spaceforge 1.1.5__py3-none-any.whl → 1.1.6__py3-none-any.whl

spaceforge/_version_scm.py

@@ -28,7 +28,7 @@ version_tuple: VERSION_TUPLE
 commit_id: COMMIT_ID
 __commit_id__: COMMIT_ID
 
-__version__ = version = '1.1.5'
-__version_tuple__ = version_tuple = (1, 1, 5)
+__version__ = version = '1.1.6'
+__version_tuple__ = version_tuple = (1, 1, 6)
 
 __commit_id__ = commit_id = None

spaceforge/generator.py

@@ -198,9 +198,13 @@ class PluginGenerator:
 
     def _update_with_requirements(self, mounted_files: List[MountedFile]) -> None:
         """Update the plugin hooks if there is a requirements.txt"""
-        if os.path.exists("requirements.txt") and self.config is not None:
+        # Look for requirements.txt in the same directory as the plugin file
+        plugin_dir = os.path.dirname(self.plugin_path)
+        requirements_path = os.path.join(plugin_dir, "requirements.txt")
+
+        if os.path.exists(requirements_path) and self.config is not None:
             # read the requirements.txt file
-            with open("requirements.txt", "r") as f:
+            with open(requirements_path, "r") as f:
                 mounted_files.append(
                     MountedFile(
                         path=f"{self.plugin_working_directory}/requirements.txt",

spaceforge/templates/ensure_spaceforge_and_run.sh.j2

@@ -5,7 +5,7 @@ set -e
 cd {{plugin_path}}
 
 if [ ! -d "./venv" ]; then
-    python -m venv ./venv
+    python -m venv --system-site-packages ./venv
 fi
 . venv/bin/activate
 
@@ -21,4 +21,4 @@ fi
 export PATH="/mnt/workspace/plugins/plugin_binaries:$PATH"
 {% endif %}
 cd /mnt/workspace/source/$TF_VAR_spacelift_project_root
-spaceforge run --plugin-file {{plugin_file}} {{phase}}
+python -m spaceforge run --plugin-file {{plugin_file}} {{phase}}

spaceforge/test_generator.py

@@ -414,14 +414,14 @@ class NotAPlugin:
     def test_get_plugin_contexts_with_requirements(self, mock_exists: Mock) -> None:
         """Test context generation with requirements.txt."""
         mock_exists.side_effect = (
-            lambda path: path == "requirements.txt" or "plugin.py" in path
+            lambda path: path.endswith("requirements.txt") or "plugin.py" in path
         )
 
         # Mock specific file contents with a custom open function
         original_open = open
 
         def mock_open_func(filename: str, *args: Any, **kwargs: Any) -> Any:
-            if filename == "requirements.txt":
+            if filename.endswith("requirements.txt"):
                 from io import StringIO
 
                 return StringIO("requirements content")

spaceforge-1.1.6.dist-info/METADATA

@@ -0,0 +1,56 @@
+Metadata-Version: 2.4
+Name: spaceforge
+Version: 1.1.6
+Summary: A Python framework for building Spacelift plugins
+Author-email: Spacelift <support@spacelift.io>
+Maintainer-email: Spacelift <support@spacelift.io>
+License: MIT
+Project-URL: Homepage, https://github.com/spacelift-io/plugins
+Project-URL: Documentation, https://github.com/spacelift-io/plugins#readme
+Project-URL: Repository, https://github.com/spacelift-io/plugins
+Project-URL: Bug Reports, https://github.com/spacelift-io/plugins/issues
+Keywords: spacelift,plugin,framework,infrastructure,devops,spaceforge
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.9
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: Topic :: System :: Systems Administration
+Requires-Python: >=3.9
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: PyYAML>=6.0
+Requires-Dist: click>=8.0.0
+Requires-Dist: pydantic>=2.11.7
+Requires-Dist: Jinja2>=3.1.0
+Requires-Dist: mergedeep>=1.3.4
+Provides-Extra: dev
+Requires-Dist: pytest>=6.0; extra == "dev"
+Requires-Dist: pytest-cov; extra == "dev"
+Requires-Dist: black; extra == "dev"
+Requires-Dist: isort; extra == "dev"
+Requires-Dist: mypy; extra == "dev"
+Requires-Dist: types-PyYAML; extra == "dev"
+Requires-Dist: setuptools-scm[toml]>=6.2; extra == "dev"
+Requires-Dist: autoflake; extra == "dev"
+Dynamic: license-file
+
+# Spaceforge - Build Spacelift Plugins in Python
+
+Spaceforge is a Python framework for building powerful Spacelift plugins using a declarative, hook-based approach. Define your plugin logic in Python, and Spaceforge automatically generates the plugin manifest for Spacelift.
+
+## Usage
+
+For installation and usage instructions, see [our documentation](https://docs.spacelift.io/integrations/plugins).
+
+## Contributing
+
+To contribute to Spaceforge or create plugins, see our [CONTRIBUTING.md](./CONTRIBUTING.md) file.
+
+## License
+
+Spaceforge and Spacelift plugins are licensed under the [MIT license](./LICENSE).

