@atmem/architect 0.0.0-stage → 0.2.0

package/src/runtime/catalog_admin.py

@@ -0,0 +1,70 @@
+"""Explicit, conditional catalog writes for a deployment/operator identity.
+
+End-user API roles have no access to these write APIs. Never print document data.
+"""
+import json
+import re
+import uuid
+import time
+from boto3.dynamodb.types import TypeSerializer
+
+
+def validate_document(value):
+    fields={'id','title','text','allowedSubjects','allowedRegions'}
+    if not isinstance(value,dict) or not fields.issubset(value) or not set(value).issubset(fields|{'sourceId','authorizationExpiresAt'}):raise ValueError('Supply the exact document and ACL fields')
+    if not isinstance(value['id'],str) or not re.fullmatch(r'[A-Za-z0-9_-]{1,128}',value['id']):raise ValueError('Invalid document ID')
+    for key,limit in [('title',500),('text',8000)]:
+        if not isinstance(value[key],str) or not value[key].strip() or len(value[key].encode('utf-8'))>limit:raise ValueError('Invalid document size')
+    for key,pattern in [('allowedSubjects',r'[A-Za-z0-9_-]{1,100}'),('allowedRegions',r'[A-Z]{2}')]:
+        items=value[key]
+        if not isinstance(items,list) or len(items)>100 or not all(isinstance(x,str) and re.fullmatch(pattern,x) for x in items) or len(set(items))!=len(items):raise ValueError('Invalid explicit access list')
+    if 'sourceId' in value or 'authorizationExpiresAt' in value:
+        if not isinstance(value.get('sourceId'),str) or not re.fullmatch(r'[A-Za-z0-9_-]{1,100}',value['sourceId']):raise ValueError('Invalid connector source identity')
+        expiry=value.get('authorizationExpiresAt')
+        if not isinstance(expiry,int) or isinstance(expiry,bool) or not time.time()<expiry<=time.time()+300:raise ValueError('Connector authorization leases must expire within five minutes')
+    return dict(value)
+
+
+def encode(value):
+    serializer=TypeSerializer();return {key:serializer.serialize(item) for key,item in value.items()}
+
+
+def put_document(client,table,document,expected_revision=None):
+    document=validate_document(document);revision=str(uuid.uuid4())
+    item={**document,'recordId':'DOCUMENT#'+document['id'],'kind':'DOCUMENT','revision':revision}
+    put={'TableName':table,'Item':encode(item)}
+    if expected_revision is None:
+        put['ConditionExpression']='attribute_not_exists(recordId)'
+        operations=[{'Put':put},{'Update':{'TableName':table,'Key':{'recordId':{'S':'CATALOG#metadata'}},'UpdateExpression':'SET documentCount = if_not_exists(documentCount, :zero) + :one','ConditionExpression':'attribute_not_exists(documentCount) OR documentCount < :limit','ExpressionAttributeValues':{':zero':{'N':'0'},':one':{'N':'1'},':limit':{'N':'100'}}}}]
+        client.transact_write_items(TransactItems=operations,ClientRequestToken=str(uuid.uuid4()))
+    else:
+        if not isinstance(expected_revision,str) or not expected_revision:raise ValueError('An expected revision is required')
+        client.put_item(**put,ConditionExpression='revision = :expected',ExpressionAttributeValues={':expected':{'S':expected_revision}})
+    return {'id':document['id'],'revision':revision}
+
+
+def delete_document(client,table,document_id,expected_revision):
+    if not isinstance(document_id,str) or not re.fullmatch(r'[A-Za-z0-9_-]{1,128}',document_id) or not isinstance(expected_revision,str) or not expected_revision:raise ValueError('Exact document ID and revision are required')
+    client.transact_write_items(TransactItems=[{'Delete':{'TableName':table,'Key':{'recordId':{'S':'DOCUMENT#'+document_id}},'ConditionExpression':'revision = :expected','ExpressionAttributeValues':{':expected':{'S':expected_revision}}}},{'Update':{'TableName':table,'Key':{'recordId':{'S':'CATALOG#metadata'}},'UpdateExpression':'SET documentCount = documentCount - :one','ConditionExpression':'documentCount >= :one','ExpressionAttributeValues':{':one':{'N':'1'}}}}],ClientRequestToken=str(uuid.uuid4()))
+    return {'id':document_id,'deleted':True}
+
+
+def main():
+    import argparse
+    import boto3
+    from botocore.config import Config
+    parser=argparse.ArgumentParser(description=__doc__)
+    parser.add_argument('--table',required=True);parser.add_argument('--region',required=True);parser.add_argument('--account',required=True)
+    parser.add_argument('--document');parser.add_argument('--delete-id');parser.add_argument('--expected-revision')
+    parser.add_argument('--confirm-write',action='store_true',required=True)
+    args=parser.parse_args()
+    if bool(args.document)==bool(args.delete_id):parser.error('Choose exactly one document file or delete ID')
+    session=boto3.Session(region_name=args.region);config=Config(ignore_configured_endpoint_urls=True,connect_timeout=3,read_timeout=10,retries={'total_max_attempts':2})
+    if session.client('sts',config=config).get_caller_identity()['Account']!=args.account:raise SystemExit('Account mismatch')
+    client=session.client('dynamodb',config=config)
+    if args.document:
+        from pathlib import Path
+        result=put_document(client,args.table,json.loads(Path(args.document).read_text()),args.expected_revision)
+    else:result=delete_document(client,args.table,args.delete_id,args.expected_revision)
+    print(json.dumps(result))
+if __name__=='__main__':main()

package/src/runtime/cloud-sql-proxy-lock.json

@@ -0,0 +1,8 @@
+{
+  "image": "gcr.io/cloud-sql-connectors/cloud-sql-proxy@sha256:7d156a5c466e31596afd6c8ed134f19c207a297418392fdad2686524ca4e7a3c",
+  "version": "2.27.0",
+  "sourceRevision": "6ddead5c3b7c25da0f4c7cadbad6b9ee601b4ffa",
+  "release": "https://github.com/GoogleCloudPlatform/cloud-sql-proxy/releases/tag/v2.27.0",
+  "reviewedAt": "2026-11-10",
+  "boundary": "Maintained upstream dependency, exact registry image digest. Native private-IP/IAM integration requires destination tests. No cloud deployment."
