otdf-python 0.11.0__tar.gz → 0.13.0__tar.gz

{otdf_python-0.11.0 → otdf_python-0.13.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: otdf-python
-Version: 0.11.0
+Version: 0.13.0
 Summary: Unofficial OpenTDF SDK for Python
 Project-URL: Homepage, https://github.com/b-long/opentdf-python-sdk
 Project-URL: Repository, https://github.com/b-long/opentdf-python-sdk
@@ -25,9 +25,9 @@ Requires-Dist: connect-python>=0.9.0
 Requires-Dist: cryptography>=50.0.0
 Requires-Dist: grpcio-status>=1.74.0
 Requires-Dist: grpcio>=1.74.0
-Requires-Dist: httpx2>=2.3.0
+Requires-Dist: httpx2>=2.12.0
 Requires-Dist: protobuf>=6.31.1
-Requires-Dist: pyjwt>=2.10.1
+Requires-Dist: pyjwt>=2.15.0
 Requires-Dist: typing-extensions>=4.14.1
 Description-Content-Type: text/markdown
 
@@ -130,6 +130,12 @@ with open("decrypted.txt", "wb") as f:
 
 ```
 
+## TDF container format
+
+TDF archives are written with the spec-mandated `manifest.json` zip entry (per opentdf/spec) instead of the legacy `0.manifest.json`. Readers accept both names, so archives written by older versions of this SDK remain readable forever. The payload zip entry is resolved from `manifest.payload.url` rather than assumed. `schemaVersion` is unchanged (still `4.3.0`); `tdf_spec_version` is now read at either its legacy or spec-conformant placement, but never written.
+
+**Interoperability note:** archives written by this version cannot currently be opened by released `otdfctl`, or by the upstream `opentdf/platform` Go, Java, or JS SDKs, until they add a `manifest.json` read fallback (an upstream reader-fallback PR is planned). If you interoperate with those tools today, hold off upgrading until that fallback ships.
+
 ## Project Structure
 
 ```

{otdf_python-0.11.0 → otdf_python-0.13.0}/README.md

@@ -97,6 +97,12 @@ with open("decrypted.txt", "wb") as f:
 
 ```
 
+## TDF container format
+
+TDF archives are written with the spec-mandated `manifest.json` zip entry (per opentdf/spec) instead of the legacy `0.manifest.json`. Readers accept both names, so archives written by older versions of this SDK remain readable forever. The payload zip entry is resolved from `manifest.payload.url` rather than assumed. `schemaVersion` is unchanged (still `4.3.0`); `tdf_spec_version` is now read at either its legacy or spec-conformant placement, but never written.
+
+**Interoperability note:** archives written by this version cannot currently be opened by released `otdfctl`, or by the upstream `opentdf/platform` Go, Java, or JS SDKs, until they add a `manifest.json` read fallback (an upstream reader-fallback PR is planned). If you interoperate with those tools today, hold off upgrading until that fallback ships.
+
 ## Project Structure
 
 ```

otdf_python-0.13.0/_proto/otdf_python_proto/authorization/v2/authorization_pb2.py

