blun-king-cli 9.1.597 → 9.1.600

package/standard-skills/translate-native/integrations/website_localization_cms_source_http.py

@@ -23,15 +23,17 @@ AUTH_REQUEST_SCHEMA = "blun.cms-source-runtime-http-auth-request.v1"
 PRINCIPAL_SCHEMA = "blun.cms-source-runtime-principal.v1"
 STATUS_PRINCIPAL_SCHEMA = "blun.cms-source-status-principal.v1"
 CHANGE_REQUEST_SCHEMA = "blun.cms-source-change-enqueue-request.v1"
-CHANGE_RESPONSE_SCHEMA = "blun.cms-source-change-enqueue-response.v2"
+CHANGE_RESPONSE_SCHEMA = "blun.cms-source-change-enqueue-response.v3"
 REMOVAL_REQUEST_SCHEMA = "blun.cms-source-removal-enqueue-request.v1"
-REMOVAL_RESPONSE_SCHEMA = "blun.cms-source-removal-enqueue-response.v2"
+REMOVAL_RESPONSE_SCHEMA = "blun.cms-source-removal-enqueue-response.v3"
 STATUS_REQUEST_SCHEMA = "blun.cms-source-status-request.v1"
-STATUS_RESPONSE_SCHEMA = "blun.cms-source-status-response.v4"
-HEALTH_RESPONSE_SCHEMA = "blun.cms-source-health-response.v4"
-READINESS_RESPONSE_SCHEMA = "blun.cms-source-readiness-response.v2"
-CAPABILITIES_SCHEMA = "blun.cms-source-runtime-capabilities.v1"
-CAPABILITIES_RESPONSE_SCHEMA = "blun.cms-source-capabilities-response.v1"
+STATUS_RESPONSE_SCHEMA = "blun.cms-source-status-response.v6"
+HEALTH_RESPONSE_SCHEMA = "blun.cms-source-health-response.v6"
+READINESS_RESPONSE_SCHEMA = "blun.cms-source-readiness-response.v3"
+CAPABILITIES_SCHEMA = "blun.cms-source-runtime-capabilities.v2"
+CAPABILITIES_RESPONSE_SCHEMA = "blun.cms-source-capabilities-response.v2"
+CAPABILITY_BINDING_SCHEMA = "blun.cms-source-capability-binding.v2"
+CAPABILITY_DATABASE_ROLES = ("changes", "removals", "lifecycle")
 
 CHANGE_PATH = "/v1/localization/source/changes"
 REMOVAL_PATH = "/v1/localization/source/removals"
@@ -261,6 +263,7 @@ def _source_status_payload(
             "queue_counts", "notification_state", "notification_id",
             "notification_sha256", "notification_attempts",
             "notification_max_attempts", "notification_error_code",
+            "terminal_receiver_capabilities_sha256",
             "terminal_processing_state", "terminal_processing_poll_attempts",
             "terminal_processing_failures", "terminal_processing_error_code",
             "receiver_processing_state", "receiver_processing_attempts",
@@ -269,7 +272,7 @@ def _source_status_payload(
         }
         if not isinstance(payload, Mapping) or set(payload) != fields:
             raise ValueError
-        if payload["schema"] != "blun.cms-source-service-status.v3":
+        if payload["schema"] != "blun.cms-source-service-status.v4":
             raise ValueError
         event_id = _token(payload["event_id"])
         site_id = _token(payload["site_id"])
@@ -360,6 +363,16 @@ def _source_status_payload(
         notification_error = _optional_error(
             payload["notification_error_code"]
         )
+        terminal_receiver_capabilities_sha256 = payload[
+            "terminal_receiver_capabilities_sha256"
+        ]
+        if (
+            terminal_receiver_capabilities_sha256 is not None
+            and SHA256.fullmatch(
+                terminal_receiver_capabilities_sha256
+            ) is None
+        ):
+            raise ValueError
         durable_notification = notification_state in STATUSES
         if durable_notification != (notification_id is not None):
             raise ValueError
@@ -386,6 +399,10 @@ def _source_status_payload(
         }
         if terminal_processing_state not in processing_states:
             raise ValueError
+        if (terminal_processing_state == "disabled") != (
+            terminal_receiver_capabilities_sha256 is None
+        ):
+            raise ValueError
         terminal_processing_poll_attempts = _count(
             payload["terminal_processing_poll_attempts"]
         )
@@ -531,6 +548,9 @@ def _source_status_payload(
             "notification_attempts": notification_attempts,
             "notification_max_attempts": notification_max_attempts,
             "notification_error_code": notification_error,
+            "terminal_receiver_capabilities_sha256": (
+                terminal_receiver_capabilities_sha256
+            ),
             "terminal_processing_state": terminal_processing_state,
             "terminal_processing_poll_attempts": (
                 terminal_processing_poll_attempts
@@ -557,12 +577,15 @@ def _component(
     *,
     operations: bool = False,
     remote_failures: bool = False,
+    receiver_capabilities: bool = False,
 ) -> dict[str, Any]:
     fields = {"status", "counts", "due", "expired_leases", "failed"}
     if operations:
         fields.add("operations")
     if remote_failures:
         fields.add("remote_failures")
+    if receiver_capabilities:
+        fields.add("expected_capabilities_sha256")
     if not isinstance(value, Mapping) or set(value) != fields:
         raise ValueError
     if value["status"] not in {"ok", "blocked"}:
@@ -589,6 +612,11 @@ def _component(
         }
     if remote_failures:
         normalized["remote_failures"] = _count(value["remote_failures"])
+    if receiver_capabilities:
+        expected = value["expected_capabilities_sha256"]
+        if not isinstance(expected, str) or SHA256.fullmatch(expected) is None:
+            raise ValueError
+        normalized["expected_capabilities_sha256"] = expected
     return normalized
 
