fdai-deployment-cli 0.1.2__py3-none-any.whl

fdai_deployment_cli/standalone_development_authority.py

@@ -0,0 +1,166 @@
+"""Managed-host selection and reconciliation of development authority."""
+
+from __future__ import annotations
+
+import argparse
+from collections.abc import Callable
+from dataclasses import dataclass
+from pathlib import Path
+
+from fdai_deployment_cli.development_authority_profile import (
+    DevelopmentAuthorityDeploymentProfile,
+    apply_development_authority_profile,
+    clear_development_authority_profile,
+    load_development_authority_profile,
+    staged_development_authority_profile_from_path,
+    validate_deployment_target,
+)
+from fdai_deployment_cli.standalone_operational_evidence import bind_service_database_role
+
+_PROFILE_ENV = "FDAI_FULL_AUTHORITY_DEVELOPMENT_PROFILE_JSON"
+_EXECUTOR_ENV = "FDAI_FULL_AUTHORITY_DEVELOPMENT_EXECUTOR_PRINCIPAL"
+
+
+@dataclass(frozen=True, slots=True)
+class ManagedDevelopmentAuthority:
+    """One explicitly selected profile operation on the managed host."""
+
+    profile: DevelopmentAuthorityDeploymentProfile | None
+    clear: bool
+
+    @property
+    def input_digest(self) -> str:
+        return self.profile.input_digest if self.profile is not None else ""
+
+
+def development_authority_from_args(
+    args: argparse.Namespace,
+    *,
+    absolute: Callable[[Path], Path],
+) -> ManagedDevelopmentAuthority:
+    """Load the staged profile and reject an ambiguous select-and-clear request."""
+
+    path = getattr(args, "development_authority_profile", None)
+    if path is not None and not isinstance(path, Path):
+        raise TypeError("development authority profile path is invalid")
+    profile = staged_development_authority_profile_from_path(
+        absolute(path) if path is not None else None
+    )
+    clear = bool(getattr(args, "clear_development_authority_profile", False))
+    if profile is not None and clear:
+        raise ValueError("development authority profile and clear request are mutually exclusive")
+    return ManagedDevelopmentAuthority(profile=profile, clear=clear)
+
+
+def reconcile_retained_development_authority(
+    selection: ManagedDevelopmentAuthority,
+    *,
+    retained: dict[str, object],
+    values: dict[str, object],
+    tenant_id: str,
+    subscription_id: str,
+    resource_groups: tuple[str, ...],
+) -> bool:
+    """Apply an explicit select or clear operation after source rebinding."""
+
+    if selection.clear:
+        changed = clear_development_authority_profile(values)
+        return retained.pop("development_authority_profile_digest", None) is not None or changed
+    if selection.profile is None:
+        return False
+    validate_deployment_target(
+        selection.profile,
+        tenant_id=tenant_id,
+        subscription_id=subscription_id,
+        resource_groups=resource_groups,
+        source_revision=str(retained.get("source_commit", "")),
+    )
+    apply_development_authority_profile(values, selection.profile)
+    changed = retained.get("development_authority_profile_digest") != selection.profile.input_digest
+    retained["development_authority_profile_digest"] = selection.profile.input_digest
+    return changed
+
+
+def apply_initial_development_authority(
+    selection: ManagedDevelopmentAuthority,
+    *,
+    values: dict[str, object],
+    tenant_id: str,
+    subscription_id: str,
+    resource_groups: tuple[str, ...],
+    source_revision: str,
+) -> str:
+    """Bind a selected profile on a new install, or reject an impossible clear."""
+
+    if selection.clear:
+        raise ValueError("development authority profile cannot be cleared on a new installation")
+    if selection.profile is None:
+        return ""
+    validate_deployment_target(
+        selection.profile,
+        tenant_id=tenant_id,
+        subscription_id=subscription_id,
+        resource_groups=resource_groups,
+        source_revision=source_revision,
+    )
+    apply_development_authority_profile(values, selection.profile)
+    return selection.profile.input_digest
+
+
+def apply_service_update_development_authority(
+    args: argparse.Namespace,
+    *,
+    context: dict[str, object],
+    workload: dict[str, object],
+    source_revision: str,
+) -> tuple[str, str]:
+    """Apply one explicit Core select/clear operation to retained workload variables."""
+
+    component = workload.get("component")
+    environment = workload.get("environment")
+    if component is not None:
+        if not isinstance(component, str) or not isinstance(environment, dict):
+            raise TypeError("service workload database-role inputs are invalid")
+        workload["environment"] = bind_service_database_role(component, environment)
+    path = getattr(args, "development_authority_profile", None)
+    if path is not None and not isinstance(path, Path):
+        raise TypeError("development authority profile path is invalid")
+    clear = bool(getattr(args, "clear_development_authority_profile", False))
+    if path is not None and clear:
+        raise ValueError("development authority profile and clear request are mutually exclusive")
+    if path is None and not clear:
+        return "preserve", ""
+    environment = workload.get("environment")
+    if not isinstance(environment, dict):
+        raise TypeError("Core workload environment is invalid")
+    if clear:
+        changed = environment.pop(_PROFILE_ENV, None) is not None
+        changed = environment.pop(_EXECUTOR_ENV, None) is not None or changed
+        if not changed:
+            raise ValueError("Core workload has no retained development profile to clear")
+        return "clear", ""
+    if path is None:
+        raise RuntimeError("development authority profile is unavailable")
+    profile = load_development_authority_profile(path.absolute())
+    validate_deployment_target(
+        profile,
+        tenant_id=str(context["tenant_id"]),
+        subscription_id=str(context["subscription_id"]),
+        resource_groups=(
+            str(context["resource_group_name"]),
+            str(context["state_resource_group"]),
+        ),
+        source_revision=source_revision,
+    )
+    environment[_PROFILE_ENV] = profile.profile_json
+    environment[_EXECUTOR_ENV] = profile.executor_principal
+    return "select", profile.input_digest
+
+
+__all__ = [
+    "ManagedDevelopmentAuthority",
+    "apply_initial_development_authority",
+    "apply_service_update_development_authority",
+    "development_authority_from_args",
+    "reconcile_retained_development_authority",
+]

