flwr-nightly 1.26.0.dev20260126__tar.gz → 1.26.0.dev20260128__tar.gz

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: flwr-nightly
-Version: 1.26.0.dev20260126
+Version: 1.26.0.dev20260128
 Summary: Flower: A Friendly Federated AI Framework
 License: Apache-2.0
 Keywords: Artificial Intelligence,Federated AI,Federated Analytics,Federated Evaluation,Federated Learning,Flower,Machine Learning
@@ -31,6 +31,7 @@ Classifier: Typing :: Typed
 Provides-Extra: rest
 Provides-Extra: simulation
 Requires-Dist: SQLAlchemy (>=2.0.45,<3.0.0)
+Requires-Dist: alembic (>=1.18.1,<2.0.0)
 Requires-Dist: click (<8.2.0)
 Requires-Dist: cryptography (>=44.0.1,<45.0.0)
 Requires-Dist: grpcio (>=1.70.0,<2.0.0)

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/cli/app.py

@@ -27,7 +27,6 @@ from .app_cmd import review as app_review
 from .build import build
 from .config import ls as config_list
 from .federation import ls as federation_list
-from .flower_config import init_flwr_config
 from .install import install
 from .log import log
 from .login import login
@@ -115,7 +114,6 @@ def main(
     ),
 ) -> None:
     """Flower CLI."""
-    init_flwr_config()
     if version:
         typer.secho(f"Flower version: {package_version}", fg="blue")
         raise typer.Exit()

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/cli/config/ls.py

@@ -40,7 +40,7 @@ def ls(
         ),
     ] = CliOutputFormat.DEFAULT,
 ) -> None:
-    """List all SuperLink connections."""
+    """List all SuperLink connections (alias: ls)."""
     suppress_output = output_format == CliOutputFormat.JSON
     captured_output = io.StringIO()
     config_path = None

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/cli/config_migration.py

@@ -31,7 +31,7 @@ from .flower_config import (
 )
 
 CONFIG_MIGRATION_NOTICE = """
-##################################################################
+#######################################################################
 # CONFIGURATION MIGRATION NOTICE:
 #
 # What was previously called "federation config" for SuperLink
@@ -43,8 +43,8 @@ CONFIG_MIGRATION_NOTICE = """
 # The entries below are commented out intentionally and are kept
 # only as a migration reference.
 #
-# Docs: <link to Flower config docs>
-##################################################################
+# Docs: https://flower.ai/docs/framework/ref-flower-configuration.html
+#######################################################################
 
 """
 
@@ -53,7 +53,7 @@ CLI_NOTICE = (
     + "We detected legacy usage of this command that relies on connection\n"
     + "settings from your pyproject.toml.\n\n"
     + "Flower will migrate any relevant settings to the new Flower config.\n\n"
-    + "Learn more: https://flower.ai/docs\n"
+    + "Learn more: https://flower.ai/docs/framework/ref-flower-configuration.html\n"
 )
 
 

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/cli/constant.py

@@ -57,7 +57,6 @@ class SuperLinkConnectionTomlKey:
     ADDRESS = "address"
     ROOT_CERTIFICATES = "root-certificates"
     INSECURE = "insecure"
-    ENABLE_ACCOUNT_AUTH = "enable-account-auth"
     FEDERATION = "federation"
     OPTIONS = "options"
 
@@ -102,8 +101,6 @@ default = "local"
 
 [superlink.supergrid]
 address = "{SUPERGRID_ADDRESS}"
-enable-account-auth = true
-federation = "YOUR-FEDERATION-HERE"
 
 [superlink.local]
 options.num-supernodes = 10

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/cli/federation/ls.py

@@ -68,7 +68,7 @@ def ls(  # pylint: disable=R0914, R0913, R0917, R0912
         ),
     ] = None,
 ) -> None:
-    """List available federations."""
+    """List available federations or details of a specific federation (alias: ls)."""
     suppress_output = output_format == CliOutputFormat.JSON
     captured_output = io.StringIO()
 

