sanityops-cli 0.1.3__tar.gz → 0.1.4__tar.gz

{sanityops_cli-0.1.3 → sanityops_cli-0.1.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: sanityops-cli
-Version: 0.1.3
+Version: 0.1.4
 Summary: CLI tool for static defect inspection of AI logical artifacts
 Project-URL: Homepage, https://sanityops.org
 Project-URL: Documentation, https://sanityops.org
@@ -147,6 +147,90 @@ sanityops-cli inspect --skip-defect-check
 sanityops-cli inspect --config path/to/config.yaml
 ```
 
+### 4. Generate Repairs (Optional)
+
+After inspection, generate repaired artifacts from the report:
+
+```bash
+# Use the latest inspection report
+sanityops-cli inspect repair
+
+# Use a specific report
+sanityops-cli inspect repair --report .sanityops/results/inspect-20250115-120000.md
+
+# Specify timeout and token budget for large projects
+sanityops-cli inspect repair --timeout 3600 --token-budget 500000
+```
+
+Repairs are written to `.sanityops/repairs/repair-<timestamp>.md` without modifying source files.
+
+## Configuration
+
+### Config Command
+
+Manage server-side configuration (base URL, API key) using the `config` command:
+
+```bash
+# Read a config value
+sanityops-cli config server.base_url
+
+# Set a global config value
+sanityops-cli config server.base_url https://api.sanityops.org
+
+# Set a project-level config value
+sanityops-cli config server.base_url https://api.sanityops.org --local
+
+# Set API key (prompts for masked input if no value provided)
+sanityops-cli config server.api_key
+
+# List all config values
+sanityops-cli config --list
+
+# Remove a config key
+sanityops-cli config --unset server.base_url
+```
+
+### Configuration Precedence
+
+Values are resolved in this priority order (highest to lowest):
+
+1. **Environment Variable** — e.g., `SANITYOPS_BASE_URL`
+2. **Project-level** — `.sanityops/inspect_config.yaml`
+3. **Global** — `~/.sanityops/config`
+4. **Default** — built-in fallback
+
+This ordering ensures CI/CD pipelines can override any project config by injecting environment variables.
+
+### Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| `SANITYOPS_BASE_URL` | Override `server.base_url` |
+| `SANITYOPS_API_KEY` | Override `server.api_key` |
+| `LLM_PROVIDER` | LLM provider (e.g., `anthropic`, `openai`) |
+| `LLM_API_KEY` | LLM API key for defect checking |
+| `LLM_MODEL_ID` | LLM model ID (e.g., `claude-sonnet-4-20250514`) |
+| `LLM_BASE_URL` | Custom LLM base URL |
+
+## Advanced Configuration
+
+### Agent Settings
+
+You can tune the scanner agent behavior in `.sanityops/inspect_config.yaml`:
+
+```yaml
+agent:
+  max_loops: 60          # Maximum agent execution loops
+  token_budget: 200000   # Token budget for agent execution
+  timeout: 1800          # Timeout in seconds (default: 1800 = 30min)
+```
+
+CLI flags (`--timeout`, `--token-budget`) override these values when explicitly set.
+
+### Logging
+
+All CLI operations are logged to `~/.sanityops/logs/sanityops-cli-<YYYY-MM-DD>.log`. Logs include timestamps, log levels, and redacted API keys for security.
+
 ### Check Levels
 
 | Level | Description | Use Case |

{sanityops_cli-0.1.3 → sanityops_cli-0.1.4}/README.md

@@ -107,6 +107,90 @@ sanityops-cli inspect --skip-defect-check
 sanityops-cli inspect --config path/to/config.yaml
 ```
 
