ssot-core 0.2.18.dev9__tar.gz → 0.2.19.dev1__tar.gz

{ssot_core-0.2.18.dev9 → ssot_core-0.2.19.dev1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ssot-core
-Version: 0.2.18.dev9
+Version: 0.2.19.dev1
 Summary: Core Python runtime, registry model, validation, and release workflow APIs for SSOT.
 Author-email: Jacob Stewart <jacob@swarmauri.com>
 License-Expression: Apache-2.0
@@ -36,9 +36,9 @@ Classifier: Topic :: Utilities
 Requires-Python: <3.15,>=3.10
 Description-Content-Type: text/markdown
 Requires-Dist: orjson<4.0,>=3.10
-Requires-Dist: ssot-contracts==0.2.18.dev9
-Requires-Dist: ssot-pack-contracts<0.3.0,>=0.2.17
-Requires-Dist: ssot-views==0.2.18.dev9
+Requires-Dist: ssot-contracts==0.2.19.dev1
+Requires-Dist: ssot-pack-contracts<0.3.0,>=0.2.20.dev1
+Requires-Dist: ssot-views==0.2.19.dev1
 Requires-Dist: tomli>=2.0.1; python_version < "3.11"
 
 <div align="center">
@@ -52,8 +52,8 @@ Requires-Dist: tomli>=2.0.1; python_version < "3.11"
   <a href="https://pepy.tech/project/ssot-core"><img src="https://static.pepy.tech/badge/ssot-core" alt="Downloads" /></a>
   <a href="https://hits.sh/github.com/groupsum/ssot-registry/"><img src="https://hits.sh/github.com/groupsum/ssot-registry.svg?style=flat-square" alt="Hits" /></a>
 <!-- ssot-schema-badges:start -->
-  <img src="https://img.shields.io/badge/schema_version-0.5.0-blue" alt="schema_version 0.5.0" />
-  <img src="https://img.shields.io/badge/migration%20coverage-12%2F12-brightgreen" alt="Migration coverage 12/12" />
+  <img src="https://img.shields.io/badge/schema_version-0.7.0-blue" alt="schema_version 0.7.0" />
+  <img src="https://img.shields.io/badge/migration%20coverage-14%2F14-brightgreen" alt="Migration coverage 14/14" />
 <!-- ssot-schema-badges:end -->
 </div>
 

{ssot_core-0.2.18.dev9 → ssot_core-0.2.19.dev1}/README.md

@@ -9,8 +9,8 @@
   <a href="https://pepy.tech/project/ssot-core"><img src="https://static.pepy.tech/badge/ssot-core" alt="Downloads" /></a>
   <a href="https://hits.sh/github.com/groupsum/ssot-registry/"><img src="https://hits.sh/github.com/groupsum/ssot-registry.svg?style=flat-square" alt="Hits" /></a>
 <!-- ssot-schema-badges:start -->
-  <img src="https://img.shields.io/badge/schema_version-0.5.0-blue" alt="schema_version 0.5.0" />
-  <img src="https://img.shields.io/badge/migration%20coverage-12%2F12-brightgreen" alt="Migration coverage 12/12" />
+  <img src="https://img.shields.io/badge/schema_version-0.7.0-blue" alt="schema_version 0.7.0" />
+  <img src="https://img.shields.io/badge/migration%20coverage-14%2F14-brightgreen" alt="Migration coverage 14/14" />
 <!-- ssot-schema-badges:end -->
 </div>
 

{ssot_core-0.2.18.dev9 → ssot_core-0.2.19.dev1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "ssot-core"
-version = "0.2.18.dev9"
+version = "0.2.19.dev1"
 description = "Core Python runtime, registry model, validation, and release workflow APIs for SSOT."
 readme = "README.md"
 requires-python = ">=3.10,<3.15"
@@ -12,9 +12,9 @@ license = "Apache-2.0"
 authors = [{ name = "Jacob Stewart", email = "jacob@swarmauri.com" }]
 dependencies = [
   "orjson>=3.10,<4.0",
-  "ssot-contracts==0.2.18.dev9",
-  "ssot-pack-contracts>=0.2.17,<0.3.0",
-  "ssot-views==0.2.18.dev9",
+  "ssot-contracts==0.2.19.dev1",
+  "ssot-pack-contracts>=0.2.20.dev1,<0.3.0",
+  "ssot-views==0.2.19.dev1",
   "tomli>=2.0.1; python_version < '3.11'",
 ]
 keywords = ["ssot", "core", "registry", "validation", "release-management", "governance", "compliance"]

