thothctl 0.18.0__tar.gz → 0.18.2__tar.gz

{thothctl-0.18.0 → thothctl-0.18.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: thothctl
-Version: 0.18.0
+Version: 0.18.2
 Summary: A CLI for Developer Control Plane. Accelerate your cloud IaC deployments.
 Project-URL: SourceCode, https://github.com/thothforge/thothctl
 Project-URL: HomePage, https://github.com/thothforge/thothctl

{thothctl-0.18.0 → thothctl-0.18.2}/docs/framework/commands/mcp/mcp.md

@@ -123,38 +123,61 @@ Check the status of the MCP server on a custom port:
 thothctl mcp status --port 9090
 ```
 
-## Available Tools
+## Available Tools (22)
 
 The MCP server exposes the following ThothCTL commands as tools for AI assistants:
 
 ### Project Management
-- `thothctl_init_project` - Initialize and setup project configurations
-  - Supports project types: `terraform`, `tofu`, `cdkv2`, `terraform_module`, `terragrunt`, `custom`
-  - Can be associated with spaces for consistent configuration
-  - Supports batch mode for automated workflows
-- `thothctl_remove_project` - Remove a project managed by thothctl
-- `thothctl_get_projects` - Get list of projects managed by thothctl
+| Tool | Description |
+|------|-------------|
+| `thothctl_init_project` | Initialize a new project (terraform, tofu, cdkv2, terragrunt, custom) |
+| `thothctl_remove_project` | Remove a project from local tracking |
+| `thothctl_list_projects` | List all projects managed by thothctl |
+| `thothctl_project_bootstrap` | Bootstrap existing projects with ThothCTL support |
+| `thothctl_project_cleanup` | Clean up residual files and directories |
+| `thothctl_project_convert` | Convert project to template or between formats |
+| `thothctl_project_upgrade` | Upgrade project scaffold from remote template |
 
 ### Space Management
-- `thothctl_init_space` - Initialize and setup space configurations
-- `thothctl_remove_space` - Remove a space managed by thothctl
-- `thothctl_get_spaces` - Get list of spaces managed by thothctl
-- `thothctl_get_projects_in_space` - Get list of projects in a specific space
-
-### Listing
-- `thothctl_list_projects` - List projects managed by thothctl locally
-- `thothctl_list_spaces` - List spaces managed by thothctl locally
-
-### Infrastructure Management
-- `thothctl_scan` - Scan infrastructure code for security issues
-- `thothctl_inventory` - Create Inventory for the iac composition
-- `thothctl_generate` - Generate IaC from rules, use cases, and components
-- `thothctl_document` - Initialize and setup project documentation
-- `thothctl_check` - Check infrastructure code for compliance
-- `thothctl_project` - Convert, clean up and manage the current project
+| Tool | Description |
+|------|-------------|
+| `thothctl_init_space` | Initialize a new space |
+| `thothctl_remove_space` | Remove a space |
+| `thothctl_list_spaces` | List all spaces |
+| `thothctl_get_projects_in_space` | Get projects in a specific space |
+| `thothctl_list_templates` | List available templates from VCS providers |
+
+### Security & Compliance
+| Tool | Description |
+|------|-------------|
+| `thothctl_scan_iac` | Scan IaC for security issues (Checkov, Trivy, KICS, OPA) |
+| `thothctl_check_environment` | Check development environment tools |
+| `thothctl_check_iac` | Check IaC artifacts (plans, structure) |
+| `thothctl_check_project` | Validate project structure |
+
+### Cost & Drift Analysis
+| Tool | Description |
+|------|-------------|
+| `thothctl_cost_analysis` | Estimate AWS costs from Terraform plans or CloudFormation templates |
+| `thothctl_drift_detection` | Detect infrastructure drift with tag filtering, policy enforcement, and AI analysis |
