dockerhub-api 1.3.9__tar.gz → 1.4.0__tar.gz

{dockerhub_api-1.3.9 → dockerhub_api-1.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dockerhub-api
-Version: 1.3.9
+Version: 1.4.0
 Summary: Docker Hub API + MCP Server
 Author-email: Repository Maintainers <maintainers@knuckles.team>
 License: MIT
@@ -12,7 +12,7 @@ Classifier: Programming Language :: Python :: 3
 Requires-Python: <3.15,>=3.12
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: scion-sdk[mcp]<0.7.0,>=0.6.4
+Requires-Dist: scion-sdk[mcp]<0.11,>=0.10.2
 Requires-Dist: httpx>=0.28.1
 Requires-Dist: python-dotenv>=1.2.4
 Provides-Extra: test
@@ -84,8 +84,7 @@ multi-arch inspection, OCI referrers, and gated push/remove) and **Docker Scout*
   expiry, with one transparent re-mint on 401.
 - **Rate-Limit Telemetry:** `X-RateLimit-*` headers surfaced in every result;
   HTTP 429 retried with bounded `Retry-After` backoff.
-- **Safety by Default:** Removes and org-settings writes are gated behind
-  `DOCKERHUB_ALLOW_DESTRUCTIVE` (default `False`); secrets are redacted from tool
+- **Safety by Default:** Removes and org-settings writes are declared destructive; the SDK asks the caller to confirm (`confirm=true`) before any request. Secrets are redacted from tool
   results (plaintext tokens appear exactly once — on creation). Repository creation
   stays enabled: it is the primary release-provisioning use case.
 - **Integrated Graph Agent:** Built-in Pydantic AI agent (`dockerhub-agent`) with
@@ -126,7 +125,7 @@ One multi-stage `docker/Dockerfile` builds the MCP-only image (`--target mcp`):
 