{spaceforge-1.1.5.dist-info → spaceforge-1.1.6.dist-info}/RECORD

@@ -2,15 +2,15 @@ spaceforge/README.md,sha256=gDyCQN0EW4xp8Skvs6J0qHpO9CjVTnRfSnhduAIFQs4,7717
 spaceforge/__init__.py,sha256=TU-vvm15dK1ucixNW0V42eTT72x3_hmKSyxP4MC1Occ,589
 spaceforge/__main__.py,sha256=UKbeCuEFgoNlEOX44-kYUAQuUdySdkAKsvbjXEyLeWI,965
 spaceforge/_version.py,sha256=70eCBV_uVCm0U7qrtYRUZM3GJnJRtvZQ_aPFLd8H7CI,1009
-spaceforge/_version_scm.py,sha256=SBXhEAFQbfcjLb_eXnqg0cn0I8-y4wDGA3DkPBmBv2s,704
+spaceforge/_version_scm.py,sha256=Ss7ZrKeNFejVcP8xqi-vmh6yUDDLhmA6FdF5e4QxSZA,704
 spaceforge/cls.py,sha256=oYW5t5_xs9ZM6Ne_b4trxCPxLHQrqbqgUeibeM8O4PU,6329
 spaceforge/conftest.py,sha256=U-xCavCsgRAQXqflIIOMeq9pcGbeqRviUNkEXgZol8g,2141
-spaceforge/generator.py,sha256=hCxtbOKmrGd7HCCz7HMaiK566kIre5MNxcJEx2TVURM,18430
+spaceforge/generator.py,sha256=inhw38FGKsiktwssiSFgGsR1d7FGxWDv_e8WeEydenw,18634
 spaceforge/plugin.py,sha256=Ytm2B7nnJNH231V4gUFY1pBmwVNTpIg3YviUL_Bnf24,14963
 spaceforge/runner.py,sha256=NNddgK_OsnQWx2YFcyTpAOWfFLBDUphufBVfXYEzfzM,3166
 spaceforge/schema.json,sha256=89IROLVlCj8txGMiLt4Bbuo_2muSxKoZCyaXQ2vuA9c,10869
 spaceforge/test_cls.py,sha256=nXAgbnFnGdFxrtA7vNXiePjNUASuoYW-lEuQGx9WMGs,468
-spaceforge/test_generator.py,sha256=k2jPEqNEJ9jYiY3xGf59Bo3VxTK6s_jEe3hZ0D8i79U,32611
+spaceforge/test_generator.py,sha256=sEDV7ShT2BpLoW4zC8ZT-P-V4_dP8kOI0WuiZ6uVIgc,32625
 spaceforge/test_generator_binaries.py,sha256=X_7pPLGE45eQt-Kv9_ku__LsyLgOvViHc_BvVpSCMp0,7263
 spaceforge/test_generator_core.py,sha256=gOqRx0rnME-srGMHun4KidXMN-iaqfKKTyoQ0Tw6b9Q,6253
 spaceforge/test_generator_hooks.py,sha256=2lJs8dYlFb7QehWcYF0O4qg38s5UudEpzJyBi1XiS3k,2542