 
@@ -599,10 +627,11 @@ def _health_payload(value: Any) -> dict[str, Any]:
             "schema", "status", "pending_lifecycle_registrations",
             "pending_terminal_notifications", "changes", "removals",
             "pending_terminal_processing", "lifecycle", "notifications",
-            "terminal_processing", "error_code",
+            "terminal_processing", "terminal_receiver_capabilities_sha256",
+            "error_code",
         }:
             raise ValueError
-        if payload["schema"] != "blun.cms-source-service-health.v3":
+        if payload["schema"] != "blun.cms-source-service-health.v4":
             raise ValueError
         if payload["status"] not in HEALTH_STATUSES:
             raise ValueError
@@ -637,10 +666,34 @@ def _health_payload(value: Any) -> dict[str, Any]:
                 else _component(payload["terminal_processing"], {
                     "pending", "leased", "watching", "retry_wait",
                     "succeeded", "failed",
-                })
+                }, receiver_capabilities=True)
             ),
+            "terminal_receiver_capabilities_sha256": payload[
+                "terminal_receiver_capabilities_sha256"
+            ],
             "error_code": payload["error_code"],
         }
+        receiver_capabilities_sha256 = result[
+            "terminal_receiver_capabilities_sha256"
+        ]
+        if (
+            receiver_capabilities_sha256 is not None
+            and (
+                not isinstance(receiver_capabilities_sha256, str)
+                or SHA256.fullmatch(receiver_capabilities_sha256) is None
+            )
+        ):
+            raise ValueError
+        if result["terminal_processing"]:
+            if (
+                receiver_capabilities_sha256
+                != result["terminal_processing"][
+                    "expected_capabilities_sha256"
+                ]
+            ):
+                raise ValueError
+        elif receiver_capabilities_sha256 is not None and result["status"] != "blocked":
+            raise ValueError
         if result["error_code"] is not None and ERROR_CODE.fullmatch(
             result["error_code"]
         ) is None:
@@ -693,6 +746,42 @@ def _readiness_payload(value: Any) -> dict[str, Any]:
         ) from None
 