+}

package/src/runtime/cloud-sql-proxy-security-review.json

@@ -0,0 +1,30 @@
+{
+  "format": "atmem-exact-dependency-review-v1",
+  "status": "reviewed-not-affected-by-listed-findings",
+  "reviewedAt": "2026-11-10",
+  "imageIndex": "gcr.io/cloud-sql-connectors/cloud-sql-proxy@sha256:7d156a5c466e31596afd6c8ed134f19c207a297418392fdad2686524ca4e7a3c",
+  "platformManifest": "sha256:adcbb6a16e70236f26902b7d986008df118923558839062f6d26832c5f200078",
+  "platform": "linux/amd64",
+  "binarySha256": "7b04024b125e0b3908fc3f0a18bc6e7fa54a27078228ef5f30885e63a4f1f5d3",
+  "scanner": "govulncheck v1.9.0; binary symbol mode",
+  "findings": [
+    {
+      "id": "GO-2026-5932",
+      "status": "not_affected",
+      "justification": "vulnerable_code_not_present"
+    },
+    {
+      "id": "GO-2026-6860",
+      "status": "not_affected",
+      "justification": "vulnerable_code_not_present"
+    },
+    {
+      "id": "GO-2026-6866",
+      "status": "not_affected",
+      "justification": "vulnerable_code_not_present"
+    }
+  ],
+  "evidence": "specs/028-convergence-evaluation/evidence/20261110-proxy-binary-applicability",
+  "positiveControl": "Same affected Go modules deliberately compiled into an unexecuted Linux binary; all listed issues detected at package and symbol level.",
+  "boundary": "Applies only to the listed findings and exact AMD64 artifact. Module-version inventory remains true. No blanket clean-security, native database/TLS/IAM or deployment claim. Repeat independent review for changed image or new findings."
+}

package/src/runtime/connector_cli.py

@@ -0,0 +1,50 @@
+"""Run a reviewed normalized source contract against the bounded AWS catalog."""
+import argparse
+import hashlib
+import json
+import os
+from pathlib import Path
+import boto3
+from boto3.dynamodb.types import TypeDeserializer
+from botocore.config import Config
+from catalog_admin import put_document,delete_document
+from connector_sync import fetch_snapshot,synchronize
+
+class Checkpoint:
+    def __init__(self,path):self.path=path
+    def load(self,source):
+        if not self.path.exists():return None
+        data=json.loads(self.path.read_text())
+        if data['source']!=source:raise ValueError('Checkpoint source mismatch')
+        return data['value']
+    def save(self,source,value):
+        temporary=self.path.with_suffix('.pending')
+        descriptor=os.open(temporary,os.O_WRONLY|os.O_CREAT|os.O_TRUNC,0o600)
+        with os.fdopen(descriptor,'w') as target:json.dump({'source':source,'value':value},target)
+        temporary.replace(self.path)
+class Store:
+    def __init__(self,client,table):self.client=client;self.table=table;self.decoder=TypeDeserializer()
+    def get(self,key):
+        item=self.client.get_item(TableName=self.table,Key={'recordId':{'S':'DOCUMENT#'+key}},ConsistentRead=True).get('Item')
+        return {k:self.decoder.deserialize(v) for k,v in item.items()} if item else None
+    def put(self,item,expected):return put_document(self.client,self.table,item,expected)
+    def delete(self,key,expected):return delete_document(self.client,self.table,key,expected)
+
+def main():
+    parser=argparse.ArgumentParser(description=__doc__)
+    for name in ['endpoint','source-id','table','account','region','checkpoint']:parser.add_argument('--'+name,required=True)
+    parser.add_argument('--allow-local-fixture',action='store_true')
+    parser.add_argument('--confirm-sync',action='store_true',required=True)
+    args=parser.parse_args()
+    checkpoint=Path(args.checkpoint);checkpoint.parent.mkdir(parents=True,exist_ok=True)
+    lock=checkpoint.with_suffix('.lock');descriptor=os.open(lock,os.O_WRONLY|os.O_CREAT|os.O_EXCL,0o600)
+    try:
+        with os.fdopen(descriptor,'w') as target:target.write(str(os.getpid()))
+        snapshot=fetch_snapshot(args.endpoint,os.getenv('ATMEM_SOURCE_TOKEN'),args.allow_local_fixture)
+        config=Config(ignore_configured_endpoint_urls=True,connect_timeout=3,read_timeout=10,retries={'total_max_attempts':2})
+        session=boto3.Session(region_name=args.region)
+        if session.client('sts',config=config).get_caller_identity()['Account']!=args.account:raise ValueError('Account mismatch')
+        receipt=synchronize(snapshot,args.source_id,Store(session.client('dynamodb',config=config),args.table),Checkpoint(checkpoint))
+        print(json.dumps(receipt))
+    finally:lock.unlink()
+if __name__=='__main__':main()

package/src/runtime/connector_sync.py

@@ -0,0 +1,70 @@
+"""Normalized source snapshot contract; vendor permission mapping is separately verified.