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/cli/flower_config.py

@@ -195,9 +195,6 @@ def parse_superlink_connection(
         address=conn_dict.get(SuperLinkConnectionTomlKey.ADDRESS),
         root_certificates=conn_dict.get(SuperLinkConnectionTomlKey.ROOT_CERTIFICATES),
         insecure=conn_dict.get(SuperLinkConnectionTomlKey.INSECURE),
-        enable_account_auth=conn_dict.get(
-            SuperLinkConnectionTomlKey.ENABLE_ACCOUNT_AUTH
-        ),
         federation=conn_dict.get(SuperLinkConnectionTomlKey.FEDERATION),
         options=simulation_options,
     )
@@ -221,7 +218,6 @@ def serialize_superlink_connection(connection: SuperLinkConnection) -> dict[str,
         SuperLinkConnectionTomlKey.ADDRESS: connection.address,
         SuperLinkConnectionTomlKey.ROOT_CERTIFICATES: connection.root_certificates,
         SuperLinkConnectionTomlKey.INSECURE: connection._insecure,
-        SuperLinkConnectionTomlKey.ENABLE_ACCOUNT_AUTH: connection._enable_account_auth,
         SuperLinkConnectionTomlKey.FEDERATION: connection.federation,
     }
     # Remove None values

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/cli/login/login.py

@@ -61,14 +61,6 @@ def login(
     superlink_connection = read_superlink_connection(superlink)
     superlink = superlink_connection.name
 
-    # Check if `enable-account-auth` is set to `true`
-    if not superlink_connection.enable_account_auth:
-        raise click.ClickException(
-            "Account authentication is not enabled for the SuperLink connection "
-            f"'{superlink}'. To enable it, set `enable-account-auth = true` "
-            "in the configuration."
-        )
-
     # Check if insecure flag is set to `True`
     if superlink_connection.insecure:
         raise click.ClickException(

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/cli/ls.py

@@ -79,7 +79,7 @@ def ls(  # pylint: disable=too-many-locals, too-many-branches, R0913, R0917
         ),
     ] = CliOutputFormat.DEFAULT,
 ) -> None:
-    """List the details of one provided run ID or all runs in a Flower federation.
+    """List the details of one provided run ID or all runs (alias: ls).
 
     The following details are displayed:
 

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/cli/supernode/ls.py

@@ -66,7 +66,7 @@ def ls(  # pylint: disable=R0914, R0913, R0917
         ),
     ] = False,
 ) -> None:
-    """List SuperNodes in the federation."""
+    """List SuperNodes in the federation (alias: ls)."""
     suppress_output = output_format == CliOutputFormat.JSON
     captured_output = io.StringIO()
 

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/cli/typing.py

@@ -22,6 +22,7 @@ from flwr.cli.constant import (
     DEFAULT_SIMULATION_BACKEND_NAME,
     SuperLinkConnectionTomlKey,
 )
+from flwr.supercore.utils import check_federation_format
 
 _ERROR_MSG_FMT = "SuperLinkConnection.%s is None"
 
@@ -106,8 +107,6 @@ class SuperLinkConnection:
     insecure : bool (default: False)
          Whether to use an insecure channel. If True, the
          connection will not use TLS encryption.
-    enable_account_auth : bool (default: False)
-         Whether to enable account authentication.
     federation : str
          The name of the federation to interface with.
     options : SuperLinkSimulationOptions
@@ -118,7 +117,6 @@ class SuperLinkConnection:
     address: str | None = None
     root_certificates: str | None = None
     _insecure: bool | None = None
-    _enable_account_auth: bool | None = None
     federation: str | None = None
     options: SuperLinkSimulationOptions | None = None
 
