aeat.adapters.persistence.storage.sql package

SQL substrate: ORM, engine, sessions, repositories, and secure objects.

Public surface for the SQLAlchemy-backed relational storage components. Re-exports the engine factory (create_engine_from_settings(), get_engine(), dispose_engine()), session helpers (get_sessionmaker(), session_scope()), public pydantic record models (ModeloCatalogueRecord, PortalRecord, PortalAuthMethod, CorpusArtifactRecord), and the per-domain repositories (SqlRecordRepository, ModeloRepository, PortalRepository, CorpusArtifactRepository), and the encrypted key-value store SecureObjectRepository.

The secure-object surface also exports SecureObjectRecord, SecureObjectWrite, SecureObjectDeletion, SecureObjectMetadata, SecureObjectNamespaceIntegrity, and SecureObjectDecryptabilityRow. The repository stores payloads as AES-GCM encrypted bytes, stores natural keys through adapters.persistence.storage.HashedLookup, binds row identity into AEAD associated data, and gates reads by sensitivity class and schema version. Listing defaults fail closed on unreadable rows; explicit diagnostic APIs return typed decryptability metadata without plaintext disclosure.

Schema is materialised from the ORM metadata on first engine access. Runtime route ownership stays in the storage-runtime and repository-factory modules; this package facade only re-exports the SQL storage API.

Submodules