tigrcorn 0.3.16.dev13__tar.gz → 0.3.17.dev1__tar.gz

{tigrcorn-0.3.16.dev13/src/tigrcorn.egg-info → tigrcorn-0.3.17.dev1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: tigrcorn
-Version: 0.3.16.dev13
+Version: 0.3.17.dev1
 Summary: ASGI3 Python web server with built-in HTTP/1.1, HTTP/2, HTTP/3, QUIC, WebSocket, WebTransport, TLS, and certification tooling.
 Author-email: Jacob Stewart <jacob@swarmauri.com>
 License: Apache License
@@ -187,19 +187,19 @@ Classifier: Typing :: Typed
 Requires-Python: <3.15,>=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: tigrcorn-core==0.3.16.dev13
-Requires-Dist: tigrcorn-config==0.3.16.dev13
-Requires-Dist: tigrcorn-asgi==0.3.16.dev13
-Requires-Dist: tigrcorn-contract==0.3.16.dev13
-Requires-Dist: tigrcorn-transports==0.3.16.dev13
-Requires-Dist: tigrcorn-protocols==0.3.16.dev13
-Requires-Dist: tigrcorn-http==0.3.16.dev13
-Requires-Dist: tigrcorn-security==0.3.16.dev13
-Requires-Dist: tigrcorn-runtime==0.3.16.dev13
-Requires-Dist: tigrcorn-static==0.3.16.dev13
-Requires-Dist: tigrcorn-observability==0.3.16.dev13
-Requires-Dist: tigrcorn-compat==0.3.16.dev13
-Requires-Dist: tigrcorn-certification==0.3.16.dev13
+Requires-Dist: tigrcorn-core==0.3.17.dev1
+Requires-Dist: tigrcorn-config==0.3.17.dev1
+Requires-Dist: tigrcorn-asgi==0.3.17.dev1
+Requires-Dist: tigrcorn-contract==0.3.17.dev1
+Requires-Dist: tigrcorn-transports==0.3.17.dev1
+Requires-Dist: tigrcorn-protocols==0.3.17.dev1
+Requires-Dist: tigrcorn-http==0.3.17.dev1
+Requires-Dist: tigrcorn-security==0.3.17.dev1
+Requires-Dist: tigrcorn-runtime==0.3.17.dev1
+Requires-Dist: tigrcorn-static==0.3.17.dev1
+Requires-Dist: tigrcorn-observability==0.3.17.dev1
+Requires-Dist: tigrcorn-compat==0.3.17.dev1
+Requires-Dist: tigrcorn-certification==0.3.17.dev1
 Requires-Dist: tigr-asgi-contract>=0.3.2
 Provides-Extra: tls-x509
 Requires-Dist: cryptography>=46.0.0; extra == "tls-x509"
@@ -820,7 +820,7 @@ print(promotion_report.passed)
 | Lifecycle and embedding contract | [lifecycle and embedded server guide](https://github.com/tigrbl/tigrcorn/blob/master/docs/LIFECYCLE_AND_EMBEDDED_SERVER.md) |
 | Optional dependency truth | [optional dependency surface](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/OPTIONAL_DEPENDENCY_SURFACE.md), [optional dependency surface JSON](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/optional_dependency_surface.current.json) |
 | External evidence inputs | [same-stack replay matrix](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/external_matrix.same_stack_replay.json), [release external matrix](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/external_matrix.release.json), [current-release external matrix](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/external_matrix.current_release.json) |
-| Planning and promotion checkpoints | [Phase 9 implementation plan](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/PHASE9_IMPLEMENTATION_PLAN.md), [Phase 9A promotion contract freeze](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/PHASE9A_PROMOTION_CONTRACT_FREEZE.md) |
+| Planning and promotion checkpoints | [Release certification implementation plan](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/RELEASE_IMPLEMENTATION_PLAN.md), [Promotion contract promotion contract freeze](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/PROMOTION_CONTRACT_PROMOTION_CONTRACT_FREEZE.md) |
 
