argus-cloud-optimizer 0.2.0__tar.gz → 0.4.0__tar.gz

{argus_cloud_optimizer-0.2.0/argus_cloud_optimizer.egg-info → argus_cloud_optimizer-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: argus-cloud-optimizer
-Version: 0.2.0
+Version: 0.4.0
 Summary: AI-powered multi-cloud cost optimization agent
 Author-email: Vamshi Siddarth Gaddam <vamshisiddarth02@gmail.com>
 License-Expression: MIT
@@ -42,6 +42,8 @@ Requires-Dist: openai>=1.55.0
 Provides-Extra: export
 Requires-Dist: weasyprint>=62.0; extra == "export"
 Requires-Dist: python-pptx>=1.0.0; extra == "export"
+Provides-Extra: chat
+Requires-Dist: rich>=13.0.0; extra == "chat"
 Provides-Extra: dev
 Requires-Dist: pytest>=8.3.3; extra == "dev"
 Requires-Dist: pytest-cov>=5.0.0; extra == "dev"
@@ -50,7 +52,7 @@ Requires-Dist: pytest-timeout>=2.3.1; extra == "dev"
 Requires-Dist: moto[s3,sts]>=5.0.16; extra == "dev"
 Requires-Dist: freezegun>=1.5.1; extra == "dev"
 Requires-Dist: black>=24.10.0; extra == "dev"
-Requires-Dist: ruff>=0.7.1; extra == "dev"
+Requires-Dist: ruff<0.8.0,>=0.7.1; extra == "dev"
 Requires-Dist: mypy>=1.13.0; extra == "dev"
 Requires-Dist: types-PyYAML>=6.0.12; extra == "dev"
 Requires-Dist: types-python-dateutil>=2.9.0; extra == "dev"
@@ -68,14 +70,33 @@ Dynamic: license-file
 Argus finds idle and wasted cloud resources — stopped EC2 instances, unattached EBS volumes, orphaned Elastic IPs, underutilized RDS databases — and delivers a prioritized, AI-reasoned report to Slack every week.
 
 [![CI](https://github.com/vamshisiddarth/argus/actions/workflows/ci.yml/badge.svg)](https://github.com/vamshisiddarth/argus/actions/workflows/ci.yml)
-[![Python 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/downloads/)
+[![Publish](https://github.com/vamshisiddarth/argus/actions/workflows/publish.yml/badge.svg)](https://github.com/vamshisiddarth/argus/actions/workflows/publish.yml)
 [![PyPI](https://img.shields.io/pypi/v/argus-cloud-optimizer.svg)](https://pypi.org/project/argus-cloud-optimizer/)
+[![PyPI Downloads](https://img.shields.io/pypi/dm/argus-cloud-optimizer.svg)](https://pypi.org/project/argus-cloud-optimizer/)
+[![Python 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/downloads/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 [![Docs](https://img.shields.io/badge/docs-vamshisiddarth.github.io%2Fargus-blue)](https://vamshisiddarth.github.io/argus/)
 
-<p align="center">
-  <img src="docs/assets/images/slack-demo.png" alt="Argus Slack report" width="600">
-</p>
+```text
+Argus — AWS Waste Report (2026-06-24)
+
+💸 $1,432.85/month estimated waste
+📊 6 idle resources across 1 account
+
+Six resources were identified as idle or over-provisioned. The RDS instance
+accounts for 87% of waste and should be right-sized immediately.
+
+─────────────────────────────────────
+Top findings
+🔴 db-analytics-01  · RDS         · $1,240.00/mo
+🔴 cache-prod-001   · ElastiCache  ·   $142.00/mo
+🔴 i-0abc123def     · EC2          ·    $28.40/mo
+🟡 nat-0def456      · NAT Gateway  ·    $10.80/mo
+🟡 vol-orphan       · EBS          ·     $8.00/mo
+⚪ +1 more finding in the full report
+
+[ 📄 Full report (HTML) ]  [ vamshisiddarth/argus ]
+```
 
 ---
 
@@ -88,28 +109,9 @@ Every week (or on demand), Argus:
 3. **Reasons** about idleness using Claude (via AWS Bedrock, Anthropic API, or Vertex AI) — no hardcoded thresholds
 4. **Reports** a compact digest (Slack, Microsoft Teams, or generic webhook) with top findings and a link to a full self-contained HTML report
 
