plexavo 0.2.0__tar.gz → 0.2.1__tar.gz

{plexavo-0.2.0 → plexavo-0.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plexavo
-Version: 0.2.0
+Version: 0.2.1
 Summary: Open-source AWS misconfiguration scanner — runs with your own local AWS credentials, nothing sent to anyone else.
 Author: Kavee
 License: AGPL-3.0-or-later

{plexavo-0.2.0 → plexavo-0.2.1}/plexavo/__init__.py

@@ -4,4 +4,4 @@ Runs entirely with your own local AWS credentials. Nothing is sent to
 anyone else. See README.md for usage, or `plexavo scan --help`.
 """
 
-__version__ = "0.2.0"
+__version__ = "0.2.1"

{plexavo-0.2.0 → plexavo-0.2.1}/plexavo/auth.py

@@ -11,7 +11,7 @@ your own credentials, and nothing leaves your machine.
 from __future__ import annotations
 
 import boto3
-from botocore.exceptions import NoCredentialsError, ProfileNotFound
+from botocore.exceptions import ClientError, NoCredentialsError, ProfileNotFound
 
 
 def get_local_session(profile_name: str | None = None, region: str | None = None) -> boto3.Session:
@@ -50,6 +50,14 @@ def get_local_session(profile_name: str | None = None, region: str | None = None
             f"{f'--profile {profile_name} ' if profile_name else ''}"
             "to set them up."
         ) from e
+    except ClientError as e:
+        code = e.response.get("Error", {}).get("Code", "Unknown")
+        raise RuntimeError(
+            f"AWS rejected these credentials ({code}). The access key may "
+            "be invalid, deactivated, or deleted — run `aws configure "
+            f"{f'--profile {profile_name} ' if profile_name else ''}"
+            "` to update them."
+        ) from e
 
     return boto3.Session(profile_name=profile_name, region_name=resolved_region)
 

{plexavo-0.2.0 → plexavo-0.2.1}/plexavo/interactive.py

@@ -16,10 +16,10 @@ import os
 
 import boto3
 from rich import box
-from rich.align import Align
-from rich.console import Console
+from rich.console import Console, Group
 from rich.panel import Panel
 from rich.prompt import Confirm, IntPrompt, Prompt
+from rich.table import Table
 from rich.text import Text
 
 from plexavo import __version__
@@ -42,27 +42,57 @@ FEATURES = [
     "100% local scanning — your AWS credentials never leave this machine",
 ]
 
-def _splash_panel() -> Panel:
-    header = Text()
-    header.append("PLEXAVO", style="bold white")
-    header.append("  ")
-    header.append(f"v{__version__}", style="grey62")
+def _gradient_wordmark(word: str, min_shade: int = 90, max_shade: int = 255) -> Text:
+    """Letter-spaced word with a symmetric grey -> white -> grey shimmer,
+    one shade per letter (a smooth peak at the center, not a linear ramp),
+    e.g. "P L E X A V O" fading brightest at the middle letter."""
+    text = Text()
+    n = len(word)
+    for i, ch in enumerate(word):
+        t = 1 - abs((i / (n - 1)) * 2 - 1) if n > 1 else 1.0
+        shade = round(min_shade + t * (max_shade - min_shade))
+        text.append(ch, style=f"bold #{shade:02x}{shade:02x}{shade:02x}")
+        if i != n - 1:
+            text.append(" ")
+    return text
+
+
+CLOUD_ART = (
+    "     .--.    \n"
+    "  .-(    ).  \n"
+    " (___.__)__) "
+)
+
+
+def _header_row() -> Table:
+    """Wordmark pinned to the left corner, a small ASCII cloud floating
+    in the opposite corner — a quiet logomark, not a centerpiece."""
+    wordmark = _gradient_wordmark("PLEXAVO")
+    wordmark.append("  ")
+    wordmark.append(f"v{__version__}", style="grey62")
+
+    grid = Table.grid(expand=True)
+    grid.add_column(ratio=1)
+    grid.add_column(justify="right")
+    grid.add_row(wordmark, Text(CLOUD_ART, style="grey50"))
+    return grid
+
 
+def _splash_panel() -> Panel:
     body = Text()
-    body.append_text(header)
-    body.append("\n")
     body.append("AWS Security Reimagined", style="italic grey74")
     body.append("\n")
     body.append(WEBSITE, style="underline grey62")
     body.append("\n\n")
-    body.append("FEATURES\n", style="bold grey74")
+    body.append("─" * 50, style="grey42")
+    body.append("\n\n")
     for i, feature in enumerate(FEATURES):
-        body.append(f"  · {feature}", style="grey66")
+        body.append(f"  ▸ {feature}", style="grey66")
         if i != len(FEATURES) - 1:
             body.append("\n")
 
     return Panel(
-        Align.center(body),
+        Group(_header_row(), body),
         border_style="grey50",
         box=box.ROUNDED,
         padding=(1, 4),