+
+### AI-Powered Review
+| Tool | Description |
+|------|-------------|
+| `thothctl_ai_review` | Multi-mode AI security analysis: analyze, decide, improve, orchestrate |
+
+### Infrastructure Tooling
+| Tool | Description |
+|------|-------------|
+| `thothctl_inventory_iac` | Create IaC composition inventory |
+| `thothctl_document_iac` | Generate documentation for IaC projects |
+| `thothctl_generate_stacks` | Generate infrastructure stacks |
 
 ### Utility
-- `thothctl_version` - Get ThothCTL version
+| Tool | Description |
+|------|-------------|
+| `thothctl_version` | Get ThothCTL version |
+| `thothctl_upgrade` | Upgrade thothctl to latest version |
 
 ## Integration with Amazon Q
 
@@ -284,12 +307,23 @@ q mcp add --name thothctl --command "thothctl" --args "mcp" --args "server" --ar
 
 ## Architecture
 
-The MCP server follows the HTTP-based MCP protocol:
+ThothCTL MCP exposes two server modes:
 
-1. The LLM requests available tools via a POST to `/tools`
-2. The server responds with a list of available tools and their parameters
-3. The LLM executes a tool via a POST to `/execute` with the tool name and parameters
-4. The server executes the corresponding ThothCTL command and returns the results
+```
+src/thothctl/services/mcp/
+├── stdio_server.py          ← stdio mode (Kiro, Amazon Q, Claude Code, Copilot)
+└── simple_http_server.py    ← HTTP mode (network integrations, CI/CD)
+```
+
+**Stdio mode** (`thothctl mcp server --stdio`):
+- Used by AI coding assistants via MCP protocol over stdin/stdout
+- Each tool maps to a subprocess call to the thothctl CLI
+- 22 tools at full feature parity
+
+**HTTP mode** (`thothctl mcp server -p 8080`):
+- REST endpoints: `GET /tools`, `POST /execute`, `GET /health`
+- CORS-enabled for browser/network integrations
+- Same 22 tools via subprocess execution
 
 ## Security Considerations
 

{thothctl-0.18.0 → thothctl-0.18.2}/docs/framework/space_configuration.md

@@ -80,6 +80,39 @@ You can list all available spaces using the `thothctl list spaces` command:
 thothctl list spaces
 ```
 
+### Showing Space Details
+
+View the full configuration summary of a space:
+
+```bash
+thothctl space show my-space
+```
+
+This displays:
+- Space name, description, status (active/inactive), and creation date
+- Version control provider
+- Terraform registry and authentication method
+- Orchestration tool
+- Governance policy repository (if configured)
+- Associated projects
+- Credentials status
+
+### Activating a Space
+
+Set a space as the active context (used as default for new projects):
+
+```bash
+thothctl space activate my-space
+```
+
+### Updating a Space
+
+Update an existing space's configuration:
+
+```bash
+thothctl space update my-space --vcs-provider github --orchestration-tool terragrunt
+```
+
 ### Deleting a Space
 
 You can delete a space using the `thothctl remove space` command:

{thothctl-0.18.0 → thothctl-0.18.2}/docs/framework/use_cases/space_management.md

@@ -60,6 +60,14 @@ Usage: thothctl list spaces
   List all spaces managed by thothctl
 ```
 
+### Show Space Configuration
+
+```
+Usage: thothctl space show SPACE_NAME
+
+  Show space configuration summary
+```
+
 ### List Projects with Space Information
 
 ```
@@ -97,6 +105,14 @@ thothctl list spaces
 
 This displays a list of all spaces with their project counts.
 
+### Showing Space Configuration
+
+```bash
+thothctl space show platform-team
+```
+
+This displays a full summary of the space including VCS provider, Terraform registry, orchestration tool, governance policies, associated projects, and credentials status.
