--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Node / ReticulumProjects / MeshChatX.git / files / meshchatx / src / backend / plugin_trusted_publishers.py
Displaying Raw • Download
meshchatx/src/backend/plugin_trusted_publishers.py b0d47b9ece2aac27f9b52d71eead961754287bf5 (b0d47b9e) Text, 10.57 KB
T8b949e# SPDX-License-Identifier: 0BSD
Tff7b72from T7ee787__future__ Tff7b72import Te6edf3annotations
Tff7b72import T7ee787hashlib
Tff7b72import T7ee787json
Tff7b72import T7ee787os
Tff7b72import T7ee787sqlite3
Tff7b72import T7ee787threading
Tff7b72from T7ee787dataclasses Tff7b72import Te6edf3dataclass
Te6edf3TRUSTED_PUBLISHERS_DIGEST_KEY Tff7b72= Ta5d6ff"Ta5d6ffplugins.trusted_publishers_digestTa5d6ff"
Te6edf3_trusted_lock Tff7b72= Te6edf3threadingTff7b72.Td2a8ffRLockTb4b4b4(Tb4b4b4)
Te6edf3_user_tampered Tff7b72= Tff7b72False
Te6edf3_user_tamper_reason Tff7b72= Ta5d6ff"Ta5d6ff"
Tf0883e@dataclass
Tff7b72class T56d364TrustedPublisherTb4b4b4:
Te6edf3identityTb4b4b4: Tffa657str
Te6edf3nameTb4b4b4: Tffa657str
Tff7b72def Td2a8ff_bundled_publishers_pathTb4b4b4(Tb4b4b4) Tff7b72-Tff7b72> Tffa657strTb4b4b4:
Tff7b72return Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffjoinTb4b4b4(Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffdirnameTb4b4b4(Tff7b72__file__Tb4b4b4)Tb4b4b4, Ta5d6ff"Ta5d6ffdataTa5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6fftrusted_publishers.jsonTa5d6ff"Tb4b4b4)
Tff7b72def Td2a8ffuser_trusted_publishers_pathTb4b4b4(Te6edf3plugins_rootTb4b4b4: Tffa657strTb4b4b4) Tff7b72-Tff7b72> Tffa657strTb4b4b4:
Tff7b72return Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffjoinTb4b4b4(Te6edf3plugins_rootTb4b4b4, Ta5d6ff"Ta5d6fftrusted_publishers.jsonTa5d6ff"Tb4b4b4)
Tff7b72def Td2a8ff_load_json_publishersTb4b4b4(Te6edf3pathTb4b4b4: Tffa657strTb4b4b4) Tff7b72-Tff7b72> Tffa657listTb4b4b4[Te6edf3TrustedPublisherTb4b4b4]Tb4b4b4:
Tff7b72if Tff7b72not Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffisfileTb4b4b4(Te6edf3pathTb4b4b4)Tb4b4b4:
Tff7b72return Tb4b4b4[Tb4b4b4]
Tff7b72tryTb4b4b4:
Tff7b72with Tffa657openTb4b4b4(Te6edf3pathTb4b4b4, Te6edf3encodingTff7b72=Ta5d6ff"Ta5d6ffutf-8Ta5d6ff"Tb4b4b4) Tff7b72as Te6edf3handleTb4b4b4:
Te6edf3data Tff7b72= Te6edf3jsonTff7b72.Td2a8ffloadTb4b4b4(Te6edf3handleTb4b4b4)
Tff7b72except Tf85149ExceptionTb4b4b4:
Tff7b72return Tb4b4b4[Tb4b4b4]
Te6edf3publishers Tff7b72= Te6edf3dataTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ffpublishersTa5d6ff"Tb4b4b4) Tff7b72if Tffa657isinstanceTb4b4b4(Te6edf3dataTb4b4b4, Tffa657dictTb4b4b4) Tff7b72else Tff7b72None
Tff7b72if Tff7b72not Tffa657isinstanceTb4b4b4(Te6edf3publishersTb4b4b4, Tffa657listTb4b4b4)Tb4b4b4:
Tff7b72return Tb4b4b4[Tb4b4b4]
Te6edf3outTb4b4b4: Tffa657listTb4b4b4[Te6edf3TrustedPublisherTb4b4b4] Tff7b72= Tb4b4b4[Tb4b4b4]
Tff7b72for Te6edf3item Tff7b72in Te6edf3publishersTb4b4b4:
Tff7b72if Tff7b72not Tffa657isinstanceTb4b4b4(Te6edf3itemTb4b4b4, Tffa657dictTb4b4b4)Tb4b4b4:
