anchorpoint-install 0.77.1__tar.gz

anchorpoint_install-0.77.1/.gitignore

@@ -0,0 +1,67 @@
+__pycache__/
+*.pyc
+.venv/
+venv/
+.env
+.env.*
+*-key.json
+# Slice 16 moved dashboard accounts into the users table and deleted this file,
+# so nothing reads it any more. The ignore stays because DASHBOARD.md tells an
+# upgrading deployment to put one here for the one-shot --import-file, and for
+# the length of that window it is a file of live password hashes sitting at a
+# stageable path in a directory the release step bulk-adds.
+config/dashboard-users.yaml
+.pytest_cache/
+.ruff_cache/
+.superpowers/
+
+# graphify knowledge graph outputs. Regenerated by /graphify from the tree
+# itself, and it carries an extraction cache keyed on file hashes, so it is
+# derived state rather than source.
+graphify-out/
+
+# Deployment-level config is per installation. The committed file is
+# deployment.yaml.example.
+config/deployment.yaml
+
+# The fleet receiver's own SQLite file. Local runtime state, not source, and
+# it lives on the receiver's own infrastructure rather than in the repo.
+# DEFAULT_DB resolves to this exact path at the repo root when
+# ANCHORPOINT_FLEET_DB is unset, so this is where a local run actually
+# writes it. The three sibling files SQLite leaves beside it in rollback
+# journal or WAL mode are runtime state too, not a second copy of anything.
+fleet.sqlite3
+fleet.sqlite3-journal
+fleet.sqlite3-wal
+fleet.sqlite3-shm
+
+# The console's dependencies and its built bundle. The bundle is produced by
+# the Dockerfile's node stage at build time and by `npm run build` locally, so
+# committing it would be committing a build output that goes stale silently.
+console/node_modules/
+anchorpoint/dashboard/static/
+console/*.tsbuildinfo
+
+# The npm client's dependencies. Its compiler, not a runtime dependency: the
+# package declares none. Its build output needs no line here, because the
+# dist/ below matches at any depth.
+npm-connect/node_modules/
+
+# Release bundles. Hundreds of megabytes of image tarball per release
+# (S358), built into dist/ by scripts/build-release.py and carried to a
+# client by hand or by a link. Never committed.
+dist/
+
+# The alias package has no dependencies of its own to install, but a
+# stray npm install in it would leave a tree behind.
+npm-alias/node_modules/
+npm-alias/*.tgz
+
+# A demo enterprise's record of which invoices it has already reviewed, written
+# beside its runner after every run. Output rather than configuration, despite
+# living under config/: it carries timestamps, task and session ids and per-run
+# spend, it is rewritten on every invoice of every night, and a second machine's
+# copy would describe a different week. The runner refuses a file it cannot
+# read rather than starting fresh, so losing one is recoverable by hand; a
+# committed one that disagrees with the deployment it is restored beside is not.
+config/demo-enterprises/*/run-state.json