+
 ### Listing Projects with Space Information
 
 ```bash

{thothctl-0.18.0 → thothctl-0.18.2}/docs/mcp.md

@@ -126,104 +126,141 @@ With the MCP server running and registered with Amazon Q, you can use natural la
 - "Initialize a new project with ThothCTL"
 - "Detect drift in my production infrastructure filtered by env=prod"
 - "Check if my terraform code has drifted and analyze the risk with AI"
-## Available Tools
+## Available Tools (22)
 
 The MCP server exposes the following ThothCTL commands as tools:
 
 ### Project Management
-- `thothctl_init_project` - Initialize and setup project configurations
-- `thothctl_remove_project` - Remove a project managed by thothctl
-- `thothctl_get_projects` - Get list of projects managed by thothctl
+| Tool | Description |
+|------|-------------|
+| `thothctl_init_project` | Initialize a new project (terraform, tofu, cdkv2, terragrunt, custom) |
+| `thothctl_remove_project` | Remove a project from local tracking |
+| `thothctl_list_projects` | List all projects managed by thothctl |
+| `thothctl_project_bootstrap` | Bootstrap existing projects with ThothCTL support |
+| `thothctl_project_cleanup` | Clean up residual files and directories |
+| `thothctl_project_convert` | Convert project to template or between formats |
+| `thothctl_project_upgrade` | Upgrade project scaffold from remote template |
 
 ### Space Management
-- `thothctl_init_space` - Initialize and setup space configurations
-- `thothctl_remove_space` - Remove a space managed by thothctl
-- `thothctl_get_spaces` - Get list of spaces managed by thothctl
-- `thothctl_get_projects_in_space` - Get list of projects in a specific space
-
-### Listing
-- `thothctl_list_projects` - List projects managed by thothctl locally
-- `thothctl_list_spaces` - List spaces managed by thothctl locally
-
-### Infrastructure Management
-- `thothctl_scan` - Scan infrastructure code for security issues
-- `thothctl_inventory` - Create Inventory for the iac composition
-- `thothctl_generate` - Generate IaC from rules, use cases, and components
-- `thothctl_document` - Initialize and setup project documentation
-- `thothctl_check` - Check infrastructure code for compliance
-- `thothctl_project` - Convert, clean up and manage the current project
-
-### Drift Detection
-- `thothctl_drift_detection` - Detect infrastructure drift with tag filtering, policy enforcement, coverage trending, and AI analysis
-
-  **Parameters:**
-  ```json
-  {
-    "directory": "./terraform",
-    "recursive": true,
-    "tftool": "tofu",
-    "filter_tags": "env=prod,team=platform",
-    "ai_provider": "ollama",
-    "ai_model": "llama3",
-    "project_name": "my-infra"
-  }
-  ```
-
-  | Parameter | Type | Default | Description |
-  |-----------|------|---------|-------------|
-  | `directory` | string | `"."` | Path to IaC directory |
-  | `recursive` | bool | `false` | Scan subdirectories |
-  | `tftool` | string | `"tofu"` | `terraform` or `tofu` |
-  | `filter_tags` | string | `null` | Filter by tags: `env=prod,team=*` |
-  | `ai_provider` | string | `null` | AI provider: `openai`, `bedrock`, `azure`, `ollama` |
-  | `ai_model` | string | `null` | Model override: `gpt-4`, `llama3` |
-  | `project_name` | string | `null` | Project name for history tracking |
-
-  **Response includes:**
-  - Drift summary with drifted resources, severity, and tags
-  - Policy evaluation (blocked, ignored, auto-accepted resources)
-  - Coverage trend (improving/degrading/stable with delta)
-  - AI analysis with risk score and recommendations (when `ai_provider` is set)
-
-  For full documentation, see the [Drift Detection Documentation](./framework/commands/check/drift-detection.md).
