flwr 1.24.0__py3-none-any.whl → 1.26.0__py3-none-any.whl

flwr/server/superlink/linkstate/utils.py

@@ -16,22 +16,27 @@
 
 
 from os import urandom
+from typing import Any
 
 from flwr.common import ConfigRecord, Context, Error, Message, Metadata, now, serde
 from flwr.common.constant import (
     HEARTBEAT_PATIENCE,
     SUPERLINK_NODE_ID,
     ErrorCode,
-    MessageType,
     Status,
     SubStatus,
 )
 from flwr.common.message import make_message
+from flwr.common.serde import recorddict_from_proto, recorddict_to_proto
+from flwr.common.serde_utils import error_from_proto, error_to_proto
 from flwr.common.typing import RunStatus
 
 # pylint: disable=E0611
+from flwr.proto.error_pb2 import Error as ProtoError
 from flwr.proto.message_pb2 import Context as ProtoContext
 from flwr.proto.recorddict_pb2 import ConfigRecord as ProtoConfigRecord
+from flwr.proto.recorddict_pb2 import RecordDict as ProtoRecordDict
+from flwr.supercore.constant import SYSTEM_MESSAGE_TYPE
 from flwr.supercore.utils import int64_to_uint64, uint64_to_int64
 
 # pylint: enable=E0611
@@ -233,7 +238,7 @@ def create_message_error_unavailable_ins_message(reply_to_message_id: str) -> Me
         dst_node_id=SUPERLINK_NODE_ID,
         reply_to_message_id=reply_to_message_id,
         group_id="",  # Unknown
-        message_type=MessageType.SYSTEM,
+        message_type=SYSTEM_MESSAGE_TYPE,
         created_at=now().timestamp(),
         ttl=0,
     )
@@ -388,3 +393,45 @@ def check_node_availability_for_in_message(
             )
             ret_dict[in_message_id] = reply_message
     return ret_dict
+
+
+def message_to_dict(message: Message) -> dict[str, Any]:
+    """Transform Message to dict."""
+    result = {
+        "message_id": message.metadata.message_id,
+        "group_id": message.metadata.group_id,
+        "run_id": message.metadata.run_id,
+        "src_node_id": message.metadata.src_node_id,
+        "dst_node_id": message.metadata.dst_node_id,
+        "reply_to_message_id": message.metadata.reply_to_message_id,
+        "created_at": message.metadata.created_at,
+        "delivered_at": message.metadata.delivered_at,
+        "ttl": message.metadata.ttl,
+        "message_type": message.metadata.message_type,
+        "content": None,
+        "error": None,
+    }
+
+    if message.has_content():
+        result["content"] = recorddict_to_proto(message.content).SerializeToString()
+    else:
+        result["error"] = error_to_proto(message.error).SerializeToString()
+
+    return result
+
+
+def dict_to_message(message_dict: dict[str, Any]) -> Message:
+    """Transform dict to Message."""
+    content, error = None, None
+    if (b_content := message_dict.pop("content", None)) is not None:
+        content = recorddict_from_proto(ProtoRecordDict.FromString(b_content))
+    if (b_error := message_dict.pop("error", None)) is not None:
+        error = error_from_proto(ProtoError.FromString(b_error))
+
+    # Metadata constructor doesn't allow passing created_at. We set it later
+    metadata = Metadata(
+        **{k: v for k, v in message_dict.items() if k not in ["delivered_at"]}
+    )
+    msg = make_message(metadata=metadata, content=content, error=error)
+    msg.metadata.delivered_at = message_dict.get("delivered_at", "")
+    return msg

