Add Phase 2: policy engine, canopy plan, GCP support, CI integration

- Policy engine with budget/carbon/region/tagging/EcoWeight rules
  and block/warn/info severity levels (canopy-policy.yaml)
- Terraform/OpenTofu plan JSON parser
- Pulumi preview JSON parser with auto-detection
- canopy plan command with cost/carbon delta estimation
- GCP provider with static pricing for 21 machine types
- GitHub Actions workflow for PR cost/carbon comments
- GitLab CI template
- 52 new tests (110 total)

Author: mahabubul470

.github/workflows/canopy-plan.yml

@@ -0,0 +1,153 @@
+name: Canopy Plan
+
+on:
+  pull_request:
+    branches: [main]
+
+permissions:
+  pull-requests: write
+  contents: read
+
+jobs:
+  canopy-plan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install Canopy
+        run: pip install -e .
+
+      - name: Setup Terraform
+        uses: hashicorp/setup-terraform@v3
+        with:
+          terraform_wrapper: false
+
+      - name: Terraform Init & Plan
+        id: tf-plan
+        working-directory: ${{ inputs.working_directory || '.' }}
+        env:
+          AWS_ACCESS_KEY_ID: ${{ secrets.AWS_ACCESS_KEY_ID }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
+          AWS_DEFAULT_REGION: ${{ vars.AWS_DEFAULT_REGION || 'us-east-1' }}
+        run: |
+          if [ -f "main.tf" ] || [ -f "*.tf" ]; then
+            terraform init -input=false
+            terraform plan -out=tfplan -input=false
+            terraform show -json tfplan > plan.json
+            echo "has_plan=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "has_plan=false" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Run Canopy Plan
+        id: canopy
+        if: steps.tf-plan.outputs.has_plan == 'true'
+        working-directory: ${{ inputs.working_directory || '.' }}
+        run: |
+          set +e
+          OUTPUT=$(canopy plan plan.json --output json 2>&1)
+          EXIT_CODE=$?
+          echo "exit_code=$EXIT_CODE" >> "$GITHUB_OUTPUT"
+
+          # Write output for the comment step
+          echo "$OUTPUT" > canopy-output.json
+
+          # Generate markdown summary
+          python3 -c "
+          import json, sys
+
+          try:
+              data = json.loads(open('canopy-output.json').read())
+          except (json.JSONDecodeError, FileNotFoundError):
+              print('Canopy plan produced no parseable output.')
+              sys.exit(0)
+
+          summary = data.get('summary', {})
+          resources = data.get('resources', [])
+          violations = data.get('violations', [])
+
+          lines = ['## Canopy Plan — Cost & Carbon Impact', '']
+
+          if resources:
+              lines.append('| Resource | Action | Instance | Cost/mo | Cost Delta | Carbon/mo | Carbon Delta |')
+              lines.append('|----------|--------|----------|---------|------------|-----------|--------------|')
+              for r in resources:
+                  cost_d = r.get('cost_delta_usd', 0)
+                  carbon_d = r.get('carbon_delta_kg', 0)
+                  cost_sign = '+' if cost_d > 0 else ''
+                  carbon_sign = '+' if carbon_d > 0 else ''
+                  lines.append(
+                      f\"| \`{r['address']}\` | {r['action'].upper()} | {r.get('instance_type') or '—'} \"
+                      f\"| \\\${r.get('monthly_cost_usd', 0):,.2f} | {cost_sign}\\\${cost_d:,.2f} \"
+                      f\"| {r.get('monthly_carbon_kg_co2', 0):,.1f} kg | {carbon_sign}{carbon_d:,.1f} kg |\"
+                  )
+              lines.append('')
+
+          total_cost = summary.get('total_monthly_cost_usd', 0)
+          cost_delta = summary.get('total_cost_delta_usd', 0)
+          total_carbon = summary.get('total_monthly_carbon_kg', 0)
+          carbon_delta = summary.get('total_carbon_delta_kg', 0)
+          cost_sign = '+' if cost_delta > 0 else ''
+          carbon_sign = '+' if carbon_delta > 0 else ''
+
+          lines.append(f'**Total:** \\\${total_cost:,.2f}/mo ({cost_sign}\\\${cost_delta:,.2f}) | {total_carbon:,.1f} kg CO₂/mo ({carbon_sign}{carbon_delta:,.1f} kg)')
+          lines.append('')
+
+          if violations:
+              lines.append('### Policy Violations')
+              lines.append('')
+              for v in violations:
+                  icon = '🚫' if v['severity'] == 'block' else '⚠️' if v['severity'] == 'warn' else 'ℹ️'
+                  lines.append(f'- {icon} **{v[\"severity\"].upper()}** ({v[\"policy_name\"]}): {v[\"message\"]}')
+              lines.append('')
+
+          lines.append('---')
+          lines.append('*Generated by [Canopy](https://github.com/mahabubul470/canopy-cloud)*')
+
+          with open('canopy-comment.md', 'w') as f:
+              f.write('\n'.join(lines))
+          " 2>&1 || true
+
+      - name: Comment on PR
+        if: steps.tf-plan.outputs.has_plan == 'true'
+        uses: actions/github-script@v7
+        with:
+          script: |
+            const fs = require('fs');
+            const commentPath = '${{ inputs.working_directory || '.' }}/canopy-comment.md';
+            let body = '## Canopy Plan\n\nNo cost/carbon impact detected.';
+            try {
+              body = fs.readFileSync(commentPath, 'utf8');
+            } catch (e) {}
+
+            // Find existing Canopy comment
+            const { data: comments } = await github.rest.issues.listComments({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: context.issue.number,
+            });
+            const existing = comments.find(c => c.body.includes('Canopy Plan'));
+
+            if (existing) {
+              await github.rest.issues.updateComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                comment_id: existing.id,
+                body: body,
+              });
+            } else {
+              await github.rest.issues.createComment({
+                owner: context.repo.owner,
+                repo: context.repo.repo,
+                issue_number: context.issue.number,
+                body: body,
+              });
+            }
+
+      - name: Fail on blocking violations
+        if: steps.canopy.outputs.exit_code == '1'
+        run: exit 1

