Ƃj9dZddlmZddlZddlZddlZddlZddlZddlZddl Z ddl Z ddl Z ddl m Z m Z ddlmZddlmZmZddlmZmZeej/j0Zedz Zed z Zed z Zd Zd Zd ZhdZ dZ!dZ"Gdde#Z$d"dZ%d#dZ&ejNfd$dZ(d%dZ)d&d'dZ*d(dZ+d)dZ,d)dZ-d*dZ.d+dZ/ddd,dZ0d-dZ1d.d/d Z2e3d!k(r e4e2y)0z6One-use, local-only customer-surface evidence capture.) annotationsN)datetimetimezone)Path)AnyCallable)ImageUnidentifiedImageErrorzcapture-contract.jsonvaultzcapture-receipt.redacted.jsoni@i@i>1LPLARGBRGBAGI_ATTEST_EXACTLY_ONE_VISIBLE_MESSAGE_MATCHES_THE_DURABLE_DELIVERED_TEXTsPNG  c eZdZy) CaptureErrorN)__name__ __module__ __qualname__/home/cube/projects/richard/traning coach/.omo/evidence/task26/task26-strict-rerun-customer-surface-capture-st_01a00ed6/capture.pyrrsrrcVtj|ddddzjS)NT),:) ensure_ascii sort_keys separators )jsondumpsencode)values r canonicalr&"s& JJu44J WZ^ ^ f f hhrcHtj|jSN)hashlibsha256 hexdigest)datas rdigestr-%s >>$  ) ) ++rctt|}|r+||t|}|dkr td||d}|r*yy)Nrzincomplete write) memoryviewbytesr)fdr,writeviewwrittens r _write_allr5(sB d D E$K( a<12 2GH~ rctj|tjtjztjz} tj |tj |y#tj |wxYwr()osopenO_RDONLY O_DIRECTORY O_CLOEXECfsyncclose)pathr1s r_fsync_directoryr?0sO r{{R^^3bllB CB     s A33B ct|jjdddtj|jdt j d|j d|j\}}t|} tj||t||tj|tj|d}|js|jrtd|j tj||d |j!t#|j|d k\rtj| |j!y#t$$rYywxYw#|d k\rtj| |j!w#t$$rYwwxYwxYw) NT)modeparentsexist_ok.)prefixdirzone-use output already exists: F)follow_symlinksr)parentmkdirr7chmodtempfilemkstempnamerfchmodr5r<r=exists is_symlinkrlinkunlinkr?FileNotFoundError)r>r,rBr1tmp_nametmps r atomic_writerX7sKKK5$>HHT[[% ##Qtyyk+;MLB x.C "d2t     ;;=DOO-!@ LM M T51 % 7 HHRL  JJL     7 HHRL  JJL    sC=CE;E,, E87E8;F7F('F7( F41F73F44F7c,tjtjztjz}tjt |} tj |}tj|jr"tj|jdk7r tdd} tj|d}|sn||z } tj|tj|}hd}t!|j#di|k7s|j#ddk7r td |dj%D]%\}}t'|t(r|rtd |||fS#tj|wxYw) Nz)contract must be a mode-0600 regular fileri> candidate config_sha256core_candidatecustomer_chat_iddelivery_row_keylifecycle_run_iddurable_text_sha256hermes_wheel_sha256lifecycle_session_idprofile_wheel_sha256delivery_idempotency_keyexpected_provider_timestampexpected_provider_message_idbindingschemaz+task26-customer-surface-capture-contract-v1z(capture contract schema/binding mismatchzinvalid contract binding: )r7r9r; O_NOFOLLOWr8CONTRACTfstatstatS_ISREGst_modeS_IMODErreadr=r"loadssetgetitems isinstancestr) flagsr1strawchunkr%requiredkeyitems r load_contractrQsN KK",, & 6E 5 !B  XXb\||BJJ'4<< +Cu+LJK KGGB&E 5LC   JJsOEH  599Y #$0EIIh4GKx4xEFF9%++- T$$D!;C5AB B. #:  s BE<<Fc|jts tdddtddf\}}}}}dx}}|dzt |krt j d|||dzd}||dz|dz} |dz|z} | t |kDr td||dz|dz|z} t j d||dz|z| d} tj| | zd z| k7r td |d z }|d k(rQ| d k7s|d k7r tdt j d| \}}} }}}}| dvs |dvs|s|s|dvr tdd}n| d k(r td| dk(rd}|j| n|r| dvrd}| dk(r|s| t |k7r td|r|s td tj}|jt|tdz|jr |jr td ||fS| }|dzt |krtd#tj $r}td|d}~wwxYw)Nzinvalid PNG signaturerF z>Iztruncated PNG chunklzPNG CRC mismatchsIHDR zPNG IHDR missingz>IIBBBBB>rrr>rrr>rrzunsupported PNG headerTzduplicate PNG IHDRIDAT>rIENDrzPNG has trailing/polyglot byteszPNG image data missing@zinvalid PNG compressed streamzPNG IEND missing) startswithPNG_SIGr bytearraylenstructunpackzlibcrc32extend decompressobj decompressr0 MAX_BYTESeof unused_dataerror)r,poschunksidatwidthheight seen_ihdr seen_idatlengthkindendpayload expected_crcdepthcolor compression filtering interlace decompressorexcs r _strict_pngrns ??7 #233'(!Y[!Q'>$Cuf!!I (c$i tT#cAg%67:C!GC!G$Bh T?45 5sQwsQw/0}}T4a&0@+EFqI ::dWn % 2l B12 2!  Q;w&B,"#566MS]][egnMo JE65%i,,_0LP[_hlu~DmD"#;<<I W_34 4 7?I KK 4'99I 7?D )"#DEED"#;<< M#113 ''d Y^D#''<+C+C&'FGG,D&= O (c$i P ) ** :: M"#BCL Ms,AH**I= I  Icrt|dks|dddk7r tdd\}}}hd}|t|kr|r|jd|}|dkr td|}|t|kr$||d k(r|d z }|t|kr ||d k(r|t|k\r td||}|d z }|dk(sd |cxkrd krnnd }ni||d k7r td|t|kr$||d k(r|d z }|t|kr ||d k(r|t|k\r td||}|d z }|dk(r|t|k7s| td|S|dvsd |cxkrd krnnB|dzt|kDr tdtjd|||dzd}|dks||zt|kDr td||dz||z}||vr9t|dkr tdtjd|d d\} } | | f}||z }|dk(rd}|t|krtd)Nrrzinvalid JPEG signature)rNF> rrFzinvalid JPEG marker streamz1JPEG has trailing/polyglot bytes or no dimensions>rztruncated JPEG segmentz>Hzinvalid JPEG segment lengthrztruncated JPEG SOFz>HHTzJPEG EOI missing)rrfindrr) r,r dimensionsin_scansofmarkercoderrrrs r _strict_jpegrs 4y1}RaK/344-CW XC D / YYw,FzP ) **OCD /d3i4&7qD /d3i4&7c$iF ) **E9D 1HCt|tt3t3GCyD "#?@@D /d3i4&7qD /d3i4&7c$i. ) **-9D 1HC 4<c$i:#5"#VWW  < 44#74#7  7SY 78 8tT#cAg%67: A:vD 1<= =sQwsV|, 3;7|a"#788"MM%1>MFEJ v  4<GW D /X ) **rcB|rt|tkDrtdtd|jtrdt |}}n*|jdrdt |}}n tdtt_ ddl m }tj||5}|j|j|jf}|j }|j"}ddd|\} } |k7s|k7r td | d ks#| d ks| t*kDs| t*kDs | | ztkDr td t,vrtd ||| | |t|t/|dS#1swYxYw#t$t&t(f$r}td |d}~wwxYw)Nimage size must be 1.. bytesPNGrJPEGz'only real PNG or JPEG input is acceptedr)BytesIOzimage decoder rejected inputzimage format/dimension mismatchrzimage dimensions exceed policyzimage mode is not allowed: )formatrrrBr0r*)rrrrrrr MAX_PIXELSr MAX_IMAGE_PIXELSiorr8loadrrrBrr OSError ValueError MAX_DIMENSION ALLOWED_MODESr-) r,fmtrrimagedecodedrBdecoded_formatrrrs rvalidate_imagers 3t9y(3I;fEFF wT!2Z  % ,t"4ZDEE'ED ZZ &% JJL{{ELL1G::D"\\N 'ME6: 5<== qyFQJ%-"76M;QUZ]cUcfpUp;<< = 8?