tba-storage-digital-credential 0.4.0.dev2__py3-none-any.whl

tba_storage_digital_credential/__init__.py

@@ -0,0 +1,7 @@
+"""Standalone identity storage component."""
+
+from .manifest import MANIFEST, load_manifest
+from .tables import *  # noqa: F401,F403
+from .tables import TABLE_MODEL_BY_NAME, TABLE_MODEL_BY_TABLENAME, TABLE_MODELS
+
+__all__ = ["MANIFEST", "load_manifest", "TABLE_MODELS", "TABLE_MODEL_BY_NAME", "TABLE_MODEL_BY_TABLENAME"] + [model.__name__ for model in TABLE_MODELS]

tba_storage_digital_credential/component.toml

@@ -0,0 +1,89 @@
+manifest_version = "1.0.0"
+
+[component]
+id = "tigrbl.identity.storage.digital-credential"
+distribution = "tba-storage-digital-credential"
+import_root = "tba_storage_digital_credential"
+
+[schema]
+contract = "1.0.0"
+migration_head = "0e47cb7f-3dd7-5c79-a82a-371198cf5b27"
+migrations_package = "tba_storage_digital_credential.migrations.versions"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.digital-credential:table:credential_issuers"
+kind = "table"
+physical_name = "authn.credential_issuers"
+model = "tba_storage_digital_credential.tables:CredentialIssuer"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.digital-credential:table:credential_configurations"
+kind = "table"
+physical_name = "authn.credential_configurations"
+model = "tba_storage_digital_credential.tables:CredentialConfiguration"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.digital-credential:table:wallet_registrations"
+kind = "table"
+physical_name = "authn.wallet_registrations"
+model = "tba_storage_digital_credential.tables:WalletRegistration"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.digital-credential:table:wallet_instances"
+kind = "table"
+physical_name = "authn.wallet_instances"
+model = "tba_storage_digital_credential.tables:WalletInstance"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.digital-credential:table:wallet_attestations"
+kind = "table"
+physical_name = "authn.wallet_attestations"
+model = "tba_storage_digital_credential.tables:WalletAttestation"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.digital-credential:table:wallet_key_bindings"
+kind = "table"
+physical_name = "authn.wallet_key_bindings"
+model = "tba_storage_digital_credential.tables:WalletKeyBinding"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.digital-credential:table:credential_offers"
+kind = "table"
+physical_name = "authn.credential_offers"
+model = "tba_storage_digital_credential.tables:CredentialOffer"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.digital-credential:table:credential_issuance_transactions"
+kind = "table"
+physical_name = "authn.credential_issuance_transactions"
+model = "tba_storage_digital_credential.tables:CredentialIssuanceTransaction"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.digital-credential:table:credential_deferred_transactions"
+kind = "table"
+physical_name = "authn.credential_deferred_transactions"
+model = "tba_storage_digital_credential.tables:CredentialDeferredTransaction"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.digital-credential:table:credential_notifications"
+kind = "table"
+physical_name = "authn.credential_notifications"
+model = "tba_storage_digital_credential.tables:CredentialNotification"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.digital-credential:table:credential_status_lists"
+kind = "table"
+physical_name = "authn.credential_status_lists"
+model = "tba_storage_digital_credential.tables:CredentialStatusList"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.digital-credential:table:credential_status_entries"
+kind = "table"
+physical_name = "authn.credential_status_entries"
+model = "tba_storage_digital_credential.tables:CredentialStatusEntry"
+
+[[schema.objects]]
+id = "tigrbl.identity.storage.digital-credential:table:credential_status_publications"
+kind = "table"
+physical_name = "authn.credential_status_publications"
+model = "tba_storage_digital_credential.tables:CredentialStatusPublication"

tba_storage_digital_credential/manifest.py

@@ -0,0 +1,9 @@
+"""Installed component manifest access."""
+from importlib.resources import as_file, files
+from tigrbl_migrations import StorageManifest
+
+def load_manifest() -> StorageManifest:
+    with as_file(files(__package__).joinpath("component.toml")) as path:
+        return StorageManifest.from_toml(path)
+
+MANIFEST = load_manifest()

tba_storage_digital_credential/migrations/versions/0e47cb7f_3dd7_5c79_a82a_371198cf5b27_initial_schema.py

