vgi-python 0.44.0__py3-none-any.whl → 0.45.0__py3-none-any.whl

vgi/_test_fixtures/http_server.py

@@ -193,7 +193,7 @@ def main() -> None:
             "--identity",
             envvar="VGI_FIXTURE_IDENTITY",
             help=(
-                "Host vgi_rpc.Identity.v1 with the vgi-rpc conformance fixture policy and its "
+                "Host vgi_rpc.Identity.v2 with the vgi-rpc conformance fixture policy and its "
                 "spoofable X-Conformance-Principal header authentication. Test-only; for "
                 "vgi-rpc-test-hosted --identity."
             ),

vgi/_test_fixtures/identity_fixture.py

@@ -1,6 +1,6 @@
 # Copyright 2025, 2026 Query Farm LLC - https://query.farm
 
-"""Opt the HTTP fixture into ``vgi_rpc.Identity.v1`` with the conformance policy.
+"""Opt the HTTP fixture into ``vgi_rpc.Identity.v2`` with the conformance policy.
 
 Enabled by ``vgi-fixture-http --identity`` (or ``VGI_FIXTURE_IDENTITY=1``) so
 the cross-SDK hosted-protocols group can run its identity cases with

vgi/attach_ticket.py

@@ -3,7 +3,7 @@
 r"""Attach tickets: a user's ATTACH, sealed so a runner can replay it later as that user.
 
 A ticket is the *what* half of an unattended session; a sealed grant
-(``vgi_rpc.Identity.v1`` ``issue_grant``) is the *who*. While the user is
+(``vgi_rpc.Identity.v2`` ``issue_grant``) is the *who*. While the user is
 attached and logged in, the client asks the worker to seal the options it
 attached with -- secret ones included -- into a ticket only this worker can
 open. Later any runner holding the user's grant attaches with the single option
@@ -43,7 +43,6 @@ from __future__ import annotations
 
 import base64
 import dataclasses
-import math
 import os
 import re
 import secrets
@@ -51,6 +50,7 @@ import struct
 import sys
 import time
 from collections.abc import Mapping, Sequence
+from datetime import UTC, datetime
 from typing import TYPE_CHECKING, Annotated, Any, ClassVar, Protocol
 
 import pyarrow as pa
@@ -553,13 +553,20 @@ class AttachTicket(ArrowSerializableDataclass):
 
     Attributes:
         ticket: ``vgia1.`` text. Not a credential, but never logged.
-        expires_at: Unix seconds after which the worker refuses it; ``+inf``
-            when the worker sets no maximum lifetime.
+        expires_at: The UTC instant after which the worker refuses it, carried
+            as ``timestamp[us, tz="UTC"]``; ``None`` (null on the wire) when
+            the worker sets no maximum lifetime. Protocol ``1.0.0`` carried a
+            float64 of unix seconds with ``+inf`` for "no expiry".
 
     """
 
     ticket: str
-    expires_at: float
+    expires_at: Annotated[datetime | None, ArrowType(pa.timestamp("us", tz="UTC"))]
+
+    def __post_init__(self) -> None:
+        """Refuse a naive ``expires_at``, which has no defined instant."""
+        if self.expires_at is not None and (self.expires_at.tzinfo is None or self.expires_at.utcoffset() is None):
+            raise ValueError("AttachTicket.expires_at must be timezone-aware (UTC) or None")
 
 
 class AttachTickets(Protocol):
@@ -571,7 +578,7 @@ class AttachTickets(Protocol):
     """
 
     protocol_name: ClassVar[str] = ATTACH_TICKETS_PROTOCOL_NAME
-    protocol_version: ClassVar[str] = "1.0.0"
+    protocol_version: ClassVar[str] = "2.0.0"
 