+
+Local contract fixtures do not establish SharePoint or Confluence compatibility.
+A complete snapshot carries explicit resolved subject/region ACLs for every item.
+"""
+import hashlib
+import json
+import time
+from urllib.request import Request, build_opener, HTTPRedirectHandler
+from urllib.parse import urlsplit
+from catalog_admin import validate_document
+
+class NoRedirect(HTTPRedirectHandler):
+    def redirect_request(self,request,fp,code,msg,headers,newurl):
+        raise ValueError('Source redirects are not allowed')
+
+
+def fetch_snapshot(endpoint,token=None,allow_local_fixture=False):
+    url=urlsplit(endpoint)
+    local=url.hostname in {'127.0.0.1','localhost','::1'}
+    if url.username or url.password or url.fragment or url.query:raise ValueError('Use a credential-free source endpoint')
+    if url.scheme!='https' and not (allow_local_fixture and local and url.scheme=='http'):raise ValueError('HTTPS is required outside an explicit loopback fixture')
+    headers={'Accept':'application/json'}
+    if token:headers['Authorization']='Bearer '+token
+    with build_opener(NoRedirect).open(Request(endpoint,headers=headers),timeout=10) as response:
+        raw=response.read(1_000_001)
+    if len(raw)>1_000_000:raise ValueError('Source snapshot exceeds the bounded contract')
+    value=json.loads(raw)
+    if not isinstance(value,dict) or value.get('complete') is not True or value.get('permissionsComplete') is not True:raise ValueError('Incomplete source data or permissions; do not publish a partial snapshot')
+    if not isinstance(value.get('snapshotId'),str) or not value['snapshotId'] or not isinstance(value.get('documents'),list) or len(value['documents'])>100:raise ValueError('Invalid bounded source snapshot')
+    return value
+
+
+def normalized_documents(snapshot,source_id,lease_seconds=60):
+    if not isinstance(lease_seconds,int) or not 1<=lease_seconds<=300:raise ValueError('Authorization freshness must be 1–300 seconds')
+    if not isinstance(snapshot,dict) or snapshot.get('complete') is not True or snapshot.get('permissionsComplete') is not True or not isinstance(snapshot.get('documents'),list) or len(snapshot['documents'])>100:raise ValueError('Incomplete bounded snapshot')
+    result={};expiry=int(time.time())+lease_seconds
+    for entry in snapshot['documents']:
+        if not isinstance(entry,dict) or not isinstance(entry.get('sourceId'),str) or not isinstance(entry.get('sourceVersion'),str) or not entry.get('sourceId') or not entry.get('sourceVersion'):raise ValueError('Exact source identity and version are required')
+        identity=hashlib.sha256(json.dumps([source_id,entry['sourceId']],separators=(',',':')).encode()).hexdigest()
+        if identity in result:raise ValueError('Duplicate source identity')
+        doc={'id':identity,'title':entry.get('title'),'text':entry.get('text'),'allowedSubjects':entry.get('allowedSubjects'),'allowedRegions':entry.get('allowedRegions'),'sourceId':source_id,'authorizationExpiresAt':expiry}
+        result[identity]={'document':validate_document(doc),'sourceVersion':entry['sourceVersion']}
+    return result
+
+
+def synchronize(snapshot,source_id,store,checkpoint,lease_seconds=60):
+    """Conditional, retryable writes; checkpoint only after a complete reconciliation.
+
+    The store is a source-scoped adapter with get/put/delete; each mutation checks
+    the current revision. Failed syncs never renew missing documents' leases.
