tba-storage-claims 0.4.0.dev2__py3-none-any.whl

tba_storage_claims/__init__.py

@@ -0,0 +1,7 @@
+"""Standalone identity storage component."""
+
+from .manifest import MANIFEST, load_manifest
+from .tables import *  # noqa: F401,F403
+from .tables import TABLE_MODEL_BY_NAME, TABLE_MODEL_BY_TABLENAME, TABLE_MODELS
+
+__all__ = ["MANIFEST", "load_manifest", "TABLE_MODELS", "TABLE_MODEL_BY_NAME", "TABLE_MODEL_BY_TABLENAME"] + [model.__name__ for model in TABLE_MODELS]

tba_storage_claims/component.toml

@@ -0,0 +1,46 @@
+manifest_version = "1.0.0"
+
+[component]
+id = "tigrbl.identity.storage.claims"
+distribution = "tba-storage-claims"
+import_root = "tba_storage_claims"
+
+[schema]
+contract = "1.0.0"
+migration_head = "6b5acf6a-8d14-51f3-af78-0534d36dac44"
+migrations_package = "tba_storage_claims.migrations.versions"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.claims:table:claim_definitions"
+kind = "table"
+physical_name = "authn.claim_definitions"
+model = "tba_storage_claims.tables:ClaimDefinition"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.claims:table:claim_source_bindings"
+kind = "table"
+physical_name = "authn.claim_source_bindings"
+model = "tba_storage_claims.tables:ClaimSourceBinding"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.claims:table:claim_release_policies"
+kind = "table"
+physical_name = "authn.claim_release_policies"
+model = "tba_storage_claims.tables:ClaimReleasePolicy"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.claims:table:claim_provenance_records"
+kind = "table"
+physical_name = "authn.claim_provenance_records"
+model = "tba_storage_claims.tables:ClaimProvenanceRecord"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.claims:table:claim_snapshots"
+kind = "table"
+physical_name = "authn.claim_snapshots"
+model = "tba_storage_claims.tables:ClaimSnapshot"
+
+[[schema.requires]]
+component = "tigrbl.identity.storage.tenancy"
+contract = ">=1.0.0,<2.0.0"
+minimum_revision = "69854e73-52d3-53ec-9542-6737159e42d6"

tba_storage_claims/manifest.py

@@ -0,0 +1,9 @@
+"""Installed component manifest access."""
+from importlib.resources import as_file, files
+from tigrbl_migrations import StorageManifest
+
+def load_manifest() -> StorageManifest:
+    with as_file(files(__package__).joinpath("component.toml")) as path:
+        return StorageManifest.from_toml(path)
+
+MANIFEST = load_manifest()

tba_storage_claims/migrations/versions/6b5acf6a_8d14_51f3_af78_0534d36dac44_initial_schema.py

@@ -0,0 +1,23 @@
+"""Initial owned schema for tigrbl.identity.storage.claims."""
+from tigrbl_migrations import Migration
+from tba_storage_claims.tables import TABLE_MODELS
+
+REVISION = "6b5acf6a-8d14-51f3-af78-0534d36dac44"
+
+def upgrade(connection):
+    for model in TABLE_MODELS:
+        model.__table__.create(bind=connection, checkfirst=True)
+
+def downgrade(connection):
+    for model in reversed(TABLE_MODELS):
+        model.__table__.drop(bind=connection, checkfirst=True)
+
+MIGRATION = Migration(
+    component="tigrbl.identity.storage.claims",
+    revision=REVISION,
+    parents=(),
+    kind="standard",
+    reversible=True,
+    upgrade=upgrade,
+    downgrade=downgrade,
+)

tba_storage_claims/tables/__init__.py

@@ -0,0 +1,16 @@
+"""Owned mapped-table inventory."""
+
+from .claim_state import ClaimDefinition, ClaimSourceBinding, ClaimReleasePolicy, ClaimProvenanceRecord, ClaimSnapshot
+
+TABLE_MODELS = (
+    ClaimDefinition,
+    ClaimSourceBinding,
+    ClaimReleasePolicy,
+    ClaimProvenanceRecord,
+    ClaimSnapshot,
+)
+TABLE_MODEL_BY_NAME = {model.__name__: model for model in TABLE_MODELS}
+TABLE_MODEL_BY_TABLENAME = {model.__tablename__: model for model in TABLE_MODELS}
+__all__ = [model.__name__ for model in TABLE_MODELS] + [
+    "TABLE_MODELS", "TABLE_MODEL_BY_NAME", "TABLE_MODEL_BY_TABLENAME",
+]