Tff7b72continue
Te6edf3identity Tff7b72= Tffa657strTb4b4b4(Te6edf3itemTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ffidentityTa5d6ff"Tb4b4b4) Tff7b72or Ta5d6ff"Ta5d6ff"Tb4b4b4)Tff7b72.Td2a8ffstripTb4b4b4(Tb4b4b4)Tff7b72.Td2a8fflowerTb4b4b4(Tb4b4b4)
Tff7b72if Tff7b72not Te6edf3identityTb4b4b4:
Tff7b72continue
Te6edf3name Tff7b72= Tffa657strTb4b4b4(Te6edf3itemTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ffnameTa5d6ff"Tb4b4b4) Tff7b72or Te6edf3identityTb4b4b4)Tff7b72.Td2a8ffstripTb4b4b4(Tb4b4b4)
Te6edf3outTff7b72.Td2a8ffappendTb4b4b4(Te6edf3TrustedPublisherTb4b4b4(Te6edf3identityTff7b72=Te6edf3identityTb4b4b4, Te6edf3nameTff7b72=Te6edf3nameTb4b4b4)Tb4b4b4)
Tff7b72return Te6edf3out
Tff7b72def Td2a8ffdigest_user_trusted_publishers_rawTb4b4b4(Te6edf3rawTb4b4b4: Tffa657bytesTb4b4b4) Tff7b72-Tff7b72> Tffa657strTb4b4b4:
Te6edf3data Tff7b72= Te6edf3jsonTff7b72.Td2a8ffloadsTb4b4b4(Te6edf3rawTff7b72.Td2a8ffdecodeTb4b4b4(Ta5d6ff"Ta5d6ffutf-8Ta5d6ff"Tb4b4b4)Tb4b4b4)
Te6edf3canonical Tff7b72= Te6edf3jsonTff7b72.Td2a8ffdumpsTb4b4b4(Te6edf3dataTb4b4b4, Te6edf3separatorsTff7b72=Tb4b4b4(Ta5d6ff"Ta5d6ff,Ta5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ff:Ta5d6ff"Tb4b4b4)Tb4b4b4, Te6edf3sort_keysTff7b72=Tff7b72TrueTb4b4b4)Tff7b72.Td2a8ffencodeTb4b4b4(Ta5d6ff"Ta5d6ffutf-8Ta5d6ff"Tb4b4b4)
Tff7b72return Te6edf3hashlibTff7b72.Td2a8ffsha256Tb4b4b4(Te6edf3canonicalTb4b4b4)Tff7b72.Td2a8ffhexdigestTb4b4b4(Tb4b4b4)
Tff7b72def Td2a8ff_ensure_settings_tableTb4b4b4(Te6edf3connTb4b4b4: Te6edf3sqlite3Tff7b72.Td2a8ffConnectionTb4b4b4) Tff7b72-Tff7b72> Tff7b72NoneTb4b4b4:
Te6edf3connTff7b72.Td2a8ffexecuteTb4b4b4(
T8b949e"""
CREATE TABLE IF NOT EXISTS plugin_settings (
setting_key TEXT PRIMARY KEY,
setting_value TEXT NOT NULL
)
"""Tb4b4b4,
Tb4b4b4)
Tff7b72def Td2a8ff_get_digestTb4b4b4(Te6edf3state_db_pathTb4b4b4: Tffa657strTb4b4b4) Tff7b72-Tff7b72> Tffa657strTb4b4b4:
Tff7b72with Te6edf3sqlite3Tff7b72.Td2a8ffconnectTb4b4b4(Te6edf3state_db_pathTb4b4b4) Tff7b72as Te6edf3connTb4b4b4:
Te6edf3_ensure_settings_tableTb4b4b4(Te6edf3connTb4b4b4)
Te6edf3row Tff7b72= Te6edf3connTff7b72.Td2a8ffexecuteTb4b4b4(
Ta5d6ff"Ta5d6ffSELECT setting_value FROM plugin_settings WHERE setting_key = ?Ta5d6ff"Tb4b4b4,
Tb4b4b4(Te6edf3TRUSTED_PUBLISHERS_DIGEST_KEYTb4b4b4,Tb4b4b4)Tb4b4b4,
Tb4b4b4)Tff7b72.Td2a8fffetchoneTb4b4b4(Tb4b4b4)
Tff7b72return Tb4b4b4(Te6edf3rowTb4b4b4[T79c0ff0Tb4b4b4] Tff7b72if Te6edf3row Tff7b72else Ta5d6ff"Ta5d6ff"Tb4b4b4)Tff7b72.Td2a8ffstripTb4b4b4(Tb4b4b4)
Tff7b72def Td2a8ff_set_digestTb4b4b4(Te6edf3state_db_pathTb4b4b4: Tffa657strTb4b4b4, Te6edf3digestTb4b4b4: Tffa657strTb4b4b4) Tff7b72-Tff7b72> Tff7b72NoneTb4b4b4:
Tff7b72with Te6edf3sqlite3Tff7b72.Td2a8ffconnectTb4b4b4(Te6edf3state_db_pathTb4b4b4) Tff7b72as Te6edf3connTb4b4b4:
Te6edf3_ensure_settings_tableTb4b4b4(Te6edf3connTb4b4b4)
Te6edf3connTff7b72.Td2a8ffexecuteTb4b4b4(
T8b949e"""
INSERT INTO plugin_settings (setting_key, setting_value)
VALUES (?, ?)
