cbc9ad73f7
Reference implementation of GCAP-SPEC-SHELLBOUND-BROKER-0001
in FastAPI. Designed for ISVs and enterprises implementing
the governed shell authorization protocol.
Architecture:
FastAPI + SQLModel + Pydantic + async SQLite
Single container deployment: Dockerfile included
OpenAPI schema at /docs is the machine-readable GSAP contract
Broker Interface (§5):
POST /governance/authorize/ — Issue AC
GET /governance/authorize/{p}/ — Poll elevation
POST /governance/complete/ — Receive CR
GET /governance/session/{id}/ — View chain of custody
POST /governance/elevate/ — JIT elevation
GET /governance/drivers/ — List drivers
Identity Driver Interface (§2.2):
IdentityDriver — abstract base (ISV extension point)
KeycloakDriver — Keycloak implementation
DriverRegistry — driver lookup and registration
Chronicle integration (§1.4):
Optional CloudEvents emission via CHRONICLE_WEBHOOK_URL
Forgejo push event format for receiver compatibility
Models:
Pydantic schemas for AC, CR, Principal, Accord, Operation
SQLModel DB models for persistence
Tests: 6 async tests including full AC→CR cycle
695 lines across 27 files.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
21 lines
741 B
Python
21 lines
741 B
Python
"""Driver Registry — GSAP §2.5."""
|
|
from .base import IdentityDriver
|
|
from .keycloak import KeycloakDriver
|
|
|
|
_DRIVERS: dict[str, type[IdentityDriver]] = {"keycloak": KeycloakDriver}
|
|
|
|
class DriverRegistry:
|
|
@staticmethod
|
|
def get(driver_id: str, config: dict) -> IdentityDriver:
|
|
for vendor, cls in _DRIVERS.items():
|
|
if driver_id.startswith(vendor) or driver_id == vendor:
|
|
return cls(config)
|
|
raise KeyError(f"Driver '{driver_id}' not found. Available: {list(_DRIVERS.keys())}")
|
|
|
|
@staticmethod
|
|
def register(driver_id: str, cls: type[IdentityDriver]) -> None:
|
|
_DRIVERS[driver_id] = cls
|
|
|
|
@staticmethod
|
|
def list_drivers() -> list[str]:
|
|
return list(_DRIVERS.keys())
|