e744336385
C-6: ConnectorRuntime enforces capability_mask per operation.
READ-only ACs cannot invoke MUTATE operations (wipe, lock, retire).
C-7: AC validated against database (exists, active, not expired)
before connector invocation.
C-9: Delegated AC capability bounded by delegator's capability.
C-10: Command counter uses atomic SQL increment with limit check.
M-23: expire_stale() uses same atomic SQL pattern.
H-1: Sensitive credential fields hidden from repr/logs via repr=False.
H-2: Stub backend requires ALLOW_STUB_CREDENTIALS=true to activate.
H-3: Kerberos backend raises CredentialResolutionError instead of
returning stub ticket.
H-4: Chronicle INTENT emitted before execution, RESULT after.
H-5: device_id validated as UUID before Graph API URL interpolation.
H-8: ConnectorRuntime enforces governance for all connector invocations.
Signed-off-by: Tyler King <tking@guildhouse.dev>
58 lines
2.8 KiB
Python
58 lines
2.8 KiB
Python
from __future__ import annotations
|
|
|
|
from ._eventloop import AsyncBackend as AsyncBackend
|
|
from ._resources import AsyncResource as AsyncResource
|
|
from ._sockets import ConnectedUDPSocket as ConnectedUDPSocket
|
|
from ._sockets import ConnectedUNIXDatagramSocket as ConnectedUNIXDatagramSocket
|
|
from ._sockets import IPAddressType as IPAddressType
|
|
from ._sockets import IPSockAddrType as IPSockAddrType
|
|
from ._sockets import SocketAttribute as SocketAttribute
|
|
from ._sockets import SocketListener as SocketListener
|
|
from ._sockets import SocketStream as SocketStream
|
|
from ._sockets import UDPPacketType as UDPPacketType
|
|
from ._sockets import UDPSocket as UDPSocket
|
|
from ._sockets import UNIXDatagramPacketType as UNIXDatagramPacketType
|
|
from ._sockets import UNIXDatagramSocket as UNIXDatagramSocket
|
|
from ._sockets import UNIXSocketStream as UNIXSocketStream
|
|
from ._streams import AnyByteReceiveStream as AnyByteReceiveStream
|
|
from ._streams import AnyByteSendStream as AnyByteSendStream
|
|
from ._streams import AnyByteStream as AnyByteStream
|
|
from ._streams import AnyByteStreamConnectable as AnyByteStreamConnectable
|
|
from ._streams import AnyUnreliableByteReceiveStream as AnyUnreliableByteReceiveStream
|
|
from ._streams import AnyUnreliableByteSendStream as AnyUnreliableByteSendStream
|
|
from ._streams import AnyUnreliableByteStream as AnyUnreliableByteStream
|
|
from ._streams import ByteReceiveStream as ByteReceiveStream
|
|
from ._streams import ByteSendStream as ByteSendStream
|
|
from ._streams import ByteStream as ByteStream
|
|
from ._streams import ByteStreamConnectable as ByteStreamConnectable
|
|
from ._streams import Listener as Listener
|
|
from ._streams import ObjectReceiveStream as ObjectReceiveStream
|
|
from ._streams import ObjectSendStream as ObjectSendStream
|
|
from ._streams import ObjectStream as ObjectStream
|
|
from ._streams import ObjectStreamConnectable as ObjectStreamConnectable
|
|
from ._streams import UnreliableObjectReceiveStream as UnreliableObjectReceiveStream
|
|
from ._streams import UnreliableObjectSendStream as UnreliableObjectSendStream
|
|
from ._streams import UnreliableObjectStream as UnreliableObjectStream
|
|
from ._subprocesses import Process as Process
|
|
from ._tasks import TaskGroup as TaskGroup
|
|
from ._tasks import TaskStatus as TaskStatus
|
|
from ._testing import TestRunner as TestRunner
|
|
|
|
# Re-exported here, for backwards compatibility
|
|
# isort: off
|
|
from .._core._synchronization import (
|
|
CapacityLimiter as CapacityLimiter,
|
|
Condition as Condition,
|
|
Event as Event,
|
|
Lock as Lock,
|
|
Semaphore as Semaphore,
|
|
)
|
|
from .._core._tasks import CancelScope as CancelScope
|
|
from ..from_thread import BlockingPortal as BlockingPortal
|
|
|
|
# Re-export imports so they look like they live directly in this package
|
|
for __value in list(locals().values()):
|
|
if getattr(__value, "__module__", "").startswith("anyio.abc."):
|
|
__value.__module__ = __name__
|
|
|
|
del __value
|