@@ -129,7 +127,6 @@ class SuperLinkConnection:
         address: str | None = None,
         root_certificates: str | None = None,
         insecure: bool | None = None,
-        enable_account_auth: bool | None = None,
         federation: str | None = None,
         options: SuperLinkSimulationOptions | None = None,
     ) -> None:
@@ -137,7 +134,6 @@ class SuperLinkConnection:
         self.address = address
         self.root_certificates = root_certificates
         self._insecure = insecure
-        self._enable_account_auth = enable_account_auth
         self.federation = federation
         self.options = options
 
@@ -150,13 +146,6 @@ class SuperLinkConnection:
             return False
         return self._insecure
 
-    @property
-    def enable_account_auth(self) -> bool:
-        """Return the enable_account_auth flag or its default (False) if unset."""
-        if self._enable_account_auth is None:
-            return False
-        return self._enable_account_auth
-
     def __post_init__(self) -> None:
         """Validate SuperLink connection configuration."""
         err_prefix = f"Invalid value for key '%s' in connection '{self.name}': "
@@ -187,19 +176,16 @@ class SuperLinkConnection:
                 err_prefix % SuperLinkConnectionTomlKey.INSECURE
                 + f"expected bool, but got {type(self._insecure).__name__}."
             )
-        if self._enable_account_auth is not None and not isinstance(
-            self._enable_account_auth, bool
-        ):
-            raise ValueError(
-                err_prefix % SuperLinkConnectionTomlKey.ENABLE_ACCOUNT_AUTH
-                + f"expected bool, but got {type(self._enable_account_auth).__name__}."
-            )
 
-        if self.federation is not None and not isinstance(self.federation, str):
-            raise ValueError(
-                err_prefix % SuperLinkConnectionTomlKey.FEDERATION
-                + f"expected str, but got {type(self.federation).__name__}."
-            )
+        if self.federation is not None:
+            if not isinstance(self.federation, str):
+                raise ValueError(
+                    err_prefix % SuperLinkConnectionTomlKey.FEDERATION
+                    + f"expected str, but got {type(self.federation).__name__}."
+                )
+
+            # Check if the federation string is valid
+            check_federation_format(self.federation)
 
         # The connection needs to have either an address or options (or both).
         if self.address is None and self.options is None:

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/cli/utils.py

@@ -241,7 +241,9 @@ def require_superlink_address(connection: SuperLinkConnection) -> str:
         cmd = click.get_current_context().command.name
         raise click.ClickException(
             f"`flwr {cmd}` currently works with a SuperLink. Ensure that the "
-            "correct SuperLink (Control API) address is provided in `pyproject.toml`."
+            "correct SuperLink (Control API) address is provided SuperLink connection "
+            "you are using. Check your Flower configuration file. You may use `flwr "
+            "config list` to see its location in the file system."
         )
     return connection.address
 
@@ -326,8 +328,10 @@ def flwr_cli_grpc_exc_handler() -> Iterator[None]:  # pylint: disable=too-many-b
             raise click.ClickException(
                 "The SuperLink cannot process this request. Please verify that "
                 "you set the address to its Control API endpoint correctly in your "
-                "`pyproject.toml`, and ensure that the Flower versions used by "
-                "the CLI and SuperLink are compatible."
+                "SuperLink connection in your Flower Configuration file. You may use "
+                "`flwr config list` to see its location in the file system. "
+                "Additonally, ensure that the Flower versions used by the CLI and "
+                "SuperLink are compatible."
             ) from None
         if e.code() == grpc.StatusCode.PERMISSION_DENIED:
             # pylint: disable-next=E1101

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/common/exit/exit_code.py

@@ -33,6 +33,7 @@ class ExitCode:
     SUPERLINK_LICENSE_MISSING = 102
     SUPERLINK_LICENSE_URL_INVALID = 103
     SUPERLINK_INVALID_ARGS = 104
+    SUPERLINK_DATABASE_SCHEMA_MISMATCH = 105
 
