feat(store): the local object store issues HTTPS transfer grants

pyproject.toml

@@ -31,15 +31,20 @@ classifiers = [
 dependencies = [
     "agentenv-framework-protocol>=0.1.0",
     "boto3>=1.35.0",
+    "certifi>=2024.2.2",  # the public roots the local transfer CA's trust bundle carries
     "click>=8.0.0",
+    "cryptography>=42",  # the local transfer CA
     "httpx>=0.27.0",
     "litellm>=1.96.0,<1.97",
     "mcp>=1.0.0,<2",  # 2.0.0 removed mcp.server.fastmcp, imported at module scope by env/gateway
     "packaging>=22",  # evaluates a plugin's requirement markers with no extra
     "a2a-sdk==0.3.26",
     "pydantic>=2.12",  # model_validate(extra=...) reads agent responses tolerantly
     "pymongo>=4.7",
+    "python-multipart>=0.0.13",  # the local grant server's upload forms
     "pyyaml>=6.0",
+    "starlette>=0.40",  # the local grant server
+    "uvicorn>=0.47",  # 0.47 adds ssl_context_factory, how the local grant server gets its TLS context
     "modal>=1.5.2.dev2",  # dev2 adds VM-mode V2 (_experimental_create + vm_runtime)
     "e2b~=2.46.4",  # AsyncSandbox/AsyncTemplate APIs validated against the 2.46 line
 ]

src/agent_env/store/object_store/__init__.py

@@ -1,11 +1,11 @@
 """Backend-agnostic object store abstraction + its implementations.
 
 ``object_store`` defines the abstraction (ObjectStore); ``s3_object_store``,
-``local_object_store`` and ``gcs_object_store`` are implementations. The last needs
+``local`` and ``gcs_object_store`` are implementations. The last needs
 the ``gcp`` extra, so it is not re-exported here: an impl pointer names its module.
 """
 
-from agent_env.store.object_store.local_object_store import LocalFilesystemObjectStore
+from agent_env.store.object_store.local.store import LocalFilesystemObjectStore
 from agent_env.store.object_store.object_store import (
     DEFAULT_CONTENT_TYPE,
     ObjectMetadata,

src/agent_env/store/object_store/local/__init__.py

@@ -0,0 +1,6 @@
+"""The local filesystem object store, and the HTTPS transfer grants it issues: signed tokens, a local
+certificate authority, and the in-process server that honours them."""
+
+from agent_env.store.object_store.local.store import LocalFilesystemObjectStore
+
+__all__ = ["LocalFilesystemObjectStore"]