 ### Current repository claim
 
@@ -859,7 +859,7 @@ Read next:
 - [release gate status](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/RELEASE_GATE_STATUS.md)
 - [strict profile target](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/STRICT_PROFILE_TARGET.md)
 - [flag certification target](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/FLAG_CERTIFICATION_TARGET.md)
-- [Phase 9A promotion contract freeze](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/PHASE9A_PROMOTION_CONTRACT_FREEZE.md)
+- [Promotion contract promotion contract freeze](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/PROMOTION_CONTRACT_PROMOTION_CONTRACT_FREEZE.md)
 
 ## Where to look
 
@@ -873,7 +873,7 @@ Read next:
 | Reviewing the boundary or current scope | [certification boundary](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/CERTIFICATION_BOUNDARY.md) | [boundary non-goals](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/BOUNDARY_NON_GOALS.md) |
 | Comparing Tigrcorn with peer servers | [RFC comparison](https://github.com/tigrbl/tigrcorn/blob/master/docs/comp/rfc.md) | [CLI comparison](https://github.com/tigrbl/tigrcorn/blob/master/docs/comp/cli.md), [operations comparison](https://github.com/tigrbl/tigrcorn/blob/master/docs/comp/ops.md), [out-of-bound comparison](https://github.com/tigrbl/tigrcorn/blob/master/docs/comp/oob.md) |
 | Writing or maintaining docs | [authoring guide](https://github.com/tigrbl/tigrcorn/blob/master/docs/gov/authoring.md) | [`CONTRIBUTING.md`](https://github.com/tigrbl/tigrcorn/blob/master/CONTRIBUTING.md), [tree rules](https://github.com/tigrbl/tigrcorn/blob/master/docs/gov/tree.md), [mutability rules](https://github.com/tigrbl/tigrcorn/blob/master/docs/gov/mut.md) |
-| Working on release or promotion | [release workflow guide](https://github.com/tigrbl/tigrcorn/blob/master/docs/gov/release.md) | [Phase 9A promotion contract freeze](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/PHASE9A_PROMOTION_CONTRACT_FREEZE.md) |
+| Working on release or promotion | [release workflow guide](https://github.com/tigrbl/tigrcorn/blob/master/docs/gov/release.md) | [Promotion contract promotion contract freeze](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/PROMOTION_CONTRACT_PROMOTION_CONTRACT_FREEZE.md) |
 
 ## Contributing, conduct, and community norms
 

{tigrcorn-0.3.16.dev13 → tigrcorn-0.3.17.dev1}/PYPI_README.md

@@ -580,7 +580,7 @@ print(promotion_report.passed)
 | Lifecycle and embedding contract | [lifecycle and embedded server guide](https://github.com/tigrbl/tigrcorn/blob/master/docs/LIFECYCLE_AND_EMBEDDED_SERVER.md) |
 | Optional dependency truth | [optional dependency surface](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/OPTIONAL_DEPENDENCY_SURFACE.md), [optional dependency surface JSON](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/optional_dependency_surface.current.json) |
 | External evidence inputs | [same-stack replay matrix](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/external_matrix.same_stack_replay.json), [release external matrix](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/external_matrix.release.json), [current-release external matrix](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/external_matrix.current_release.json) |
-| Planning and promotion checkpoints | [Phase 9 implementation plan](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/PHASE9_IMPLEMENTATION_PLAN.md), [Phase 9A promotion contract freeze](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/PHASE9A_PROMOTION_CONTRACT_FREEZE.md) |
+| Planning and promotion checkpoints | [Release certification implementation plan](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/RELEASE_IMPLEMENTATION_PLAN.md), [Promotion contract promotion contract freeze](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/PROMOTION_CONTRACT_PROMOTION_CONTRACT_FREEZE.md) |
 
 ### Current repository claim
 
@@ -619,7 +619,7 @@ Read next:
 - [release gate status](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/RELEASE_GATE_STATUS.md)
 - [strict profile target](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/STRICT_PROFILE_TARGET.md)
 - [flag certification target](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/FLAG_CERTIFICATION_TARGET.md)
-- [Phase 9A promotion contract freeze](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/PHASE9A_PROMOTION_CONTRACT_FREEZE.md)
+- [Promotion contract promotion contract freeze](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/PROMOTION_CONTRACT_PROMOTION_CONTRACT_FREEZE.md)
 
 ## Where to look
 
@@ -633,7 +633,7 @@ Read next:
 | Reviewing the boundary or current scope | [certification boundary](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/CERTIFICATION_BOUNDARY.md) | [boundary non-goals](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/BOUNDARY_NON_GOALS.md) |
 | Comparing Tigrcorn with peer servers | [RFC comparison](https://github.com/tigrbl/tigrcorn/blob/master/docs/comp/rfc.md) | [CLI comparison](https://github.com/tigrbl/tigrcorn/blob/master/docs/comp/cli.md), [operations comparison](https://github.com/tigrbl/tigrcorn/blob/master/docs/comp/ops.md), [out-of-bound comparison](https://github.com/tigrbl/tigrcorn/blob/master/docs/comp/oob.md) |
 | Writing or maintaining docs | [authoring guide](https://github.com/tigrbl/tigrcorn/blob/master/docs/gov/authoring.md) | [`CONTRIBUTING.md`](https://github.com/tigrbl/tigrcorn/blob/master/CONTRIBUTING.md), [tree rules](https://github.com/tigrbl/tigrcorn/blob/master/docs/gov/tree.md), [mutability rules](https://github.com/tigrbl/tigrcorn/blob/master/docs/gov/mut.md) |
-| Working on release or promotion | [release workflow guide](https://github.com/tigrbl/tigrcorn/blob/master/docs/gov/release.md) | [Phase 9A promotion contract freeze](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/PHASE9A_PROMOTION_CONTRACT_FREEZE.md) |
+| Working on release or promotion | [release workflow guide](https://github.com/tigrbl/tigrcorn/blob/master/docs/gov/release.md) | [Promotion contract promotion contract freeze](https://github.com/tigrbl/tigrcorn/blob/master/docs/review/conformance/PROMOTION_CONTRACT_PROMOTION_CONTRACT_FREEZE.md) |
 
 ## Contributing, conduct, and community norms
 

{tigrcorn-0.3.16.dev13 → tigrcorn-0.3.17.dev1}/README.md

@@ -580,7 +580,7 @@ print(promotion_report.passed)
 | Lifecycle and embedding contract | [lifecycle and embedded server guide](docs/LIFECYCLE_AND_EMBEDDED_SERVER.md) |
 | Optional dependency truth | [optional dependency surface](docs/review/conformance/OPTIONAL_DEPENDENCY_SURFACE.md), [optional dependency surface JSON](docs/review/conformance/optional_dependency_surface.current.json) |
 | External evidence inputs | [same-stack replay matrix](docs/review/conformance/external_matrix.same_stack_replay.json), [release external matrix](docs/review/conformance/external_matrix.release.json), [current-release external matrix](docs/review/conformance/external_matrix.current_release.json) |
-| Planning and promotion checkpoints | [Phase 9 implementation plan](docs/review/conformance/PHASE9_IMPLEMENTATION_PLAN.md), [Phase 9 implementation JSON](docs/review/conformance/phase9_implementation_plan.current.json), [Phase 9A promotion contract freeze](docs/review/conformance/PHASE9A_PROMOTION_CONTRACT_FREEZE.md), [Phase 9A promotion JSON](docs/review/conformance/phase9a_promotion_contract.current.json) |
+| Planning and promotion checkpoints | [Release certification implementation plan](docs/review/conformance/RELEASE_IMPLEMENTATION_PLAN.md), [Release certification implementation JSON](docs/review/conformance/release_implementation_plan.current.json), [Promotion contract promotion contract freeze](docs/review/conformance/PROMOTION_CONTRACT_PROMOTION_CONTRACT_FREEZE.md), [Promotion contract promotion JSON](docs/review/conformance/promotion_contract_promotion_contract.current.json) |
 