{ssot_core-0.2.18.dev9 → ssot_core-0.2.19.dev1}/src/ssot_core.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ssot-core
-Version: 0.2.18.dev9
+Version: 0.2.19.dev1
 Summary: Core Python runtime, registry model, validation, and release workflow APIs for SSOT.
 Author-email: Jacob Stewart <jacob@swarmauri.com>
 License-Expression: Apache-2.0
@@ -36,9 +36,9 @@ Classifier: Topic :: Utilities
 Requires-Python: <3.15,>=3.10
 Description-Content-Type: text/markdown
 Requires-Dist: orjson<4.0,>=3.10
-Requires-Dist: ssot-contracts==0.2.18.dev9
-Requires-Dist: ssot-pack-contracts<0.3.0,>=0.2.17
-Requires-Dist: ssot-views==0.2.18.dev9
+Requires-Dist: ssot-contracts==0.2.19.dev1
+Requires-Dist: ssot-pack-contracts<0.3.0,>=0.2.20.dev1
+Requires-Dist: ssot-views==0.2.19.dev1
 Requires-Dist: tomli>=2.0.1; python_version < "3.11"
 
 <div align="center">
@@ -52,8 +52,8 @@ Requires-Dist: tomli>=2.0.1; python_version < "3.11"
   <a href="https://pepy.tech/project/ssot-core"><img src="https://static.pepy.tech/badge/ssot-core" alt="Downloads" /></a>
   <a href="https://hits.sh/github.com/groupsum/ssot-registry/"><img src="https://hits.sh/github.com/groupsum/ssot-registry.svg?style=flat-square" alt="Hits" /></a>
 <!-- ssot-schema-badges:start -->
-  <img src="https://img.shields.io/badge/schema_version-0.5.0-blue" alt="schema_version 0.5.0" />
-  <img src="https://img.shields.io/badge/migration%20coverage-12%2F12-brightgreen" alt="Migration coverage 12/12" />
+  <img src="https://img.shields.io/badge/schema_version-0.7.0-blue" alt="schema_version 0.7.0" />
+  <img src="https://img.shields.io/badge/migration%20coverage-14%2F14-brightgreen" alt="Migration coverage 14/14" />
 <!-- ssot-schema-badges:end -->
 </div>
 

{ssot_core-0.2.18.dev9 → ssot_core-0.2.19.dev1}/src/ssot_core.egg-info/SOURCES.txt

