"""Verify the exact scientific package allowlist before running downloaded code.""" from pathlib import Path import hashlib import json def main(): folder = Path(__file__).resolve().parent manifest = json.loads((folder / 'package-manifest.json').read_text()) for item in manifest['files']: name = item['name'] if Path(name).name != name: raise ValueError('Expected a flat scientific package') content = (folder / name).read_bytes() if len(content) != item['bytes'] or hashlib.sha256(content).hexdigest() != item['sha256']: raise ValueError('Package input failed byte verification: ' + name) assert not any(name.endswith(('.js', '.ts', '.dylib', '.so', '.pdf')) or name.endswith('_data.txt') for name in [item['name'] for item in manifest['files']]) print('PASS:', len(manifest['files']), 'exact package inputs; no Lab executable, observed photometry or downloaded reference binaries') if __name__ == '__main__': main()