     def seal_attach(self, request: SealAttachRequest) -> AttachTicket:
         """Seal the caller's attach of ``request.catalog_name`` into a ticket.
@@ -730,4 +737,6 @@ class AttachTicketsImpl:
             )
         except ValueError as exc:
             raise _invalid_request("seal_attach request is invalid", [("request", str(exc))]) from exc
-        return AttachTicket(ticket=token, expires_at=math.inf if expires_at == 0 else float(expires_at))
+        return AttachTicket(
+            ticket=token, expires_at=None if expires_at == 0 else datetime.fromtimestamp(expires_at, tz=UTC)
+        )

vgi/auth.py

@@ -24,7 +24,7 @@ from typing import TYPE_CHECKING, Any
 
 from vgi_rpc.rpc import AuthContext, CallContext
 
-# ``vgi_rpc.Identity.v1`` lives at the RPC layer as of vgi-rpc 0.46.0 -- it was
+# ``vgi_rpc.Identity.v2`` lives at the RPC layer as of vgi-rpc 0.46.0 -- it was
 # an HTTP JSON route (``POST {prefix}/__introspect_token__``) through 0.45.x,
 # which meant it existed on exactly one transport.  So this is no longer gated
 # on the ``http`` extra.  Still not re-exported by ``vgi_rpc.rpc`` itself, so

vgi/meta_worker.py

@@ -768,7 +768,7 @@ class MetaWorker:
         if len(impls) > 1:
             owners = ", ".join(sorted(owner for _, owner in impls.values()))
             raise ValueError(
-                f"MetaWorker children {owners} each implement {hook}(). vgi_rpc.Identity.v1 is "
+                f"MetaWorker children {owners} each implement {hook}(). vgi_rpc.Identity.v2 is "
                 f"hosted once per process, so at most one child may implement it."
             )
         return next(iter(impls.values()))[0] if impls else None

vgi/rpc_server.py

@@ -16,7 +16,7 @@ What a server hosts, in reflection order:
    the order returned — on **every** transport.
 3. ``vgi_rpc.Reflection.v1`` — on every transport unless ``describe=False``
    (an HTTP operator choice, ``--no-describe``).
-4. ``vgi_rpc.Identity.v1`` — HTTP only, and only when the worker overrides
+4. ``vgi_rpc.Identity.v2`` — HTTP only, and only when the worker overrides
    ``resolve_token`` and/or ``mint_grant`` (or grant keys are configured).
 5. ``vgi.attach_tickets.v1`` — HTTP only, and only when ``VGI_SIGNING_KEY`` is
    configured explicitly *and* the worker can issue grants. See
@@ -57,7 +57,7 @@ here rather than at each call site.
 _TRANSPORTS: frozenset[str] = frozenset({"pipe", "unix", "tcp", "iroh", "http"})
 
 #: Transports that authenticate their callers, and so may host
-#: ``vgi_rpc.Identity.v1``. Identity answers questions about *other*
+#: ``vgi_rpc.Identity.v2``. Identity answers questions about *other*
 #: callers' credentials; on a transport with no caller identity there is no
 #: allowlist to enforce, so it is not hosted there.
 _IDENTITY_TRANSPORTS: frozenset[str] = frozenset({"http"})
@@ -188,7 +188,7 @@ def _validated_hosted_protocols(worker: Worker | MetaWorker, primary: type) -> t
             raise ValueError(
                 f"{owner} entry {index} ({proto.__name__}) is named {name!r}, which claims the reserved "
                 f"{RESERVED_PROTOCOL_PREFIX!r} prefix. Framework protocols are not supplied through this "
-                f"hook: reflection is hosted automatically, and vgi_rpc.Identity.v1 is enabled by "
+                f"hook: reflection is hosted automatically, and vgi_rpc.Identity.v2 is enabled by "
                 f"overriding resolve_token() and/or mint_grant()."
             )
         try:
@@ -216,7 +216,7 @@ def _build_identity(
     introspect_principals: Iterable[str] | None,
     grant_keys: GrantKeys | None = None,
 ) -> IdentityImpl | None:
-    """Build the ``vgi_rpc.Identity.v1`` implementation, or ``None``.
+    """Build the ``vgi_rpc.Identity.v2`` implementation, or ``None``.
 
