wraith-cli 1.3.0__tar.gz → 1.4.0__tar.gz

wraith_cli-1.4.0/.pre-commit-config.yaml

@@ -0,0 +1,82 @@
+minimum_pre_commit_version: 4.0.0
+default_stages: [pre-commit, pre-push]
+
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v6.0.0
+    hooks:
+      - id: trailing-whitespace
+        args: [--markdown-linebreak-ext=md]
+        exclude: ^src/wraith_cli/assets\.py$
+      - id: end-of-file-fixer
+      - id: check-yaml
+      - id: check-toml
+      - id: check-added-large-files
+      - id: check-case-conflict
+
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.15.9
+    hooks:
+      - id: ruff
+        args: ["--fix", "--exit-non-zero-on-fix"]
+      - id: ruff-format
+
+  - repo: https://github.com/codespell-project/codespell
+    rev: v2.4.2
+    hooks:
+      - id: codespell
+        types_or: [python, markdown, rst]
+
+  - repo: https://github.com/asottile/pyupgrade
+    rev: v3.21.2
+    hooks:
+      - id: pyupgrade
+        args: [--py312-plus]
+
+  - repo: https://github.com/shellcheck-py/shellcheck-py
+    rev: v0.11.0.1
+    hooks:
+      - id: shellcheck
+        args: ["--severity=warning"]
+
+  - repo: https://github.com/Yelp/detect-secrets
+    rev: v1.5.0
+    hooks:
+      - id: detect-secrets
+        args: ["--baseline", ".secrets.baseline"]
+        exclude: package-lock.json
+
+  - repo: local
+    hooks:
+      - id: generate-docs
+        name: Auto-generate CLI Documentation
+        entry: uv run typer src/wraith_cli/main.py utils docs --output docs/usage.md
+        language: system
+        pass_filenames: false
+        always_run: true
+
+      - id: no-raw-print
+        name: Ban raw print() in favor of typer.echo/rich
+        language: pygrep
+        entry: '(?<![\.a-zA-Z0-9_])print\('
+        types: [python]
+
+      - id: ty-check
+        name: ty check
+        entry: uv run ty check
+        language: system
+        types: [python]
+        pass_filenames: false
+
+      - id: pytest-coverage
+        name: pytest-coverage
+        entry: ./bin/run_tests.sh
+        language: system
+        pass_filenames: false
+        always_run: true
+
+      - id: commitizen
+        name: commitizen check
+        entry: uv run cz check --commit-msg-file
+        language: system
+        stages: [commit-msg]

{wraith_cli-1.3.0 → wraith_cli-1.4.0}/CHANGELOG.md

@@ -1,3 +1,5 @@
+## v1.4.0 (2026-04-05)
+
 ## v1.3.0 (2026-04-04)
 
 ## v1.2.0 (2026-04-02)

{wraith_cli-1.3.0 → wraith_cli-1.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: wraith-cli
-Version: 1.3.0
+Version: 1.4.0
 Summary: Sovereign Command Centre for a Ghost Stack
 Project-URL: Homepage, https://git.thomaspeoples.com/thomaspeoples/wraith-cli
 Project-URL: Documentation, https://www.thomaspeoples.com/gitea-repos/wraith-cli/
@@ -64,35 +64,6 @@ Description-Content-Type: text/markdown
 high-level container orchestration and bare-metal reality, providing the "Ghost Factory"
 for instant project scaffolding.
 
----
-
-## 🏗️ The Ghost Factory (New)
-
-The `spawn` command allows you to go from **Idea to Code** in under 5 seconds by
-bleaching a template and provisioning a private Gitea repository automatically.
-
-```bash
-wraith spawn my-new-api
-```
-
-1. **🧬 Clones** your `GHOST_TEMPLATE_URL`.
-2. **🧹 Bleaches** all previous git history.
-3. **🌐 Provisions** a new private repo via the Gitea API.
-4. **🚀 Pushes** the clean stack to your Sovereign remote.
-
----
-
-## 🛠️ Operational Manual
-
-| Command                  | Feature                | Status                                      |
-|--------------------------|------------------------|---------------------------------------------|
-| `wraith spawn <name>`    | **The Ghost Factory**  | 🏗️ Scaffolds new repos via Gitea API.       |
-| `wraith update`          | **Global Update**      | 🟢 PyPI-linked & `uv` powered.              |
-| `wraith ps`              | **Rich Observability** | 🟢 Sovereign Dark styling for Docker.       |
-| `wraith tail <svc>`      | **Flexible Logging**   | 🟢 Supports `--path` & Env Vars.            |
-| `wraith status`          | **Heartbeat**          | 🟢 Monitor OpenViking (Port 1933).          |
-| `wraith runner-reset`    | **Runner Defence**     | 🟢 CI/CD maintenance & registration wipe.  |
-| `wraith --version`       | **Self-Identity**      | 🟢 Eager callback for versioning.           |
 
 ---
 

{wraith_cli-1.3.0 → wraith_cli-1.4.0}/README.md

@@ -11,35 +11,6 @@
 high-level container orchestration and bare-metal reality, providing the "Ghost Factory"
 for instant project scaffolding.
 