anchorpoint_install-0.77.1/LICENSE

@@ -0,0 +1,94 @@
+Business Source License 1.1
+
+Parameters
+
+Licensor:             Sagacian
+Licensed Work:        Anchorpoint 0.70.0
+                      The Licensed Work is (c) 2026 Sagacian
+Additional Use Grant: You may make use of the Licensed Work, provided that you
+                      do not use it in production. A use is in production if it
+                      routes, governs or records traffic belonging to anybody
+                      other than the licensee's own employees while they are
+                      evaluating the Licensed Work.
+Change Date:          2029-09-09
+Change License:       Apache License, Version 2.0
+
+For information about alternative licensing arrangements for the Licensed Work,
+please contact the Licensor.
+
+-----------------------------------------------------------------------------
+
+Business Source License 1.1
+
+Terms
+
+The Licensor hereby grants you the right to copy, modify, create derivative
+works, redistribute, and make non-production use of the Licensed Work. The
+Licensor may make an Additional Use Grant, above, permitting limited production
+use.
+
+Effective on the Change Date, or the fourth anniversary of the first publicly
+available distribution of a specific version of the Licensed Work under this
+License, whichever comes first, the Licensor hereby grants you rights under
+the terms of the Change License, and the rights granted in the paragraph
+above terminate.
+
+If your use of the Licensed Work does not comply with the requirements
+currently in effect as described in this License, you must purchase a
+commercial license from the Licensor, its affiliated entities, or authorized
+resellers, or you must refrain from using the Licensed Work.
+
+All copies of the original and modified Licensed Work, and derivative works of
+the Licensed Work, are subject to this License. This License applies
+separately for each version of the Licensed Work and the Change Date may vary
+for each version of the Licensed Work released by Licensor.
+
+You must conspicuously display this License on each original or modified copy
+of the Licensed Work. If you receive the Licensed Work in original or modified
+form from a third party, the terms and conditions set forth in this License
+apply to your use of that work.
+
+Any use of the Licensed Work in violation of this License will automatically
+terminate your rights under this License for the current and all other
+versions of the Licensed Work.
+
+This License does not grant you any right in any trademark or logo of Licensor
+or its affiliates (provided that you may use a trademark or logo of Licensor
+as expressly required by this License).
+
+TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON AN
+"AS IS" BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+TITLE.
+
+MariaDB hereby grants you permission to use this License's text to license
+your works, and to refer to it using the trademark "Business Source License",
+as long as you comply with the Covenants of Licensor below.
+
+Covenants of Licensor
+
+In consideration of the right to use this License's text and the "Business
+Source License" name and trademark, Licensor covenants to MariaDB, and to all
+other recipients of the licensed work to be provided by Licensor:
+
+1. To specify as the Change License the GPL Version 2.0 or any later version,
+   or a license that is compatible with GPL Version 2.0 or a later version,
+   where "compatible" means that software provided under the Change License can
+   be included in a program with software provided under GPL Version 2.0 or a
+   later version. Licensor may specify additional Change Licenses without
+   limitation.
+
+2. To either: (a) specify an additional grant of rights to use that does not
+   impose any additional restriction on the right granted in this License, as
+   the Additional Use Grant; or (b) insert the text "None".
+
+3. To specify a Change Date.
+
+4. Not to modify this License in any other way.
+
+Notice
+
+The Business Source License (this document, or the "License") is not an Open
+Source license. However, the Licensed Work will eventually be made available
+under an Open Source License, as stated in this License.

anchorpoint_install-0.77.1/NOTICE

@@ -0,0 +1,16 @@
+Anchorpoint
+Copyright (c) 2026 Sagacian
+
+This release is licensed under the Business Source License 1.1 (see LICENSE).
+Its Change Date is three years from the date of this release, on which day this
+release, and only this release, becomes available under the Apache License,
+Version 2.0. Every release carries its own Change Date, so a later release does
+not delay the conversion of an earlier one.
+
+The name Anchorpoint and the release signing identity are not licensed by
+LICENSE. See TRADEMARKS.md.
+
+The client connector published to npm as anchorpoint-connect, and its alias
+@sagacian-anchorpoint/connect, are licensed under the MIT License instead. They
+are a client library a customer embeds in their own application, and the
+production restriction above is the one thing a client library must not carry.

