cloud-dog-idam 0.5.2__tar.gz

cloud_dog_idam-0.5.2/.docs-manifest.yml

@@ -0,0 +1,6 @@
+schema-version: 1.0
+project: platform-idam
+canon-set: PACKAGE
+canon-template-baseline: 1.0
+conditional-docs: []
+additional-docs: []

cloud_dog_idam-0.5.2/.gitignore

@@ -0,0 +1,16 @@
+.venv/
+__pycache__/
+*.pyc
+*.egg-info/
+dist/
+build/
+.pytest_cache/
+.ruff_cache/
+.coverage
+coverage.xml
+htmlcov/
+working/
+private/
+archive/
+logs/
+*.db

cloud_dog_idam-0.5.2/=2.9

@@ -0,0 +1,7 @@
+Defaulting to user installation because normal site-packages is not writeable
+Collecting pyotp
+  Downloading pyotp-2.9.0-py3-none-any.whl.metadata (9.8 kB)
+Downloading pyotp-2.9.0-py3-none-any.whl (13 kB)
+WARNING: Error parsing dependencies of devscripts: Invalid version: '2.22.1ubuntu1'
+Installing collected packages: pyotp
+Successfully installed pyotp-2.9.0

cloud_dog_idam-0.5.2/AGENT-INSTRUCTION-FIX-IDAM.md

@@ -0,0 +1,135 @@
+# platform-idam — Agent Instruction (v0.2.0)
+
+**Package:** `cloud_dog_idam`  
+**Version:** 0.2.0  
+**Date:** 2026-02-18 (final re-review with source verification)  
+**Scope:** v0.1.0 quality issues (8–11) + v0.2.0 features (FR1.33–FR1.36) + TESTS.md — **ALL DELIVERED AND VERIFIED**
+
+---
+
+## Status: ✅ COMPLETE
+
+All 11 issues (7 round-1 + 4 round-2 quality + 5 v0.2.0 features/TESTS.md) have been resolved. This document is retained for reference and future maintenance.
+
+**Verified on 2026-02-18 (final re-review):**
+
+| Check | Result |
+|-------|--------|
+| **Source files** | ✅ **70 .py files** (was 65 before v0.2.0 features) |
+| **v0.1.0 architectural quality** | ✅ **ALL 4 issues (8–11) RESOLVED** — see below |
+| **v0.2.0 feature files** (5 files) | ✅ **4/4 delivered**: `migration/api_keys.py` (112L), `tokens/session_extensions.py` (81L), `providers/api_key_only.py` (84L), `rbac/policy_extensions.py` (78L) + `migration/__init__.py` (10L) |
+| **Test directories** (78 on disk) | ✅ 6 new v0.2.0 dirs: UT1.32–UT1.35, AT1.8–AT1.9 |
+| **TESTS.md v0.2.0 entries** | ✅ Updated with FR1.33–FR1.36 coverage map and UT1.32–UT1.35, AT1.8–AT1.9 descriptions |
+| **Config delegation** | ✅ Zero violations (`os.environ`/`hvac`/Vault grep clean) |
+| **Lint / format** | ✅ Clean |
+| **Build** | ✅ v0.2.0 wheel + sdist |
+
+**Total outstanding: 0.**
+
+---
+
+## Previously Fixed Issues (ALL RESOLVED — do not re-fix)
+
+### Round 1 (2026-02-17 audit) — 7 issues, all fixed
+
+| # | Issue | Status |
+|---|-------|--------|
+| 1 | `ruff format` failure on `browser_automation.py` | ✅ RESOLVED |
+| 2 | ARCHITECTURE.md missing `browser_automation.py` | ✅ RESOLVED |
+| 3 | 11 IT tests skipped (Vault creds) | ✅ RESOLVED |
+| 4 | QUALITY-GATE.md inaccurate claims | ✅ RESOLVED |
+| 5 | `testing/conformance.py` stub | ✅ RESOLVED |
+| 6 | `testing/fixtures.py` stub | ✅ RESOLVED |
+| 7 | `testing/mock_providers.py` minimal | ✅ RESOLVED |
+
+### Round 2 (2026-02-18 quality audit) — 4 issues, all fixed
+
+| # | Issue | Status | Evidence |
+|---|-------|--------|----------|
+| 8 | `middleware.py` was 13-line stub | ✅ RESOLVED | Now **133 lines**: bearer + API-key auth, skip_paths, request.state population, 401 on failure, audit emission. Matches CC1.9 spec. |
+| 9 | `audit/emitter.py` was in-memory only | ✅ RESOLVED | Now **74 lines**: JSONL file output via `log_path`, `also_log_to_memory`, `_redact()`, flush-after-write, graceful OSError handling. Matches CC1.8 / FR1.23. |
+| 10 | Service classes used in-memory dicts only | ✅ RESOLVED | `UserService` (95L), `GroupService` (46L), `RoleService` (45L), `IdentityService` (68L) — all accept optional `Repository` Protocol, delegate when provided, fallback to in-memory. Matches CC1.10 / FR1.31. |
+| 11 | `providers/registry.py` had no priority | ✅ RESOLVED | Now **60 lines**: `_ProviderEntry` with priority + insertion order, sorted dispatch, `deregister()`, `list_providers()`, stderr logging. Matches CC1.2 / FR1.32. |
+
+---
+
+## RULES
+
+1. Read `RULES.md`, `ARCHITECTURE.md`, `REQUIREMENTS.md`, and `TESTS.md` before making any changes.
+2. UK English throughout.
+3. Every source file MUST have a file header comment: `# cloud_dog_idam — <description>`.
+4. No hardcoded secrets, URLs, or credentials.
+5. Run ALL verification commands after EVERY change and confirm they pass before reporting done.
+6. Do NOT delete or weaken any existing passing test. All 72 existing tests MUST continue to pass.
+7. New or modified modules MUST pass `ruff check` and `ruff format --check`.
+
+---
+
+## v0.2.0 Features — Delivery Summary (ALL RESOLVED)
+
+### Issue 12 — API Key Migration Helper (FR1.33, CC1.11) ✅ DELIVERED
+
+- `cloud_dog_idam/migration/__init__.py` — **10 lines**
+- `cloud_dog_idam/migration/api_keys.py` — **112 lines**
+- Test: `tests/unit/UT1.32_APIKeyMigration/`
+
+---
+
+### Issue 13 — Session Metadata Extension Hooks (FR1.34, CC1.12) ✅ DELIVERED
+
+- `cloud_dog_idam/tokens/session_extensions.py` — **81 lines**
+- Test: `tests/unit/UT1.33_SessionMetadataExtensions/`
+
+---
+
+### Issue 14 — Lightweight API-Key-Only Provider (FR1.35, CC1.13) ✅ DELIVERED
+
+- `cloud_dog_idam/providers/api_key_only.py` — **84 lines**
+- Tests: `tests/unit/UT1.34_APIKeyOnlyProvider/`, `tests/application/AT1.8_APIKeyOnlyIntegration/`
+
+---
+
+### Issue 15 — Policy Extension Points (FR1.36, CC1.14) ✅ DELIVERED
+
+- `cloud_dog_idam/rbac/policy_extensions.py` — **78 lines**
+- Tests: `tests/unit/UT1.35_PolicyExtensionPoints/`, `tests/application/AT1.9_PolicyExtensionIntegration/`
+
+---
+
+### Issue 16 — TESTS.md v0.2.0 Entries ✅ DELIVERED
+
+- TESTS.md updated with v0.2.0 test directory entries (UT1.32–UT1.35, AT1.8–AT1.9)
+- Coverage map updated with FR1.33–FR1.36 mappings
+- "New Tests (v0.2.0)" section added
+
+---
+
+## Verification — Full Suite
+
+```bash
+cd /opt/iac/Development/cloud-dog-ai/cloud-dog-ai-platform-standards/packages/backend/platform-idam
+
+# 1. Config delegation check — MUST return zero hits
+grep -rn "os.environ\|import hvac\|overlay_secrets\|from cloud_dog_idam.secrets" cloud_dog_idam/ --include="*.py" | grep -v __pycache__
+# → zero results
+
+# 2. Lint
+.venv/bin/ruff check cloud_dog_idam tests
+
+# 3. Format
+.venv/bin/ruff format --check cloud_dog_idam tests
+
+# 4. Tests
+.venv/bin/pytest tests -v \
+  --env UT --env ST --env IT --env AT --env QT \
+  --env /opt/iac/Development/cloud-dog-ai/env-vault-admin
+
+# 5. Build
+.venv/bin/python -m build --no-isolation
+```
+
+## pyproject.toml version
+
+```toml
+version = "0.2.0"
+```