----
-
-## 🏗️ The Ghost Factory (New)
-
-The `spawn` command allows you to go from **Idea to Code** in under 5 seconds by
-bleaching a template and provisioning a private Gitea repository automatically.
-
-```bash
-wraith spawn my-new-api
-```
-
-1. **🧬 Clones** your `GHOST_TEMPLATE_URL`.
-2. **🧹 Bleaches** all previous git history.
-3. **🌐 Provisions** a new private repo via the Gitea API.
-4. **🚀 Pushes** the clean stack to your Sovereign remote.
-
----
-
-## 🛠️ Operational Manual
-
-| Command                  | Feature                | Status                                      |
-|--------------------------|------------------------|---------------------------------------------|
-| `wraith spawn <name>`    | **The Ghost Factory**  | 🏗️ Scaffolds new repos via Gitea API.       |
-| `wraith update`          | **Global Update**      | 🟢 PyPI-linked & `uv` powered.              |
-| `wraith ps`              | **Rich Observability** | 🟢 Sovereign Dark styling for Docker.       |
-| `wraith tail <svc>`      | **Flexible Logging**   | 🟢 Supports `--path` & Env Vars.            |
-| `wraith status`          | **Heartbeat**          | 🟢 Monitor OpenViking (Port 1933).          |
-| `wraith runner-reset`    | **Runner Defence**     | 🟢 CI/CD maintenance & registration wipe.  |
-| `wraith --version`       | **Self-Identity**      | 🟢 Eager callback for versioning.           |
 
