tba-storage-claims 0.4.0.dev2__tar.gz

tba_storage_claims-0.4.0.dev2/PKG-INFO

@@ -0,0 +1,23 @@
+Metadata-Version: 2.4
+Name: tba-storage-claims
+Version: 0.4.0.dev2
+Summary: Owned claims identity database tables and migrations.
+License: Apache-2.0
+Requires-Python: >=3.10,<3.15
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Requires-Dist: tba-primitives-identity[storage] (>=0.4.0.dev2)
+Requires-Dist: tba-storage-tenancy (>=0.4.0.dev2)
+Requires-Dist: tigrbl (>=0.4.4.dev1,<0.5)
+Requires-Dist: tigrbl-migrations (>=0.4.5.dev4)
+Description-Content-Type: text/markdown
+
+# tba-storage-claims
+
+Owns the `tigrbl.identity.storage.claims` schema component.
+

tba_storage_claims-0.4.0.dev2/README.md

@@ -0,0 +1,3 @@
+# tba-storage-claims
+
+Owns the `tigrbl.identity.storage.claims` schema component.

tba_storage_claims-0.4.0.dev2/pyproject.toml

@@ -0,0 +1,21 @@
+[project]
+name = "tba-storage-claims"
+version = "0.4.0.dev2"
+description = "Owned claims identity database tables and migrations."
+readme = "README.md"
+requires-python = ">=3.10,<3.15"
+license = { text = "Apache-2.0" }
+dependencies = [
+    "tigrbl>=0.4.4.dev1,<0.5",
+    "tigrbl-migrations>=0.4.5.dev4",
+    "tba-primitives-identity[storage]>=0.4.0.dev2",
+    "tba-storage-tenancy>=0.4.0.dev2",
+]
+
+[build-system]
+requires = ["poetry-core>=1.0.0"]
+build-backend = "poetry.core.masonry.api"
+
+[tool.poetry]
+packages = [{ include = "tba_storage_claims", from = "src" }]
+include = ["src/tba_storage_claims/component.toml"]

tba_storage_claims-0.4.0.dev2/src/tba_storage_claims/__init__.py

@@ -0,0 +1,7 @@
+"""Standalone identity storage component."""
+
+from .manifest import MANIFEST, load_manifest
+from .tables import *  # noqa: F401,F403
+from .tables import TABLE_MODEL_BY_NAME, TABLE_MODEL_BY_TABLENAME, TABLE_MODELS
+
+__all__ = ["MANIFEST", "load_manifest", "TABLE_MODELS", "TABLE_MODEL_BY_NAME", "TABLE_MODEL_BY_TABLENAME"] + [model.__name__ for model in TABLE_MODELS]

tba_storage_claims-0.4.0.dev2/src/tba_storage_claims/component.toml

@@ -0,0 +1,46 @@
+manifest_version = "1.0.0"
+
+[component]
+id = "tigrbl.identity.storage.claims"
+distribution = "tba-storage-claims"
+import_root = "tba_storage_claims"
+
+[schema]
+contract = "1.0.0"
+migration_head = "6b5acf6a-8d14-51f3-af78-0534d36dac44"
+migrations_package = "tba_storage_claims.migrations.versions"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.claims:table:claim_definitions"
+kind = "table"
+physical_name = "authn.claim_definitions"
+model = "tba_storage_claims.tables:ClaimDefinition"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.claims:table:claim_source_bindings"
+kind = "table"
+physical_name = "authn.claim_source_bindings"
+model = "tba_storage_claims.tables:ClaimSourceBinding"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.claims:table:claim_release_policies"
+kind = "table"
+physical_name = "authn.claim_release_policies"
+model = "tba_storage_claims.tables:ClaimReleasePolicy"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.claims:table:claim_provenance_records"
+kind = "table"
+physical_name = "authn.claim_provenance_records"
+model = "tba_storage_claims.tables:ClaimProvenanceRecord"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.claims:table:claim_snapshots"
+kind = "table"
+physical_name = "authn.claim_snapshots"
+model = "tba_storage_claims.tables:ClaimSnapshot"
+
+[[schema.requires]]
+component = "tigrbl.identity.storage.tenancy"
+contract = ">=1.0.0,<2.0.0"
+minimum_revision = "69854e73-52d3-53ec-9542-6737159e42d6"