 | Image tag | Build target | Contents | Entrypoint |
 |-----------|--------------|----------|------------|
-| `example/dockerhub-api:mcp` | `--target mcp` | `dockerhub-api[mcp]` — **connector-focused**, includes `epistemic-graph[full]`; no model-orchestration stack | `dockerhub-mcp` |
+| `example/dockerhub-api:mcp` | `--target mcp` | `dockerhub-api[mcp]` — **connector-focused**, includes `medulla`; no model-orchestration stack | `dockerhub-mcp` |
 
 ```bash
 docker build --target mcp   -t example/dockerhub-api:mcp    docker/   # connector-focused MCP server
@@ -134,14 +133,14 @@ docker build --target mcp   -t example/dockerhub-api:mcp    docker/   # connecto
 
 agent (`immutable agent digest`) with a co-located `:mcp` sidecar.
 
-### Knowledge-graph database (`epistemic-graph`)
+### Knowledge-graph database (`medulla`)
 
-Scion SDK core dependency (`epistemic-graph[full]`). The `[mcp]` extra keeps
+Scion SDK core dependency (`medulla`). The `[mcp]` extra keeps
 deployments can use the bundled engine. For production or shared state, run
-**epistemic-graph as a dedicated database service** and configure the runtime to use it.
+**medulla as a dedicated database service** and configure the runtime to use it.
 Deployment recipes (single-node + Raft HA), connection configuration, and architecture
 diagrams are documented in the
-[epistemic-graph deployment guide](https://knuckles-team.github.io/epistemic-graph/deployment/).
+[medulla deployment guide](https://knuckles-team.github.io/medulla/deployment/).
 
 ---
 
@@ -178,7 +177,7 @@ _Auto-generated — do not edit (synced by the `mcp-readme-table` pre-commit hoo
 | `hub_admin` | `ADMINTOOL` | Client diagnostics: 'rate_limit' returns the latest |
 | `hub_audit` | `AUDITTOOL` | Read a Docker Hub account's audit trail: 'logs' lists events |
 | `hub_auth` | `AUTHTOOL` | Manage Docker Hub authentication, personal access tokens (PATs), |
-| `dockerhub_ingest_repositories` | `KGTOOL` | Natively ingest repositories into the epistemic-graph as typed :Repository/:ContainerImage nodes. |
+| `dockerhub_ingest_repositories` | `KGTOOL` | Natively ingest repositories into the medulla as typed :Repository/:ContainerImage nodes. |
 | `hub_org` | `ORGTOOL` | Manage a Docker Hub organization: settings (restricted images), |
 | `hub_registry` | `REGISTRYTOOL` | Docker Registry v2 image operations (``registry-1.docker.io``): |
 | `hub_repos` | `REPOSTOOL` | Manage Docker Hub repositories: list/create/inspect repositories, |
@@ -259,7 +258,7 @@ _9 action-routed tool(s) (default) · 54 verbose 1:1 tool(s). Each is enabled un
 
 > **Install the connector-focused `[mcp]` extra.** Examples use `dockerhub-api[mcp]` to add
 > FastMCP / FastAPI through `scion-sdk`; the required Scion SDK core
-> still carries `epistemic-graph[full]`. The `[agent-runtime]` extra additionally
+> still carries `medulla`. The `[agent-runtime]` extra additionally
 > enables model orchestration.
 
 #### stdio Transport (local IDEs — Cursor, Claude Desktop, VS Code)
@@ -279,7 +278,6 @@ _9 action-routed tool(s) (default) · 54 verbose 1:1 tool(s). Each is enabled un
         "ADMINTOOL": "True",
         "AUDITTOOL": "True",
         "AUTHTOOL": "True",
-        "DOCKERHUB_ALLOW_DESTRUCTIVE": "False",
         "DOCKERHUB_TLS_PROFILE": "system",
         "DOCKERHUB_TOKEN": "dckr_pat_your_personal_access_token",
         "DOCKERHUB_URL": "https://hub.docker.com",
@@ -328,7 +326,6 @@ own runtime secret boundary.
         "ADMINTOOL": "True",
         "AUDITTOOL": "True",
         "AUTHTOOL": "True",
-        "DOCKERHUB_ALLOW_DESTRUCTIVE": "False",
         "DOCKERHUB_TLS_PROFILE": "system",
         "DOCKERHUB_TOKEN": "dckr_pat_your_personal_access_token",
         "DOCKERHUB_URL": "https://hub.docker.com",
@@ -376,7 +373,6 @@ docker run -i --rm \
   -e ADMINTOOL=True \
   -e AUDITTOOL=True \
   -e AUTHTOOL=True \
-  -e DOCKERHUB_ALLOW_DESTRUCTIVE=False \
   -e DOCKERHUB_TLS_PROFILE=system \
   -e DOCKERHUB_TOKEN=dckr_pat_your_personal_access_token \
   -e DOCKERHUB_URL=https://hub.docker.com \
@@ -423,8 +419,7 @@ the detailed transport contract.
 |---|---|---|
 | Reads (repos, tags, members, logs, SCIM) | allowed | — |
 | Repository create / immutable-tag config / invites / role updates | allowed | — |
-| Removes (PATs, OATs, groups, members, invites) | **blocked** | `DOCKERHUB_ALLOW_DESTRUCTIVE=True` |
-| Org-settings writes (`PUT /v2/orgs/{org}/settings`) | **blocked** | `DOCKERHUB_ALLOW_DESTRUCTIVE=True` |
+| Removes (PATs, OATs, groups, members, invites) and org-settings writes | confirmation required | `confirm=true` per call, or operator setting `SCION_ALLOW_DESTRUCTIVE` |
 
 ---
 
@@ -488,7 +483,6 @@ network transport, connector ingestion, Arbora delegation, or trace export.
 | `DOCKER_REGISTRY_URL` | `https://registry-1.docker.io` |  |
 | `DOCKER_REGISTRY_AUTH_URL` | `https://auth.docker.io/token` | token-service realm; auto-discovered from the 401 challenge |
 | `DOCKER_SCOUT_URL` | `https://api.scout.docker.com` |  |
-| `DOCKERHUB_ALLOW_DESTRUCTIVE` | `False` |  |
 | `AUTHTOOL` | `True` |  |
 | `REPOSTOOL` | `True` |  |
 | `ORGTOOL` | `True` |  |

{dockerhub_api-1.3.9 → dockerhub_api-1.4.0}/README.md

@@ -60,8 +60,7 @@ multi-arch inspection, OCI referrers, and gated push/remove) and **Docker Scout*
   expiry, with one transparent re-mint on 401.
 - **Rate-Limit Telemetry:** `X-RateLimit-*` headers surfaced in every result;
   HTTP 429 retried with bounded `Retry-After` backoff.
-- **Safety by Default:** Removes and org-settings writes are gated behind
-  `DOCKERHUB_ALLOW_DESTRUCTIVE` (default `False`); secrets are redacted from tool
+- **Safety by Default:** Removes and org-settings writes are declared destructive; the SDK asks the caller to confirm (`confirm=true`) before any request. Secrets are redacted from tool
   results (plaintext tokens appear exactly once — on creation). Repository creation
   stays enabled: it is the primary release-provisioning use case.
 - **Integrated Graph Agent:** Built-in Pydantic AI agent (`dockerhub-agent`) with
@@ -102,7 +101,7 @@ One multi-stage `docker/Dockerfile` builds the MCP-only image (`--target mcp`):
 
 | Image tag | Build target | Contents | Entrypoint |
 |-----------|--------------|----------|------------|
-| `example/dockerhub-api:mcp` | `--target mcp` | `dockerhub-api[mcp]` — **connector-focused**, includes `epistemic-graph[full]`; no model-orchestration stack | `dockerhub-mcp` |
+| `example/dockerhub-api:mcp` | `--target mcp` | `dockerhub-api[mcp]` — **connector-focused**, includes `medulla`; no model-orchestration stack | `dockerhub-mcp` |
 