 ---
 

wraith_cli-1.4.0/docs/usage.md

@@ -0,0 +1,208 @@
+# CLI
+
+Wraith Sovereign CLI: Ghost Stack Orchestrator
+
+**Usage**:
+
+```console
+$ [OPTIONS] COMMAND [ARGS]...
+```
+
+**Options**:
+
+* `--version`: Show version and exit.
+* `--install-completion`: Install completion for the current shell.
+* `--show-completion`: Show completion for the current shell, to copy it or customize the installation.
+* `--help`: Show this message and exit.
+
+**Commands**:
+
+* `status`: Check the heartbeat of the OpenViking Stack.
+* `update`: Sync Wraith with the latest PyPI release.
+* `ps`: List running containers with Sovereign...
+* `tail`: Stream live logs from a specific service.
+* `runner-reset`: Repair hung or offline Gitea Action Runners.
+* `spawn`: 🏭 Scaffold a new repository instantly.
+* `logs`: Unified hardware health and logging portal.
+* `mesh`: Map the Tailscale Ghost Mesh network.
+* `audit`: Execute a Sovereign security and...
+
+## `status`
+
+Check the heartbeat of the OpenViking Stack.
+
+ Polls the configured VIKING_BASE_URL health
+nendpoint to verify if the orchestrator API is responsive.
+
+**Usage**:
+
+```console
+$ status [OPTIONS]
+```
+
+**Options**:
+
+* `--help`: Show this message and exit.
+
+## `update`
+
+Sync Wraith with the latest PyPI release.
+
+Compares local versioning against the remote registry and
+automatically triggers an upgrade via 'uv tool' if a newer
+version is detected.
+
+**Usage**:
+
+```console
+$ update [OPTIONS]
+```
+
+**Options**:
+
+* `--help`: Show this message and exit.
+
+## `ps`
+
+List running containers with Sovereign styling.
+
+Wraps 'docker ps' to provide a high-contrast,
+readable table summarising service names,
+container status, and source images.
+
+**Usage**:
+
+```console
+$ ps [OPTIONS]
+```
+
+**Options**:
+
+* `-a, --all`: Show all containers
+* `--help`: Show this message and exit.
+
+## `tail`
+
+Stream live logs from a specific service.
+
+Connects to a running container to output real-time logs.
+Resolves Compose paths via CLI flags,
+environment variables, or local directory discovery.
+
+Priority:
+   1. Passed flag --path
+   2. Env Var WRAITH_COMPOSE_PATH
+   3. Current Directory
+
+**Usage**:
+
+```console
+$ tail [OPTIONS] SERVICE
+```
+
+**Arguments**:
+
+* `SERVICE`: Service name (e.g., ollama, gitea)  [required]
+
+**Options**:
+
+* `-p, --path PATH`: Path to directory with docker-compose.yml.  [env var: WRAITH_COMPOSE_PATH]
+* `--help`: Show this message and exit.
+
+## `runner-reset`
+
+Repair hung or offline Gitea Action Runners.
+
+Performs a nuclear reset: stops the container,
+purges the local registration data, and restarts
+the service to force a fresh handshake with Gitea.
+
+Requires GITEA_COMPOSE_PATH as an envelope variable
+
+**Usage**:
+
+```console
+$ runner-reset [OPTIONS]
+```
+
+**Options**:
+
+* `--help`: Show this message and exit.
+
+## `spawn`
+
+🏭 Scaffold a new repository instantly.
+
+Atomic scaffolding for new Ghost Stack repositories.
+Clones a template, bleaches git history,
+provisions a remote repository via API, and
+pushes the initial commit in one sequence.
+
+**Usage**:
+
+```console
+$ spawn [OPTIONS] REPO_NAME
+```
+
+**Arguments**:
+
+* `REPO_NAME`: Name of the new Ghost Stack repository  [required]
+
+**Options**:
+
+* `--help`: Show this message and exit.
+
+## `logs`
+
+Unified hardware health and logging portal.
+
+Default behavior provides log-tailing instructions.
+Using the --health flag triggers a deep-dive query
+into the Scrutiny API for SMART drive data and disk temps.
+
+**Usage**:
+
+```console
+$ logs [OPTIONS]
+```
+
+**Options**:
+
+* `--health`: Pull SMART data summary from Scrutiny API
+* `--help`: Show this message and exit.
+
+## `mesh`
+
+Map the Tailscale Ghost Mesh network.
+
+Interrogates the Tailscale daemon (local or containerised)
+to return a list of active peers, their internal IPs, and
+current online/offline status.
+
+**Usage**:
+
+```console
+$ mesh [OPTIONS]
+```
+
+**Options**:
+
+* `--help`: Show this message and exit.
+
+## `audit`
+
+Execute a Sovereign security and compliance scan.
+
+Audits the running stack for common vulnerabilities, including
+containers running with root privileges and exposed ports
+that deviate from the Registry Spec.
+
+**Usage**:
+
+```console
+$ audit [OPTIONS]
+```
+
+**Options**:
+
+* `--help`: Show this message and exit.

{wraith_cli-1.3.0 → wraith_cli-1.4.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "wraith-cli"
-version = "1.3.0"
+version = "1.4.0"
 description = "Sovereign Command Centre for a Ghost Stack"
 readme = "README.md"
 requires-python = ">=3.12"

wraith_cli-1.4.0/src/wraith_cli/assets.py

@@ -0,0 +1,10 @@
+# fmt: off
+# DO NOT EDIT: Trailing whitespace here is structural, 
+# not "useless" linting noise.
+WRAITH_LOGO = r"""
+ ▖  ▖▄▖▄▖▄▖▄▖▖▖  ▄▖▖ ▄▖    
+ ▌▞▖▌▙▘▌▌▐ ▐ ▙▌▄▖▌ ▌ ▐     
+ ▛ ▝▌▌▌▛▌▟▖▐ ▌▌  ▙▖▙▖▟▖    
+                           
+"""
+# fmt: on

{wraith_cli-1.3.0 → wraith_cli-1.4.0}/src/wraith_cli/main.py

@@ -12,10 +12,10 @@ from rich.markdown import Markdown
 from rich.panel import Panel
 from rich.text import Text
 
-from wraith_cli import qol, repo_make, shield
+from wraith_cli import assets, qol, repo_make, shield
 
 SOVEREIGN_ADVISORY = """
-## 🛡️ Sovereign Security Advisory – Please Read
+## Sovereign Security Advisory – Please Read
 
 **Wraith-CLI** is your stack’s nervous system and has sharp edges.
 The commands in this toolkit can wipe runner data (`runner-reset`),
@@ -50,7 +50,12 @@ GITEA_TEMPLATE_URL = os.getenv("GITEA_TEMPLATE_URL")
 
 # --- Callbacks ---
 def version_callback(value: bool):
-    """Callback to handle the --version flag."""
+    """
+    Display the current Wraith-CLI version.
+
+    Checks the local metadata to return the
+    installed version string before exiting the application.
+    """
     if value:
         v = get_local_version("wraith-cli")
         typer.echo(f"Wraith CLI v{v}")
@@ -62,14 +67,7 @@ def print_wraith_welcome():  # pragma: no cover
     console = qol.console
     local_v = get_local_version("wraith-cli")
 