flwr/server/superlink/serverappio/serverappio_servicer.py

@@ -36,7 +36,6 @@ from flwr.common.serde import (
     message_from_proto,
     message_to_proto,
     run_status_from_proto,
-    run_status_to_proto,
     run_to_proto,
 )
 from flwr.common.typing import Fab, RunStatus
@@ -55,7 +54,6 @@ from flwr.proto.appio_pb2 import (  # pylint: disable=E0611
     RequestTokenRequest,
     RequestTokenResponse,
 )
-from flwr.proto.fab_pb2 import GetFabRequest, GetFabResponse  # pylint: disable=E0611
 from flwr.proto.heartbeat_pb2 import (  # pylint: disable=E0611
     SendAppHeartbeatRequest,
     SendAppHeartbeatResponse,
@@ -76,8 +74,6 @@ from flwr.proto.node_pb2 import Node  # pylint: disable=E0611
 from flwr.proto.run_pb2 import (  # pylint: disable=E0611
     GetRunRequest,
     GetRunResponse,
-    GetRunStatusRequest,
-    GetRunStatusResponse,
     UpdateRunStatusRequest,
     UpdateRunStatusResponse,
 )
@@ -88,7 +84,7 @@ from flwr.proto.serverappio_pb2 import (  # pylint: disable=E0611
 from flwr.server.superlink.linkstate import LinkState, LinkStateFactory
 from flwr.server.superlink.utils import abort_if
 from flwr.server.utils.validator import validate_message
-from flwr.supercore.ffs import Ffs, FfsFactory
+from flwr.supercore.ffs import FfsFactory
 from flwr.supercore.object_store import NoObjectInStoreError, ObjectStoreFactory
 
 
@@ -315,19 +311,6 @@ class ServerAppIoServicer(serverappio_pb2_grpc.ServerAppIoServicer):
 
         return GetRunResponse(run=run_to_proto(run))
 
-    def GetFab(
-        self, request: GetFabRequest, context: grpc.ServicerContext
-    ) -> GetFabResponse:
-        """Get FAB from Ffs."""
-        log(DEBUG, "ServerAppIoServicer.GetFab")
-
-        ffs: Ffs = self.ffs_factory.ffs()
-        if result := ffs.get(request.hash_str):
-            fab = Fab(request.hash_str, result[0], result[1])
-            return GetFabResponse(fab=fab_to_proto(fab))
-
-        raise ValueError(f"Found no FAB with hash: {request.hash_str}")
-
     def PullAppInputs(
         self, request: PullAppInputsRequest, context: grpc.ServicerContext
     ) -> PullAppInputsResponse:
@@ -434,21 +417,6 @@ class ServerAppIoServicer(serverappio_pb2_grpc.ServerAppIoServicer):
         state.add_serverapp_log(request.run_id, merged_logs)
         return PushLogsResponse()
 
-    def GetRunStatus(
-        self, request: GetRunStatusRequest, context: grpc.ServicerContext
-    ) -> GetRunStatusResponse:
-        """Get the status of a run."""
-        log(DEBUG, "ServerAppIoServicer.GetRunStatus")
-        state = self.state_factory.state()
-
-        # Get run status from LinkState
-        run_statuses = state.get_run_status(set(request.run_ids))
-        run_status_dict = {
-            run_id: run_status_to_proto(run_status)
-            for run_id, run_status in run_statuses.items()
-        }
-        return GetRunStatusResponse(run_status_dict=run_status_dict)
-
     def SendAppHeartbeat(
         self, request: SendAppHeartbeatRequest, context: grpc.ServicerContext
     ) -> SendAppHeartbeatResponse:

flwr/server/superlink/simulation/simulationio_servicer.py

@@ -29,7 +29,6 @@ from flwr.common.serde import (
     context_to_proto,
     fab_to_proto,
     run_status_from_proto,
-    run_status_to_proto,
     run_to_proto,
 )
 from flwr.common.typing import Fab, RunStatus
@@ -57,8 +56,6 @@ from flwr.proto.run_pb2 import (  # pylint: disable=E0611
     GetFederationOptionsResponse,
     GetRunRequest,
     GetRunResponse,
-    GetRunStatusRequest,
-    GetRunStatusResponse,
     UpdateRunStatusRequest,
     UpdateRunStatusResponse,
 )
@@ -219,22 +216,6 @@ class SimulationIoServicer(simulationio_pb2_grpc.SimulationIoServicer):
         )
         return UpdateRunStatusResponse()
 
-    def GetRunStatus(
-        self, request: GetRunStatusRequest, context: ServicerContext
-    ) -> GetRunStatusResponse:
-        """Get status of requested runs."""
-        log(DEBUG, "SimultionIoServicer.GetRunStatus")
-        state = self.state_factory.state()
-
-        statuses = state.get_run_status(set(request.run_ids))
-
-        return GetRunStatusResponse(
-            run_status_dict={
-                run_id: run_status_to_proto(status)
-                for run_id, status in statuses.items()
-            }
-        )
-
     def PushLogs(
         self, request: PushLogsRequest, context: grpc.ServicerContext
     ) -> PushLogsResponse:

flwr/server/utils/validator.py

@@ -17,7 +17,7 @@
 
 from flwr.common import Message
 from flwr.common.constant import SUPERLINK_NODE_ID
-from flwr.common.date import now
+from flwr.supercore.date import now
 
 
 # pylint: disable-next=too-many-branches

flwr/server/workflow/default_workflows.py

@@ -21,6 +21,7 @@ from logging import INFO, WARN
 from typing import cast
 
 import flwr.common.recorddict_compat as compat
+from flwr.app.message_type import MessageType
 from flwr.common import (
     ArrayRecord,
     Code,
@@ -32,7 +33,7 @@ from flwr.common import (
     Message,
     log,
 )
-from flwr.common.constant import MessageType, MessageTypeLegacy
+from flwr.common.constant import MessageTypeLegacy
 
 from ..client_proxy import ClientProxy
 from ..compat.app_utils import start_update_client_manager_thread

flwr/server/workflow/secure_aggregation/secaggplus_workflow.py

@@ -21,12 +21,12 @@ from logging import DEBUG, ERROR, INFO, WARN
 from typing import cast
 
 import flwr.common.recorddict_compat as compat
+from flwr.app.message_type import MessageType
 from flwr.common import (
     ConfigRecord,
     Context,
     FitRes,
     Message,
-    MessageType,
     NDArrays,
     RecordDict,
     bytes_to_ndarray,

flwr/serverapp/strategy/bulyan.py

@@ -185,7 +185,13 @@ class Bulyan(FedAvg):
 
         # Convert to ArrayRecord
         arrays = ArrayRecord(
-            dict(zip(array_keys, map(Array, aggregated_ndarrays), strict=True))
+            dict(
+                zip(
+                    array_keys,
+                    (Array(np.asarray(arr)) for arr in aggregated_ndarrays),
+                    strict=True,
+                )
+            )
         )
 
         # Aggregate MetricRecords

flwr/serverapp/strategy/dp_fixed_clipping.py

@@ -22,6 +22,8 @@ from abc import ABC
 from collections.abc import Iterable
 from logging import INFO, WARNING
 
+import numpy as np
+
 from flwr.common import Array, ArrayRecord, ConfigRecord, Message, MetricRecord, log
 from flwr.common.differential_privacy import (
     add_gaussian_noise_inplace,
@@ -216,7 +218,13 @@ class DifferentialPrivacyServerSideFixedClipping(DifferentialPrivacyFixedClippin
                 )
                 # Replace content while preserving keys
                 reply.content[arr_name] = ArrayRecord(
-                    dict(zip(record.keys(), map(Array, reply_ndarrays), strict=True))
+                    dict(
+                        zip(
+                            record.keys(),
+                            (Array(np.asarray(v)) for v in reply_ndarrays),
+                            strict=True,
+                        )
+                    )
                 )
             log(
                 INFO,

flwr/serverapp/strategy/fedavg.py

@@ -18,11 +18,11 @@
 from collections.abc import Callable, Iterable
 from logging import INFO, WARNING
 
+from flwr.app import MessageType
 from flwr.common import (
     ArrayRecord,
     ConfigRecord,
     Message,
-    MessageType,
     MetricRecord,
     RecordDict,
     log,

flwr/serverapp/strategy/fedxgb_cyclic.py

@@ -19,11 +19,11 @@ from collections.abc import Callable, Iterable
 from logging import INFO
 from typing import cast
 
+from flwr.app import MessageType
 from flwr.common import (
     ArrayRecord,
     ConfigRecord,
     Message,
-    MessageType,
     MetricRecord,
     RecordDict,
     log,

flwr/simulation/ray_transport/ray_client_proxy.py

@@ -19,16 +19,12 @@ import traceback
 from logging import ERROR
 
 from flwr import common
+from flwr.app.message_type import MessageType
 from flwr.client import ClientFnExt
 from flwr.client.run_info_store import DeprecatedRunInfoStore
 from flwr.clientapp.client_app import ClientApp
 from flwr.common import DEFAULT_TTL, Message, Metadata, RecordDict, now
-from flwr.common.constant import (
-    NUM_PARTITIONS_KEY,
-    PARTITION_ID_KEY,
-    MessageType,
-    MessageTypeLegacy,
-)
+from flwr.common.constant import NUM_PARTITIONS_KEY, PARTITION_ID_KEY, MessageTypeLegacy
 from flwr.common.logger import log
 from flwr.common.message import make_message
 from flwr.common.recorddict_compat import (

flwr/simulation/run_simulation.py

@@ -28,6 +28,7 @@ from pathlib import Path
 from queue import Empty, Queue
 from typing import Any, cast
 
