Spaces:
Sleeping
Sleeping
| """uofa validate — SHACL validation (and optional integrity check) on all example UofA files.""" | |
| from __future__ import annotations | |
| from pathlib import Path | |
| from uofa_cli.output import step_header, result_line, color | |
| from uofa_cli.shacl_friendly import run_shacl_multi, print_violations | |
| from uofa_cli.integrity import verify_file | |
| from uofa_cli import paths | |
| HELP = "validate all examples against SHACL profiles" | |
| _EXCLUDE_DIRS = {"templates"} | |
| def add_arguments(parser): | |
| parser.add_argument("--dir", type=Path, help="directory to scan (default: all pack examples)") | |
| parser.add_argument("--verify", action="store_true", | |
| help="also verify hash + signature integrity on each file") | |
| parser.add_argument("--pubkey", type=Path, help="ed25519 public key (default: keys/research.pub)") | |
| def run(args) -> int: | |
| # Scan a single dir if specified, otherwise all pack example directories | |
| if args.dir: | |
| scan_dirs = [args.dir] | |
| else: | |
| scan_dirs = paths.all_example_dirs() | |
| if not scan_dirs: | |
| raise FileNotFoundError("No example directories found in packs/") | |
| step_header("SHACL validation: all examples") | |
| files = sorted( | |
| f | |
| for d in scan_dirs if d.exists() | |
| for f in d.rglob("*.jsonld") | |
| if not any(part in _EXCLUDE_DIRS for part in f.parts) | |
| ) | |
| # Use first scan dir as reference for relative paths | |
| examples = scan_dirs[0].parent if len(scan_dirs) == 1 else paths.find_repo_root() | |
| if not files: | |
| result_line("No .jsonld files found", False) | |
| return 1 | |
| # When scanning all examples, use core-only shapes (no factor enum) | |
| # unless a specific pack was explicitly requested via --pack. | |
| # This avoids rejecting NASA examples when default pack is vv40. | |
| if args.pack is None: | |
| shacl_paths = [paths.shacl_schema()] | |
| else: | |
| shacl_paths = paths.all_shacl_schemas(active=paths.resolve_active_packs(args)) | |
| passed = 0 | |
| failed = 0 | |
| for f in files: | |
| conforms, violations = run_shacl_multi(f, shacl_paths) | |
| rel = f.relative_to(examples.parent) if examples.parent in f.parents else f | |
| result_line(str(rel), conforms) | |
| if conforms: | |
| passed += 1 | |
| else: | |
| failed += 1 | |
| print_violations(violations) | |
| print() | |
| total = passed + failed | |
| if failed == 0: | |
| result_line(f"All {total} example(s) conform", True) | |
| else: | |
| result_line(f"{failed}/{total} example(s) failed", False) | |
| # ── Optional integrity verification ─────────────────────── | |
| if args.verify: | |
| step_header("Integrity verification: all examples") | |
| pubkey = args.pubkey or paths.default_pubkey() | |
| if not pubkey.exists(): | |
| result_line("Public key not found", False, str(pubkey)) | |
| return 1 | |
| ctx = paths.context_file() | |
| v_passed = 0 | |
| v_failed = 0 | |
| import json | |
| for f in files: | |
| rel = f.relative_to(examples.parent) if examples.parent in f.parents else f | |
| try: | |
| with open(f) as fh: | |
| doc = json.load(fh) | |
| declared_hash = doc.get("hash", "") | |
| # Skip files with placeholder hashes (unsigned templates/starters) | |
| if declared_hash.endswith("0" * 64): | |
| result_line(str(rel), True, "unsigned — skipped") | |
| v_passed += 1 | |
| continue | |
| hash_ok, sig_ok = verify_file(f, pubkey, ctx) | |
| ok = hash_ok and sig_ok | |
| detail = "" | |
| if not hash_ok: | |
| detail = "hash mismatch" | |
| elif not sig_ok: | |
| detail = "signature invalid" | |
| result_line(str(rel), ok, detail) | |
| if ok: | |
| v_passed += 1 | |
| else: | |
| v_failed += 1 | |
| except Exception as exc: | |
| result_line(str(rel), False, str(exc)) | |
| v_failed += 1 | |
| print() | |
| v_total = v_passed + v_failed | |
| if v_failed == 0: | |
| result_line(f"All {v_total} example(s) verified", True) | |
| else: | |
| result_line(f"{v_failed}/{v_total} example(s) failed integrity check", False) | |
| failed += v_failed | |
| return 0 if failed == 0 else 1 | |