 ```bash
 docker build --target mcp   -t example/dockerhub-api:mcp    docker/   # connector-focused MCP server
@@ -110,14 +109,14 @@ docker build --target mcp   -t example/dockerhub-api:mcp    docker/   # connecto
 
 agent (`immutable agent digest`) with a co-located `:mcp` sidecar.
 
-### Knowledge-graph database (`epistemic-graph`)
+### Knowledge-graph database (`medulla`)
 
-Scion SDK core dependency (`epistemic-graph[full]`). The `[mcp]` extra keeps
+Scion SDK core dependency (`medulla`). The `[mcp]` extra keeps
 deployments can use the bundled engine. For production or shared state, run
-**epistemic-graph as a dedicated database service** and configure the runtime to use it.
+**medulla as a dedicated database service** and configure the runtime to use it.
 Deployment recipes (single-node + Raft HA), connection configuration, and architecture
 diagrams are documented in the
-[epistemic-graph deployment guide](https://knuckles-team.github.io/epistemic-graph/deployment/).
+[medulla deployment guide](https://knuckles-team.github.io/medulla/deployment/).
 
 ---
 
@@ -154,7 +153,7 @@ _Auto-generated — do not edit (synced by the `mcp-readme-table` pre-commit hoo
 | `hub_admin` | `ADMINTOOL` | Client diagnostics: 'rate_limit' returns the latest |
 | `hub_audit` | `AUDITTOOL` | Read a Docker Hub account's audit trail: 'logs' lists events |
 | `hub_auth` | `AUTHTOOL` | Manage Docker Hub authentication, personal access tokens (PATs), |
-| `dockerhub_ingest_repositories` | `KGTOOL` | Natively ingest repositories into the epistemic-graph as typed :Repository/:ContainerImage nodes. |
+| `dockerhub_ingest_repositories` | `KGTOOL` | Natively ingest repositories into the medulla as typed :Repository/:ContainerImage nodes. |
 | `hub_org` | `ORGTOOL` | Manage a Docker Hub organization: settings (restricted images), |
 | `hub_registry` | `REGISTRYTOOL` | Docker Registry v2 image operations (``registry-1.docker.io``): |
 | `hub_repos` | `REPOSTOOL` | Manage Docker Hub repositories: list/create/inspect repositories, |
@@ -235,7 +234,7 @@ _9 action-routed tool(s) (default) · 54 verbose 1:1 tool(s). Each is enabled un
 
 > **Install the connector-focused `[mcp]` extra.** Examples use `dockerhub-api[mcp]` to add
 > FastMCP / FastAPI through `scion-sdk`; the required Scion SDK core
-> still carries `epistemic-graph[full]`. The `[agent-runtime]` extra additionally
+> still carries `medulla`. The `[agent-runtime]` extra additionally
 > enables model orchestration.
 
