raes 0.25.0__py3-none-any.whl

aces/__init__.py

@@ -0,0 +1,11 @@
+"""Backward-compatible ACES namespace."""
+
+from aces._compat import package_version
+
+# Derived from the installed distribution metadata. The version source of truth
+# is `[project] version` in pyproject.toml, bumped by release-please (#684). The
+# not-installed fallback is the honest PEP 440 sentinel `0.0.0+unknown`
+# (GOV-901): an uninstalled namespace must not imply a real released version.
+__version__ = package_version("raes", default="0.0.0+unknown")
+
+__all__ = ["__version__"]

aces/_compat.py

@@ -0,0 +1,42 @@
+"""Helpers for transitional ``aces.*`` compatibility modules."""
+
+from __future__ import annotations
+
+from importlib import import_module
+from importlib.metadata import PackageNotFoundError, version
+from typing import Any
+
+
+def package_version(distribution: str, default: str) -> str:
+    """Return an installed package version with a local fallback."""
+
+    try:
+        return version(distribution)
+    except PackageNotFoundError:
+        return default
+
+
+def reexport(namespace: dict[str, Any], target: str) -> None:
+    """Populate ``namespace`` with the symbols from ``target``."""
+
+    module = import_module(target)
+
+    for name, value in module.__dict__.items():
+        if name in {
+            "__builtins__",
+            "__cached__",
+            "__file__",
+            "__loader__",
+            "__name__",
+            "__package__",
+            "__path__",
+            "__spec__",
+        }:
+            continue
+        namespace[name] = value
+
+    namespace["__doc__"] = module.__doc__
+    namespace["__target_module__"] = target
+    namespace["__all__"] = list(
+        getattr(module, "__all__", [name for name in module.__dict__ if not name.startswith("_")])
+    )

aces/backends/__init__.py

@@ -0,0 +1 @@
+"""Compatibility package for backend helpers."""

aces/backends/stubs.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_backend_stubs.stubs")
+
+del _reexport

aces/cli/__init__.py

@@ -0,0 +1 @@
+"""Compatibility package for CLI entry points."""

aces/cli/main.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_cli.main")
+
+del _reexport

aces/cli/sdl.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_cli.sdl")
+
+del _reexport

aces/core/__init__.py

@@ -0,0 +1 @@
+"""Compatibility package for core ACES modules."""

aces/core/runtime/__init__.py

@@ -0,0 +1 @@
+"""Backward-compatible runtime namespace."""

aces/core/runtime/capabilities.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_backend_protocols.capabilities")
+
+del _reexport

aces/core/runtime/compiler.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_processor.compiler")
+
+del _reexport

aces/core/runtime/conformance.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_conformance.conformance")
+
+del _reexport

aces/core/runtime/contracts.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_contracts.contracts")
+
+del _reexport

aces/core/runtime/control_plane.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_runtime.control_plane")
+
+del _reexport

aces/core/runtime/control_plane_api.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_runtime.control_plane_api")
+
+del _reexport

aces/core/runtime/control_plane_security.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_runtime.control_plane_security")
+
+del _reexport

aces/core/runtime/control_plane_store.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_runtime.control_plane_store")
+
+del _reexport

aces/core/runtime/manager.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_runtime.manager")
+
+del _reexport

aces/core/runtime/models.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_processor.models")
+
+del _reexport

aces/core/runtime/planner.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_processor.planner")
+
+del _reexport

aces/core/runtime/protocols.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_backend_protocols.protocols")
+
+del _reexport

aces/core/runtime/registry.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_runtime.registry")
+
+del _reexport

aces/core/scenarios.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.scenarios")
+
+del _reexport

aces/core/sdl/__init__.py

@@ -0,0 +1,7 @@
+"""Backward-compatible SDL namespace."""
+
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl")
+
+del _reexport

aces/core/sdl/_base.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl._base")
+
+del _reexport

aces/core/sdl/_errors.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl._errors")
+
+del _reexport

aces/core/sdl/_source.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl._source")
+
+del _reexport

aces/core/sdl/accounts.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.accounts")
+
+del _reexport

aces/core/sdl/agents.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.agents")
+
+del _reexport

aces/core/sdl/composition.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.composition")
+
+del _reexport

aces/core/sdl/conditions.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.conditions")
+
+del _reexport

aces/core/sdl/content.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.content")
+
+del _reexport

aces/core/sdl/entities.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.entities")
+
+del _reexport

aces/core/sdl/features.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.features")
+
+del _reexport

aces/core/sdl/infrastructure.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.infrastructure")
+
+del _reexport

aces/core/sdl/instantiate.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.instantiate")
+
+del _reexport

aces/core/sdl/module_registry.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.module_registry")
+
+del _reexport

aces/core/sdl/nodes.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.nodes")
+
+del _reexport

