__init__.py

Go to the documentation of this file.

#!/usr/bin/env python3
# -*- coding: utf-8 -*-
# oc_chat/registry/auth/__init__.py
 
# OCT-LINT: disable=tests_exist reason="Covered by oc_chat/tests/registry/test_auth_*.py"
"""
Registry actor-auth public surface.
 
Purpose
-------
Expose the M11.5 actor-auth helpers from one stable package import.
 
Responsibilities
----------------
- Re-export signing and verification helpers.
- Re-export secret-file helpers used by CLI and doctor flows.
- Re-export role, rotation, handover, and auth-event primitives.
 
Diagnostics
-----------
Domain: OC_CHAT.MAIN
Levels:
    L2 - lifecycle events
    L3 - semantic details
    L4 - deep tracing
 
Contracts
---------
- Secret material remains inside explicit secret-store/signing APIs.
- Registry writes still go through ``Registry.execute_domain_command``.
 
Dependencies
------------
- oc_chat.registry.auth.signing (not imported; loaded by name on first access to re-export HmacProof, sign_command and verify_hmac)
- oc_chat.registry.auth.secrets_store (not imported; loaded by name on first access to re-export SecretBlock, fingerprint_secret, load_secrets and write_secrets)
- oc_chat.registry.auth.bootstrap (not imported; loaded by name on first access to re-export bootstrap_machine and export_bundle)
- oc_chat.registry.auth.roles (not imported; loaded by name on first access to re-export RoleGuard)
- oc_chat.registry.auth.rotation (not imported; loaded by name on first access to re-export rotate_secret and finalize_rotation)
- oc_chat.registry.auth.handover (not imported; loaded by name on first access to re-export initiate_handover and accept_handover)
- oc_chat.registry.auth.events_writer (not imported; loaded by name on first access to re-export AuthEventsWriter)
- oc_diagnostics (structured debug logging via _dbg)
"""
from __future__ import annotations
 
from oc_diagnostics import _dbg
 
 
_dbg("OC_CHAT.MAIN", "module", "loaded", 4)
 
__all__ = [
    "AuthEventsWriter",
    "HmacProof",
    "RoleGuard",
    "SecretBlock",
    "accept_handover",
    "bootstrap_machine",
    "export_bundle",
    "finalize_rotation",
    "fingerprint_secret",
    "initiate_handover",
    "load_secrets",
    "rotate_secret",
    "sign_command",
    "verify_hmac",
    "write_secrets",
]
 
_EXPORTS = {
    "AuthEventsWriter": ("oc_chat.registry.auth.events_writer", "AuthEventsWriter"),
    "HmacProof": ("oc_chat.registry.auth.signing", "HmacProof"),
    "RoleGuard": ("oc_chat.registry.auth.roles", "RoleGuard"),
    "SecretBlock": ("oc_chat.registry.auth.secrets_store", "SecretBlock"),
    "accept_handover": ("oc_chat.registry.auth.handover", "accept_handover"),
    "bootstrap_machine": ("oc_chat.registry.auth.bootstrap", "bootstrap_machine"),
    "export_bundle": ("oc_chat.registry.auth.bootstrap", "export_bundle"),
    "finalize_rotation": ("oc_chat.registry.auth.rotation", "finalize_rotation"),
    "fingerprint_secret": ("oc_chat.registry.auth.secrets_store", "fingerprint_secret"),
    "initiate_handover": ("oc_chat.registry.auth.handover", "initiate_handover"),
    "load_secrets": ("oc_chat.registry.auth.secrets_store", "load_secrets"),
    "rotate_secret": ("oc_chat.registry.auth.rotation", "rotate_secret"),
    "sign_command": ("oc_chat.registry.auth.signing", "sign_command"),
    "verify_hmac": ("oc_chat.registry.auth.signing", "verify_hmac"),
    "write_secrets": ("oc_chat.registry.auth.secrets_store", "write_secrets"),
}
 
 
def __getattr__(name: str) -> object:
    if name not in _EXPORTS:
        raise AttributeError(name)
    module_name, attr_name = _EXPORTS[name]
    from importlib import import_module
 
    module = import_module(module_name)
    value = getattr(module, attr_name)
    globals()[name] = value
    return value