+    """
+    desired=normalized_documents(snapshot,source_id,lease_seconds)
+    previous=checkpoint.load(source_id) or {'documents':{}}
+    inventory=set(previous['documents'])|set(previous.get('pending',[]))
+    checkpoint.save(source_id,{**previous,'pending':sorted(inventory|set(desired))})
+    completed={}
+    for identity,entry in desired.items():
+        current=store.get(identity)
+        if current and current.get('sourceId')!=source_id:raise ValueError('Source ownership mismatch')
+        saved=store.put(entry['document'],current.get('revision') if current else None)
+        completed[identity]={'revision':saved['revision'],'sourceVersion':entry['sourceVersion']}
+    for identity in inventory-set(desired):
+        current=store.get(identity)
+        if current:
+            if current.get('sourceId')!=source_id:raise ValueError('Source ownership mismatch')
+            store.delete(identity,current['revision'])
+    result={'snapshotId':snapshot['snapshotId'],'documents':completed}
+    checkpoint.save(source_id,result)
+    return {'status':'synchronized','documents':len(completed),'authorizationLeaseSeconds':lease_seconds}

package/src/runtime/durable-python-lock.json

@@ -0,0 +1,247 @@
+{
+  "requirements": "procrastinate==3.10.0 \\\n    --hash=sha256:949ad25b4377c30e03a9d0e053d15dfa47ef02b3f12ae8a7f3254686183c152c\npython-dateutil==2.9.0.post0 \\\n    --hash=sha256:a8b2bc7bffae282281c8140a97d3aa9c14da0b136dfe83f850eea9a5f7470427\npsycopg==3.3.8 \\\n    --hash=sha256:ca50af6072ba9ea6866f33021975230c2555d7bfdb9d8f94ca3af5c3d1bf2167\npsycopg-binary==3.3.8 \\\n    --hash=sha256:00c226f718901ce022bcee2e0779dc2f0a6d8bcedd5a3818e21ff25564efaa97 \\\n    --hash=sha256:0332e83c2e78b1c8c00c1095688f9b332bdde9d5e9d61b8ce1cdcaf716a19b9e \\\n    --hash=sha256:09676448a9bbc5c09ce8d578a6958a0bb8175e63c94edf6d88a62d2b07fadd23 \\\n    --hash=sha256:0d483014dde0bd5404801aa91ebbd7912006065dd8d244a962f228fe44bfc08b \\\n    --hash=sha256:0f454d1d8e8071c7ec5fc10db6204334c36bba5ad30005c4b8c35859b1250ac6 \\\n    --hash=sha256:0fd106e47b7d1f82744b23b6dd31856435e46c3d1b3d4972325d76f2e7a3d771 \\\n    --hash=sha256:1126ff5eae645a304e6ca94e1c79cc19249fb54517b923ee5862badd2fabb334 \\\n    --hash=sha256:1f65e8e84e13b34ef40011b30c7e6eb39578956c4a0f326a0a5a274a3d84f812 \\\n    --hash=sha256:281d0e891fa8c2bb231a97a5a57522cc2a9664c3f77b9fb007d2719bc1afd29e \\\n    --hash=sha256:2f72c18d75d16500fe2f7f300945d68fba9dbb883aef20ba4be0c386afbbf2e9 \\\n    --hash=sha256:31dd2597df303d22a2cabf73c40bb05afaf4ca1394e22935b97f627d4968c87d \\\n    --hash=sha256:382e3a1fcc7988cd05bfa68db7cc50189e785c05be212d27b524f0cc983fc77a \\\n    --hash=sha256:39bc3b42e6486ae8ace820df93b00dce4858338e8a428d14d8e71130e852bab1 \\\n    --hash=sha256:419a52eb62bdc0bf9eff80039329435c55a1943b1fa12f4d0cbdc45b5f856c5b \\\n    --hash=sha256:41c31b175084a85232b6ea5f8eb474491b6c963302c69b46fa2ed60afb888b62 \\\n    --hash=sha256:42718d7e5732aa1feb0a7f0ff7e0404fd080528bd4694b40b31ef0b146eda8e1 \\\n    --hash=sha256:4bedd0fbbbebe0c0f66b34c3f6be972ce38357ce3451510e1dcf5025f7011dba \\\n    --hash=sha256:522acdc8a71a042b407851658eb1da85fe09c78b222b2233faef7da3385a757b \\\n    --hash=sha256:5a3925d0c67b0452db066d97d0452af012e7bd2fdf8e6ab4ab0392df8906a6e1 \\\n    --hash=sha256:5deec7746acf1c742572b8bf8599f2f61a38c9925015d77254d87d3781169b3f \\\n    --hash=sha256:5f51d97b67276e90cda022ad363eca61dbe855dbb5342e358469006d4b5254df \\\n    --hash=sha256:5fd40b5ced3f8b458024ea434f2dfee7aa62a65663089bde26c41302f6c31b2e \\\n    --hash=sha256:6891b6d9d25103c31411b50f83f9a8aba63f4cbcc63b009f461c115bfaf7b78d \\\n    --hash=sha256:6bde86fb307fe1698fbbfeaa96130d4825f265afbeff217b959c1905b86f924d \\\n    --hash=sha256:6d899f361effad9a23d90940b6b55683bc87ed2d457ef64a7fa76fee7c3b9dfc \\\n    --hash=sha256:6ff02f23b7d95de68f42d5ebe91374540d3d31851d83d9cd37e6e71a5dbd0bcd \\\n    --hash=sha256:710183a2e29c72050c3a447f9f566de27c6efea9da40bf7b800381ac57026204 \\\n    --hash=sha256:78f92c5c9c9177b247b0f72f03412bc829185786525a8cf8742460066762a7d1 \\\n    --hash=sha256:7d2b484e8ced7c3292e811d28087814467aecd3ef19badb64ed45a0f5fd78bf8 \\\n    --hash=sha256:804041b79916b0e8021a1130650d724741eff1e81ccec8133abf357b4d284a24 \\\n    --hash=sha256:9199be795608cbd3e6cc39b21c19e6043c44bc15d5a1d28f1df379830c553dd5 \\\n    --hash=sha256:9353240f6e58d4a988f3ca842185f5349594153dcddd05e30f83c7d8badfbe0e \\\n    --hash=sha256:9a7b232d55ab7ba22be48487c5f0adb7a6941fd54b436bdbbb72df4e5a740fb2 \\\n    --hash=sha256:9daff4d6257969b02678943d62bfd83b971004f6efef68d5b767ac69c2222751 \\\n    --hash=sha256:a09aa2ba7927e9b11bd5bddb6d33cec274235d6f54f1ab777ed71c932cfc8d72 \\\n    --hash=sha256:a565d8446b59d26dcf75b08d3ccd4e85b750edba9e53a396cb7a4652d7cbc9e8 \\\n    --hash=sha256:a63be4f745b778654e3c438d1b0e31bcf5ce265151c6982d5c6d5d286bae84c0 \\\n    --hash=sha256:a7cdba018e4decf3837793c1e18dbe3dd71709adef54892ab83d81c00e866dc3 \\\n    --hash=sha256:aa7af0d2d1194b65b8c4d0056c5607de6c38fb6a295f04087d17e1c9d2d11fba \\\n    --hash=sha256:b26fbeb64c3ec29d799c89709f9500bd3bfa452ae22bdac3e11c3bb15fb057dc \\\n    --hash=sha256:bb88457e8357a8709ab04f542c07361a816793f012a1c9818a4edd86d02cde4d \\\n    --hash=sha256:bf9388216da2069ca0dbad58479bb83e4b979ed35c4a80d247399ac93361417c \\\n    --hash=sha256:bf96efb4530605813b30d664f5d3b510540d89434a8e89dd7c62fb2d4fa4278f \\\n    --hash=sha256:c2154bd84cf20148d9a59e3ade04f0f754462b96cfac91d54d76ef33af7946e5 \\\n    --hash=sha256:c3a8420317a3b3910a08b77a952ef8f8051da61622c6a2e03fc51b75761c6acf \\\n    --hash=sha256:c3ac86af1a7ac65fe3461d831e8bc9fa62bc247ef1b73d58e9dd4ed406be4bfd \\\n    --hash=sha256:ced3499d480a979b956536b3f71a4736451bf3a976e4e400fc5c4b8dd3f43b23 \\\n    --hash=sha256:d01495f37407899a699726710e26d6105654273a12afc8fe87784743b4802844 \\\n    --hash=sha256:d4de096987b9f7c346879e164637de91a66067378b1ee4b49f07d1bac0e2847a \\\n    --hash=sha256:da101085aa9f74817e48fc96dda859528fc52fabcf81e27c3640d1df17dd6dcb \\\n    --hash=sha256:df35063b88af16c08bb8960aac9882cce620aea478dfec5a67cff397b575b97d \\\n    --hash=sha256:e0972d8de5a0d855d76624f559a6ce5dd068fb4bbfa01e1d7cf929e6800dc4f0 \\\n    --hash=sha256:e09cc11a367cbb147bacec0a41d748d22245e322827911d9c82b6066a8ba2059 \\\n    --hash=sha256:e42c0e37eaed1ff03c24008561bca218eae8ec5ca4405a37897c6245ead8d612 \\\n    --hash=sha256:e4332b7178062649e29d2770905f20e6a4b2dfc54581dcfcd919aeaed26291f4 \\\n    --hash=sha256:e8f1addbaec62c9e2bf5b3ae4b32a20c793c06de7d57471f6509a127f1c902f4 \\\n    --hash=sha256:eb4cd3f0ad6ebcf2baeb94f93d87138044976b57b7113b6321ac3c5cf70a8130 \\\n    --hash=sha256:ec6773395189417c92102b34c77ed299f6111fbbc37d50d4fa12ab819f763669 \\\n    --hash=sha256:ed65d1b32a7f9684ab682296ac7cac1dd972bb8d86c9336753bc915efc3515f4 \\\n    --hash=sha256:ef2dcdad18f7e6b0241dafbaad3033ca5c12e07755418ece4c3a90e9665e434e \\\n    --hash=sha256:f09cb4e7744522d71048a8998ff841c7af942a61ffbd4142a140b42d89b950fe \\\n    --hash=sha256:f31dea98f8c5c6c60e8e049388f24eec14088518e2ded0f892d96c785401e688 \\\n    --hash=sha256:f719b1b6498b3562843be83add8714c8967da95bb9aa626aae157a8ca31e4742 \\\n    --hash=sha256:fc134798cd646a15326004bbeff4c2719e000a9ac52f6b893a767f7c5276e24b \\\n    --hash=sha256:fc9b9922899a3ca6193fd1d96920329c10acb72d3fad0dbc87b1ecdd8a791c14 \\\n    --hash=sha256:fe26e72b87ca280e538f4f78d1a956df0ae6ed51aab73ccc4c1dcf6f25256438\nsix==1.17.0 \\\n    --hash=sha256:4721f391ed90541fddacab5acf947aa0d3dc7d27b2e1e8eda2be8970586c3274\nasgiref==3.13.0 \\\n    --hash=sha256:f9596a2434512686473d50f96ff6207fbba49ae1a785dfac614df4aeb085674d\nattrs==26.1.0 \\\n    --hash=sha256:c647aa4a12dfbad9333ca4e71fe62ddc36f4e63b2d260a37a8b83d2f043ac309\ncroniter==7.0.0 \\\n    --hash=sha256:92090bce3cef195a037a46b78430c4cdd6250e90671d9d7dcd9e486147daaca4\npackaging==26.3 \\\n    --hash=sha256:d7193f7c8e4e93f444fde0262bf90af30e16fa0ad0ad44cb553c87339b23cd1c\npsycopg-pool==3.3.3 \\\n    --hash=sha256:9b9cd6a4fcec47a410f7e82d408540e7f77b478509e91b44c1a5457a13e5ff37\ntyping_extensions==4.16.0 \\\n    --hash=sha256:481caa481374e813c1b176ada14e97f1f67a4539ce9cfeb3f350d78d6370c2e8\n",