+from flwr.app.user_config import UserConfig
 from flwr.cli.config_utils import load_and_validate
 from flwr.cli.utils import get_sha256_hash
 from flwr.clientapp import ClientApp
@@ -39,7 +40,7 @@ from flwr.common.logger import (
     update_console_handler,
     warn_deprecated_feature_with_example,
 )
-from flwr.common.typing import Run, RunStatus, UserConfig
+from flwr.common.typing import Run, RunStatus
 from flwr.server.grid import Grid, InMemoryGrid
 from flwr.server.run_serverapp import run as _run
 from flwr.server.server_app import ServerApp
@@ -115,17 +116,7 @@ def run_simulation_from_cli() -> None:
         sys.exit("Simulation Engine cannot start.")
 
     # Load pyproject.toml
-    config, errors, warnings = load_and_validate(
-        app_path / "pyproject.toml", check_module=False
-    )
-    if errors:
-        raise ValueError(errors)
-
-    if warnings:
-        log(WARNING, warnings)
-
-    if config is None:
-        raise ValueError("Config extracted from FAB's pyproject.toml is not valid")
+    config, _ = load_and_validate(app_path / "pyproject.toml", check_module=False)
 
     # Get ClientApp and SeverApp components
     app_components = config["tool"]["flwr"]["app"]["components"]

flwr/simulation/simulationio_connection.py

@@ -23,7 +23,7 @@ import grpc
 from flwr.common.constant import SIMULATIONIO_API_DEFAULT_CLIENT_ADDRESS
 from flwr.common.grpc import create_channel, on_channel_state_change
 from flwr.common.logger import log
-from flwr.common.retry_invoker import _make_simple_grpc_retry_invoker, _wrap_stub
+from flwr.common.retry_invoker import make_simple_grpc_retry_invoker, wrap_stub
 from flwr.proto.simulationio_pb2_grpc import SimulationIoStub  # pylint: disable=E0611
 
 
@@ -49,7 +49,7 @@ class SimulationIoConnection:
         self._cert = root_certificates
         self._grpc_stub: SimulationIoStub | None = None
         self._channel: grpc.Channel | None = None
-        self._retry_invoker = _make_simple_grpc_retry_invoker()
+        self._retry_invoker = make_simple_grpc_retry_invoker()
 
     @property
     def _is_connected(self) -> bool:
@@ -75,7 +75,7 @@ class SimulationIoConnection:
         )
         self._channel.subscribe(on_channel_state_change)
         self._grpc_stub = SimulationIoStub(self._channel)
-        _wrap_stub(self._grpc_stub, self._retry_invoker)
+        wrap_stub(self._grpc_stub, self._retry_invoker)
         log(DEBUG, "[SimulationIO] Connected to %s", self._addr)
 
     def _disconnect(self) -> None:

flwr/{common → supercore}/address.py

@@ -15,12 +15,9 @@
 """Flower IP address utils."""
 
 
-import re
 import socket
 from ipaddress import ip_address
 
-import grpc
-
 IPV6: int = 6
 
 
@@ -105,33 +102,10 @@ def is_port_in_use(address: str) -> bool:
         return False
 