aces/core/sdl/objectives.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.objectives")
+
+del _reexport

aces/core/sdl/orchestration.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.orchestration")
+
+del _reexport

aces/core/sdl/parser.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.parser")
+
+del _reexport

aces/core/sdl/relationships.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.relationships")
+
+del _reexport

aces/core/sdl/scenario.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.scenario")
+
+del _reexport

aces/core/sdl/validator.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.validator")
+
+del _reexport

aces/core/sdl/variables.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.variables")
+
+del _reexport

aces/core/sdl/vulnerabilities.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.vulnerabilities")
+
+del _reexport

aces/core/semantics/__init__.py

@@ -0,0 +1 @@
+"""Backward-compatible semantics namespace."""

aces/core/semantics/assessment.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.semantics.assessment")
+
+del _reexport

aces/core/semantics/objective_semantics.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.semantics.objective_semantics")
+
+del _reexport

aces/core/semantics/objectives.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.semantics.objectives")
+
+del _reexport

aces/core/semantics/planner.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_processor.semantics.planner")
+
+del _reexport

aces/core/semantics/workflow.py

@@ -0,0 +1,5 @@
+from aces._compat import reexport as _reexport
+
+_reexport(globals(), "aces_sdl.semantics.workflow")
+
+del _reexport

aces_backend_libvirt/__init__.py

@@ -0,0 +1,25 @@
+"""Libvirt/QEMU provisioning backend for ACES SDL."""
+
+from __future__ import annotations
+
+from .manifest import LIBVIRT_BACKEND_NAME, create_libvirt_manifest
+from .participant_domain import DeterministicParticipantDomainAdapter, LibvirtParticipantDomainAdapter
+from .participant_runtime import LibvirtParticipantRuntime
+from .provisioner import LibvirtProvisioner, apply, validate
+from .target import create_libvirt_components, create_libvirt_target, register_libvirt_backend
+from .techvault_native import TechVaultNativeLibvirtDriver
+
+__all__ = [
+    "LIBVIRT_BACKEND_NAME",
+    "DeterministicParticipantDomainAdapter",
+    "LibvirtParticipantDomainAdapter",
+    "LibvirtParticipantRuntime",
+    "LibvirtProvisioner",
+    "TechVaultNativeLibvirtDriver",
+    "apply",
+    "create_libvirt_components",
+    "create_libvirt_manifest",
+    "create_libvirt_target",
+    "register_libvirt_backend",
+    "validate",
+]

aces_backend_libvirt/_payload.py

@@ -0,0 +1,54 @@
+"""Shared accessors over ACES provisioning-plan resource payloads.
+
+The low-level, package-internal layer both :mod:`realization` (interpretation)
+and :mod:`capability_envelope` (capability-envelope diagnostics) build on, so the
+two never duplicate — or diverge on — how a plan payload's node type, OS family,
+content type, or spec is read.
+"""
+
+from __future__ import annotations
+
+from collections.abc import Mapping
+
+NODE_RESOURCE_TYPE = "node"
+NETWORK_RESOURCE_TYPE = "network"
+ACCOUNT_PLACEMENT_RESOURCE_TYPE = "account-placement"
+CONTENT_PLACEMENT_RESOURCE_TYPE = "content-placement"
+DOMAIN_CONTROLLER_PLACEMENT_RESOURCE_TYPE = "domain-controller-placement"
+FEATURE_BINDING_RESOURCE_TYPE = "feature-binding"
+PLACEMENT_RESOURCE_TYPES = frozenset(
+    {
+        ACCOUNT_PLACEMENT_RESOURCE_TYPE,
+        CONTENT_PLACEMENT_RESOURCE_TYPE,
+        DOMAIN_CONTROLLER_PLACEMENT_RESOURCE_TYPE,
+        FEATURE_BINDING_RESOURCE_TYPE,
+    }
+)
+SUPPORTED_RESOURCE_TYPES = frozenset({NODE_RESOURCE_TYPE, NETWORK_RESOURCE_TYPE}) | PLACEMENT_RESOURCE_TYPES
+
+
+def _spec(payload: Mapping[str, object]) -> Mapping[str, object]:
+    spec = payload.get("spec")
+    return spec if isinstance(spec, Mapping) else {}
+
+
+def _str(value: object) -> str:
+    return value if isinstance(value, str) else ""
+
+
+def _os_family(payload: Mapping[str, object]) -> str:
+    family = payload.get("os_family")
+    if isinstance(family, str) and family:
+        return family
+    node = _spec(payload).get("node")
+    node_os = node.get("os") if isinstance(node, Mapping) else None
+    return node_os if isinstance(node_os, str) else ""
+
+
+def _node_type(payload: Mapping[str, object]) -> str:
+    node_type = payload.get("node_type")
+    if isinstance(node_type, str) and node_type:
+        return node_type
+    node = _spec(payload).get("node")
+    nested = node.get("type") if isinstance(node, Mapping) else None
+    return nested if isinstance(nested, str) else ""