-    wraith_pixel_logo = r"""
-  ▖  ▖▄▖▄▖▄▖▄▖▖▖  ▄▖▖ ▄▖
-  ▌▞▖▌▙▘▌▌▐ ▐ ▙▌▄▖▌ ▌ ▐
-  ▛ ▝▌▌▌▛▌▟▖▐ ▌▌  ▙▖▙▖▟▖
-
-"""
-
-    logo_text = Text(wraith_pixel_logo, style="bold black on white")
+    logo_text = Text(assets.WRAITH_LOGO, style="bold black on white")
     console.print(Align.center(logo_text))
 
     sub_header_markup = (
@@ -79,11 +77,6 @@ def print_wraith_welcome():  # pragma: no cover
     console.print(sub_header, justify="center")
     console.print("\n")
 
-    console.print(
-        Text(f"Wraith Sovereign v{local_v}", style="white"), justify="center"
-    )
-    console.print("\n")
-
     md = Markdown(SOVEREIGN_ADVISORY)
 
     panel = Panel(
@@ -116,6 +109,9 @@ def main(
     """
     [bold green]Wraith-CLI[/bold green]
     The nervous system of the Sovereign Ghost Stack.
+
+    Orchestrate your local infrastructure, manage Gitea repositories,
+    and monitor system-wide health from a single unified entry point.
     """
 
     if ctx.invoked_subcommand is None and not version:
@@ -127,7 +123,12 @@ def main(
 
 @app.command()
 def status():
-    """Check the heartbeat of the OpenViking Stack."""
+    """
+     Check the heartbeat of the OpenViking Stack.
+
+     Polls the configured VIKING_BASE_URL health
+    nendpoint to verify if the orchestrator API is responsive.
+    """
     url = f"{VIKING_URL}/health"
     try:
         response = requests.get(url, timeout=3)
@@ -144,7 +145,13 @@ def status():
 
 @app.command()
 def update():
-    """Check for updates on PyPI and upgrade via uv."""
+    """
+    Sync Wraith with the latest PyPI release.
+
+    Compares local versioning against the remote registry and
+    automatically triggers an upgrade via 'uv tool' if a newer
+    version is detected.
+    """
     try:
         local_v = get_local_version("wraith-cli")
         remote_v = qol.get_latest_version()
@@ -166,7 +173,13 @@ def ps(
         bool, typer.Option("--all", "-a", help="Show all containers")
     ] = False,
 ):
-    """View Docker process list with Sovereign styling."""
+    """
+    List running containers with Sovereign styling.
+
+    Wraps 'docker ps' to provide a high-contrast,
+    readable table summarising service names,
+    container status, and source images.
+    """
     cmd = ["docker", "ps"]
     if all:
         cmd.append("-a")
@@ -198,7 +211,13 @@ def tail(
         ),
     ] = None,
 ):
-    """Tail logs for any service in your stack.
+    """
+    Stream live logs from a specific service.
+
+    Connects to a running container to output real-time logs.
+    Resolves Compose paths via CLI flags,
+    environment variables, or local directory discovery.
+
     Priority:
        1. Passed flag --path
        2. Env Var WRAITH_COMPOSE_PATH
@@ -218,7 +237,15 @@ def tail(
 
 @app.command()
 def runner_reset():
-    """Resets the Gitea Action Runner (Requires GITEA_COMPOSE_PATH)."""
+    """
+    Repair hung or offline Gitea Action Runners.
+
+    Performs a nuclear reset: stops the container,
+    purges the local registration data, and restarts
+    the service to force a fresh handshake with Gitea.
+
+    Requires GITEA_COMPOSE_PATH as an envelope variable
+    """
     if not GITEA_PATH:
         typer.secho("❌ Error: GITEA_COMPOSE_PATH not set in .env", fg="red")
         raise typer.Exit(1)
@@ -249,7 +276,14 @@ def spawn(
         ..., help="Name of the new Ghost Stack repository"
     ),
 ):
-    """🏭 The Gitea Factory: Scaffold a new repository instantly."""
+    """
+    🏭 Scaffold a new repository instantly.
+
+    Atomic scaffolding for new Ghost Stack repositories.
+    Clones a template, bleaches git history,
+    provisions a remote repository via API, and
+    pushes the initial commit in one sequence.
+    """
     if not all([GITEA_API_URL, GITEA_TOKEN, GITEA_TEMPLATE_URL]):
         typer.secho(
             """❌ Missing Environment Variables!
@@ -305,20 +339,32 @@ def logs(
         ),
     ] = False,
 ):
-    """View stack logs or bare-metal health status."""
+    """
+    Unified hardware health and logging portal.
+
+    Default behavior provides log-tailing instructions.
+    Using the --health flag triggers a deep-dive query
+    into the Scrutiny API for SMART drive data and disk temps.
+    """
     if health:
         typer.echo("🔍 Polling Bare-Metal SMART data via Scrutiny...")
         health_table = shield.get_scrutiny_health()
         qol.console.print(health_table)
     else:
         typer.echo(
-            "Use 'wraith tail <service>' for container logs. Pass --health for drive health."
+            "Use 'wraith tail <svc>' for logs. Pass --health for drive health."
         )
 