fdai_deployment_cli/standalone_foundation_adoption.py

@@ -0,0 +1,87 @@
+"""Select and complete recovered Foundation adoption for standalone deployment."""
+
+from __future__ import annotations
+
+from collections.abc import Callable
+from pathlib import Path
+
+from fdai_deployment_cli.application_state_adoption import ApplicationStateAdoption
+from fdai_deployment_cli.catalog_review_profile import CatalogReviewDeploymentProfile
+from fdai_deployment_cli.control_package import ControlPackage
+from fdai_deployment_cli.deployment_deadline import DeploymentDeadline
+from fdai_deployment_cli.deployment_kit import DeploymentKit
+from fdai_deployment_cli.deployment_progress import begin_stage, progress_detail
+from fdai_deployment_cli.foundation_adoption import stage_recovered_foundation
+from fdai_deployment_cli.operational_evidence_verifier_input import (
+    OperationalEvidenceVerifierDeploymentInput,
+)
+from fdai_deployment_cli.runtime_profile import RuntimeDeploymentProfile
+from fdai_deployment_cli.standalone_application_completion import complete_application
+
+
+def deploy_with_adopted_foundation(
+    *,
+    foundation_directory: Path | None,
+    recovery_directory: Path | None,
+    adopt_runner_image_receipt: Path | None,
+    work_dir: Path,
+    kit: DeploymentKit,
+    tenant_id: str,
+    subscription_id: str,
+    region: str,
+    monthly_cost_ceiling: int,
+    deadline: DeploymentDeadline,
+    selected_runtime: RuntimeDeploymentProfile,
+    trial_token: Path | None,
+    application_state_adoption: ApplicationStateAdoption | None,
+    catalog_review_profile: CatalogReviewDeploymentProfile | None,
+    operational_evidence_verifier_input: OperationalEvidenceVerifierDeploymentInput | None,
+    current_operator_object_id: Callable[[], str],
+    control_package: ControlPackage | None = None,
+) -> dict[str, object] | None:
+    """Return a completed adopted deployment, or None when adoption isn't selected."""
+
+    inputs = (foundation_directory, recovery_directory)
+    if any(value is not None for value in inputs) and not all(
+        value is not None for value in inputs
+    ):
+        raise ValueError("Foundation adoption requires both retained directories")
+    if not all(value is not None for value in inputs):
+        return None
+    if adopt_runner_image_receipt is not None:
+        raise ValueError("Foundation adoption cannot combine with runner-image adoption")
+    assert foundation_directory is not None
+    assert recovery_directory is not None
+    scripts = kit.bundle_root / "scripts/deployment/azure"
+    if not scripts.is_dir() or scripts.is_symlink():
+        raise ValueError("verified deployment bundle is missing Azure orchestration")
+    begin_stage("foundation")
+    progress_detail("Adopting the verified existing Foundation without repeating effects")
+    adoption = stage_recovered_foundation(
+        foundation_directory=foundation_directory,
+        recovery_directory=recovery_directory,
+        destination=work_dir / "run",
+        application_source_commit=kit.source_commit,
+        kit_manifest_digest=kit.verification.manifest_digest,
+        runtime_release_digest=kit.runtime.digest,
+        tenant_id=tenant_id,
+        subscription_id=subscription_id,
+        region=region,
+        monthly_cost_ceiling=monthly_cost_ceiling,
+    )
+    return complete_application(
+        kit=kit,
+        prepared=adoption.prepared,
+        status=adoption.status,
+        scripts=scripts,
+        deadline=deadline,
+        selected_runtime=selected_runtime,
+        trial_token=trial_token,
+        application_state_adoption=application_state_adoption,
+        foundation_state_receipt_digest=str(adoption.receipt["foundation_state_receipt_digest"]),
+        foundation_adoption_receipt_digest=str(adoption.receipt["receipt_digest"]),
+        catalog_review_profile=catalog_review_profile,
+        operational_evidence_verifier_input=operational_evidence_verifier_input,
+        current_operator_object_id=current_operator_object_id,
+        control_package=control_package,
+    )