thothctl 0.18.3__tar.gz → 0.18.4__tar.gz

{thothctl-0.18.3 → thothctl-0.18.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: thothctl
-Version: 0.18.3
+Version: 0.18.4
 Summary: A CLI for Developer Control Plane. Accelerate your cloud IaC deployments.
 Project-URL: SourceCode, https://github.com/thothforge/thothctl
 Project-URL: HomePage, https://github.com/thothforge/thothctl

{thothctl-0.18.3 → thothctl-0.18.4}/docs/framework/commands/check/check_project_iac.md

@@ -19,6 +19,7 @@ Options:
                                   Project type: stack or module [default: stack]
   --org-policy TEXT               Organization policy source (Git URL or local path)
   --enforcement [soft|hard]       Enforcement mode: soft (report) or hard (fail pipeline)
+  --skip-org-policy               Skip organizational policy check (project exceptions)
   --help                          Show this message and exit.
 ```
 
@@ -26,9 +27,52 @@ Options:
 
 ThothCTL can enforce organizational standards that projects **cannot override**. This ensures all projects in your organization follow the same structure, naming, and tagging rules — regardless of what individual `.thothcf.toml` files contain.
 
+### Policy Resolution Order
+
+ThothCTL resolves the org policy source in this order:
+
+| Priority | Source | Example |
+|----------|--------|---------|
+| 1 | `--org-policy` flag | `--org-policy https://github.com/myorg/policies.git` |
+| 2 | `THOTH_ORG_POLICY` env var | `export THOTH_ORG_POLICY=https://github.com/myorg/policies.git` |
+| 3 | **Active space's `governance.policy_repo`** | Set via `thothctl space update <name> --policy-repo <url>` |
+| 4 | None (skip org policy) | No org rules applied |
+
+### Space Integration
+
+When a space is active and has a `policy_repo` configured, organizational rules are loaded **automatically** — no flags or env vars needed:
+
+```bash
+# 1. Configure your space with the org policy repo
+thothctl space update platform-team --policy-repo https://github.com/myorg/org-policies.git
+
+# 2. Activate the space
+thothctl space activate platform-team
+
+# 3. Run check — org rules load automatically
+thothctl check project iac -p stack
+
+# Output:
+# 📜 Loading org policy from: /home/user/.thothcf/.policy_cache/abc123
+# ✅ Organization policy check passed
+```
+
+### Skipping Org Policy (Project Exceptions)
+
+Projects that have explicit exceptions from organizational rules can skip the check:
+
+```bash
+thothctl check project iac -p stack --skip-org-policy
+```
+
+This is useful for:
+- Experimental/prototype projects not yet conforming to standards
+- Legacy projects with approved exceptions
+- Third-party imported projects
+
 ### How It Works
 
-1. Set `THOTH_ORG_POLICY` to your org policy Git repo (or pass `--org-policy`)
+1. ThothCTL resolves the policy source (see resolution order above)
 2. The repo contains `rules/base.toml` + `rules/<project_type>.toml`
 3. ThothCTL merges org rules with project rules — **mandatory org rules cannot be weakened**
 4. Violations are reported with enforcement level (mandatory = fail, recommended = warn)
@@ -36,7 +80,11 @@ ThothCTL can enforce organizational standards that projects **cannot override**.
 ### Usage
 
 ```bash
-# Via env var (CI/CD recommended)
+# Automatic via active space (preferred)
+thothctl space activate platform-team
+thothctl check project iac --enforcement hard
+
+# Via env var (CI/CD)
 export THOTH_ORG_POLICY=https://github.com/myorg/org-policies.git
 thothctl check project iac --enforcement hard
 
@@ -44,11 +92,8 @@ thothctl check project iac --enforcement hard
 export THOTH_ORG_POLICY=https://github.com/myorg/org-policies.git@v1.0
 thothctl check project iac --enforcement hard
 
-# Via flag
+# Via flag (explicit override)
 thothctl check project iac --org-policy /path/to/org-policies --enforcement hard
-
-# Local path (development)
-thothctl check project iac --org-policy ../org-iac-policies
 ```
 
 ### Enforcement Levels

{thothctl-0.18.3 → thothctl-0.18.4}/src/thothctl/commands/inventory/commands/iac.py

@@ -52,6 +52,7 @@ class IaCInvCommand(ClickCommand):
         framework_type: str = "auto",
         complete: bool = False,
         check_providers: bool = False,
+        check_provider_versions: bool = False,
         check_schema_compatibility: bool = False,
         provider_tool: str = "tofu",
         project_name: Optional[str] = None,
@@ -101,7 +102,7 @@ class IaCInvCommand(ClickCommand):
                         framework_type=framework_type,
                         complete=complete,
                         check_providers=check_providers,
-                        check_provider_versions=check_versions,  # Use unified flag for provider versions too
+                        check_provider_versions=check_provider_versions,
                         check_schema_compatibility=check_schema_compatibility,
                         provider_tool=provider_tool,
                         project_name=project_name,
@@ -181,8 +182,8 @@ class IaCInvCommand(ClickCommand):
                 self.ui.print_info("🔍 Schema compatibility analysis enabled - this may take additional time")
             
             with self.ui.status_spinner("Creating infrastructure inventory..."):
-                # When check_versions is enabled, automatically enable provider checking
-                effective_check_providers = check_providers or check_versions
+                # Enable provider checking if provider versions are requested
+                effective_check_providers = check_providers or check_provider_versions
                 
                 inventory = await self.inventory_service.create_inventory(
                     source_directory=source_dir,
@@ -192,7 +193,7 @@ class IaCInvCommand(ClickCommand):
                     framework_type=framework_type,
                     complete=complete,
                     check_providers=effective_check_providers,
-                    check_provider_versions=check_versions,
+                    check_provider_versions=check_provider_versions,
                     check_schema_compatibility=check_schema_compatibility,
                     provider_tool=provider_tool,
                     project_name=project_name,
@@ -510,7 +511,7 @@ cli = IaCInvCommand.as_click_command(
         "--check-versions",
         is_flag=True,
         default=False,
-        help="Check latest versions for modules and providers (includes provider version checking)",
+        help="Check latest versions for modules",
     ),
     click.option(
         "-updep",
@@ -557,7 +558,14 @@ cli = IaCInvCommand.as_click_command(
         "--check-providers",
         is_flag=True,
         default=False,
-        help="Check and report provider information for each stack (automatically enabled with --check-versions)",
+        help="Check and report provider information for each stack",
+    ),
+    click.option(
+        "--check-provider-versions",
+        "-cpv",
+        is_flag=True,
+        default=False,
+        help="Check latest versions for providers (can be used independently or with --check-versions)",
     ),
     click.option(
         "--check-schema-compatibility",

thothctl-0.18.4/src/thothctl/version.py

@@ -0,0 +1,2 @@
+"""Version module."""
+__version__ = "0.18.4"

thothctl-0.18.3/src/thothctl/version.py

@@ -1,2 +0,0 @@
-"""Version module."""
-__version__ = "0.18.3"