anchorpoint_install-0.77.1/PKG-INFO

@@ -0,0 +1,127 @@
+Metadata-Version: 2.5
+Name: anchorpoint-install
+Version: 0.77.1
+Summary: Install Anchorpoint from a signed release bundle.
+License: Business Source License 1.1
+        
+        Parameters
+        
+        Licensor:             Sagacian
+        Licensed Work:        Anchorpoint 0.70.0
+                              The Licensed Work is (c) 2026 Sagacian
+        Additional Use Grant: You may make use of the Licensed Work, provided that you
+                              do not use it in production. A use is in production if it
+                              routes, governs or records traffic belonging to anybody
+                              other than the licensee's own employees while they are
+                              evaluating the Licensed Work.
+        Change Date:          2029-09-09
+        Change License:       Apache License, Version 2.0
+        
+        For information about alternative licensing arrangements for the Licensed Work,
+        please contact the Licensor.
+        
+        -----------------------------------------------------------------------------
+        
+        Business Source License 1.1
+        
+        Terms
+        
+        The Licensor hereby grants you the right to copy, modify, create derivative
+        works, redistribute, and make non-production use of the Licensed Work. The
+        Licensor may make an Additional Use Grant, above, permitting limited production
+        use.
+        
+        Effective on the Change Date, or the fourth anniversary of the first publicly
+        available distribution of a specific version of the Licensed Work under this
+        License, whichever comes first, the Licensor hereby grants you rights under
+        the terms of the Change License, and the rights granted in the paragraph
+        above terminate.
+        
+        If your use of the Licensed Work does not comply with the requirements
+        currently in effect as described in this License, you must purchase a
+        commercial license from the Licensor, its affiliated entities, or authorized
+        resellers, or you must refrain from using the Licensed Work.
+        
+        All copies of the original and modified Licensed Work, and derivative works of
+        the Licensed Work, are subject to this License. This License applies
+        separately for each version of the Licensed Work and the Change Date may vary
+        for each version of the Licensed Work released by Licensor.
+        
+        You must conspicuously display this License on each original or modified copy
+        of the Licensed Work. If you receive the Licensed Work in original or modified
+        form from a third party, the terms and conditions set forth in this License
+        apply to your use of that work.
+        
+        Any use of the Licensed Work in violation of this License will automatically
+        terminate your rights under this License for the current and all other
+        versions of the Licensed Work.
+        
+        This License does not grant you any right in any trademark or logo of Licensor
+        or its affiliates (provided that you may use a trademark or logo of Licensor
+        as expressly required by this License).
+        
+        TO THE EXTENT PERMITTED BY APPLICABLE LAW, THE LICENSED WORK IS PROVIDED ON AN
+        "AS IS" BASIS. LICENSOR HEREBY DISCLAIMS ALL WARRANTIES AND CONDITIONS,
+        EXPRESS OR IMPLIED, INCLUDING (WITHOUT LIMITATION) WARRANTIES OF
+        MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND
+        TITLE.
+        
+        MariaDB hereby grants you permission to use this License's text to license
+        your works, and to refer to it using the trademark "Business Source License",
+        as long as you comply with the Covenants of Licensor below.
+        
+        Covenants of Licensor
+        
+        In consideration of the right to use this License's text and the "Business
+        Source License" name and trademark, Licensor covenants to MariaDB, and to all
+        other recipients of the licensed work to be provided by Licensor:
+        
+        1. To specify as the Change License the GPL Version 2.0 or any later version,
+           or a license that is compatible with GPL Version 2.0 or a later version,
+           where "compatible" means that software provided under the Change License can
+           be included in a program with software provided under GPL Version 2.0 or a
+           later version. Licensor may specify additional Change Licenses without
+           limitation.
+        
+        2. To either: (a) specify an additional grant of rights to use that does not
+           impose any additional restriction on the right granted in this License, as
+           the Additional Use Grant; or (b) insert the text "None".
+        
+        3. To specify a Change Date.
+        
+        4. Not to modify this License in any other way.
+        
+        Notice
+        
+        The Business Source License (this document, or the "License") is not an Open
+        Source license. However, the Licensed Work will eventually be made available
+        under an Open Source License, as stated in this License.
+License-File: LICENSE
+License-File: NOTICE
+Requires-Python: >=3.11
+Description-Content-Type: text/markdown
+
+# anchorpoint-install
+
+The installer for Anchorpoint. **This package does not contain the platform.**
+
+Anchorpoint ships as a signed release bundle: one self contained artifact
+holding the application image, the compose file, the migration and the
+manifest, signed with an Ed25519 key whose fingerprint is published. This
+package is the program that verifies such a bundle and stands a deployment up
+from it. The platform itself reaches a host as an image, never as a wheel.
+
+    pipx install anchorpoint-install
+    anchorpoint-install verify ./anchorpoint-0.69.0-linux-amd64
+    anchorpoint-install install ./anchorpoint-0.69.0-linux-amd64 \
+        --dir /opt/anchorpoint \
+        --trust-fingerprint SHA256:... \
+        --admin-user you
+
+The `--trust-fingerprint` value must come from somewhere other than the
+bundle. Pasting the fingerprint out of the bundle's own key verifies nothing.
+
+Requires Docker Engine with the compose plugin, Python 3.11 or later, and an
+OpenSSH 8.2 or later `ssh-keygen`.
+
+Licensed under the Business Source License 1.1. See LICENSE and TRADEMARKS.md.

