+  [CRITICAL] [PYVIBE-004] — line 45
      Function : update_counter()
      Problem  : threading.Lock() blocks the event loop under contention
      Fix      : Use `asyncio.Lock()` with `async with lock:` instead
@@ -193,6 +200,10 @@ python -m pyvibe explain PYVIBE-002
   4 violation(s) in 1 file(s)
 ```
 
+`Suggested fix:` blocks are generated from the real code on the flagged line — they are
+printed to the terminal / JSON output only and are never written back to your files.
+Currently available for PYVIBE-001, 002, 003, 007, and 008.
+
 ### `pyvibe explain`
 
 Every rule's accuracy claims come from `research/accepted/PYVIBE-XXX.md` — a per-rule
@@ -264,6 +275,18 @@ each linking back to its `research/accepted/PYVIBE-XXX.md` evidence file via `he
 
 ---
 
+## GitHub Action
+
+- name: python-vibe-guard
+  uses: joaquinriosheredia/python-vibe-guard-action@v1
+  with:
+    path: src/
+
+Violations appear directly in GitHub Security tab (SARIF).
+Link: https://github.com/Joaquinriosheredia/python-vibe-guard-action
+
+---
+
 ## Pre-commit integration
 
 Add to your `.pre-commit-config.yaml`:

{python_vibe_guard-0.8.0 → python_vibe_guard-0.9.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "python-vibe-guard"
-version = "0.8.0"
+version = "0.9.0"
 description = "Runtime anti-pattern scanner for async Python — detects what AI-generated code gets wrong"
 readme = "README.md"
 requires-python = ">=3.10"

{python_vibe_guard-0.8.0 → python_vibe_guard-0.9.0}/python_vibe_guard.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-vibe-guard
-Version: 0.8.0
+Version: 0.9.0
 Summary: Runtime anti-pattern scanner for async Python — detects what AI-generated code gets wrong
 License: MIT
 Keywords: async,linter,fastapi,asyncio,static-analysis
@@ -184,22 +184,29 @@ python -m pyvibe explain PYVIBE-002
 
   demo/bad_async.py
 
-  [CRITICAL] [PYVIBE-001] — line 14
+  [CRITICAL] [PYVIBE-001] — line 27
      Function : process_order()
      Problem  : time.sleep() blocks the entire event loop
      Fix      : Use `await asyncio.sleep(n)` instead
+     Suggested fix:
+         await asyncio.sleep(2)
 
-  [CRITICAL] [PYVIBE-002] — line 20
+  [CRITICAL] [PYVIBE-002] — line 33
      Function : fetch_user()
      Problem  : requests.get() is synchronous — blocks the event loop
      Fix      : Use `async with httpx.AsyncClient() as c: await c.get(url)`
+     Suggested fix:
+         async with httpx.AsyncClient() as client:
+             response = await client.get(f"https://api.example.com/users/{user_id}")
 
-  [CRITICAL] [PYVIBE-003] — line 26
+  [CRITICAL] [PYVIBE-003] — line 39
      Function : orchestrate()
      Problem  : asyncio.run() inside async def raises RuntimeError at runtime
      Fix      : Use `await coroutine()` directly — asyncio.run() is for sync entrypoints only
+     Suggested fix:
+         await process_order(42)
 
-  [CRITICAL] [PYVIBE-004] — line 32
+  [CRITICAL] [PYVIBE-004] — line 45
      Function : update_counter()
      Problem  : threading.Lock() blocks the event loop under contention
      Fix      : Use `asyncio.Lock()` with `async with lock:` instead
@@ -208,6 +215,10 @@ python -m pyvibe explain PYVIBE-002
   4 violation(s) in 1 file(s)
 ```
 
+`Suggested fix:` blocks are generated from the real code on the flagged line — they are
+printed to the terminal / JSON output only and are never written back to your files.
+Currently available for PYVIBE-001, 002, 003, 007, and 008.
+
 ### `pyvibe explain`
 
 Every rule's accuracy claims come from `research/accepted/PYVIBE-XXX.md` — a per-rule
@@ -279,6 +290,18 @@ each linking back to its `research/accepted/PYVIBE-XXX.md` evidence file via `he
 
 ---
 
+## GitHub Action
+
+- name: python-vibe-guard
+  uses: joaquinriosheredia/python-vibe-guard-action@v1
+  with:
+    path: src/
+
+Violations appear directly in GitHub Security tab (SARIF).
+Link: https://github.com/Joaquinriosheredia/python-vibe-guard-action
+
+---
+
 ## Pre-commit integration
 
 Add to your `.pre-commit-config.yaml`:

{python_vibe_guard-0.8.0 → python_vibe_guard-0.9.0}/python_vibe_guard.egg-info/SOURCES.txt

@@ -8,6 +8,7 @@ python_vibe_guard.egg-info/top_level.txt
 pyvibe/__init__.py
 pyvibe/__main__.py
 pyvibe/analyzer.py
+pyvibe/autofix.py
 pyvibe/cli.py
 pyvibe/explain.py
 pyvibe/rule_docs.py

python_vibe_guard-0.9.0/pyvibe/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.9.0"

{python_vibe_guard-0.8.0 → python_vibe_guard-0.9.0}/pyvibe/analyzer.py

@@ -49,6 +49,17 @@ ALL_RULES = [
 
 ALL_RULE_IDS: FrozenSet[str] = frozenset(r.RULE_ID for r in ALL_RULES)
 
+# Rules that build a concrete "Suggested fix" snippet from the real source
+# text (see pyvibe/autofix.py) and therefore need the full source passed
+# into their constructor.
+_NEEDS_SOURCE: FrozenSet[type] = frozenset({
+    AsyncSleepRule,
+    AsyncRequestsRule,
+    AsyncioRunRule,
+    SubprocessAsyncRule,
+    SqliteAsyncRule,
+})
+
 # Rules downgraded CRITICAL → WARNING when the violation is inside a test file.
 # time.sleep in fixtures, subprocess in service-startup helpers, open() in
 # async test helpers (e.g. asyncssh, aiofiles own test suites), and Celery task
@@ -101,6 +112,8 @@ def analyze_source(
     for RuleClass in ALL_RULES:
         if RuleClass is SilentExceptRule:
             visitor = RuleClass(source_lines)
+        elif RuleClass in _NEEDS_SOURCE:
+            visitor = RuleClass(source)
         else:
             visitor = RuleClass()
         visitor.visit(tree)

python_vibe_guard-0.9.0/pyvibe/autofix.py

@@ -0,0 +1,31 @@
+"""Shared helpers for building concrete "Suggested fix" snippets from real source context.
+
+Rules that support autofix suggestions receive the original source text and use
+`ast.get_source_segment` to pull the exact expressions the developer wrote
+(variable names, literals, kwargs) into the suggested replacement, instead of
+a synthetic placeholder like `...`.
+"""
+import ast
+from typing import Optional
+
+
+def render_node(source: str, node: ast.AST) -> Optional[str]:
+    """Return the literal source text of an AST node, or None if unavailable."""
+    return ast.get_source_segment(source, node)
+
+
+def render_call_args(source: str, node: ast.Call) -> str:
+    """Reconstruct the literal argument-list text of a Call node from source."""
+    parts = []
+    for arg in node.args:
+        if isinstance(arg, ast.Starred):
+            seg = render_node(source, arg.value)
+            parts.append(f"*{seg}" if seg else "*args")
+        else:
+            seg = render_node(source, arg)
+            parts.append(seg if seg is not None else "...")
+    for kw in node.keywords:
+        seg = render_node(source, kw.value)
+        seg = seg if seg is not None else "..."
+        parts.append(f"**{seg}" if kw.arg is None else f"{kw.arg}={seg}")
+    return ", ".join(parts)

{python_vibe_guard-0.8.0 → python_vibe_guard-0.9.0}/pyvibe/cli.py

@@ -132,6 +132,7 @@ def main():
                     "function": v.function_name,
                     "message": v.message,
                     "evidence": v.evidence,
+                    "suggested_fix": v.suggested_fix,
                 })
         print(json.dumps(output, indent=2))
     else:
@@ -160,6 +161,10 @@ def _print_human(file_results: dict, total_violations: int, total_files: int):
             print(f"     Function : {v.function_name}()")
             print(f"     Problem  : {v.message}")
             print(f"     Fix      : {v.evidence}")
+            if v.suggested_fix:
+                print("     Suggested fix:")
+                for line in v.suggested_fix.splitlines():
+                    print(f"         {line}")
             print()
 
     print("  ─────────────────────────────────────────────")

{python_vibe_guard-0.8.0 → python_vibe_guard-0.9.0}/pyvibe/rules/async_requests.py

@@ -1,5 +1,6 @@
 import ast
-from typing import List, Set
+from typing import List, Optional, Set
+from pyvibe.autofix import render_call_args
 from pyvibe.rules.base import Violation, AsyncBlockingCallVisitor
 
 REQUESTS_METHODS = {"get", "post", "put", "patch", "delete", "head", "options", "request"}
@@ -19,8 +20,9 @@ class AsyncRequestsRule(AsyncBlockingCallVisitor):
     RULE_ID = "PYVIBE-002"
     SEVERITY = "CRITICAL"
 
-    def __init__(self):
+    def __init__(self, source: Optional[str] = None):
         super().__init__()
+        self._source = source
         # Names bound to the `requests` module via `import requests [as X]`
         self._requests_aliases: Set[str] = set()
 
@@ -44,10 +46,20 @@ class AsyncRequestsRule(AsyncBlockingCallVisitor):
                 function_name=self._current_async_func,
                 message=f"requests.{method}() is synchronous — blocks the event loop",
                 evidence=f"Use `async with httpx.AsyncClient() as c: await c.{method}(url)`",
+                suggested_fix=self._suggest_fix(node, method),
             ))
 
         self.generic_visit(node)
 
+    def _suggest_fix(self, node: ast.Call, method: str) -> Optional[str]:
+        if not self._source:
+            return None
+        args_src = render_call_args(self._source, node)
+        return (
+            "async with httpx.AsyncClient() as client:\n"
+            f"    response = await client.{method}({args_src})"
+        )
+
     def _get_requests_method(self, node: ast.Call):
         # requests.get(...), requests.post(...), etc. — qualified form only.
         # Guard against NAME_COLLISION: only flag when the receiver name is

{python_vibe_guard-0.8.0 → python_vibe_guard-0.9.0}/pyvibe/rules/async_sleep.py

@@ -1,5 +1,6 @@
 import ast
-from typing import List
+from typing import List, Optional
+from pyvibe.autofix import render_call_args
 from pyvibe.rules.base import Violation, AsyncBlockingCallVisitor
 
 
@@ -17,6 +18,10 @@ class AsyncSleepRule(AsyncBlockingCallVisitor):
     RULE_ID = "PYVIBE-001"
     SEVERITY = "CRITICAL"
 
+    def __init__(self, source: Optional[str] = None):
+        super().__init__()
+        self._source = source
+
     def visit_Call(self, node: ast.Call):
         if self._current_async_func is None:
             self.generic_visit(node)
@@ -30,10 +35,17 @@ class AsyncSleepRule(AsyncBlockingCallVisitor):
                 function_name=self._current_async_func,
                 message="time.sleep() blocks the entire event loop",
                 evidence="Use `await asyncio.sleep(n)` instead",
+                suggested_fix=self._suggest_fix(node),
             ))
 
         self.generic_visit(node)
 
+    def _suggest_fix(self, node: ast.Call) -> Optional[str]:
+        if not self._source:
+            return None
+        args_src = render_call_args(self._source, node)
+        return f"await asyncio.sleep({args_src})"
+
     def _is_time_sleep(self, node: ast.Call) -> bool:
         # time.sleep(n) — qualified form only; bare sleep() excluded (false positives)
         return (

{python_vibe_guard-0.8.0 → python_vibe_guard-0.9.0}/pyvibe/rules/asyncio_run.py

@@ -1,5 +1,6 @@
 import ast
-from typing import List
+from typing import List, Optional
+from pyvibe.autofix import render_node
 from pyvibe.rules.base import Violation, AsyncBlockingCallVisitor
 
 
@@ -21,6 +22,10 @@ class AsyncioRunRule(AsyncBlockingCallVisitor):
     RULE_ID = "PYVIBE-003"
     SEVERITY = "CRITICAL"
 
+    def __init__(self, source: Optional[str] = None):
+        super().__init__()
+        self._source = source
+
     def visit_Call(self, node: ast.Call):
         if self._current_async_func is None:
             self.generic_visit(node)
@@ -34,10 +39,19 @@ class AsyncioRunRule(AsyncBlockingCallVisitor):
                 function_name=self._current_async_func,
                 message="asyncio.run() inside async def raises RuntimeError at runtime",
                 evidence="Use `await coroutine()` directly — asyncio.run() is for sync entrypoints only",
+                suggested_fix=self._suggest_fix(node),
             ))
 
         self.generic_visit(node)
 
+    def _suggest_fix(self, node: ast.Call) -> Optional[str]:
+        if not self._source or not node.args:
+            return None
+        coro_src = render_node(self._source, node.args[0])
+        if not coro_src:
+            return None
+        return f"await {coro_src}"
+
     def _is_asyncio_run(self, node: ast.Call) -> bool:
         # asyncio.run(...)
         return (

{python_vibe_guard-0.8.0 → python_vibe_guard-0.9.0}/pyvibe/rules/base.py

@@ -11,6 +11,7 @@ class Violation:
     function_name: str
     message: str
     evidence: str
+    suggested_fix: Optional[str] = None
 
 
 class AsyncContextVisitor(ast.NodeVisitor):

{python_vibe_guard-0.8.0 → python_vibe_guard-0.9.0}/pyvibe/rules/sqlite_async.py

@@ -1,5 +1,6 @@
 import ast
-from typing import List, Set
+from typing import List, Optional, Set
+from pyvibe.autofix import render_call_args
 from pyvibe.rules.base import Violation, AsyncBlockingCallVisitor
 
 
@@ -17,8 +18,9 @@ class SqliteAsyncRule(AsyncBlockingCallVisitor):
     RULE_ID = "PYVIBE-008"
     SEVERITY = "CRITICAL"
 
-    def __init__(self):
+    def __init__(self, source: Optional[str] = None):
         super().__init__()
+        self._source = source
         # Names bound to the `sqlite3` module via `import sqlite3 [as X]`
         self._sqlite3_aliases: Set[str] = set()
         # Names imported directly from sqlite3: `from sqlite3 import connect`
@@ -50,10 +52,17 @@ class SqliteAsyncRule(AsyncBlockingCallVisitor):
                 function_name=self._current_async_func,
                 message="sqlite3.connect() is synchronous — blocks the event loop during I/O",
                 evidence="Use `async with aiosqlite.connect('db.sqlite3') as db:` instead",
+                suggested_fix=self._suggest_fix(node),
             ))
 
         self.generic_visit(node)
 
+    def _suggest_fix(self, node: ast.Call) -> Optional[str]:
+        if not self._source:
+            return None
+        args_src = render_call_args(self._source, node)
+        return f"async with aiosqlite.connect({args_src}) as db:"
+
     def _is_sqlite_connect(self, node: ast.Call) -> bool:
         # sqlite3.connect(...)
         # Guard against NAME_COLLISION: only flag when the receiver name is

{python_vibe_guard-0.8.0 → python_vibe_guard-0.9.0}/pyvibe/rules/subprocess_async.py

@@ -1,5 +1,6 @@
 import ast
-from typing import List
+from typing import List, Optional
+from pyvibe.autofix import render_call_args, render_node
 from pyvibe.rules.base import Violation, AsyncBlockingCallVisitor
 
 SUBPROCESS_BLOCKING = {"run", "call", "check_output", "Popen"}
@@ -21,6 +22,10 @@ class SubprocessAsyncRule(AsyncBlockingCallVisitor):
     RULE_ID = "PYVIBE-007"
     SEVERITY = "CRITICAL"
 
+    def __init__(self, source: Optional[str] = None):
+        super().__init__()
+        self._source = source
+
     def visit_Call(self, node: ast.Call):
         if self._current_async_func is None:
             self.generic_visit(node)
@@ -35,10 +40,47 @@ class SubprocessAsyncRule(AsyncBlockingCallVisitor):
                 function_name=self._current_async_func,
                 message=f"subprocess.{method}() blocks the event loop for the entire subprocess duration",
                 evidence="Use `proc = await asyncio.create_subprocess_exec(*cmd)` then `await proc.communicate()`",
+                suggested_fix=self._suggest_fix(node, method),
             ))
 
         self.generic_visit(node)
 