@@ -24,10 +24,10 @@ spaceforge/test_runner_cli.py,sha256=qkklvRHETCmgKaVxPfUR_IBy7Vne5hKupAOK9igKqLA
 spaceforge/test_runner_core.py,sha256=eNR9YOwJwv7LsMtNQ4WXXMPIW6RE_A7hUp4bCpzz1Rk,3941
 spaceforge/test_runner_execution.py,sha256=GJhoECdhIY2M3MWcmTrIYfkJd2P5n86zixO3FY38_CQ,5344
 spaceforge/templates/binary_install.sh.j2,sha256=I3setUsp6fCUJLkynvfZT4DCqVsoEQ42rhSmK6MJVAY,1517
-spaceforge/templates/ensure_spaceforge_and_run.sh.j2,sha256=8vq9cvFtNLjgcEr8OPblZ6bQRsOsklOnDOzygnw3We4,547
-spaceforge-1.1.5.dist-info/licenses/LICENSE,sha256=wyljRrfnWY2ggQKkSCg3Nw2hxwPMmupopaKs9Kpgys8,1065
-spaceforge-1.1.5.dist-info/METADATA,sha256=6a5k8eotU_WQipZXRVuIxytYHcf9cxuGo5AM34hnnQU,20968
-spaceforge-1.1.5.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-spaceforge-1.1.5.dist-info/entry_points.txt,sha256=qawuuKBSNTGg-njnQnhxxFldFvXYAPej6bF_f3iyQ48,56
-spaceforge-1.1.5.dist-info/top_level.txt,sha256=eVw-Lw4Th0oHM8Gx1Y8YetyNgbNbMBU00yWs-kwGeSs,11
-spaceforge-1.1.5.dist-info/RECORD,,
+spaceforge/templates/ensure_spaceforge_and_run.sh.j2,sha256=OKrpZI-M1VU5rCdu7XMbBto7R-HV9lAImc3x3112vhY,580
+spaceforge-1.1.6.dist-info/licenses/LICENSE,sha256=qtl16T_VToz1-IpjGKSLCHsy_zmCFg2H5SkvJi85C4c,1065
+spaceforge-1.1.6.dist-info/METADATA,sha256=nw4so47bK38vLSQZU_4Kl7lJT9Mjl6rOuc91Eb4LD7s,2307
+spaceforge-1.1.6.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+spaceforge-1.1.6.dist-info/entry_points.txt,sha256=qawuuKBSNTGg-njnQnhxxFldFvXYAPej6bF_f3iyQ48,56
+spaceforge-1.1.6.dist-info/top_level.txt,sha256=eVw-Lw4Th0oHM8Gx1Y8YetyNgbNbMBU00yWs-kwGeSs,11
+spaceforge-1.1.6.dist-info/RECORD,,