aces_backend_libvirt/_techvault_native_helpers.py

@@ -0,0 +1,28 @@
+"""Small self-contained helpers for the native TechVault libvirt drivers."""
+
+from __future__ import annotations
+
+import os
+from pathlib import Path
+
+
+def default_connector(connection_uri: str) -> object | None:
+    """Open a real libvirt connection lazily (imports libvirt on demand)."""
+
+    import importlib
+
+    libvirt = importlib.import_module("libvirt")
+    return libvirt.open(connection_uri)
+
+
+def default_kernel_path() -> Path:
+    """Return a host kernel image path suitable for booting a generated appliance."""
+
+    running = Path(f"/boot/vmlinuz-{os.uname().release}")
+    if running.exists():
+        return running
+    candidates = sorted(Path("/boot").glob("vmlinuz-*"))
+    return candidates[-1] if candidates else Path("/boot/vmlinuz")
+
+
+__all__ = ["default_connector", "default_kernel_path"]

aces_backend_libvirt/_techvault_native_ops.py

@@ -0,0 +1,77 @@
+"""Diagnostic codes and low-level native-object helpers for the TechVault driver.
+
+Holds the shared diagnostic-code constants, the native-resource protocol, and the
+thin libvirt-call/name-availability/artifact-token/diagnostic helpers used by the
+native TechVault driver and its teardown paths. Split from
+:mod:`aces_backend_libvirt.techvault_native` to keep that module under the ADR-015
+source-size cap; the driver re-imports these names so existing call sites and the
+guest-certified subclass's ``_artifact_token`` import stay stable.
+"""
+
+from __future__ import annotations
+
+from collections.abc import Callable
+from typing import Protocol, cast
+
+from aces_contracts.diagnostics import Diagnostic, Severity
+
+from .drivers.libvirt import _aces_uuid, _error_code, _existing_uuid
+from .techvault_lifecycle import (
+    NativeOwnershipConflict as _OwnershipConflict,
+)
+
+_DOMAIN = "runtime"
+_CODE_OPERATION_FAILED = "libvirt-backend.techvault-native.operation-failed"
+_CODE_OWNERSHIP_CONFLICT = "libvirt-backend.techvault-native.ownership-conflict"
+_CODE_READBACK_FAILED = "libvirt-backend.techvault-native.readback-failed"
+_CODE_RESIDUAL_STATE = "libvirt-backend.techvault-native.residual-state"
+_CODE_UNAVAILABLE = "libvirt-backend.techvault-native.unavailable"
+_DEFAULT_CONNECTION_URI = "qemu:///system"
+
+
+class _NativeResource(Protocol):
+    def create(self) -> None: ...
+
+    def destroy(self) -> None: ...
+
+    def undefine(self) -> None: ...
+
+
+def _call(connection: object, method_name: str, payload: str) -> _NativeResource:
+    method = cast(Callable[[str], _NativeResource], getattr(connection, method_name))
+    return method(payload)
+
+
+def _ensure_name_available(connection: object, method_name: str, name: str, address: str) -> None:
+    method = getattr(connection, method_name, None)
+    if not callable(method):
+        raise RuntimeError("native lookup is unavailable")
+    try:
+        native = method(name)
+    except KeyError:
+        return
+    except Exception as exc:
+        if _error_code(exc) in {42, 43}:
+            return
+        raise
+    if _existing_uuid(native) != _aces_uuid(address):
+        raise _OwnershipConflict(address)
+    raise RuntimeError("owned native object already exists for CREATE")
+
+
+def _artifact_token(address: str) -> str:
+    return _aces_uuid(address).replace("-", "")
+
+
+_MESSAGES = {
+    _CODE_UNAVAILABLE: "Libvirt connection is unavailable for native TechVault realization.",
+    _CODE_RESIDUAL_STATE: "TechVault rollback could not verify cleanup for '{address}'; residual state may remain.",
+    _CODE_OWNERSHIP_CONFLICT: "Native object for '{address}' is not owned by that ACES address; refusing mutation.",
+    _CODE_READBACK_FAILED: "Native libvirt TechVault readback for '{address}' did not succeed.",
+}
+_DEFAULT_MESSAGE = "Native libvirt TechVault operation for '{address}' did not succeed."
+
+
+def _diagnostic(code: str, address: str) -> Diagnostic:
+    message = _MESSAGES.get(code, _DEFAULT_MESSAGE).format(address=address)
+    return Diagnostic(code=code, domain=_DOMAIN, address=address, message=message, severity=Severity.ERROR)