-Example Slack output:
-
-```
-Argus — AWS Waste Report (2026-06-17)
-
-💸 $42.65/month estimated waste   📊 4 idle resources across 1 account
-
-Two stopped EC2 instances and a forgotten NAT Gateway account for 72% of
-total waste. One EBS volume has had no I/O in over 30 days.
-
-Top findings
-🔴  i-0abc123def  ·  EC2 t3.large    ·  $28.40/mo
-🔴  nat-0def456   ·  NAT Gateway     ·  $10.80/mo
-🟡  vol-orphan    ·  EBS gp3 100GiB  ·  $8.00/mo
-🟢  eipalloc-xyz  ·  Elastic IP      ·  $3.65/mo
-
-[ 📄 Full report (HTML) ]   [ vamshisiddarth/argus ]
-```
-
 The **Full report** button links to a self-contained HTML file (S3 / GCS / Azure Blob) with a filterable/sortable table and expandable AI reasoning per finding. Works offline, no login required.
 
-> **See a realistic example:** [`examples/sample-report-aws.json`](examples/sample-report-aws.json) — 5 findings from a real-looking AWS scan with AI-written reasoning, metrics, and cost data.
+> **See realistic examples:** [`sample-report-aws.json`](examples/sample-report-aws.json) · [`sample-report-gcp.json`](examples/sample-report-gcp.json) · [`sample-report-azure.json`](examples/sample-report-azure.json) — 5 findings each with AI-written reasoning, metrics, and cost data.
 
 ---
 
@@ -164,22 +166,48 @@ docker run --rm \
 
 ```bash
 pip install argus-cloud-optimizer
+argus --version   # argus 0.3.0
+argus --help
 ```
 
-One package — all three clouds included. No extras needed.
+One package — all three clouds included. No extras needed. `--cloud` auto-detects from your environment (GCP_PROJECT_ID / AZURE_SUBSCRIPTION_IDS / AWS credentials), or specify explicitly.
 
-> **AWS-specific setup:** Enable [Resource Explorer](https://docs.aws.amazon.com/resource-explorer/latest/userguide/) with an **aggregator index** in `us-east-1` (or set `RESOURCE_EXPLORER_REGION` to your aggregator region). Without this, Argus cannot discover resources.
+> **Verified 2026-06-21:** `pip install argus-cloud-optimizer && argus --version` works on a clean Python 3.11/3.12/3.13 venv with no project files.
 
-Set minimum env vars:
+**AWS:**
 
 ```bash
 export AI_PROVIDER=anthropic
 export ANTHROPIC_API_KEY=sk-ant-...
-export DRY_RUN=true                        # remove to post to Slack
+export DRY_RUN=true
+argus scan --cloud aws --dry-run
+# or just: argus scan  (auto-detects from AWS_PROFILE / AWS_ACCESS_KEY_ID)
 ```
 
+> Enable [Resource Explorer](https://docs.aws.amazon.com/resource-explorer/latest/userguide/) with an **aggregator index** in `us-east-1` (or set `RESOURCE_EXPLORER_REGION`).
+
+**GCP:**
+
 ```bash
-argus --cloud aws --run-now --dry-run
+export GCP_PROJECT_ID=my-project-123
+export AI_PROVIDER=anthropic
+export ANTHROPIC_API_KEY=sk-ant-...
+export DRY_RUN=true
+argus scan --cloud gcp --dry-run
+# or just: argus scan  (auto-detects from GCP_PROJECT_ID)
+```
+
+> Requires BigQuery billing export enabled for cost data.
+
+**Azure:**
+
+```bash
+export AZURE_SUBSCRIPTION_IDS=sub-id-1,sub-id-2
+export AI_PROVIDER=anthropic
+export ANTHROPIC_API_KEY=sk-ant-...
+export DRY_RUN=true
+argus scan --cloud azure --dry-run
+# or just: argus scan  (auto-detects from AZURE_SUBSCRIPTION_IDS)
 ```
 
