axor-backend 0.1.0__tar.gz

axor_backend-0.1.0/.gitignore

@@ -0,0 +1,9 @@
+__pycache__/
+*.egg-info/
+.venv/
+.env
+node_modules/
+dist/
+*.kuzu/
+traces/
+axor-traces/

axor_backend-0.1.0/PKG-INFO

@@ -0,0 +1,56 @@
+Metadata-Version: 2.4
+Name: axor-backend
+Version: 0.1.0
+Summary: FastAPI backend: trace ingest, control plane (SSE+POST), replay API, GraphStore.
+Project-URL: Homepage, https://github.com/Bucha11/axor-control-plane
+Project-URL: Documentation, https://github.com/Bucha11/axor-control-plane#readme
+Project-URL: Issues, https://github.com/Bucha11/axor-control-plane/issues
+License: Apache-2.0
+Classifier: Development Status :: 4 - Beta
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3.12
+Requires-Python: >=3.12
+Requires-Dist: aiosqlite>=0.20
+Requires-Dist: alembic>=1.13
+Requires-Dist: asyncpg>=0.29
+Requires-Dist: axor-core<0.10,>=0.9.2
+Requires-Dist: axor-eval<0.2,>=0.1.0
+Requires-Dist: fastapi>=0.111
+Requires-Dist: kuzu>=0.4
+Requires-Dist: pynacl>=1.5
+Requires-Dist: sqlalchemy[asyncio]>=2.0
+Requires-Dist: sse-starlette>=2.1
+Requires-Dist: uvicorn>=0.29
+Description-Content-Type: text/markdown
+
+# axor-backend
+
+FastAPI system-of-record + plane service. Persists and fans out; it never
+interprets governance — replay/degradation is `axor_core.kernel`'s.
+
+Run: `AXOR_ALLOW_UNSIGNED=1 uv run uvicorn axor_backend.main:app --factory --port 8400`
+(SQLite by default; set `AXOR_DATABASE_URL=postgresql+asyncpg://…` for Postgres/JSONB).
+
+Modules:
+
+| Module | Responsibility |
+|---|---|
+| `app.py` | app factory: routes, auth middleware, lifespan (stale monitor) |
+| `plane.py` | plane service (protocol v0.2): `/command`, `/desired` (SSE), `/telemetry`, `/facts`, `/cascade-stop` |
+| `storage.py` | append-only events + runs/desired/reported/facts/pins/keys/share-links/notification-subs; JSON→JSONB on Postgres |
+| `replay_api.py` | config→`KernelConfig`, scrubber/counterfactual payloads |
+| `graph.py` | taint graph — a derived index over the event log; `InMemoryGraphStore` (default, rebuilt from the DB at boot) + `KuzuGraphStore`; trace→derivation folding |
+| `signing.py` | operator command signing — delegates JCS to `axor_core.kernel.canonicalize` |
+| `notifications.py` / `monitor.py` | webhook triggers (retries + dead-letter); node-stale sweep |
+| `share.py` | EvidenceCase HTML + dependency-free PDF receipt, revocable links |
+| `auth.py` | opt-in master token + scoped API keys |
+| `ee/` | Enterprise Edition (offline Ed25519 license) — commercial licence, see `ee/LICENSE` |
+
+Env: `AXOR_DATABASE_URL`, `AXOR_API_TOKEN`, `AXOR_OPERATOR_KEYS` (JSON op→hex),
+`AXOR_ALLOW_UNSIGNED`, `AXOR_VENDOR_PUBKEY`, `AXOR_STALE_AFTER`.
+
+Tests: `uv run pytest packages/axor-backend`. In-process suites use httpx
+ASGITransport; `tests/e2e/` (marker `e2e`) boots the real backend + proxy as
+subprocesses and drives them over HTTP/SSE — cross-service upload, live audit &
+desired streams, webhook delivery, auth enforcement, and process-restart
+durability. Run only those with `-m e2e`, or skip them with `-m 'not e2e'`.

