aeat.adapters.persistence.storage._namespace_registry module

Typed registry for secure-storage namespace and hierarchy contracts.

Each SecureObjectNamespaceDefinition carries a SensitivityClass field that governs the at-rest encryption treatment applied by the substrate for every object in that namespace.

class StorageNamespaceScope(*values)[source]

Bases: StrEnum

Logical custody scope for a secure-object namespace.

PROFILE_LOCAL
BUCKET_LOCAL
PROCESS_LOCAL
class StorageCustodyDisposition(*values)[source]

Bases: StrEnum

Transport custody disposition for one secure-object namespace.

STRUCTURED_CUSTODY
FULL_CUSTODY_ONLY
DERIVED_REBUILDABLE
PROCESS_LOCAL
class StorageCustodyProfile(*values)[source]

Bases: StrEnum

Secure-object custody transport profile.

FULL
STRUCTURED
class StorageRemoteMirrorPolicy(*values)[source]

Bases: StrEnum

Remote-provider mirroring policy for one secure-object namespace.

CIPHERTEXT_WITH_METADATA
LOCAL_ONLY
TEST_ONLY
class StoragePathKind(*values)[source]

Bases: StrEnum

Persistent storage hierarchy node kind.

DIRECTORY
FILE
LOGICAL_SQL
BLOB_OBJECT
class SecureObjectNamespaceDefinition(**data)[source]

Bases: BaseModel

Contract for one encrypted SQL secure-object namespace.

Parameters:
key: str
namespace: str
owner: str
sensitivity: SensitivityClass
schema_version: int
object_key_grammar: str
scope: StorageNamespaceScope
custody_disposition: StorageCustodyDisposition
default_object_key: str | None
remote_mirror_policy: StorageRemoteMirrorPolicy
remote_mirror_requires_revision: bool
remote_mirror_requires_integrity_manifest: bool
require_default_object_key()[source]

Return the singleton object key or raise when the namespace is multi-key.

Return type:

str

class StoragePathDefinition(**data)[source]

Bases: BaseModel

Contract for one storage hierarchy path or logical marker.

Parameters:
key: str
kind: StoragePathKind
grammar: str
owner: str
segment: str | None
schema_version: int | None
class StorageHierarchyRegistry(**data)[source]

Bases: BaseModel

Registry carrying the known secure-storage hierarchy contracts.

Parameters:
namespaces: tuple[SecureObjectNamespaceDefinition, ...]
paths: tuple[StoragePathDefinition, ...]
namespace_by_key(key)[source]

Return a SecureObjectNamespaceDefinition by registry key.

Return type:

SecureObjectNamespaceDefinition

Parameters:

key (str)

namespace_by_value(value)[source]

Return a SecureObjectNamespaceDefinition by persisted namespace value.

Return type:

SecureObjectNamespaceDefinition

Parameters:

value (str)

path_by_key(key)[source]

Return a StoragePathDefinition by registry key.

Return type:

StoragePathDefinition

Parameters:

key (str)

namespaces_for_custody_profile(profile)[source]

Return carried SecureObjectNamespaceDefinition rows for a custody profile.

Return type:

tuple[SecureObjectNamespaceDefinition, ...]

Parameters:

profile (StorageCustodyProfile)

secure_object_logical_path(namespace, object_key)[source]

Return the registry-defined logical SQL marker for one secure object.

Return type:

Path

Parameters:

  • namespace (str)

  • object_key (str)

secure_object_namespace_logical_path(namespace)[source]

Return the registry-defined logical SQL marker for one secure-object namespace.

Return type:

Path

Parameters:

namespace (str)