     ``None`` unless the worker class implements at least one of the two
     methods, and that is the point: ``RpcServer`` then does not host the
@@ -256,7 +256,7 @@ def _build_identity(
         return None
 
     # Not re-exported by ``vgi_rpc.rpc``, so the private module is the only
-    # import path for the ``vgi_rpc.Identity.v1`` implementation helper.
+    # import path for the ``vgi_rpc.Identity.v2`` implementation helper.
     from vgi_rpc.rpc._token_identity import IdentityImpl
 
     return IdentityImpl(
@@ -326,7 +326,7 @@ def _resolve_introspect_principals(explicit: Iterable[str] | None) -> list[str]:
     if not principals:
         sys.stderr.write(
             "Error: this worker implements resolve_token(), which hosts the\n"
-            "  vgi_rpc.Identity.v1 protocol, but no introspector allowlist was\n"
+            "  vgi_rpc.Identity.v2 protocol, but no introspector allowlist was\n"
             "  configured. Set VGI_INTROSPECT_PRINCIPALS (comma-separated) or\n"
             "  pass --introspect-principals.\n"
             "\n"

vgi/serve.py

@@ -276,7 +276,7 @@ def create_app(
             escape, because bytes already uploaded cannot be un-uploaded.
             ``None`` (the default) means no cap.
         introspect_principals: Principals permitted to call
-            ``vgi_rpc.Identity.v1``'s ``introspect_token``.  Only consulted
+            ``vgi_rpc.Identity.v2``'s ``introspect_token``.  Only consulted
             when the worker class overrides ``resolve_token``.  ``None`` reads
             ``VGI_INTROSPECT_PRINCIPALS``.
         grant_keys: Sealed-grant configuration. ``None`` reads

vgi/worker.py

@@ -1540,7 +1540,7 @@ class Worker:
         Each protocol needs a distinct wire name (``protocol_name:
         ClassVar[str]``). Names may not repeat, may not equal the worker's own
         protocol, and may not use the reserved ``vgi_rpc.`` prefix: reflection
-        is hosted automatically and ``vgi_rpc.Identity.v1`` is enabled by
+        is hosted automatically and ``vgi_rpc.Identity.v2`` is enabled by
         overriding [`resolve_token`][vgi.worker.Worker.resolve_token] /
         [`mint_grant`][vgi.worker.Worker.mint_grant]. Violations are a startup
         error naming this method.
@@ -1558,7 +1558,7 @@ class Worker:
     def resolve_token(cls, token: str) -> TokenIdentity | None:
         """Resolve an opaque bearer credential to the identity it authenticates as.
 
-        Override to host ``vgi_rpc.Identity.v1``'s ``introspect_token``,
+        Override to host ``vgi_rpc.Identity.v2``'s ``introspect_token``,
         which a reverse proxy calls when it terminates the only public
         listener and must know *which principal* a credential is before it can
         authorize anything. Until it is overridden the protocol is not hosted
@@ -1625,7 +1625,7 @@ class Worker:
     def mint_grant(cls, principal: str, purpose: str, scopes: list[str], ttl_seconds: int) -> IssuedGrant:
         """Mint a standing delegation credential for *principal*.
 
-        Override to host ``vgi_rpc.Identity.v1``'s ``issue_grant``. Like
+        Override to host ``vgi_rpc.Identity.v2``'s ``issue_grant``. Like
         ``resolve_token``, the method is absent until it is overridden rather
         than hosted-and-refusing, so no worker grows a credential *issuer* by
         upgrading a dependency.
@@ -1668,7 +1668,9 @@ class Worker:
                 never issue a longer one.
 