tba_storage_claims-0.4.0.dev2/src/tba_storage_claims/manifest.py

@@ -0,0 +1,9 @@
+"""Installed component manifest access."""
+from importlib.resources import as_file, files
+from tigrbl_migrations import StorageManifest
+
+def load_manifest() -> StorageManifest:
+    with as_file(files(__package__).joinpath("component.toml")) as path:
+        return StorageManifest.from_toml(path)
+
+MANIFEST = load_manifest()

tba_storage_claims-0.4.0.dev2/src/tba_storage_claims/migrations/versions/6b5acf6a_8d14_51f3_af78_0534d36dac44_initial_schema.py

@@ -0,0 +1,23 @@
+"""Initial owned schema for tigrbl.identity.storage.claims."""
+from tigrbl_migrations import Migration
+from tba_storage_claims.tables import TABLE_MODELS
+
+REVISION = "6b5acf6a-8d14-51f3-af78-0534d36dac44"
+
+def upgrade(connection):
+    for model in TABLE_MODELS:
+        model.__table__.create(bind=connection, checkfirst=True)
+
+def downgrade(connection):
+    for model in reversed(TABLE_MODELS):
+        model.__table__.drop(bind=connection, checkfirst=True)
+
+MIGRATION = Migration(
+    component="tigrbl.identity.storage.claims",
+    revision=REVISION,
+    parents=(),
+    kind="standard",
+    reversible=True,
+    upgrade=upgrade,
+    downgrade=downgrade,
+)

tba_storage_claims-0.4.0.dev2/src/tba_storage_claims/tables/__init__.py

@@ -0,0 +1,16 @@
+"""Owned mapped-table inventory."""
+
+from .claim_state import ClaimDefinition, ClaimSourceBinding, ClaimReleasePolicy, ClaimProvenanceRecord, ClaimSnapshot
+
+TABLE_MODELS = (
+    ClaimDefinition,
+    ClaimSourceBinding,
+    ClaimReleasePolicy,
+    ClaimProvenanceRecord,
+    ClaimSnapshot,
+)
+TABLE_MODEL_BY_NAME = {model.__name__: model for model in TABLE_MODELS}
+TABLE_MODEL_BY_TABLENAME = {model.__tablename__: model for model in TABLE_MODELS}
+__all__ = [model.__name__ for model in TABLE_MODELS] + [
+    "TABLE_MODELS", "TABLE_MODEL_BY_NAME", "TABLE_MODEL_BY_TABLENAME",
+]

