artemis_framework 0.3.2__tar.gz → 0.4.0__tar.gz

{artemis_framework-0.3.2 → artemis_framework-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: artemis_framework
-Version: 0.3.2
+Version: 0.4.0
 Summary: A package for doing great things!
 License: MIT
 License-File: LICENSE

{artemis_framework-0.3.2 → artemis_framework-0.4.0}/artemis_framework/asphodel/tui/app.py

@@ -239,8 +239,8 @@ _WELCOME_TEXT = """\
 
 [b]K[/b]    →   Key Management    [i](generate, import, export, delete keys)[/i]
 [b]E[/b]    →   Encrypt / Decrypt [i](encrypt, decrypt, sign, verify)[/i]
-[b]S[/b]    →   Settings          [i](keyring path, GPG binary, key defaults)[/i]
-[b]Esc[/b]    →   Quit
+[b]C[/b]    →   Configuration     [i](keyring path, GPG binary, key defaults)[/i]
+[b]Esc[/b]  →   Quit
 
 The keyring path is shown in the header subtitle.
 [i]Use [b]`--gnupghome`[/b] on the command line to point at a different keyring.[/i]

artemis_framework-0.4.0/artemis_framework/asphodel/tui/screens/app_config.py

@@ -0,0 +1,434 @@
+from __future__ import annotations
+
+from pathlib import Path
+
+from textual.app import ComposeResult
+from textual.binding import Binding
+from textual.containers import Container, Horizontal, ScrollableContainer, Vertical
+from textual.message import Message
+from textual.screen import Screen
+from textual.widgets import (
+    Button,
+    Footer,
+    Header,
+    Input,
+    Label,
+    Select,
+    Static,
+    Switch,
+)
+
+from artemis_framework.asphodel.tui.settings import AppSettings, CONFIG_FILE, save_settings
+
+
+_ALGO_OPTIONS: list[tuple[str, str]] = [
+    ("RSA 4096", "rsa"),
+    ("ECC (Ed25519 / Cv25519)", "ecc"),
+]
+
+_EXPIRE_OPTIONS: list[tuple[str, str]] = [
+    ("Never", "0"),
+    ("1 year", "1y"),
+    ("2 years", "2y"),
+    ("5 years", "5y"),
+]
+
+_CACHE_WARNING = (
+    "⚠  SECURITY RISK  ⚠\n"
+    "Passphrases will be held in application memory for the entire "
+    "session and reused automatically. They are never written to disk, "
+    "but any process that can read this application's memory - such as "
+    "a debugger, crash dump, or another process running as the same "
+    "user - could potentially recover them.\n"
+    "Enable only on a trusted, single-user system."
+)
+
+
+class AppConfigScreen(Screen):
+    TITLE = "App Configuration"
+
+    DEFAULT_CSS = """
+    #cfg-scroll {
+        height: 1fr;
+        width: 100%;
+        padding: 1 3;
+    }
+    .cfg-section-label {
+        color: $primary;
+        text-style: bold;
+        margin-top: 1;
+        margin-bottom: 0;
+        padding-left: 0;
+    }
+    .cfg-divider {
+        color: $primary-darken-2;
+        margin-bottom: 1;
+        margin-top: 0;
+    }
+    .cfg-row {
+        height: auto;
+        width: 100%;
+        margin-bottom: 1;
+        align: left top;
+    }
+    .cfg-label {
+        width: 22;
+        color: $text-muted;
+        padding-top: 1;
+    }
+    .cfg-input-col {
+        width: 1fr;
+        height: auto;
+    }
+    .cfg-row Input {
+        width: 100%;
+        border: double $primary-darken-1;
+    }
+    .cfg-row Input:focus {
+        border: double $primary;
+    }
+    .cfg-row Select {
+        width: 1fr;
+        border: double $primary-darken-1;
+    }
+    .cfg-row Select:focus {
+        border: double $primary;
+    }
+    .cfg-status {
+        color: $text-muted;
+        text-style: italic;
+        height: auto;
+        padding-left: 0;
+        margin-top: 0;
+    }
+    .cfg-status-ok {
+        color: $success;
+    }
+    .cfg-status-err {
+        color: $error;
+    }
+    .cfg-about-value {
+        color: $text-muted;
+        padding-top: 0;
+        width: 1fr;
+    }
+    .cfg-spacer {
+        height: 1;
+    }
+    #cfg-buttons {
+        height: auto;
+        width: 100%;
+        align: left middle;
+        margin-bottom: 1;
+    }
+    #cfg-buttons Button {