 ### Option C — Clone and develop
@@ -192,18 +220,80 @@ cp .env.example .env                       # edit with your values
 argus --cloud aws --run-now
 ```
 
+### Interactive Chat Mode
+
+Ask questions about your cloud infrastructure in natural language:
+
+```bash
+pip install argus-cloud-optimizer[chat]   # optional: adds rich formatting
+argus chat --cloud aws --ai-provider anthropic   # explicit cloud
+argus chat                                       # auto-detects cloud
+```
+
+```
+Argus v0.3.0 — Interactive Cloud Cost Assistant
+Cloud: AWS  |  Accounts: prod (123456789012)  |  Budget: $1.00/session
+Tip: end a line with \ to continue on the next line.
+Type your question, or /help for commands.
+
+argus> What's costing the most and not doing anything?
+
+  → Scanning resources
+  → Fetching cost data
+
+Argus: Three idle resources account for $73.30/mo in waste:
+  • nat-0abc123 (NAT Gateway, us-east-1) — $32.50/mo — 847 bytes in 90 days, delete it
+  • db-prod-replica (RDS, us-west-2) — $28.80/mo — zero connections, read replica with no readers
+  • vol-0def456 (EBS, us-east-1) — $12.00/mo — unattached since 2026-03-15
+
+[this turn: 2,847 in / 412 out, $0.0147 | session: 2,847 in / 412 out, $0.0147 / $1.00 budget]
+
+argus> Is the RDS replica definitely safe to delete?
+
+  → Fetching metrics: db-prod-replica
+  → Checking last activity: db-prod-replica
+
+Argus: Yes. db-prod-replica is confirmed idle — CPU avg 0.1%, DatabaseConnections avg 0,
+last activity 2026-03-21 (93 days ago). The primary db-prod is fully active; this replica
+has no readers. Safe to snapshot and delete. Saves $28.80/mo.
+
+[this turn: 1,923 in / 187 out, $0.0089 | session: 4,770 in / 599 out, $0.0236 / $1.00 budget]
+
+argus> What would our total monthly bill look like after cleaning all three up?
+
+Argus: Current waste: $73.30/mo across the three resources. Deleting all three saves
+$879.60/year. Your remaining infrastructure cost is unchanged — none of these have
+active dependencies based on metrics and activity logs.
+
+[this turn: 1,102 in / 98 out, $0.0047 | session: 5,872 in / 697 out, $0.0283 / $1.00 budget]
+
+argus> /summary
+Summarizing conversation...
+Done — earlier turns condensed into context.
+
+argus> Remind me which one had the highest monthly cost?
+
+Argus: nat-0abc123 (NAT Gateway, us-east-1) at $32.50/mo — negligible traffic over 90 days.
+```
+
+Available REPL commands: `/help`, `/scan`, `/cost`, `/clear`, `/summary`, `/quit`
+
 ### CLI Options
 
 ```
-argus --cloud aws|gcp|azure --run-now [options]
+argus scan [--cloud aws|gcp|azure] [options]    # full batch scan
+argus chat [--cloud aws|gcp|azure] [options]    # interactive Q&A
+argus --run-now --cloud aws [options]           # backward compat
 
+  --cloud CLOUD              Cloud provider (auto-detected from env vars if omitted)
   -V, --version              Show version and exit
   --dry-run                  Print notification payload instead of posting
   --ignore-regions REGIONS   Comma-separated regions to skip (e.g. ap-east-1,me-south-1)
   --ai-provider PROVIDER     anthropic | bedrock | vertexai | azure_openai (default: anthropic)
-  --accounts PATH            Path to accounts.yaml for multi-account mode (AWS only)
+  --accounts PATH            Path to accounts.yaml for multi-account/project/subscription mode
   --max-resources N          Maximum resources to analyze per scan (default: 200)
   --lookback-days DAYS       Metrics lookback window in days (default: 90, use 14 for faster local dev)
+  --llm-budget USD           Cost budget per scan/session (default: $2.00 scan, $1.00 chat)
 ```
 
 ---
@@ -299,9 +389,11 @@ Set `AI_PROVIDER=anthropic|bedrock|vertexai|azure_openai` in `.env` or the deplo
 
 ---
 
-## Multi-account setup
+## Multi-account / multi-project setup
+
+Create `accounts.yaml` with the key matching your cloud:
 
-Create `accounts.yaml`:
+**AWS** (hub/spoke with STS AssumeRole):
 