anchorpoint_install-0.77.1/README.md

@@ -0,0 +1,24 @@
+# anchorpoint-install
+
+The installer for Anchorpoint. **This package does not contain the platform.**
+
+Anchorpoint ships as a signed release bundle: one self contained artifact
+holding the application image, the compose file, the migration and the
+manifest, signed with an Ed25519 key whose fingerprint is published. This
+package is the program that verifies such a bundle and stands a deployment up
+from it. The platform itself reaches a host as an image, never as a wheel.
+
+    pipx install anchorpoint-install
+    anchorpoint-install verify ./anchorpoint-0.69.0-linux-amd64
+    anchorpoint-install install ./anchorpoint-0.69.0-linux-amd64 \
+        --dir /opt/anchorpoint \
+        --trust-fingerprint SHA256:... \
+        --admin-user you
+
+The `--trust-fingerprint` value must come from somewhere other than the
+bundle. Pasting the fingerprint out of the bundle's own key verifies nothing.
+
+Requires Docker Engine with the compose plugin, Python 3.11 or later, and an
+OpenSSH 8.2 or later `ssh-keygen`.
+
+Licensed under the Business Source License 1.1. See LICENSE and TRADEMARKS.md.

anchorpoint_install-0.77.1/TRADEMARKS.md

@@ -0,0 +1,30 @@
+# The Anchorpoint name and the release identity
+
+LICENSE grants rights in the code. It grants none in the name, and none in the
+signing identity, and this file says what those two are for.
+
+## The name
+
+"Anchorpoint" is our mark. You may say that your software works with
+Anchorpoint, that you run Anchorpoint, or that your fork is derived from
+Anchorpoint. You may not name a fork, a distribution or a hosted service
+Anchorpoint, or anything close enough to be mistaken for it, and you may not
+present a modified build as though it were one of ours.
+
+## The release identity
+
+Releases are signed by `release@anchorpoint`, an Ed25519 key whose fingerprint
+is published in docs/RELEASES.md and in docs/INSTALL.md. A bundle that verifies
+against that fingerprint is one we built and signed, and that is the only claim
+the signature makes.
+
+Do not sign a build with a key you present as ours, and do not describe a build
+signed by another key as an Anchorpoint release. A fork is welcome under
+LICENSE's terms; it signs with its own identity.
+
+## Why this is separate from the licence
+
+The code becomes Apache-2.0 on each release's Change Date. The name and the
+release identity do not, because they are how somebody tells our build from
+another one, and that distinction has to survive the conversion the licence
+already promises.

anchorpoint_install-0.77.1/anchorpoint_installer/__init__.py

@@ -0,0 +1,8 @@
+"""Anchorpoint's installer, and nothing else.
+
+This package does not contain the platform. It contains the program that
+fetches a signed release bundle, checks its signature against a fingerprint
+you supply, and stands a deployment up from it. See README.md.
+"""
+
+__version__ = "0.75.0"

anchorpoint_install-0.77.1/anchorpoint_installer/__main__.py

@@ -0,0 +1,20 @@
+"""The console script.
+
+It is the CARRIER's CLI, not install.py's. This package's job is to reach a
+release: check the host, resolve the version, fetch, verify with the verifier
+this package carries, and hand the bundle to the install.py that shipped inside
+it. The installer itself always comes from the bundle, so a carrier nobody has
+upgraded still installs a new release with that release's logic.
+"""
+
+from __future__ import annotations
+
+from anchorpoint_installer.anchorpoint_carrier import _cli
+
+
+def main(argv: list | None = None) -> int:
+    return _cli(argv)
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())