 #### stdio Transport (local IDEs — Cursor, Claude Desktop, VS Code)
@@ -255,7 +254,6 @@ _9 action-routed tool(s) (default) · 54 verbose 1:1 tool(s). Each is enabled un
         "ADMINTOOL": "True",
         "AUDITTOOL": "True",
         "AUTHTOOL": "True",
-        "DOCKERHUB_ALLOW_DESTRUCTIVE": "False",
         "DOCKERHUB_TLS_PROFILE": "system",
         "DOCKERHUB_TOKEN": "dckr_pat_your_personal_access_token",
         "DOCKERHUB_URL": "https://hub.docker.com",
@@ -304,7 +302,6 @@ own runtime secret boundary.
         "ADMINTOOL": "True",
         "AUDITTOOL": "True",
         "AUTHTOOL": "True",
-        "DOCKERHUB_ALLOW_DESTRUCTIVE": "False",
         "DOCKERHUB_TLS_PROFILE": "system",
         "DOCKERHUB_TOKEN": "dckr_pat_your_personal_access_token",
         "DOCKERHUB_URL": "https://hub.docker.com",
@@ -352,7 +349,6 @@ docker run -i --rm \
   -e ADMINTOOL=True \
   -e AUDITTOOL=True \
   -e AUTHTOOL=True \
-  -e DOCKERHUB_ALLOW_DESTRUCTIVE=False \
   -e DOCKERHUB_TLS_PROFILE=system \
   -e DOCKERHUB_TOKEN=dckr_pat_your_personal_access_token \
   -e DOCKERHUB_URL=https://hub.docker.com \
@@ -399,8 +395,7 @@ the detailed transport contract.
 |---|---|---|
 | Reads (repos, tags, members, logs, SCIM) | allowed | — |
 | Repository create / immutable-tag config / invites / role updates | allowed | — |
-| Removes (PATs, OATs, groups, members, invites) | **blocked** | `DOCKERHUB_ALLOW_DESTRUCTIVE=True` |
-| Org-settings writes (`PUT /v2/orgs/{org}/settings`) | **blocked** | `DOCKERHUB_ALLOW_DESTRUCTIVE=True` |
+| Removes (PATs, OATs, groups, members, invites) and org-settings writes | confirmation required | `confirm=true` per call, or operator setting `SCION_ALLOW_DESTRUCTIVE` |
 
 ---
 
@@ -464,7 +459,6 @@ network transport, connector ingestion, Arbora delegation, or trace export.
 | `DOCKER_REGISTRY_URL` | `https://registry-1.docker.io` |  |
 | `DOCKER_REGISTRY_AUTH_URL` | `https://auth.docker.io/token` | token-service realm; auto-discovered from the 401 challenge |
 | `DOCKER_SCOUT_URL` | `https://api.scout.docker.com` |  |
-| `DOCKERHUB_ALLOW_DESTRUCTIVE` | `False` |  |
 | `AUTHTOOL` | `True` |  |
 | `REPOSTOOL` | `True` |  |
 | `ORGTOOL` | `True` |  |

{dockerhub_api-1.3.9 → dockerhub_api-1.4.0}/dockerhub_api/api/api_client_access_tokens.py

@@ -5,6 +5,8 @@ CONCEPT:DH-OS.identity.jwt-auth-lifecycle-endpoint — JWT auth lifecycle (PAT m
 
 from typing import Any
 
+from scion_sdk.mcp.destructive import destructive_operation
+
 from dockerhub_api.api.api_client_base import DockerHubApiBase
 from dockerhub_api.dockerhub_input_models import (
     AccessTokenCreateModel,
@@ -70,8 +72,8 @@ class DockerHubApiAccessTokens(DockerHubApiBase):
         envelope["data"] = validate_lenient(AccessToken, envelope["data"])
         return envelope
 
+    @destructive_operation
     def delete_access_token(self, uuid: str) -> dict[str, Any]:
         """Delete a personal access token. Destructive — gated."""
-        self._guard_destructive("delete_access_token")
         model = AccessTokenModel(uuid=uuid)
         return self._request("DELETE", f"/v2/access-tokens/{model.uuid}")

{dockerhub_api-1.3.9 → dockerhub_api-1.4.0}/dockerhub_api/api/api_client_audit_logs.py

@@ -20,7 +20,7 @@ class DockerHubApiAuditLogs(DockerHubApiBase):
     def get_audit_logs(
         self,
         account: str,
-        action: str | None = None,
+        audit_action: str | None = None,
         name: str | None = None,
         actor: str | None = None,
         from_date: str | None = None,
@@ -30,12 +30,12 @@ class DockerHubApiAuditLogs(DockerHubApiBase):
     ) -> dict[str, Any]:
         """List audit-log events for a namespace.
 