         Returns:
-            The minted ``IssuedGrant``. ``expires_at`` is a declaration rather
+            The minted ``IssuedGrant``. ``expires_at`` is a timezone-aware UTC
+            ``datetime`` (``timestamp[us, tz="UTC"]`` on the wire, under
+            ``vgi_rpc.Identity.v2``), and a declaration rather
             than an enforcement: the real lifetime lives inside the opaque
             token, so a worker that states one has thought about one.
 

{vgi_python-0.44.0.dist-info → vgi_python-0.45.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: vgi-python
-Version: 0.44.0
+Version: 0.45.0
 Summary: Vector Gateway Interface - Connect DuckDB to external programs via Apache Arrow
 Project-URL: Homepage, https://query.farm
 Project-URL: Repository, https://github.com/Query-farm/vgi-python
@@ -162,7 +162,7 @@ Requires-Dist: httpx2>=2.12.0
 Requires-Dist: platformdirs
 Requires-Dist: pyarrow
 Requires-Dist: typer>=0.9
-Requires-Dist: vgi-rpc>=0.51.1
+Requires-Dist: vgi-rpc>=0.52.0
 Provides-Extra: azure
 Requires-Dist: azure-identity>=1.16.0; extra == 'azure'
 Requires-Dist: pymssql>=2.3.0; extra == 'azure'