tba_storage_claims/tables/claim_state.py

@@ -0,0 +1,98 @@
+"""Durable tenant-defined claim metadata, policy, and provenance.
+
+Standard claim semantics remain code-owned. These tables exist for private
+claim registration, source binding, release policy, and protected snapshots.
+"""
+
+from __future__ import annotations
+
+import datetime as dt
+
+from tba_primitives_identity.orm import (
+    Boolean,
+    GUIDPk,
+    JSON,
+    Mapped,
+    RestOltpTable,
+    S,
+    String,
+    TZDateTime,
+    TenantColumn,
+    Timestamped,
+    acol,
+)
+
+
+class ClaimDefinition(RestOltpTable, GUIDPk, Timestamped, TenantColumn):
+    __tablename__ = "claim_definitions"
+    __table_args__ = ({"schema": "authn"},)
+
+    label: Mapped[str] = acol(storage=S(String(1000), nullable=False, index=True))
+    label_kind: Mapped[str] = acol(storage=S(String(32), nullable=False, index=True))
+    namespace: Mapped[str | None] = acol(storage=S(String(1000), nullable=True, index=True))
+    registry: Mapped[str | None] = acol(storage=S(String(255), nullable=True, index=True))
+    semantic_type: Mapped[str] = acol(storage=S(String(64), nullable=False, index=True))
+    value_type: Mapped[str] = acol(storage=S(String(64), nullable=False))
+    standards: Mapped[list | None] = acol(storage=S(JSON, nullable=True))
+    active: Mapped[bool] = acol(storage=S(Boolean, nullable=False, default=True, index=True))
+
+
+class ClaimSourceBinding(RestOltpTable, GUIDPk, Timestamped, TenantColumn):
+    __tablename__ = "claim_source_bindings"
+    __table_args__ = ({"schema": "authn"},)
+
+    claim_definition_id: Mapped[str] = acol(storage=S(String(64), nullable=False, index=True))
+    source_kind: Mapped[str] = acol(storage=S(String(32), nullable=False, index=True))
+    provider_id: Mapped[str | None] = acol(storage=S(String(255), nullable=True, index=True))
+    source_path: Mapped[str | None] = acol(storage=S(String(1000), nullable=True))
+    transformation: Mapped[dict | None] = acol(storage=S(JSON, nullable=True))
+    active: Mapped[bool] = acol(storage=S(Boolean, nullable=False, default=True, index=True))
+
+
+class ClaimReleasePolicy(RestOltpTable, GUIDPk, Timestamped, TenantColumn):
+    __tablename__ = "claim_release_policies"
+    __table_args__ = ({"schema": "authn"},)
+
+    claim_definition_id: Mapped[str] = acol(storage=S(String(64), nullable=False, index=True))
+    audience_pattern: Mapped[str | None] = acol(storage=S(String(1000), nullable=True, index=True))
+    protocol_tag: Mapped[str | None] = acol(storage=S(String(64), nullable=True, index=True))
+    disclosure_mode: Mapped[str] = acol(storage=S(String(32), nullable=False, index=True))
+    purpose: Mapped[str | None] = acol(storage=S(String(1000), nullable=True))
+    conditions: Mapped[dict | None] = acol(storage=S(JSON, nullable=True))
+    active: Mapped[bool] = acol(storage=S(Boolean, nullable=False, default=True, index=True))
+
+
+class ClaimProvenanceRecord(RestOltpTable, GUIDPk, Timestamped, TenantColumn):
+    __tablename__ = "claim_provenance_records"
+    __table_args__ = ({"schema": "authn"},)
+
+    claim_label: Mapped[str] = acol(storage=S(String(1000), nullable=False, index=True))
+    namespace: Mapped[str | None] = acol(storage=S(String(1000), nullable=True, index=True))
+    subject_reference: Mapped[str | None] = acol(storage=S(String(255), nullable=True, index=True))
+    source_kind: Mapped[str] = acol(storage=S(String(32), nullable=False, index=True))
+    source_reference: Mapped[str | None] = acol(storage=S(String(1000), nullable=True))
+    evidence_reference: Mapped[str | None] = acol(storage=S(String(1000), nullable=True))
+    value_digest: Mapped[str] = acol(storage=S(String(128), nullable=False, index=True))
+    verified_at: Mapped[dt.datetime | None] = acol(storage=S(TZDateTime, nullable=True, index=True))
+    assurance_framework: Mapped[str | None] = acol(storage=S(String(255), nullable=True))
+
+
+class ClaimSnapshot(RestOltpTable, GUIDPk, Timestamped, TenantColumn):
+    __tablename__ = "claim_snapshots"
+    __table_args__ = ({"schema": "authn"},)
+
+    claim_set_reference: Mapped[str] = acol(storage=S(String(255), nullable=False, index=True))
+    protocol_tag: Mapped[str | None] = acol(storage=S(String(64), nullable=True, index=True))
+    specification_version: Mapped[str | None] = acol(storage=S(String(128), nullable=True))
+    payload_digest: Mapped[str] = acol(storage=S(String(128), nullable=False, index=True))
+    protected_artifact_locator: Mapped[str] = acol(storage=S(String(1000), nullable=False))
+    retention_expires_at: Mapped[dt.datetime | None] = acol(storage=S(TZDateTime, nullable=True, index=True))
+
+
+__all__ = [
+    "ClaimDefinition",
+    "ClaimProvenanceRecord",
+    "ClaimReleasePolicy",
+    "ClaimSnapshot",
+    "ClaimSourceBinding",
+]