+  "sources": [
+    {
+      "name": "procrastinate",
+      "version": "3.10.0",
+      "metadataUrl": "https://pypi.org/pypi/procrastinate/3.10.0/json",
+      "metadataSha256": "27a67e99d508fbc5e47a3820310b4d2cebb7eca13d1e566a75d0ff6b8b163f2c",
+      "wheelHashes": [
+        "949ad25b4377c30e03a9d0e053d15dfa47ef02b3f12ae8a7f3254686183c152c"
+      ],
+      "requiresDist": [
+        "asgiref",
+        "attrs",
+        "croniter",
+        "packaging",
+        "psycopg[pool]",
+        "python-dateutil",
+        "typing-extensions",
+        "aiopg; extra == \"aiopg\"",
+        "psycopg2-binary; extra == \"aiopg\"",
+        "django>=2.2; extra == \"django\"",
+        "psycopg2-binary; extra == \"psycopg2\"",
+        "sphinx; extra == \"sphinx\"",
+        "sqlalchemy~=2.0; extra == \"sqlalchemy\""
+      ]
+    },
+    {
+      "name": "python-dateutil",
+      "version": "2.9.0.post0",
+      "metadataUrl": "https://pypi.org/pypi/python-dateutil/2.9.0.post0/json",
+      "metadataSha256": "7938916002e8d70c9d32cbaf43c467d163af3aadd8c3b358bda5babd1f7836ee",
+      "wheelHashes": [
+        "a8b2bc7bffae282281c8140a97d3aa9c14da0b136dfe83f850eea9a5f7470427"
+      ],
+      "requiresDist": [
+        "six >=1.5"
+      ]
+    },
+    {
+      "name": "psycopg",
+      "version": "3.3.8",
+      "metadataUrl": "https://pypi.org/pypi/psycopg/3.3.8/json",
+      "metadataSha256": "62594b13af083d1e220fe9adc63c044cc406a48044697fe16d78ae0a8d046daf",
+      "wheelHashes": [
+        "ca50af6072ba9ea6866f33021975230c2555d7bfdb9d8f94ca3af5c3d1bf2167"
+      ],
+      "requiresDist": [
+        "typing-extensions>=4.6; python_version < \"3.13\"",
+        "tzdata; sys_platform == \"win32\"",
+        "psycopg-c==3.3.8; implementation_name != \"pypy\" and extra == \"c\"",
+        "psycopg-binary==3.3.8; implementation_name != \"pypy\" and extra == \"binary\"",
+        "psycopg-pool; extra == \"pool\"",
+        "anyio>=4.0; extra == \"test\"",
+        "mypy>=2.1.0; implementation_name != \"pypy\" and extra == \"test\"",
+        "pproxy>=2.7; extra == \"test\"",
+        "pytest>=6.2.5; extra == \"test\"",
+        "pytest-cov>=3.0; extra == \"test\"",
+        "pytest-randomly>=3.5; extra == \"test\"",
+        "ast-comments>=1.1.2; extra == \"dev\"",
+        "black>=26.1.0; extra == \"dev\"",
+        "codespell>=2.2; extra == \"dev\"",
+        "cython-lint>=0.21; extra == \"dev\"",
+        "dnspython>=2.1; extra == \"dev\"",
+        "flake8>=4.0; extra == \"dev\"",
+        "isort[colors]>=6.0; extra == \"dev\"",
+        "isort-psycopg>=0.0.3; extra == \"dev\"",
+        "mypy>=2.1.0; extra == \"dev\"",
+        "pre-commit>=4.0.1; extra == \"dev\"",
+        "types-setuptools>=57.4; extra == \"dev\"",
+        "types-shapely>=2.0; extra == \"dev\"",
+        "wheel>=0.37; extra == \"dev\"",
+        "Sphinx>=9.1; extra == \"docs\"",
+        "furo==2025.12.19; extra == \"docs\"",
+        "sphinx-autobuild>=2025.8.25; extra == \"docs\"",
+        "sphinx-autodoc-typehints>=3.10.2; extra == \"docs\""
+      ]
+    },
+    {
+      "name": "psycopg-binary",
+      "version": "3.3.8",
+      "metadataUrl": "https://pypi.org/pypi/psycopg-binary/3.3.8/json",
+      "metadataSha256": "51f585cac5a702a7b6a4c595ba4c6512ea35ba26fbeb89c05b7d93fa079d3a16",
+      "wheelHashes": [
+        "00c226f718901ce022bcee2e0779dc2f0a6d8bcedd5a3818e21ff25564efaa97",
+        "0332e83c2e78b1c8c00c1095688f9b332bdde9d5e9d61b8ce1cdcaf716a19b9e",
+        "09676448a9bbc5c09ce8d578a6958a0bb8175e63c94edf6d88a62d2b07fadd23",
+        "0d483014dde0bd5404801aa91ebbd7912006065dd8d244a962f228fe44bfc08b",
+        "0f454d1d8e8071c7ec5fc10db6204334c36bba5ad30005c4b8c35859b1250ac6",
+        "0fd106e47b7d1f82744b23b6dd31856435e46c3d1b3d4972325d76f2e7a3d771",
+        "1126ff5eae645a304e6ca94e1c79cc19249fb54517b923ee5862badd2fabb334",