{vgi_python-0.44.0.dist-info → vgi_python-0.45.0.dist-info}/RECORD

@@ -6,8 +6,8 @@ vgi/aggregate_function.py,sha256=NYxudbvQ9ZLkP2w5hRdd4YgsGUZ_0cVfqqXnlmJPfls,273
 vgi/argument_spec.py,sha256=SADH97VlFu3asI8CWZ_I7XTuSxwqFciFgdupdAf-tkY,34231
 vgi/arguments.py,sha256=A_k9WLNJbNZD6E8AZt7lTjdlKkcXZA9_2-CTwS6ATtE,72633
 vgi/attach_header.py,sha256=sxpzCOVa5fl_-kQSCZgeUxS5I9Kuv8VCUjAOF5s1pr0,3782
-vgi/attach_ticket.py,sha256=MB0QV4FUYMHhnNIFzRo4zp4_mKJoezu06G8ZwgrgQzo,27623
-vgi/auth.py,sha256=qMhaLlQfn6F_ovMg4vwD8fl55THalWrSQ9A_V8arGDU,5195
+vgi/attach_ticket.py,sha256=mqrtrwzRQnCBFQJkNPadxkLYnzfYo9P9Y48c-I6yhUE,28243
+vgi/auth.py,sha256=KRGFQjYKes4-_kG6jWVIOrMUb9R3_d7ZHGCmVbK0So4,5195
 vgi/cache_control.py,sha256=IyBp9gZTCc4Y-4V7Rs05_o5lSEjbR2jt6cddXPU0dKw,7812
 vgi/copy_from_function.py,sha256=iSkR48b3W9IVQ-HY2I8-5W1QjTtWF7k1GkogHNE7ZMM,7114
 vgi/copy_to_function.py,sha256=8l0v_DyEF1EnFwinStrZDQ-yNFfGJsv3Mr5o2jG30f0,9279
@@ -20,26 +20,26 @@ vgi/function_storage_azure_sql.py,sha256=lALZK6FBU-dW4g-PEMtw-zysEfK1o_NNvTX3r6Y
 vgi/function_storage_cf_do.py,sha256=s5LRBLZPC6XOhLkKiXiF_OhW8GiN5zsZesb6rR_g6wY,29425
 vgi/invocation.py,sha256=GQ82v0TlryS0yNfhDjzBi5vNpRo1ApIYO0GwkUSxx_U,5713
 vgi/logging_config.py,sha256=KlrcX2psl9AZ3F-f8MeVSSr3OVQnoxCGdG2NhSdlQnc,12539
-vgi/meta_worker.py,sha256=jCourpEB__KsGxFwoIlMb8GogILbO-0RaSMBxTEmjoM,36277
+vgi/meta_worker.py,sha256=7AAFLet2Bi3e5JqwtfsCpBp3a0g3ppf87yD_sdaUa2E,36277
 vgi/metadata.py,sha256=M8KZObX1wwCr2lPjgDL0-79gPbeM_NSOIqYCIAAck5M,74719
 vgi/otel.py,sha256=JlUDnk2c0UXSo_j1PJdS67Y--t55sXPg054ADuvHANc,15452
 vgi/profiling.py,sha256=rK7vij3oHhXC3JHI2BsMySsXh7_hrXi0aXpCW8iFSIc,3671
 vgi/protocol.py,sha256=J9vaxstGvxe4Vmlf_Aij9HkabGbdFx_nEsQI_m-V7ak,175438
 vgi/protocol_version.txt,sha256=yJuHwmLp1f_SDnOqx0oXcq3Mn1ohaCzDOtz1CG5f71w,6
 vgi/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
-vgi/rpc_server.py,sha256=C2rux8D50TkTn4DpU2-HlZRg3pB1ujPvTdYlxjOKiyo,16678
+vgi/rpc_server.py,sha256=na6mheP80PFYt6qIPmi9NcMhotLcoTxZfqk3ZfNn1Sk,16678
 vgi/scalar_function.py,sha256=yTPrh7FQni6F6pEanQn70OiXHL2EREWUjliqKWyN7mM,53069
 vgi/schema_path.py,sha256=GVlkZlCUj7GbVhgiocSMC6Ff5iTJhKqiYE62hMIEKiI,2403
 vgi/schema_utils.py,sha256=zQCliUgIpO2u77Mhtgg3OFvOEDNgJopu6kj2fw8YP1I,7945
 vgi/secret_protocol.py,sha256=iCDl7nF7Nb4cJV4vpfbldunTDqDJWzCzS7uCmOACf7U,7151
 vgi/secret_service.py,sha256=r7qCzfnOMirf9wSCUe-mgFe3z6v9_cDRzixuSAZG_bs,8973
-vgi/serve.py,sha256=t4K80p05PCJlLirLdTg5y-bRsnjRdpihqTu-7fBh38U,64641
+vgi/serve.py,sha256=2Xcw3Fj6mV2dcbDzpoW3PmlbjuBB106pJx32LD7R5bQ,64641
 vgi/split_token.py,sha256=tutcksj-hgWrLY7UW3sSqkyoaD-cMqNTOeff40MGl_g,10850
 vgi/table_buffering_function.py,sha256=SI6yLAcs8WBHqS6TeaZ92s-Q6GXn0ReROyQWDujw2iA,19554
 vgi/table_filter_pushdown.py,sha256=4Qo4OAOLjTYQ5pinNTOjLCDnb96OHqpcxJlbSJo3cJU,67144
