tba-durability-attestation 0.4.0.dev2__tar.gz

tba_durability_attestation-0.4.0.dev2/PKG-INFO

@@ -0,0 +1,24 @@
+Metadata-Version: 2.4
+Name: tba-durability-attestation
+Version: 0.4.0.dev2
+Summary: Carrier-neutral layer-30 durable table operations.
+License-Expression: Apache-2.0
+Requires-Python: >=3.10,<3.15
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Requires-Dist: tba-bases-replay (==0.4.0.dev2)
+Requires-Dist: tba-contracts-identity (==0.4.0.dev2)
+Requires-Dist: tba-contracts-security-trust (==0.1.0)
+Requires-Dist: tba-primitives-identity (==0.4.0.dev2)
+Requires-Dist: tba-storage-attestation (==0.4.0.dev2)
+Requires-Dist: tigrbl (==0.4.5.dev8)
+Description-Content-Type: text/markdown
+
+# tba-durability-attestation
+
+Carrier-neutral layer-30 durable operations and derived table specifications.
+

tba_durability_attestation-0.4.0.dev2/README.md

@@ -0,0 +1,3 @@
+# tba-durability-attestation
+
+Carrier-neutral layer-30 durable operations and derived table specifications.

tba_durability_attestation-0.4.0.dev2/pyproject.toml

@@ -0,0 +1,22 @@
+[project]
+name = "tba-durability-attestation"
+version = "0.4.0.dev2"
+description = "Carrier-neutral layer-30 durable table operations."
+readme = "README.md"
+requires-python = ">=3.10,<3.15"
+license = "Apache-2.0"
+dependencies = [
+    "tigrbl==0.4.5.dev8",
+    "tba-primitives-identity==0.4.0.dev2",
+    "tba-contracts-identity==0.4.0.dev2",
+    "tba-bases-replay==0.4.0.dev2",
+    "tba-contracts-security-trust==0.1.0",
+    "tba-storage-attestation==0.4.0.dev2",
+]
+
+[build-system]
+requires = ["poetry-core>=1.0.0"]
+build-backend = "poetry.core.masonry.api"
+
+[tool.poetry]
+packages = [{ include = "tba_durability_attestation", from = "src" }]

tba_durability_attestation-0.4.0.dev2/src/tba_durability_attestation/__init__.py

@@ -0,0 +1,5 @@
+from .operations import *
+from .specifications import *
+from .inventory import *
+
+__all__ = [name for name in globals() if not name.startswith("_")]

tba_durability_attestation-0.4.0.dev2/src/tba_durability_attestation/inventory.py

@@ -0,0 +1,22 @@
+"""Immutable inventory of this durable family's table specifications."""
+
+from . import specifications as _specifications
+
+RUNTIME_TABLE_SPECS = tuple(
+    value
+    for name, value in vars(_specifications).items()
+    if name.endswith("RuntimeSpec") and getattr(value, "model", None) is not None
+)
+RUNTIME_TABLES = tuple(spec.model for spec in RUNTIME_TABLE_SPECS)
+RUNTIME_OPERATION_BY_ALIAS = {
+    operation.alias: operation
+    for spec in RUNTIME_TABLE_SPECS
+    for operation in spec.ops
+    if operation.extra.get("owner_layer") == "30-storage-runtime"
+}
+
+__all__ = [
+    "RUNTIME_OPERATION_BY_ALIAS",
+    "RUNTIME_TABLE_SPECS",
+    "RUNTIME_TABLES",
+]

tba_durability_attestation-0.4.0.dev2/src/tba_durability_attestation/operations/__init__.py

@@ -0,0 +1 @@
+from .attestation import *

tba_durability_attestation-0.4.0.dev2/src/tba_durability_attestation/operations/attestation.py