@@EVTTWX\T]ioptiu vv' & #GZ 8D9:CDs1!E9&AE-'E9-E62E99F FFc|js tdtjtjztj z} tj ||} tj|}tj|j}tj|jr|jdk7r td|dzs|dzr td|jdks|jt kDrtdt d gt dz}}|rEtj"|t%d |}|sn"|j'||t)|z}|rEd j+|} tj|} |j,|j.|j|j0f| j,| j.| j| j0fk7r td t)| |jk7r td | |ftj2|S#t$r}td|j|d}~wwxYw#tj2|wxYw)N4image path must be an absolute Linux filesystem pathzcannot securely open image: rz(image must be a single-link regular fileIz;image source must not be executable or group/world-writablerrirzimage changed while being readzincomplete image read) is_absoluterr7r9r;rjr8rstrerrorrlrmrprornst_nlinkst_sizerrqminappendrjoinst_devst_ino st_mtime_nsr=) r>rxr1rbeforerBparts remainingr{r,afters r read_sourcers    QRR KK",, & 6ES WWT5 !"||FNN+||FNN+v!/CIJ J %<4%<\] ] >>A )!;!7 {&IJ Jy1}yGGBK ; attestationrcontract contract_rawr,rr extensiontargetcapturedreceipts rrrsUk!CDD    QRR*_Hl~~7--/5<<>UEUEUEWMNN#D)D+ 4 E/U2I KKUKHHUE ' {3 3F ||FKKM))*e3v7H7H7Jd7R  &;<<1x||HLL1==hllKUUW__`hjmnH>&I&!,/' >!(O!(O-!(O >)#. f0067  ,0.2 ! 7<(-+/"*/  -G< Wi01 N   &  KKM      s0'(IJ-JJ J J JJc t\}}ddt||dddddtjtjd S)Nz*task26-customer-surface-capture-dry-run-v1PASS_AWAITING_FINAL_RUN_IMAGErhr[r) rirrr[ live_actionsnetwork_actions ocr_actions vault_presentreceipt_present)rr-rrQr)r rzs rdry_runr-KsM!OMHc>1!#;i(5">>+  rctjt}|jddtd|jdd|jd d |j |} |j r.|j |j td t }n;|j td t|j|jxsd}tjjjt|y#tt t"j$f$r-}tj&jd|dYd}~yd}~wwxYw)N) descriptionr?z#absolute Linux path to one PNG/JPEG)nargstypehelpz--attestzexact attestation token)r3z --dry-run store_true)actionz'dry-run accepts no image or attestationzone image path is requiredrzcapture rejected: r!r)argparseArgumentParser__doc__ add_argumentr parse_argsr-rattestrrsysstdoutbufferr2r&rr"JSONDecodeErrorstderr)argvparserargsresultrs rmainrFYs  $ $ 9F srrHrJ)rZ)r>rr,r0rBrIrHrJ)rHztuple[dict[str, Any], bytes])r,r0rHztuple[int, int])r,r0rHdict[str, Any])r>rrHztuple[bytes, int])r>rrrwrzdatetime | NonerHrK)rHrKr()rBzlist[str] | NonerHrI)5r9 __future__rr7r)r"r7rmrr=rMrrrpathlibrtypingrrPILr r __file__resolverJrrkrrrrrrrr RuntimeErrorrr&r-r2r5r?rXrrrrrrr-rFr SystemExitrrrrTs<"  ' - H~&& ) ) w 0 0    4 W  < i,KM((4:-+^1+fw8 DEI;z * z TV r