3tears-agent-acl 0.14.0__tar.gz

3tears_agent_acl-0.14.0/.gitignore

@@ -0,0 +1,216 @@
+# Byte-compiled / optimized / DLL files
+__pycache__/
+*.py[codz]
+*$py.class
+
+# C extensions
+*.so
+
+# Distribution / packaging
+.Python
+build/
+develop-eggs/
+dist/
+downloads/
+eggs/
+.eggs/
+lib/
+lib64/
+parts/
+sdist/
+var/
+wheels/
+share/python-wheels/
+*.egg-info/
+.installed.cfg
+*.egg
+MANIFEST
+
+# PyInstaller
+#  Usually these files are written by a python script from a template
+#  before PyInstaller builds the exe, so as to inject date/other infos into it.
+*.manifest
+*.spec
+
+# Installer logs
+pip-log.txt
+pip-delete-this-directory.txt
+
+# Unit test / coverage reports
+htmlcov/
+.tox/
+.nox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+*.py.cover
+.hypothesis/
+.pytest_cache/
+cover/
+
+# Translations
+*.mo
+*.pot
+
+# Django stuff:
+*.log
+local_settings.py
+db.sqlite3
+db.sqlite3-journal
+
+# Flask stuff:
+instance/
+.webassets-cache
+
+# Scrapy stuff:
+.scrapy
+
+# Sphinx documentation
+docs/_build/
+
+# PyBuilder
+.pybuilder/
+target/
+
+# Jupyter Notebook
+.ipynb_checkpoints
+
+# IPython
+profile_default/
+ipython_config.py
+
+# pyenv
+#   For a library or package, you might want to ignore these files since the code is
+#   intended to run in multiple environments; otherwise, check them in:
+# .python-version
+
+# pipenv
+#   According to pypa/pipenv#598, it is recommended to include Pipfile.lock in version control.
+#   However, in case of collaboration, if having platform-specific dependencies or dependencies
+#   having no cross-platform support, pipenv may install dependencies that don't work, or not
+#   install all needed dependencies.
+#Pipfile.lock
+
+# UV
+#   Similar to Pipfile.lock, it is generally recommended to include uv.lock in version control.
+#   This is especially recommended for binary packages to ensure reproducibility, and is more
+#   commonly ignored for libraries.
+#uv.lock
+
+# poetry
+#   Similar to Pipfile.lock, it is generally recommended to include poetry.lock in version control.
+#   This is especially recommended for binary packages to ensure reproducibility, and is more
+#   commonly ignored for libraries.
+#   https://python-poetry.org/docs/basic-usage/#commit-your-poetrylock-file-to-version-control
+#poetry.lock
+#poetry.toml
+
+# pdm
+#   Similar to Pipfile.lock, it is generally recommended to include pdm.lock in version control.
+#   pdm recommends including project-wide configuration in pdm.toml, but excluding .pdm-python.
+#   https://pdm-project.org/en/latest/usage/project/#working-with-version-control
+#pdm.lock
+#pdm.toml
+.pdm-python
+.pdm-build/
+
+# pixi
+#   Similar to Pipfile.lock, it is generally recommended to include pixi.lock in version control.
+#pixi.lock
+#   Pixi creates a virtual environment in the .pixi directory, just like venv module creates one
+#   in the .venv directory. It is recommended not to include this directory in version control.
+.pixi
+
+# PEP 582; used by e.g. github.com/David-OConnor/pyflow and github.com/pdm-project/pdm
+__pypackages__/
+
+# Celery stuff
+celerybeat-schedule
+celerybeat.pid
+
+# SageMath parsed files
+*.sage.py
+
+# Environments
+.env
+.envrc
+.venv
+env/
+venv/
+ENV/
+env.bak/
+venv.bak/
+
+# Spyder project settings
+.spyderproject
+.spyproject
+
+# Rope project settings
+.ropeproject
+
+# mkdocs documentation
+/site
+
+# mypy
+.mypy_cache/
+.dmypy.json
+dmypy.json
+
+# Pyre type checker
+.pyre/
+
+# pytype static type analyzer
+.pytype/
+
+# Cython debug symbols
+cython_debug/
+
+# PyCharm
+#  JetBrains specific template is maintained in a separate JetBrains.gitignore that can
+#  be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore
+#  and can be added to the global gitignore or merged into this file.  For a more nuclear
+#  option (not recommended) you can uncomment the following to ignore the entire idea folder.
+#.idea/
+
+# Abstra
+# Abstra is an AI-powered process automation framework.
+# Ignore directories containing user credentials, local state, and settings.
+# Learn more at https://abstra.io/docs
+.abstra/
+
+# Visual Studio Code
+#  Visual Studio Code specific template is maintained in a separate VisualStudioCode.gitignore 
+#  that can be found at https://github.com/github/gitignore/blob/main/Global/VisualStudioCode.gitignore
+#  and can be added to the global gitignore or merged into this file. However, if you prefer, 
+#  you could uncomment the following to ignore the entire vscode folder
+# .vscode/
+
+# Ruff stuff:
+.ruff_cache/
+
+# PyPI configuration file
+.pypirc
+
+# Cursor
+#  Cursor is an AI-powered code editor. `.cursorignore` specifies files/directories to
+#  exclude from AI features like autocomplete and code analysis. Recommended for sensitive data
+#  refer to https://docs.cursor.com/context/ignore-files
+.cursorignore
+.cursorindexingignore
+
+# Marimo
+marimo/_static/
+marimo/_lsp/
+__marimo__/
+
+# Claude Code local state
+.claude/
+
+# prawduct session evidence (local governance artifacts, never shipped)
+.prawduct/
+
+# macOS folder metadata
+.DS_Store