@@ -0,0 +1,23 @@
+"""Initial owned schema for tigrbl.identity.storage.digital-credential."""
+from tigrbl_migrations import Migration
+from tba_storage_digital_credential.tables import TABLE_MODELS
+
+REVISION = "0e47cb7f-3dd7-5c79-a82a-371198cf5b27"
+
+def upgrade(connection):
+    for model in TABLE_MODELS:
+        model.__table__.create(bind=connection, checkfirst=True)
+
+def downgrade(connection):
+    for model in reversed(TABLE_MODELS):
+        model.__table__.drop(bind=connection, checkfirst=True)
+
+MIGRATION = Migration(
+    component="tigrbl.identity.storage.digital-credential",
+    revision=REVISION,
+    parents=(),
+    kind="standard",
+    reversible=True,
+    upgrade=upgrade,
+    downgrade=downgrade,
+)

tba_storage_digital_credential/tables/__init__.py

@@ -0,0 +1,25 @@
+"""Owned mapped-table inventory."""
+
+from .credential_ecosystem_registry import CredentialIssuer, CredentialConfiguration, WalletRegistration, WalletInstance, WalletAttestation, WalletKeyBinding
+from .credential_issuance_state import CredentialOffer, CredentialIssuanceTransaction, CredentialDeferredTransaction, CredentialNotification, CredentialStatusList, CredentialStatusEntry, CredentialStatusPublication
+
+TABLE_MODELS = (
+    CredentialIssuer,
+    CredentialConfiguration,
+    WalletRegistration,
+    WalletInstance,
+    WalletAttestation,
+    WalletKeyBinding,
+    CredentialOffer,
+    CredentialIssuanceTransaction,
+    CredentialDeferredTransaction,
+    CredentialNotification,
+    CredentialStatusList,
+    CredentialStatusEntry,
+    CredentialStatusPublication,
+)
+TABLE_MODEL_BY_NAME = {model.__name__: model for model in TABLE_MODELS}
+TABLE_MODEL_BY_TABLENAME = {model.__tablename__: model for model in TABLE_MODELS}
+__all__ = [model.__name__ for model in TABLE_MODELS] + [
+    "TABLE_MODELS", "TABLE_MODEL_BY_NAME", "TABLE_MODEL_BY_TABLENAME",
+]

