Module sat_file 

SAT-file service wrappers.

Thin forwarders from the HTTP handlers to the backend dispatcher, enforcing the CLAUDE.md boundary rule (handlers → service → backend).

apply_session_template and validate_sat_file also consolidate the duplicate get_group_name_available fetch that the handlers previously performed twice (once inside validate_user_group_vec_access, once to build the hsm_group_available_vec argument): the service function fetches the group list once, validates it in-memory, and forwards it to the backend.

Functions

apply_configuration

Apply a single SAT configurations[] entry.

apply_session_template

Apply a single SAT session_templates[] entry.

create_image_cfs_session

Translate one SAT images[] entry into a CFS session and create it.

stamp_image_from_session

Stamp manta.image_session.* provenance metadata onto the IMS image produced by a (terminal-complete) CFS session.

validate_sat_file

Pre-flight validate a SAT file against live CSM state without mutating anything.