ON CONFLICT(setting_key) DO UPDATE SET setting_value = excluded.setting_value
"""Tb4b4b4,
Tb4b4b4(Te6edf3TRUSTED_PUBLISHERS_DIGEST_KEYTb4b4b4, Te6edf3digestTb4b4b4)Tb4b4b4,
Tb4b4b4)
Te6edf3connTff7b72.Td2a8ffcommitTb4b4b4(Tb4b4b4)
Tff7b72def Td2a8ffinit_trusted_publishers_integrityTb4b4b4(Te6edf3state_db_pathTb4b4b4: Tffa657strTb4b4b4, Te6edf3plugins_rootTb4b4b4: Tffa657strTb4b4b4) Tff7b72-Tff7b72> Tff7b72NoneTb4b4b4:
Te6edf3verify_user_trusted_publishers_integrityTb4b4b4(Te6edf3state_db_pathTb4b4b4, Te6edf3plugins_rootTb4b4b4)
Tff7b72def Td2a8ffuser_trusted_publishers_tamperedTb4b4b4(Tb4b4b4) Tff7b72-Tff7b72> Tffa657tupleTb4b4b4[Tffa657boolTb4b4b4, Tffa657strTb4b4b4]Tb4b4b4:
Tff7b72with Te6edf3_trusted_lockTb4b4b4:
Tff7b72return Te6edf3_user_tamperedTb4b4b4, Te6edf3_user_tamper_reason
Tff7b72def Td2a8ffverify_user_trusted_publishers_integrityTb4b4b4(
Te6edf3state_db_pathTb4b4b4: Tffa657strTb4b4b4,
Te6edf3plugins_rootTb4b4b4: Tffa657strTb4b4b4,
Tb4b4b4) Tff7b72-Tff7b72> Tff7b72NoneTb4b4b4:
Tff7b72global Te6edf3_user_tamperedTb4b4b4, Te6edf3_user_tamper_reason
Te6edf3path Tff7b72= Te6edf3user_trusted_publishers_pathTb4b4b4(Te6edf3plugins_rootTb4b4b4)
Tff7b72if Tff7b72not Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffisfileTb4b4b4(Te6edf3pathTb4b4b4)Tb4b4b4:
Tff7b72with Te6edf3_trusted_lockTb4b4b4:
Te6edf3_user_tampered Tff7b72= Tff7b72False
Te6edf3_user_tamper_reason Tff7b72= Ta5d6ff"Ta5d6ff"
Te6edf3_set_digestTb4b4b4(Te6edf3state_db_pathTb4b4b4, Ta5d6ff"Ta5d6ff"Tb4b4b4)
Tff7b72return
Tff7b72with Tffa657openTb4b4b4(Te6edf3pathTb4b4b4, Ta5d6ff"Ta5d6ffrbTa5d6ff"Tb4b4b4) Tff7b72as Te6edf3handleTb4b4b4:
Te6edf3raw Tff7b72= Te6edf3handleTff7b72.Td2a8ffreadTb4b4b4(Tb4b4b4)
Te6edf3current Tff7b72= Te6edf3digest_user_trusted_publishers_rawTb4b4b4(Te6edf3rawTb4b4b4)
Te6edf3stored Tff7b72= Te6edf3_get_digestTb4b4b4(Te6edf3state_db_pathTb4b4b4)
Tff7b72with Te6edf3_trusted_lockTb4b4b4:
Tff7b72if Tff7b72not Te6edf3storedTb4b4b4:
Te6edf3_user_tampered Tff7b72= Tff7b72False
Te6edf3_user_tamper_reason Tff7b72= Ta5d6ff"Ta5d6ff"
Te6edf3_set_digestTb4b4b4(Te6edf3state_db_pathTb4b4b4, Te6edf3currentTb4b4b4)
Tff7b72return
Tff7b72if Te6edf3stored Tff7b72!= Te6edf3currentTb4b4b4:
Te6edf3_user_tampered Tff7b72= Tff7b72True
Te6edf3_user_tamper_reason Tff7b72= Tb4b4b4(
Ta5d6ff"Ta5d6fftrusted publisher list was modified outside MeshChatXTa5d6ff"
Tb4b4b4)
Tff7b72return
Te6edf3_user_tampered Tff7b72= Tff7b72False
Te6edf3_user_tamper_reason Tff7b72= Ta5d6ff"Ta5d6ff"
Tff7b72def Td2a8fflist_trusted_publishersTb4b4b4(
Te6edf3plugins_rootTb4b4b4: Tffa657strTb4b4b4,