3tears_agent_acl-0.14.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Mark Pace
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

3tears_agent_acl-0.14.0/PKG-INFO

@@ -0,0 +1,181 @@
+Metadata-Version: 2.4
+Name: 3tears-agent-acl
+Version: 0.14.0
+Summary: shared rbac evaluator + cache for the 3tears platform: groups, roles, role assignments, evaluation trails
+Project-URL: Repository, https://github.com/pacepace/3tears
+Author: pace
+License-Expression: MIT
+License-File: LICENSE
+Classifier: Development Status :: 3 - Alpha
+Classifier: Framework :: AsyncIO
+Classifier: Intended Audience :: Developers
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Libraries
+Classifier: Typing :: Typed
+Requires-Python: >=3.14
+Requires-Dist: 3tears
+Requires-Dist: 3tears-observe
+Requires-Dist: pydantic>=2.0
+Description-Content-Type: text/markdown
+
+# 3tears-agent-acl
+
+Shared RBAC primitives for the 3tears platform: evaluator, cache,
+canonical Collections, loader adapters, and NATS invalidation
+payload models.
+
+## Purpose
+
+Single source of truth for "can actor do action on namespace" decisions
+PLUS the persistence layer that feeds them. The same pure-Python
+evaluator, canonical Collections, and loader adapters run in every
+consuming application, so authorization answers are byte-identical
+across processes and one set of unit tests covers every caller.
+
+The Collections, loaders, and invalidation models are reusable across
+any 3tears app. The package supersedes per-resource ACL code paths
+(`namespace_grants`, workspace-specific checks, tool-access fnmatch
+lists).
+
+## Public API
+
+Exports (see `src/threetears/agent/acl/__init__.py`):
+
+### Evaluation
+
+- `evaluate_decision(ctx, *, cache: AclCache) -> bool` -- fast yes/no
+  hot path. The cache is consulted for membership and per-namespace
+  contribution layers on every call, falling back to its loaders only
+  on cache miss; production hit rate against repeated authz checks
+  for the same `(actor, namespace)` is ~100% within the cache TTL.
+- `evaluate_with_trail(ctx, *, cache) -> EvaluationResult` --
+  introspection path returning every
+  `(group, assignment, role) -> contributed_actions` chain plus
+  `limiting_side` for user×agent intersection queries. Uses the same
+  cache layers as `evaluate_decision`; trails are stored alongside
+  the action set so successive decision-mode and trail-mode calls
+  for the same actor + namespace serve from cache.
+- `evaluate_file_access(*, namespace, user_id, agent_id, path,
+  direction, cache) -> bool` -- workspace path-glob gate; same cache
+  semantics.
+- `authorize(*, namespace_collection, namespace_name, action,
+  user_id, agent_id, cache) -> EvaluationResult` -- canonical
+  authorization primitive every app's resource-typed wrapper
+  is built on. Looks up the namespace by name, runs
+  `evaluate_with_trail` through the cache, raises generic
+  `AccessDenied` on deny / `NamespaceNotFound` on missing row.
+- `authorize_with_trail` -- variant returning `(result, ns_entity)`
+  for wrappers needing the entity.
+- `AccessDenied` / `NamespaceNotFound` -- generic + namespace-miss
+  exception classes; per-resource wrappers subclass `AccessDenied`
+  to carry typed catching at endpoint code (e.g.
+  `MemoryAccessDenied`, `DatasourceAccessDenied`).
+- `AclCache` -- three-layer in-process TTL cache
+  (`actor -> [GroupMembership]`, `(group_id, namespace_id) -> action_set
+  + trails`, `(group_id, namespace_type, customer_id) -> action_set
+  + trails`) with fine-grained invalidation hooks fired on
+  group-membership / role / assignment change. The `ActorMembershipEntry`
+  carries the full memberships tuple so the evaluator's
+  cross-customer + member-type filter runs against cached state.
+
+### Persistence
+
+- `GroupCollection`, `GroupMemberCollection`, `RoleCollection`,
