tegwick
81d905971c
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: sonnet Assistant-Process: 101414@bnt-lap001 Assistant-Session: 60b5a221-d435-42b9-b778-983c90c7eed6
26 lines
1.3 KiB
Bash
26 lines
1.3 KiB
Bash
#!/usr/bin/env bash
|
|
# Full Python and native owner-contract suite; fail if native dependencies are absent.
|
|
set -euo pipefail
|
|
cd -- "$(dirname -- "${BASH_SOURCE[0]}")/.."
|
|
repo_root="$PWD"
|
|
audit_source="${RTEL_AUDIT_CORE_SOURCE:-$repo_root/../audit-core}"
|
|
policy_source="${RTEL_FLEX_AUTH_SOURCE:-$repo_root/../access-engine}"
|
|
if [[ ! -f "$audit_source/audit_core/ingestion.py" || ! -f "$policy_source/go.mod" ]]; then
|
|
echo 'Required: sibling audit-core and access-engine (flex-auth) checkouts, or RTEL_AUDIT_CORE_SOURCE / RTEL_FLEX_AUTH_SOURCE.' >&2
|
|
exit 1
|
|
fi
|
|
mkdir -p .cache/verify
|
|
export UV_CACHE_DIR="$repo_root/.cache/verify/uv"
|
|
export GOCACHE="$repo_root/.cache/verify/go-build"
|
|
if [[ ! -x .venv-verify/bin/python ]]; then
|
|
uv venv --python python3 .venv-verify
|
|
fi
|
|
uv pip sync --python .venv-verify/bin/python --require-hashes requirements-runtime.lock
|
|
go -C "$policy_source" build -mod=readonly -o "$repo_root/.cache/verify/flex-auth" ./cmd/flex-auth
|
|
export RTEL_AUDIT_CORE_SOURCE="$audit_source"
|
|
export RTEL_FLEX_AUTH_BINARY="$repo_root/.cache/verify/flex-auth"
|
|
echo 'Native owner source revisions:'
|
|
git -C "$audit_source" rev-parse HEAD
|
|
git -C "$policy_source" rev-parse HEAD
|
|
.venv-verify/bin/python -m unittest discover -s tests -v
|
|
.venv-verify/bin/python -m unittest discover -s tests_runtime -v
|