+        "1f65e8e84e13b34ef40011b30c7e6eb39578956c4a0f326a0a5a274a3d84f812",
+        "281d0e891fa8c2bb231a97a5a57522cc2a9664c3f77b9fb007d2719bc1afd29e",
+        "2f72c18d75d16500fe2f7f300945d68fba9dbb883aef20ba4be0c386afbbf2e9",
+        "31dd2597df303d22a2cabf73c40bb05afaf4ca1394e22935b97f627d4968c87d",
+        "382e3a1fcc7988cd05bfa68db7cc50189e785c05be212d27b524f0cc983fc77a",
+        "39bc3b42e6486ae8ace820df93b00dce4858338e8a428d14d8e71130e852bab1",
+        "419a52eb62bdc0bf9eff80039329435c55a1943b1fa12f4d0cbdc45b5f856c5b",
+        "41c31b175084a85232b6ea5f8eb474491b6c963302c69b46fa2ed60afb888b62",
+        "42718d7e5732aa1feb0a7f0ff7e0404fd080528bd4694b40b31ef0b146eda8e1",
+        "4bedd0fbbbebe0c0f66b34c3f6be972ce38357ce3451510e1dcf5025f7011dba",
+        "522acdc8a71a042b407851658eb1da85fe09c78b222b2233faef7da3385a757b",
+        "5a3925d0c67b0452db066d97d0452af012e7bd2fdf8e6ab4ab0392df8906a6e1",
+        "5deec7746acf1c742572b8bf8599f2f61a38c9925015d77254d87d3781169b3f",
+        "5f51d97b67276e90cda022ad363eca61dbe855dbb5342e358469006d4b5254df",
+        "5fd40b5ced3f8b458024ea434f2dfee7aa62a65663089bde26c41302f6c31b2e",
+        "6891b6d9d25103c31411b50f83f9a8aba63f4cbcc63b009f461c115bfaf7b78d",
+        "6bde86fb307fe1698fbbfeaa96130d4825f265afbeff217b959c1905b86f924d",
+        "6d899f361effad9a23d90940b6b55683bc87ed2d457ef64a7fa76fee7c3b9dfc",
+        "6ff02f23b7d95de68f42d5ebe91374540d3d31851d83d9cd37e6e71a5dbd0bcd",
+        "710183a2e29c72050c3a447f9f566de27c6efea9da40bf7b800381ac57026204",
+        "78f92c5c9c9177b247b0f72f03412bc829185786525a8cf8742460066762a7d1",
+        "7d2b484e8ced7c3292e811d28087814467aecd3ef19badb64ed45a0f5fd78bf8",
+        "804041b79916b0e8021a1130650d724741eff1e81ccec8133abf357b4d284a24",
+        "9199be795608cbd3e6cc39b21c19e6043c44bc15d5a1d28f1df379830c553dd5",
+        "9353240f6e58d4a988f3ca842185f5349594153dcddd05e30f83c7d8badfbe0e",
+        "9a7b232d55ab7ba22be48487c5f0adb7a6941fd54b436bdbbb72df4e5a740fb2",
+        "9daff4d6257969b02678943d62bfd83b971004f6efef68d5b767ac69c2222751",
+        "a09aa2ba7927e9b11bd5bddb6d33cec274235d6f54f1ab777ed71c932cfc8d72",
+        "a565d8446b59d26dcf75b08d3ccd4e85b750edba9e53a396cb7a4652d7cbc9e8",
+        "a63be4f745b778654e3c438d1b0e31bcf5ce265151c6982d5c6d5d286bae84c0",
+        "a7cdba018e4decf3837793c1e18dbe3dd71709adef54892ab83d81c00e866dc3",
+        "aa7af0d2d1194b65b8c4d0056c5607de6c38fb6a295f04087d17e1c9d2d11fba",
+        "b26fbeb64c3ec29d799c89709f9500bd3bfa452ae22bdac3e11c3bb15fb057dc",
+        "bb88457e8357a8709ab04f542c07361a816793f012a1c9818a4edd86d02cde4d",
+        "bf9388216da2069ca0dbad58479bb83e4b979ed35c4a80d247399ac93361417c",
+        "bf96efb4530605813b30d664f5d3b510540d89434a8e89dd7c62fb2d4fa4278f",
+        "c2154bd84cf20148d9a59e3ade04f0f754462b96cfac91d54d76ef33af7946e5",
+        "c3a8420317a3b3910a08b77a952ef8f8051da61622c6a2e03fc51b75761c6acf",
+        "c3ac86af1a7ac65fe3461d831e8bc9fa62bc247ef1b73d58e9dd4ed406be4bfd",
+        "ced3499d480a979b956536b3f71a4736451bf3a976e4e400fc5c4b8dd3f43b23",
+        "d01495f37407899a699726710e26d6105654273a12afc8fe87784743b4802844",
+        "d4de096987b9f7c346879e164637de91a66067378b1ee4b49f07d1bac0e2847a",
+        "da101085aa9f74817e48fc96dda859528fc52fabcf81e27c3640d1df17dd6dcb",
+        "df35063b88af16c08bb8960aac9882cce620aea478dfec5a67cff397b575b97d",
+        "e0972d8de5a0d855d76624f559a6ce5dd068fb4bbfa01e1d7cf929e6800dc4f0",
+        "e09cc11a367cbb147bacec0a41d748d22245e322827911d9c82b6066a8ba2059",
+        "e42c0e37eaed1ff03c24008561bca218eae8ec5ca4405a37897c6245ead8d612",
+        "e4332b7178062649e29d2770905f20e6a4b2dfc54581dcfcd919aeaed26291f4",
+        "e8f1addbaec62c9e2bf5b3ae4b32a20c793c06de7d57471f6509a127f1c902f4",
+        "eb4cd3f0ad6ebcf2baeb94f93d87138044976b57b7113b6321ac3c5cf70a8130",
+        "ec6773395189417c92102b34c77ed299f6111fbbc37d50d4fa12ab819f763669",
+        "ed65d1b32a7f9684ab682296ac7cac1dd972bb8d86c9336753bc915efc3515f4",
