C-6: ConnectorRuntime enforces capability_mask per operation.
READ-only ACs cannot invoke MUTATE operations (wipe, lock, retire).
C-7: AC validated against database (exists, active, not expired)
before connector invocation.
C-9: Delegated AC capability bounded by delegator's capability.
C-10: Command counter uses atomic SQL increment with limit check.
M-23: expire_stale() uses same atomic SQL pattern.
H-1: Sensitive credential fields hidden from repr/logs via repr=False.
H-2: Stub backend requires ALLOW_STUB_CREDENTIALS=true to activate.
H-3: Kerberos backend raises CredentialResolutionError instead of
returning stub ticket.
H-4: Chronicle INTENT emitted before execution, RESULT after.
H-5: device_id validated as UUID before Graph API URL interpolation.
H-8: ConnectorRuntime enforces governance for all connector invocations.
Signed-off-by: Tyler King <tking@guildhouse.dev>
162 lines
5.3 KiB
Python
162 lines
5.3 KiB
Python
from collections.abc import Mapping, Sequence
|
|
from typing import (
|
|
Any,
|
|
TypeVar,
|
|
cast,
|
|
overload,
|
|
)
|
|
|
|
from sqlalchemy import util
|
|
from sqlalchemy.engine.cursor import CursorResult
|
|
from sqlalchemy.engine.interfaces import _CoreAnyExecuteParams
|
|
from sqlalchemy.engine.result import Result, ScalarResult, TupleResult
|
|
from sqlalchemy.ext.asyncio import AsyncSession as _AsyncSession
|
|
from sqlalchemy.ext.asyncio.result import _ensure_sync_result
|
|
from sqlalchemy.ext.asyncio.session import _EXECUTE_OPTIONS
|
|
from sqlalchemy.orm._typing import OrmExecuteOptionsParameter
|
|
from sqlalchemy.sql.base import Executable as _Executable
|
|
from sqlalchemy.sql.dml import UpdateBase
|
|
from sqlalchemy.util.concurrency import greenlet_spawn
|
|
from typing_extensions import deprecated
|
|
|
|
from ...orm.session import Session
|
|
from ...sql.base import Executable
|
|
from ...sql.expression import Select, SelectOfScalar
|
|
|
|
_TSelectParam = TypeVar("_TSelectParam", bound=Any)
|
|
|
|
|
|
class AsyncSession(_AsyncSession):
|
|
sync_session_class: type[Session] = Session
|
|
sync_session: Session
|
|
|
|
@overload
|
|
async def exec(
|
|
self,
|
|
statement: Select[_TSelectParam],
|
|
*,
|
|
params: Mapping[str, Any] | Sequence[Mapping[str, Any]] | None = None,
|
|
execution_options: Mapping[str, Any] = util.EMPTY_DICT,
|
|
bind_arguments: dict[str, Any] | None = None,
|
|
_parent_execute_state: Any | None = None,
|
|
_add_event: Any | None = None,
|
|
) -> TupleResult[_TSelectParam]: ...
|
|
|
|
@overload
|
|
async def exec(
|
|
self,
|
|
statement: SelectOfScalar[_TSelectParam],
|
|
*,
|
|
params: Mapping[str, Any] | Sequence[Mapping[str, Any]] | None = None,
|
|
execution_options: Mapping[str, Any] = util.EMPTY_DICT,
|
|
bind_arguments: dict[str, Any] | None = None,
|
|
_parent_execute_state: Any | None = None,
|
|
_add_event: Any | None = None,
|
|
) -> ScalarResult[_TSelectParam]: ...
|
|
|
|
@overload
|
|
async def exec(
|
|
self,
|
|
statement: UpdateBase,
|
|
*,
|
|
params: Mapping[str, Any] | Sequence[Mapping[str, Any]] | None = None,
|
|
execution_options: Mapping[str, Any] = util.EMPTY_DICT,
|
|
bind_arguments: dict[str, Any] | None = None,
|
|
_parent_execute_state: Any | None = None,
|
|
_add_event: Any | None = None,
|
|
) -> CursorResult[Any]: ...
|
|
|
|
async def exec(
|
|
self,
|
|
statement: Select[_TSelectParam]
|
|
| SelectOfScalar[_TSelectParam]
|
|
| Executable[_TSelectParam]
|
|
| UpdateBase,
|
|
*,
|
|
params: Mapping[str, Any] | Sequence[Mapping[str, Any]] | None = None,
|
|
execution_options: Mapping[str, Any] = util.EMPTY_DICT,
|
|
bind_arguments: dict[str, Any] | None = None,
|
|
_parent_execute_state: Any | None = None,
|
|
_add_event: Any | None = None,
|
|
) -> TupleResult[_TSelectParam] | ScalarResult[_TSelectParam] | CursorResult[Any]:
|
|
if execution_options:
|
|
execution_options = util.immutabledict(execution_options).union(
|
|
_EXECUTE_OPTIONS
|
|
)
|
|
else:
|
|
execution_options = _EXECUTE_OPTIONS
|
|
|
|
result = await greenlet_spawn(
|
|
self.sync_session.exec,
|
|
statement,
|
|
params=params,
|
|
execution_options=execution_options,
|
|
bind_arguments=bind_arguments,
|
|
_parent_execute_state=_parent_execute_state,
|
|
_add_event=_add_event,
|
|
)
|
|
result_value = await _ensure_sync_result(
|
|
cast(Result[_TSelectParam], result), self.exec
|
|
)
|
|
return result_value # type: ignore
|
|
|
|
@deprecated(
|
|
"""
|
|
🚨 You probably want to use `session.exec()` instead of `session.execute()`.
|
|
|
|
This is the original SQLAlchemy `session.execute()` method that returns objects
|
|
of type `Row`, and that you have to call `scalars()` to get the model objects.
|
|
|
|
For example:
|
|
|
|
```Python
|
|
result = await session.execute(select(Hero))
|
|
heroes = result.scalars().all()
|
|
```
|
|
|
|
instead you could use `exec()`:
|
|
|
|
```Python
|
|
result = await session.exec(select(Hero))
|
|
heroes = result.all()
|
|
```
|
|
"""
|
|
)
|
|
async def execute(
|
|
self,
|
|
statement: _Executable,
|
|
params: _CoreAnyExecuteParams | None = None,
|
|
*,
|
|
execution_options: OrmExecuteOptionsParameter = util.EMPTY_DICT,
|
|
bind_arguments: dict[str, Any] | None = None,
|
|
_parent_execute_state: Any | None = None,
|
|
_add_event: Any | None = None,
|
|
) -> Result[Any]:
|
|
"""
|
|
🚨 You probably want to use `session.exec()` instead of `session.execute()`.
|
|
|
|
This is the original SQLAlchemy `session.execute()` method that returns objects
|
|
of type `Row`, and that you have to call `scalars()` to get the model objects.
|
|
|
|
For example:
|
|
|
|
```Python
|
|
result = await session.execute(select(Hero))
|
|
heroes = result.scalars().all()
|
|
```
|
|
|
|
instead you could use `exec()`:
|
|
|
|
```Python
|
|
result = await session.exec(select(Hero))
|
|
heroes = result.all()
|
|
```
|
|
"""
|
|
return await super().execute(
|
|
statement,
|
|
params=params,
|
|
execution_options=execution_options,
|
|
bind_arguments=bind_arguments,
|
|
_parent_execute_state=_parent_execute_state,
|
|
_add_event=_add_event,
|
|
)
|