+### 4. Generate Repairs (Optional)
+
+After inspection, generate repaired artifacts from the report:
+
+```bash
+# Use the latest inspection report
+sanityops-cli inspect repair
+
+# Use a specific report
+sanityops-cli inspect repair --report .sanityops/results/inspect-20250115-120000.md
+
+# Specify timeout and token budget for large projects
+sanityops-cli inspect repair --timeout 3600 --token-budget 500000
+```
+
+Repairs are written to `.sanityops/repairs/repair-<timestamp>.md` without modifying source files.
+
+## Configuration
+
+### Config Command
+
+Manage server-side configuration (base URL, API key) using the `config` command:
+
+```bash
+# Read a config value
+sanityops-cli config server.base_url
+
+# Set a global config value
+sanityops-cli config server.base_url https://api.sanityops.org
+
+# Set a project-level config value
+sanityops-cli config server.base_url https://api.sanityops.org --local
+
+# Set API key (prompts for masked input if no value provided)
+sanityops-cli config server.api_key
+
+# List all config values
+sanityops-cli config --list
+
+# Remove a config key
+sanityops-cli config --unset server.base_url
+```
+
+### Configuration Precedence
+
+Values are resolved in this priority order (highest to lowest):
+
+1. **Environment Variable** — e.g., `SANITYOPS_BASE_URL`
+2. **Project-level** — `.sanityops/inspect_config.yaml`
+3. **Global** — `~/.sanityops/config`
+4. **Default** — built-in fallback
+
+This ordering ensures CI/CD pipelines can override any project config by injecting environment variables.
+
+### Environment Variables
+
+| Variable | Description |
+|----------|-------------|
+| `SANITYOPS_BASE_URL` | Override `server.base_url` |
+| `SANITYOPS_API_KEY` | Override `server.api_key` |
+| `LLM_PROVIDER` | LLM provider (e.g., `anthropic`, `openai`) |
+| `LLM_API_KEY` | LLM API key for defect checking |
+| `LLM_MODEL_ID` | LLM model ID (e.g., `claude-sonnet-4-20250514`) |
+| `LLM_BASE_URL` | Custom LLM base URL |
+
+## Advanced Configuration
+
+### Agent Settings
+
+You can tune the scanner agent behavior in `.sanityops/inspect_config.yaml`:
+
+```yaml
+agent:
+  max_loops: 60          # Maximum agent execution loops
+  token_budget: 200000   # Token budget for agent execution
+  timeout: 1800          # Timeout in seconds (default: 1800 = 30min)
+```
+
+CLI flags (`--timeout`, `--token-budget`) override these values when explicitly set.
+
+### Logging
+
+All CLI operations are logged to `~/.sanityops/logs/sanityops-cli-<YYYY-MM-DD>.log`. Logs include timestamps, log levels, and redacted API keys for security.
+
 ### Check Levels
 
 | Level | Description | Use Case |

{sanityops_cli-0.1.3 → sanityops_cli-0.1.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "sanityops-cli"
-version = "0.1.3"
+version = "0.1.4"
 description = "CLI tool for static defect inspection of AI logical artifacts"
 readme = "README.md"
 requires-python = ">=3.11"

{sanityops_cli-0.1.3 → sanityops_cli-0.1.4}/src/sanityops_cli/__init__.py

@@ -13,4 +13,4 @@
 # limitations under the License.
 #
 
-__version__ = "0.1.3"
+__version__ = "0.1.4"

{sanityops_cli-0.1.3 → sanityops_cli-0.1.4}/src/sanityops_cli/commands/config.py

@@ -17,7 +17,7 @@
 
 Config keys use dot notation, e.g. ``server.base_url``. They correspond to
 the sanityops SaaS backend (NOT the LLM model config, which lives under
-``model.*``). Precedence: project-level > global > env var > default.
+``model.*``). Precedence: environment variable > project-level > global > default.
 """
 
 from __future__ import annotations
@@ -110,8 +110,11 @@ def _get_config_usage_panel():
 
     usage_text = f"""\
 Configuration Priority:
-  Project-level (.sanityops/inspect_config.yaml) > Global (~/.sanityops/config)
-  > Environment Variables > Default
+  Environment Variable > Project-level (.sanityops/inspect_config.yaml)
+  > Global (~/.sanityops/config) > Default
+
+  This ordering ensures CI/CD pipelines can override project config by
+  injecting environment variables (e.g., SANITYOPS_BASE_URL).
 
 Available Keys:
   server.base_url  Sanityops SaaS backend URL (default: {DEFAULT_SERVER_BASE_URL})

{sanityops_cli-0.1.3 → sanityops_cli-0.1.4}/src/sanityops_cli/utils/config_resolver.py

@@ -13,7 +13,7 @@
 # limitations under the License.
 #
 
-"""Generic config resolver with precedence chain: project > global > env > default."""
+"""Generic config resolver with precedence chain: env > project > global > default."""
 
 from __future__ import annotations
 
@@ -214,7 +214,11 @@ def _unset_nested_value(data: dict[str, Any], key: str) -> bool:
 class ConfigResolver:
     """Generic config resolver with precedence chain.
 
-    Precedence: project-level > global > environment variable > default.
+    Precedence: environment variable > project-level > global > default.
+
+    This ordering ensures CI/CD pipelines can override project config by
+    injecting environment variables, while local development uses project-level
+    files as the primary source.
 
