mirror of
https://github.com/morluto/rea.git
synced 2026-11-10 16:57:19 +00:00
morluto
cb4e5cfbff
* refactor(analysis): centralize resource budgets and recovery facts * feat(analysis): expose ASAR and Ghidra runtime admission controls * feat(artifacts): expose reader admission and preserve limited recognition * feat(javascript): expose recoverable semantic precision budgets * feat(web): add recoverable source-map budgets and compact retained views * feat(web): make historical capture decoding budgets recoverable * fix(desktop): enforce selected view policies across capture and export * feat(runtime): make Frida and LLDB retention budgets selectable * feat(native): expose diagnostic budgets and preserve exhaustion causes * feat(managed): expose recoverable snapshot and representation budgets * feat(metadata): make Go and Rust inspection budgets recoverable * feat(wasm): expose representation and producer admissions * feat(evm): expose per-call worker resource budgets * feat(android): make resource and string-pool omissions recoverable * feat(producers): expose command and recorded-capture budgets * docs(analysis): record recovery contracts and integrated validation * fix(docs): link calibration oracle from published verification pages * fix(docs): restore desktop task anchors and receipt links * test(analysis): align fixtures with selectable budget contracts * fix(analysis): remove source-location projector dependency cycle * test(analysis): refresh budget recovery and verifier regressions * test(analysis): preserve format and publication recovery expectations * test(windows): align conformance with owned runtime admission * fix(desktop): preserve selected alias kinds in exported state * test(analysis): align provider fixtures with recoverable budgets * test(desktop): validate emitted alias metadata structurally * fix(ghidra): classify bounded Windows endpoint refusals * test(cli): assert selectable artifact admission recovery * fix(cli): preserve capture provenance in environment builds
77 lines
3.0 KiB
Python
77 lines
3.0 KiB
Python
"""Verify pinned inputs and prepare inert application directories and an oracle."""
|
|
|
|
import argparse
|
|
import hashlib
|
|
import json
|
|
from pathlib import Path
|
|
import re
|
|
import shutil
|
|
|
|
|
|
def sha256(path):
|
|
return hashlib.sha256(path.read_bytes()).hexdigest()
|
|
|
|
|
|
def theme_values(source):
|
|
prefix, suffix = 'export const theme = {', '};\n'
|
|
if not source.startswith(prefix) or not source.endswith(suffix):
|
|
raise ValueError('Expected the pinned literal-only theme declaration')
|
|
body = source[len(prefix):-len(suffix)]
|
|
pair = re.compile(r"\s*([A-Za-z_]\w*)\s*:\s*'([^'\\]*)'\s*,")
|
|
values = {}
|
|
position = 0
|
|
while body[position:].strip():
|
|
item = pair.match(body, position)
|
|
if item is None or item[1] in values:
|
|
raise ValueError('Oracle only accepts distinct literal CSS property declarations')
|
|
values[item[1]] = item[2]
|
|
position = item.end()
|
|
if len(values) != 237:
|
|
raise ValueError('The pinned source must declare 237 theme properties')
|
|
return values
|
|
|
|
|
|
def main():
|
|
parser = argparse.ArgumentParser(description=__doc__)
|
|
parser.add_argument('repo', type=Path)
|
|
parser.add_argument('source_map', type=Path)
|
|
parser.add_argument('output', type=Path)
|
|
options = parser.parse_args()
|
|
manifest = json.loads((Path(__file__).parent / 'manifest.json').read_text())
|
|
pinned = manifest['theme']
|
|
if sha256(options.source_map) != pinned['map_sha256']:
|
|
parser.error('Source-map digest does not match the pinned artifact')
|
|
document = json.loads(options.source_map.read_text())
|
|
matching = [text for name, text in zip(document['sources'], document['sourcesContent'])
|
|
if name == pinned['reported_source']]
|
|
if len(matching) != 1 or matching[0] is None:
|
|
parser.error('Expected one embedded original theme source')
|
|
source = matching[0]
|
|
if hashlib.sha256(source.encode()).hexdigest() != pinned['source_sha256']:
|
|
parser.error('Embedded source digest mismatch')
|
|
theme = options.output / 'cases/theme'
|
|
control = options.output / 'cases/ms'
|
|
theme.mkdir(parents=True, exist_ok=True)
|
|
control.mkdir(parents=True, exist_ok=True)
|
|
(theme / 'theme.ts').write_text(source)
|
|
(theme / 'package.json').write_text(json.dumps({
|
|
'name': 'rea-captured-theme-calibration', 'type': 'module', 'main': 'theme.ts',
|
|
}))
|
|
for name, digest in manifest['ms']['files'].items():
|
|
path = options.repo / 'node_modules/ms' / name
|
|
if sha256(path) != digest:
|
|
parser.error(f'Installed ms input digest mismatch: {name}')
|
|
shutil.copyfile(path, control / name)
|
|
oracle = {
|
|
'theme': {'source_file': 'theme.ts', 'source_sha256': pinned['source_sha256'],
|
|
'expected': theme_values(source)},
|
|
'ms': {'source_file': 'index.js',
|
|
'source_sha256': manifest['ms']['files']['index.js'], 'expected': {'s': 1000}},
|
|
}
|
|
options.output.mkdir(parents=True, exist_ok=True)
|
|
(options.output / 'oracle.json').write_text(json.dumps(oracle, indent=2) + '\n')
|
|
|
|
|
|
if __name__ == '__main__':
|
|
main()
|