+| Tool | Description |
+|------|-------------|
+| `thothctl_init_space` | Initialize a new space |
+| `thothctl_remove_space` | Remove a space |
+| `thothctl_list_spaces` | List all spaces |
+| `thothctl_get_projects_in_space` | Get projects in a specific space |
+
+### Security & Compliance
+| Tool | Description |
+|------|-------------|
+| `thothctl_scan_iac` | Scan IaC for security issues (Checkov, Trivy, KICS, OPA) |
+| `thothctl_check_environment` | Check development environment tools |
+| `thothctl_check_iac` | Check IaC artifacts (plans, structure) |
+| `thothctl_check_project` | Validate project structure |
+
+### Cost & Drift Analysis
+| Tool | Description |
+|------|-------------|
+| `thothctl_cost_analysis` | Estimate AWS costs from Terraform plans or CloudFormation templates |
+| `thothctl_drift_detection` | Detect infrastructure drift with tag filtering, policy enforcement, and AI analysis |
+
+### AI-Powered Review
+| Tool | Description |
+|------|-------------|
+| `thothctl_ai_review` | Multi-mode AI security analysis: analyze, decide, improve, orchestrate |
+
+### Infrastructure Tooling
+| Tool | Description |
+|------|-------------|
+| `thothctl_inventory_iac` | Create IaC composition inventory |
+| `thothctl_document_iac` | Generate documentation for IaC projects |
+| `thothctl_generate_stacks` | Generate infrastructure stacks |
+| `thothctl_list_templates` | List available templates from VCS providers |
 
 ### Utility
-- `thothctl_version` - Get ThothCTL version
-
-### AI Review
-- `thothctl_ai_review` - AI-powered security analysis and code review for IaC
-
-  **Modes:**
-  | Mode | Description |
-  |------|-------------|
-  | `analyze` | Run AI security analysis on scan results or directory |
-  | `decide` | Auto-decide on a PR (approve/reject/request-changes) |
-  | `improve` | Generate actionable code fixes for findings |
-  | `orchestrate` | Run multiple specialized agents in parallel |
-
-  **Parameters:**
-  ```json
-  {
-    "directory": "./terraform",
-    "provider": "bedrock_agent",
-    "model": "anthropic.claude-sonnet-4-20250514",
-    "mode": "analyze",
-    "scan_results": "./Reports",
-    "severity": "high",
-    "agents": ["security", "architecture", "fix", "decision"]
-  }
-  ```
-
-  For full documentation, see the [AI Agent Documentation](./framework/commands/ai-review/README.md).
+| Tool | Description |
+|------|-------------|
+| `thothctl_version` | Get ThothCTL version |
+| `thothctl_upgrade` | Upgrade thothctl to latest version |
+
+---
+
+### Tool Details
+
+#### `thothctl_cost_analysis`
+
+Estimate AWS infrastructure costs from Terraform plans or CloudFormation templates.
+
+```json
+{
+  "recursive": true
+}
+```
+
+| Parameter | Type | Default | Description |
+|-----------|------|---------|-------------|
+| `recursive` | bool | `false` | Search recursively for plan files |
+
+#### `thothctl_drift_detection`
+
+Detect infrastructure drift with tag filtering, policy enforcement, coverage trending, and AI-powered analysis.
+
+```json
+{
+  "recursive": true,
+  "tftool": "tofu",
+  "filter_tags": "env=prod,team=platform",
+  "ai_provider": "ollama",
+  "ai_model": "llama3"
+}
+```
+
+| Parameter | Type | Default | Description |
+|-----------|------|---------|-------------|
+| `recursive` | bool | `false` | Scan subdirectories |
+| `tftool` | string | `"tofu"` | `terraform` or `tofu` |
+| `filter_tags` | string | `null` | Filter by tags: `env=prod,team=*` |
+| `ai_provider` | string | `null` | AI provider: `openai`, `bedrock`, `azure`, `ollama` |
+| `ai_model` | string | `null` | Model override: `gpt-4`, `llama3` |
+
+#### `thothctl_ai_review`
+
+AI-powered security analysis and code review for Infrastructure as Code.