 ### Current repository claim
 
@@ -619,7 +619,7 @@ Read next:
 - [release gate status](docs/review/conformance/RELEASE_GATE_STATUS.md)
 - [strict profile target](docs/review/conformance/STRICT_PROFILE_TARGET.md)
 - [flag certification target](docs/review/conformance/FLAG_CERTIFICATION_TARGET.md)
-- [Phase 9A promotion contract freeze](docs/review/conformance/PHASE9A_PROMOTION_CONTRACT_FREEZE.md)
+- [Promotion contract promotion contract freeze](docs/review/conformance/PROMOTION_CONTRACT_PROMOTION_CONTRACT_FREEZE.md)
 
 ## Where to look
 
@@ -633,7 +633,7 @@ Read next:
 | Reviewing the boundary or current scope | [certification boundary](docs/review/conformance/CERTIFICATION_BOUNDARY.md) | [boundary non-goals](docs/review/conformance/BOUNDARY_NON_GOALS.md) |
 | Comparing Tigrcorn with peer servers | [RFC comparison](docs/comp/rfc.md) | [CLI comparison](docs/comp/cli.md), [operations comparison](docs/comp/ops.md), [out-of-bound comparison](docs/comp/oob.md) |
 | Writing or maintaining docs | [authoring guide](docs/gov/authoring.md) | [`CONTRIBUTING.md`](CONTRIBUTING.md), [tree rules](docs/gov/tree.md), [mutability rules](docs/gov/mut.md) |
-| Working on release or promotion | [release workflow guide](docs/gov/release.md) | [Phase 9A promotion contract freeze](docs/review/conformance/PHASE9A_PROMOTION_CONTRACT_FREEZE.md) |
+| Working on release or promotion | [release workflow guide](docs/gov/release.md) | [Promotion contract promotion contract freeze](docs/review/conformance/PROMOTION_CONTRACT_PROMOTION_CONTRACT_FREEZE.md) |
 
 ## Contributing, conduct, and community norms
 

{tigrcorn-0.3.16.dev13 → tigrcorn-0.3.17.dev1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "tigrcorn"
-version = "0.3.16.dev13"
+version = "0.3.17.dev1"
 description = "ASGI3 Python web server with built-in HTTP/1.1, HTTP/2, HTTP/3, QUIC, WebSocket, WebTransport, TLS, and certification tooling."
 readme = "PYPI_README.md"
 requires-python = ">=3.10,<3.15"
@@ -32,19 +32,19 @@ classifiers = [
   "Typing :: Typed",
 ]
 dependencies = [
-    "tigrcorn-core==0.3.16.dev13",
-    "tigrcorn-config==0.3.16.dev13",
-    "tigrcorn-asgi==0.3.16.dev13",
-    "tigrcorn-contract==0.3.16.dev13",
-    "tigrcorn-transports==0.3.16.dev13",
-    "tigrcorn-protocols==0.3.16.dev13",
-    "tigrcorn-http==0.3.16.dev13",
-    "tigrcorn-security==0.3.16.dev13",
-    "tigrcorn-runtime==0.3.16.dev13",
-    "tigrcorn-static==0.3.16.dev13",
-    "tigrcorn-observability==0.3.16.dev13",
-    "tigrcorn-compat==0.3.16.dev13",
-    "tigrcorn-certification==0.3.16.dev13",
+    "tigrcorn-core==0.3.17.dev1",
+    "tigrcorn-config==0.3.17.dev1",
+    "tigrcorn-asgi==0.3.17.dev1",
+    "tigrcorn-contract==0.3.17.dev1",
+    "tigrcorn-transports==0.3.17.dev1",
+    "tigrcorn-protocols==0.3.17.dev1",
+    "tigrcorn-http==0.3.17.dev1",
+    "tigrcorn-security==0.3.17.dev1",
+    "tigrcorn-runtime==0.3.17.dev1",
+    "tigrcorn-static==0.3.17.dev1",
+    "tigrcorn-observability==0.3.17.dev1",
+    "tigrcorn-compat==0.3.17.dev1",
+    "tigrcorn-certification==0.3.17.dev1",
     "tigr-asgi-contract>=0.3.2",
 ]
 
@@ -103,6 +103,7 @@ license-files = ["LICENSE"]
 