 
 @app.command()
 def mesh():
-    """Checks Tailscale status and lists active peers in the Ghost Mesh."""
+    """
+    Map the Tailscale Ghost Mesh network.
+
+    Interrogates the Tailscale daemon (local or containerised)
+    to return a list of active peers, their internal IPs, and
+    current online/offline status.
+    """
     typer.echo("🌐 Querying Ghost Mesh (Tailscale)...")
     mesh_table = shield.get_tailscale_mesh()
     qol.console.print(mesh_table)
@@ -327,8 +373,11 @@ def mesh():
 @app.command()
 def audit():
     """
-    Checks for containers running as root or exposed ports not in your
-    Registry Spec.
+    Execute a Sovereign security and compliance scan.
+
+    Audits the running stack for common vulnerabilities, including
+    containers running with root privileges and exposed ports
+    that deviate from the Registry Spec.
     """
     typer.echo("🛡️ Initiating Sovereign Security Audit...")
     audit_table = shield.run_security_audit()

{wraith_cli-1.3.0 → wraith_cli-1.4.0}/src/wraith_cli/shield.py

@@ -1,12 +1,14 @@
 import json
 import os
 import subprocess
+
 import requests
 from rich.table import Table
 
 # Pull from .env, fallback to the Ghost Stack default port
 SCRUTINY_URL = os.getenv("SCRUTINY_URL", "http://127.0.0.1:8090")
 
+
 def get_scrutiny_health() -> Table:
     """Fetches SMART data from the Scrutiny API and formats it.
 
@@ -28,26 +30,32 @@ def get_scrutiny_health() -> Table:
         response = requests.get(f"{SCRUTINY_URL}/api/summary", timeout=5)
         response.raise_for_status()
         data = response.json()
-        
+
         devices = data.get("data", {}).get("summary", {})
         if not devices:
             table.add_row("No devices found.", "-", "-", "-")
             return table
 
-        for wwn, device in devices.items():
+        for _wwn, device in devices.items():
             name = device.get("device", {}).get("name", "Unknown")
             capacity_bytes = device.get("device", {}).get("capacity", 0)
-            capacity_tb = f"{(capacity_bytes / (10**12)):.1f} TB" if capacity_bytes else "Unknown"
-            
+            capacity_tb = (
+                f"{(capacity_bytes / (10**12)):.1f} TB"
+                if capacity_bytes
+                else "Unknown"
+            )
+
             temp = str(device.get("smart", {}).get("temp", "N/A")) + "°C"
             status = device.get("smart", {}).get("status", "Unknown")
-            
+
             # Sovereign styling for status
             status_color = "green" if status.lower() == "passed" else "red"
-            formatted_status = f"[{status_color}]{status.upper()}[/{status_color}]"
-            
+            formatted_status = (
+                f"[{status_color}]{status.upper()}[/{status_color}]"
+            )
+
             table.add_row(name, capacity_tb, temp, formatted_status)
-            
+
     except requests.exceptions.RequestException as e:
         table.add_row(f"[red]API Error: {e}[/red]", "-", "-", "-")
 
@@ -55,11 +63,7 @@ def get_scrutiny_health() -> Table:
 
 
 def get_tailscale_mesh() -> Table:
-    """Pulls Tailscale status via JSON and formats active peers.
-
-    Returns:
-        Table: A rich Table object containing Tailscale mesh peer status.
-    """
+    """Pulls Tailscale status from a Docker container and formats peers."""
     table = Table(
         title="Ghost Mesh (Tailscale)",
         border_style="bright_black",
@@ -70,30 +74,49 @@ def get_tailscale_mesh() -> Table:
     table.add_column("OS")
     table.add_column("Status")
 