+  `RoleAssignmentCollection`, `NamespaceCollection` -- three-tier
+  `SchemaBackedCollection` subclasses fronting the canonical RBAC
+  tables (`groups`, `group_members`, `roles`, `role_assignments`,
+  `namespaces`). Schemas use canonical RBAC names with no
+  deploy-specific schema prefix; the prefix is set on the L3 pool's
+  `search_path`, not in the schema name on the Collection.
+- `GroupEntity`, `GroupMemberEntity`, `RoleEntity`,
+  `RoleAssignmentEntity`, `NamespaceEntity` -- `BaseEntity`
+  subclasses; four use composite primary keys post-row_scope
+  partitioning (`(row_scope, id)` for groups / role_assignments /
+  namespaces; `(group_id, id)` for group_members).
+- `CollectionMembershipLoader`, `CollectionGrantLoader` -- concrete
+  loader adapters satisfying the `MembershipLoader` /
+  `GrantLoader` Protocols, wired against the canonical Collections.
+
+### Invalidation
+
+- `MembershipInvalidatePayload`, `AssignmentInvalidatePayload`,
+  `RoleInvalidatePayload` -- typed Pydantic models for the three
+  `{ns}.acl.*.invalidate` NATS subjects. Wire format is single-source:
+  every publisher (admin endpoints, agent self-mutations) and every
+  subscriber (cache subscribers in any consuming app) speaks
+  these models.
+
+### Value types & protocols
+
+- Value types: `Group`, `GroupMembership`, `Role`, `RoleAssignment`,
+  `Namespace`, `EvaluationContext`, `EvaluationResult`, `Trail`.
+- Enums: `ActorType`, `MemberType`, `ScopeType`, `LimitingSide`.
+- I/O protocols: `GrantLoader`, `MembershipLoader` -- callers may
+  implement these against any persistence layer; the canonical
+  `Collection*Loader` adapters above are the reference impls.
+
+## Consuming the package from a 3tears app
+
+Each app constructs the canonical Collections against its own L3
+pool (direct asyncpg in a server-style deployment, NATS-proxied L3 in
+each agent pod) and wires the canonical loader adapters + cache.
+Deployment-specific admin query shapes (dynamic `list_by_filter` /
+per-cardinality counts / multi-table discovery JOINs) live on
+consuming-app subclasses.
+
+```python
+from threetears.agent.acl import (
+    AclCache,
+    CollectionGrantLoader,
+    CollectionMembershipLoader,
+    EvaluationContext,
+    GroupCollection,
+    GroupMemberCollection,
+    NamespaceCollection,
+    RoleAssignmentCollection,
+    RoleCollection,
+    evaluate_decision,
+)
+
+# 1. construct Collections against your registry / L3 pool
+group_collection = GroupCollection(registry=registry, config=core_config)
+group_member_collection = GroupMemberCollection(registry=registry, config=core_config)
+role_collection = RoleCollection(registry=registry, config=core_config)
+role_assignment_collection = RoleAssignmentCollection(registry=registry, config=core_config)
+namespace_collection = NamespaceCollection(registry=registry, config=core_config)
+
+# 2. wire the canonical loaders
+membership_loader = CollectionMembershipLoader(collection=group_member_collection)
+grant_loader = CollectionGrantLoader(
+    assignment_collection=role_assignment_collection,
+    role_collection=role_collection,
+    group_collection=group_collection,
+)
+
+# 3. build the cache
+cache = AclCache(
+    membership_loader=membership_loader,
+    grant_loader=grant_loader,
+    ttl_seconds=60,
+)
+
+# 4. evaluate
+ctx = EvaluationContext(
+    namespace=target_namespace,
+    action="read",
+    user_id=user_id,
+    agent_id=agent_id,
+)
+allowed = await evaluate_decision(
+    ctx,
+    membership_loader=membership_loader,
+    grant_loader=grant_loader,
+)
+```
+
+Implicit ownership: if `namespace.owner_agent_id == ctx.agent_id`,
+the agent side short-circuits to full permissions with no group
+lookup or assignment query. Ownership is a property of the namespace
+row, never a grant.

