import sys
import os
sys.path.insert(0, 'Gemini_Swarm_Core/scripts')
from _ssh import connect, run_cmd, safe_print

def deep_audit():
    try:
        client = connect()
    except Exception as e:
        safe_print(f"Failed to connect for audit: {e}")
        return

    commands = [
        ("ACTIVE LISTENERS", "ss -tulpn"),
        ("ESTABLISHED CONNECTIONS", "ss -tun"),
        ("RECENT AUTH EVENTS", "tail -n 50 /var/log/auth.log"),
        ("SUDO ATTEMPTS", "grep 'sudo' /var/log/auth.log | tail -n 10"),
        ("SWARM PROCESSES", "ps aux | grep -v grep | grep 'swarm'"),
        ("WORLD WRITABLE FILES IN CORE", "find /opt/Gemini_Swarm_Core -perm -o+w -type f"),
        ("CRON JOBS", "crontab -l || echo 'No crontab for root'"),
        ("FAILED SSH ATTEMPTS (24h)", "grep 'Failed password' /var/log/auth.log | wc -l")
    ]

    for title, cmd in commands:
        safe_print(f"\n--- {title} ---")
        code, out, err = run_cmd(client, cmd)
        if code == 0:
            safe_print(out if out.strip() else "None/Empty")
        else:
            safe_print(f"Error: {err}")

    client.close()

if __name__ == "__main__":
    deep_audit()