-        Filters: ``action``, ``name`` (object), ``actor`` (username), and a
+        Filters: ``audit_action``, ``name`` (object), ``actor`` (username), and a
         ``from_date``/``to_date`` RFC 3339 window (sent as ``from``/``to``).
         """
         model = AuditLogModel(
             account=account,
-            action=action,
+            action=audit_action,
             name=name,
             actor=actor,
             from_date=from_date,

{dockerhub_api-1.3.9 → dockerhub_api-1.4.0}/dockerhub_api/api/api_client_base.py

@@ -10,8 +10,7 @@ headers are captured into the result envelope (and kept on the client as
 ``Retry-After`` backoff.
 
 CONCEPT:DH-OS.identity.destructive-action-gating-member — destructive-action gating. Deletes and org-settings writes
-raise :class:`DestructiveOperationError` unless the client was built with
-``allow_destructive=True``.
+are declared with the SDK ``destructive_operation`` decorator; the SDK asks the caller to confirm.
 """
 
 import logging
@@ -40,10 +39,6 @@ DEFAULT_MAX_RETRIES = 3
 DEFAULT_TIMEOUT = 30.0
 
 
-class DestructiveOperationError(PermissionError):
-    """Raised when a destructive operation is attempted while gated off."""
-
-
 class DockerHubApiBase:
     """Shared transport, auth header, retry, and envelope logic."""
 
@@ -58,7 +53,6 @@ class DockerHubApiBase:
         timeout: float = DEFAULT_TIMEOUT,
         max_retries: int = DEFAULT_MAX_RETRIES,
         retry_after_cap: float = DEFAULT_RETRY_AFTER_CAP,
-        allow_destructive: bool = False,
         debug: bool = False,
         transport: httpx.BaseTransport | None = None,
     ):
@@ -75,7 +69,6 @@ class DockerHubApiBase:
         self.timeout = timeout
         self.max_retries = max_retries
         self.retry_after_cap = retry_after_cap
-        self.allow_destructive = allow_destructive
         self.debug = debug
         #: Last rate-limit snapshot seen on any response.
         self.rate_limit: dict[str, Any] = {}
@@ -188,18 +181,6 @@ class DockerHubApiBase:
             "rate_limit": dict(self.rate_limit) if self.rate_limit else {},
         }
 
-    # ------------------------------------------------------------------ #
-    # Destructive gating
-    # ------------------------------------------------------------------ #
-
-    def _guard_destructive(self, operation: str) -> None:
-        if not self.allow_destructive:
-            raise DestructiveOperationError(
-                f"Destructive operation '{operation}' is disabled. "
-                "Build the client with allow_destructive=True or set "
-                "DOCKERHUB_ALLOW_DESTRUCTIVE=True to enable it."
-            )
-
     # ------------------------------------------------------------------ #
     # Request engine
     # ------------------------------------------------------------------ #

{dockerhub_api-1.3.9 → dockerhub_api-1.4.0}/dockerhub_api/api/api_client_groups.py

@@ -6,6 +6,8 @@ CONCEPT:DH-OS.identity.destructive-action-gating-member — destructive-action g
 
 from typing import Any
 
+from scion_sdk.mcp.destructive import destructive_operation
+
 from dockerhub_api.api.api_client_base import DockerHubApiBase
 from dockerhub_api.dockerhub_input_models import (
     GroupCreateModel,
@@ -99,9 +101,9 @@ class DockerHubApiGroups(DockerHubApiBase):
         envelope["data"] = validate_lenient(Group, envelope["data"])
         return envelope
 
+    @destructive_operation
     def delete_group(self, org: str, group_name: str) -> dict[str, Any]:
         """Delete a group. Destructive — gated."""
-        self._guard_destructive("delete_group")
         model = GroupModel(org=org, group_name=group_name)
         return self._request(
             "DELETE", f"/v2/orgs/{model.org}/groups/{model.group_name}"
@@ -146,11 +148,11 @@ class DockerHubApiGroups(DockerHubApiBase):
         envelope["data"] = validate_lenient(OrgMember, envelope["data"])
         return envelope
 
+    @destructive_operation
     def remove_group_member(
         self, org: str, group_name: str, username: str
     ) -> dict[str, Any]:
         """Remove a username from a group. Destructive — gated."""
-        self._guard_destructive("remove_group_member")
         model = GroupMemberModel(org=org, group_name=group_name, username=username)
         return self._request(
             "DELETE",

{dockerhub_api-1.3.9 → dockerhub_api-1.4.0}/dockerhub_api/api/api_client_org_access_tokens.py