Te6edf3state_db_pathTb4b4b4: Tffa657strTb4b4b4,
Tb4b4b4) Tff7b72-Tff7b72> Tffa657listTb4b4b4[Tffa657dictTb4b4b4[Tffa657strTb4b4b4, Tffa657strTb4b4b4]Tb4b4b4]Tb4b4b4:
Te6edf3verify_user_trusted_publishers_integrityTb4b4b4(Te6edf3state_db_pathTb4b4b4, Te6edf3plugins_rootTb4b4b4)
Te6edf3seenTb4b4b4: Tffa657setTb4b4b4[Tffa657strTb4b4b4] Tff7b72= Tffa657setTb4b4b4(Tb4b4b4)
Te6edf3rowsTb4b4b4: Tffa657listTb4b4b4[Tffa657dictTb4b4b4[Tffa657strTb4b4b4, Tffa657strTb4b4b4]Tb4b4b4] Tff7b72= Tb4b4b4[Tb4b4b4]
Tff7b72for Te6edf3pub Tff7b72in Te6edf3_load_json_publishersTb4b4b4(Te6edf3_bundled_publishers_pathTb4b4b4(Tb4b4b4)Tb4b4b4)Tb4b4b4:
Tff7b72if Te6edf3pubTff7b72.Td2a8ffidentity Tff7b72in Te6edf3seenTb4b4b4:
Tff7b72continue
Te6edf3seenTff7b72.Td2a8ffaddTb4b4b4(Te6edf3pubTff7b72.Td2a8ffidentityTb4b4b4)
Te6edf3rowsTff7b72.Td2a8ffappendTb4b4b4(Tb4b4b4{Ta5d6ff"Ta5d6ffidentityTa5d6ff"Tb4b4b4: Te6edf3pubTff7b72.Td2a8ffidentityTb4b4b4, Ta5d6ff"Ta5d6ffnameTa5d6ff"Tb4b4b4: Te6edf3pubTff7b72.Td2a8ffname Tff7b72or Te6edf3pubTff7b72.Td2a8ffidentityTb4b4b4}Tb4b4b4)
Te6edf3tamperedTb4b4b4, Te6edf3_reason Tff7b72= Te6edf3user_trusted_publishers_tamperedTb4b4b4(Tb4b4b4)
Tff7b72if Tff7b72not Te6edf3tamperedTb4b4b4:
Tff7b72for Te6edf3pub Tff7b72in Te6edf3_load_json_publishersTb4b4b4(Te6edf3user_trusted_publishers_pathTb4b4b4(Te6edf3plugins_rootTb4b4b4)Tb4b4b4)Tb4b4b4:
Tff7b72if Te6edf3pubTff7b72.Td2a8ffidentity Tff7b72in Te6edf3seenTb4b4b4:
Tff7b72continue
Te6edf3seenTff7b72.Td2a8ffaddTb4b4b4(Te6edf3pubTff7b72.Td2a8ffidentityTb4b4b4)
Te6edf3rowsTff7b72.Td2a8ffappendTb4b4b4(Tb4b4b4{Ta5d6ff"Ta5d6ffidentityTa5d6ff"Tb4b4b4: Te6edf3pubTff7b72.Td2a8ffidentityTb4b4b4, Ta5d6ff"Ta5d6ffnameTa5d6ff"Tb4b4b4: Te6edf3pubTff7b72.Td2a8ffname Tff7b72or Te6edf3pubTff7b72.Td2a8ffidentityTb4b4b4}Tb4b4b4)
Tff7b72return Te6edf3rows
Tff7b72def Td2a8fflookup_trusted_publisher_in_storageTb4b4b4(
Te6edf3signer_hexTb4b4b4: Tffa657strTb4b4b4,
Te6edf3plugins_rootTb4b4b4: Tffa657strTb4b4b4,
Te6edf3state_db_pathTb4b4b4: Tffa657strTb4b4b4,
Tb4b4b4) Tff7b72-Tff7b72> Tffa657tupleTb4b4b4[Tffa657strTb4b4b4, Tffa657boolTb4b4b4]Tb4b4b4:
Te6edf3needle Tff7b72= Tb4b4b4(Te6edf3signer_hex Tff7b72or Ta5d6ff"Ta5d6ff"Tb4b4b4)Tff7b72.Td2a8ffstripTb4b4b4(Tb4b4b4)Tff7b72.Td2a8fflowerTb4b4b4(Tb4b4b4)
Tff7b72if Tff7b72not Te6edf3needleTb4b4b4:
Tff7b72return Ta5d6ff"Ta5d6ff"Tb4b4b4, Tff7b72False
Tff7b72for Te6edf3pub Tff7b72in Te6edf3list_trusted_publishersTb4b4b4(Te6edf3plugins_rootTb4b4b4, Te6edf3state_db_pathTb4b4b4)Tb4b4b4:
Tff7b72if Te6edf3pubTb4b4b4[Ta5d6ff"Ta5d6ffidentityTa5d6ff"Tb4b4b4] Tff7b72== Te6edf3needleTb4b4b4:
Tff7b72return Te6edf3pubTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ffnameTa5d6ff"Tb4b4b4) Tff7b72or Te6edf3needleTb4b4b4, Tff7b72True
Tff7b72return Ta5d6ff"Ta5d6ff"Tb4b4b4, Tff7b72False
Tff7b72def Td2a8ffadd_user_trusted_publisherTb4b4b4(
Te6edf3plugins_rootTb4b4b4: Tffa657strTb4b4b4,
Te6edf3state_db_pathTb4b4b4: Tffa657strTb4b4b4,
Te6edf3identityTb4b4b4: Tffa657strTb4b4b4,
Te6edf3nameTb4b4b4: Tffa657strTb4b4b4,
Tb4b4b4) Tff7b72-Tff7b72> Tff7b72NoneTb4b4b4:
Tff7b72global Te6edf3_user_tamperedTb4b4b4, Te6edf3_user_tamper_reason
Te6edf3identity Tff7b72= Tb4b4b4(Te6edf3identity Tff7b72or Ta5d6ff"Ta5d6ff"Tb4b4b4)Tff7b72.Td2a8ffstripTb4b4b4(Tb4b4b4)Tff7b72.Td2a8fflowerTb4b4b4(Tb4b4b4)
Tff7b72if Tff7b72not Te6edf3identityTb4b4b4:
Tff7b72raise Tf85149ValueErrorTb4b4b4(Ta5d6ff"Ta5d6ffpublisher identity is requiredTa5d6ff"Tb4b4b4)
Te6edf3name Tff7b72= Tb4b4b4(Te6edf3name Tff7b72or Te6edf3identityTb4b4b4)Tff7b72.Td2a8ffstripTb4b4b4(Tb4b4b4)
Te6edf3path Tff7b72= Te6edf3user_trusted_publishers_pathTb4b4b4(Te6edf3plugins_rootTb4b4b4)
Te6edf3publishersTb4b4b4: Tffa657listTb4b4b4[Tffa657dictTb4b4b4[Tffa657strTb4b4b4, Tffa657strTb4b4b4]Tb4b4b4] Tff7b72= Tb4b4b4[Tb4b4b4]
Tff7b72if Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffisfileTb4b4b4(Te6edf3pathTb4b4b4)Tb4b4b4:
Tff7b72with Tffa657openTb4b4b4(Te6edf3pathTb4b4b4, Te6edf3encodingTff7b72=Ta5d6ff"Ta5d6ffutf-8Ta5d6ff"Tb4b4b4) Tff7b72as Te6edf3handleTb4b4b4:
Tff7b72tryTb4b4b4:
Te6edf3data Tff7b72= Te6edf3jsonTff7b72.Td2a8ffloadTb4b4b4(Te6edf3handleTb4b4b4)
Tff7b72if Tffa657isinstanceTb4b4b4(Te6edf3dataTb4b4b4, Tffa657dictTb4b4b4) Tff7b72and Tffa657isinstanceTb4b4b4(Te6edf3dataTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ffpublishersTa5d6ff"Tb4b4b4)Tb4b4b4, Tffa657listTb4b4b4)Tb4b4b4:
Te6edf3publishers Tff7b72= Tb4b4b4[
Te6edf3item Tff7b72for Te6edf3item Tff7b72in Te6edf3dataTb4b4b4[Ta5d6ff"Ta5d6ffpublishersTa5d6ff"Tb4b4b4] Tff7b72if Tffa657isinstanceTb4b4b4(Te6edf3itemTb4b4b4, Tffa657dictTb4b4b4)
Tb4b4b4]
Tff7b72except Tf85149ExceptionTb4b4b4:
Te6edf3publishers Tff7b72= Tb4b4b4[Tb4b4b4]
Tff7b72for Te6edf3item Tff7b72in Te6edf3publishersTb4b4b4:
Tff7b72if Tffa657strTb4b4b4(Te6edf3itemTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ffidentityTa5d6ff"Tb4b4b4) Tff7b72or Ta5d6ff"Ta5d6ff"Tb4b4b4)Tff7b72.Td2a8ffstripTb4b4b4(Tb4b4b4)Tff7b72.Td2a8fflowerTb4b4b4(Tb4b4b4) Tff7b72== Te6edf3identityTb4b4b4:
Tff7b72return
Te6edf3publishersTff7b72.Td2a8ffappendTb4b4b4(Tb4b4b4{Ta5d6ff"Ta5d6ffidentityTa5d6ff"Tb4b4b4: Te6edf3identityTb4b4b4, Ta5d6ff"Ta5d6ffnameTa5d6ff"Tb4b4b4: Te6edf3nameTb4b4b4}Tb4b4b4)