+        margin-right: 1;
+        min-width: 12;
+    }
+    .cfg-switch-row {
+        align: left middle;
+    }
+    .cfg-switch-row .cfg-label {
+        padding-top: 0;
+    }
+    .cfg-cache-warning {
+        margin-top: 1;
+        margin-bottom: 1;
+        padding: 1 2;
+        border: double $warning;
+        color: $warning;
+        text-style: bold;
+        background: $surface;
+        width: 100%;
+        height: auto;
+    }
+    """
+
+    BINDINGS = [
+        Binding("s", "save", "Save", show=True, priority=True),
+        Binding("q,d", "discard", "Discard", show=True, priority=True),
+    ]
+
+    class Saved(Message):
+        def __init__(self, settings: AppSettings) -> None:
+            super().__init__()
+            self.settings = settings
+
+    def __init__(self, current_settings: AppSettings, **kwargs) -> None:
+        super().__init__(**kwargs)
+        self._cfg = current_settings
+
+    def compose(self) -> ComposeResult:
+        yield Header()
+
+        with ScrollableContainer(id="cfg-scroll"):
+
+            yield Static("GPG ENVIRONMENT", classes="cfg-section-label")
+            yield Static("-" * 58, classes="cfg-divider")
+
+            with Horizontal(classes="cfg-row"):
+                yield Label("GNUPGHOME path", classes="cfg-label")
+                with Vertical(classes="cfg-input-col"):
+                    yield Input(
+                        value=self._cfg.gnupghome,
+                        placeholder="(leave blank to use the built-in test keyring)",
+                        id="cfg-gnupghome"
+                    )
+                    yield Static("", id="cfg-gnupghome-status", classes="cfg-status")
+
+            yield Static("GPG BINARY", classes="cfg-section-label")
+            yield Static("-" * 58, classes="cfg-divider")
+
+            with Horizontal(classes="cfg-row"):
+                yield Label("Binary name / path", classes="cfg-label")
+                with Vertical(classes="cfg-input-col"):
+                    yield Input(
+                        value=self._cfg.gpg_binary,
+                        placeholder="gpg",
+                        id="cfg-binary"
+                    )
+                    yield Static("", id="cfg-binary-status", classes="cfg-status")
+
+            yield Static("KEY GENERATION DEFAULTS", classes="cfg-section-label")
+            yield Static("-" * 58, classes="cfg-divider")
+
+            with Horizontal(classes="cfg-row"):
+                yield Label("Default algorithm", classes="cfg-label")
+                yield Select(
+                    _ALGO_OPTIONS,
+                    value=self._cfg.algorithm,
+                    id="cfg-algo",
+                    allow_blank=False
+                )
+
+            with Horizontal(classes="cfg-row"):
+                yield Label("Default expiry", classes="cfg-label")
+                yield Select(
+                    _EXPIRE_OPTIONS,
+                    value=self._cfg.expire,
+                    id="cfg-expire",
+                    allow_blank=False
+                )
+
+            yield Static("KEYSERVER", classes="cfg-section-label")
+            yield Static("-" * 58, classes="cfg-divider")
+
+            with Horizontal(classes="cfg-row"):
+                yield Label("Keyserver URL", classes="cfg-label")
+                with Vertical(classes="cfg-input-col"):
+                    yield Input(
+                        value=self._cfg.keyserver_url,
+                        placeholder="https://keys.openpgp.org",
+                        id="cfg-keyserver",
+
+                    )
+                    yield Static("", id="cfg-keyserver-status", classes="cfg-status")
+
+            yield Static("SECURITY", classes="cfg-section-label")
+            yield Static("-" * 58, classes="cfg-divider")
+
+            with Horizontal(classes="cfg-row cfg-switch-row"):