@@ -8,6 +8,9 @@ src/ssot_core.egg-info/top_level.txt
 src/ssot_registry/__init__.py
 src/ssot_registry/__main__.py
 src/ssot_registry/version.py
+src/ssot_registry/acl/__init__.py
+src/ssot_registry/acl/policy.py
+src/ssot_registry/acl/wrapper.py
 src/ssot_registry/api/__init__.py
 src/ssot_registry/api/boundary.py
 src/ssot_registry/api/claims.py
@@ -51,6 +54,14 @@ src/ssot_registry/cli/spec_cmd.py
 src/ssot_registry/cli/test_cmd.py
 src/ssot_registry/cli/upgrade_cmd.py
 src/ssot_registry/cli/validate_cmd.py
+src/ssot_registry/control/__init__.py
+src/ssot_registry/control/events.py
+src/ssot_registry/control/models.py
+src/ssot_registry/control/paths.py
+src/ssot_registry/control/scaffold.py
+src/ssot_registry/control/service.py
+src/ssot_registry/control/sqlite_store.py
+src/ssot_registry/control/sse.py
 src/ssot_registry/graph/__init__.py
 src/ssot_registry/graph/export_dot.py
 src/ssot_registry/graph/export_json.py
@@ -58,6 +69,7 @@ src/ssot_registry/guards/__init__.py
 src/ssot_registry/guards/certification.py
 src/ssot_registry/guards/claim_closure.py
 src/ssot_registry/guards/claim_tier_gates.py
+src/ssot_registry/guards/completion.py
 src/ssot_registry/guards/document_lifecycle.py
 src/ssot_registry/guards/document_supersession.py
 src/ssot_registry/guards/feature_claims.py
@@ -66,6 +78,8 @@ src/ssot_registry/guards/lifecycle.py
 src/ssot_registry/guards/profile_requirements.py
 src/ssot_registry/guards/promotion.py
 src/ssot_registry/guards/publication.py
+src/ssot_registry/maturation/__init__.py
+src/ssot_registry/maturation/selector.py
 src/ssot_registry/model/__init__.py
 src/ssot_registry/model/boundary.py
 src/ssot_registry/model/claim.py
@@ -108,6 +122,7 @@ src/ssot_registry/validators/bounds.py
 src/ssot_registry/validators/claim_lineage.py
 src/ssot_registry/validators/coverage.py
 src/ssot_registry/validators/documents.py
+src/ssot_registry/validators/feature_parent_links.py
 src/ssot_registry/validators/filesystem.py
 src/ssot_registry/validators/identity.py
 src/ssot_registry/validators/lifecycle.py
@@ -116,4 +131,7 @@ src/ssot_registry/validators/promotion.py
 src/ssot_registry/validators/references.py
 src/ssot_registry/validators/reservations.py
 src/ssot_registry/validators/structure.py
-src/ssot_registry/validators/tiers.py
+src/ssot_registry/validators/tiers.py
+src/ssot_registry/watch/__init__.py
+src/ssot_registry/watch/git_status.py
+src/ssot_registry/watch/observer.py

ssot_core-0.2.19.dev1/src/ssot_core.egg-info/requires.txt

@@ -0,0 +1,7 @@
+orjson<4.0,>=3.10
+ssot-contracts==0.2.19.dev1
+ssot-pack-contracts<0.3.0,>=0.2.20.dev1
+ssot-views==0.2.19.dev1
+
+[:python_version < "3.11"]
+tomli>=2.0.1

ssot_core-0.2.19.dev1/src/ssot_registry/acl/__init__.py

@@ -0,0 +1,5 @@
+from __future__ import annotations
+
+from .policy import AclCommand, AclPolicy, LinuxAclAdapter, WindowsAclAdapter
+
+__all__ = ["AclCommand", "AclPolicy", "LinuxAclAdapter", "WindowsAclAdapter"]