     # ServerApp-specific exit codes (200-299)
     SERVERAPP_STRATEGY_PRECONDITION_UNMET = 200
@@ -91,6 +92,11 @@ EXIT_CODE_HELP = {
         "Invalid arguments provided to SuperLink. Use `--help` check for the correct "
         "usage. Alternatively, check the documentation."
     ),
+    ExitCode.SUPERLINK_DATABASE_SCHEMA_MISMATCH: (
+        "The database schema does not match the expected schema for this version of "
+        "SuperLink. Please refer to the documentation for guidance on how to resolve "
+        "this issue."
+    ),
     # ServerApp-specific exit codes (200-299)
     ExitCode.SERVERAPP_STRATEGY_PRECONDITION_UNMET: (
         "The strategy received replies that cannot be aggregated. Please ensure all "

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/common/typing.py

@@ -24,6 +24,7 @@ import numpy as np
 import numpy.typing as npt
 
 from flwr.app.user_config import UserConfig
+from flwr.proto.federation_pb2 import Account  # pylint: disable=E0611
 from flwr.proto.node_pb2 import NodeInfo  # pylint: disable=E0611
 
 NDArray = npt.NDArray[Any]
@@ -343,5 +344,6 @@ class Federation:
 
     name: str
     member_aids: list[str]
+    accounts: list[Account]
     nodes: list[NodeInfo]
     runs: list[Run]

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/proto/federation_pb2.py

@@ -26,13 +26,15 @@ from flwr.proto import run_pb2 as flwr_dot_proto_dot_run__pb2
 from flwr.proto import node_pb2 as flwr_dot_proto_dot_node__pb2
 
 
-DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\x1b\x66lwr/proto/federation.proto\x12\nflwr.proto\x1a\x14\x66lwr/proto/run.proto\x1a\x15\x66lwr/proto/node.proto\"s\n\nFederation\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x13\n\x0bmember_aids\x18\x02 \x03(\t\x12#\n\x05nodes\x18\x03 \x03(\x0b\x32\x14.flwr.proto.NodeInfo\x12\x1d\n\x04runs\x18\x04 \x03(\x0b\x32\x0f.flwr.proto.Runb\x06proto3')
+DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\x1b\x66lwr/proto/federation.proto\x12\nflwr.proto\x1a\x14\x66lwr/proto/run.proto\x1a\x15\x66lwr/proto/node.proto\"#\n\x07\x41\x63\x63ount\x12\n\n\x02id\x18\x01 \x01(\t\x12\x0c\n\x04name\x18\x02 \x01(\t\"\x9a\x01\n\nFederation\x12\x0c\n\x04name\x18\x01 \x01(\t\x12\x13\n\x0bmember_aids\x18\x02 \x03(\t\x12%\n\x08\x61\x63\x63ounts\x18\x03 \x03(\x0b\x32\x13.flwr.proto.Account\x12#\n\x05nodes\x18\x04 \x03(\x0b\x32\x14.flwr.proto.NodeInfo\x12\x1d\n\x04runs\x18\x05 \x03(\x0b\x32\x0f.flwr.proto.Runb\x06proto3')
 
 _globals = globals()
 _builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals)
 _builder.BuildTopDescriptorsAndMessages(DESCRIPTOR, 'flwr.proto.federation_pb2', _globals)
 if not _descriptor._USE_C_DESCRIPTORS:
   DESCRIPTOR._loaded_options = None
-  _globals['_FEDERATION']._serialized_start=88
-  _globals['_FEDERATION']._serialized_end=203
+  _globals['_ACCOUNT']._serialized_start=88
+  _globals['_ACCOUNT']._serialized_end=123
+  _globals['_FEDERATION']._serialized_start=126
+  _globals['_FEDERATION']._serialized_end=280
 # @@protoc_insertion_point(module_scope)