 [tool.setuptools.package-data]
 tigrcorn = ["py.typed", "profiles/*.profile.json", "profiles/README.md"]
+"tigrcorn.capabilities.schema" = ["*.schema.json"]
 
 [tool.setuptools.packages.find]
 where = ["src"]

{tigrcorn-0.3.16.dev13 → tigrcorn-0.3.17.dev1}/src/tigrcorn/__init__.py

@@ -1,3 +1,5 @@
+from importlib import import_module
+
 from .version import __version__
 from ._workspace import ensure_workspace_package_paths
 
@@ -5,6 +7,7 @@ ensure_workspace_package_paths()
 
 __all__ = [
     "__version__",
+    "capabilities",
     "run",
     "serve",
     "serve_import_string",
@@ -17,6 +20,8 @@ __all__ = [
 
 
 def __getattr__(name: str):
+    if name == "capabilities":
+        return import_module(".capabilities", __name__)
     if name in {"run", "serve", "serve_import_string"}:
         from .api import run, serve, serve_import_string
 

tigrcorn-0.3.17.dev1/src/tigrcorn/capabilities/__init__.py

@@ -0,0 +1,15 @@
+from __future__ import annotations
+
+from .export import capability_ids, export, require_supported
+from .model import CapabilityState, UnsupportedCapabilityError
+from .schema import load_schema, read_schema_text
+
+__all__ = [
+    "CapabilityState",
+    "UnsupportedCapabilityError",
+    "capability_ids",
+    "export",
+    "load_schema",
+    "read_schema_text",
+    "require_supported",
+]

tigrcorn-0.3.17.dev1/src/tigrcorn/capabilities/export.py

@@ -0,0 +1,233 @@
+from __future__ import annotations
+
+from importlib import util as importlib_util
+from typing import Any, Iterable, Mapping
+
+from tigrcorn_config.profiles import list_blessed_profiles, resolve_effective_profile_mapping
+from tigrcorn_core.constants import SUPPORTED_RUNTIMES
+from tigrcorn_transports.registry import TRANSPORTS
+
+from .model import (
+    CapabilityDefinition,
+    CapabilityExport,
+    CapabilityRecord,
+    CapabilityState,
+    UnsupportedCapabilityError,
+)
+
+
+SCHEMA_VERSION = "1.0"
+REGISTRY_NAME = "tigrcorn.runtime-capabilities"
+
+
+_CATALOG: tuple[CapabilityDefinition, ...] = (
+    CapabilityDefinition("certification.deployment_profiles", "certification", "Deployment profile registry", True, certifiable=True, certified=True),
+    CapabilityDefinition("certification.release_validation", "certification", "Release validation tooling", True, certifiable=True, certified=False),
+    CapabilityDefinition("certification.ssot_boundary", "certification", "SSOT boundary evidence", True, certifiable=True, certified=False),
+    CapabilityDefinition("delivery.static", "delivery", "Static delivery", True, certifiable=True, certified=False),
+    CapabilityDefinition("observability.metrics", "observability", "Metrics export", True, certifiable=True, certified=False),
+    CapabilityDefinition("observability.otel", "observability", "OpenTelemetry export", True, certifiable=True, certified=False),
+    CapabilityDefinition("observability.statsd", "observability", "StatsD export", True, certifiable=True, certified=False),
+    CapabilityDefinition("observability.structured_logging", "observability", "Structured logging", True, certifiable=True, certified=False),
+    CapabilityDefinition("protocol.http1", "protocol", "HTTP/1.1", True, certifiable=True, certified=True),
+    CapabilityDefinition("protocol.http2", "protocol", "HTTP/2", importlib_util.find_spec("h2") is not None, certifiable=True, certified=True, optional=True),
+    CapabilityDefinition("protocol.http3", "protocol", "HTTP/3", importlib_util.find_spec("aioquic") is not None, certifiable=True, certified=True, optional=True),
+    CapabilityDefinition("protocol.lifespan", "protocol", "ASGI lifespan", True, certifiable=True, certified=True),
+    CapabilityDefinition("protocol.quic", "protocol", "QUIC protocol", importlib_util.find_spec("aioquic") is not None, certifiable=True, certified=True, optional=True),
+    CapabilityDefinition("protocol.websocket", "protocol", "WebSocket", importlib_util.find_spec("websockets") is not None or importlib_util.find_spec("wsproto") is not None, certifiable=True, certified=True, optional=True),
+    CapabilityDefinition("protocol.webtransport", "protocol", "WebTransport", True, certifiable=True, certified=False),
+    CapabilityDefinition("runtime.embedded", "runtime", "Embedded runtime API", True, certifiable=True, certified=False),
+    CapabilityDefinition("runtime.lifecycle", "runtime", "Lifecycle management", True, certifiable=True, certified=True),
+    CapabilityDefinition("runtime.worker_pool", "runtime", "Worker process management", True, certifiable=True, certified=False),
+    CapabilityDefinition("tls.alpn", "tls", "ALPN negotiation", True, certifiable=True, certified=True),
+    CapabilityDefinition("tls.crl", "tls", "CRL revocation handling", True, certifiable=True, certified=True),
+    CapabilityDefinition("tls.mtls", "tls", "Mutual TLS", True, certifiable=True, certified=False),
+    CapabilityDefinition("tls.ocsp", "tls", "OCSP revocation handling", True, certifiable=True, certified=True),
+    CapabilityDefinition("tls.tls13", "tls", "TLS 1.3", True, certifiable=True, certified=True),
+    CapabilityDefinition("tls.x509", "tls", "X.509 path validation", True, certifiable=True, certified=True),
+    CapabilityDefinition("transport.inproc", "transport", "In-process transport", "inproc" in TRANSPORTS, certifiable=True, certified=False),
+    CapabilityDefinition("transport.pipe", "transport", "Pipe transport", "pipe" in TRANSPORTS, certifiable=True, certified=False),
+    CapabilityDefinition("transport.quic", "transport", "QUIC transport", "quic" in TRANSPORTS and importlib_util.find_spec("aioquic") is not None, certifiable=True, certified=True, optional=True),
+    CapabilityDefinition("transport.tcp", "transport", "TCP transport", "tcp" in TRANSPORTS, certifiable=True, certified=True),
+    CapabilityDefinition("transport.udp", "transport", "UDP transport", "udp" in TRANSPORTS, certifiable=True, certified=False),
+    CapabilityDefinition("transport.unix", "transport", "Unix domain socket transport", "unix" in TRANSPORTS, certifiable=True, certified=False),
+)
+
+
+_KNOWN_IDS = frozenset(item.id for item in _CATALOG)
+
+
+def _normalize_profile(profile: str | None) -> str:
+    return (profile or "default").strip().lower() or "default"
+
+
+def _iter_mapping_values(value: Any) -> Iterable[Any]:
+    if isinstance(value, Mapping):
+        yield value
+        for item in value.values():
+            yield from _iter_mapping_values(item)
+    elif isinstance(value, list | tuple):
+        for item in value:
+            yield from _iter_mapping_values(item)
+
+
+def _configured_capability_ids(config: Mapping[str, Any]) -> set[str]:
+    configured = {
+        "certification.deployment_profiles",
+        "certification.release_validation",
+        "certification.ssot_boundary",
+        "protocol.lifespan",
+        "runtime.embedded",
+        "runtime.lifecycle",
+    }
+
+    app = config.get("app")
+    if isinstance(app, Mapping):
+        runtime = app.get("runtime")
+        if runtime in SUPPORTED_RUNTIMES:
+            configured.add("runtime.lifecycle")
+
+    http = config.get("http")
+    if isinstance(http, Mapping):
+        for version in http.get("http_versions") or ():
+            if version == "1.1":
+                configured.add("protocol.http1")