ssot_core-0.2.19.dev1/src/ssot_registry/acl/policy.py

@@ -0,0 +1,92 @@
+from __future__ import annotations
+
+import platform
+import subprocess
+from dataclasses import dataclass
+from pathlib import Path
+from typing import Protocol
+
+from ssot_registry.control.paths import ensure_allowed_path, repo_relative_path
+
+
+@dataclass(frozen=True)
+class AclCommand:
+    argv: tuple[str, ...]
+    path: str
+    action: str
+    worker_user: str
+
+
+class AclAdapter(Protocol):
+    def grant_commands(self, repo_root: Path, worker_user: str, paths: list[str]) -> list[AclCommand]: ...
+
+    def revoke_commands(self, repo_root: Path, worker_user: str, paths: list[str]) -> list[AclCommand]: ...
+
+
+class AclPolicy:
+    def __init__(self, repo_root: str | Path, adapter: AclAdapter | None = None) -> None:
+        self.repo_root = Path(repo_root)
+        self.adapter = adapter or default_acl_adapter()
+
+    def normalize_roots(self, paths: list[str | Path]) -> list[str]:
+        return [ensure_allowed_path(repo_relative_path(self.repo_root, path)) for path in paths]
+
+    def grant_commands(self, worker_user: str, paths: list[str | Path]) -> list[AclCommand]:
+        return self.adapter.grant_commands(self.repo_root, worker_user, self.normalize_roots(paths))
+
+    def revoke_commands(self, worker_user: str, paths: list[str | Path]) -> list[AclCommand]:
+        return self.adapter.revoke_commands(self.repo_root, worker_user, self.normalize_roots(paths))
+
+    def apply(self, commands: list[AclCommand]) -> None:
+        for command in commands:
+            subprocess.run(command.argv, check=True)
+
+    def grant(self, worker_user: str, paths: list[str | Path]) -> list[AclCommand]:
+        commands = self.grant_commands(worker_user, paths)
+        self.apply(commands)
+        return commands
+
+    def revoke(self, worker_user: str, paths: list[str | Path]) -> list[AclCommand]:
+        commands = self.revoke_commands(worker_user, paths)
+        self.apply(commands)
+        return commands
+
+
+class LinuxAclAdapter:
+    def grant_commands(self, repo_root: Path, worker_user: str, paths: list[str]) -> list[AclCommand]:
+        commands: list[AclCommand] = []
+        for path in paths:
+            absolute = str(repo_root / path)
+            commands.append(AclCommand(("setfacl", "-R", "-m", f"u:{worker_user}:rwX", absolute), path, "grant", worker_user))
+            commands.append(AclCommand(("setfacl", "-R", "-d", "-m", f"u:{worker_user}:rwX", absolute), path, "grant-default", worker_user))
+        return commands
+
+    def revoke_commands(self, repo_root: Path, worker_user: str, paths: list[str]) -> list[AclCommand]:
+        commands: list[AclCommand] = []
+        for path in paths:
+            absolute = str(repo_root / path)
+            commands.append(AclCommand(("setfacl", "-R", "-x", f"u:{worker_user}", absolute), path, "revoke", worker_user))
+            commands.append(AclCommand(("setfacl", "-R", "-d", "-x", f"u:{worker_user}", absolute), path, "revoke-default", worker_user))
+        return commands
+
+
+class WindowsAclAdapter:
+    def grant_commands(self, repo_root: Path, worker_user: str, paths: list[str]) -> list[AclCommand]:
+        commands: list[AclCommand] = []
+        for path in paths:
+            absolute = str(repo_root / path)
+            commands.append(AclCommand(("icacls", absolute, "/grant", f"{worker_user}:(OI)(CI)(M)"), path, "grant", worker_user))
+        return commands
+
+    def revoke_commands(self, repo_root: Path, worker_user: str, paths: list[str]) -> list[AclCommand]:
+        commands: list[AclCommand] = []
+        for path in paths:
+            absolute = str(repo_root / path)
+            commands.append(AclCommand(("icacls", absolute, "/remove", worker_user), path, "revoke", worker_user))
+        return commands
+
+
+def default_acl_adapter() -> AclAdapter:
+    if platform.system().lower().startswith("win"):
+        return WindowsAclAdapter()
+    return LinuxAclAdapter()

ssot_core-0.2.19.dev1/src/ssot_registry/acl/wrapper.py

@@ -0,0 +1,36 @@
+from __future__ import annotations
+
+import argparse
+from pathlib import Path
+
+from .policy import AclPolicy
+
+
+def build_parser() -> argparse.ArgumentParser:
+    parser = argparse.ArgumentParser(description="Narrow ACL helper for SSOT path lease grants and revocations.")
+    parser.add_argument("action", choices=["grant", "revoke"])
+    parser.add_argument("repo_root")
+    parser.add_argument("worker_user")
+    parser.add_argument("paths", nargs="+")
+    parser.add_argument("--dry-run", action="store_true")
+    return parser
+
+
+def main(argv: list[str] | None = None) -> int:
+    args = build_parser().parse_args(argv)
+    policy = AclPolicy(Path(args.repo_root))
+    commands = (
+        policy.grant_commands(args.worker_user, args.paths)
+        if args.action == "grant"
+        else policy.revoke_commands(args.worker_user, args.paths)
+    )
+    if args.dry_run:
+        for command in commands:
+            print(" ".join(command.argv))
+        return 0
+    policy.apply(commands)
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

{ssot_core-0.2.18.dev9 → ssot_core-0.2.19.dev1}/src/ssot_registry/api/__init__.py