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/proto/federation_pb2.pyi

@@ -28,18 +28,39 @@ import typing
 
 DESCRIPTOR: google.protobuf.descriptor.FileDescriptor
 
+@typing.final
+class Account(google.protobuf.message.Message):
+    DESCRIPTOR: google.protobuf.descriptor.Descriptor
+
+    ID_FIELD_NUMBER: builtins.int
+    NAME_FIELD_NUMBER: builtins.int
+    id: builtins.str
+    name: builtins.str
+    def __init__(
+        self,
+        *,
+        id: builtins.str = ...,
+        name: builtins.str = ...,
+    ) -> None: ...
+    def ClearField(self, field_name: typing.Literal["id", b"id", "name", b"name"]) -> None: ...
+
+global___Account = Account
+
 @typing.final
 class Federation(google.protobuf.message.Message):
     DESCRIPTOR: google.protobuf.descriptor.Descriptor
 
     NAME_FIELD_NUMBER: builtins.int
     MEMBER_AIDS_FIELD_NUMBER: builtins.int
+    ACCOUNTS_FIELD_NUMBER: builtins.int
     NODES_FIELD_NUMBER: builtins.int
     RUNS_FIELD_NUMBER: builtins.int
     name: builtins.str
     @property
     def member_aids(self) -> google.protobuf.internal.containers.RepeatedScalarFieldContainer[builtins.str]: ...
     @property
+    def accounts(self) -> google.protobuf.internal.containers.RepeatedCompositeFieldContainer[global___Account]: ...
+    @property
     def nodes(self) -> google.protobuf.internal.containers.RepeatedCompositeFieldContainer[flwr.proto.node_pb2.NodeInfo]: ...
     @property
     def runs(self) -> google.protobuf.internal.containers.RepeatedCompositeFieldContainer[flwr.proto.run_pb2.Run]: ...
@@ -48,9 +69,10 @@ class Federation(google.protobuf.message.Message):
         *,
         name: builtins.str = ...,
         member_aids: collections.abc.Iterable[builtins.str] | None = ...,
+        accounts: collections.abc.Iterable[global___Account] | None = ...,
         nodes: collections.abc.Iterable[flwr.proto.node_pb2.NodeInfo] | None = ...,
         runs: collections.abc.Iterable[flwr.proto.run_pb2.Run] | None = ...,
     ) -> None: ...
-    def ClearField(self, field_name: typing.Literal["member_aids", b"member_aids", "name", b"name", "nodes", b"nodes", "runs", b"runs"]) -> None: ...
+    def ClearField(self, field_name: typing.Literal["accounts", b"accounts", "member_aids", b"member_aids", "name", b"name", "nodes", b"nodes", "runs", b"runs"]) -> None: ...
 
 global___Federation = Federation

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/server/app.py

@@ -36,13 +36,11 @@ from flwr.common.config import get_flwr_dir
 from flwr.common.constant import (
     AUTHN_TYPE_YAML_KEY,
     AUTHZ_TYPE_YAML_KEY,
-    CLIENT_OCTET,
     CONTROL_API_DEFAULT_SERVER_ADDRESS,
     FLEET_API_GRPC_RERE_DEFAULT_ADDRESS,
     FLEET_API_REST_DEFAULT_ADDRESS,
     ISOLATION_MODE_PROCESS,
     ISOLATION_MODE_SUBPROCESS,
-    SERVER_OCTET,
     SERVERAPPIO_API_DEFAULT_SERVER_ADDRESS,
     SIMULATIONIO_API_DEFAULT_SERVER_ADDRESS,
     TRANSPORT_TYPE_GRPC_ADAPTER,
@@ -62,7 +60,7 @@ from flwr.proto.fleet_pb2_grpc import (  # pylint: disable=E0611
 )
 from flwr.proto.grpcadapter_pb2_grpc import add_GrpcAdapterServicer_to_server
 from flwr.server.fleet_event_log_interceptor import FleetEventLogInterceptor
-from flwr.supercore.address import parse_address
+from flwr.supercore.address import parse_address, resolve_bind_address
 from flwr.supercore.constant import FLWR_IN_MEMORY_DB_NAME
 from flwr.supercore.ffs import FfsFactory
 from flwr.supercore.grpc_health import add_args_health, run_health_server_grpc_no_tls
@@ -429,16 +427,11 @@ def run_superlink() -> None:
             raise ValueError(f"Unknown fleet_api_type: {args.fleet_api_type}")
 