tba_storage_digital_credential/tables/credential_ecosystem_registry.py

@@ -0,0 +1,119 @@
+"""Durable credential issuer, configuration, and wallet registry state."""
+
+from __future__ import annotations
+import datetime as dt
+from tba_primitives_identity.orm import (
+    Boolean,
+    GUIDPk,
+    JSON,
+    Mapped,
+    RestOltpTable,
+    S,
+    String,
+    TZDateTime,
+    Timestamped,
+    acol,
+)
+
+
+class CredentialIssuer(RestOltpTable, GUIDPk, Timestamped):
+    __tablename__ = "credential_issuers"
+    __table_args__ = ({"schema": "authn"},)
+    issuer: Mapped[str] = acol(
+        storage=S(String(1000), nullable=False, unique=True, index=True)
+    )
+    status: Mapped[str] = acol(
+        storage=S(String(32), nullable=False, default="active", index=True)
+    )
+    metadata_document: Mapped[dict | None] = acol(storage=S(JSON, nullable=True))
+
+
+class CredentialConfiguration(RestOltpTable, GUIDPk, Timestamped):
+    __tablename__ = "credential_configurations"
+    __table_args__ = ({"schema": "authn"},)
+    issuer_id: Mapped[str] = acol(storage=S(String(36), nullable=False, index=True))
+    configuration_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, index=True)
+    )
+    format: Mapped[str] = acol(storage=S(String(64), nullable=False, index=True))
+    credential_type: Mapped[str | None] = acol(
+        storage=S(String(255), nullable=True, index=True)
+    )
+    configuration: Mapped[dict] = acol(storage=S(JSON, nullable=False))
+    enabled: Mapped[bool] = acol(
+        storage=S(Boolean, nullable=False, default=True, index=True)
+    )
+
+
+class WalletRegistration(RestOltpTable, GUIDPk, Timestamped):
+    __tablename__ = "wallet_registrations"
+    __table_args__ = ({"schema": "authn"},)
+    wallet_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, unique=True, index=True)
+    )
+    subject_id: Mapped[str | None] = acol(
+        storage=S(String(255), nullable=True, index=True)
+    )
+    status: Mapped[str] = acol(
+        storage=S(String(32), nullable=False, default="active", index=True)
+    )
+    wallet_metadata: Mapped[dict | None] = acol(storage=S(JSON, nullable=True))
+
+
+class WalletInstance(RestOltpTable, GUIDPk, Timestamped):
+    __tablename__ = "wallet_instances"
+    __table_args__ = ({"schema": "authn"},)
+    wallet_id: Mapped[str] = acol(storage=S(String(255), nullable=False, index=True))
+    instance_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, unique=True, index=True)
+    )
+    key_reference: Mapped[str | None] = acol(
+        storage=S(String(255), nullable=True, index=True)
+    )
+    status: Mapped[str] = acol(
+        storage=S(String(32), nullable=False, default="active", index=True)
+    )
+
+
+class WalletAttestation(RestOltpTable, GUIDPk, Timestamped):
+    __tablename__ = "wallet_attestations"
+    __table_args__ = ({"schema": "authn"},)
+    wallet_instance_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, index=True)
+    )
+    profile: Mapped[str] = acol(storage=S(String(255), nullable=False, index=True))
+    evidence_digest: Mapped[str] = acol(
+        storage=S(String(128), nullable=False, index=True)
+    )
+    verification_result: Mapped[str] = acol(
+        storage=S(String(64), nullable=False, index=True)
+    )
+    valid_until: Mapped[dt.datetime | None] = acol(
+        storage=S(TZDateTime, nullable=True, index=True)
+    )
+
+
+class WalletKeyBinding(RestOltpTable, GUIDPk, Timestamped):
+    __tablename__ = "wallet_key_bindings"
+    __table_args__ = ({"schema": "authn"},)
+    wallet_instance_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, index=True)
+    )
+    key_id: Mapped[str] = acol(storage=S(String(255), nullable=False, index=True))
+    binding_kind: Mapped[str] = acol(storage=S(String(64), nullable=False, index=True))
+    valid_from: Mapped[dt.datetime | None] = acol(
+        storage=S(TZDateTime, nullable=True, index=True)
+    )
+    valid_until: Mapped[dt.datetime | None] = acol(
+        storage=S(TZDateTime, nullable=True, index=True)
+    )
+
+
+__all__ = [
+    "CredentialIssuer",
+    "CredentialConfiguration",
+    "WalletRegistration",
+    "WalletInstance",
+    "WalletAttestation",
+    "WalletKeyBinding",
+]