{spaceforge-1.1.5.dist-info → spaceforge-1.1.6.dist-info}/licenses/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2024 Spacelift
+Copyright (c) 2025 Spacelift
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

spaceforge-1.1.5.dist-info/METADATA

@@ -1,736 +0,0 @@
-Metadata-Version: 2.4
-Name: spaceforge
-Version: 1.1.5
-Summary: A Python framework for building Spacelift plugins
-Author-email: Spacelift <support@spacelift.io>
-Maintainer-email: Spacelift <support@spacelift.io>
-License: MIT
-Project-URL: Homepage, https://github.com/spacelift-io/plugins
-Project-URL: Documentation, https://github.com/spacelift-io/plugins#readme
-Project-URL: Repository, https://github.com/spacelift-io/plugins
-Project-URL: Bug Reports, https://github.com/spacelift-io/plugins/issues
-Keywords: spacelift,plugin,framework,infrastructure,devops,spaceforge
-Classifier: Development Status :: 3 - Alpha
-Classifier: Intended Audience :: Developers
-Classifier: Operating System :: OS Independent
-Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.9
-Classifier: Programming Language :: Python :: 3.10
-Classifier: Programming Language :: Python :: 3.11
-Classifier: Programming Language :: Python :: 3.12
-Classifier: Topic :: Software Development :: Libraries :: Python Modules
-Classifier: Topic :: System :: Systems Administration
-Requires-Python: >=3.9
-Description-Content-Type: text/markdown
-License-File: LICENSE
-Requires-Dist: PyYAML>=6.0
-Requires-Dist: click>=8.0.0
-Requires-Dist: pydantic>=2.11.7
-Requires-Dist: Jinja2>=3.1.0
-Requires-Dist: mergedeep>=1.3.4
-Provides-Extra: dev
-Requires-Dist: pytest>=6.0; extra == "dev"
-Requires-Dist: pytest-cov; extra == "dev"
-Requires-Dist: black; extra == "dev"
-Requires-Dist: isort; extra == "dev"
-Requires-Dist: mypy; extra == "dev"
-Requires-Dist: types-PyYAML; extra == "dev"
-Requires-Dist: setuptools-scm[toml]>=6.2; extra == "dev"
-Requires-Dist: autoflake; extra == "dev"
-Dynamic: license-file
-
-# Spaceforge - Build Spacelift Plugins in Python
-
-Spaceforge is a Python framework that makes it easy to build powerful Spacelift plugins using a declarative, hook-based approach. Define your plugin logic in Python, and spaceforge automatically generates the plugin manifest for Spacelift.
-
-## Installation
-
-Install spaceforge from PyPI:
-
-```bash
-pip install spaceforge
-```
-
-## Quick Start
-
-### 1. Create Your Plugin
-
-Create a Python file (e.g., `plugin.py`) and inherit from `SpaceforgePlugin`:
-
-```python
-from spaceforge import SpaceforgePlugin, Parameter, Variable, Context
-import os
-
-class MyPlugin(SpaceforgePlugin):
-    # Plugin metadata
-    __plugin_name__ = "my-plugin"
-    __version__ = "1.0.0"
-    __author__ = "Your Name"
-    __labels__ = ["security", "monitoring"]  # Optional labels for categorization
-    
-    # Define plugin parameters
-    __parameters__ = [
-        Parameter(
-            name="API Key",
-            id="api_key",  # Optional ID for parameter reference
-            description="API key for external service",
-            required=True,
-            sensitive=True
-        ),
-        Parameter(
-            name="Environment",
-            id="environment",
-            description="Target environment",
-            required=False,
-            default="production"
-        )
-    ]
-    
-    # Define Spacelift contexts
-    __contexts__ = [
-        Context(
-            name_prefix="my-plugin",
-            description="Main plugin context",
-            env=[
-                Variable(
-                    key="API_KEY",
-                    value_from_parameter="api_key",  # Matches parameter id or name
-                    sensitive=True
-                ),
-                Variable(
-                    key="ENVIRONMENT",
-                    value_from_parameter="environment"  # Matches parameter id or name
-                )
-            ]
-        )
-    ]
-    
-    def after_plan(self):
-        """Run security checks after Terraform plan"""
-        # Run external commands
-        return_code, stdout, stderr = self.run_cli("my-security-tool", "--scan", "./", '--api', os.environ["API_KEY"])
-        
-        if return_code != 0:
-            self.logger.error("Security scan failed!")
-            exit(1)
-            
-        self.logger.info("Security scan passed!")
-```
-
-### 2. Generate Plugin Manifest
