yaojingang
129 lines
4.2 KiB
Python
129 lines
4.2 KiB
Python
#!/usr/bin/env python3
|
|
import json
|
|
import shutil
|
|
import subprocess
|
|
import sys
|
|
import tempfile
|
|
import zipfile
|
|
from pathlib import Path
|
|
|
|
|
|
ROOT = Path(__file__).resolve().parent.parent
|
|
TMP = ROOT / "tests" / "tmp_package_verification"
|
|
PACKAGER = ROOT / "scripts" / "cross_packager.py"
|
|
VERIFIER = ROOT / "scripts" / "verify_package.py"
|
|
EXPECTATIONS = ROOT / "evals" / "packaging_expectations.json"
|
|
|
|
|
|
def run(cmd: list[str]) -> dict:
|
|
proc = subprocess.run(cmd, cwd=ROOT, capture_output=True, text=True)
|
|
payload = {}
|
|
if proc.stdout.strip():
|
|
payload = json.loads(proc.stdout)
|
|
return {
|
|
"ok": proc.returncode == 0,
|
|
"returncode": proc.returncode,
|
|
"stdout": proc.stdout,
|
|
"stderr": proc.stderr,
|
|
"payload": payload,
|
|
}
|
|
|
|
|
|
def build_package(out_dir: Path, skill_root: Path = ROOT) -> dict:
|
|
return run(
|
|
[
|
|
sys.executable,
|
|
str(PACKAGER),
|
|
str(skill_root),
|
|
"--platform",
|
|
"openai",
|
|
"--platform",
|
|
"claude",
|
|
"--platform",
|
|
"generic",
|
|
"--platform",
|
|
"vscode",
|
|
"--expectations",
|
|
str(EXPECTATIONS),
|
|
"--output-dir",
|
|
str(out_dir),
|
|
"--zip",
|
|
]
|
|
)
|
|
|
|
|
|
def verify_package(out_dir: Path, output_json: Path, output_md: Path, skill_root: Path = ROOT) -> dict:
|
|
return run(
|
|
[
|
|
sys.executable,
|
|
str(VERIFIER),
|
|
str(skill_root),
|
|
"--package-dir",
|
|
str(out_dir),
|
|
"--expectations",
|
|
str(EXPECTATIONS),
|
|
"--registry-json",
|
|
str(ROOT / "reports" / "registry_audit.json"),
|
|
"--output-json",
|
|
str(output_json),
|
|
"--output-md",
|
|
str(output_md),
|
|
"--require-zip",
|
|
"--generated-at",
|
|
"2026-06-13",
|
|
]
|
|
)
|
|
|
|
|
|
def main() -> None:
|
|
if TMP.exists():
|
|
shutil.rmtree(TMP)
|
|
TMP.mkdir(parents=True, exist_ok=True)
|
|
|
|
valid_dir = TMP / "dist"
|
|
build = build_package(valid_dir)
|
|
assert build["ok"], build
|
|
valid = verify_package(valid_dir, TMP / "package_verification.json", TMP / "package_verification.md")
|
|
payload = valid["payload"]
|
|
assert valid["ok"], valid
|
|
assert payload["ok"], payload
|
|
assert payload["summary"]["target_count"] == 4, payload
|
|
assert payload["summary"]["adapter_count"] == 4, payload
|
|
assert payload["summary"]["archive_present"], payload
|
|
assert payload["summary"]["archive_sha256"], payload
|
|
assert not payload["failures"], payload
|
|
assert (TMP / "package_verification.md").exists(), TMP
|
|
|
|
with tempfile.TemporaryDirectory(prefix="renamed-package-root-") as temp_root:
|
|
renamed_root = Path(temp_root) / "checkout-alias"
|
|
shutil.copytree(
|
|
ROOT,
|
|
renamed_root,
|
|
ignore=shutil.ignore_patterns(".git", ".previews", "dist", "__pycache__", ".pytest_cache", "tmp*"),
|
|
)
|
|
renamed_dir = TMP / "renamed-dist"
|
|
renamed_build = build_package(renamed_dir, renamed_root)
|
|
assert renamed_build["ok"], renamed_build
|
|
assert (renamed_dir / "yao-meta-skill.zip").exists(), renamed_build
|
|
with zipfile.ZipFile(renamed_dir / "yao-meta-skill.zip") as archive:
|
|
names = set(archive.namelist())
|
|
assert "yao-meta-skill/SKILL.md" in names, sorted(list(names))[:10]
|
|
renamed_valid = verify_package(renamed_dir, TMP / "renamed_package_verification.json", TMP / "renamed_package_verification.md", renamed_root)
|
|
assert renamed_valid["ok"], renamed_valid
|
|
|
|
unsafe_dir = TMP / "unsafe-dist"
|
|
shutil.copytree(valid_dir, unsafe_dir)
|
|
with zipfile.ZipFile(unsafe_dir / "yao-meta-skill.zip", "a", compression=zipfile.ZIP_DEFLATED) as archive:
|
|
archive.writestr("../evil.txt", "bad")
|
|
unsafe = verify_package(unsafe_dir, TMP / "unsafe.json", TMP / "unsafe.md")
|
|
assert unsafe["returncode"] == 2, unsafe
|
|
unsafe_payload = unsafe["payload"]
|
|
assert not unsafe_payload["ok"], unsafe_payload
|
|
assert any("Archive has no absolute or parent-traversal entries" in item for item in unsafe_payload["failures"]), unsafe_payload
|
|
|
|
print(json.dumps({"ok": True}, ensure_ascii=False, indent=2))
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|