# Check

- Object ID: `em:implementation:sha256:0a219a04d2f463b59beb167c74f24f4822e9145e47f7bef517412eea1d016744`
- Kind: `implementation`
- Repository path: [`src/epistemedia/check.py`](https://github.com/yoheinakajima/epistemedia/blob/f92846570180dfa4511263f8ba98ecd18f7772c9/src/epistemedia/check.py)
- Content digest: `ed730858f301bada95de37bbd48ed60402c264e7df7b34f4ce677f478cebd583`

**Also filed under:** [Human and Agent Interfaces](https://epistemedia.org/topics/public-interfaces/)

## Source content

"""One local and CI validation contract for accepted repository candidates."""

from __future__ import annotations

import hashlib
import subprocess
import sys
import tempfile
from pathlib import Path

ROOT = Path(__file__).resolve().parents[2]
PUBLIC = ROOT / "generated" / "public"


def source_state() -> bytes:
    return subprocess.check_output(
        ["git", "status", "--porcelain=v1", "--untracked-files=all"], cwd=ROOT
    )


def tree_inventory(root: Path) -> list[tuple[str, str]]:
    return [
        (path.relative_to(root).as_posix(), hashlib.sha256(path.read_bytes()).hexdigest())
        for path in sorted(root.rglob("*"))
        if path.is_file()
    ]


def run(label: str, *args: str, quiet: bool = False) -> None:
    print(f"==> {label}", flush=True)
    subprocess.run(
        [sys.executable, *args],
        cwd=ROOT,
        check=True,
        stdout=subprocess.DEVNULL if quiet else None,
    )


def main() -> int:
    before = source_state()
    with tempfile.TemporaryDirectory(prefix="epistemedia-check-") as temporary:
        second = Path(temporary) / "public"
        run("validate accepted inputs", "-m", "epistemedia", "validate")
        run(
            "build public projection",
            "-m",
            "epistemedia",
            "build",
            "--output",
            str(PUBLIC),
            quiet=True,
        )
        run("run tests", "-m", "pytest", "-q")
        run("audit public projection", "-m", "epistemedia", "audit", "--public", str(PUBLIC))
        run(
            "build independent comparison projection",
            "-m",
            "epistemedia",
            "build",
            "--output",
            str(second),
            quiet=True,
        )
        if tree_inventory(PUBLIC) != tree_inventory(second):
            raise SystemExit("generated public projection differs across independent builds")
        print("==> deterministic public projection verified", flush=True)

    after = source_state()
    if before != after:
        print("Repository state changed while make check was running.", file=sys.stderr)
        print("Before:\n" + before.decode(errors="replace"), file=sys.stderr)
        print("After:\n" + after.decode(errors="replace"), file=sys.stderr)
        return 1
    print("==> source-tree state unchanged", flush=True)
    return 0


if __name__ == "__main__":
    raise SystemExit(main())