3tears_agent_acl-0.14.0/README.md

@@ -0,0 +1,159 @@
+# 3tears-agent-acl
+
+Shared RBAC primitives for the 3tears platform: evaluator, cache,
+canonical Collections, loader adapters, and NATS invalidation
+payload models.
+
+## Purpose
+
+Single source of truth for "can actor do action on namespace" decisions
+PLUS the persistence layer that feeds them. The same pure-Python
+evaluator, canonical Collections, and loader adapters run in every
+consuming application, so authorization answers are byte-identical
+across processes and one set of unit tests covers every caller.
+
+The Collections, loaders, and invalidation models are reusable across
+any 3tears app. The package supersedes per-resource ACL code paths
+(`namespace_grants`, workspace-specific checks, tool-access fnmatch
+lists).
+
+## Public API
+
+Exports (see `src/threetears/agent/acl/__init__.py`):
+
+### Evaluation
+
+- `evaluate_decision(ctx, *, cache: AclCache) -> bool` -- fast yes/no
+  hot path. The cache is consulted for membership and per-namespace
+  contribution layers on every call, falling back to its loaders only
+  on cache miss; production hit rate against repeated authz checks
+  for the same `(actor, namespace)` is ~100% within the cache TTL.
+- `evaluate_with_trail(ctx, *, cache) -> EvaluationResult` --
+  introspection path returning every
+  `(group, assignment, role) -> contributed_actions` chain plus
+  `limiting_side` for user×agent intersection queries. Uses the same
+  cache layers as `evaluate_decision`; trails are stored alongside
+  the action set so successive decision-mode and trail-mode calls
+  for the same actor + namespace serve from cache.
+- `evaluate_file_access(*, namespace, user_id, agent_id, path,
+  direction, cache) -> bool` -- workspace path-glob gate; same cache
+  semantics.
+- `authorize(*, namespace_collection, namespace_name, action,
+  user_id, agent_id, cache) -> EvaluationResult` -- canonical
+  authorization primitive every app's resource-typed wrapper
+  is built on. Looks up the namespace by name, runs
+  `evaluate_with_trail` through the cache, raises generic
+  `AccessDenied` on deny / `NamespaceNotFound` on missing row.
+- `authorize_with_trail` -- variant returning `(result, ns_entity)`
+  for wrappers needing the entity.
+- `AccessDenied` / `NamespaceNotFound` -- generic + namespace-miss
+  exception classes; per-resource wrappers subclass `AccessDenied`
+  to carry typed catching at endpoint code (e.g.
+  `MemoryAccessDenied`, `DatasourceAccessDenied`).
+- `AclCache` -- three-layer in-process TTL cache
+  (`actor -> [GroupMembership]`, `(group_id, namespace_id) -> action_set
+  + trails`, `(group_id, namespace_type, customer_id) -> action_set
+  + trails`) with fine-grained invalidation hooks fired on
+  group-membership / role / assignment change. The `ActorMembershipEntry`
+  carries the full memberships tuple so the evaluator's
+  cross-customer + member-type filter runs against cached state.
+
+### Persistence
+
+- `GroupCollection`, `GroupMemberCollection`, `RoleCollection`,
+  `RoleAssignmentCollection`, `NamespaceCollection` -- three-tier
+  `SchemaBackedCollection` subclasses fronting the canonical RBAC
+  tables (`groups`, `group_members`, `roles`, `role_assignments`,
+  `namespaces`). Schemas use canonical RBAC names with no
+  deploy-specific schema prefix; the prefix is set on the L3 pool's
+  `search_path`, not in the schema name on the Collection.
+- `GroupEntity`, `GroupMemberEntity`, `RoleEntity`,
+  `RoleAssignmentEntity`, `NamespaceEntity` -- `BaseEntity`
+  subclasses; four use composite primary keys post-row_scope
+  partitioning (`(row_scope, id)` for groups / role_assignments /
+  namespaces; `(group_id, id)` for group_members).
+- `CollectionMembershipLoader`, `CollectionGrantLoader` -- concrete
+  loader adapters satisfying the `MembershipLoader` /
+  `GrantLoader` Protocols, wired against the canonical Collections.
+
+### Invalidation
+
+- `MembershipInvalidatePayload`, `AssignmentInvalidatePayload`,
+  `RoleInvalidatePayload` -- typed Pydantic models for the three
+  `{ns}.acl.*.invalidate` NATS subjects. Wire format is single-source:
+  every publisher (admin endpoints, agent self-mutations) and every
+  subscriber (cache subscribers in any consuming app) speaks
+  these models.
+
+### Value types & protocols
+
+- Value types: `Group`, `GroupMembership`, `Role`, `RoleAssignment`,
+  `Namespace`, `EvaluationContext`, `EvaluationResult`, `Trail`.
+- Enums: `ActorType`, `MemberType`, `ScopeType`, `LimitingSide`.
+- I/O protocols: `GrantLoader`, `MembershipLoader` -- callers may
+  implement these against any persistence layer; the canonical
+  `Collection*Loader` adapters above are the reference impls.
+
+## Consuming the package from a 3tears app
+
+Each app constructs the canonical Collections against its own L3
+pool (direct asyncpg in a server-style deployment, NATS-proxied L3 in
+each agent pod) and wires the canonical loader adapters + cache.
+Deployment-specific admin query shapes (dynamic `list_by_filter` /
+per-cardinality counts / multi-table discovery JOINs) live on
+consuming-app subclasses.
+
+```python
+from threetears.agent.acl import (
+    AclCache,
+    CollectionGrantLoader,
+    CollectionMembershipLoader,
+    EvaluationContext,
+    GroupCollection,
+    GroupMemberCollection,
+    NamespaceCollection,
+    RoleAssignmentCollection,
+    RoleCollection,
+    evaluate_decision,
+)
+
+# 1. construct Collections against your registry / L3 pool
+group_collection = GroupCollection(registry=registry, config=core_config)
+group_member_collection = GroupMemberCollection(registry=registry, config=core_config)
+role_collection = RoleCollection(registry=registry, config=core_config)
+role_assignment_collection = RoleAssignmentCollection(registry=registry, config=core_config)
+namespace_collection = NamespaceCollection(registry=registry, config=core_config)
+
+# 2. wire the canonical loaders
+membership_loader = CollectionMembershipLoader(collection=group_member_collection)
+grant_loader = CollectionGrantLoader(
+    assignment_collection=role_assignment_collection,
+    role_collection=role_collection,
+    group_collection=group_collection,
+)
+
+# 3. build the cache
+cache = AclCache(
+    membership_loader=membership_loader,
+    grant_loader=grant_loader,
+    ttl_seconds=60,
+)
+
+# 4. evaluate
+ctx = EvaluationContext(
+    namespace=target_namespace,
+    action="read",
+    user_id=user_id,
+    agent_id=agent_id,
+)
+allowed = await evaluate_decision(
+    ctx,
+    membership_loader=membership_loader,
+    grant_loader=grant_loader,
+)
+```
+
+Implicit ownership: if `namespace.owner_agent_id == ctx.agent_id`,
+the agent side short-circuits to full permissions with no group
+lookup or assignment query. Ownership is a property of the namespace
+row, never a grant.