{plexavo-0.2.0 → plexavo-0.2.1}/plexavo.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: plexavo
-Version: 0.2.0
+Version: 0.2.1
 Summary: Open-source AWS misconfiguration scanner — runs with your own local AWS credentials, nothing sent to anyone else.
 Author: Kavee
 License: AGPL-3.0-or-later

{plexavo-0.2.0 → plexavo-0.2.1}/plexavo.egg-info/SOURCES.txt

@@ -34,6 +34,7 @@ plexavo/report/fonts/DejaVuSans.ttf
 plexavo/report/fonts/GEIST-FONT-LICENSE.txt
 plexavo/report/templates/report.html.j2
 tests/test_ai_narration_offline.py
+tests/test_auth_offline.py
 tests/test_encryption_offline.py
 tests/test_iam_hygiene_offline.py
 tests/test_iam_offline.py

{plexavo-0.2.0 → plexavo-0.2.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "plexavo"
-version = "0.2.0"
+version = "0.2.1"
 description = "Open-source AWS misconfiguration scanner — runs with your own local AWS credentials, nothing sent to anyone else."
 readme = "README.md"
 license = { text = "AGPL-3.0-or-later" }

plexavo-0.2.1/tests/test_auth_offline.py

@@ -0,0 +1,91 @@
+"""Offline tests for auth.py. No real AWS calls — boto3.Session.client is
+monkeypatched to raise the errors AWS itself would raise, to prove
+get_local_session converts them into a clear RuntimeError instead of
+letting them crash the caller.
+
+Run: python test_auth_offline.py
+"""
+
+import boto3
+from botocore.exceptions import ClientError, NoCredentialsError
+from plexavo.auth import get_local_session
+
+failures = 0
+
+
+def assert_true(cond, msg):
+    global failures
+    status = "PASS" if cond else "FAIL"
+    print(f"[{status}] {msg}")
+    if not cond:
+        failures += 1
+
+
+class _RaisingClient:
+    def __init__(self, exc):
+        self._exc = exc
+
+    def get_caller_identity(self):
+        raise self._exc
+
+
+def _patch_client(monkeypatch_exc):
+    original_client = boto3.Session.client
+
+    def fake_client(self, service_name, *args, **kwargs):
+        if service_name == "sts":
+            return _RaisingClient(monkeypatch_exc)
+        return original_client(self, service_name, *args, **kwargs)
+
+    return original_client, fake_client
+
+
+# --- InvalidClientTokenId (deactivated/deleted access key) surfaces as a clear RuntimeError ---
+original_client, fake_client = _patch_client(
+    ClientError(
+        {"Error": {"Code": "InvalidClientTokenId", "Message": "The security token included in the request is invalid."}},
+        "GetCallerIdentity",
+    )
+)
+boto3.Session.region_name = property(lambda self: "us-east-1")
+boto3.Session.client = fake_client
+try:
+    raised = None
+    try:
+        # profile_name=None: boto3.Session() itself always succeeds
+        # regardless of what's in this machine's real ~/.aws config —
+        # only the (monkeypatched) sts call should fail.
+        get_local_session(profile_name=None)
+    except RuntimeError as e:
+        raised = e
+    except Exception as e:
+        raised = e
+
+    assert_true(isinstance(raised, RuntimeError), "ClientError (InvalidClientTokenId) is converted to RuntimeError, not left to crash")
+    assert_true(raised is not None and "InvalidClientTokenId" in str(raised), "RuntimeError message names the AWS error code")
+finally:
+    boto3.Session.client = original_client
+
+
+# --- NoCredentialsError still produces the pre-existing clear message ---
+original_client, fake_client = _patch_client(NoCredentialsError())
+boto3.Session.client = fake_client
+try:
+    raised = None
+    try:
+        get_local_session(profile_name=None)
+    except RuntimeError as e:
+        raised = e
+    except Exception as e:
+        raised = e
+
+    assert_true(isinstance(raised, RuntimeError), "NoCredentialsError still converts to RuntimeError (regression check)")
+    assert_true(raised is not None and "No AWS credentials found" in str(raised), "NoCredentialsError message unchanged")
+finally:
+    boto3.Session.client = original_client
+    del boto3.Session.region_name
+
+
+print(f"\n{'ALL PASSED' if failures == 0 else f'{failures} FAILURE(S)'}")
+import sys
+sys.exit(1 if failures else 0)