 
-def get_ip_address_from_servicer_context(context: grpc.ServicerContext) -> str:
-    """Extract the client's IPv4 or IPv6 address from the gRPC ServicerContext.
-
-    Parameters
-    ----------
-    context : grpc.ServicerContext
-        The gRPC ServicerContext object. The context.peer() returns a string like
-        "ipv4:127.0.0.1:56789" for IPv4 and "ipv6:[2001:db8::1]:54321" for IPv6.
-
-    Returns
-    -------
-    str
-        If one of the format matches, the function will return the client's IP address,
-        otherwise, it will raise a ValueError.
-    """
-    peer: str = context.peer()
-    # Match IPv4: "ipv4:IP:port"
-    ipv4_match = re.match(r"^ipv4:(?P<ip>[^:]+):", peer)
-    if ipv4_match:
-        return ipv4_match.group("ip")
-
-    # Match IPv6: "ipv6:[IP]:port"
-    ipv6_match = re.match(r"^ipv6:\[(?P<ip>[^\]]+)\]:", peer)
-    if ipv6_match:
-        return ipv6_match.group("ip")
-
-    raise ValueError(
-        f"Unsupported peer address format: {peer} for the transport protocol. "
-        "The supported formats are ipv4:IP:port and ipv6:[IP]:port."
-    )
+def resolve_bind_address(address: str) -> str:
+    """Replace bind-all addresses (0.0.0.0, ::) with localhost (127.0.0.1, ::1)."""
+    if address.startswith("[::]"):
+        return address.replace("[::]", "[::1]", 1)
+    if address.startswith("0.0.0.0"):
+        return address.replace("0.0.0.0", "127.0.0.1", 1)
+    return address

flwr/supercore/app_utils.py

@@ -53,6 +53,7 @@ def start_parent_process_monitor(
         while True:
             time.sleep(0.2)
             if not _pid_exists(parent_pid):
-                os.kill(os.getpid(), signal.SIGKILL)
+                signal.raise_signal(signal.SIGINT)
+                break
 
     threading.Thread(target=monitor, daemon=True).start()

flwr/supercore/constant.py

@@ -17,7 +17,7 @@
 
 from __future__ import annotations
 
-from flwr.common.constant import FLWR_DIR
+from flwr.common.constant import FLWR_DIR, NOOP_ACCOUNT_NAME
 
 # Top-level key in YAML config for exec plugin settings
 EXEC_PLUGIN_SECTION = "exec_plugin"
@@ -25,11 +25,17 @@ EXEC_PLUGIN_SECTION = "exec_plugin"
 # Flower in-memory Python-based database name
 FLWR_IN_MEMORY_DB_NAME = ":flwr-in-memory:"
 
+# Flower in-memory SQLite database URL
+FLWR_IN_MEMORY_SQLITE_DB_URL = "sqlite:///:memory:"
+
 # Constants for Hub
 APP_ID_PATTERN = r"^@[A-Za-z0-9_.-]+/[A-Za-z0-9_.-]+$"
 APP_VERSION_PATTERN = r"^\d+\.\d+\.\d+$"
 PLATFORM_API_URL = "https://api.flower.ai/v1"
 
+# SuperGrid constants
+SUPERGRID_ADDRESS = "supergrid.flower.ai"
+
 # Specification for app publishing
 APP_PUBLISH_INCLUDE_PATTERNS = (
     "**/*.py",
@@ -52,11 +58,30 @@ MIME_MAP = {
 }
 
 # Constants for federations
-NOOP_FEDERATION = "default"
+NOOP_FEDERATION = f"@{NOOP_ACCOUNT_NAME}/default"
+NOOP_FEDERATION_DESCRIPTION = "A federation for testing and development purposes."
 
 # Constants for exit handling
 FORCE_EXIT_TIMEOUT_SECONDS = 5  # Used in `flwr_exit` function
 
+# Constants for message processing timing
+MESSAGE_TIME_ENTRY_MAX_AGE_SECONDS = 3600
+
+
+# System message type
+SYSTEM_MESSAGE_TYPE = "system"
+
+# SQLite PRAGMA settings for optimal performance and correctness
+SQLITE_PRAGMAS = (
+    ("busy_timeout", "5000"),  # Retry lock acquisition for up to 5s before SQLITE_BUSY
+    ("journal_mode", "WAL"),  # Enable Write-Ahead Logging for better concurrency
+    ("synchronous", "NORMAL"),
+    ("foreign_keys", "ON"),
+    ("cache_size", "-64000"),  # 64MB cache
+    ("temp_store", "MEMORY"),  # In-memory temp tables
+    ("mmap_size", "268435456"),  # 256MB memory-mapped I/O
+)
+
 
 class NodeStatus:
     """Event log writer types."""

flwr/supercore/corestate/{sqlite_corestate.py → sql_corestate.py}

@@ -1,4 +1,4 @@
-# Copyright 2025 Flower Labs GmbH. All Rights Reserved.
+# Copyright 2026 Flower Labs GmbH. All Rights Reserved.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -12,36 +12,31 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 # ==============================================================================
-"""SQLite-based CoreState implementation."""
+"""SQLAlchemy-based CoreState implementation."""
 