axor_backend-0.1.0/README.md

@@ -0,0 +1,31 @@
+# axor-backend
+
+FastAPI system-of-record + plane service. Persists and fans out; it never
+interprets governance — replay/degradation is `axor_core.kernel`'s.
+
+Run: `AXOR_ALLOW_UNSIGNED=1 uv run uvicorn axor_backend.main:app --factory --port 8400`
+(SQLite by default; set `AXOR_DATABASE_URL=postgresql+asyncpg://…` for Postgres/JSONB).
+
+Modules:
+
+| Module | Responsibility |
+|---|---|
+| `app.py` | app factory: routes, auth middleware, lifespan (stale monitor) |
+| `plane.py` | plane service (protocol v0.2): `/command`, `/desired` (SSE), `/telemetry`, `/facts`, `/cascade-stop` |
+| `storage.py` | append-only events + runs/desired/reported/facts/pins/keys/share-links/notification-subs; JSON→JSONB on Postgres |
+| `replay_api.py` | config→`KernelConfig`, scrubber/counterfactual payloads |
+| `graph.py` | taint graph — a derived index over the event log; `InMemoryGraphStore` (default, rebuilt from the DB at boot) + `KuzuGraphStore`; trace→derivation folding |
+| `signing.py` | operator command signing — delegates JCS to `axor_core.kernel.canonicalize` |
+| `notifications.py` / `monitor.py` | webhook triggers (retries + dead-letter); node-stale sweep |
+| `share.py` | EvidenceCase HTML + dependency-free PDF receipt, revocable links |
+| `auth.py` | opt-in master token + scoped API keys |
+| `ee/` | Enterprise Edition (offline Ed25519 license) — commercial licence, see `ee/LICENSE` |
+
+Env: `AXOR_DATABASE_URL`, `AXOR_API_TOKEN`, `AXOR_OPERATOR_KEYS` (JSON op→hex),
+`AXOR_ALLOW_UNSIGNED`, `AXOR_VENDOR_PUBKEY`, `AXOR_STALE_AFTER`.
+
+Tests: `uv run pytest packages/axor-backend`. In-process suites use httpx
+ASGITransport; `tests/e2e/` (marker `e2e`) boots the real backend + proxy as
+subprocesses and drives them over HTTP/SSE — cross-service upload, live audit &
+desired streams, webhook delivery, auth enforcement, and process-restart
+durability. Run only those with `-m e2e`, or skip them with `-m 'not e2e'`.

axor_backend-0.1.0/pyproject.toml

@@ -0,0 +1,34 @@
+[project]
+name = "axor-backend"
+version = "0.1.0"
+description = "FastAPI backend: trace ingest, control plane (SSE+POST), replay API, GraphStore."
+requires-python = ">=3.12"
+readme = "README.md"
+license = { text = "Apache-2.0" }
+classifiers = [
+  "Development Status :: 4 - Beta",
+  "License :: OSI Approved :: Apache Software License",
+  "Programming Language :: Python :: 3.12",
+]
+dependencies = [
+  "axor-core>=0.9.2,<0.10",
+  "axor-eval>=0.1.0,<0.2",
+  "fastapi>=0.111", "sse-starlette>=2.1", "uvicorn>=0.29",
+  "sqlalchemy[asyncio]>=2.0", "asyncpg>=0.29",
+  "kuzu>=0.4",
+  "aiosqlite>=0.20",
+  "alembic>=1.13",
+  "pynacl>=1.5",
+]
+
+[project.urls]
+Homepage = "https://github.com/Bucha11/axor-control-plane"
+Documentation = "https://github.com/Bucha11/axor-control-plane#readme"
+Issues = "https://github.com/Bucha11/axor-control-plane/issues"
+
+[project.scripts]
+axor-license = "axor_backend.ee.cli:main"
+
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"

axor_backend-0.1.0/src/axor_backend/__init__.py

@@ -0,0 +1 @@
+"""axor-backend. Replay imports axor_core.kernel.replay — never reimplements gates (rule 0)."""