mirror of
https://github.com/morluto/rea
synced 2026-10-25 22:08:11 -04:00
morluto
d9660eb032
Join canonical owned command cleanup before releasing package verifier workspaces. Replace raw package command wrappers, the updater supervisor, WASM cleanup composite, and boolean-only retention with explicit capability ownership. Preserve selected environments, npm arguments, no-deadline calls, clean exit status, and distinct aggregate/per-stream output budgets. Exercise actual timeout descendants, cancellation, retained cleanup retry, and workspace admission.
37 lines
1.4 KiB
JavaScript
37 lines
1.4 KiB
JavaScript
import { GHIDRA_BRIDGE_SOURCES } from "../src/ghidra/GhidraBridgeSources.ts";
|
|
|
|
const packedHopperBridge = "package/bridge/hopper_bridge.py";
|
|
const packedCutterBridge = "package/bridge/cutter/rea_bridge.py";
|
|
|
|
/** Check shipped bridge files; real-provider lanes verify runtime behavior. */
|
|
export async function verifyPackedBridge({ tarball, packedFiles, commands }) {
|
|
for (const path of [
|
|
packedHopperBridge,
|
|
packedCutterBridge,
|
|
...Object.values(GHIDRA_BRIDGE_SOURCES).map(
|
|
(name) => `package/bridge/ghidra/${name}`,
|
|
),
|
|
]) {
|
|
if (!packedFiles.includes(path)) throw new Error(`package omitted ${path}`);
|
|
}
|
|
// Read the packed source without extracting into the caller's leased root.
|
|
// Only the interpreter's standard library is needed; caller-local modules
|
|
// and site startup hooks must not replace the parser or execute here.
|
|
await commands.exec("python3", [
|
|
"-I",
|
|
"-S",
|
|
"-c",
|
|
[
|
|
"import ast, sys, tarfile",
|
|
"with tarfile.open(sys.argv[1]) as archive:",
|
|
" member = archive.getmember(sys.argv[2])",
|
|
" if not member.isfile():",
|
|
" raise ValueError(f'{member.name} is not a regular file')",
|
|
" with archive.extractfile(member) as source:",
|
|
" ast.parse(source.read().decode('utf-8'), filename=sys.argv[2])",
|
|
].join("\n"),
|
|
tarball,
|
|
packedHopperBridge,
|
|
]);
|
|
}
|