python-vibe-guard 0.9.0__tar.gz → 0.10.0__tar.gz

{python_vibe_guard-0.9.0 → python_vibe_guard-0.10.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-vibe-guard
-Version: 0.9.0
+Version: 0.10.0
 Summary: Runtime anti-pattern scanner for async Python — detects what AI-generated code gets wrong
 License: MIT
 Keywords: async,linter,fastapi,asyncio,static-analysis

{python_vibe_guard-0.9.0 → python_vibe_guard-0.10.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "python-vibe-guard"
-version = "0.9.0"
+version = "0.10.0"
 description = "Runtime anti-pattern scanner for async Python — detects what AI-generated code gets wrong"
 readme = "README.md"
 requires-python = ">=3.10"

{python_vibe_guard-0.9.0 → python_vibe_guard-0.10.0}/python_vibe_guard.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-vibe-guard
-Version: 0.9.0
+Version: 0.10.0
 Summary: Runtime anti-pattern scanner for async Python — detects what AI-generated code gets wrong
 License: MIT
 Keywords: async,linter,fastapi,asyncio,static-analysis

{python_vibe_guard-0.9.0 → python_vibe_guard-0.10.0}/python_vibe_guard.egg-info/SOURCES.txt

@@ -10,6 +10,7 @@ pyvibe/__main__.py
 pyvibe/analyzer.py
 pyvibe/autofix.py
 pyvibe/cli.py
+pyvibe/diff.py
 pyvibe/explain.py
 pyvibe/rule_docs.py
 pyvibe/sarif.py
@@ -35,6 +36,7 @@ pyvibe/rules/sqlite_async.py
 pyvibe/rules/subprocess_async.py
 pyvibe/rules/threading_lock.py
 pyvibe/rules/while_true_no_await.py
+tests/test_diff.py
 tests/test_exclude.py
 tests/test_explain.py
 tests/test_rules.py

python_vibe_guard-0.10.0/pyvibe/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.10.0"

{python_vibe_guard-0.9.0 → python_vibe_guard-0.10.0}/pyvibe/analyzer.py

@@ -1,6 +1,6 @@
 import ast
 from pathlib import Path
-from typing import FrozenSet, List
+from typing import FrozenSet, List, Optional
 
 from pyvibe.rules.base import Violation
 from pyvibe.rules.async_sleep import AsyncSleepRule
@@ -132,9 +132,16 @@ def analyze_file(
     path: Path,
     *,
     downgrade_in_tests: FrozenSet[str] = TEST_FILE_DOWNGRADE,
+    line_filter: Optional[FrozenSet[int]] = None,
 ) -> List[Violation]:
+    """line_filter: if given, only violations whose `line` is in this set
+    are returned (used by `pyvibe review` to report only diff-touched lines).
+    """
     source = path.read_text(encoding="utf-8", errors="ignore")
-    return analyze_source(source, filepath=str(path), downgrade_in_tests=downgrade_in_tests)
+    violations = analyze_source(source, filepath=str(path), downgrade_in_tests=downgrade_in_tests)
+    if line_filter is not None:
+        violations = [v for v in violations if v.line in line_filter]
+    return violations
 
 
 DEFAULT_EXCLUDES = frozenset({

{python_vibe_guard-0.9.0 → python_vibe_guard-0.10.0}/pyvibe/cli.py

@@ -9,6 +9,8 @@ Usage:
     python -m pyvibe <path> --no-test-files   # skip test files entirely
     python -m pyvibe <path> --downgrade-in-tests  # WARNING instead of CRITICAL in all test files
     python -m pyvibe explain PYVIBE-002       # show research evidence for a rule
+    python -m pyvibe review                   # PR review: only diff-touched lines (git diff HEAD~1)
+    python -m pyvibe review --base main       # diff against another ref
 """
 import argparse
 import json
@@ -31,6 +33,10 @@ def main():
         _main_explain(sys.argv[2:])
         return
 
+    if len(sys.argv) > 1 and sys.argv[1] == "review":
+        _main_review(sys.argv[2:])
+        return
+
     parser = argparse.ArgumentParser(
         prog="pyvibe",
         description="Detect runtime anti-patterns in async Python code",
@@ -172,6 +178,113 @@ def _print_human(file_results: dict, total_violations: int, total_files: int):
     print()
 
 
+_SEVERITY_ICON = {"CRITICAL": "❌", "WARNING": "⚠️"}
+
+
+def _main_review(argv):
+    parser = argparse.ArgumentParser(
+        prog="pyvibe review",
+        description="PR review mode: analyze only lines added/modified in a git diff",
+    )
+    parser.add_argument(
+        "--base",
+        default="HEAD~1",
+        help="Git ref to diff against (default: HEAD~1)",
+    )
+    parser.add_argument("--json", action="store_true", help="Output as JSON")
+    parser.add_argument(
+        "--sarif",
+        action="store_true",
+        help="Also write SARIF 2.1.0 output (for GitHub Code Scanning)",
+    )
+    parser.add_argument(
+        "--sarif-output",
+        metavar="PATH",
+        default="results.sarif",
+        help="Path to write SARIF output to (default: results.sarif)",
+    )
+    args = parser.parse_args(argv)
+
+    from pyvibe.diff import GitDiffError, get_changed_python_files, get_repo_root
+
+    try:
+        repo_root = get_repo_root()
+        changed = get_changed_python_files(args.base, cwd=repo_root)
+    except GitDiffError as e:
+        print(f"Error: {e}", file=sys.stderr)
+        sys.exit(2)
+
+    file_results = {}
+    for rel_path, added_lines in changed.items():
+        abs_path = repo_root / rel_path
+        if not abs_path.exists():
+            continue
+        violations = analyze_file(abs_path, line_filter=added_lines)
+        if violations:
+            file_results[rel_path] = violations
+
+    total_violations = sum(len(v) for v in file_results.values())
+
+    if args.sarif:
+        from pyvibe.sarif import write_sarif
+
+        write_sarif(file_results, args.sarif_output)
+        print(f"SARIF results written to {args.sarif_output}")
+
+    if args.json:
+        output = []
+        for path, violations in file_results.items():
+            for v in violations:
+                output.append({
+                    "file": str(path),
+                    "rule": v.rule_id,
+                    "severity": v.severity,
+                    "line": v.line,
+                    "function": v.function_name,
+                    "message": v.message,
+                    "evidence": v.evidence,
+                    "suggested_fix": v.suggested_fix,
+                })
+        print(json.dumps(output, indent=2))
+    else:
+        _print_review(file_results, changed, total_violations)
+
+    sys.exit(1 if total_violations > 0 else 0)
+
+
+def _print_review(file_results: dict, changed: dict, total_violations: int):
+    print()
+    print("  🐍 python-vibe-guard — PR Review")
+    print("  ─────────────────────────────────")
+    print(f"  Analyzing {len(changed)} changed file(s)...")
+    print()
+
+    if not file_results:
+        print("  No violations found in new/modified code")
+        print()
+        return
+
+    for path, violations in file_results.items():
+        lines_reviewed = len(changed.get(path, frozenset()))
+        print(f"  📄 {path} (+{lines_reviewed} lines reviewed)")
+        print()
+        for v in violations:
+            icon = _SEVERITY_ICON.get(v.severity, "•")
+            print(f"  {icon} {v.severity} [{v.rule_id}] — line {v.line} (NEW)")
+            print(f"     Function : {v.function_name}()")
+            print(f"     Problem  : {v.message}")
+            print(f"     Fix      : {v.evidence}")
+            if v.suggested_fix:
+                print("     Suggested fix:")
+                for line in v.suggested_fix.splitlines():
+                    print(f"         {line}")
+            print()
+
+    print("  ─────────────────────────────────")
+    print(f"  {total_violations} violation(s) in new/modified code")
+    print()
+
+
 def _main_explain(argv):
     parser = argparse.ArgumentParser(
         prog="pyvibe explain",

python_vibe_guard-0.10.0/pyvibe/diff.py

@@ -0,0 +1,121 @@
+"""Diff parsing for `pyvibe review` — extracts changed .py files and the
+new-file line numbers touched by a `git diff`, so review only reports
+violations on lines that are actually part of the diff (deleted lines and
+untouched context are never reported).
+"""
+from __future__ import annotations
+
+import re
+import subprocess
+from pathlib import Path
+from typing import Dict, FrozenSet, Optional
+
+_PLUS_PLUS_RE = re.compile(r"^\+\+\+ (?:b/(?P<path>.+)|(?P<devnull>/dev/null))$")
+_HUNK_RE = re.compile(r"^@@ -\d+(?:,\d+)? \+(?P<new_start>\d+)(?:,\d+)? @@")
+
+
+class GitDiffError(Exception):
+    """Raised when `git diff`/`git rev-parse` can't be run or the base ref is invalid."""
+
+
+def get_repo_root(cwd: Optional[Path] = None) -> Path:
+    """Resolve the top-level directory of the current git repository.
+
+    Needed because `git diff` always reports paths relative to the repo
+    root, not the caller's cwd — file paths from the diff must be resolved
+    against this root, not against Path.cwd().
+    """
+    result = subprocess.run(
+        ["git", "rev-parse", "--show-toplevel"],
+        cwd=cwd,
+        capture_output=True,
+        text=True,
+    )
+    if result.returncode != 0:
+        raise GitDiffError("Not inside a git repository")
+    return Path(result.stdout.strip())
+
+
+def get_git_diff(base: str, cwd: Optional[Path] = None) -> str:
+    """Run `git diff <base> -- '*.py'` and return its raw text output.
+
+    Only ever invoked with a list-form subprocess call (no shell=True), so
+    `base` can't break out into arbitrary shell commands. It's still
+    rejected up front if it looks like a flag, since git itself would
+    otherwise interpret e.g. "--upload-pack=..." as an option rather than
+    a ref.
+    """
+    if base.startswith("-"):
+        raise GitDiffError(f"Invalid base ref: {base!r}")
+
+    try:
+        result = subprocess.run(
+            ["git", "diff", base, "--", "*.py"],
+            cwd=cwd,
+            capture_output=True,
+            text=True,
+        )
+    except FileNotFoundError as e:
+        raise GitDiffError("git executable not found") from e
+
+    if result.returncode != 0:
+        raise GitDiffError(result.stderr.strip() or f"git diff failed for base {base!r}")
+
+    return result.stdout
+
+
+def parse_diff(diff_text: str) -> Dict[str, FrozenSet[int]]:
+    """Parse unified `git diff` output into {file_path: {added_line_numbers}}.
+
+    Only .py files are kept. Deleted lines (prefix "-") and unchanged
+    context lines never appear in the result — only lines that are actually
+    added/modified in the new version of the file.
+    """
+    files: Dict[str, set] = {}
+    current_file: Optional[str] = None
+    current_line: Optional[int] = None
+
+    for line in diff_text.splitlines():
+        if line.startswith("diff --git "):
+            current_file = None
+            current_line = None
+            continue
+
+        if line.startswith("+++ "):
+            m = _PLUS_PLUS_RE.match(line)
+            current_file = m.group("path") if (m and m.group("path")) else None
+            current_line = None
+            continue
+
+        if current_file is None or not current_file.endswith(".py"):
+            continue
+
+        hunk_match = _HUNK_RE.match(line)
+        if hunk_match:
+            current_line = int(hunk_match.group("new_start"))
+            continue
+
+        if current_line is None:
+            continue
+
+        if line.startswith("\\"):
+            continue  # ""
+        elif line.startswith("+"):
+            files.setdefault(current_file, set()).add(current_line)
+            current_line += 1
+        elif line.startswith("-"):
+            continue  # removed line — doesn't exist in the new file
+        else:
+            current_line += 1  # unchanged context line
+
+    return {path: frozenset(lines) for path, lines in files.items()}
+
+
+def get_changed_python_files(base: str, cwd: Optional[Path] = None) -> Dict[str, FrozenSet[int]]:
+    """High-level entry point used by `pyvibe review`.
+
+    Returns {repo-relative path: {added line numbers}} for every .py file
+    touched in `git diff <base>`.
+    """
+    diff_text = get_git_diff(base, cwd=cwd)
+    return parse_diff(diff_text)