@@ -0,0 +1,113 @@
+# -*- coding: utf-8 -*-
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# NO CHECKED-IN PROTOBUF GENCODE
+# source: authorization/v2/authorization.proto
+# Protobuf Python Version: 6.31.1
+"""Generated protocol buffer code."""
+from google.protobuf import descriptor as _descriptor
+from google.protobuf import descriptor_pool as _descriptor_pool
+from google.protobuf import runtime_version as _runtime_version
+from google.protobuf import symbol_database as _symbol_database
+from google.protobuf.internal import builder as _builder
+_runtime_version.ValidateProtobufRuntimeVersion(
+    _runtime_version.Domain.PUBLIC,
+    6,
+    31,
+    1,
+    '',
+    'authorization/v2/authorization.proto'
+)
+# @@protoc_insertion_point(imports)
+
+_sym_db = _symbol_database.Default()
+
+
+from buf.validate import validate_pb2 as buf_dot_validate_dot_validate__pb2
+from entity import entity_pb2 as entity_dot_entity__pb2
+from google.protobuf import wrappers_pb2 as google_dot_protobuf_dot_wrappers__pb2
+from policy import objects_pb2 as policy_dot_objects__pb2
+
+
+DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n$authorization/v2/authorization.proto\x12\x10\x61uthorization.v2\x1a\x1b\x62uf/validate/validate.proto\x1a\x13\x65ntity/entity.proto\x1a\x1egoogle/protobuf/wrappers.proto\x1a\x14policy/objects.proto\"\xe9\x04\n\x10\x45ntityIdentifier\x12\xc3\x01\n\x0c\x65ntity_chain\x18\x01 \x01(\x0b\x32\x13.entity.EntityChainB\x88\x01\xbaH\x84\x01\xba\x01\x80\x01\n\x15\x65ntity_chain_required\x12\x37\x65ntities must be provided and contain at least 1 entity\x1a.has(this.entities) && this.entities.size() > 0H\x00R\x0b\x65ntityChain\x12O\n\x1dregistered_resource_value_fqn\x18\x02 \x01(\tB\n\xbaH\x07r\x05\x10\x01\x88\x01\x01H\x00R\x1aregisteredResourceValueFqn\x12{\n\x05token\x18\x03 \x01(\x0b\x32\r.entity.TokenBT\xbaHQ\xba\x01N\n\x0etoken_required\x12\x16token must be provided\x1a$has(this.jwt) && this.jwt.size() > 0H\x00R\x05token\x12\xab\x01\n\x12with_request_token\x18\x04 \x01(\x0b\x32\x1a.google.protobuf.BoolValueB_\xbaH\\\xba\x01Y\n\x1fwith_request_token_must_be_true\x12(with_request_token must be true when set\x1a\x0cthis == trueH\x00R\x10withRequestTokenB\x13\n\nidentifier\x12\x05\xbaH\x02\x08\x01\"\xc3\x03\n\x12\x45ntityEntitlements\x12!\n\x0c\x65phemeral_id\x18\x01 \x01(\tR\x0b\x65phemeralId\x12\x8b\x01\n\x1f\x61\x63tions_per_attribute_value_fqn\x18\x02 \x03(\x0b\x32\x45.authorization.v2.EntityEntitlements.ActionsPerAttributeValueFqnEntryR\x1b\x61\x63tionsPerAttributeValueFqn\x12@\n\x0f\x65ntity_category\x18\x03 \x01(\x0e\x32\x17.entity.Entity.CategoryR\x0e\x65ntityCategory\x1a\x37\n\x0b\x41\x63tionsList\x12(\n\x07\x61\x63tions\x18\x01 \x03(\x0b\x32\x0e.policy.ActionR\x07\x61\x63tions\x1a\x80\x01\n ActionsPerAttributeValueFqnEntry\x12\x10\n\x03key\x18\x01 \x01(\tR\x03key\x12\x46\n\x05value\x18\x02 \x01(\x0b\x32\x30.authorization.v2.EntityEntitlements.ActionsListR\x05value:\x02\x38\x01\"\xb6\x03\n\x08Resource\x12!\n\x0c\x65phemeral_id\x18\x01 \x01(\tR\x0b\x65phemeralId\x12\x82\x02\n\x10\x61ttribute_values\x18\x02 \x01(\x0b\x32*.authorization.v2.Resource.AttributeValuesB\xa8\x01\xbaH\xa4\x01\xba\x01\xa0\x01\n\x19\x61ttribute_values_required\x12Hif provided, resource.attribute_values must contain at least 1 valid FQN\x1a\x39this.fqns.size() > 0 && this.fqns.all(item, item.isUri())H\x00R\x0f\x61ttributeValues\x12O\n\x1dregistered_resource_value_fqn\x18\x03 \x01(\tB\n\xbaH\x07r\x05\x10\x01\x88\x01\x01H\x00R\x1aregisteredResourceValueFqn\x1a%\n\x0f\x41ttributeValues\x12\x12\n\x04\x66qns\x18\x01 \x03(\tR\x04\x66qnsB\n\n\x08resource\"\xb1\x01\n\x10ResourceDecision\x12\x32\n\x15\x65phemeral_resource_id\x18\x01 \x01(\tR\x13\x65phemeralResourceId\x12\x36\n\x08\x64\x65\x63ision\x18\x02 \x01(\x0e\x32\x1a.authorization.v2.DecisionR\x08\x64\x65\x63ision\x12\x31\n\x14required_obligations\x18\x03 \x03(\tR\x13requiredObligations\"\xa6\x04\n\x12GetDecisionRequest\x12W\n\x11\x65ntity_identifier\x18\x01 \x01(\x0b\x32\".authorization.v2.EntityIdentifierB\x06\xbaH\x03\xc8\x01\x01R\x10\x65ntityIdentifier\x12.\n\x06\x61\x63tion\x18\x02 \x01(\x0b\x32\x0e.policy.ActionB\x06\xbaH\x03\xc8\x01\x01R\x06\x61\x63tion\x12>\n\x08resource\x18\x03 \x01(\x0b\x32\x1a.authorization.v2.ResourceB\x06\xbaH\x03\xc8\x01\x01R\x08resource\x12\xdf\x01\n\x1b\x66ulfillable_obligation_fqns\x18\x04 \x03(\tB\x9e\x01\xbaH\x9a\x01\xba\x01\x96\x01\n\x1bobligation_value_fqns_valid\x12\x45if provided, fulfillable_obligation_fqns must contain only valid FQNs\x1a\x30this.size() == 0 || this.all(item, item.isUri())R\x19\x66ulfillableObligationFqns:e\xbaHb\x1a`\n)get_decision_request.action_name_required\x12\x1c\x61\x63tion.name must be provided\x1a\x15has(this.action.name)\"U\n\x13GetDecisionResponse\x12>\n\x08\x64\x65\x63ision\x18\x01 \x01(\x0b\x32\".authorization.v2.ResourceDecisionR\x08\x64\x65\x63ision\"\xbd\x04\n\x1fGetDecisionMultiResourceRequest\x12W\n\x11\x65ntity_identifier\x18\x01 \x01(\x0b\x32\".authorization.v2.EntityIdentifierB\x06\xbaH\x03\xc8\x01\x01R\x10\x65ntityIdentifier\x12.