@@ -20,6 +20,7 @@ from .documents import (
 from .entity_ops import (
     add_boundary_features,
     add_boundary_profiles,
+    add_feature_children,
     add_release_boundaries,
     add_release_claims,
     add_release_evidence,
@@ -27,14 +28,17 @@ from .entity_ops import (
     delete_entity,
     get_entity,
     link_entities,
+    list_feature_children,
     list_entities,
     remove_boundary_features,
     remove_boundary_profiles,
+    remove_feature_children,
     remove_release_boundaries,
     remove_release_claims,
     remove_release_evidence,
     set_claim_status,
     set_claim_tier,
+    set_feature_parents,
     set_issue_status,
     set_risk_status,
     unlink_entities,
@@ -102,6 +106,10 @@ __all__ = [
     "add_boundary_profiles",
     "remove_boundary_features",
     "remove_boundary_profiles",
+    "set_feature_parents",
+    "add_feature_children",
+    "remove_feature_children",
+    "list_feature_children",
     "add_release_boundaries",
     "remove_release_boundaries",
     "add_release_claims",

{ssot_core-0.2.18.dev9 → ssot_core-0.2.19.dev1}/src/ssot_registry/api/entity_ops.py

@@ -40,7 +40,7 @@ RECIPROCAL_FIELDS = {
 }
 
 LINKABLE_FIELDS = {
-    "features": {"spec_ids", "claim_ids", "test_ids", "requires"},
+    "features": {"spec_ids", "claim_ids", "test_ids", "requires", "parent_feature_ids"},
     "profiles": {"feature_ids", "profile_ids"},
     "tests": {"feature_ids", "claim_ids", "evidence_ids"},
     "claims": {"feature_ids", "test_ids", "evidence_ids", "depends_on_claim_ids"},
@@ -76,6 +76,19 @@ def _dedupe_preserve(values: list[str]) -> list[str]:
     return ordered
 
 
+def _dedupe_sorted(values: list[str]) -> list[str]:
+    return sorted(dict.fromkeys(values))
+
+
+def _normalize_feature_parent_ids(row: dict[str, Any]) -> None:
+    values = row.get("parent_feature_ids")
+    if values is None:
+        row["parent_feature_ids"] = []
+        return
+    if isinstance(values, list):
+        row["parent_feature_ids"] = _dedupe_sorted(values)
+
+
 def _repo_kind(registry: dict[str, Any]) -> str:
     repo = registry.get("repo")
     if isinstance(repo, dict):
@@ -221,6 +234,9 @@ def create_entity(path: str | Path, section: str, row: dict[str, Any]) -> dict[s
     _ensure_assurance_origin(registry, section, candidate)
     if section == "claims":
         candidate.setdefault("depends_on_claim_ids", [])
+    if section == "features":
+        candidate.setdefault("parent_feature_ids", [])
+        _normalize_feature_parent_ids(candidate)
     _validate_assurance_origin_mutation(registry, section, candidate)
     for field_name in LINKABLE_FIELDS[section]:
         if field_name in candidate and isinstance(candidate[field_name], list):
@@ -278,6 +294,8 @@ def update_entity(path: str | Path, section: str, entity_id: str, changes: dict[
             continue
         row[field_name] = deepcopy(value)
     _validate_assurance_origin_mutation(registry, section, row, current=current_row)
+    if section == "features":
+        _normalize_feature_parent_ids(row)
     if isinstance(next_id, str) and next_id != entity_id:
         _rewrite_references_for_renamed_id(registry, target_section=section, old_id=entity_id, new_id=next_id)
         action = f"renaming {SECTION_LABELS[section]} {entity_id} to {next_id}"
@@ -359,6 +377,8 @@ def link_entities(path: str | Path, section: str, entity_id: str, links: dict[st
                 values.append(target_id)
                 _apply_reciprocal_add(registry, section, field_name, entity_id, target_id)
         row[field_name] = _dedupe_preserve(values)
+    if section == "features":
+        _normalize_feature_parent_ids(row)
     mutation = _validate_and_save(registry_path, repo_root, registry, f"linking {SECTION_LABELS[section]} {entity_id}")
     return {
         "passed": True,
@@ -381,6 +401,8 @@ def unlink_entities(path: str | Path, section: str, entity_id: str, links: dict[
                 values.remove(target_id)
             _apply_reciprocal_remove(registry, section, field_name, entity_id, target_id)
         row[field_name] = _dedupe_preserve(values)
+    if section == "features":
+        _normalize_feature_parent_ids(row)
     mutation = _validate_and_save(registry_path, repo_root, registry, f"unlinking {SECTION_LABELS[section]} {entity_id}")
     return {
         "passed": True,
@@ -395,6 +417,75 @@ def set_claim_status(path: str | Path, claim_id: str, status: str) -> dict[str,
     return update_entity(path, "claims", claim_id, {"status": status})
 
