"""Package/backend/source metadata only; never opens a database or provider."""
import ctypes, gzip, hashlib, importlib.metadata, json, os
from pathlib import Path
import ssl, stat, zlib, sys
if sys.flags.optimize:raise RuntimeError("optimized smoke interpreter refused")

def digest(path):return hashlib.sha256(Path(path).read_bytes()).hexdigest()
packages={}
for entry in Path('/lib/apk/db/installed').read_text().split('\n\n'):
 fields=dict(line.split(':',1) for line in entry.splitlines() if ':' in line)
 if 'P' in fields:packages[fields['P']]=fields['V']
module=Path('/opt/venv/lib/python3.12/site-packages/informed_decision/policy.py');info=module.lstat()
app=module.parent
appfiles={str(p.relative_to(app)):digest(p) for p in sorted(app.rglob('*')) if p.is_file() and '__pycache__' not in p.parts}
keys={p.name:digest(p) for p in sorted(Path('/etc/apk/keys').glob('*.pub'))}
vectors=[b'',b'hello zlib',bytes(range(256))*16384,b'a'*1048576]
for value in vectors:
 assert zlib.decompress(zlib.compress(value))==value
 assert gzip.decompress(gzip.compress(value,mtime=0))==value
failures=0
for bad in [b'notzlib',zlib.compress(b'fixture')[:-2],b'\x00'*16]:
 try:zlib.decompress(bad)
 except zlib.error:failures+=1
 else:raise AssertionError('malformed compression accepted')
from cryptography.hazmat.primitives.ciphers.aead import AESGCM
import jwt, waitress
key=bytes(range(32));nonce=b'123456789012';aes=AESGCM(key);cipher=aes.encrypt(nonce,b'synthetic',b'fixture');assert aes.decrypt(nonce,cipher,b'fixture')==b'synthetic'
signed=jwt.encode({'sub':'synthetic'},'synthetic-test-key-only-32bytes!!!!',algorithm='HS256');assert jwt.decode(signed,'synthetic-test-key-only-32bytes!!!!',algorithms=['HS256'])['sub']=='synthetic'
print(json.dumps({'uid':os.getuid(),'gid':os.getgid(),'policy_sha256':digest(module),'policy_mode':oct(stat.S_IMODE(info.st_mode)),'policy_uid':info.st_uid,'app_file_sha256':appfiles,'apk_packages':packages,'apk_world_sha256':digest('/etc/apk/world'),'apk_keys_sha256':keys,'python_dependencies':{d.metadata['Name']:d.version for d in importlib.metadata.distributions()},'zlib_runtime_version':zlib.ZLIB_RUNTIME_VERSION,'zlib_compile_version':zlib.ZLIB_VERSION,'libz_sha256':digest('/usr/lib/libz.so.1.3.2'),'compression_vectors_pass':len(vectors),'malformed_zlib_refusals':failures,'crypto_jwt_waitress_smoke':True,'openssl':ssl.OPENSSL_VERSION,'network_accessed':False,'database_opened':False,'provider_or_customer_data_used':False}))