Te6edf3osTff7b72.Td2a8ffmakedirsTb4b4b4(Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffdirnameTb4b4b4(Te6edf3pathTb4b4b4)Tb4b4b4, Te6edf3exist_okTff7b72=Tff7b72TrueTb4b4b4)
Te6edf3raw Tff7b72= Te6edf3jsonTff7b72.Td2a8ffdumpsTb4b4b4(Tb4b4b4{Ta5d6ff"Ta5d6ffpublishersTa5d6ff"Tb4b4b4: Te6edf3publishersTb4b4b4}Tb4b4b4, Te6edf3indentTff7b72=T79c0ff2Tb4b4b4) Tff7b72+ Ta5d6ff"Tffea00\nTa5d6ff"
Tff7b72with Tffa657openTb4b4b4(Te6edf3pathTb4b4b4, Ta5d6ff"Ta5d6ffwTa5d6ff"Tb4b4b4, Te6edf3encodingTff7b72=Ta5d6ff"Ta5d6ffutf-8Ta5d6ff"Tb4b4b4) Tff7b72as Te6edf3handleTb4b4b4:
Te6edf3handleTff7b72.Td2a8ffwriteTb4b4b4(Te6edf3rawTb4b4b4)
Te6edf3digest Tff7b72= Te6edf3digest_user_trusted_publishers_rawTb4b4b4(Te6edf3rawTff7b72.Td2a8ffencodeTb4b4b4(Ta5d6ff"Ta5d6ffutf-8Ta5d6ff"Tb4b4b4)Tb4b4b4)
Te6edf3_set_digestTb4b4b4(Te6edf3state_db_pathTb4b4b4, Te6edf3digestTb4b4b4)
Tff7b72with Te6edf3_trusted_lockTb4b4b4:
Te6edf3_user_tampered Tff7b72= Tff7b72False
Te6edf3_user_tamper_reason Tff7b72= Ta5d6ff"Ta5d6ff"
Tff7b72def Td2a8ffremove_user_trusted_publisherTb4b4b4(
Te6edf3plugins_rootTb4b4b4: Tffa657strTb4b4b4,
Te6edf3state_db_pathTb4b4b4: Tffa657strTb4b4b4,
Te6edf3identityTb4b4b4: Tffa657strTb4b4b4,
Tb4b4b4) Tff7b72-Tff7b72> Tffa657boolTb4b4b4:
Tff7b72global Te6edf3_user_tamperedTb4b4b4, Te6edf3_user_tamper_reason
Te6edf3identity Tff7b72= Tb4b4b4(Te6edf3identity Tff7b72or Ta5d6ff"Ta5d6ff"Tb4b4b4)Tff7b72.Td2a8ffstripTb4b4b4(Tb4b4b4)Tff7b72.Td2a8fflowerTb4b4b4(Tb4b4b4)
Te6edf3path Tff7b72= Te6edf3user_trusted_publishers_pathTb4b4b4(Te6edf3plugins_rootTb4b4b4)
Tff7b72if Tff7b72not Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffisfileTb4b4b4(Te6edf3pathTb4b4b4)Tb4b4b4:
Tff7b72return Tff7b72False
Tff7b72with Tffa657openTb4b4b4(Te6edf3pathTb4b4b4, Te6edf3encodingTff7b72=Ta5d6ff"Ta5d6ffutf-8Ta5d6ff"Tb4b4b4) Tff7b72as Te6edf3handleTb4b4b4:
Te6edf3data Tff7b72= Te6edf3jsonTff7b72.Td2a8ffloadTb4b4b4(Te6edf3handleTb4b4b4)
Te6edf3publishers Tff7b72= Te6edf3dataTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ffpublishersTa5d6ff"Tb4b4b4) Tff7b72if Tffa657isinstanceTb4b4b4(Te6edf3dataTb4b4b4, Tffa657dictTb4b4b4) Tff7b72else Tb4b4b4[Tb4b4b4]
Tff7b72if Tff7b72not Tffa657isinstanceTb4b4b4(Te6edf3publishersTb4b4b4, Tffa657listTb4b4b4)Tb4b4b4:
Tff7b72return Tff7b72False
Te6edf3kept Tff7b72= Tb4b4b4[
Te6edf3item
Tff7b72for Te6edf3item Tff7b72in Te6edf3publishers
Tff7b72if Tffa657isinstanceTb4b4b4(Te6edf3itemTb4b4b4, Tffa657dictTb4b4b4)