.gitlab-ci.yml

@@ -0,0 +1,37 @@
+stages:
+  - plan
+
+canopy-plan:
+  stage: plan
+  image: python:3.12-slim
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+  variables:
+    AWS_DEFAULT_REGION: ${AWS_DEFAULT_REGION:-us-east-1}
+  before_script:
+    - pip install -e .
+    - |
+      if command -v terraform &> /dev/null; then
+        echo "Terraform already installed"
+      else
+        apt-get update -qq && apt-get install -y -qq unzip curl > /dev/null
+        curl -fsSL https://releases.hashicorp.com/terraform/1.9.0/terraform_1.9.0_linux_amd64.zip -o tf.zip
+        unzip -q tf.zip -d /usr/local/bin && rm tf.zip
+      fi
+  script:
+    - |
+      if [ -f "main.tf" ] || ls *.tf 1>/dev/null 2>&1; then
+        terraform init -input=false
+        terraform plan -out=tfplan -input=false
+        terraform show -json tfplan > plan.json
+        canopy plan plan.json --output json > canopy-output.json || true
+        echo "--- Canopy Plan Results ---"
+        cat canopy-output.json | python3 -m json.tool
+      else
+        echo "No Terraform files found, skipping."
+      fi
+  artifacts:
+    paths:
+      - canopy-output.json
+    when: always
+    expire_in: 7 days

canopy/cli/main.py

@@ -130,12 +130,154 @@ def audit(
         )
 