+        "ef2dcdad18f7e6b0241dafbaad3033ca5c12e07755418ece4c3a90e9665e434e",
+        "f09cb4e7744522d71048a8998ff841c7af942a61ffbd4142a140b42d89b950fe",
+        "f31dea98f8c5c6c60e8e049388f24eec14088518e2ded0f892d96c785401e688",
+        "f719b1b6498b3562843be83add8714c8967da95bb9aa626aae157a8ca31e4742",
+        "fc134798cd646a15326004bbeff4c2719e000a9ac52f6b893a767f7c5276e24b",
+        "fc9b9922899a3ca6193fd1d96920329c10acb72d3fad0dbc87b1ecdd8a791c14",
+        "fe26e72b87ca280e538f4f78d1a956df0ae6ed51aab73ccc4c1dcf6f25256438"
+      ],
+      "requiresDist": []
+    },
+    {
+      "name": "six",
+      "version": "1.17.0",
+      "metadataUrl": "https://pypi.org/pypi/six/1.17.0/json",
+      "metadataSha256": "d8de39dd52b73048d81a8fd78022ee2bc72f8b568bcf0d88e5d5069c302b1208",
+      "wheelHashes": [
+        "4721f391ed90541fddacab5acf947aa0d3dc7d27b2e1e8eda2be8970586c3274"
+      ],
+      "requiresDist": []
+    },
+    {
+      "name": "asgiref",
+      "version": "3.13.0",
+      "metadataUrl": "https://pypi.org/pypi/asgiref/3.13.0/json",
+      "metadataSha256": "5ceb6219f17f4c675ebcb3efa3fe4849351cc9f3d29d9b61f69a57a579dd6b4c",
+      "wheelHashes": [
+        "f9596a2434512686473d50f96ff6207fbba49ae1a785dfac614df4aeb085674d"
+      ],
+      "requiresDist": [
+        "packaging; extra == \"tests\"",
+        "pytest; extra == \"tests\"",
+        "pytest-asyncio; extra == \"tests\"",
+        "mypy>=1.14.0; extra == \"mypy\""
+      ]
+    },
+    {
+      "name": "attrs",
+      "version": "26.1.0",
+      "metadataUrl": "https://pypi.org/pypi/attrs/26.1.0/json",
+      "metadataSha256": "a882bf941fb4a0bb748d0194df544121cc130f5fb15a710ab6b804c17d2899b7",
+      "wheelHashes": [
+        "c647aa4a12dfbad9333ca4e71fe62ddc36f4e63b2d260a37a8b83d2f043ac309"
+      ],
+      "requiresDist": []
+    },
+    {
+      "name": "croniter",
+      "version": "7.0.0",
+      "metadataUrl": "https://pypi.org/pypi/croniter/7.0.0/json",
+      "metadataSha256": "f47e685ef0191726c73c9be7ae9b64fb395522f56b89fbdc1600a875bf4e0496",
+      "wheelHashes": [
+        "92090bce3cef195a037a46b78430c4cdd6250e90671d9d7dcd9e486147daaca4"
+      ],
+      "requiresDist": [
+        "python-dateutil"
+      ]
+    },
+    {
+      "name": "packaging",
+      "version": "26.3",
+      "metadataUrl": "https://pypi.org/pypi/packaging/26.3/json",
+      "metadataSha256": "4f190d2f0b312b3086058cee64ab4333bf3ce67fb78b4c2bdb43899049b29f4d",
+      "wheelHashes": [
+        "d7193f7c8e4e93f444fde0262bf90af30e16fa0ad0ad44cb553c87339b23cd1c"
+      ],
+      "requiresDist": []
+    },
+    {
+      "name": "psycopg-pool",
+      "version": "3.3.3",
+      "metadataUrl": "https://pypi.org/pypi/psycopg-pool/3.3.3/json",
+      "metadataSha256": "b4d1d00413587c2f8c439d424eea1d53d0e2d29feb4620fd908148de3a1e199a",
+      "wheelHashes": [
+        "9b9cd6a4fcec47a410f7e82d408540e7f77b478509e91b44c1a5457a13e5ff37"
+      ],
+      "requiresDist": [
+        "typing-extensions>=4.6",
+        "anyio>=4.0; extra == \"test\"",
+        "mypy>=2.1.0; extra == \"test\"",
+        "pproxy>=2.7; extra == \"test\"",
+        "pytest>=6.2.5; extra == \"test\"",
+        "pytest-cov>=3.0; extra == \"test\"",
+        "pytest-randomly>=3.5; extra == \"test\""
+      ]
+    },
+    {
+      "name": "typing_extensions",
+      "version": "4.16.0",
+      "metadataUrl": "https://pypi.org/pypi/typing_extensions/4.16.0/json",
+      "metadataSha256": "2140da00d62dde967f52d0be0ae28444f1d6a3fe603f52c83c23988c32122d5a",
+      "wheelHashes": [
+        "481caa481374e813c1b176ada14e97f1f67a4539ce9cfeb3f350d78d6370c2e8"
+      ],
+      "requiresDist": []
+    }
+  ],
+  "review": {
+    "dependency": "procrastinate",
+    "version": "3.10.0",
+    "sourceCommit": "8b6398329d915b7299c0d936e567facaebea8903",
+    "license": "MIT",
+    "scope": "Candidate portable durable job primitive; no full provider/project support claim before qualification."
+  }
+}