-
-Generate the Spacelift plugin YAML manifest:
-
-```bash
-spaceforge generate plugin.py
-```
-
-This creates `plugin.yaml` that you can upload to Spacelift.
-
-### 3. Test Your Plugin
-
-Test individual hooks locally:
-
-```bash
-# Set parameter values
-export API_KEY="your-api-key"
-export ENVIRONMENT="staging"
-
-# Test the after_plan hook
-spaceforge run after_plan
-```
-
-## Available Hooks
-
-Override these methods in your plugin to add custom logic:
-
-- `before_init()` - Before Terraform init
-- `after_init()` - After Terraform init  
-- `before_plan()` - Before Terraform plan
-- `after_plan()` - After Terraform plan
-- `before_apply()` - Before Terraform apply
-- `after_apply()` - After Terraform apply
-- `before_perform()` - Before the run performs
-- `after_perform()` - After the run performs
-- `before_destroy()` - Before Terraform destroy
-- `after_destroy()` - After Terraform destroy
-- `after_run()` - After the run completes
-
-## Plugin Components
-
-### Labels
-
-Add optional labels to categorize your plugin:
-
-```python
-class MyPlugin(SpaceforgePlugin):
-    __labels__ = ["security", "monitoring", "compliance"]
-```
-
-### Parameters
-
-Define user-configurable parameters:
-
-```python
-__parameters__ = [
-    Parameter(
-        name="Database URL",
-        id="database_url",  # Optional: used for parameter reference
-        description="Database connection URL",
-        required=True,
-        sensitive=True
-    ),
-    Parameter(
-        name="Timeout", 
-        id="timeout",
-        description="Timeout in seconds",
-        required=False,
-        default="30"  # Default values should be strings
-    )
-]
-```
-
-**Parameter Notes:**
-- Parameter `name` is displayed in the Spacelift UI
-- Parameter `id` (optional) is used for programmatic reference
-- `value_from_parameter` can reference either the `id` (if present) or the `name`
-- Parameters are made available as environment variables through Variable definitions
-- Default values must be strings
-- Required parameters cannot have default values
-
-### Contexts
-
-Define Spacelift contexts with environment variables and custom hooks:
-
-```python
-__contexts__ = [
-    Context(
-        name_prefix="production",
-        description="Production environment context",
-        labels=["env:prod"],
-        env=[
-            Variable(
-                key="DATABASE_URL",
-                value_from_parameter="database_url",  # Matches parameter id
-                sensitive=True
-            ),
-            Variable(
-                key="API_ENDPOINT", 
-                value="https://api.prod.example.com"
-            )
-        ],
-        hooks={
-            "before_apply": [
-                "echo 'Starting production deployment'",
-                "kubectl get pods"
-            ]
-        }
-    )
-]
-```
-
-### Binaries
-
-Automatically download and install external tools:
-
-```python
-__binaries__ = [
-    Binary(
-        name="kubectl",
-        download_urls={
-            "amd64": "https://dl.k8s.io/release/v1.28.0/bin/linux/amd64/kubectl",
-            "arm64": "https://dl.k8s.io/release/v1.28.0/bin/linux/arm64/kubectl"
-        }
-    )
-]
-```
-
-**Context Priority System:**
-
-Control the execution order of contexts using the `priority` field:
-
-```python
-__contexts__ = [
-    Context(
-        name_prefix="setup",
-        description="Setup context (runs first)",
-        priority=0,  # Lower numbers run first
-        hooks={
-            "before_init": ["echo 'Setting up environment'"]
-        }
-    ),
-    Context(
-        name_prefix="main", 
-        description="Main context (runs second)",
-        priority=1,  # Higher numbers run after lower ones
-        hooks={
-            "before_init": ["echo 'Main execution'"]
-        }
-    )
-]
-```
-
-**Priority Notes:**
-- Default priority is `0`
-- Lower numbers execute first (0, then 1, then 2, etc.)
-- Useful for ensuring setup contexts run before main execution contexts
-
-**Binary PATH Management:**
-- When using Python hook methods (e.g., `def before_apply()`), binaries are automatically available in PATH
-- When using raw context hooks, you must manually export the PATH:
-
-```python
-__contexts__ = [
-    Context(
-        name_prefix="kubectl-setup",
-        description="Setup kubectl binary for raw hooks",
-        hooks={