 ```yaml
 mode: multi
@@ -315,10 +407,40 @@ accounts:
     role_arn: arn:aws:iam::444455556666:role/ArgusSpokeRole
 ```
 
+**GCP** (one scan per project, ADC handles auth):
+
+```yaml
+mode: multi
+
+projects:
+  - id: my-project-dev
+    name: dev
+  - id: my-project-prod
+    name: production
+```
+
+Or set `GCP_PROJECT_IDS=my-project-dev,my-project-prod` instead.
+
+**Azure** (cross-subscription via Resource Graph):
+
+```yaml
+mode: multi
+
+subscriptions:
+  - id: "aaaabbbb-cccc-dddd-eeee-ffffffffffff"
+    name: dev
+  - id: "11112222-3333-4444-5555-666677778888"
+    name: production
+```
+
+Or set `AZURE_SUBSCRIPTION_IDS=sub-1,sub-2` instead.
+
 Then run:
 
 ```bash
-argus --cloud aws --run-now --accounts accounts.yaml
+argus scan --cloud aws --accounts accounts.yaml
+argus scan --cloud gcp --accounts accounts.yaml
+argus scan --cloud azure --accounts accounts.yaml
 ```
 
 ---
@@ -347,13 +469,64 @@ No write permissions are ever requested.
 
 ---
 
+## IAM permissions (GCP)
+
+Argus needs **read-only** access. The service account (`argus-sa@PROJECT.iam.gserviceaccount.com`) requires:
+
+```
+cloudasset.assets.listAssets        # list all resources (Asset Inventory API)
+monitoring.timeSeries.list          # read CPU / memory / request metrics
+monitoring.metricDescriptors.list   # discover available metric types
+logging.logEntries.list             # read Cloud Audit Logs for last-activity timestamps
+bigquery.jobs.create                # only if BILLING_BQ_TABLE is set
+bigquery.tables.getData             # only if BILLING_BQ_TABLE is set
+aiplatform.endpoints.predict        # only if AI_PROVIDER=vertexai (default)
+storage.objects.create              # only if REPORT_GCS_BUCKET is set
+storage.objects.get                 # only if REPORT_GCS_BUCKET is set
+iam.serviceAccounts.signBlob        # only if REPORT_GCS_BUCKET is set
+```
+
+No write permissions are ever requested.
+
+The deploy script binds `roles/cloudasset.viewer`, `roles/monitoring.viewer`, and `roles/logging.viewer` automatically. For a tighter permission surface, create a custom role using only the exact permissions above — see [GCP deployment docs](docs/deployment/gcp.md#iam-permissions) for the one-command setup.
+
+> **BigQuery note:** without `BILLING_BQ_TABLE`, cost fields show `$0.00` — resource
+> discovery and idleness detection still work via metrics and audit logs.
+
+---
+
+## IAM permissions (Azure)
+
+Argus needs **read-only** access. The Managed Identity requires:
+
+```
+Microsoft.ResourceGraph/resources/action                              # list all resources (Resource Graph KQL)
+Microsoft.Insights/metrics/read                                       # read CPU / memory / request metrics
+Microsoft.Insights/metricDefinitions/read                             # discover available metric types
+Microsoft.Insights/eventtypes/management/values/read                  # Activity Log fallback for last-activity
+Microsoft.CostManagement/query/action                                 # run cost queries
+Microsoft.CostManagement/*/read                                       # read cost data
+Microsoft.OperationalInsights/workspaces/query/read                   # only if logAnalyticsWorkspaceId is set
+Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write # only if reportStorageAccount is set
+Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read  # only if reportStorageAccount is set
+```
+
+No write permissions are ever requested.
+
+The built-in `Reader` + `Cost Management Reader` roles cover all required actions per subscription. For a tighter permission surface, create a custom role using only the exact actions above — see [Azure deployment docs](docs/deployment/azure.md#iam-permissions) for the one-command setup.
+
+> **Cost Management note:** `Reader` covers `*/read` but cost queries use a `query/action`
+> verb. `Cost Management Reader` must be added separately — without it, cost fields show `$0.00`.
+
+---
+
 ## Limitations & known issues
 
 Before you invest time deploying Argus, know what it **can't** do yet:
 
 | Area | Status | Details |
 |------|--------|---------|
-| **Resource discovery** | AWS: strong, GCP/Azure: adequate | AWS covers 43 resource types via Resource Explorer. GCP covers 22 asset types; Azure covers 25 via Resource Graph. Some niche resource types (e.g. AWS Glue, SageMaker endpoints) are not yet mapped. |