Tff7b72and Tffa657strTb4b4b4(Te6edf3itemTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ffidentityTa5d6ff"Tb4b4b4) Tff7b72or Ta5d6ff"Ta5d6ff"Tb4b4b4)Tff7b72.Td2a8ffstripTb4b4b4(Tb4b4b4)Tff7b72.Td2a8fflowerTb4b4b4(Tb4b4b4) Tff7b72!= Te6edf3identity
Tb4b4b4]
Tff7b72if Tffa657lenTb4b4b4(Te6edf3keptTb4b4b4) Tff7b72== Tffa657lenTb4b4b4(Te6edf3publishersTb4b4b4)Tb4b4b4:
Tff7b72return Tff7b72False
Te6edf3raw Tff7b72= Te6edf3jsonTff7b72.Td2a8ffdumpsTb4b4b4(Tb4b4b4{Ta5d6ff"Ta5d6ffpublishersTa5d6ff"Tb4b4b4: Te6edf3keptTb4b4b4}Tb4b4b4, Te6edf3indentTff7b72=T79c0ff2Tb4b4b4) Tff7b72+ Ta5d6ff"Tffea00\nTa5d6ff"
Tff7b72with Tffa657openTb4b4b4(Te6edf3pathTb4b4b4, Ta5d6ff"Ta5d6ffwTa5d6ff"Tb4b4b4, Te6edf3encodingTff7b72=Ta5d6ff"Ta5d6ffutf-8Ta5d6ff"Tb4b4b4) Tff7b72as Te6edf3handleTb4b4b4:
Te6edf3handleTff7b72.Td2a8ffwriteTb4b4b4(Te6edf3rawTb4b4b4)
Te6edf3digest Tff7b72= Te6edf3digest_user_trusted_publishers_rawTb4b4b4(Te6edf3rawTff7b72.Td2a8ffencodeTb4b4b4(Ta5d6ff"Ta5d6ffutf-8Ta5d6ff"Tb4b4b4)Tb4b4b4)
Te6edf3_set_digestTb4b4b4(Te6edf3state_db_pathTb4b4b4, Te6edf3digestTb4b4b4)
Tff7b72with Te6edf3_trusted_lockTb4b4b4:
Te6edf3_user_tampered Tff7b72= Tff7b72False
Te6edf3_user_tamper_reason Tff7b72= Ta5d6ff"Ta5d6ff"
Tff7b72return Tff7b72True
Tff7b72class T56d364PluginStateSettingsStoreTb4b4b4:
Tff7b72def Tff7b72__init__Tb4b4b4(Tff7b72selfTb4b4b4, Te6edf3state_db_pathTb4b4b4: Tffa657strTb4b4b4)Tb4b4b4:
Tff7b72selfTff7b72.Td2a8ffstate_db_path Tff7b72= Te6edf3state_db_path
Tff7b72def Td2a8ffget_settingTb4b4b4(Tff7b72selfTb4b4b4, Te6edf3keyTb4b4b4: Tffa657strTb4b4b4) Tff7b72-Tff7b72> Tffa657strTb4b4b4:
Tff7b72with Te6edf3sqlite3Tff7b72.Td2a8ffconnectTb4b4b4(Tff7b72selfTff7b72.Td2a8ffstate_db_pathTb4b4b4) Tff7b72as Te6edf3connTb4b4b4:
Te6edf3_ensure_settings_tableTb4b4b4(Te6edf3connTb4b4b4)
Te6edf3row Tff7b72= Te6edf3connTff7b72.Td2a8ffexecuteTb4b4b4(
Ta5d6ff"Ta5d6ffSELECT setting_value FROM plugin_settings WHERE setting_key = ?Ta5d6ff"Tb4b4b4,
Tb4b4b4(Te6edf3keyTb4b4b4,Tb4b4b4)Tb4b4b4,
Tb4b4b4)Tff7b72.Td2a8fffetchoneTb4b4b4(Tb4b4b4)
Tff7b72return Te6edf3rowTb4b4b4[T79c0ff0Tb4b4b4] Tff7b72if Te6edf3row Tff7b72else Ta5d6ff"Ta5d6ff"
Tff7b72def Td2a8ffset_settingTb4b4b4(Tff7b72selfTb4b4b4, Te6edf3keyTb4b4b4: Tffa657strTb4b4b4, Te6edf3valueTb4b4b4: Tffa657strTb4b4b4) Tff7b72-Tff7b72> Tff7b72NoneTb4b4b4:
Tff7b72with Te6edf3sqlite3Tff7b72.Td2a8ffconnectTb4b4b4(Tff7b72selfTff7b72.Td2a8ffstate_db_pathTb4b4b4) Tff7b72as Te6edf3connTb4b4b4:
Te6edf3_ensure_settings_tableTb4b4b4(Te6edf3connTb4b4b4)
Te6edf3connTff7b72.Td2a8ffexecuteTb4b4b4(
T8b949e"""
INSERT INTO plugin_settings (setting_key, setting_value)
VALUES (?, ?)