-            "before_init": [
-                'export PATH="/mnt/workspace/plugins/plugin_binaries:$PATH"',
-                "kubectl version"
-            ]
-        }
-    )
-]
-```
-
-### Mounted Files
-
-Mount file content directly into contexts:
-
-```python
-from spaceforge import MountedFile
-
-__contexts__ = [
-    Context(
-        name_prefix="config",
-        description="Context with mounted configuration files",
-        mounted_files=[
-            MountedFile(
-                path="tmp/config.json",
-                content='{"environment": "production", "debug": false}',
-                sensitive=False
-            ),
-            MountedFile(
-                path="tmp/secret-config.yaml",
-                content="api_key: secret-value\nendpoint: https://api.example.com",
-                sensitive=True  # Marks content as sensitive
-            )
-        ]
-    )
-]
-```
-
-**MountedFile Notes:**
-- Files are created at the specified path when the context is applied
-- Content is written exactly as provided
-- Use `sensitive=True` for files containing secrets or sensitive data
-- path is from `/mnt/workspace/`. An example would be `tmp/config.json` which would be mounted at `/mnt/workspace/tmp/config.json`
-
-### Policies
-
-Define OPA policies for your plugin:
-
-```python
-__policies__ = [
-    Policy(
-        name_prefix="security-check",
-        type="NOTIFICATION",
-        body="""
-package spacelift
-
-webhook[{"endpoint_id": "security-alerts"}] {
-  input.run_updated.run.marked_unsafe == true
-}
-        """,
-        labels=["security"]
-    )
-]
-```
-
-### Webhooks
-
-Define webhooks to trigger external actions:
-
-```python
-__webhooks__ = [
-    Webhook(
-        name_prefix="security-alerts",
-        endpoint="https://alerts.example.com/webhook",
-        secretFromParameter="webhook_secret",  # Parameter id/name for webhook secret
-        labels=["security"]
-    )
-]
-```
-
-## Plugin Features
-
-### Logging
-
-Built-in structured logging with run context:
-
-```python
-def after_plan(self):
-    self.logger.info("Starting security scan")
-    self.logger.debug("Debug info (only shown when SPACELIFT_DEBUG=true)")  
-    self.logger.warning("Warning message")
-    self.logger.error("Error occurred")
-```
-
-### CLI Execution
-
-Run external commands with automatic logging:
-
-```python
-def before_apply(self):
-    # Run command with automatic output capture
-    return_code, stdout, stderr = self.run_cli("terraform", "validate")
-    
-    if return_code != 0:
-        self.logger.error("Terraform validation failed")
-        exit(1)
-```
-
-### Spacelift API Integration
-
-Query the Spacelift GraphQL API (requires `SPACELIFT_API_TOKEN` and `TF_VAR_spacelift_graphql_endpoint`):
-
-```python
-def after_plan(self):
-    result = self.query_api("""
-        query {
-            stack(id: "my-stack-id") {
-                name
-                state
-                latestRun {
-                    id
-                    state
-                }
-            }
-        }
-    """)
-    
-    self.logger.info(f"Stack state: {result['stack']['state']}")
-```
-
-### User Token Authentication
-
-Use user API tokens instead of service tokens for Spacelift API access. This is useful because the token on the run may not have sufficient permissions for certain operations.
-
-```python
-def before_plan(self):
-    # Use user API token for authentication
-    user_id = os.environ.get('SPACELIFT_USER_ID')
-    user_secret = os.environ.get('SPACELIFT_USER_SECRET')
-    
-    if user_id and user_secret:
-        self.use_user_token(user_id, user_secret)
-        
-        # Now you can use the API with user permissions
-        result = self.query_api("""
-            query {
-                viewer {
-                    id
-                    login
-                }
-            }
-        """)
-        
-        self.logger.info(f"Authenticated as: {result['viewer']['login']}")
-```
-
-**User Token Notes:**
-- Allows plugins to act on behalf of a specific user
-- Useful for operations requiring user-specific permissions
-- User tokens may have different access levels than service tokens
-- Call `use_user_token()` before making API requests
-
-### Access Plan and State
-
-Access Terraform plan and state data:
-
-```python
-def after_plan(self):
-    # Get the current plan