+    # The command shifted to target the container
+    # docker exec <container_name> tailscale status --json
+    cmd = ["docker", "exec", "tailscale", "tailscale", "status", "--json"]
+
     try:
         result = subprocess.run(
-            ["tailscale", "status", "--json"],
+            cmd,
             capture_output=True,
             text=True,
             check=True,
         )
+
         data = json.loads(result.stdout)
-        
         peers = data.get("Peer", {})
-        for peer_id, peer_data in peers.items():
+
+        if not peers:
+            table.add_row(
+                "No peers found", "-", "-", "[yellow]Solo Node[/yellow]"
+            )
+            return table
+
+        for peer_data in peers.values():
             hostname = peer_data.get("HostName", "Unknown")
-            ip = peer_data.get("TailscaleIPs", ["Unknown"])[0]
+            ips = peer_data.get("TailscaleIPs", ["Unknown"])
+            ip = ips[0] if ips else "Unknown"
             os_name = peer_data.get("OS", "Unknown")
-            is_online = peer_data.get("Online", False)
 
             status_str = (
                 "[green]Online[/green]"
-                if is_online
+                if peer_data.get("Online")
                 else "[bright_black]Offline[/bright_black]"
             )
 
             table.add_row(hostname, ip, os_name, status_str)
-            
+
+    except subprocess.CalledProcessError:
+        # This triggers if the container 'tailscale' isn't running
+        table.add_row(
+            "[red]Error: Tailscale container not found or stopped[/red]",
+            "-",
+            "-",
+            "-",
+        )
     except Exception as e:
         table.add_row(f"[red]Mesh Error: {e}[/red]", "-", "-", "-")
 
@@ -141,7 +164,7 @@ def run_security_audit() -> Table:
 
         for c in containers:
             name = c["Name"].lstrip("/")
-            
+
             # Check User
             user = c["Config"].get("User", "")
             if not user or user == "0" or user == "root":
@@ -150,7 +173,7 @@ def run_security_audit() -> Table:
             else:
                 user_disp = f"[green]{user}[/green]"
                 is_root = False
-                
+
             # Check Ports (Simplified: grabs bindings)
             ports = c["NetworkSettings"].get("Ports", {})
             exposed = []
@@ -162,13 +185,14 @@ def run_security_audit() -> Table:
                         # Flag if exposed globally (0.0.0.0) vs. locally.
                         if host_ip == "0.0.0.0" or host_ip == "":
                             exposed.append(
-                                f"[yellow]{host_port}->{port} (Global)[/yellow]"
+                                f"[yellow]{host_port}->{port} "
+                                f"(Global)[/yellow]"
                             )
                         else:
                             exposed.append(f"{host_port}->{port}")
-            
+
             port_disp = ", ".join(exposed) if exposed else "Internal Only"
-            
+
             # Determine Verdict
             if is_root and "Global" in port_disp:
                 verdict = "[red]CRITICAL: Root + Global Port[/red]"

{wraith_cli-1.3.0 → wraith_cli-1.4.0}/tests/test_cli.py

@@ -280,7 +280,7 @@ def test_logs_default():
     """Test logs command with no flags."""
     result = runner.invoke(app, ["logs"])
     assert result.exit_code == 0
-    assert "Use 'wraith tail <service>'" in result.stdout
+    assert "Use 'wraith tail <svc>'" in result.stdout
 
 
 @patch("wraith_cli.shield.get_tailscale_mesh")

{wraith_cli-1.3.0 → wraith_cli-1.4.0}/tests/test_shield.py

@@ -1,4 +1,5 @@
 import json
+import subprocess
 from unittest.mock import Mock, patch
 
 import pytest
@@ -91,6 +92,32 @@ def test_get_scrutiny_health_missing_data(mock_get):
     assert "FAILED" in str(cells[3])
 
 
+@patch("wraith_cli.shield.requests.get")
+def test_get_scrutiny_health_missing_smart_data(mock_get):
+    """Test Scrutiny data with missing 'smart' section."""
+    mock_response = Mock()
+    mock_response.json.return_value = {
+        "data": {
+            "summary": {
+                "WWN1": {
+                    "device": {"name": "sdb", "capacity": 2 * 10**12},
+                    # 'smart' key is entirely missing
+                }
+            }
+        }
+    }
+    mock_response.raise_for_status.return_value = None
+    mock_get.return_value = mock_response
+
+    table = get_scrutiny_health()
+    assert len(table.rows) == 1
+    cells = [list(col.cells)[0] for col in table.columns]
+    assert str(cells[0]) == "sdb"
+    assert str(cells[1]) == "2.0 TB"
+    assert str(cells[2]) == "N/A°C"
+    assert "UNKNOWN" in str(cells[3])
+
+
 @patch("wraith_cli.shield.subprocess.run")
 def test_get_tailscale_mesh_success(mock_run):
     """Test successful retrieval of Tailscale mesh data."""
@@ -131,14 +158,80 @@ def test_get_tailscale_mesh_success(mock_run):
 