+            elif str(version) == "2":
+                configured.add("protocol.http2")
+            elif str(version) == "3":
+                configured.add("protocol.http3")
+                configured.add("protocol.quic")
+                configured.add("transport.quic")
+        if http.get("alt_svc_auto") or http.get("alt_svc_headers"):
+            configured.add("protocol.http3")
+        if http.get("content_codings"):
+            configured.add("delivery.static")
+
+    websocket = config.get("websocket")
+    if isinstance(websocket, Mapping) and websocket.get("enabled"):
+        configured.add("protocol.websocket")
+
+    static = config.get("static")
+    if isinstance(static, Mapping) and (static.get("route") or static.get("mount")):
+        configured.add("delivery.static")
+
+    tls = config.get("tls")
+    if isinstance(tls, Mapping):
+        if tls.get("certfile") or tls.get("keyfile") or tls.get("alpn_protocols"):
+            configured.update({"tls.tls13", "tls.alpn", "tls.x509"})
+        if tls.get("ocsp_mode") and tls.get("ocsp_mode") != "off":
+            configured.add("tls.ocsp")
+        if tls.get("crl_mode") and tls.get("crl_mode") != "off":
+            configured.add("tls.crl")
+        if tls.get("require_client_cert"):
+            configured.add("tls.mtls")
+
+    observability = config.get("observability")
+    if isinstance(observability, Mapping):
+        if observability.get("metrics"):
+            configured.add("observability.metrics")
+        if observability.get("structured_log"):
+            configured.add("observability.structured_logging")
+        if observability.get("otel_endpoint"):
+            configured.add("observability.otel")
+        if observability.get("statsd_host"):
+            configured.add("observability.statsd")
+
+    for value in _iter_mapping_values(config.get("listeners")):
+        if not isinstance(value, Mapping):
+            continue
+        kind = value.get("kind")
+        if isinstance(kind, str):
+            configured.add(f"transport.{kind}")
+        for protocol in value.get("protocols") or ():
+            if protocol == "quic":
+                configured.update({"protocol.quic", "transport.quic"})
+            elif protocol in {"http1", "http2", "http3", "websocket", "webtransport"}:
+                configured.add(f"protocol.{protocol}")
+        for version in value.get("http_versions") or ():
+            if version == "1.1":
+                configured.add("protocol.http1")
+            elif str(version) == "2":
+                configured.add("protocol.http2")
+            elif str(version) == "3":
+                configured.update({"protocol.http3", "protocol.quic", "transport.quic"})
+        if value.get("websocket"):
+            configured.add("protocol.websocket")
+        if value.get("alpn_protocols"):
+            configured.add("tls.alpn")
+
+    return configured
+
+
+def _record(definition: CapabilityDefinition, configured_ids: set[str]) -> CapabilityRecord:
+    configured = definition.id in configured_ids
+    enabled = definition.compiled and configured
+    certified = enabled and definition.certified
+    if not definition.compiled:
+        state = CapabilityState.UNAVAILABLE if definition.optional else CapabilityState.UNSUPPORTED
+        reason = "optional dependency is not available" if definition.optional else "capability is not compiled into this distribution"
+    elif certified:
+        state = CapabilityState.CERTIFIED
+        reason = "configured and certified for the selected profile"
+    elif enabled:
+        state = CapabilityState.ENABLED
+        reason = "configured but not certified for the selected profile"
+    elif configured:
+        state = CapabilityState.CONFIGURED
+        reason = "configured but unavailable"
+    else:
+        state = CapabilityState.COMPILED
+        reason = "compiled into the distribution but not selected by the profile"
+    return CapabilityRecord(
+        id=definition.id,
+        domain=definition.domain,
+        name=definition.name,
+        state=state,
+        compiled=definition.compiled,
+        configured=configured,
+        enabled=enabled,
+        certified=certified,
+        certifiable=definition.certifiable,
+        reason=reason,
+    )
+
+
+def capability_ids() -> tuple[str, ...]:
+    return tuple(sorted(_KNOWN_IDS))
+
+
+def require_supported(required_capabilities: Iterable[str], *, profile: str = "default") -> None:
+    payload = export(profile=profile)
+    records = {item["id"]: item for item in payload["capabilities"]}
+    errors: list[str] = []
+    for capability_id in required_capabilities:
+        record = records.get(capability_id)
+        if record is None:
+            errors.append(f"unsupported capability requirement: {capability_id}")
+        elif not record["enabled"]:
+            errors.append(f"capability is not enabled for profile {profile!r}: {capability_id}")
+    if errors:
+        raise UnsupportedCapabilityError("; ".join(errors))
+
+
+def export(*, profile: str = "default") -> dict[str, Any]:
+    profile_name = _normalize_profile(profile)
+    if profile_name not in list_blessed_profiles():
+        raise ValueError(f"unknown blessed profile: {profile_name!r}")
+
+    config = resolve_effective_profile_mapping(profile_name)
+    configured_ids = _configured_capability_ids(config)
+    profile_errors = tuple(
+        f"configured capability is not supported: {capability_id}"
+        for capability_id in sorted(configured_ids - _KNOWN_IDS)
+    )
+    records = tuple(_record(definition, configured_ids) for definition in sorted(_CATALOG, key=lambda item: item.id))
+    document = CapabilityExport(
+        schema_version=SCHEMA_VERSION,
+        registry=REGISTRY_NAME,
+        profile=profile_name,
+        profile_valid=not profile_errors,
+        profile_errors=profile_errors,
+        capabilities=records,
+    )
+    return document.as_dict()