@@ -0,0 +1,133 @@
+"""Durable attestation and reference-material operations."""
+
+from __future__ import annotations
+
+from collections.abc import Mapping
+from typing import Any
+
+from tba_storage_attestation.tables import AttestationEndorsement, AttestationEvidence, AttestationReferenceManifest, AttestationReferenceValue, AttestationResult
+from tba_primitives_identity.persistence import reject_sensitive_raw_fields
+
+from tigrbl import (
+    provideTableHandler,
+    database_from_context,
+    maybe_await,
+    payload_from_context,
+)
+
+record_attestation_evidence = provideTableHandler(
+    AttestationEvidence, payload_validator=reject_sensitive_raw_fields
+)
+record_attestation_result = provideTableHandler(
+    AttestationResult, payload_validator=reject_sensitive_raw_fields
+)
+
+
+def make_attestation_appraisal_recorder(
+    *,
+    db: Any,
+    evidence_id: str,
+    artifact_locator: str,
+    evidence_digest: str,
+    issuer: str | None = None,
+    policy_id: str | None = None,
+    evidence_recorder: Any = None,
+    result_recorder: Any = None,
+):
+    """Bind caller-owned durable state to the capability recorder signature."""
+
+    evidence_recorder = evidence_recorder or record_attestation_evidence
+    result_recorder = result_recorder or record_attestation_result
+
+    async def record(verified_evidence: Any, appraisal_result: Any) -> Any:
+        evidence = verified_evidence.evidence
+        envelope = verified_evidence.envelope.envelope
+        await evidence_recorder(
+            {
+                "payload": {
+                    "evidence_id": evidence_id,
+                    "profile": evidence.profile,
+                    "format": envelope.format.value,
+                    "issuer": issuer,
+                    "artifact_locator": artifact_locator,
+                    "evidence_digest": evidence_digest,
+                },
+                "db": db,
+            }
+        )
+        return await result_recorder(
+            {
+                "payload": {
+                    "evidence_id": evidence_id,
+                    "policy_id": policy_id,
+                    "trusted": appraisal_result.trusted,
+                    "reason": appraisal_result.reason,
+                    "result_claims": dict(appraisal_result.claims),
+                },
+                "db": db,
+            }
+        )
+
+    return record
+
+
+async def publish_reference_material(ctx: Mapping[str, Any]) -> Mapping[str, object]:
+    """Stage a manifest and its material in one caller-owned transaction."""
+
+    payload = payload_from_context(ctx)
+    reject_sensitive_raw_fields(payload)
+    manifest = payload.get("manifest")
+    values = payload.get("reference_values", ())
+    endorsements = payload.get("endorsements", ())
+    if not isinstance(manifest, Mapping):
+        raise TypeError("reference material requires a manifest mapping")
+    if not isinstance(values, (list, tuple)) or not all(
+        isinstance(value, Mapping) for value in values
+    ):
+        raise TypeError("reference_values must be a sequence of mappings")
+    if not isinstance(endorsements, (list, tuple)) or not all(
+        isinstance(value, Mapping) for value in endorsements
+    ):
+        raise TypeError("endorsements must be a sequence of mappings")
+
+    db = database_from_context(ctx)
+    manifest_id = manifest.get("manifest_id")
+    if not manifest_id:
+        raise ValueError("reference manifest requires manifest_id")
+    manifest_record = await maybe_await(
+        AttestationReferenceManifest.handlers.create.core(
+            AttestationReferenceManifest, manifest, db
+        )
+    )
+    value_records = []
+    for value in values:
+        material = {"manifest_id": manifest_id, **dict(value)}
+        value_records.append(
+            await maybe_await(
+                AttestationReferenceValue.handlers.create.core(
+                    AttestationReferenceValue, material, db
+                )
+            )
+        )
+    endorsement_records = []
+    for endorsement in endorsements:
+        endorsement_records.append(
+            await maybe_await(
+                AttestationEndorsement.handlers.create.core(
+                    AttestationEndorsement, endorsement, db
+                )
+            )
+        )
+    return {
+        "manifest": manifest_record,
+        "reference_values": tuple(value_records),
+        "endorsements": tuple(endorsement_records),
+    }
+
+
+__all__ = [
+    "make_attestation_appraisal_recorder",
+    "publish_reference_material",
+    "record_attestation_evidence",
+    "record_attestation_result",
+]

tba_durability_attestation-0.4.0.dev2/src/tba_durability_attestation/py.typed

@@ -0,0 +1 @@
+

tba_durability_attestation-0.4.0.dev2/src/tba_durability_attestation/specifications/__init__.py

@@ -0,0 +1 @@
+from .attestation import *

tba_durability_attestation-0.4.0.dev2/src/tba_durability_attestation/specifications/attestation.py

@@ -0,0 +1,67 @@
+"""Attestation table aliases and executable runtime specifications."""
+
+from tba_storage_attestation.tables import AttestationEvidence, AttestationReferenceManifest, AttestationResult
+
+from tigrbl import deriveTableSpec
+from tigrbl import makeOp
+from tba_durability_attestation.operations.attestation import (
+    publish_reference_material,
+    record_attestation_evidence,
+    record_attestation_result,
+)
+
+AttestationEvidenceTable = AttestationEvidence
+AttestationResultTable = AttestationResult
+AttestationReferenceManifestTable = AttestationReferenceManifest
+
+AttestationEvidenceRuntimeSpec = deriveTableSpec(
+    AttestationEvidenceTable,
+    ops=(
+        makeOp(
+            extra={"owner_layer": "30-storage-runtime"},
+            expose_routes=False,
+            expose_rpc=False,
+            expose_method=True,
+            tx_scope="read_write",
+            alias="record_evidence",
+            handler=record_attestation_evidence,
+        ),
+    ),
+)
+AttestationResultRuntimeSpec = deriveTableSpec(
+    AttestationResultTable,
+    ops=(
+        makeOp(
+            extra={"owner_layer": "30-storage-runtime"},
+            expose_routes=False,
+            expose_rpc=False,
+            expose_method=True,
+            tx_scope="read_write",
+            alias="record_appraisal_result",
+            handler=record_attestation_result,
+        ),
+    ),
+)
+AttestationReferenceManifestRuntimeSpec = deriveTableSpec(
+    AttestationReferenceManifestTable,
+    ops=(
+        makeOp(
+            extra={"owner_layer": "30-storage-runtime"},
+            expose_routes=False,
+            expose_rpc=False,
+            expose_method=True,
+            tx_scope="read_write",
+            alias="publish_reference_material",
+            handler=publish_reference_material,
+        ),
+    ),
+)
+
+__all__ = [
+    "AttestationEvidenceRuntimeSpec",
+    "AttestationEvidenceTable",
+    "AttestationReferenceManifestRuntimeSpec",
+    "AttestationReferenceManifestTable",
+    "AttestationResultRuntimeSpec",
+    "AttestationResultTable",
+]