tba_storage_claims-0.4.0.dev2/src/tba_storage_claims/tables/claim_state.py

@@ -0,0 +1,98 @@
+"""Durable tenant-defined claim metadata, policy, and provenance.
+
+Standard claim semantics remain code-owned. These tables exist for private
+claim registration, source binding, release policy, and protected snapshots.
+"""
+
+from __future__ import annotations
+
+import datetime as dt
+
+from tba_primitives_identity.orm import (
+    Boolean,
+    GUIDPk,
+    JSON,
+    Mapped,
+    RestOltpTable,
+    S,
+    String,
+    TZDateTime,
+    TenantColumn,
+    Timestamped,
+    acol,
+)
+
+
+class ClaimDefinition(RestOltpTable, GUIDPk, Timestamped, TenantColumn):
+    __tablename__ = "claim_definitions"
+    __table_args__ = ({"schema": "authn"},)
+
+    label: Mapped[str] = acol(storage=S(String(1000), nullable=False, index=True))
+    label_kind: Mapped[str] = acol(storage=S(String(32), nullable=False, index=True))
+    namespace: Mapped[str | None] = acol(storage=S(String(1000), nullable=True, index=True))
+    registry: Mapped[str | None] = acol(storage=S(String(255), nullable=True, index=True))
+    semantic_type: Mapped[str] = acol(storage=S(String(64), nullable=False, index=True))
+    value_type: Mapped[str] = acol(storage=S(String(64), nullable=False))
+    standards: Mapped[list | None] = acol(storage=S(JSON, nullable=True))
+    active: Mapped[bool] = acol(storage=S(Boolean, nullable=False, default=True, index=True))
+
+
+class ClaimSourceBinding(RestOltpTable, GUIDPk, Timestamped, TenantColumn):
+    __tablename__ = "claim_source_bindings"
+    __table_args__ = ({"schema": "authn"},)
+
+    claim_definition_id: Mapped[str] = acol(storage=S(String(64), nullable=False, index=True))
+    source_kind: Mapped[str] = acol(storage=S(String(32), nullable=False, index=True))
+    provider_id: Mapped[str | None] = acol(storage=S(String(255), nullable=True, index=True))
+    source_path: Mapped[str | None] = acol(storage=S(String(1000), nullable=True))
+    transformation: Mapped[dict | None] = acol(storage=S(JSON, nullable=True))
+    active: Mapped[bool] = acol(storage=S(Boolean, nullable=False, default=True, index=True))
+
+
+class ClaimReleasePolicy(RestOltpTable, GUIDPk, Timestamped, TenantColumn):
+    __tablename__ = "claim_release_policies"
+    __table_args__ = ({"schema": "authn"},)
+
+    claim_definition_id: Mapped[str] = acol(storage=S(String(64), nullable=False, index=True))
+    audience_pattern: Mapped[str | None] = acol(storage=S(String(1000), nullable=True, index=True))
+    protocol_tag: Mapped[str | None] = acol(storage=S(String(64), nullable=True, index=True))
+    disclosure_mode: Mapped[str] = acol(storage=S(String(32), nullable=False, index=True))
+    purpose: Mapped[str | None] = acol(storage=S(String(1000), nullable=True))
+    conditions: Mapped[dict | None] = acol(storage=S(JSON, nullable=True))
+    active: Mapped[bool] = acol(storage=S(Boolean, nullable=False, default=True, index=True))
+
+
+class ClaimProvenanceRecord(RestOltpTable, GUIDPk, Timestamped, TenantColumn):
+    __tablename__ = "claim_provenance_records"
+    __table_args__ = ({"schema": "authn"},)
+
+    claim_label: Mapped[str] = acol(storage=S(String(1000), nullable=False, index=True))
+    namespace: Mapped[str | None] = acol(storage=S(String(1000), nullable=True, index=True))
+    subject_reference: Mapped[str | None] = acol(storage=S(String(255), nullable=True, index=True))
+    source_kind: Mapped[str] = acol(storage=S(String(32), nullable=False, index=True))
+    source_reference: Mapped[str | None] = acol(storage=S(String(1000), nullable=True))
+    evidence_reference: Mapped[str | None] = acol(storage=S(String(1000), nullable=True))
+    value_digest: Mapped[str] = acol(storage=S(String(128), nullable=False, index=True))
+    verified_at: Mapped[dt.datetime | None] = acol(storage=S(TZDateTime, nullable=True, index=True))
+    assurance_framework: Mapped[str | None] = acol(storage=S(String(255), nullable=True))
+
+
+class ClaimSnapshot(RestOltpTable, GUIDPk, Timestamped, TenantColumn):
+    __tablename__ = "claim_snapshots"
+    __table_args__ = ({"schema": "authn"},)
+
+    claim_set_reference: Mapped[str] = acol(storage=S(String(255), nullable=False, index=True))
+    protocol_tag: Mapped[str | None] = acol(storage=S(String(64), nullable=True, index=True))
+    specification_version: Mapped[str | None] = acol(storage=S(String(128), nullable=True))
+    payload_digest: Mapped[str] = acol(storage=S(String(128), nullable=False, index=True))
+    protected_artifact_locator: Mapped[str] = acol(storage=S(String(1000), nullable=False))
+    retention_expires_at: Mapped[dt.datetime | None] = acol(storage=S(TZDateTime, nullable=True, index=True))
+
+
+__all__ = [
+    "ClaimDefinition",
+    "ClaimProvenanceRecord",
+    "ClaimReleasePolicy",
+    "ClaimSnapshot",
+    "ClaimSourceBinding",
+]