tba_storage_digital_credential/tables/credential_issuance_state.py

@@ -0,0 +1,154 @@
+"""Durable credential offer, issuance, notification, and status state."""
+
+from __future__ import annotations
+import datetime as dt
+from tba_primitives_identity.orm import (
+    Boolean,
+    GUIDPk,
+    JSON,
+    Mapped,
+    RestOltpTable,
+    S,
+    String,
+    TZDateTime,
+    Timestamped,
+    acol,
+)
+
+
+class CredentialOffer(RestOltpTable, GUIDPk, Timestamped):
+    __tablename__ = "credential_offers"
+    __table_args__ = ({"schema": "authn"},)
+    offer_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, unique=True, index=True)
+    )
+    issuer_id: Mapped[str] = acol(storage=S(String(255), nullable=False, index=True))
+    configuration_ids: Mapped[list] = acol(storage=S(JSON, nullable=False))
+    grant_types: Mapped[list | None] = acol(storage=S(JSON, nullable=True))
+    expires_at: Mapped[dt.datetime | None] = acol(
+        storage=S(TZDateTime, nullable=True, index=True)
+    )
+    consumed_at: Mapped[dt.datetime | None] = acol(
+        storage=S(TZDateTime, nullable=True, index=True)
+    )
+
+
+class CredentialIssuanceTransaction(RestOltpTable, GUIDPk, Timestamped):
+    __tablename__ = "credential_issuance_transactions"
+    __table_args__ = ({"schema": "authn"},)
+    transaction_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, unique=True, index=True)
+    )
+    issuer_id: Mapped[str] = acol(storage=S(String(255), nullable=False, index=True))
+    subject_id: Mapped[str | None] = acol(
+        storage=S(String(255), nullable=True, index=True)
+    )
+    wallet_instance_id: Mapped[str | None] = acol(
+        storage=S(String(255), nullable=True, index=True)
+    )
+    configuration_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, index=True)
+    )
+    status: Mapped[str] = acol(
+        storage=S(String(32), nullable=False, default="pending", index=True)
+    )
+    request_digest: Mapped[str | None] = acol(
+        storage=S(String(128), nullable=True, index=True)
+    )
+    result_reference: Mapped[str | None] = acol(storage=S(String(1000), nullable=True))
+    expires_at: Mapped[dt.datetime | None] = acol(
+        storage=S(TZDateTime, nullable=True, index=True)
+    )
+
+
+class CredentialDeferredTransaction(RestOltpTable, GUIDPk, Timestamped):
+    __tablename__ = "credential_deferred_transactions"
+    __table_args__ = ({"schema": "authn"},)
+    transaction_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, unique=True, index=True)
+    )
+    issuance_transaction_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, index=True)
+    )
+    status: Mapped[str] = acol(
+        storage=S(String(32), nullable=False, default="pending", index=True)
+    )
+    interval_seconds: Mapped[str | None] = acol(storage=S(String(16), nullable=True))
+    expires_at: Mapped[dt.datetime | None] = acol(
+        storage=S(TZDateTime, nullable=True, index=True)
+    )
+
+
+class CredentialNotification(RestOltpTable, GUIDPk, Timestamped):
+    __tablename__ = "credential_notifications"
+    __table_args__ = ({"schema": "authn"},)
+    notification_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, unique=True, index=True)
+    )
+    issuance_transaction_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, index=True)
+    )
+    event: Mapped[str] = acol(storage=S(String(64), nullable=False, index=True))
+    description: Mapped[str | None] = acol(storage=S(String(1000), nullable=True))
+    acknowledged: Mapped[bool] = acol(
+        storage=S(Boolean, nullable=False, default=False, index=True)
+    )
+
+
+class CredentialStatusList(RestOltpTable, GUIDPk, Timestamped):
+    __tablename__ = "credential_status_lists"
+    __table_args__ = ({"schema": "authn"},)
+    status_list_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, unique=True, index=True)
+    )
+    issuer_id: Mapped[str] = acol(storage=S(String(255), nullable=False, index=True))
+    purpose: Mapped[str] = acol(storage=S(String(64), nullable=False, index=True))
+    size: Mapped[str] = acol(storage=S(String(32), nullable=False))
+    current_version: Mapped[str] = acol(
+        storage=S(String(64), nullable=False, default="1", index=True)
+    )
+
+
+class CredentialStatusEntry(RestOltpTable, GUIDPk, Timestamped):
+    __tablename__ = "credential_status_entries"
+    __table_args__ = ({"schema": "authn"},)
+    status_list_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, index=True)
+    )
+    credential_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, unique=True, index=True)
+    )
+    status_index: Mapped[str] = acol(storage=S(String(32), nullable=False, index=True))
+    status: Mapped[str] = acol(
+        storage=S(String(32), nullable=False, default="valid", index=True)
+    )
+    changed_at: Mapped[dt.datetime | None] = acol(
+        storage=S(TZDateTime, nullable=True, index=True)
+    )
+
+
+class CredentialStatusPublication(RestOltpTable, GUIDPk, Timestamped):
+    __tablename__ = "credential_status_publications"
+    __table_args__ = ({"schema": "authn"},)
+    status_list_id: Mapped[str] = acol(
+        storage=S(String(255), nullable=False, index=True)
+    )
+    version: Mapped[str] = acol(storage=S(String(64), nullable=False, index=True))
+    artifact_locator: Mapped[str] = acol(storage=S(String(1000), nullable=False))
+    artifact_digest: Mapped[str] = acol(
+        storage=S(String(128), nullable=False, index=True)
+    )
+    published_at: Mapped[dt.datetime | None] = acol(
+        storage=S(TZDateTime, nullable=True, index=True)
+    )
+
+
+__all__ = [
+    "CredentialOffer",
+    "CredentialIssuanceTransaction",
+    "CredentialDeferredTransaction",
+    "CredentialNotification",
+    "CredentialStatusList",
+    "CredentialStatusEntry",
+    "CredentialStatusPublication",
+]