+                yield Label("Passphrase caching", classes="cfg-label")
+                with Vertical(classes="cfg-input-col"):
+                    yield Switch(
+                        value=self._cfg.passphrase_cache_enabled,
+                        id="cfg-cache-switch"
+                    )
+                    yield Static(
+                        "Disabled by default. Read the warning below before enabling.",
+                        id="cfg-cache-switch-hint",
+                        classes="cfg-status"
+                    )
+
+            yield Static(
+                _CACHE_WARNING,
+                id="cfg-cache-warning",
+                classes="cfg-cache-warning"
+            )
+
+            yield Static("ABOUT", classes="cfg-section-label")
+            yield Static("-" * 58, classes="cfg-divider")
+
+            with Horizontal(classes="cfg-row"):
+                yield Label("Config file", classes="cfg-label")
+                yield Static(str(CONFIG_FILE), classes="cfg-about-value")
+
+            yield Static("", classes="cfg-spacer")
+            with Horizontal(id="cfg-buttons"):
+                yield Button("Save", variant="primary", id="cfg-btn-save")
+                yield Button("Discard", variant="default", id="cfg-btn-discard")
+
+        yield Footer()
+
+    def on_mount(self) -> None:
+        self.query_one("#cfg-gnupghome", Input).focus()
+        self._validate_gnupghome()
+        self._validate_binary()
+        self._validate_keyserver()
+        self._update_cache_warning()
+
+    def on_input_changed(self, event: Input.Changed) -> None:
+        if event.input.id == "cfg-gnupghome":
+            self._validate_gnupghome()
+        elif event.input.id == "cfg-binary":
+            self._validate_binary()
+        elif event.input.id == "cfg-keyserver":
+            self._validate_keyserver()
+
+    def on_switch_changed(self, event: Switch.Changed) -> None:
+        if event.switch.id == "cfg-cache-switch":
+            self._update_cache_warning()
+
+    def _update_cache_warning(self) -> None:
+        enabled = self.query_one("#cfg-cache-switch", Switch).value
+        warning = self.query_one("#cfg-cache-warning", Static)
+        hint = self.query_one("#cfg-cache-switch-hint", Static)
+
+        warning.display = enabled
+
+        if enabled:
+            hint.update("⚠  Enabled - passphrases cached in memory this session.")
+            hint.remove_class("cfg-status-ok")
+            hint.add_class("cfg-status-warn")
+
+        else:
+            hint.update("Disabled by default. Read the warning below before enabling.")
+            hint.remove_class("cfg-status-warn")
+            hint.add_class("cfg-status-ok")
+
+    def _validate_gnupghome(self) -> None:
+        raw = self.query_one("#cfg-gnupghome", Input).value.strip()
+        status = self.query_one("#cfg-gnupghome-status", Static)
+
+        if not raw:
+            self._ok(status, "  » using built-in test keyring (asphodel-pgp library default)")
+            return
+
+        p = Path(raw).expanduser()
+        if p.exists():
+            if p.is_dir():
+                self._ok(status, f"  ✔ exists: {p.resolve()}")
+            else:
+                self._err(status, f"  ✗ path exists but is not a directory")
+        else:
+            self._ok(status, f"  » will be created: {p.resolve()}")
+
+    def _validate_binary(self) -> None:
+        import shutil
+        raw = self.query_one("#cfg-binary", Input).value.strip() or "gpg"
+        status = self.query_one("#cfg-binary-status", Static)
+
+        found = shutil.which(raw)
+        if found:
+            version = self._read_gpg_version(found)
+            self._ok(status, f"  ✔ {found}" + (f"  ({version})" if version else ""))
+            return
+
+        p = Path(raw)
+        if p.exists():
+            import os
+            if os.access(p, os.X_OK):