-    plan = self.get_plan_json()
-    
-    # Get the state before changes
-    state = self.get_state_before_json()
-    
-    # Analyze planned changes
-    resource_count = len(plan.get('planned_values', {}).get('root_module', {}).get('resources', []))
-    self.logger.info(f"Planning to manage {resource_count} resources")
-```
-
-### Send Rich Output
-
-Send formatted markdown to the Spacelift UI:
-
-```python
-def after_plan(self):
-    markdown = """
-    # Security Scan Results
-    
-    ✅ **Passed:** 45 checks
-    ⚠️ **Warnings:** 3 issues  
-    ❌ **Failed:** 0 critical issues
-    
-    [View detailed report](https://security.example.com/reports/123)
-    """
-    
-    self.send_markdown(markdown)
-```
-
-### Add to Policy Input
-
-Add custom data to the OPA policy input:
-
-The following example will create input available via `input.third_party_metadata.custom.my_custom_data` in your OPA policies:
-```python
-def after_plan(self):
-    self.add_to_policy_input("my_custom_data", {
-        "scan_results": {
-            "passed": True,
-            "issues": []
-        }
-    })
-```
-
-## CLI Commands
-
-### Generate Plugin Manifest
-
-```bash
-# Generate from plugin.py (default filename)
-spaceforge generate
-
-# Generate from specific file  
-spaceforge generate my_plugin.py
-
-# Specify output file
-spaceforge generate my_plugin.py -o custom-output.yaml
-
-# Get help
-spaceforge generate --help
-```
-
-### Test Plugin Hooks
-
-```bash
-# Set parameters for local testing (parameters are normally provided by Spacelift)
-export API_KEY="test-key" 
-export TIMEOUT="60"
-
-# Test specific hook
-spaceforge run after_plan
-
-# Test with specific plugin file
-spaceforge run --plugin-file my_plugin.py before_apply
-
-# Get help
-spaceforge run --help
-```
-
-## Plugin Development Tips
-
-### 1. Handle Dependencies
-
-If your plugin needs Python packages, create a `requirements.txt` file. Spaceforge automatically adds a `before_init` hook to install them:
-
-```txt
-requests>=2.28.0
-pydantic>=1.10.0
-```
-
-### 2. Environment Variables
-
-Access Spacelift environment variables in your hooks:
-
-```python
-def after_plan(self):
-    run_id = os.environ.get('TF_VAR_spacelift_run_id')
-    stack_id = os.environ.get('TF_VAR_spacelift_stack_id') 
-    self.logger.info(f"Processing run {run_id} for stack {stack_id}")
-```
-
-### 3. Error Handling
-
-Always handle errors gracefully:
-
-```python
-def after_plan(self):
-    try:
-        # Your plugin logic here
-        result = self.run_external_service()
-        
-    except Exception as e:
-        self.logger.error(f"Plugin failed: {str(e)}")
-        # Exit with non-zero code to fail the run
-        exit(1)
-```
-
-### 4. Testing and Debugging
-
-- Set `SPACELIFT_DEBUG=true` to enable debug logging
-- Use the `run` command to test hooks during development
-- Test with different parameter combinations
-- Validate your generated YAML before uploading to Spacelift
-
-## Example: Security Scanning Plugin
-
-Here's a complete example of a security scanning plugin:
-
-```python
-import os
-import json
-from spaceforge import SpaceforgePlugin, Parameter, Variable, Context, Binary, Policy, MountedFile
-
-class SecurityScannerPlugin(SpaceforgePlugin):
-    __plugin_name__ = "security-scanner"
-    __version__ = "1.0.0"
-    __author__ = "Security Team"
-    
-    __binaries__ = [
-        Binary(
-            name="security-cli",
-            download_urls={
-                "amd64": "https://releases.example.com/security-cli-linux-amd64",
-                "arm64": "https://releases.example.com/security-cli-linux-arm64"
-            }
-        )
-    ]
-    
-    __parameters__ = [
-        Parameter(
-            name="API Token",
-            id="api_token",
-            description="Security service API token",
-            required=True,
-            sensitive=True
-        ),
-        Parameter(
-            name="Severity Threshold", 
-            id="severity_threshold",
-            description="Minimum severity level to report",
-            required=False,
-            default="medium"
-        )
-    ]
-    
-    __contexts__ = [
-        Context(
-            name_prefix="security-scanner",
-            description="Security scanning context",
-            env=[
-                Variable(
-                    key="SECURITY_API_TOKEN",