\n\x06\x61\x63tion\x18\x02 \x01(\x0b\x32\x0e.policy.ActionB\x06\xbaH\x03\xc8\x01\x01R\x06\x61\x63tion\x12\x42\n\tresources\x18\x03 \x03(\x0b\x32\x1a.authorization.v2.ResourceB\x08\xbaH\x05\x92\x01\x02\x08\x01R\tresources\x12\xdf\x01\n\x1b\x66ulfillable_obligation_fqns\x18\x04 \x03(\tB\x9e\x01\xbaH\x9a\x01\xba\x01\x96\x01\n\x1bobligation_value_fqns_valid\x12\x45if provided, fulfillable_obligation_fqns must contain only valid FQNs\x1a\x30this.size() == 0 || this.all(item, item.isUri())R\x19\x66ulfillableObligationFqns:k\xbaHh\x1a\x66\n/get_decision_multi_request.action_name_required\x12\x1c\x61\x63tion.name must be provided\x1a\x15has(this.action.name)\"\xb6\x01\n GetDecisionMultiResourceResponse\x12?\n\rall_permitted\x18\x01 \x01(\x0b\x32\x1a.google.protobuf.BoolValueR\x0c\x61llPermitted\x12Q\n\x12resource_decisions\x18\x02 \x03(\x0b\x32\".authorization.v2.ResourceDecisionR\x11resourceDecisions\"\x82\x01\n\x16GetDecisionBulkRequest\x12h\n\x11\x64\x65\x63ision_requests\x18\x01 \x03(\x0b\x32\x31.authorization.v2.GetDecisionMultiResourceRequestB\x08\xbaH\x05\x92\x01\x02\x08\x01R\x10\x64\x65\x63isionRequests\"|\n\x17GetDecisionBulkResponse\x12\x61\n\x12\x64\x65\x63ision_responses\x18\x01 \x03(\x0b\x32\x32.authorization.v2.GetDecisionMultiResourceResponseR\x11\x64\x65\x63isionResponses\"\xd9\x01\n\x16GetEntitlementsRequest\x12W\n\x11\x65ntity_identifier\x18\x01 \x01(\x0b\x32\".authorization.v2.EntityIdentifierB\x06\xbaH\x03\xc8\x01\x01R\x10\x65ntityIdentifier\x12\x45\n\x1cwith_comprehensive_hierarchy\x18\x02 \x01(\x08H\x00R\x1awithComprehensiveHierarchy\x88\x01\x01\x42\x1f\n\x1d_with_comprehensive_hierarchy\"c\n\x17GetEntitlementsResponse\x12H\n\x0c\x65ntitlements\x18\x01 \x03(\x0b\x32$.authorization.v2.EntityEntitlementsR\x0c\x65ntitlements*L\n\x08\x44\x65\x63ision\x12\x18\n\x14\x44\x45\x43ISION_UNSPECIFIED\x10\x00\x12\x11\n\rDECISION_DENY\x10\x01\x12\x13\n\x0f\x44\x45\x43ISION_PERMIT\x10\x02\x32\xce\x03\n\x14\x41uthorizationService\x12\\\n\x0bGetDecision\x12$.authorization.v2.GetDecisionRequest\x1a%.authorization.v2.GetDecisionResponse\"\x00\x12\x83\x01\n\x18GetDecisionMultiResource\x12\x31.authorization.v2.GetDecisionMultiResourceRequest\x1a\x32.authorization.v2.GetDecisionMultiResourceResponse\"\x00\x12h\n\x0fGetDecisionBulk\x12(.authorization.v2.GetDecisionBulkRequest\x1a).authorization.v2.GetDecisionBulkResponse\"\x00\x12h\n\x0fGetEntitlements\x12(.authorization.v2.GetEntitlementsRequest\x1a).authorization.v2.GetEntitlementsResponse\"\x00\x42\x8b\x01\n\x14\x63om.authorization.v2B\x12\x41uthorizationProtoP\x01\xa2\x02\x03\x41XX\xaa\x02\x10\x41uthorization.V2\xca\x02\x10\x41uthorization\\V2\xe2\x02\x1c\x41uthorization\\V2\\GPBMetadata\xea\x02\x11\x41uthorization::V2b\x06proto3')
+
+_globals = globals()
+_builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals)
+_builder.BuildTopDescriptorsAndMessages(DESCRIPTOR, 'authorization.v2.authorization_pb2', _globals)
+if not _descriptor._USE_C_DESCRIPTORS:
+  _globals['DESCRIPTOR']._loaded_options = None
+  _globals['DESCRIPTOR']._serialized_options = b'\n\024com.authorization.v2B\022AuthorizationProtoP\001\242\002\003AXX\252\002\020Authorization.V2\312\002\020Authorization\\V2\342\002\034Authorization\\V2\\GPBMetadata\352\002\021Authorization::V2'
+  _globals['_ENTITYIDENTIFIER'].oneofs_by_name['identifier']._loaded_options = None
+  _globals['_ENTITYIDENTIFIER'].oneofs_by_name['identifier']._serialized_options = b'\272H\002\010\001'
+  _globals['_ENTITYIDENTIFIER'].fields_by_name['entity_chain']._loaded_options = None
+  _globals['_ENTITYIDENTIFIER'].fields_by_name['entity_chain']._serialized_options = b'\272H\204\001\272\001\200\001\n\025entity_chain_required\0227entities must be provided and contain at least 1 entity\032.has(this.entities) && this.entities.size() > 0'
+  _globals['_ENTITYIDENTIFIER'].fields_by_name['registered_resource_value_fqn']._loaded_options = None
+  _globals['_ENTITYIDENTIFIER'].fields_by_name['registered_resource_value_fqn']._serialized_options = b'\272H\007r\005\020\001\210\001\001'
+  _globals['_ENTITYIDENTIFIER'].fields_by_name['token']._loaded_options = None
+  _globals['_ENTITYIDENTIFIER'].fields_by_name['token']._serialized_options = b'\272HQ\272\001N\n\016token_required\022\026token must be provided\032$has(this.jwt) && this.jwt.size() > 0'
+  _globals['_ENTITYIDENTIFIER'].fields_by_name['with_request_token']._loaded_options = None
+  _globals['_ENTITYIDENTIFIER'].fields_by_name['with_request_token']._serialized_options = b'\272H\\\272\001Y\n\037with_request_token_must_be_true\022(with_request_token must be true when set\032\014this == true'
+  _globals['_ENTITYENTITLEMENTS_ACTIONSPERATTRIBUTEVALUEFQNENTRY']._loaded_options = None
+  _globals['_ENTITYENTITLEMENTS_ACTIONSPERATTRIBUTEVALUEFQNENTRY']._serialized_options = b'8\001'
+  _globals['_RESOURCE'].fields_by_name['attribute_values']._loaded_options = None
+  _globals['_RESOURCE'].fields_by_name['attribute_values']._serialized_options = b'\272H\244\001\272\001\240\001\n\031attribute_values_required\022Hif provided, resource.attribute_values must contain at least 1 valid FQN\0329this.fqns.size() > 0 && this.fqns.all(item, item.isUri())'
+  _globals['_RESOURCE'].fields_by_name['registered_resource_value_fqn']._loaded_options = None
+  _globals['_RESOURCE'].fields_by_name['registered_resource_value_fqn']._serialized_options = b'\272H\007r\005\020\001\210\001\001'
