d85b33bd68
First execution phases of docs/proposals/ge-enforce-plugin.md. The GE-Enforce manifest becomes shopdb data. P0 scaffold: new geenforce plugin (api_prefix /api/geenforce, default_enabled false, core_version >=0.7.0). Registered in PLUGIN_TABLE_OWNERS (ADR-008); its 0001 baseline really creates the tables. P1a model: one wide manifestentries table + entrytype discriminator (not STI, not JSON blob), manifestscopes (UNIQUE scopename+phase), the three multi-value filter child tables, inusechecks + processes, immutable manifestpublishedversions (frozen rendered JSON), manifestpayloads (inline, capped), pctypealiases (mirror of the engine lib's alias graph). regvalue stored as its raw JSON literal so DWord typing survives. P1c importer + exporter: parse common + gea-shopfloor-* + preinstall.json into draft rows and rebuild the JSON verbatim from rows in sortorder. P1d parity harness (GATE A): filters.py mirrors the engine's four filter functions + alias graph; parity.py proves import+export is behaviorally lossless (field-identical + same-entries-fire across 18 machine-profile fixtures) WITHOUT byte-diffing. Verified PASS against all 11 real reference manifests (64 entries) and a synthetic site-neutral fixture covering every type/filter (the CI gate). First slice (gea-shopfloor-cmm shape): service layer (import/publish/rollback/ export-to-share), CLI (parity, import-share, publish, export-share), and the client endpoint GET /api/geenforce/manifest serving the current published snapshot (never the draft) with ETag/304. Split permissions geenforce.manage/publish/fetch. Tests prove import->publish->serve, draft edits never change served bytes, publish+rollback, and auth (401 unauth/wrong-scope). Contract 0.11.0: added service_token_authorized(scope) to shopdb.api so plugin service endpoints authorize a scoped managed token without importing core token internals. Documented in PLUGIN-HOOKS.md. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
42 lines
850 B
Python
42 lines
850 B
Python
"""GE-Enforce plugin models."""
|
|
|
|
from .manifest import (
|
|
ManifestScope,
|
|
ManifestEntry,
|
|
ManifestEntryPcType,
|
|
ManifestEntryHostname,
|
|
ManifestEntryMachineNumber,
|
|
ManifestInUseCheck,
|
|
ManifestInUseCheckProcess,
|
|
ManifestPublishedVersion,
|
|
ManifestPayload,
|
|
PcTypeAlias,
|
|
PHASES,
|
|
ENTRY_TYPES,
|
|
REG_TYPES,
|
|
PAYLOAD_SOURCES,
|
|
DETECTION_METHODS,
|
|
APPLY_MODES,
|
|
INUSE_BEHAVIORS,
|
|
)
|
|
|
|
__all__ = [
|
|
'ManifestScope',
|
|
'ManifestEntry',
|
|
'ManifestEntryPcType',
|
|
'ManifestEntryHostname',
|
|
'ManifestEntryMachineNumber',
|
|
'ManifestInUseCheck',
|
|
'ManifestInUseCheckProcess',
|
|
'ManifestPublishedVersion',
|
|
'ManifestPayload',
|
|
'PcTypeAlias',
|
|
'PHASES',
|
|
'ENTRY_TYPES',
|
|
'REG_TYPES',
|
|
'PAYLOAD_SOURCES',
|
|
'DETECTION_METHODS',
|
|
'APPLY_MODES',
|
|
'INUSE_BEHAVIORS',
|
|
]
|