     if args.isolation == ISOLATION_MODE_SUBPROCESS:
-
-        _octet, _colon, _port = serverappio_address.rpartition(":")
-        io_address = (
-            f"{CLIENT_OCTET}:{_port}" if _octet == SERVER_OCTET else serverappio_address
+        appio_address = resolve_bind_address(
+            simulationio_address if is_simulation else serverappio_address
         )
         command = ["flower-superexec", "--insecure"]
-        command += [
-            "--appio-api-address",
-            simulationio_address if is_simulation else io_address,
-        ]
+        command += ["--appio-api-address", appio_address]
         command += [
             "--plugin-type",
             ExecPluginType.SIMULATION if is_simulation else ExecPluginType.SERVER_APP,

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/server/superlink/fleet/message_handler/message_handler.py

@@ -321,7 +321,8 @@ def pull_object(
     if content is not None:
         object_available = content != b""
         # Record bytes traffic pulled by SuperNode
-        state.store_traffic(request.run_id, bytes_sent=len(content), bytes_recv=0)
+        if object_available:
+            state.store_traffic(request.run_id, bytes_sent=len(content), bytes_recv=0)
         return PullObjectResponse(
             object_found=True,
             object_available=object_available,

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/supercore/address.py

@@ -100,3 +100,12 @@ def is_port_in_use(address: str) -> bool:
             return True
 
         return False
+
+
+def resolve_bind_address(address: str) -> str:
+    """Replace bind-all addresses (0.0.0.0, ::) with localhost (127.0.0.1, ::1)."""
+    if address.startswith("[::]"):
+        return address.replace("[::]", "[::1]", 1)
+    if address.startswith("0.0.0.0"):
+        return address.replace("0.0.0.0", "127.0.0.1", 1)
+    return address

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/supercore/app_utils.py

@@ -53,6 +53,7 @@ def start_parent_process_monitor(
         while True:
             time.sleep(0.2)
             if not _pid_exists(parent_pid):
-                os.kill(os.getpid(), signal.SIGKILL)
+                signal.raise_signal(signal.SIGINT)
+                break
 
     threading.Thread(target=monitor, daemon=True).start()

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/supercore/constant.py

@@ -25,6 +25,9 @@ EXEC_PLUGIN_SECTION = "exec_plugin"
 # Flower in-memory Python-based database name
 FLWR_IN_MEMORY_DB_NAME = ":flwr-in-memory:"
 
+# Flower in-memory SQLite database URL
+FLWR_IN_MEMORY_SQLITE_DB_URL = "sqlite:///:memory:"
+
 # Constants for Hub
 APP_ID_PATTERN = r"^@[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$"
 APP_VERSION_PATTERN = r"^\d+\.\d+\.\d+$"

{flwr_nightly-1.26.0.dev20260126 → flwr_nightly-1.26.0.dev20260128}/py/flwr/supercore/sql_mixin.py

@@ -29,7 +29,7 @@ from sqlalchemy.exc import SQLAlchemyError
 from sqlalchemy.orm import Session, sessionmaker
 
 from flwr.common.logger import log
-from flwr.supercore.constant import SQLITE_PRAGMAS
+from flwr.supercore.constant import FLWR_IN_MEMORY_SQLITE_DB_URL, SQLITE_PRAGMAS
 
 _current_session: ContextVar[Session | None] = ContextVar(
     "current_sqlalchemy_session",
@@ -95,7 +95,7 @@ class SqlMixin(ABC):
 