+  _globals['_GETDECISIONREQUEST'].fields_by_name['entity_identifier']._loaded_options = None
+  _globals['_GETDECISIONREQUEST'].fields_by_name['entity_identifier']._serialized_options = b'\272H\003\310\001\001'
+  _globals['_GETDECISIONREQUEST'].fields_by_name['action']._loaded_options = None
+  _globals['_GETDECISIONREQUEST'].fields_by_name['action']._serialized_options = b'\272H\003\310\001\001'
+  _globals['_GETDECISIONREQUEST'].fields_by_name['resource']._loaded_options = None
+  _globals['_GETDECISIONREQUEST'].fields_by_name['resource']._serialized_options = b'\272H\003\310\001\001'
+  _globals['_GETDECISIONREQUEST'].fields_by_name['fulfillable_obligation_fqns']._loaded_options = None
+  _globals['_GETDECISIONREQUEST'].fields_by_name['fulfillable_obligation_fqns']._serialized_options = b'\272H\232\001\272\001\226\001\n\033obligation_value_fqns_valid\022Eif provided, fulfillable_obligation_fqns must contain only valid FQNs\0320this.size() == 0 || this.all(item, item.isUri())'
+  _globals['_GETDECISIONREQUEST']._loaded_options = None
+  _globals['_GETDECISIONREQUEST']._serialized_options = b'\272Hb\032`\n)get_decision_request.action_name_required\022\034action.name must be provided\032\025has(this.action.name)'
+  _globals['_GETDECISIONMULTIRESOURCEREQUEST'].fields_by_name['entity_identifier']._loaded_options = None
+  _globals['_GETDECISIONMULTIRESOURCEREQUEST'].fields_by_name['entity_identifier']._serialized_options = b'\272H\003\310\001\001'
+  _globals['_GETDECISIONMULTIRESOURCEREQUEST'].fields_by_name['action']._loaded_options = None
+  _globals['_GETDECISIONMULTIRESOURCEREQUEST'].fields_by_name['action']._serialized_options = b'\272H\003\310\001\001'
+  _globals['_GETDECISIONMULTIRESOURCEREQUEST'].fields_by_name['resources']._loaded_options = None
+  _globals['_GETDECISIONMULTIRESOURCEREQUEST'].fields_by_name['resources']._serialized_options = b'\272H\005\222\001\002\010\001'
+  _globals['_GETDECISIONMULTIRESOURCEREQUEST'].fields_by_name['fulfillable_obligation_fqns']._loaded_options = None
+  _globals['_GETDECISIONMULTIRESOURCEREQUEST'].fields_by_name['fulfillable_obligation_fqns']._serialized_options = b'\272H\232\001\272\001\226\001\n\033obligation_value_fqns_valid\022Eif provided, fulfillable_obligation_fqns must contain only valid FQNs\0320this.size() == 0 || this.all(item, item.isUri())'
+  _globals['_GETDECISIONMULTIRESOURCEREQUEST']._loaded_options = None
+  _globals['_GETDECISIONMULTIRESOURCEREQUEST']._serialized_options = b'\272Hh\032f\n/get_decision_multi_request.action_name_required\022\034action.name must be provided\032\025has(this.action.name)'
+  _globals['_GETDECISIONBULKREQUEST'].fields_by_name['decision_requests']._loaded_options = None
+  _globals['_GETDECISIONBULKREQUEST'].fields_by_name['decision_requests']._serialized_options = b'\272H\005\222\001\002\010\001'
+  _globals['_GETENTITLEMENTSREQUEST'].fields_by_name['entity_identifier']._loaded_options = None
+  _globals['_GETENTITLEMENTSREQUEST'].fields_by_name['entity_identifier']._serialized_options = b'\272H\003\310\001\001'
+  _globals['_DECISION']._serialized_start=3838
+  _globals['_DECISION']._serialized_end=3914
+  _globals['_ENTITYIDENTIFIER']._serialized_start=163
+  _globals['_ENTITYIDENTIFIER']._serialized_end=780
+  _globals['_ENTITYENTITLEMENTS']._serialized_start=783
+  _globals['_ENTITYENTITLEMENTS']._serialized_end=1234
+  _globals['_ENTITYENTITLEMENTS_ACTIONSLIST']._serialized_start=1048
+  _globals['_ENTITYENTITLEMENTS_ACTIONSLIST']._serialized_end=1103
+  _globals['_ENTITYENTITLEMENTS_ACTIONSPERATTRIBUTEVALUEFQNENTRY']._serialized_start=1106
+  _globals['_ENTITYENTITLEMENTS_ACTIONSPERATTRIBUTEVALUEFQNENTRY']._serialized_end=1234
+  _globals['_RESOURCE']._serialized_start=1237
+  _globals['_RESOURCE']._serialized_end=1675
+  _globals['_RESOURCE_ATTRIBUTEVALUES']._serialized_start=1626
+  _globals['_RESOURCE_ATTRIBUTEVALUES']._serialized_end=1663
+  _globals['_RESOURCEDECISION']._serialized_start=1678
+  _globals['_RESOURCEDECISION']._serialized_end=1855
+  _globals['_GETDECISIONREQUEST']._serialized_start=1858
+  _globals['_GETDECISIONREQUEST']._serialized_end=2408
+  _globals['_GETDECISIONRESPONSE']._serialized_start=2410
+  _globals['_GETDECISIONRESPONSE']._serialized_end=2495
+  _globals['_GETDECISIONMULTIRESOURCEREQUEST']._serialized_start=2498
+  _globals['_GETDECISIONMULTIRESOURCEREQUEST']._serialized_end=3071
+  _globals['_GETDECISIONMULTIRESOURCERESPONSE']._serialized_start=3074
+  _globals['_GETDECISIONMULTIRESOURCERESPONSE']._serialized_end=3256
+  _globals['_GETDECISIONBULKREQUEST']._serialized_start=3259
+  _globals['_GETDECISIONBULKREQUEST']._serialized_end=3389
+  _globals['_GETDECISIONBULKRESPONSE']._serialized_start=3391
+  _globals['_GETDECISIONBULKRESPONSE']._serialized_end=3515
+  _globals['_GETENTITLEMENTSREQUEST']._serialized_start=3518
+  _globals['_GETENTITLEMENTSREQUEST']._serialized_end=3735
+  _globals['_GETENTITLEMENTSRESPONSE']._serialized_start=3737
+  _globals['_GETENTITLEMENTSRESPONSE']._serialized_end=3836
+  _globals['_AUTHORIZATIONSERVICE']._serialized_start=3917
+  _globals['_AUTHORIZATIONSERVICE']._serialized_end=4379
+# @@protoc_insertion_point(module_scope)