@@ -5,6 +5,8 @@ CONCEPT:DH-OS.identity.jwt-auth-lifecycle-endpoint — JWT auth lifecycle (OAT m
 
 from typing import Any
 
+from scion_sdk.mcp.destructive import destructive_operation
+
 from dockerhub_api.api.api_client_base import DockerHubApiBase
 from dockerhub_api.dockerhub_input_models import (
     OrgAccessTokenCreateModel,
@@ -97,9 +99,9 @@ class DockerHubApiOrgAccessTokens(DockerHubApiBase):
         envelope["data"] = validate_lenient(OrgAccessToken, envelope["data"])
         return envelope
 
+    @destructive_operation
     def delete_org_access_token(self, org: str, token_id: str) -> dict[str, Any]:
         """Delete an organization access token. Destructive — gated."""
-        self._guard_destructive("delete_org_access_token")
         model = OrgAccessTokenModel(org=org, token_id=token_id)
         return self._request(
             "DELETE", f"/v2/orgs/{model.org}/access-tokens/{model.token_id}"

{dockerhub_api-1.3.9 → dockerhub_api-1.4.0}/dockerhub_api/api/api_client_orgs.py

@@ -7,6 +7,8 @@ org-settings writes).
 
 from typing import Any
 
+from scion_sdk.mcp.destructive import destructive_operation
+
 from dockerhub_api.api.api_client_base import DockerHubApiBase
 from dockerhub_api.dockerhub_input_models import (
     BulkInviteModel,
@@ -37,6 +39,7 @@ class DockerHubApiOrgs(DockerHubApiBase):
         envelope["data"] = validate_lenient(OrgSettings, envelope["data"])
         return envelope
 
+    @destructive_operation
     def update_org_settings(
         self,
         org: str,
@@ -50,7 +53,6 @@ class DockerHubApiOrgs(DockerHubApiBase):
         org-approved images, with carve-outs for Docker Official Images and
         Verified Publisher images.
         """
-        self._guard_destructive("update_org_settings")
         model = OrgSettingsModel(
             org=org,
             restricted_images_enabled=restricted_images_enabled,
@@ -104,9 +106,9 @@ class DockerHubApiOrgs(DockerHubApiBase):
         envelope["data"] = validate_lenient(OrgMember, envelope["data"])
         return envelope
 
+    @destructive_operation
     def remove_org_member(self, org: str, username: str) -> dict[str, Any]:
         """Remove a member from the organization. Destructive — gated."""
-        self._guard_destructive("remove_org_member")
         model = OrgMemberModel(org=org, username=username)
         return self._request("DELETE", f"/v2/orgs/{model.org}/members/{model.username}")
 
@@ -118,9 +120,9 @@ class DockerHubApiOrgs(DockerHubApiBase):
         envelope["data"] = validate_lenient(InvitePage, envelope["data"])
         return envelope
 
+    @destructive_operation
     def delete_invite(self, invite_id: str) -> dict[str, Any]:
         """Cancel an invite. Destructive — gated."""
-        self._guard_destructive("delete_invite")
         model = InviteModel(invite_id=invite_id)
         return self._request("DELETE", f"/v2/invites/{model.invite_id}")
 

{dockerhub_api-1.3.9 → dockerhub_api-1.4.0}/dockerhub_api/api/api_client_registry.py

@@ -6,8 +6,8 @@ multi-arch platform resolution, digest resolution, and (gated) deletes.
 CONCEPT:DH-OS.governance.oci-referrers-attestation-discovery — OCI Referrers / attestation discovery.
 CONCEPT:DH-OS.governance.chunked-blob-push-upload — chunked blob push (upload session + manifest put).
 
-Pushes, deletes, and blob uploads are destructive and gated by
-``allow_destructive`` (``DOCKERHUB_ALLOW_DESTRUCTIVE``). ``_catalog`` is
+Pushes, deletes, and blob uploads are destructive: the SDK
+asks the caller to confirm each. ``_catalog`` is
 intentionally omitted: Docker Hub does not support registry-wide catalog
 listing (it requires a registry-scoped token the Hub token service won't issue).
 """
@@ -15,6 +15,8 @@ listing (it requires a registry-scoped token the Hub token service won't issue).
 import json as _json
 from typing import Any
 
+from scion_sdk.mcp.destructive import destructive_operation
+
 from dockerhub_api.api.api_client_registry_base import (
     ACCEPT_MANIFESTS,
     OCTET_STREAM,
@@ -96,6 +98,7 @@ class RegistryApi(RegistryApiBase):
         }
         return envelope
 