python_vibe_guard-0.10.0/tests/test_diff.py

@@ -0,0 +1,299 @@
+"""Tests for PR review mode (pyvibe/diff.py + `pyvibe review` CLI subcommand)."""
+import json
+import subprocess
+import sys
+from pathlib import Path
+
+import sys as _sys
+import os
+
+_sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
+
+import pytest
+
+from pyvibe.analyzer import analyze_file
+from pyvibe.diff import GitDiffError, get_changed_python_files, parse_diff
+
+REPO_ROOT = Path(__file__).resolve().parent.parent
+
+
+# ─── parse_diff() unit tests ───────────────────────────────────────────────
+
+def test_parse_diff_tracks_only_added_lines():
+    diff_text = """\
+diff --git a/app.py b/app.py
+index 1111111..2222222 100644
+--- a/app.py
++++ b/app.py
+@@ -1,3 +1,4 @@
+ import time
+
+ async def handler():
++    time.sleep(1)
+"""
+    result = parse_diff(diff_text)
+    assert result == {"app.py": frozenset({4})}
+
+
+def test_parse_diff_ignores_removed_lines():
+    diff_text = """\
+diff --git a/app.py b/app.py
+index 1111111..2222222 100644
+--- a/app.py
++++ b/app.py
+@@ -1,4 +1,3 @@
+ import time
+
+ async def handler():
+-    time.sleep(1)
+"""
+    result = parse_diff(diff_text)
+    assert result == {}
+
+
+def test_parse_diff_advances_line_numbers_through_context():
+    diff_text = """\
+diff --git a/app.py b/app.py
+index 1111111..2222222 100644
+--- a/app.py
++++ b/app.py
+@@ -1,3 +1,5 @@
+ line one
+ line two
++added at three
+ line four
++added at five
+"""
+    result = parse_diff(diff_text)
+    assert result == {"app.py": frozenset({3, 5})}
+
+
+def test_parse_diff_ignores_non_python_files():
+    diff_text = """\
+diff --git a/README.md b/README.md
+index 1111111..2222222 100644
+--- a/README.md
++++ b/README.md
+@@ -1,1 +1,2 @@
+ hello
++world
+"""
+    result = parse_diff(diff_text)
+    assert result == {}
+
+
+def test_parse_diff_handles_multiple_files():
+    diff_text = """\
+diff --git a/a.py b/a.py
+index 1111111..2222222 100644
+--- a/a.py
++++ b/a.py
+@@ -1,1 +1,2 @@
+ x = 1
++y = 2
+diff --git a/b.py b/b.py
+index 3333333..4444444 100644
+--- a/b.py
++++ b/b.py
+@@ -1,1 +1,2 @@
+ z = 1
++w = 2
+"""
+    result = parse_diff(diff_text)
+    assert result == {"a.py": frozenset({2}), "b.py": frozenset({2})}
+
+
+def test_parse_diff_new_file_reports_all_added_lines():
+    diff_text = """\
+diff --git a/new.py b/new.py
+new file mode 100644
+index 0000000..1111111
+--- /dev/null
++++ b/new.py
+@@ -0,0 +1,2 @@
++import os
++print(os.getcwd())
+"""
+    result = parse_diff(diff_text)
+    assert result == {"new.py": frozenset({1, 2})}
+
+
+def test_parse_diff_deleted_file_reports_nothing():
+    diff_text = """\
+diff --git a/gone.py b/gone.py
+deleted file mode 100644
+index 1111111..0000000
+--- a/gone.py
++++ /dev/null
+@@ -1,2 +0,0 @@
+-import os
+-print(os.getcwd())
+"""
+    result = parse_diff(diff_text)
+    assert result == {}
+
+
+def test_get_changed_python_files_rejects_flag_like_base():
+    with pytest.raises(GitDiffError, match="Invalid base ref"):
+        get_changed_python_files("--upload-pack=evil")
+
+
+# ─── analyze_file(line_filter=...) unit tests ──────────────────────────────
+
+VIOLATION_SRC = """\
+import time
+
+async def handler():
+    time.sleep(5)
+"""
+
+
+def test_analyze_file_line_filter_keeps_matching_line(tmp_path):
+    src = tmp_path / "bad.py"
+    src.write_text(VIOLATION_SRC)
+
+    violations = analyze_file(src, line_filter=frozenset({4}))
+    assert len(violations) == 1
+    assert violations[0].line == 4
+
+
+def test_analyze_file_line_filter_excludes_non_matching_line(tmp_path):
+    src = tmp_path / "bad.py"
+    src.write_text(VIOLATION_SRC)
+
+    violations = analyze_file(src, line_filter=frozenset({99}))
+    assert violations == []
+
+
+def test_analyze_file_without_line_filter_returns_everything(tmp_path):
+    src = tmp_path / "bad.py"
+    src.write_text(VIOLATION_SRC)
+
+    violations = analyze_file(src)
+    assert len(violations) == 1
+
+
+# ─── `pyvibe review` CLI (subprocess, end-to-end against a real git repo) ──
+
+def _run_cli(args, cwd):
+    return subprocess.run(