{otdf_python-0.11.0 → otdf_python-0.13.0}/_proto/otdf_python_proto/authorization/v2/authorization_pb2.pyi

@@ -33,7 +33,7 @@ class EntityIdentifier(_message.Message):
     def __init__(self, entity_chain: _Optional[_Union[_entity_pb2.EntityChain, _Mapping]] = ..., registered_resource_value_fqn: _Optional[str] = ..., token: _Optional[_Union[_entity_pb2.Token, _Mapping]] = ..., with_request_token: _Optional[_Union[_wrappers_pb2.BoolValue, _Mapping]] = ...) -> None: ...
 
 class EntityEntitlements(_message.Message):
-    __slots__ = ("ephemeral_id", "actions_per_attribute_value_fqn")
+    __slots__ = ("ephemeral_id", "actions_per_attribute_value_fqn", "entity_category")
     class ActionsList(_message.Message):
         __slots__ = ("actions",)
         ACTIONS_FIELD_NUMBER: _ClassVar[int]
@@ -48,9 +48,11 @@ class EntityEntitlements(_message.Message):
         def __init__(self, key: _Optional[str] = ..., value: _Optional[_Union[EntityEntitlements.ActionsList, _Mapping]] = ...) -> None: ...
     EPHEMERAL_ID_FIELD_NUMBER: _ClassVar[int]
     ACTIONS_PER_ATTRIBUTE_VALUE_FQN_FIELD_NUMBER: _ClassVar[int]
+    ENTITY_CATEGORY_FIELD_NUMBER: _ClassVar[int]
     ephemeral_id: str
     actions_per_attribute_value_fqn: _containers.MessageMap[str, EntityEntitlements.ActionsList]
-    def __init__(self, ephemeral_id: _Optional[str] = ..., actions_per_attribute_value_fqn: _Optional[_Mapping[str, EntityEntitlements.ActionsList]] = ...) -> None: ...
+    entity_category: _entity_pb2.Entity.Category
+    def __init__(self, ephemeral_id: _Optional[str] = ..., actions_per_attribute_value_fqn: _Optional[_Mapping[str, EntityEntitlements.ActionsList]] = ..., entity_category: _Optional[_Union[_entity_pb2.Entity.Category, str]] = ...) -> None: ...
 
 class Resource(_message.Message):
     __slots__ = ("ephemeral_id", "attribute_values", "registered_resource_value_fqn")

{otdf_python-0.11.0 → otdf_python-0.13.0}/_proto/otdf_python_proto/legacy_grpc/policy/attributes/attributes_pb2_grpc.py