+    @destructive_operation
     def put_manifest(
         self,
         repo: str,
@@ -104,7 +107,6 @@ class RegistryApi(RegistryApiBase):
         media_type: str,
     ) -> dict[str, Any]:
         """``PUT /v2/{repo}/manifests/{reference}`` — push a manifest (gated)."""
-        self._guard_destructive("put_manifest")
         body = manifest if isinstance(manifest, str) else _json.dumps(manifest)
         return self._registry_request(
             "PUT",
@@ -115,13 +117,13 @@ class RegistryApi(RegistryApiBase):
             content_type=media_type,
         )
 
+    @destructive_operation
     def delete_manifest(self, repo: str, reference: str) -> dict[str, Any]:
         """``DELETE /v2/{repo}/manifests/{digest}`` — delete a tag/manifest (gated).
 
         Docker Hub requires deletion by digest; pass a tag and it is resolved
         to its digest first.
         """
-        self._guard_destructive("delete_manifest")
         target = reference
         if not reference.startswith("sha256:"):
             resolved = self.resolve_digest(repo, reference)
@@ -140,13 +142,13 @@ class RegistryApi(RegistryApiBase):
         """``HEAD /v2/{repo}/blobs/{digest}`` — blob existence check."""
         return self._registry_exists(repo, f"/blobs/{digest}")
 
+    @destructive_operation
     def delete_blob(self, repo: str, digest: str) -> dict[str, Any]:
         """``DELETE /v2/{repo}/blobs/{digest}`` — delete a blob (gated).
 
         Often returns ``405`` on Docker Hub (blob delete disabled); the status
         is surfaced cleanly rather than masked.
         """
-        self._guard_destructive("delete_blob")
         return self._registry_request(
             "DELETE",
             repo,
@@ -293,13 +295,14 @@ class RegistryApi(RegistryApiBase):
 
     # ------------------------------- push -------------------------------- #
 
+    @destructive_operation
     def start_upload(self, repo: str) -> dict[str, Any]:
         """``POST /v2/{repo}/blobs/uploads/`` — open a blob upload session (gated)."""
-        self._guard_destructive("start_upload")
         return self._registry_request(
             "POST", repo, "/blobs/uploads/", scope_actions="pull,push"
         )
 
+    @destructive_operation
     def upload_chunk(
         self,
         repo: str,
@@ -308,7 +311,6 @@ class RegistryApi(RegistryApiBase):
         content_range: str | None = None,
     ) -> dict[str, Any]:
         """``PATCH {location}`` — upload one blob chunk (gated)."""
-        self._guard_destructive("upload_chunk")
         extra = {"Content-Range": content_range} if content_range else None
         return self._registry_request(
             "PATCH",
@@ -320,6 +322,7 @@ class RegistryApi(RegistryApiBase):
             extra_headers=extra,
         )
 
+    @destructive_operation
     def complete_upload(
         self,
         repo: str,
@@ -328,7 +331,6 @@ class RegistryApi(RegistryApiBase):
         final_chunk: bytes | None = None,
     ) -> dict[str, Any]:
         """``PUT {location}?digest=`` — finalize a blob upload (gated)."""
-        self._guard_destructive("complete_upload")
         return self._registry_request(
             "PUT",
             repo,
@@ -339,9 +341,9 @@ class RegistryApi(RegistryApiBase):
             content_type=OCTET_STREAM,
         )
 
+    @destructive_operation
     def mount_blob(self, repo: str, digest: str, from_repo: str) -> dict[str, Any]:
         """``POST /v2/{repo}/blobs/uploads/?mount=&from=`` — cross-repo mount (gated)."""
-        self._guard_destructive("mount_blob")
         return self._registry_request(
             "POST",
             repo,

{dockerhub_api-1.3.9 → dockerhub_api-1.4.0}/dockerhub_api/api/api_client_registry_base.py

@@ -74,7 +74,6 @@ class RegistryApiBase(DockerHubApiBase):
         registry_token_manager: Any | None = None,
         tls_profile: ResolvedTLSProfile | None = None,
         timeout: float | None = None,
-        allow_destructive: bool = False,
         debug: bool = False,
         transport: httpx.BaseTransport | None = None,
         **kwargs: Any,
@@ -85,7 +84,6 @@ class RegistryApiBase(DockerHubApiBase):
             url=url or DEFAULT_REGISTRY_URL,
             tls_profile=tls_profile,
             timeout=timeout if timeout is not None else 30.0,
-            allow_destructive=allow_destructive,
             debug=debug,
             transport=transport,
             **kwargs,