-                    value_from_parameter="api_token",
-                    sensitive=True
-                ),
-                Variable(
-                    key="SEVERITY_THRESHOLD",
-                    value_from_parameter="severity_threshold"
-                )
-            ]
-        )
-    ]
-    
-    def after_plan(self):
-        """Run security scan after Terraform plan"""
-        self.logger.info("Starting security scan of Terraform plan")
-        
-        # Authenticate with security service
-        return_code, stdout, stderr = self.run_cli(
-            "security-cli", "auth", 
-            "--token", os.environ["SECURITY_API_TOKEN"]
-        )
-        
-        if return_code != 0:
-            self.logger.error("Failed to authenticate with security service")
-            exit(1)
-        
-        # Scan the Terraform plan
-        return_code, stdout, stderr = self.run_cli(
-            "security-cli", "scan", "terraform", 
-            "--plan-file", "spacelift.plan.json",
-            "--format", "json",
-            "--severity", os.environ.get("SEVERITY_THRESHOLD", "medium"),
-            print_output=False
-        )
-        
-        if return_code != 0:
-            self.logger.error("Security scan failed")
-            for line in stderr:
-                self.logger.error(line)
-            exit(1)
-        
-        # Parse scan results
-        try:
-            results = json.loads('\n'.join(stdout))
-            
-            # Generate markdown report
-            markdown = self._generate_report(results)
-            self.send_markdown(markdown)
-            
-            # Fail run if critical issues found
-            if results.get('critical_count', 0) > 0:
-                self.logger.error(f"Found {results['critical_count']} critical security issues")
-                exit(1)
-                
-            self.logger.info("Security scan completed successfully")
-            
-        except json.JSONDecodeError:
-            self.logger.error("Failed to parse scan results")
-            exit(1)
-    
-    def _generate_report(self, results):
-        """Generate markdown report from scan results"""
-        report = "# Security Scan Results\n\n"
-        
-        if results.get('total_issues', 0) == 0:
-            report += "✅ **No security issues found!**\n"
-        else:
-            report += f"Found {results['total_issues']} security issues:\n\n"
-            
-            for severity in ['critical', 'high', 'medium', 'low']:
-                count = results.get(f'{severity}_count', 0)
-                if count > 0:
-                    emoji = {'critical': '🔴', 'high': '🟠', 'medium': '🟡', 'low': '🟢'}[severity]
-                    report += f"- {emoji} **{severity.upper()}:** {count}\n"
-        
-        if results.get('report_url'):
-            report += f"\n[View detailed report]({results['report_url']})\n"
-            
-        return report
-```
-
-Generate and test this plugin:
-
-```bash
-# Generate the manifest
-spaceforge generate security_scanner.py
-
-# Test locally
-export API_TOKEN="your-token"
-export SEVERITY_THRESHOLD="high"
-spaceforge run after_plan
-```
-
-## Speeding up plugin execution
-
-There are a few things you can do to speed up plugin execution.
-
-1. Ensure your runner has `spaceforge` preinstalled. This will avoid the overhead of installing it during the run. (15-30 seconds)
-2. If youre using binaries, we will only install the binary if its not found. You can gain a few seconds by ensuring its already on the runner.
-3. If your plugin has a lot of dependencies, consider using a prebuilt runner image with your plugin and its dependencies installed. This avoids the overhead of installing them during each run.
-4. Ensure your runner has enough core resources (CPU, memory) to handle the plugin execution efficiently. If your plugin is resource-intensive, consider using a more powerful runner.
-
-## Next Steps
-
-1. **Install spaceforge:** `pip install spaceforge`
-2. **Create your plugin:** Start with the quick start example
-3. **Test locally:** Use the `run` command to test your hooks
-4. **Generate manifest:** Use the `generate` command to create plugin.yaml
-5. **Upload to Spacelift:** Add your plugin manifest to your Spacelift account
-
-For more advanced examples, see the [plugins](plugins/) directory in this repository.