@@ -37,6 +37,16 @@ class AttributesServiceStub(object):
                 request_serializer=policy_dot_attributes_dot_attributes__pb2.GetAttributeValuesByFqnsRequest.SerializeToString,
                 response_deserializer=policy_dot_attributes_dot_attributes__pb2.GetAttributeValuesByFqnsResponse.FromString,
                 _registered_method=True)
+        self.GetKeyMappingsByFqns = channel.unary_unary(
+                '/policy.attributes.AttributesService/GetKeyMappingsByFqns',
+                request_serializer=policy_dot_attributes_dot_attributes__pb2.GetKeyMappingsByFqnsRequest.SerializeToString,
+                response_deserializer=policy_dot_attributes_dot_attributes__pb2.GetKeyMappingsByFqnsResponse.FromString,
+                _registered_method=True)
+        self.GetEntitleableAttributesByFqns = channel.unary_unary(
+                '/policy.attributes.AttributesService/GetEntitleableAttributesByFqns',
+                request_serializer=policy_dot_attributes_dot_attributes__pb2.GetEntitleableAttributesByFqnsRequest.SerializeToString,
+                response_deserializer=policy_dot_attributes_dot_attributes__pb2.GetEntitleableAttributesByFqnsResponse.FromString,
+                _registered_method=True)
         self.CreateAttribute = channel.unary_unary(
                 '/policy.attributes.AttributesService/CreateAttribute',
                 request_serializer=policy_dot_attributes_dot_attributes__pb2.CreateAttributeRequest.SerializeToString,
@@ -144,7 +154,26 @@ class AttributesServiceServicer(object):
         raise NotImplementedError('Method not implemented!')
 
     def GetAttributeValuesByFqns(self, request, context):
-        """Missing associated documentation comment in .proto file."""
+        """Deprecated: Use GetKeyMappingsByFqns for client-side key splits and
+        GetEntitleableAttributesByFqns for server-side entitlement resolution.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def GetKeyMappingsByFqns(self, request, context):
+        """Returns only key-mapping information (rule and effective KAS keys) for the
+        requested attribute value FQNs, for client-side key split construction.
+        """
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def GetEntitleableAttributesByFqns(self, request, context):
+        """Returns only entitlement-relevant information (rule, value identity, ordered
+        definition values, subject mappings, and dynamic mappings) for the requested attribute value
+        FQNs, for server-side decisioning / entitlement resolution.
+        """
         context.set_code(grpc.StatusCode.UNIMPLEMENTED)
         context.set_details('Method not implemented!')
         raise NotImplementedError('Method not implemented!')
@@ -277,6 +306,16 @@ def add_AttributesServiceServicer_to_server(servicer, server):
                     request_deserializer=policy_dot_attributes_dot_attributes__pb2.GetAttributeValuesByFqnsRequest.FromString,
                     response_serializer=policy_dot_attributes_dot_attributes__pb2.GetAttributeValuesByFqnsResponse.SerializeToString,
             ),
+            'GetKeyMappingsByFqns': grpc.unary_unary_rpc_method_handler(
+                    servicer.GetKeyMappingsByFqns,
+                    request_deserializer=policy_dot_attributes_dot_attributes__pb2.GetKeyMappingsByFqnsRequest.FromString,
+                    response_serializer=policy_dot_attributes_dot_attributes__pb2.GetKeyMappingsByFqnsResponse.SerializeToString,
+            ),
+            'GetEntitleableAttributesByFqns': grpc.unary_unary_rpc_method_handler(
+                    servicer.GetEntitleableAttributesByFqns,
+                    request_deserializer=policy_dot_attributes_dot_attributes__pb2.GetEntitleableAttributesByFqnsRequest.FromString,
+                    response_serializer=policy_dot_attributes_dot_attributes__pb2.GetEntitleableAttributesByFqnsResponse.SerializeToString,
+            ),
             'CreateAttribute': grpc.unary_unary_rpc_method_handler(
                     servicer.CreateAttribute,
                     request_deserializer=policy_dot_attributes_dot_attributes__pb2.CreateAttributeRequest.FromString,
@@ -474,6 +513,60 @@ class AttributesService(object):
             metadata,
             _registered_method=True)
 
+    @staticmethod
+    def GetKeyMappingsByFqns(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/policy.attributes.AttributesService/GetKeyMappingsByFqns',
+            policy_dot_attributes_dot_attributes__pb2.GetKeyMappingsByFqnsRequest.SerializeToString,
+            policy_dot_attributes_dot_attributes__pb2.GetKeyMappingsByFqnsResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def GetEntitleableAttributesByFqns(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/policy.attributes.AttributesService/GetEntitleableAttributesByFqns',
+            policy_dot_attributes_dot_attributes__pb2.GetEntitleableAttributesByFqnsRequest.SerializeToString,
+            policy_dot_attributes_dot_attributes__pb2.GetEntitleableAttributesByFqnsResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
     @staticmethod
     def CreateAttribute(request,
             target,

otdf_python-0.13.0/_proto/otdf_python_proto/legacy_grpc/policy/dynamicvaluemapping/dynamic_value_mapping_pb2_grpc.py

