#!/usr/bin/env python3 """Generate deterministic P4-03 PLC/ClassicLadder runtime evidence.""" from __future__ import annotations import argparse import hashlib import json import subprocess from pathlib import Path from typing import Any OUTPUTS = (Path("web/worker/plc-runtime.mjs"), Path("web/worker/sim-session.mjs"), Path("web/worker/test_plc_runtime.mjs")) def canonical(value: Any) -> str: return json.dumps(value, ensure_ascii=False, sort_keys=True, separators=(",", ":")) def sha256(path: Path) -> str: return hashlib.sha256(path.read_bytes()).hexdigest() def generate(root: Path, report_path: Path) -> dict[str, Any]: result = subprocess.run(["node", "web/worker/test_plc_runtime.mjs"], cwd=root, stdout=subprocess.PIPE, stderr=subprocess.PIPE, check=False) report: dict[str, Any] = { "schema": "plc-runtime-report.v1", "task_id": "P4-03", "context_id": "linuxcnc-2.10.0-pre0-wasm-m1-py-c1", "status": "verified" if result.returncode == 0 else "blocked", "runtime": {"max_rungs": 256, "max_registers": 256, "max_sample_capacity": 1024, "scan_order": "configuration order", "fixed_tick": True}, "operations": ["SET", "ADD", "AND", "OR", "NOT", "TIMER", "COUNTER"], "backpressure": ["drop_newest", "drop_oldest", "block"], "boundaries": ["rung_capacity", "register_capacity", "sample_capacity", "tick_regression", "nonfinite", "unsupported_rung", "backpressure"], "test": {"status": "verified" if result.returncode == 0 else "blocked", "command": "node web/worker/test_plc_runtime.mjs", "stdout": result.stdout.decode("utf-8", errors="replace")[-3000:], "stderr": result.stderr.decode("utf-8", errors="replace")[-2000:]}, "outputs": [{"path": path.as_posix(), "bytes": (root / path).stat().st_size, "sha256": sha256(root / path)} for path in OUTPUTS], "classicladder": {"status": "capability_boundary", "resource": "linuxcnc/src/hal/classicladder", "unsupported_host_features": "blocked"}, "known_boundaries": ["full ClassicLadder XML/GUI editor is outside Worker core", "real device transport remains REAL-EXCLUDED"], } report["report_sha256"] = hashlib.sha256(canonical(report).encode("utf-8")).hexdigest() report_path.parent.mkdir(parents=True, exist_ok=True) report_path.write_text(json.dumps(report, ensure_ascii=False, sort_keys=True, indent=2) + "\n", encoding="utf-8") return report def main() -> int: parser = argparse.ArgumentParser(description=__doc__) parser.add_argument("--repo-root", type=Path, default=Path(__file__).resolve().parents[1]) parser.add_argument("--report", type=Path, default=Path("coverage/plc-runtime.report.json")) args = parser.parse_args() report = generate(args.repo_root.resolve(), args.repo_root.resolve() / args.report) print(f"plc_runtime={report['status']} test={report['test']['status']}") return 0 if report["status"] == "verified" else 1 if __name__ == "__main__": raise SystemExit(main())