+
+```json
+{
+  "provider": "ollama",
+  "mode": "analyze",
+  "severity": "high",
+  "agents": ["security", "architecture", "fix"]
+}
+```
+
+| Parameter | Type | Default | Description |
+|-----------|------|---------|-------------|
+| `provider` | string | — | `openai`, `bedrock`, `azure`, `ollama` |
+| `mode` | string | `"analyze"` | `analyze`, `decide`, `improve`, `orchestrate` |
+| `severity` | string | — | Min severity for fix generation (improve mode) |
+| `agents` | array | all | Agents to run in orchestrate mode |
 
 ## Architecture
 
-The MCP server follows the HTTP-based MCP protocol:
+ThothCTL MCP exposes two server modes:
+
+```
+src/thothctl/services/mcp/
+├── stdio_server.py          ← stdio mode (Kiro, Amazon Q, Claude Code, Copilot)
+└── simple_http_server.py    ← HTTP mode (network integrations, CI/CD)
+```
+
+**Stdio mode** (`thothctl mcp server --stdio`):
+- Used by AI coding assistants via MCP protocol over stdin/stdout
+- Each tool maps to a subprocess call to the thothctl CLI
+- 22 tools at full feature parity
 
-1. The LLM requests available tools via a POST to `/tools`
-2. The server responds with a list of available tools and their parameters
-3. The LLM executes a tool via a POST to `/execute` with the tool name and parameters
-4. The server executes the corresponding ThothCTL command and returns the results
+**HTTP mode** (`thothctl mcp server -p 8080`):
+- REST endpoints: `GET /tools`, `POST /execute`, `GET /health`
+- CORS-enabled for browser/network integrations
+- Same 22 tools via subprocess execution
 
 ## Space Management
 

thothctl-0.18.2/src/thothctl/commands/space/commands/show.py

@@ -0,0 +1,101 @@
+"""Show space configuration summary."""
+from pathlib import Path
+
+import click
+import toml
+from rich.console import Console
+from rich.panel import Panel
+from rich.table import Table
+from rich import box
+
+from ....common.common import list_spaces, get_projects_in_space
+from ....core.commands import ClickCommand
+from ....core.cli_ui import CliUI
+
+
+ACTIVE_SPACE_FILE = Path.home() / ".thothcf" / "active_space"
+
+
+class ShowSpaceCommand(ClickCommand):
+    """Command to display a space's full configuration summary."""
+
+    def __init__(self):
+        super().__init__()
+        self.ui = CliUI()
+        self.console = Console()
+
+    def validate(self, space_name: str, **kwargs) -> bool:
+        spaces = list_spaces()
+        if space_name not in spaces:
+            self.ui.print_error(f"Space '{space_name}' does not exist")
+            self.ui.print_info(f"Available spaces: {', '.join(spaces) if spaces else 'none'}")
+            raise ValueError(f"Space '{space_name}' does not exist")
+        return True
+
+    def _execute(self, space_name: str, **kwargs) -> None:
+        config_path = Path.home() / ".thothcf" / "spaces.toml"
+        config = toml.load(config_path)
+        space = config["spaces"][space_name]
+
+        # Check if this is the active space
+        active_space = ""
+        if ACTIVE_SPACE_FILE.exists():
+            active_space = ACTIVE_SPACE_FILE.read_text(encoding="utf-8").strip()
+        is_active = space_name == active_space
+
+        # Header
+        status = "🟢 ACTIVE" if is_active else "⚪ INACTIVE"
+        self.console.print(Panel(
+            f"[bold]{space.get('name', space_name)}[/bold] — {space.get('description', 'No description')}\n"
+            f"Status: {status}  |  Created: {space.get('created_at', 'unknown')[:10]}",
+            title="🌐 Space Configuration",
+            border_style="cyan",
+        ))
+
+        # Configuration table
+        table = Table(box=box.ROUNDED, show_header=True, header_style="bold cyan")
+        table.add_column("Section", style="bold")
+        table.add_column("Setting")
+        table.add_column("Value")
+
+        # VCS
+        vcs = space.get("version_control", {})
+        table.add_row("Version Control", "Provider", vcs.get("provider", "—"))