@@ -0,0 +1,249 @@
+# Generated by the gRPC Python protocol compiler plugin. DO NOT EDIT!
+"""Client and server classes corresponding to protobuf-defined services."""
+import grpc
+
+from policy.dynamicvaluemapping import dynamic_value_mapping_pb2 as policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2
+
+
+class DynamicValueMappingServiceStub(object):
+    """Missing associated documentation comment in .proto file."""
+
+    def __init__(self, channel):
+        """Constructor.
+
+        Args:
+            channel: A grpc.Channel.
+        """
+        self.ListDynamicValueMappings = channel.unary_unary(
+                '/policy.dynamicvaluemapping.DynamicValueMappingService/ListDynamicValueMappings',
+                request_serializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.ListDynamicValueMappingsRequest.SerializeToString,
+                response_deserializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.ListDynamicValueMappingsResponse.FromString,
+                _registered_method=True)
+        self.GetDynamicValueMapping = channel.unary_unary(
+                '/policy.dynamicvaluemapping.DynamicValueMappingService/GetDynamicValueMapping',
+                request_serializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.GetDynamicValueMappingRequest.SerializeToString,
+                response_deserializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.GetDynamicValueMappingResponse.FromString,
+                _registered_method=True)
+        self.CreateDynamicValueMapping = channel.unary_unary(
+                '/policy.dynamicvaluemapping.DynamicValueMappingService/CreateDynamicValueMapping',
+                request_serializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.CreateDynamicValueMappingRequest.SerializeToString,
+                response_deserializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.CreateDynamicValueMappingResponse.FromString,
+                _registered_method=True)
+        self.UpdateDynamicValueMapping = channel.unary_unary(
+                '/policy.dynamicvaluemapping.DynamicValueMappingService/UpdateDynamicValueMapping',
+                request_serializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.UpdateDynamicValueMappingRequest.SerializeToString,
+                response_deserializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.UpdateDynamicValueMappingResponse.FromString,
+                _registered_method=True)
+        self.DeleteDynamicValueMapping = channel.unary_unary(
+                '/policy.dynamicvaluemapping.DynamicValueMappingService/DeleteDynamicValueMapping',
+                request_serializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.DeleteDynamicValueMappingRequest.SerializeToString,
+                response_deserializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.DeleteDynamicValueMappingResponse.FromString,
+                _registered_method=True)
+
+
+class DynamicValueMappingServiceServicer(object):
+    """Missing associated documentation comment in .proto file."""
+
+    def ListDynamicValueMappings(self, request, context):
+        """Missing associated documentation comment in .proto file."""
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def GetDynamicValueMapping(self, request, context):
+        """Missing associated documentation comment in .proto file."""
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def CreateDynamicValueMapping(self, request, context):
+        """Missing associated documentation comment in .proto file."""
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def UpdateDynamicValueMapping(self, request, context):
+        """Missing associated documentation comment in .proto file."""
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+    def DeleteDynamicValueMapping(self, request, context):
+        """Missing associated documentation comment in .proto file."""
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
+
+def add_DynamicValueMappingServiceServicer_to_server(servicer, server):
+    rpc_method_handlers = {
+            'ListDynamicValueMappings': grpc.unary_unary_rpc_method_handler(
+                    servicer.ListDynamicValueMappings,
+                    request_deserializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.ListDynamicValueMappingsRequest.FromString,
+                    response_serializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.ListDynamicValueMappingsResponse.SerializeToString,
+            ),
+            'GetDynamicValueMapping': grpc.unary_unary_rpc_method_handler(
+                    servicer.GetDynamicValueMapping,
+                    request_deserializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.GetDynamicValueMappingRequest.FromString,
+                    response_serializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.GetDynamicValueMappingResponse.SerializeToString,
+            ),
+            'CreateDynamicValueMapping': grpc.unary_unary_rpc_method_handler(
+                    servicer.CreateDynamicValueMapping,
+                    request_deserializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.CreateDynamicValueMappingRequest.FromString,
+                    response_serializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.CreateDynamicValueMappingResponse.SerializeToString,
+            ),
+            'UpdateDynamicValueMapping': grpc.unary_unary_rpc_method_handler(
+                    servicer.UpdateDynamicValueMapping,
+                    request_deserializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.UpdateDynamicValueMappingRequest.FromString,
+                    response_serializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.UpdateDynamicValueMappingResponse.SerializeToString,
+            ),
+            'DeleteDynamicValueMapping': grpc.unary_unary_rpc_method_handler(
+                    servicer.DeleteDynamicValueMapping,
+                    request_deserializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.DeleteDynamicValueMappingRequest.FromString,
+                    response_serializer=policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.DeleteDynamicValueMappingResponse.SerializeToString,
+            ),
+    }
+    generic_handler = grpc.method_handlers_generic_handler(
+            'policy.dynamicvaluemapping.DynamicValueMappingService', rpc_method_handlers)
+    server.add_generic_rpc_handlers((generic_handler,))
+    server.add_registered_method_handlers('policy.dynamicvaluemapping.DynamicValueMappingService', rpc_method_handlers)
+
+
+ # This class is part of an EXPERIMENTAL API.
+class DynamicValueMappingService(object):
+    """Missing associated documentation comment in .proto file."""
+
+    @staticmethod
+    def ListDynamicValueMappings(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/policy.dynamicvaluemapping.DynamicValueMappingService/ListDynamicValueMappings',
+            policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.ListDynamicValueMappingsRequest.SerializeToString,
+            policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.ListDynamicValueMappingsResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def GetDynamicValueMapping(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/policy.dynamicvaluemapping.DynamicValueMappingService/GetDynamicValueMapping',
+            policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.GetDynamicValueMappingRequest.SerializeToString,
+            policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.GetDynamicValueMappingResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def CreateDynamicValueMapping(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/policy.dynamicvaluemapping.DynamicValueMappingService/CreateDynamicValueMapping',
+            policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.CreateDynamicValueMappingRequest.SerializeToString,
+            policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.CreateDynamicValueMappingResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def UpdateDynamicValueMapping(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/policy.dynamicvaluemapping.DynamicValueMappingService/UpdateDynamicValueMapping',
+            policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.UpdateDynamicValueMappingRequest.SerializeToString,
+            policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.UpdateDynamicValueMappingResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
+    @staticmethod
+    def DeleteDynamicValueMapping(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/policy.dynamicvaluemapping.DynamicValueMappingService/DeleteDynamicValueMapping',
+            policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.DeleteDynamicValueMappingRequest.SerializeToString,
+            policy_dot_dynamicvaluemapping_dot_dynamic__value__mapping__pb2.DeleteDynamicValueMappingResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)