+                self._ok(status, f"  ✔ {p.resolve()}")
+                return
+
+        self._err(status, "  ✗ '{raw}' not found on PATH")
+
+    def _validate_keyserver(self) -> None:
+        raw = self.query_one("#cfg-keyserver", Input).value.strip()
+        status = self.query_one("#cfg-keyserver-status", Static)
+
+        if not raw:
+            self._ok(status, f"  » using default: https://keys.openpgp.org")
+            return
+
+        if raw.startswith("https://") or raw.startswith("http://"):
+            self._ok(status, f"  ✔ {raw}")
+        else:
+            self._err(status, "  ✗ URL must start with https:// -or- http://")
+
+    @staticmethod
+    def _ok(widget: Static, text: str) -> None:
+        widget.update(text)
+        widget.remove_class("cfg-status-err")
+        widget.remove_class("cfg-status-warn")
+        widget.add_class("cfg-status-ok")
+
+    @staticmethod
+    def _err(widget: Static, text: str) -> None:
+        widget.update(text)
+        widget.remove_class("cfg-status-ok")
+        widget.remove_class("cfg-status-warn")
+        widget.add_class("cfg-status-err")
+
+    @staticmethod
+    def _read_gpg_version(binary: str) -> str:
+        import subprocess
+        try:
+            result = subprocess.run(
+                [binary, "--version"],
+                capture_output=True,
+                timeout=2,
+                text=True
+            )
+            first = result.stdout.splitlines()[0] if result.stdout else ""
+            parts = first.split()
+            if len(parts) >= 3:
+                return f"{parts[1].strip('()')} {parts[2]}"
+            return first.strip()
+
+        except Exception:
+            return ""
+
+    def on_button_pressed(self, event: Button.Pressed) -> None:
+        if event.button.id == "cfg-btn-save":
+            self.action_save()
+        elif event.button.id == "cfg-btn-discard":
+            self.action_discard()
+
+    def action_save(self) -> None:
+        gnupghome = self.query_one("#cfg-gnupghome", Input).value.strip()
+        gpg_binary = self.query_one("#cfg-binary", Input).value.strip() or "gpg"
+        algorithm = str(self.query_one("#cfg-algo", Select).value)
+        expire = str(self.query_one("#cfg-expire", Select).value)
+        keyserver = self.query_one("#cfg-keyserver", Input).value.strip()
+        cache_on = self.query_one("#cfg-cache-switch", Switch).value
+
+        if keyserver and not (
+            keyserver.startswith("https://") or keyserver.startswith("http://")
+        ):
+            self.notify(
+                "Keyserver URL must start with [b][u]https://[/u][/b] [i]or[/i] [b][u]http://[/u][/b]",
+                title="Invalid URL",
+                severity="warning",
+                markup=True
+            )
+            self.query_one("#cfg-keyserver", Input).focus()
+
+            return
+
+        new_cfg = AppSettings(
+            gnupghome=gnupghome,
+            gpg_binary=gpg_binary,
+            algorithm=algorithm,
+            expire=expire,
+            keyserver_url=keyserver or "https://keys.openpgp.org",
+            passphrase_cache_enabled=cache_on
+        )
+
+        if not save_settings(new_cfg):
+            self.notify(
+                f"Could not write settings to:\n{CONFIG_FILE}\n"
+                "Check file permissions.",
+                title="Save failed",
+                severity="error",
+                timeout=8
+            )
+            return
+
+        self.app.post_message(self.Saved(new_cfg))
+        self.app.pop_screen()
+
+    def action_discard(self) -> None:
+        self.app.pop_screen()
+
+    

{artemis_framework-0.3.2 → artemis_framework-0.4.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "artemis_framework"
-version = "0.3.2"
+version = "0.4.0"
 description = "A package for doing great things!"
 authors = ["Dylan Garrett"]
 license = "MIT"