 vgi/table_function.py,sha256=V_5qdMUQGoORiwF_xj0VhrnlytbUs5mdU7uhA_t8BYM,73638
 vgi/table_in_out_function.py,sha256=IIb9dOW6Dw74PQYg3cQQH5_iDdGLek8cAWZYgvwOu8c,19416
-vgi/worker.py,sha256=j_DNZ6YCu51P0Ibs-iPoF0NKfy0RwmnlLXosJaO037I,264903
+vgi/worker.py,sha256=d9fSt34TkVHcakvKEglR8pswwKwBsUqj-ICbSthDQnY,265039
 vgi/write_results.py,sha256=-OrUcz6E9ahhC_pnKYAwIMR2LpapwQafLC4IOnPTmec,2851
 vgi/_test_fixtures/__init__.py,sha256=xQq-QQLk8USQ6TZHsPiPcZldNNUdcJ2gToXMPGzScLI,444
 vgi/_test_fixtures/attach_options.py,sha256=FPsXGmhA9sU0tkgtHAlSO7kUQgqHsaDwtC8jYNXDHko,12529
@@ -53,8 +53,8 @@ vgi/_test_fixtures/companion.py,sha256=Ya_rg2J4tXOYC7zBFOjTTh-4AYuRhJN5BT4tVZULQ
 vgi/_test_fixtures/copy_from.py,sha256=YAWametIhrKE_K_kRwx37QpKMY0yBWAordE5-cNVn4M,6134
 vgi/_test_fixtures/copy_to.py,sha256=fFHxPYVd0wfAfMEvpeBRijqUasBeoAGREY3kHmm_oK8,9667
 vgi/_test_fixtures/global_functions.py,sha256=G1h0w5o6bHMULDFLZuNjrZVrBbO6Cre6kTqTnQwTFmE,11251
-vgi/_test_fixtures/http_server.py,sha256=uLaNEFuh3iMud6VTLcnXz-pkV5xJ09wC6K2zkBEZ8eM,22008
-vgi/_test_fixtures/identity_fixture.py,sha256=wNTON3wpOGwH7HS9oCPb4Iav7GMYW0NlhtlZF1TL7aY,3318
+vgi/_test_fixtures/http_server.py,sha256=23zmh3vObwHuFUgu--gTdacfufghZLQ_IYen-d-CY6k,22008
+vgi/_test_fixtures/identity_fixture.py,sha256=bMZkYY4tLWceuFmYidfHZaexIcHzPKwxrrqE82z3XO4,3318
 vgi/_test_fixtures/nest_tensor.py,sha256=UjjW9UwipYG3ehQpZOm4hdzsafMyvVc0ZKJCrqiZTPU,24471
 vgi/_test_fixtures/orchard_catalog.py,sha256=8Uv-mKTIgl-OYU9JLgG23owlHGmgniyF2chPoKXGtuI,1643
 vgi/_test_fixtures/secret_cache.py,sha256=su4a90I-YHTfsmVPoJGyycTkEzT7GItreYZEfbXMp2o,9552
@@ -160,8 +160,8 @@ vgi/transactor/_duckdb_compat.py,sha256=sXVZ9JLKAQyGR1BjWczSwdQEavtr-TcZPoVZZnTr
 vgi/transactor/client.py,sha256=7DTeMksogsw6ANjQjGOPpKYrV76rg4_kGjktMJf54jg,4486
 vgi/transactor/protocol.py,sha256=v59IvrKnuvwOXvn_HEcBAbCzDVcx0akgKN0R1mChXg0,5034
 vgi/transactor/server.py,sha256=fJi72oaS8PiOI3rFW0MdetGBFEzFBkLdlDAMmbB50Uw,32663
-vgi_python-0.44.0.dist-info/METADATA,sha256=bAIZI0MpSUx1Y9v-UNNqzxhBvs6FTDK3sDBiAeYVVp0,25953
-vgi_python-0.44.0.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
-vgi_python-0.44.0.dist-info/entry_points.txt,sha256=3Kz1vgodw3pOL_xjtSyDB55-ZRy-U2X-X_Bdr582x0Q,165
-vgi_python-0.44.0.dist-info/licenses/LICENSE,sha256=pbJb4zZasP6n5ifEV81wFu017TarjydaYVmGbHcehtY,6103
-vgi_python-0.44.0.dist-info/RECORD,,
+vgi_python-0.45.0.dist-info/METADATA,sha256=KMk45Pz3EhQ27X54ueT6sNxoGT4Pb-tvnfCRoDnHslU,25953
+vgi_python-0.45.0.dist-info/WHEEL,sha256=W3fkpkm7-wf9vBI5Z-7s0eWkeM-spu78I8Neb98DeEg,87
+vgi_python-0.45.0.dist-info/entry_points.txt,sha256=3Kz1vgodw3pOL_xjtSyDB55-ZRy-U2X-X_Bdr582x0Q,165
+vgi_python-0.45.0.dist-info/licenses/LICENSE,sha256=pbJb4zZasP6n5ifEV81wFu017TarjydaYVmGbHcehtY,6103
+vgi_python-0.45.0.dist-info/RECORD,,