| """Verify the complete model, runtime, and dependency-lock package.""" |
|
|
| from __future__ import annotations |
|
|
| import argparse |
| import hashlib |
| import json |
| from pathlib import Path |
| from typing import Sequence |
|
|
| from .verify_model import verify_model |
| from .verify_runtime import verify_runtime |
|
|
|
|
| def _file_receipt(path: Path) -> dict[str, str | int]: |
| resolved = path.resolve(strict=True) |
| if not resolved.is_file(): |
| raise RuntimeError(f"package artifact must be a regular file: {resolved}") |
| return { |
| "path": str(resolved), |
| "bytes": resolved.stat().st_size, |
| "sha256": hashlib.sha256(resolved.read_bytes()).hexdigest(), |
| } |
|
|
|
|
| def build_parser() -> argparse.ArgumentParser: |
| parser = argparse.ArgumentParser(description=__doc__) |
| parser.add_argument("--model-root", type=Path, required=True) |
| parser.add_argument("--manifest", type=Path, required=True) |
| parser.add_argument("--requirements-direct", type=Path, required=True) |
| parser.add_argument("--requirements-lock", type=Path, required=True) |
| return parser |
|
|
|
|
| def main(argv: Sequence[str] | None = None) -> int: |
| args = build_parser().parse_args(argv) |
| report = { |
| "schema_version": "procedure.ep15_merged3225.package_verify.v1", |
| "status": "PASS", |
| "model": verify_model(args.model_root, args.manifest), |
| "runtime": verify_runtime(), |
| "requirements": { |
| "direct": _file_receipt(args.requirements_direct), |
| "lock": _file_receipt(args.requirements_lock), |
| }, |
| } |
| print(json.dumps(report, ensure_ascii=False, sort_keys=True)) |
| return 0 |
|
|
|
|
| if __name__ == "__main__": |
| raise SystemExit(main()) |
|
|