     Attributes:
         config_key: Dot-separated config key (e.g., "server.base_url").
@@ -238,25 +242,25 @@ class ConfigResolver:
         Returns:
             The resolved value, or None if not found and no default.
         """
-        # 1. Project-level config
+        # 1. Environment variable (highest priority for CI/CD overrides)
+        if self.env_var:
+            env_value = os.environ.get(self.env_var)
+            if env_value is not None:
+                return env_value
+
+        # 2. Project-level config
         project_config = _read_yaml_file(get_project_config_path())
         value = _get_nested_value(project_config, self.config_key)
         if value is not None:
             return str(value) if not isinstance(value, str) else value
 
-        # 2. Global config
+        # 3. Global config
         global_config = _read_yaml_file(get_global_config_path())
         value = _get_nested_value(global_config, self.config_key)
         if value is not None:
             return str(value) if not isinstance(value, str) else value
 
-        # 3. Environment variable
-        if self.env_var:
-            env_value = os.environ.get(self.env_var)
-            if env_value is not None:
-                return env_value
-
-        # 4. Default
+        # 4. Default (lowest priority)
         return self.default
 
     def resolve_all_sources(self) -> dict[str, str | None]:

{sanityops_cli-0.1.3 → sanityops_cli-0.1.4}/tests/utils/test_config_resolver.py

@@ -232,7 +232,7 @@ class TestNestedKeyOperations:
 
 
 class TestConfigResolverPrecedence:
-    """Test precedence chain: project > global > env > default."""
+    """Test precedence chain: env > project > global > default."""
 
     def test_resolve_returns_default_when_nothing_set(self, monkeypatch, tmp_path: Path):
         """Should return default when no config or env set."""
@@ -258,8 +258,8 @@ class TestConfigResolverPrecedence:
         result = resolver.resolve()
         assert result == "https://env.example.com"
 
-    def test_resolve_global_overrides_env(self, monkeypatch, tmp_path: Path):
-        """Global config should override env and default."""
+    def test_resolve_env_overrides_global(self, monkeypatch, tmp_path: Path):
+        """Environment variable should override global config and default."""
         from sanityops_cli.utils.config_resolver import ConfigResolver
 
         monkeypatch.chdir(tmp_path)
@@ -275,16 +275,15 @@ class TestConfigResolverPrecedence:
 
         resolver = ConfigResolver("server.base_url", env_var="SANITYOPS_BASE_URL", default="https://default.com")
         result = resolver.resolve()
-        assert result == "https://global.example.com"
+        assert result == "https://env.example.com"
 
     def test_resolve_project_overrides_global(self, monkeypatch, tmp_path: Path):
-        """Project config should override global, env, default."""
+        """Project config should override global and default."""
         from sanityops_cli.utils.config_resolver import ConfigResolver
 
         monkeypatch.chdir(tmp_path)
         home_dir = tmp_path / "home"
         monkeypatch.setattr(Path, "home", lambda: home_dir)
-        monkeypatch.setenv("SANITYOPS_BASE_URL", "https://env.example.com")
 
         # Create global config
         global_config_dir = home_dir / ".sanityops"
@@ -302,8 +301,27 @@ class TestConfigResolverPrecedence:
         result = resolver.resolve()
         assert result == "https://project.example.com"
 
+    def test_resolve_env_overrides_project(self, monkeypatch, tmp_path: Path):
+        """Environment variable should override project config."""
+        from sanityops_cli.utils.config_resolver import ConfigResolver
+
+        monkeypatch.chdir(tmp_path)
+        home_dir = tmp_path / "home"
+        monkeypatch.setattr(Path, "home", lambda: home_dir)
+        monkeypatch.setenv("SANITYOPS_BASE_URL", "https://env.example.com")
+
+        # Create project config
+        project_config_dir = tmp_path / ".sanityops"
+        project_config_dir.mkdir(parents=True)
+        project_config = project_config_dir / "inspect_config.yaml"
+        project_config.write_text("server:\n  base_url: https://project.example.com\n")
+
+        resolver = ConfigResolver("server.base_url", env_var="SANITYOPS_BASE_URL", default="https://default.com")
+        result = resolver.resolve()
+        assert result == "https://env.example.com"
+
     def test_resolve_all_sources_returns_all_values(self, monkeypatch, tmp_path: Path):
-        """Should return values from project, global, env, and default sources."""
+        """Should return values from env, project, global, and default sources."""
         from sanityops_cli.utils.config_resolver import ConfigResolver
 
         monkeypatch.chdir(tmp_path)