ON CONFLICT(setting_key) DO UPDATE SET setting_value = excluded.setting_value
"""Tb4b4b4,
Tb4b4b4(Te6edf3keyTb4b4b4, Te6edf3valueTb4b4b4)Tb4b4b4,
Tb4b4b4)
Te6edf3connTff7b72.Td2a8ffcommitTb4b4b4(Tb4b4b4)
Tf0883e@dataclass
Tff7b72class T56d364TrustedPublisherRecordTb4b4b4:
Te6edf3identityTb4b4b4: Tffa657str
Te6edf3nameTb4b4b4: Tffa657str
Tff7b72def Td2a8ffto_dictTb4b4b4(Tff7b72selfTb4b4b4) Tff7b72-Tff7b72> Tffa657dictTb4b4b4[Tffa657strTb4b4b4, Tffa657strTb4b4b4]Tb4b4b4:
Tff7b72return Tb4b4b4{Ta5d6ff"Ta5d6ffidentityTa5d6ff"Tb4b4b4: Tff7b72selfTff7b72.Td2a8ffidentityTb4b4b4, Ta5d6ff"Ta5d6ffnameTa5d6ff"Tb4b4b4: Tff7b72selfTff7b72.Td2a8ffnameTb4b4b4}
Tff7b72class T56d364TrustedPublishersStoreTb4b4b4:
Tff7b72def Tff7b72__init__Tb4b4b4(Tff7b72selfTb4b4b4, Te6edf3plugins_rootTb4b4b4: Tffa657strTb4b4b4, Te6edf3settings_storeTb4b4b4: Te6edf3PluginStateSettingsStoreTb4b4b4)Tb4b4b4:
Tff7b72selfTff7b72.Td2a8ffplugins_root Tff7b72= Te6edf3plugins_root
Tff7b72selfTff7b72.Td2a8ffsettings_store Tff7b72= Te6edf3settings_store
Te6edf3init_trusted_publishers_integrityTb4b4b4(Te6edf3settings_storeTff7b72.Td2a8ffstate_db_pathTb4b4b4, Te6edf3plugins_rootTb4b4b4)
Tff7b72def Td2a8fflookupTb4b4b4(Tff7b72selfTb4b4b4, Te6edf3signer_hexTb4b4b4: Tffa657strTb4b4b4) Tff7b72-Tff7b72> Tffa657tupleTb4b4b4[Tffa657strTb4b4b4, Tffa657boolTb4b4b4]Tb4b4b4:
Tff7b72return Te6edf3lookup_trusted_publisher_in_storageTb4b4b4(
Te6edf3signer_hexTb4b4b4,
Tff7b72selfTff7b72.Td2a8ffplugins_rootTb4b4b4,
Tff7b72selfTff7b72.Td2a8ffsettings_storeTff7b72.Td2a8ffstate_db_pathTb4b4b4,
Tb4b4b4)
Tff7b72def Td2a8fflist_publishersTb4b4b4(Tff7b72selfTb4b4b4) Tff7b72-Tff7b72> Tffa657listTb4b4b4[Te6edf3TrustedPublisherRecordTb4b4b4]Tb4b4b4:
Te6edf3rows Tff7b72= Te6edf3list_trusted_publishersTb4b4b4(
Tff7b72selfTff7b72.Td2a8ffplugins_rootTb4b4b4,
Tff7b72selfTff7b72.Td2a8ffsettings_storeTff7b72.Td2a8ffstate_db_pathTb4b4b4,
Tb4b4b4)
Tff7b72return Tb4b4b4[
Te6edf3TrustedPublisherRecordTb4b4b4(
Te6edf3identityTff7b72=Te6edf3rowTb4b4b4[Ta5d6ff"Ta5d6ffidentityTa5d6ff"Tb4b4b4]Tb4b4b4,
Te6edf3nameTff7b72=Te6edf3rowTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ffnameTa5d6ff"Tb4b4b4) Tff7b72or Te6edf3rowTb4b4b4[Ta5d6ff"Ta5d6ffidentityTa5d6ff"Tb4b4b4]Tb4b4b4,
Tb4b4b4)
Tff7b72for Te6edf3row Tff7b72in Te6edf3rows
Tb4b4b4]
Tff7b72def Td2a8ffadd_publisherTb4b4b4(Tff7b72selfTb4b4b4, Te6edf3identityTb4b4b4: Tffa657strTb4b4b4, Te6edf3nameTb4b4b4: Tffa657str Tff7b72= Ta5d6ff"Ta5d6ff"Tb4b4b4) Tff7b72-Tff7b72> Tff7b72NoneTb4b4b4:
Te6edf3add_user_trusted_publisherTb4b4b4(
Tff7b72selfTff7b72.Td2a8ffplugins_rootTb4b4b4,
Tff7b72selfTff7b72.Td2a8ffsettings_storeTff7b72.Td2a8ffstate_db_pathTb4b4b4,
Te6edf3identityTb4b4b4,
Te6edf3nameTb4b4b4,
Tb4b4b4)
Tff7b72def Td2a8ffremove_publisherTb4b4b4(Tff7b72selfTb4b4b4, Te6edf3identityTb4b4b4: Tffa657strTb4b4b4) Tff7b72-Tff7b72> Tffa657boolTb4b4b4:
Tff7b72return Te6edf3remove_user_trusted_publisherTb4b4b4(
Tff7b72selfTff7b72.Td2a8ffplugins_rootTb4b4b4,
Tff7b72selfTff7b72.Td2a8ffsettings_storeTff7b72.Td2a8ffstate_db_pathTb4b4b4,
Te6edf3identityTb4b4b4,
Tb4b4b4)
Tff7b72def Td2a8ffuser_tamperedTb4b4b4(Tff7b72selfTb4b4b4) Tff7b72-Tff7b72> Tffa657tupleTb4b4b4[Tffa657boolTb4b4b4, Tffa657strTb4b4b4]Tb4b4b4:
Te6edf3verify_user_trusted_publishers_integrityTb4b4b4(
Tff7b72selfTff7b72.Td2a8ffsettings_storeTff7b72.Td2a8ffstate_db_pathTb4b4b4,
Tff7b72selfTff7b72.Td2a8ffplugins_rootTb4b4b4,
Tb4b4b4)
Tff7b72return Te6edf3user_trusted_publishers_tamperedTb4b4b4(Tb4b4b4)
──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────