 
+def set_feature_parents(path: str | Path, ids: list[str], parent_ids: list[str], mode: str) -> dict[str, Any]:
+    if mode not in {"add", "set", "remove", "clear"}:
+        raise ValueError("mode must be one of add, set, remove, or clear")
+    registry_path, repo_root, registry = load_registry(path)
+    feature_lookup = _row_lookup(registry, "features")
+    target_ids = _dedupe_preserve(ids)
+    requested_parent_ids = _dedupe_preserve(parent_ids)
+    if mode == "clear":
+        requested_parent_ids = []
+    elif not requested_parent_ids:
+        raise ValueError("At least one parent feature id is required")
+
+    missing_targets = sorted(entity_id for entity_id in target_ids if entity_id not in feature_lookup)
+    missing_parents = sorted(parent_id for parent_id in requested_parent_ids if parent_id not in feature_lookup)
+    if missing_targets or missing_parents:
+        messages: list[str] = []
+        if missing_targets:
+            messages.append(f"Unknown feature ids: {', '.join(missing_targets)}")
+        if missing_parents:
+            messages.append(f"Unknown parent feature ids: {', '.join(missing_parents)}")
+        raise ValueError("; ".join(messages))
+
+    for entity_id in target_ids:
+        row = feature_lookup[entity_id]
+        current = _ensure_list_field(row, "parent_feature_ids")
+        if mode == "add":
+            row["parent_feature_ids"] = _dedupe_sorted([*current, *requested_parent_ids])
+        elif mode == "set":
+            row["parent_feature_ids"] = _dedupe_sorted(requested_parent_ids)
+        elif mode == "remove":
+            removals = set(requested_parent_ids)
+            row["parent_feature_ids"] = _dedupe_sorted([value for value in current if value not in removals])
+        else:
+            row["parent_feature_ids"] = []
+
+    mutation = _validate_and_save(registry_path, repo_root, registry, f"{mode} feature parent links")
+    return {
+        "passed": True,
+        "registry_path": registry_path.as_posix(),
+        "section": "features",
+        "mode": mode,
+        "ids": target_ids,
+        "parent_ids": requested_parent_ids,
+        "entities": [deepcopy(feature_lookup[entity_id]) for entity_id in target_ids],
+        **mutation,
+    }
+
+
+def add_feature_children(path: str | Path, parent_id: str, child_ids: list[str]) -> dict[str, Any]:
+    return set_feature_parents(path, child_ids, [parent_id], "add")
+
+
+def remove_feature_children(path: str | Path, parent_id: str, child_ids: list[str]) -> dict[str, Any]:
+    return set_feature_parents(path, child_ids, [parent_id], "remove")
+
+
+def list_feature_children(path: str | Path, parent_id: str) -> list[dict[str, Any]]:
+    _registry_path, _repo_root, registry = load_registry(path)
+    feature_lookup = _row_lookup(registry, "features")
+    if parent_id not in feature_lookup:
+        raise ValueError(f"Unknown feature id: {parent_id}")
+    rows = [
+        deepcopy(row)
+        for row in registry.get("features", [])
+        if isinstance(row, dict) and parent_id in row.get("parent_feature_ids", [])
+    ]
+    return sorted(rows, key=lambda row: row["id"])
+
+
 def set_claim_tier(path: str | Path, claim_id: str, tier: str) -> dict[str, Any]:
     registry_path, repo_root, registry = load_registry(path)
     row = _entity_row(registry, "claims", claim_id)

{ssot_core-0.2.18.dev9 → ssot_core-0.2.19.dev1}/src/ssot_registry/api/origin.py

@@ -20,6 +20,12 @@ def _origin_rows(registry: dict[str, Any], section: str) -> dict[str, dict[str,
     }
 