tba_storage_claims-0.4.0.dev2.dist-info/METADATA

@@ -0,0 +1,23 @@
+Metadata-Version: 2.4
+Name: tba-storage-claims
+Version: 0.4.0.dev2
+Summary: Owned claims identity database tables and migrations.
+License: Apache-2.0
+Requires-Python: >=3.10,<3.15
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Requires-Dist: tba-primitives-identity[storage] (>=0.4.0.dev2)
+Requires-Dist: tba-storage-tenancy (>=0.4.0.dev2)
+Requires-Dist: tigrbl (>=0.4.4.dev1,<0.5)
+Requires-Dist: tigrbl-migrations (>=0.4.5.dev4)
+Description-Content-Type: text/markdown
+
+# tba-storage-claims
+
+Owns the `tigrbl.identity.storage.claims` schema component.
+

tba_storage_claims-0.4.0.dev2.dist-info/RECORD

@@ -0,0 +1,12 @@
+tba_storage_claims/__init__.py,sha256=HoJ8HOyxQOG9vvo4LEJPfEUW3IDGqZF6ZIgJQ59tK6Q,366
+tba_storage_claims/component.toml,sha256=NVm-BiFgd__j9vDI2sqwvma2vy4867ZWMhdK0rRg65w,1442
+tba_storage_claims/manifest.py,sha256=bYZmb6ItB8bRxtuCspB1us5eTvB1RqlTedISJZbws_w,325
+tba_storage_claims/migrations/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+tba_storage_claims/migrations/versions/6b5acf6a_8d14_51f3_af78_0534d36dac44_initial_schema.py,sha256=WBIRwB7pz5NQDJ7I_Fw5A9xlYIifIgEPloYYeBtJIoQ,660
+tba_storage_claims/migrations/versions/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+tba_storage_claims/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+tba_storage_claims/tables/__init__.py,sha256=lgNPS2soWuPDd6W4Sk3aEJ4tT7JYGIWUZaCs3iXTsXc,575
+tba_storage_claims/tables/claim_state.py,sha256=UKe6ahJbCgN3oCa5uzzrxEcC3rUCdCsYZw7lPqWZz0I,4684
+tba_storage_claims-0.4.0.dev2.dist-info/METADATA,sha256=krlESmR-DSSQOuYlFA_5qdhlzsAkVdZr_QoHfTnlqD8,873
+tba_storage_claims-0.4.0.dev2.dist-info/WHEEL,sha256=L-WvLdSBvJWHXv5zrQxDvNRnIgoBzLUpcbuiw19KCuQ,88
+tba_storage_claims-0.4.0.dev2.dist-info/RECORD,,

tba_storage_claims-0.4.0.dev2.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: poetry-core 2.5.0
+Root-Is-Purelib: true
+Tag: py3-none-any