732642856
72 lines
3.3 KiB
Python
72 lines
3.3 KiB
Python
#!/usr/bin/env python3
|
|
"""Audit VedAstro's official MIT source contract without invoking the service."""
|
|
from __future__ import annotations
|
|
|
|
import argparse
|
|
import hashlib
|
|
import json
|
|
import re
|
|
import subprocess
|
|
from pathlib import Path
|
|
|
|
|
|
def _read(root: Path, relative: str) -> str:
|
|
return (root / relative).read_text(encoding="utf-8-sig")
|
|
|
|
|
|
def audit_source(root: Path) -> dict:
|
|
project = _read(root, "Library/Library.csproj")
|
|
time_source = _read(root, "Library/Data/Time.cs")
|
|
tools_source = _read(root, "Library/Logic/Tools.cs")
|
|
core_source = _read(root, "Library/Logic/Calculate/Core.cs")
|
|
version_match = re.search(r"<Version>([^<]+)</Version>", project)
|
|
checks = {
|
|
"mit_license": "<PackageLicenseExpression>MIT</PackageLicenseExpression>" in project,
|
|
"offset_parse_exact": 'DateTimeOffset.ParseExact(timezoneRaw, "zzz"' in tools_source,
|
|
"zero_offset_auto_lookup": "parsedTimezone == null || parsedTimezone == TimeSpan.Zero" in tools_source and "GeoLocationToTimezone" in tools_source,
|
|
"time_keeps_offset": "DateTimeOffset.ParseExact(stdDateTimeText, Time.DateTimeFormat" in time_source and "HH:mm dd/MM/yyyy zzz" in time_source,
|
|
"all_planet_longitude_is_nirayana": "AllPlanetLongitude(Time time)" in core_source and "PlanetNirayanaLongitude" in core_source,
|
|
}
|
|
commit = None
|
|
try:
|
|
commit = subprocess.run(["git", "-C", str(root), "rev-parse", "HEAD"], check=True, capture_output=True, text=True).stdout.strip()
|
|
except (OSError, subprocess.CalledProcessError):
|
|
pass
|
|
files = {}
|
|
for relative in ("Library/Library.csproj", "Library/Data/Time.cs", "Library/Logic/Tools.cs", "Library/Logic/Calculate/Core.cs"):
|
|
files[relative] = hashlib.sha256((root / relative).read_bytes()).hexdigest()
|
|
return {
|
|
"source": "https://github.com/VedAstro/VedAstro",
|
|
"source_commit": commit,
|
|
"library_version": version_match.group(1) if version_match else None,
|
|
"source_contract_status": "verified" if all(checks.values()) else "blocked",
|
|
"checks": checks,
|
|
"timezone_contract": {
|
|
"zero_offset": "auto_lookup_sentinel" if checks["zero_offset_auto_lookup"] else "blocked",
|
|
"negative_offset": "literal_offset" if checks["offset_parse_exact"] else "blocked",
|
|
"conclusion": "+00:00 and the location's real offset may intentionally produce identical results.",
|
|
},
|
|
"longitude_contract": {"AllPlanetLongitude": "nirayana" if checks["all_planet_longitude_is_nirayana"] else "blocked"},
|
|
"deployment_identity_status": "blocked",
|
|
"deployment_identity_reason": "Remote responses expose neither library version nor source commit.",
|
|
"files": files,
|
|
}
|
|
|
|
|
|
def main() -> int:
|
|
parser = argparse.ArgumentParser()
|
|
parser.add_argument("source_root", type=Path)
|
|
parser.add_argument("--output", type=Path)
|
|
args = parser.parse_args()
|
|
report = audit_source(args.source_root)
|
|
text = json.dumps(report, ensure_ascii=False, indent=2, sort_keys=True) + "\n"
|
|
if args.output:
|
|
args.output.parent.mkdir(parents=True, exist_ok=True)
|
|
args.output.write_text(text, encoding="utf-8")
|
|
print(text, end="")
|
|
return 0 if report["source_contract_status"] == "verified" else 2
|
|
|
|
|
|
if __name__ == "__main__":
|
|
raise SystemExit(main())
|