Services
========

The services layer provides infrastructure services for the CLI.
These are leaf services with no business logic — they handle external
interactions such as authentication, credential storage, Docker operations,
and API communication.

Services are instantiated lazily via the dependency injection container
(:class:`kelvin.sdk.container.Services`).

API Client
----------

Factory for creating authenticated Kelvin API client instances.

.. automodule:: kelvin.sdk.services.api_client
    :members:
    :undoc-members:
    :show-inheritance:

Configuration
-------------

Manages CLI configuration settings persisted to a local YAML file.

.. automodule:: kelvin.sdk.services.config
    :members:
    :undoc-members:
    :show-inheritance:

Credential Store
----------------

Secure OAuth token storage and retrieval via keyring.

.. automodule:: kelvin.sdk.services.credential_store
    :members:
    :undoc-members:
    :show-inheritance:

Docker
------

Docker operations for building and managing application images.

.. automodule:: kelvin.sdk.services.docker
    :members:
    :undoc-members:
    :show-inheritance:

MLflow
------

MLflow registry operations for model listing, retrieval, and artifact downloading.

.. automodule:: kelvin.sdk.services.mlflow
    :members:
    :undoc-members:
    :show-inheritance:

Schema
------

JSON Schema validation for app configuration files.

.. automodule:: kelvin.sdk.services.schema
    :members:
    :undoc-members:
    :show-inheritance:

Session
-------

Session state management and platform metadata.

.. automodule:: kelvin.sdk.services.session
    :members:
    :undoc-members:
    :show-inheritance:

Session Models
~~~~~~~~~~~~~~

Data models for session state and platform metadata.

.. automodule:: kelvin.sdk.services.session_models
    :members:
    :undoc-members:
    :show-inheritance:

Template
--------

Application template management and project scaffolding.

.. automodule:: kelvin.sdk.services.template
    :members:
    :undoc-members:
    :show-inheritance:

Authentication
--------------

OAuth/PKCE authentication service package.

Auth Service
~~~~~~~~~~~~

Core authentication service handling OAuth flows and token operations.

.. automodule:: kelvin.sdk.services.auth.auth_service
    :members:
    :undoc-members:
    :show-inheritance:

Callback Server
~~~~~~~~~~~~~~~

Local HTTP server for handling OAuth redirect callbacks.

.. automodule:: kelvin.sdk.services.auth.callback_server
    :members:
    :undoc-members:
    :show-inheritance:

Auth Errors
~~~~~~~~~~~

Authentication-specific exception hierarchy.

.. automodule:: kelvin.sdk.services.auth.errors
    :members:
    :undoc-members:
    :show-inheritance:

Keycloak Client
~~~~~~~~~~~~~~~

Keycloak OAuth/OIDC client implementation.

.. automodule:: kelvin.sdk.services.auth.keycloak_client
    :members:
    :undoc-members:
    :show-inheritance:

Auth Models
~~~~~~~~~~~

Authentication data models.

.. automodule:: kelvin.sdk.services.auth.models
    :members:
    :undoc-members:
    :show-inheritance:

PKCE Utilities
~~~~~~~~~~~~~~

PKCE (Proof Key for Code Exchange) utilities for OAuth 2.0.

.. automodule:: kelvin.sdk.services.auth.pkce
    :members:
    :undoc-members:
    :show-inheritance: