dominus-sdk-python-dev 2.1.6__py3-none-any.whl

dominus/helpers/crypto.py

@@ -0,0 +1,118 @@
+"""
+Cryptographic helpers for password and PSK hashing.
+
+All hashing is done client-side (in SDK) before sending to Architect.
+This ensures passwords/PSKs are never transmitted in plaintext.
+"""
+import bcrypt
+import hashlib
+import secrets
+import string
+
+
+def hash_password(password: str) -> str:
+    """
+    Hash a password using bcrypt.
+
+    Args:
+        password: Raw password string
+
+    Returns:
+        Bcrypt hash string (includes salt)
+    """
+    salt = bcrypt.gensalt(rounds=12)
+    return bcrypt.hashpw(password.encode('utf-8'), salt).decode('utf-8')
+
+
+def verify_password_local(password: str, password_hash: str) -> bool:
+    """
+    Verify a password against a bcrypt hash locally.
+
+    This is primarily for testing. In production, verification
+    happens via Architect's verify_user_password endpoint.
+
+    Args:
+        password: Raw password to verify
+        password_hash: Bcrypt hash to compare against
+
+    Returns:
+        True if password matches hash
+    """
+    return bcrypt.checkpw(password.encode('utf-8'), password_hash.encode('utf-8'))
+
+
+def hash_psk(psk: str) -> str:
+    """
+    Hash a PSK (Pre-Shared Key) using bcrypt.
+
+    Args:
+        psk: Raw PSK string
+
+    Returns:
+        Bcrypt hash string (includes salt)
+    """
+    salt = bcrypt.gensalt(rounds=12)
+    return bcrypt.hashpw(psk.encode('utf-8'), salt).decode('utf-8')
+
+
+def verify_psk_local(psk: str, psk_hash: str) -> bool:
+    """
+    Verify a PSK against a bcrypt hash locally.
+
+    This is primarily for testing. In production, verification
+    happens via Architect's verify_client_psk endpoint.
+
+    Args:
+        psk: Raw PSK to verify
+        psk_hash: Bcrypt hash to compare against
+
+    Returns:
+        True if PSK matches hash
+    """
+    return bcrypt.checkpw(psk.encode('utf-8'), psk_hash.encode('utf-8'))
+
+
+def generate_psk_local(length: int = 32) -> str:
+    """
+    Generate a random PSK locally.
+
+    Note: In production, prefer using Sovereign's /generate-psk endpoint
+    for centralized PSK generation. This is a fallback.
+
+    Args:
+        length: Length of PSK to generate (default: 32)
+
+    Returns:
+        Random PSK string
+    """
+    alphabet = string.ascii_letters + string.digits + "!@#$%^&*"
+    return ''.join(secrets.choice(alphabet) for _ in range(length))
+
+
+def hash_token(token: str) -> str:
+    """
+    Hash a token using SHA-256.
+
+    Used for refresh tokens where we need fast comparison
+    and don't need the security properties of bcrypt.
+
+    Args:
+        token: Raw token string
+
+    Returns:
+        SHA-256 hex digest
+    """
+    return hashlib.sha256(token.encode('utf-8')).hexdigest()
+
+
+def generate_token(length: int = 64) -> str:
+    """
+    Generate a random token string.
+
+    Args:
+        length: Length of token to generate (default: 64)
+
+    Returns:
+        Random URL-safe token string
+    """
+    return secrets.token_urlsafe(length)

dominus/namespaces/__init__.py

@@ -0,0 +1,26 @@
+"""Dominus SDK Namespaces v2.0"""
+from .secrets import SecretsNamespace
+from .db import DbNamespace
+from .redis import RedisNamespace
+from .files import FilesNamespace
+from .auth import AuthNamespace
+from .ddl import DdlNamespace
+from .logs import LogsNamespace
+from .open import OpenNamespace
+from .health import HealthNamespace
+from .portal import PortalNamespace
+from .courier import CourierNamespace
+
+__all__ = [
+    "SecretsNamespace",
+    "DbNamespace",
+    "RedisNamespace",
+    "FilesNamespace",
+    "AuthNamespace",
+    "DdlNamespace",
+    "LogsNamespace",
+    "OpenNamespace",
+    "HealthNamespace",
+    "PortalNamespace",
+    "CourierNamespace",
+]

dominus/namespaces/_deprecated_crossover.py

@@ -0,0 +1,10 @@
+"""Crossover (admin) operations namespace - DEPRECATED
+
+Note: This namespace has been removed from the SDK.
+Provisioning and admin operations should be done via Architect's
+/api/crossover endpoint directly, not through the SDK.
+
+This file is kept as a placeholder to prevent import errors in
+any code that may still reference it.
+"""
+# Empty file - all crossover functionality removed