 
 @patch("wraith_cli.shield.subprocess.run")
-def test_get_tailscale_mesh_error(mock_run):
-    """Test handling of an error when running tailscale command."""
-    mock_run.side_effect = Exception("Command not found")
+def test_get_tailscale_mesh_generic_error(mock_run):
+    """Test handling of a generic error when running tailscale command."""
+    mock_run.side_effect = Exception("Generic error for tailscale")
+
+    table = get_tailscale_mesh()
+    assert len(table.rows) == 1
+    cells = [list(col.cells)[0] for col in table.columns]
+    assert "Mesh Error: Generic error for tailscale" in str(cells[0])
+
+
+@patch("wraith_cli.shield.subprocess.run")
+def test_get_tailscale_mesh_called_process_error(mock_run):
+    """Test handling of subprocess.CalledProcessError for tailscale."""
+    mock_run.side_effect = subprocess.CalledProcessError(1, ["tailscale"])
+
+    table = get_tailscale_mesh()
+    assert len(table.rows) == 1
+    cells = [list(col.cells)[0] for col in table.columns]
+    assert ("Error: Tailscale container not found or stopped"
+            in str(cells[0]))
+
+
+@patch("wraith_cli.shield.subprocess.run")
+def test_get_tailscale_mesh_no_peers(mock_run):
+    """Test Tailscale mesh when no peers are found."""
+    mock_process = Mock()
+    mock_process.stdout = json.dumps({"Peer": {}})  # Empty peers
+    mock_run.return_value = mock_process
 
     table = get_tailscale_mesh()
     assert len(table.rows) == 1
     cells = [list(col.cells)[0] for col in table.columns]
-    assert "Mesh Error: Command not found" in str(cells[0])
+    assert str(cells[0]) == "No peers found"
+    assert "[yellow]Solo Node[/yellow]" in str(cells[3])
+
+
+@patch("wraith_cli.shield.subprocess.run")
+def test_get_tailscale_mesh_empty_ips(mock_run):
+    """Test Tailscale mesh with empty TailscaleIPs list."""
+    mock_process = Mock()
+    mock_process.stdout = json.dumps(
+        {
+            "Peer": {
+                "peer1": {
+                    "HostName": "node1",
+                    "TailscaleIPs": [],  # Empty IPs
+                    "OS": "Linux",
+                    "Online": True,
+                }
+            }
+        }
+    )
+    mock_run.return_value = mock_process
+
+    table = get_tailscale_mesh()
+    assert len(table.rows) == 1
+    cells = [list(col.cells)[0] for col in table.columns]
+    assert str(cells[0]) == "node1"
+    assert str(cells[1]) == "Unknown"
+    assert str(cells[2]) == "Linux"
+    assert "Online" in str(cells[3])
+
+
+@patch("wraith_cli.shield.subprocess.run")
+def test_get_tailscale_mesh_malformed_json(mock_run):
+    """Test Tailscale mesh with malformed JSON output."""
+    mock_process = Mock()
+    mock_process.stdout = "this is not json"
+    mock_run.return_value = mock_process
+
+    table = get_tailscale_mesh()
+    assert len(table.rows) == 1
+    cells = [list(col.cells)[0] for col in table.columns]
+    assert "Mesh Error: Expecting value" in str(cells[0])
 
 
 @patch("wraith_cli.shield.subprocess.run")
@@ -155,9 +248,12 @@ def test_run_security_audit_no_containers(mock_run):
 
 def mock_container_inspect(user, ports):
     """Helper to create a mock container inspect JSON."""
+    config_data = {}
+    if user is not None:
+        config_data["User"] = user
     return {
         "Name": "/test-container",
-        "Config": {"User": user},
+        "Config": config_data,
         "NetworkSettings": {"Ports": ports},
     }
 
@@ -201,6 +297,13 @@ def mock_container_inspect(user, ports):
             "SECURE",
         ),
         ("testuser", {}, "[green]testuser[/green]", "Internal Only", "SECURE"),
+        (
+            None,  # Simulate missing 'User' key in Config
+            {"80/tcp": [{"HostIp": "127.0.0.1", "HostPort": "8080"}]},
+            "[red]ROOT[/red]",
+            "8080->80/tcp",
+            "WARNING: Root Context",
+        ),
     ],
 )
 @patch("wraith_cli.shield.subprocess.run")