 
+def _normalize_feature_rows(registry: dict[str, Any]) -> None:
+    for row in registry.get("features", []):
+        if isinstance(row, dict):
+            row.setdefault("parent_feature_ids", [])
+
+
 def _load_source_registry(source: str | Path | dict[str, Any]) -> dict[str, Any]:
     if isinstance(source, dict):
         return deepcopy(source)
@@ -36,6 +42,8 @@ def sync_origin_assurance_rows(
 ) -> dict[str, Any]:
     registry_path, repo_root, registry = load_registry(path)
     source_registry = _load_source_registry(source)
+    _normalize_feature_rows(registry)
+    _normalize_feature_rows(source_registry)
     selected_sections = tuple(sections or ASSURANCE_ENTITY_SECTIONS)
     unsupported = sorted(set(selected_sections) - set(ASSURANCE_ENTITY_SECTIONS))
     if unsupported:

{ssot_core-0.2.18.dev9 → ssot_core-0.2.19.dev1}/src/ssot_registry/api/upgrade.py

@@ -40,6 +40,7 @@ SCHEMA_V0_2_0 = "0.2.0"
 SCHEMA_V0_3_0 = "0.3.0"
 SCHEMA_V0_4_0 = "0.4.0"
 SCHEMA_V0_5_0 = "0.5.0"
+SCHEMA_V0_6_0 = "0.6.0"
 MIGRATION_RELEASE_WINDOWS = {
     (3, 4): "0.1.x->0.2.1",
     (4, 5): "0.2.1->0.2.2",
@@ -53,7 +54,8 @@ MIGRATION_RELEASE_WINDOWS = {
     (SCHEMA_V0_2_0, SCHEMA_V0_3_0): "0.2.10->0.3.0",
     (SCHEMA_V0_3_0, SCHEMA_V0_4_0): "0.2.10->0.4.0",
     (SCHEMA_V0_4_0, SCHEMA_V0_5_0): "0.4.0->0.5.0",
-    (SCHEMA_V0_5_0, SCHEMA_VERSION): "0.5.0->0.6.0",
+    (SCHEMA_V0_5_0, SCHEMA_V0_6_0): "0.5.0->0.6.0",
+    (SCHEMA_V0_6_0, SCHEMA_VERSION): "0.6.0->0.7.0",
 }
 
 MIGRATION_PATHS = (
@@ -69,7 +71,8 @@ MIGRATION_PATHS = (
     (SCHEMA_V0_2_0, SCHEMA_V0_3_0, "migrate_v0_2_0_to_v0_3_0"),
     (SCHEMA_V0_3_0, SCHEMA_V0_4_0, "migrate_v0_3_0_to_v0_4_0"),
     (SCHEMA_V0_4_0, SCHEMA_V0_5_0, "migrate_v0_4_0_to_v0_5_0"),
-    (SCHEMA_V0_5_0, SCHEMA_VERSION, "migrate_v0_5_0_to_v0_6_0"),
+    (SCHEMA_V0_5_0, SCHEMA_V0_6_0, "migrate_v0_5_0_to_v0_6_0"),
+    (SCHEMA_V0_6_0, SCHEMA_VERSION, "migrate_v0_6_0_to_v0_7_0"),
 )
 
 
@@ -594,13 +597,34 @@ def migrate_v0_5_0_to_v0_6_0(
 ) -> dict[str, Any]:
     _ = repo_root, previous_version, target_version
     migrated = deepcopy(registry)
-    migrated["schema_version"] = SCHEMA_VERSION
+    migrated["schema_version"] = SCHEMA_V0_6_0
     for claim in migrated.get("claims", []):
         if isinstance(claim, dict):
             claim.setdefault("depends_on_claim_ids", [])
     return migrated
 