{otdf_python-0.11.0 → otdf_python-0.13.0}/_proto/otdf_python_proto/legacy_grpc/policy/unsafe/unsafe_pb2_grpc.py

@@ -62,6 +62,11 @@ class UnsafeServiceStub(object):
                 request_serializer=policy_dot_unsafe_dot_unsafe__pb2.UnsafeDeleteAttributeValueRequest.SerializeToString,
                 response_deserializer=policy_dot_unsafe_dot_unsafe__pb2.UnsafeDeleteAttributeValueResponse.FromString,
                 _registered_method=True)
+        self.UnsafeUpdateKey = channel.unary_unary(
+                '/policy.unsafe.UnsafeService/UnsafeUpdateKey',
+                request_serializer=policy_dot_unsafe_dot_unsafe__pb2.UnsafeUpdateKeyRequest.SerializeToString,
+                response_deserializer=policy_dot_unsafe_dot_unsafe__pb2.UnsafeUpdateKeyResponse.FromString,
+                _registered_method=True)
         self.UnsafeDeleteKasKey = channel.unary_unary(
                 '/policy.unsafe.UnsafeService/UnsafeDeleteKasKey',
                 request_serializer=policy_dot_unsafe_dot_unsafe__pb2.UnsafeDeleteKasKeyRequest.SerializeToString,
@@ -138,7 +143,7 @@ class UnsafeServiceServicer(object):
         context.set_details('Method not implemented!')
         raise NotImplementedError('Method not implemented!')
 
-    def UnsafeDeleteKasKey(self, request, context):
+    def UnsafeUpdateKey(self, request, context):
         """--------------------------------------*
         Kas Key RPCs
         ---------------------------------------
@@ -147,6 +152,12 @@ class UnsafeServiceServicer(object):
         context.set_details('Method not implemented!')
         raise NotImplementedError('Method not implemented!')
 
+    def UnsafeDeleteKasKey(self, request, context):
+        """Missing associated documentation comment in .proto file."""
+        context.set_code(grpc.StatusCode.UNIMPLEMENTED)
+        context.set_details('Method not implemented!')
+        raise NotImplementedError('Method not implemented!')
+
 
 def add_UnsafeServiceServicer_to_server(servicer, server):
     rpc_method_handlers = {
@@ -195,6 +206,11 @@ def add_UnsafeServiceServicer_to_server(servicer, server):
                     request_deserializer=policy_dot_unsafe_dot_unsafe__pb2.UnsafeDeleteAttributeValueRequest.FromString,
                     response_serializer=policy_dot_unsafe_dot_unsafe__pb2.UnsafeDeleteAttributeValueResponse.SerializeToString,
             ),
+            'UnsafeUpdateKey': grpc.unary_unary_rpc_method_handler(
+                    servicer.UnsafeUpdateKey,
+                    request_deserializer=policy_dot_unsafe_dot_unsafe__pb2.UnsafeUpdateKeyRequest.FromString,
+                    response_serializer=policy_dot_unsafe_dot_unsafe__pb2.UnsafeUpdateKeyResponse.SerializeToString,
+            ),
             'UnsafeDeleteKasKey': grpc.unary_unary_rpc_method_handler(
                     servicer.UnsafeDeleteKasKey,
                     request_deserializer=policy_dot_unsafe_dot_unsafe__pb2.UnsafeDeleteKasKeyRequest.FromString,
@@ -457,6 +473,33 @@ class UnsafeService(object):
             metadata,
             _registered_method=True)
 
+    @staticmethod
+    def UnsafeUpdateKey(request,
+            target,
+            options=(),
+            channel_credentials=None,
+            call_credentials=None,
+            insecure=False,
+            compression=None,
+            wait_for_ready=None,
+            timeout=None,
+            metadata=None):
+        return grpc.experimental.unary_unary(
+            request,
+            target,
+            '/policy.unsafe.UnsafeService/UnsafeUpdateKey',
+            policy_dot_unsafe_dot_unsafe__pb2.UnsafeUpdateKeyRequest.SerializeToString,
+            policy_dot_unsafe_dot_unsafe__pb2.UnsafeUpdateKeyResponse.FromString,
+            options,
+            channel_credentials,
+            insecure,
+            call_credentials,
+            compression,
+            wait_for_ready,
+            timeout,
+            metadata,
+            _registered_method=True)
+
     @staticmethod
     def UnsafeDeleteKasKey(request,
             target,