{wraith_cli-1.3.0 → wraith_cli-1.4.0}/uv.lock

@@ -1080,7 +1080,7 @@ wheels = [
 
 [[package]]
 name = "wraith-cli"
-version = "1.3.0"
+version = "1.4.0"
 source = { editable = "." }
 dependencies = [
     { name = "python-dotenv" },

wraith_cli-1.3.0/.pre-commit-config.yaml

@@ -1,46 +0,0 @@
-repos:
--   repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.4.0
-    hooks:
-    -   id: trailing-whitespace
-    -   id: end-of-file-fixer
-    -   id: check-yaml
-    -   id: check-added-large-files
-
--   repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.9.6
-    hooks:
-    -  id: ruff
-       args: ["--fix"]
-    -  id: ruff-format
-
-- repo: local
-  hooks:
-    - id: ty
-      name: ty
-      entry: uv run ty check
-      language: system
-      types: [python]
-      pass_filenames: false
-
-- repo: https://github.com/Yelp/detect-secrets
-  rev: v1.5.0
-  hooks:
-    - id: detect-secrets
-      args: ['--baseline', '.secrets.baseline']
-      exclude: package-lock.json
-
--   repo: local
-    hooks:
-    -   id: pytest-coverage
-        name: pytest-coverage
-        entry: ./bin/run_tests.sh
-        language: system
-        pass_filenames: false
-        always_run: true
-
-    -   id: commitizen
-        name: commitizen check
-        entry: uv run cz check --commit-msg-file
-        language: system
-        stages: [commit-msg]

wraith_cli-1.3.0/docs/usage.md

@@ -1,80 +0,0 @@
-# 📖 Operational Usage Guide
-
-**Wraith** is designed to be intuitive and fast. Make a coffee, grab a Hob-Nob, and put down your glass rectangle — it's time to orchestrate.
-
----
-
-## 🕹️ Core Commands
-
-### 1. The Global Manifest
-
-To see all available commands, options, and the Sovereign splash screen:
-
-```bash
-wraith --help
-```
-
-### 2. The Ghost Factory (Scaffolding)
-
-This is the flagship feature. Instead of manual setup, we spawn. This command clones your template, bleaches the history, provisions a Gitea repo, and pushes the initial commit in one atomic action.
-
-```bash
-wraith spawn <project-name>
-```
-
-> **Pro Tip:** Ensure your `GITEA_TOKEN` is set in your `.env` to avoid the manual
-> password hang.
-
-### 3. Stack Observability
-
-Monitor your Sovereign containers without leaving the terminal.
-
-- **Process List:** `wraith ps` — Shows names, status, and images in Sovereign Dark style.
-- **Live Logs:** `wraith tail <service-name>` — Tails logs for a specific container.
-- **Heartbeat:** `wraith status` — Checks if the OpenViking API is responding.
-
----
-
-## 🛠️ Maintenance & Defence
-
-### 🔄 Staying Current
-
-Wraith is self-aware. To check for updates on PyPI and upgrade via `uv`:
-
-```bash
-wraith update
-```
-
-### 🧹 Runner Recovery
-
-If a Gitea Action Runner hangs or goes "Offline" in the UI, use the nuclear option to wipe its registration and restart the service:
-
-```bash
-wraith runner-reset
-```
-
-> *Note: Requires `GITEA_COMPOSE_PATH` to be defined.*
-
----
-
-## 🔐 Configuration
-
-Wraith prioritises environment variables for security. You can define these in a `.env` file in your project root or your global shell profile.
-
-| Variable               | Description                                          | Required For   |
-|------------------------|------------------------------------------------------|----------------|
-| `GITEA_API_URL`        | Your Gitea instance (e.g., `https://git.domain.com`) | `spawn`        |
-| `GITEA_TOKEN`          | Your Personal Access Token (PAT)                     | `spawn`        |
-| `GITEA_TEMPLATE_URL`   | HTTPS URL of your source `ghost-template`            | `spawn`        |
-| `WRAITH_COMPOSE_PATH`  | Path to your main stack directory                    | `ps`, `tail`   |
-| `VIKING_BASE_URL`      | Heartbeat monitoring endpoint                        | `status`       |
-
----
-
-## ⌨️ Advanced Flags
-
-| Flag                                    | Description                              |
-|-----------------------------------------|------------------------------------------|
-| `wraith --version`                      | Print the current installed version.     |
-| `wraith ps --all`                       | Show all containers, including stopped.  |
-| `wraith tail <svc> --path /custom/path` | Override the default Compose path.       |