+| **Resource discovery** | All three strong | AWS covers 43 resource types via Resource Explorer. GCP covers 31 asset types via Asset Inventory. Azure discovers all types via Resource Graph with 40 having curated metric mappings. All three fall back to dynamic metric auto-discovery for unmapped types. AWS has the deepest per-type metric coverage; GCP and Azure are catching up. |
 | **Cost accuracy** | Best-effort | AWS Cost Explorer charges $0.01/API call — Argus batches aggressively (max 2 calls/scan). GCP requires BigQuery billing export enabled. Azure cost data depends on subscription-level access. Resource-level cost allocation must be enabled in AWS for per-resource costs; without it, costs show $0.00. |
 | **AI non-determinism** | By design | The AI decides what's idle — different runs may produce slightly different findings or reasoning. Set `AI_TEMPERATURE=0.0` (default) for most consistent results. |
 | **LLM cost** | Configurable | A full scan of ~200 resources costs ~$0.05–$0.50 in LLM API fees depending on provider. Use `--llm-budget` to set a hard cap (default: $2.00/scan). Large estates (1000+ resources) will hit the budget limit — increase it or use `--max-resources`. |
@@ -362,16 +535,20 @@ Before you invest time deploying Argus, know what it **can't** do yet:
 | **Multi-cloud in one scan** | Not yet | Each `argus` invocation scans one cloud. Use the merge report feature (`core/reports/multi_cloud.py`) to combine results after separate runs. |
 | **Notifications** | Slack + Teams + webhook | No email. Slack/Teams delivery requires a webhook URL. |
 
+### Multi-cloud maturity
+
+AWS has the richest experience — it was developed first, has the most resource types with curated metric mappings, and has a mature multi-account hub/spoke deployment model. GCP and Azure are fully functional but the AWS adapter has been battle-tested more extensively. Cost data depth also varies: AWS Cost Explorer with resource-level allocation is the most reliable, GCP requires BigQuery billing export to be configured, and Azure Cost Management depends on subscription-level access. All three clouds have dynamic metric fallback for unmapped resource types, so even uncurated types get some signal.
+
 ### Multi-cloud parity
 
 | Capability | AWS | GCP | Azure |
 |-----------|-----|-----|-------|
-| Resource discovery | 43 types (Resource Explorer) | 22 types (Asset Inventory) | 25 types (Resource Graph) |
-| Metrics | CloudWatch (43 types + fallback) | Cloud Monitoring (15 types + fallback) | Azure Monitor (25 types + fallback) |
+| Resource discovery | 43 types (Resource Explorer) | 31 types (Asset Inventory) | All types (Resource Graph) |
+| Metrics | CloudWatch (43 types + fallback) | Cloud Monitoring (31 types + fallback) | Azure Monitor (40 types + fallback) |
 | Cost data | Cost Explorer (batched) | BigQuery billing export | Cost Management API |
 | Last activity | CloudTrail (90-day lookback) | Cloud Audit Logs | Activity Log / Log Analytics |
 | Deployment | Lambda (SAM) | Cloud Run Job | Azure Function (Bicep) |
-| Multi-account | Hub/spoke with STS | Single project only | Cross-subscription via Resource Graph |
+| Multi-account | Hub/spoke with STS | Multi-project (per-project scan) | Cross-subscription via Resource Graph |
 | Secret management | Secrets Manager | Secret Manager | Key Vault |
 
 ---
@@ -379,9 +556,9 @@ Before you invest time deploying Argus, know what it **can't** do yet:
 ## Running tests
 
 ```bash
-make test                  # unit tests only (431 tests, no cloud creds needed)
+make test                  # unit tests only (528 tests, no cloud creds needed)
 make test-integration      # integration tests (32 tests — adapter contracts, report schema)
-make test-all              # everything (463 tests)
+make test-all              # everything (560 tests)
 ```
 
 Tests use `unittest.mock` throughout — no real AWS/GCP/Azure calls are made.
@@ -417,7 +594,7 @@ argus/
 │   ├── aws/               # CloudFormation templates
 │   ├── gcp/               # Cloud Run + Scheduler deploy script
 │   └── azure/             # Bicep templates
-└── tests/                 # 463 tests, all pass offline
+└── tests/                 # 560 tests, all pass offline
 ```
 
 ---