+        [sys.executable, "-m", "pyvibe", *args],
+        cwd=cwd,
+        capture_output=True,
+        text=True,
+    )
+
+
+def _git(args, cwd):
+    subprocess.run(["git", *args], cwd=cwd, check=True, capture_output=True)
+
+
+def _init_repo(cwd):
+    _git(["init", "-q"], cwd)
+    _git(["config", "user.email", "test@test.com"], cwd)
+    _git(["config", "user.name", "Test"], cwd)
+
+
+def test_cli_review_reports_only_added_violation(tmp_path):
+    _init_repo(tmp_path)
+    app = tmp_path / "app.py"
+    app.write_text("import time\n\ndef handler():\n    print('ok')\n")
+    _git(["add", "app.py"], tmp_path)
+    _git(["commit", "-q", "-m", "initial"], tmp_path)
+
+    app.write_text(
+        "import time\n\ndef handler():\n    print('ok')\n\n"
+        "async def process_order():\n    time.sleep(2)\n"
+    )
+
+    result = _run_cli(["review", "--base", "HEAD"], cwd=tmp_path)
+
+    assert result.returncode == 1
+    assert "PYVIBE-001" in result.stdout
+    assert "line 7" in result.stdout
+
+
+def test_cli_review_ignores_preexisting_violation_outside_diff(tmp_path):
+    _init_repo(tmp_path)
+    app = tmp_path / "app.py"
+    app.write_text(
+        "import time\n\nasync def handler():\n"
+        "    time.sleep(1)\n    print('existing violation, untouched')\n"
+    )
+    _git(["add", "app.py"], tmp_path)
+    _git(["commit", "-q", "-m", "baseline with pre-existing violation"], tmp_path)
+
+    with app.open("a") as f:
+        f.write("\ndef other():\n    print('unrelated new function')\n")
+
+    full_scan = _run_cli(["app.py", "--json"], cwd=tmp_path)
+    assert len(json.loads(full_scan.stdout)) == 1
+
+    review = _run_cli(["review", "--base", "HEAD"], cwd=tmp_path)
+    assert review.returncode == 0
+    assert "No violations found" in review.stdout
+
+
+def test_cli_review_clean_diff_exits_zero(tmp_path):
+    _init_repo(tmp_path)
+    app = tmp_path / "app.py"
+    app.write_text("def handler():\n    pass\n")
+    _git(["add", "app.py"], tmp_path)
+    _git(["commit", "-q", "-m", "initial"], tmp_path)
+
+    app.write_text("def handler():\n    pass\n\n\ndef other():\n    pass\n")
+
+    result = _run_cli(["review", "--base", "HEAD"], cwd=tmp_path)
+    assert result.returncode == 0
+    assert "No violations found" in result.stdout
+
+
+def test_cli_review_json_output(tmp_path):
+    _init_repo(tmp_path)
+    app = tmp_path / "app.py"
+    app.write_text("def handler():\n    pass\n")
+    _git(["add", "app.py"], tmp_path)
+    _git(["commit", "-q", "-m", "initial"], tmp_path)
+
+    app.write_text(
+        "def handler():\n    pass\n\nasync def process_order():\n    import time\n    time.sleep(2)\n"
+    )
+
+    result = _run_cli(["review", "--base", "HEAD", "--json"], cwd=tmp_path)
+    output = json.loads(result.stdout)
+    assert len(output) == 1
+    assert output[0]["rule"] == "PYVIBE-001"
+    assert output[0]["file"] == "app.py"
+
+
+def test_cli_review_sarif_output(tmp_path):
+    _init_repo(tmp_path)
+    app = tmp_path / "app.py"
+    app.write_text("def handler():\n    pass\n")
+    _git(["add", "app.py"], tmp_path)
+    _git(["commit", "-q", "-m", "initial"], tmp_path)
+
+    app.write_text(
+        "def handler():\n    pass\n\nasync def process_order():\n    import time\n    time.sleep(2)\n"
+    )
+
+    out = tmp_path / "out.sarif"
+    result = _run_cli(
+        ["review", "--base", "HEAD", "--sarif", "--sarif-output", str(out)], cwd=tmp_path
+    )
+    assert result.returncode == 1
+    assert out.exists()
+    sarif = json.loads(out.read_text())
+    assert sarif["runs"][0]["results"][0]["ruleId"] == "PYVIBE-001"
+
+
+def test_cli_review_invalid_base_exits_2(tmp_path):
+    _init_repo(tmp_path)
+    app = tmp_path / "app.py"
+    app.write_text("def handler():\n    pass\n")
+    _git(["add", "app.py"], tmp_path)
+    _git(["commit", "-q", "-m", "initial"], tmp_path)
+
+    result = _run_cli(["review", "--base", "not-a-real-ref"], cwd=tmp_path)
+    assert result.returncode == 2
+    assert "Error" in result.stderr

python_vibe_guard-0.9.0/pyvibe/__init__.py

@@ -1 +0,0 @@
-__version__ = "0.9.0"