 
+def _capability_binding_payload(value: Any) -> dict[str, Any]:
+    """Validate the exact content-free durable runtime binding."""
+
+    try:
+        if not isinstance(value, Mapping) or set(value) != {
+            "schema", "status", "capabilities_sha256",
+            "commercial_rendering_registry_sha256", "database_roles",
+        }:
+            raise ValueError
+        if (
+            value["schema"] != CAPABILITY_BINDING_SCHEMA
+            or value["status"] != "verified"
+            or SHA256.fullmatch(value["capabilities_sha256"]) is None
+            or SHA256.fullmatch(
+                value["commercial_rendering_registry_sha256"]
+            ) is None
+            or value["database_roles"] != list(CAPABILITY_DATABASE_ROLES)
+        ):
+            raise ValueError
+        result = {
+            "schema": value["schema"],
+            "status": value["status"],
+            "capabilities_sha256": value["capabilities_sha256"],
+            "commercial_rendering_registry_sha256": value[
+                "commercial_rendering_registry_sha256"
+            ],
+            "database_roles": list(value["database_roles"]),
+        }
+        _canonical_json(result)
+        return result
+    except Exception:
+        raise CMSSourceHTTPBlocked(
+            "source_http.capability_binding_invalid", 503,
+        ) from None
+
+
 def _capabilities_payload() -> dict[str, Any]:
     """Build the public contract from the exact active HTTP constants."""
     expected_scopes = {
@@ -729,7 +818,9 @@ def _capabilities_payload() -> dict[str, Any]:
             "request_schema": None,
             "request_fields": [],
             "response_schema": CAPABILITIES_RESPONSE_SCHEMA,
-            "response_fields": ["schema", "capabilities"],
+            "response_fields": [
+                "schema", "capabilities", "capability_binding",
+            ],
             "success_status": 200,
         },
         "change": {
@@ -743,7 +834,7 @@ def _capabilities_payload() -> dict[str, Any]:
             "response_fields": [
                 "schema", "operation", "request_id", "event_id",
                 "payload_sha256", "status", "attempts", "max_attempts",
-                "capabilities_sha256",
+                "capabilities_sha256", "capability_binding",
             ],
             "success_status": 202,
         },
@@ -755,7 +846,10 @@ def _capabilities_payload() -> dict[str, Any]:
             "request_schema": None,
             "request_fields": [],
             "response_schema": HEALTH_RESPONSE_SCHEMA,
-            "response_fields": ["schema", "health", "capabilities_sha256"],
+            "response_fields": [
+                "schema", "health", "capabilities_sha256",
+                "capability_binding",
+            ],
             "success_status": 200,
         },
         "removal": {
@@ -769,7 +863,7 @@ def _capabilities_payload() -> dict[str, Any]:
             "response_fields": [
                 "schema", "operation", "request_id", "event_id",
                 "payload_sha256", "status", "attempts", "max_attempts",
-                "capabilities_sha256",
+                "capabilities_sha256", "capability_binding",
             ],
             "success_status": 202,
         },
@@ -783,6 +877,7 @@ def _capabilities_payload() -> dict[str, Any]:
             "response_schema": READINESS_RESPONSE_SCHEMA,
             "response_fields": [
                 "schema", "readiness", "capabilities_sha256",
+                "capability_binding",
             ],
             "success_status": 200,
         },
@@ -794,7 +889,10 @@ def _capabilities_payload() -> dict[str, Any]:
             "request_schema": STATUS_REQUEST_SCHEMA,
             "request_fields": ["schema", "event_id", "site_id"],
             "response_schema": STATUS_RESPONSE_SCHEMA,
-            "response_fields": ["schema", "status", "capabilities_sha256"],
+            "response_fields": [
+                "schema", "status", "capabilities_sha256",
+                "capability_binding",
+            ],
             "success_status": 200,
         },
     }
@@ -851,7 +949,7 @@ class CMSSourceHTTPApplication:
     def __init__(self, runtime: Any, authenticator: Callable[[dict[str, Any]], Any]):
         if not all(callable(getattr(runtime, name, None)) for name in (
             "enqueue_change", "enqueue_removal", "status", "health",
-            "worker_readiness", "require_worker_ready",
+            "worker_readiness", "require_worker_ready", "capability_binding",
         )):
             raise TypeError("runtime must provide source CMS operations")
         if not callable(authenticator):
@@ -859,6 +957,18 @@ class CMSSourceHTTPApplication:
         self.runtime = runtime
         self.authenticator = authenticator
 
+    def _runtime_binding(self) -> dict[str, Any]:
+        try:
+            return _capability_binding_payload(
+                self.runtime.capability_binding()
+            )
+        except CMSSourceHTTPBlocked:
+            raise
+        except Exception:
+            raise CMSSourceHTTPBlocked(
+                "source_http.runtime_blocked", 503,
+            ) from None
+
     @staticmethod
     def _headers(environ: Mapping[str, Any]) -> tuple[tuple[str, str], ...]:
         headers = []
@@ -1006,11 +1116,13 @@ class CMSSourceHTTPApplication:
                     raise CMSSourceHTTPBlocked("source_http.content_type_invalid", 415)
                 body = self._body(environ, required=True)
             principal = self._authenticate(environ, path, body)
+            binding = self._runtime_binding()
 
             if path == CAPABILITIES_PATH:
                 return self._send(start_response, 200, {
                     "schema": CAPABILITIES_RESPONSE_SCHEMA,
                     "capabilities": _capabilities_payload(),
+                    "capability_binding": binding,
                 })
 
             if path == HEALTH_PATH:
@@ -1026,6 +1138,7 @@ class CMSSourceHTTPApplication:
                     "schema": HEALTH_RESPONSE_SCHEMA,
                     "health": report,
                     "capabilities_sha256": _capabilities_payload()["sha256"],
+                    "capability_binding": self._runtime_binding(),
                 })
 
             if path == READINESS_PATH:
@@ -1041,6 +1154,7 @@ class CMSSourceHTTPApplication:
                     "schema": READINESS_RESPONSE_SCHEMA,
                     "readiness": report,
                     "capabilities_sha256": _capabilities_payload()["sha256"],
+                    "capability_binding": self._runtime_binding(),
                 })
 
             request = self._request(body)
@@ -1085,6 +1199,7 @@ class CMSSourceHTTPApplication:
                         expected_site_id=site_id,
                     ),
                     "capabilities_sha256": _capabilities_payload()["sha256"],
+                    "capability_binding": self._runtime_binding(),
                 })
 
             envelope_key = "change" if path == CHANGE_PATH else "removal"
@@ -1143,6 +1258,7 @@ class CMSSourceHTTPApplication:
                 ),
                 **payload,
                 "capabilities_sha256": _capabilities_payload()["sha256"],
+                "capability_binding": self._runtime_binding(),
             })
         except CMSSourceHTTPBlocked as failure:
             return self._error(start_response, failure)