tigrcorn-0.3.17.dev1/src/tigrcorn/capabilities/model.py

@@ -0,0 +1,77 @@
+from __future__ import annotations
+
+from dataclasses import dataclass
+from enum import Enum
+from typing import Any
+
+
+class CapabilityState(str, Enum):
+    COMPILED = "compiled"
+    CONFIGURED = "configured"
+    ENABLED = "enabled"
+    CERTIFIED = "certified"
+    UNAVAILABLE = "unavailable"
+    UNSUPPORTED = "unsupported"
+
+
+class UnsupportedCapabilityError(ValueError):
+    """Raised when a required capability cannot be satisfied."""
+
+
+@dataclass(frozen=True, slots=True)
+class CapabilityDefinition:
+    id: str
+    domain: str
+    name: str
+    compiled: bool
+    certifiable: bool = False
+    certified: bool = False
+    optional: bool = False
+
+
+@dataclass(frozen=True, slots=True)
+class CapabilityRecord:
+    id: str
+    domain: str
+    name: str
+    state: CapabilityState
+    compiled: bool
+    configured: bool
+    enabled: bool
+    certified: bool
+    certifiable: bool
+    reason: str
+
+    def as_dict(self) -> dict[str, Any]:
+        return {
+            "id": self.id,
+            "domain": self.domain,
+            "name": self.name,
+            "state": self.state.value,
+            "compiled": self.compiled,
+            "configured": self.configured,
+            "enabled": self.enabled,
+            "certified": self.certified,
+            "certifiable": self.certifiable,
+            "reason": self.reason,
+        }
+
+
+@dataclass(frozen=True, slots=True)
+class CapabilityExport:
+    schema_version: str
+    registry: str
+    profile: str
+    profile_valid: bool
+    profile_errors: tuple[str, ...]
+    capabilities: tuple[CapabilityRecord, ...]
+
+    def as_dict(self) -> dict[str, Any]:
+        return {
+            "schema_version": self.schema_version,
+            "registry": self.registry,
+            "profile": self.profile,
+            "profile_valid": self.profile_valid,
+            "profile_errors": list(self.profile_errors),
+            "capabilities": [record.as_dict() for record in self.capabilities],
+        }

tigrcorn-0.3.17.dev1/src/tigrcorn/capabilities/schema/__init__.py

@@ -0,0 +1,19 @@
+from __future__ import annotations
+
+from importlib import resources
+from typing import Any
+import json
+
+
+SCHEMA_NAME = "runtime-capability-registry.schema.json"
+
+
+def read_schema_text() -> str:
+    return resources.files(__package__).joinpath(SCHEMA_NAME).read_text(encoding="utf-8")
+
+
+def load_schema() -> dict[str, Any]:
+    payload = json.loads(read_schema_text())
+    if not isinstance(payload, dict):
+        raise ValueError(f"{SCHEMA_NAME} did not contain a JSON object")
+    return payload