+
+        # Terraform
+        tf = space.get("terraform", {})
+        table.add_row("Terraform", "Registry", tf.get("registry", "—"))
+        table.add_row("", "Auth Method", tf.get("auth_method", "—"))
+
+        # Orchestration
+        orch = space.get("orchestration", {})
+        table.add_row("Orchestration", "Tool", orch.get("tool", "—"))
+
+        # Governance
+        gov = space.get("governance", {})
+        if gov:
+            table.add_row("Governance", "Policy Repo", gov.get("policy_repo", "—"))
+
+        self.console.print(table)
+
+        # Projects in this space
+        projects = get_projects_in_space(space_name)
+        if projects:
+            self.console.print(f"\n[bold]📦 Projects ({len(projects)}):[/bold]")
+            for p in projects:
+                self.console.print(f"  • {p}")
+        else:
+            self.console.print("\n[dim]No projects in this space.[/dim]")
+
+        # Credentials status
+        creds_path = Path.home() / ".thothcf" / "spaces" / space_name / "credentials"
+        if creds_path.exists():
+            cred_files = list(creds_path.iterdir())
+            self.console.print(f"\n[bold]🔒 Credentials:[/bold] {len(cred_files)} stored (encrypted)")
+        else:
+            self.console.print("\n[dim]🔒 No credentials configured.[/dim]")
+
+
+cli = ShowSpaceCommand.as_click_command(help="Show space configuration summary")(
+    click.argument("space_name"),
+)

{thothctl-0.18.0 → thothctl-0.18.2}/src/thothctl/commands/space/commands/update.py

@@ -17,15 +17,15 @@ class UpdateSpaceCommand(ClickCommand):
         super().__init__()
         self.ui = CliUI()
 
-    def validate(self, space_name: str, description, vcs_provider, orchestration_tool, terraform_registry, **kwargs) -> bool:
+    def validate(self, space_name: str, description, vcs_provider, orchestration_tool, terraform_registry, policy_repo, **kwargs) -> bool:
         spaces = list_spaces()
         if space_name not in spaces:
             raise ValueError(f"Space '{space_name}' does not exist")
-        if not any([description, vcs_provider, orchestration_tool, terraform_registry]):
-            raise ValueError("Provide at least one option to update (--description, --vcs-provider, --orchestration-tool, --terraform-registry)")
+        if not any([description, vcs_provider, orchestration_tool, terraform_registry, policy_repo]):
+            raise ValueError("Provide at least one option to update (--description, --vcs-provider, --orchestration-tool, --terraform-registry, --policy-repo)")
         return True
 
-    def _execute(self, space_name: str, description, vcs_provider, orchestration_tool, terraform_registry, **kwargs) -> None:
+    def _execute(self, space_name: str, description, vcs_provider, orchestration_tool, terraform_registry, policy_repo, **kwargs) -> None:
         config_path = Path.home() / ".thothcf" / "spaces.toml"
         with open(config_path, mode="rt", encoding="utf-8") as fp:
             config = toml.load(fp)
@@ -40,6 +40,8 @@ class UpdateSpaceCommand(ClickCommand):
             space.setdefault("orchestration", {})["tool"] = orchestration_tool
         if terraform_registry is not None:
             space.setdefault("terraform", {})["registry"] = terraform_registry
+        if policy_repo is not None:
+            space.setdefault("governance", {})["policy_repo"] = policy_repo
 
         space["updated_at"] = datetime.now().isoformat()
 
@@ -69,4 +71,9 @@ cli = UpdateSpaceCommand.as_click_command(help="Update an existing space's confi
         help="Terraform registry URL",
         default=None,
     ),
+    click.option(
+        "-pr", "--policy-repo",
+        help="Git repository URL or local path for organization-level IaC policies",
+        default=None,
+    ),
 )

thothctl-0.18.2/src/thothctl/version.py

@@ -0,0 +1,2 @@
+"""Version module."""
+__version__ = "0.18.2"