{dockerhub_api-1.3.9 → dockerhub_api-1.4.0}/dockerhub_api/auth.py

@@ -339,12 +339,6 @@ def _resolve_tls_profile(
     )
 
 
-def _resolve_allow_destructive(allow_destructive: bool | None) -> bool:
-    if allow_destructive is None:
-        return setting("DOCKERHUB_ALLOW_DESTRUCTIVE", False)
-    return allow_destructive
-
-
 @dataclass
 class _HubCredentials:
     url: str
@@ -407,7 +401,6 @@ def get_client(
     token: str | None = None,
     jwt: str | None = None,
     tls_profile: ResolvedTLSProfile | None = None,
-    allow_destructive: bool | None = None,
     config: dict | None = None,
 ) -> Any:
     """Factory for the Docker Hub :class:`~dockerhub_api.api_client.Api` client.
@@ -422,8 +415,8 @@ def get_client(
        password, a PAT ``dckr_pat_*``, or an org token).
     3. Anonymous — public, unauthenticated endpoints only.
 
-    ``DOCKERHUB_ALLOW_DESTRUCTIVE`` (default ``False``) gates deletes and
-    org-settings writes. CONCEPT:DH-OS.identity.destructive-action-gating-member — destructive-action gating.
+    Deletes and org-settings writes are declared destructive with the SDK and ask the caller to confirm.
+    CONCEPT:DH-OS.identity.destructive-action-gating-member — destructive-action gating.
 
     A resolved ``username`` (personal account or org) the caller's identity is
     not entitled to is denied before any credential exchange happens.
@@ -433,7 +426,6 @@ def get_client(
     creds = _resolve_hub_credentials(url, username, token, jwt, config)
     _deny_unless_entitled(creds.username)
     profile = _resolve_tls_profile(tls_profile)
-    allow_destructive = _resolve_allow_destructive(allow_destructive)
 
     if creds.jwt:
         logger.info("Using pre-minted Docker Hub JWT")
@@ -441,7 +433,6 @@ def get_client(
             url=creds.url,
             token=creds.jwt,
             tls_profile=profile,
-            allow_destructive=allow_destructive,
         )
 
     if creds.username and creds.token:
@@ -459,14 +450,13 @@ def get_client(
             url=creds.url,
             token_manager=manager,
             tls_profile=profile,
-            allow_destructive=allow_destructive,
         )
 
     logger.warning(
         "No Docker Hub credentials configured — anonymous client "
         "(public endpoints only). Set DOCKERHUB_USERNAME and DOCKERHUB_TOKEN."
     )
-    return Api(url=creds.url, tls_profile=profile, allow_destructive=allow_destructive)
+    return Api(url=creds.url, tls_profile=profile)
 
 
 def _resolve_credentials(
@@ -509,7 +499,6 @@ def get_registry_client(
     username: str | None = None,
     token: str | None = None,
     tls_profile: ResolvedTLSProfile | None = None,
-    allow_destructive: bool | None = None,
     config: dict | None = None,
     transport: Any | None = None,
 ) -> Any:
@@ -519,7 +508,7 @@ def get_registry_client(
     scoped tokens via :class:`RegistryTokenManager` using the same
     ``DOCKER_HUB_USER`` / ``DOCKER_HUB_TOKEN`` credentials (anonymous when
     unset, which still works for public pulls). Pushes, deletes, and blob
-    uploads are gated by ``DOCKERHUB_ALLOW_DESTRUCTIVE``.
+    uploads are declared destructive with the SDK.
 
     A resolved ``username`` (personal account or org) the caller's identity is
     not entitled to is denied before any token is minted.
@@ -541,7 +530,6 @@ def get_registry_client(
     username, token = _resolve_credentials(username, token, config)
     _deny_unless_entitled(username)
     profile = _resolve_tls_profile(tls_profile)
-    allow_destructive = _resolve_allow_destructive(allow_destructive)
 
     token_manager = RegistryTokenManager(
         username=username,
@@ -555,7 +543,6 @@ def get_registry_client(
         url=url,
         registry_token_manager=token_manager,
         tls_profile=profile,
-        allow_destructive=allow_destructive,
         transport=transport,
     )