 
+def migrate_v0_6_0_to_v0_7_0(
+    registry: dict[str, Any],
+    repo_root: Path,
+    *,
+    previous_version: str,
+    target_version: str,
+) -> dict[str, Any]:
+    _ = repo_root, previous_version, target_version
+    migrated = deepcopy(registry)
+    migrated["schema_version"] = SCHEMA_VERSION
+    for feature in migrated.get("features", []):
+        if not isinstance(feature, dict):
+            continue
+        parent_feature_ids = feature.get("parent_feature_ids", [])
+        if not isinstance(parent_feature_ids, list) or not all(isinstance(value, str) for value in parent_feature_ids):
+            feature_id = feature.get("id", "<missing>")
+            raise ValidationError(f"features.{feature_id}.parent_feature_ids must be a list of strings")
+        feature["parent_feature_ids"] = sorted(dict.fromkeys(parent_feature_ids))
+    return migrated
+
+
 def target_version_from_registry(registry: dict[str, Any]) -> str:
     tooling = registry.get("tooling")
     if isinstance(tooling, dict):
@@ -767,11 +791,21 @@ def upgrade_registry(
             target_version=target_version,
         )
         schema_migrations.append("migrate_v0_5_0_to_v0_6_0")
-        migrations.append(_migration_window_label(SCHEMA_V0_5_0, SCHEMA_VERSION))
+        migrations.append(_migration_window_label(SCHEMA_V0_5_0, SCHEMA_V0_6_0))
+        source_schema = SCHEMA_V0_6_0
+    if source_schema == SCHEMA_V0_6_0:
+        working = migrate_v0_6_0_to_v0_7_0(
+            working,
+            repo_root,
+            previous_version=source_tooling_version,
+            target_version=target_version,
+        )
+        schema_migrations.append("migrate_v0_6_0_to_v0_7_0")
+        migrations.append(_migration_window_label(SCHEMA_V0_6_0, SCHEMA_VERSION))
         source_schema = SCHEMA_VERSION
     elif source_schema != SCHEMA_VERSION:
         raise RegistryError(
-            f"Unsupported registry schema_version {source_schema}; expected 3, 4, 5, 6, 7, 8, 9, 10, 0.1.0, 0.2.0, 0.3.0, 0.4.0, 0.5.0 or {SCHEMA_VERSION}"
+            f"Unsupported registry schema_version {source_schema}; expected 3, 4, 5, 6, 7, 8, 9, 10, 0.1.0, 0.2.0, 0.3.0, 0.4.0, 0.5.0, 0.6.0 or {SCHEMA_VERSION}"
         )
 
     normalized_current = _normalize_current_registry(working)

{ssot_core-0.2.18.dev9 → ssot_core-0.2.19.dev1}/src/ssot_registry/api/validate.py

@@ -19,6 +19,7 @@ from ssot_registry.validators import (
     validate_out_of_bounds_disposition,
     validate_filesystem_paths,
     validate_assurance_origins,
+    validate_feature_parent_links,
 )
 from .load import load_registry
 
@@ -43,6 +44,7 @@ def validate_registry_document(
     validate_lifecycle_semantics(registry, index, failures, warnings)
     validate_out_of_bounds_disposition(registry, index, failures, warnings)
     validate_assurance_origins(registry, index, failures)
+    validate_feature_parent_links(index, failures)
     validate_filesystem_paths(registry, index, Path(repo_root), failures, warnings)
 
     return build_validation_report(registry, Path(registry_path).as_posix(), sorted(set(failures)), sorted(set(warnings)))

ssot_core-0.2.19.dev1/src/ssot_registry/control/__init__.py

@@ -0,0 +1,6 @@
+from __future__ import annotations
+
+from .service import ControlPlane
+from .sqlite_store import ControlStore
+
+__all__ = ["ControlPlane", "ControlStore"]

ssot_core-0.2.19.dev1/src/ssot_registry/control/events.py

@@ -0,0 +1,17 @@
+from __future__ import annotations
+
+import json
+from typing import Any
+
+
+def format_sse_event(event: dict[str, Any]) -> str:
+    event_id = event.get("event_id")
+    kind = event.get("kind", "message")
+    data = json.dumps(event, sort_keys=True, separators=(",", ":"))
+    return f"id: {event_id}\nevent: {kind}\ndata: {data}\n\n"
+
+
+def event_cursor(events: list[dict[str, Any]]) -> int:
+    if not events:
+        return 0
+    return max(int(event.get("event_id", 0)) for event in events)