 
 import secrets
-import sqlite3
 from typing import cast
 
+from sqlalchemy import MetaData, text
+from sqlalchemy.exc import IntegrityError
+
 from flwr.common import now
 from flwr.common.constant import (
     FLWR_APP_TOKEN_LENGTH,
     HEARTBEAT_DEFAULT_INTERVAL,
     HEARTBEAT_PATIENCE,
 )
-from flwr.supercore.sqlite_mixin import SqliteMixin
+from flwr.supercore.sql_mixin import SqlMixin
+from flwr.supercore.state.schema.corestate_tables import create_corestate_metadata
 from flwr.supercore.utils import int64_to_uint64, uint64_to_int64
 
 from ..object_store import ObjectStore
 from .corestate import CoreState
 
-SQL_CREATE_TABLE_TOKEN_STORE = """
-CREATE TABLE IF NOT EXISTS token_store (
-    run_id                  INTEGER PRIMARY KEY,
-    token                   TEXT UNIQUE NOT NULL,
-    active_until            REAL
-);
-"""
-
 
-class SqliteCoreState(CoreState, SqliteMixin):
-    """SQLite-based CoreState implementation."""
+class SqlCoreState(CoreState, SqlMixin):
+    """SQLAlchemy-based CoreState implementation."""
 
     def __init__(self, database_path: str, object_store: ObjectStore) -> None:
         super().__init__(database_path)
@@ -52,9 +47,9 @@ class SqliteCoreState(CoreState, SqliteMixin):
         """Return the ObjectStore instance used by this CoreState."""
         return self._object_store
 
-    def get_sql_statements(self) -> tuple[str, ...]:
-        """Return SQL statements needed for CoreState tables."""
-        return (SQL_CREATE_TABLE_TOKEN_STORE,)
+    def get_metadata(self) -> MetaData:
+        """Return SQLAlchemy MetaData needed for CoreState tables."""
+        return create_corestate_metadata()
 
     def create_token(self, run_id: int) -> str | None:
         """Create a token for the given run ID."""
@@ -63,7 +58,8 @@ class SqliteCoreState(CoreState, SqliteMixin):
         active_until = current + HEARTBEAT_DEFAULT_INTERVAL
         query = """
             INSERT INTO token_store (run_id, token, active_until)
-            VALUES (:run_id, :token, :active_until);
+            VALUES (:run_id, :token, :active_until)
+            RETURNING token;
         """
         data = {
             "run_id": uint64_to_int64(run_id),
@@ -71,10 +67,10 @@ class SqliteCoreState(CoreState, SqliteMixin):
             "active_until": active_until,
         }
         try:
-            self.query(query, data)
-        except sqlite3.IntegrityError:
+            rows = self.query(query, data)
+            return cast(str, rows[0]["token"])
+        except IntegrityError:
             return None  # Token already created for this run ID
-        return token
 
     def verify_token(self, run_id: int, token: str) -> bool:
         """Verify a token for the given run ID."""
@@ -128,14 +124,14 @@ class SqliteCoreState(CoreState, SqliteMixin):
         """
         current = now().timestamp()
 
-        with self.conn:
+        with self.session() as session:
             # Delete expired tokens and get their run_ids and active_until timestamps
             query = """
                 DELETE FROM token_store
                 WHERE active_until < :current
                 RETURNING run_id, active_until;
             """
-            rows = self.conn.execute(query, {"current": current}).fetchall()
+            rows = session.execute(text(query), {"current": current}).mappings().all()
             expired_records = [
                 (int64_to_uint64(row["run_id"]), row["active_until"]) for row in rows
             ]

flwr/supercore/credential_store/__init__.py

@@ -0,0 +1,33 @@
+# Copyright 2026 Flower Labs GmbH. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+# ==============================================================================
+"""Credential store for Flower."""
+
+
+from .credential_store import CredentialStore
+from .file_credential_store import FileCredentialStore
+
+
+def get_credential_store() -> CredentialStore:
+    """Get the credential store instance.
+
+    Currently, only FileCredentialStore is implemented.
+    """
+    return FileCredentialStore()
+
+
+__all__ = [
+    "CredentialStore",
+    "get_credential_store",
+]