+    def _cmd_source(self, node: ast.Call) -> str:
+        """Render the command portion of the call, unpacking list literals."""
+        if not node.args:
+            return "*cmd"
+        first = node.args[0]
+        if isinstance(first, ast.List):
+            elts_src = ", ".join(render_node(self._source, e) or "..." for e in first.elts)
+            return elts_src
+        seg = render_node(self._source, first)
+        return f"*{seg}" if seg else "*cmd"
+
+    def _suggest_fix(self, node: ast.Call, method: str) -> Optional[str]:
+        if not self._source:
+            return None
+
+        cmd_src = self._cmd_source(node)
+
+        if method == "run":
+            return (
+                f"proc = await asyncio.create_subprocess_exec({cmd_src})\n"
+                "stdout, stderr = await proc.communicate()"
+            )
+        if method == "call":
+            return (
+                f"proc = await asyncio.create_subprocess_exec({cmd_src})\n"
+                "returncode = await proc.wait()"
+            )
+        if method == "check_output":
+            return (
+                f"proc = await asyncio.create_subprocess_exec({cmd_src}, stdout=asyncio.subprocess.PIPE)\n"
+                "stdout, _ = await proc.communicate()"
+            )
+        if method == "Popen":
+            return f"proc = await asyncio.create_subprocess_exec({cmd_src})"
+        return None
+
     def _get_subprocess_method(self, node: ast.Call):
         # subprocess.run(...), subprocess.Popen(...), etc. — qualified form only
         # Bare names (run, call…) excluded: 'call' is too generic and caused a

{python_vibe_guard-0.8.0 → python_vibe_guard-0.9.0}/tests/test_rules.py

@@ -46,6 +46,16 @@ def sync_handler():
     assert len(violations) == 0
 
 
+def test_001_suggested_fix_uses_real_args():
+    src = """
+import time
+async def handler():
+    time.sleep(5)
+"""
+    violations = analyze_source(src)
+    assert violations[0].suggested_fix == "await asyncio.sleep(5)"
+
+
 # ─── PYVIBE-002 ──────────────────────────────────────────────────────────────
 
 def test_002_detects_requests_get_in_async():
@@ -80,6 +90,19 @@ def sync_fetch():
     assert len(violations) == 0
 
 
+def test_002_suggested_fix_uses_real_args():
+    src = """
+import requests
+async def fetch():
+    return requests.get("https://example.com", timeout=5)
+"""
+    violations = analyze_source(src)
+    assert violations[0].suggested_fix == (
+        "async with httpx.AsyncClient() as client:\n"
+        '    response = await client.get("https://example.com", timeout=5)'
+    )
+
+
 # ─── PYVIBE-003 ──────────────────────────────────────────────────────────────
 
 def test_003_detects_asyncio_run_in_async():
@@ -118,6 +141,16 @@ async def outer():
     assert len(violations) == 0
 
 
+def test_003_suggested_fix_uses_real_coroutine_call():
+    src = """
+import asyncio
+async def bad():
+    asyncio.run(some_coroutine(1, 2))
+"""
+    violations = analyze_source(src)
+    assert violations[0].suggested_fix == "await some_coroutine(1, 2)"
+
+
 # ─── PYVIBE-004 ──────────────────────────────────────────────────────────────
 
 def test_004_detects_threading_lock_in_async():
@@ -396,6 +429,31 @@ async def async_process(path):
     assert len(violations) == 0
 
 
+def test_007_suggested_fix_unpacks_list_literal_for_run():
+    src = """
+import subprocess
+async def process_file(path):
+    subprocess.run(["ffmpeg", "-i", path, "output.mp4"])
+"""
+    violations = analyze_source(src)
+    assert violations[0].suggested_fix == (
+        'proc = await asyncio.create_subprocess_exec("ffmpeg", "-i", path, "output.mp4")\n'
+        "stdout, stderr = await proc.communicate()"
+    )
+
+
+def test_007_suggested_fix_for_popen():
+    src = """
+import subprocess
+async def get_output():
+    proc = subprocess.Popen(["git", "log"], stdout=-1)
+"""
+    violations = analyze_source(src)
+    assert violations[0].suggested_fix == (
+        'proc = await asyncio.create_subprocess_exec("git", "log")'
+    )
+
+
 # ─── PYVIBE-008 ──────────────────────────────────────────────────────────────
 
 def test_008_detects_sqlite3_connect_in_async():
@@ -433,6 +491,17 @@ async def async_get_users():
     assert len(violations) == 0
 
 
+def test_008_suggested_fix_uses_real_args():
+    src = """
+import sqlite3
+async def get_users():
+    conn = sqlite3.connect("db.sqlite3")
+    return conn.cursor().fetchall()
+"""
+    violations = analyze_source(src)
+    assert violations[0].suggested_fix == 'async with aiosqlite.connect("db.sqlite3") as db:'
+
+
 # ─── PYVIBE-009 ──────────────────────────────────────────────────────────────
 
 def test_009_detects_open_in_async():

python_vibe_guard-0.8.0/pyvibe/__init__.py

@@ -1 +0,0 @@
-__version__ = "0.8.0"