         # Auto-convert file path to SQLAlchemy SQLite URL if needed
         if database_path == ":memory:":
-            self.database_url = "sqlite:///:memory:"
+            self.database_url = FLWR_IN_MEMORY_SQLITE_DB_URL
         elif not database_path.startswith("sqlite://"):
             # Treat as file path, convert to absolute and create SQLite URL
             abs_path = Path(database_path).resolve()

flwr_nightly-1.26.0.dev20260128/py/flwr/supercore/state/alembic/__init__.py

@@ -0,0 +1,15 @@
+# Copyright 2026 Flower Labs GmbH. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+# ==============================================================================
+"""Alembic helpers and migration environment for SQL state."""

flwr_nightly-1.26.0.dev20260128/py/flwr/supercore/state/alembic/env.py

@@ -0,0 +1,81 @@
+# Copyright 2026 Flower Labs GmbH. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+# ==============================================================================
+"""Alembic environment configuration for State migrations."""
+
+
+from logging.config import fileConfig
+
+from alembic import context
+from sqlalchemy import engine_from_config, pool
+
+from flwr.supercore.state.alembic.utils import get_combined_metadata
+
+# Alembic Config object
+config = context.config  # pylint: disable=no-member
+
+# Interpret the config file for Python logging
+if config.config_file_name is not None:
+    fileConfig(config.config_file_name)
+
+
+# Target metadata for autogenerate
+target_metadata = get_combined_metadata()
+
+
+def run_migrations_offline() -> None:
+    """Run migrations in 'offline' mode.
+
+    This configures the context with just a URL and not an Engine, though an Engine is
+    acceptable here as well. By skipping the Engine creation we don't even need a DBAPI
+    to be available.
+
+    Calls to context.execute() here emit the given string to the script output.
+    """
+    url = config.get_main_option("sqlalchemy.url")
+    context.configure(  # pylint: disable=no-member
+        url=url,
+        target_metadata=target_metadata,
+        literal_binds=True,
+        dialect_opts={"paramstyle": "named"},
+    )
+
+    with context.begin_transaction():  # pylint: disable=no-member
+        context.run_migrations()  # pylint: disable=no-member
+
+
+def run_migrations_online() -> None:
+    """Run migrations in 'online' mode.
+
+    In this scenario we need to create an Engine and associate a connection with the
+    context.
+    """
+    connectable = engine_from_config(
+        config.get_section(config.config_ini_section, {}),
+        prefix="sqlalchemy.",
+        poolclass=pool.NullPool,
+    )
+
+    with connectable.connect() as connection:
+        # pylint: disable-next=no-member
+        context.configure(connection=connection, target_metadata=target_metadata)
+
+        with context.begin_transaction():  # pylint: disable=no-member
+            context.run_migrations()  # pylint: disable=no-member
+
+
+if context.is_offline_mode():  # pylint: disable=no-member
+    run_migrations_offline()
+else:
+    run_migrations_online()

flwr_nightly-1.26.0.dev20260128/py/flwr/supercore/state/alembic/script.py.mako

@@ -0,0 +1,43 @@
+# Copyright 2026 Flower Labs GmbH. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+# ==============================================================================
+"""${message}.
+
+Revision ID: ${up_revision}
+Revises: ${down_revision | comma,n}
+Create Date: ${create_date}
+"""
+from typing import Sequence, Union
+
+from alembic import op
+import sqlalchemy as sa
+${imports if imports else ""}
+
+# pylint: disable=no-member
+
+# revision identifiers, used by Alembic.
+revision: str = ${repr(up_revision)}
+down_revision: Union[str, Sequence[str], None] = ${repr(down_revision)}
+branch_labels: Union[str, Sequence[str], None] = ${repr(branch_labels)}
+depends_on: Union[str, Sequence[str], None] = ${repr(depends_on)}
+
+
+def upgrade() -> None:
+    """Upgrade schema."""
+    ${upgrades if upgrades else "pass"}
+
+
+def downgrade() -> None:
+    """Downgrade schema."""
+    ${downgrades if downgrades else "pass"}