 
+SEVERITY_COLORS: dict[str, str] = {
+    "block": "bold red",
+    "warn": "yellow",
+    "info": "blue",
+}
+
+
 @app.command()
 def plan(
-    stack: Annotated[str, typer.Argument(help="IaC stack to analyze")] = ".",
+    plan_file: Annotated[str, typer.Argument(help="Terraform/Pulumi plan JSON file")],
+    source: Annotated[str, typer.Option(help="IaC source (auto, terraform, pulumi)")] = "auto",
+    policy: Annotated[str | None, typer.Option(help="Path to canopy-policy.yaml")] = None,
+    region: Annotated[str, typer.Option(help="Default region for resources")] = "us-east-1",
+    output: Annotated[str, typer.Option(help="Output format (table, json)")] = "table",
 ) -> None:
     """Preview cost and carbon impact of infrastructure changes."""
-    console.print("[yellow]canopy plan is coming in v0.2[/yellow]")
+    import json as json_mod
+
+    from canopy.engine.iac.pulumi import parse_preview_dict
+    from canopy.engine.iac.terraform import parse_plan_json
+    from canopy.engine.plan import estimate_plan
+    from canopy.engine.policy import load_policy
+
+    plan_path = Path(plan_file)
+    if not plan_path.is_file():
+        console.print(f"[red]Plan file not found: {plan_file}[/red]")
+        raise typer.Exit(1)
+
+    # Auto-detect IaC source or use explicit override
+    if source == "auto":
+        raw = json_mod.loads(plan_path.read_text(encoding="utf-8"))
+        if "resource_changes" in raw:
+            parsed = parse_plan_json(plan_path)
+        elif "steps" in raw:
+            parsed = parse_preview_dict(raw)
+        else:
+            console.print("[red]Could not detect plan format. Use --source.[/red]")
+            raise typer.Exit(1)
+    elif source == "pulumi":
+        raw = json_mod.loads(plan_path.read_text(encoding="utf-8"))
+        parsed = parse_preview_dict(raw)
+    else:
+        parsed = parse_plan_json(plan_path)
+
+    pol = load_policy(Path(policy) if policy else None)
+    estimate = estimate_plan(parsed, policy=pol, default_region=region)
+
+    if output == "json":
+        data = {
+            "source": estimate.source,
+            "resources": [r.model_dump(mode="json") for r in estimate.resources],
+            "violations": [v.model_dump(mode="json") for v in estimate.violations],
+            "summary": {
+                "total_monthly_cost_usd": round(estimate.total_monthly_cost_usd, 2),
+                "total_cost_delta_usd": round(estimate.total_cost_delta_usd, 2),
+                "total_monthly_carbon_kg": round(estimate.total_monthly_carbon_kg, 3),
+                "total_carbon_delta_kg": round(estimate.total_carbon_delta_kg, 3),
+            },
+        }
+        console.print_json(json_mod.dumps(data, indent=2, default=str))
+        return
+
+    if not estimate.resources:
+        console.print("[yellow]No compute resource changes found in plan.[/yellow]")
+        return
+
+    # Resource changes table
+    table = Table(title="Infrastructure Changes — Cost & Carbon Impact", show_lines=True)
+    table.add_column("Resource", style="cyan")
+    table.add_column("Action")
+    table.add_column("Instance", justify="center")
+    table.add_column("Region")
+    table.add_column("Cost/mo", justify="right", style="yellow")
+    table.add_column("Cost Delta", justify="right")
+    table.add_column("Carbon/mo", justify="right", style="green")
+    table.add_column("Carbon Delta", justify="right")
+
+    action_colors: dict[str, str] = {
+        "create": "green",
+        "update": "yellow",
+        "delete": "red",
+        "no-op": "dim",
+    }
+
+    for r in estimate.resources:
+        a_color = action_colors.get(r.action.value, "white")
+        cost_delta_str = _format_delta(r.cost_delta_usd, "$", 2)
+        carbon_delta_str = _format_delta(r.carbon_delta_kg, "", 1, " kg")
+
+        table.add_row(
+            r.address,
+            f"[{a_color}]{r.action.value.upper()}[/{a_color}]",
+            r.instance_type or "—",
+            r.region or "—",
+            f"${r.monthly_cost_usd:,.2f}",
+            cost_delta_str,
+            f"{r.monthly_carbon_kg_co2:,.1f} kg",
+            carbon_delta_str,
+        )
+
+    console.print(table)
+
+    # Summary line
+    console.print()
+    cost_delta = _format_delta(estimate.total_cost_delta_usd, "$", 2)
+    carbon_delta = _format_delta(estimate.total_carbon_delta_kg, "", 1, " kg CO₂")
+    console.print(
+        f"[bold]Total monthly impact:[/bold] "
+        f"[yellow]${estimate.total_monthly_cost_usd:,.2f}/mo[/yellow] ({cost_delta})"
+        f" | [green]{estimate.total_monthly_carbon_kg:,.1f} kg CO₂/mo[/green] ({carbon_delta})"
+    )
+
+    # Policy violations
+    if estimate.violations:
+        console.print()
+        viol_table = Table(title="Policy Violations", show_lines=True)
+        viol_table.add_column("Severity")
+        viol_table.add_column("Policy")
+        viol_table.add_column("Resource", style="cyan")
+        viol_table.add_column("Message")
+
+        for v in estimate.violations:
+            sev_color = SEVERITY_COLORS.get(v.severity.value, "white")
+            viol_table.add_row(
+                f"[{sev_color}]{v.severity.value.upper()}[/{sev_color}]",
+                v.policy_name,
+                v.resource_name or v.resource_id or "—",
+                v.message,
+            )
+
+        console.print(viol_table)
+
+        blocking = sum(1 for v in estimate.violations if v.severity.value == "block")
+        if blocking:
+            console.print(
+                f"\n[bold red]{blocking} blocking violation(s)"
+                f" — this plan should not be applied.[/bold red]"
+            )
+            raise typer.Exit(1)
+
+
+def _format_delta(value: float, prefix: str, decimals: int, suffix: str = "") -> str:
+    """Format a delta value with color and sign."""
+    if abs(value) < 0.005:
+        return "[dim]—[/dim]"
+    if value > 0:
+        return f"[red]+{prefix}{value:,.{decimals}f}{suffix}[/red]"
+    return f"[green]-{prefix}{abs(value):,.{decimals}f}{suffix}[/green]"
 
 
 @app.command()

canopy/engine/audit.py

@@ -8,6 +8,7 @@
 from canopy.engine.detectors import detect_idle, detect_region_move, detect_rightsize
 from canopy.engine.providers.aws import AWSProvider
 from canopy.engine.providers.base import CloudProvider
+from canopy.engine.providers.gcp import GCPProvider
 from canopy.models.core import EcoWeight, Recommendation, SavingsSummary
 
 # Default budget allocations when no policy is configured
@@ -18,6 +19,7 @@
 def get_provider(name: str) -> CloudProvider:
     providers: dict[str, type[CloudProvider]] = {
         "aws": AWSProvider,
+        "gcp": GCPProvider,
     }
     provider_cls = providers.get(name)
     if not provider_cls:

canopy/engine/iac/__init__.py

@@ -0,0 +1 @@
+"""Infrastructure as Code parsers for Canopy."""