3tears_agent_acl-0.14.0/pyproject.toml

@@ -0,0 +1,51 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "3tears-agent-acl"
+version = "0.14.0"
+description = "shared rbac evaluator + cache for the 3tears platform: groups, roles, role assignments, evaluation trails"
+readme = "README.md"
+requires-python = ">=3.14"
+authors = [{name = "pace"}]
+license = "MIT"
+license-files = ["LICENSE"]
+classifiers = [
+    "Development Status :: 3 - Alpha",
+    "Framework :: AsyncIO",
+    "Intended Audience :: Developers",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.14",
+    "Topic :: Security",
+    "Topic :: Software Development :: Libraries",
+    "Typing :: Typed",
+]
+dependencies = [
+    "3tears",
+    "3tears-observe",
+    "pydantic>=2.0",
+]
+
+[project.urls]
+Repository = "https://github.com/pacepace/3tears"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/threetears"]
+
+[tool.uv.sources]
+3tears = { workspace = true }
+3tears-observe = { workspace = true }
+
+[tool.mypy]
+strict = true
+mypy_path = "src"
+packages = ["threetears.agent.acl"]
+explicit_package_bases = true
+ignore_missing_imports = true
+
+[tool.pytest.ini_options]
+asyncio_mode = "auto"
+markers = [
+    "integration: integration tests requiring docker or real infra",
+]