tba_storage_digital_credential-0.4.0.dev2.dist-info/METADATA

@@ -0,0 +1,22 @@
+Metadata-Version: 2.4
+Name: tba-storage-digital-credential
+Version: 0.4.0.dev2
+Summary: Owned digital-credential identity database tables and migrations.
+License: Apache-2.0
+Requires-Python: >=3.10,<3.15
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Requires-Dist: tba-primitives-identity[storage] (>=0.4.0.dev2)
+Requires-Dist: tigrbl (>=0.4.4.dev1,<0.5)
+Requires-Dist: tigrbl-migrations (>=0.4.5.dev4)
+Description-Content-Type: text/markdown
+
+# tba-storage-digital-credential
+
+Owns the `tigrbl.identity.storage.digital-credential` schema component.
+

tba_storage_digital_credential-0.4.0.dev2.dist-info/RECORD

@@ -0,0 +1,13 @@
+tba_storage_digital_credential/__init__.py,sha256=HoJ8HOyxQOG9vvo4LEJPfEUW3IDGqZF6ZIgJQ59tK6Q,366
+tba_storage_digital_credential/component.toml,sha256=u7HXevB7rEN0fjmwXsXNUP6k5Pkbm0cU_ch41vxsKfw,3369
+tba_storage_digital_credential/manifest.py,sha256=bYZmb6ItB8bRxtuCspB1us5eTvB1RqlTedISJZbws_w,325
+tba_storage_digital_credential/migrations/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+tba_storage_digital_credential/migrations/versions/0e47cb7f_3dd7_5c79_a82a_371198cf5b27_initial_schema.py,sha256=ZKbszvGTD9LLusmy3MyzuScZ6wqy5ySzKCXWHIZfXHw,696
+tba_storage_digital_credential/migrations/versions/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+tba_storage_digital_credential/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+tba_storage_digital_credential/tables/__init__.py,sha256=EhAAhNvL8F_Z2FvAqSRwzJ_6oWnxHj6hmfGo19vyhJQ,1059
+tba_storage_digital_credential/tables/credential_ecosystem_registry.py,sha256=4NFm5vu50Dd5niglVz2iguRxVDhAjKRX994QYrLTCIs,4117
+tba_storage_digital_credential/tables/credential_issuance_state.py,sha256=f4zGkY6b5nkSRcWAJi9CnSy5OOW7TMmpnzZfVu2bhqU,5777
+tba_storage_digital_credential-0.4.0.dev2.dist-info/METADATA,sha256=HQ3xdrP45-JIQi8UGswBpDdta3u_uuf2hWrGRaFvz2c,871
+tba_storage_digital_credential-0.4.0.dev2.dist-info/WHEEL,sha256=L-WvLdSBvJWHXv5zrQxDvNRnIgoBzLUpcbuiw19KCuQ,88
+tba_storage_digital_credential-0.4.0.dev2.dist-info/RECORD,,

tba_storage_digital_credential-0.4.0.dev2.dist-info/WHEEL

@@ -0,0 +1,4 @@
+Wheel-Version: 1.0
+Generator: poetry-core 2.5.0
+Root-Is-Purelib: true
+Tag: py3-none-any