+ 2jgKnRt^RIHt^RIt^RIt^RIHt^RIHt^RI H t ^RI H t ^RI HtHtHt^RIHtHt^R IHt] 'd^R IHt^R IHt^R IHtHtHtHtR tRt Rt!RRlt"RRlt#RRlt$RRlt%RRlt&RRlt'RRlt(RRlt)R R!lt*R"R#lt+R$R%lt,R&R'lt-R(R)lt.R#)*aLocal-source, VCS-source, and archive-source materialisation. A ``LocalSource`` becomes the only candidate for a package: PyPI is not consulted. A ``VcsSource`` clones the repo and an ``ArchiveSource`` downloads and hash-verifies a ``.tar.gz`` and extracts it; both reuse the ``LocalSource`` extraction path. Each produces a single synthetic ``SdistFile`` whose version is read from ``[project].version``. ) annotationsN)suppress)Path) TYPE_CHECKING)ArchiveRequest) SdistFileextract_sdist_archiveverify_sdist_hash) VcsCloneError VcsRequest)canonicalize_name)Version) WheelMetadata) ArchiveSource LocalSourceProvider VcsSourcetreez .nab-completez .nab-hashesc$V^8dQhRRRRRR/#)providerrsourceszlist[LocalSource]returnzdict[str, LocalSource])formats"g/home/user/billing-ledger-validation/.venv/lib/python3.14/site-packages/nab_python/_provider/sources.py __annotate__r$s& cV'g/#/pVF=p\VP4pWB9dRVP: 2p\V4hW2V&K? V#)aValidate ``LocalSource`` entries and return a canonical-name map. Admitted at every :class:`~nab_python.provider.BuildPolicy` level; the policy only governs whether the backend may run when the static pyproject read returns nothing usable (see :func:`extract_source_metadata`). zduplicate local source for )r name ValueError)rroutsrc canonicalmsgs&& rindex_local_sourcesr%$sW  "$C%chh/  /| &c**rkr-) nab_indexrkrr= vcs_cache_dirrr parserU prepare_clonerdrmrKrAr commit_shavcs_pinsr r1resolver2r3r4) rr'r)_vcsr=r$requestclonerLrootr1r.r5s &&& rmaterialize_vcs_sourcerys^&0%&++)6 7 $C(( 2""6::.""  " "  ++77((00 # 9>8H8HH' 45 ::   D(-(:(:(:4$$ $Dv{{o.J& !&++.  H "( SS! 2FKK?"SE2#C(c12sA'E E4E//E4c$V^8dQhRRRRRR/#)rrrrzlist[ArchiveSource]rzdict[str, ArchiveSource]r)rs"rrr s&      rcV'g/#/pVFp\P!VP4P'g*RVP: RVP: 2p\ V4h\ VP4pWR9g!WPP9gWPP9dRVP: 2p\ V4hW2V&K V#)avValidate archive sources and return a canonical-name map. Admitted at every :class:`~nab_python.provider.BuildPolicy` level; the policy only governs whether the backend may run on the extracted tree (see :func:`extract_source_metadata`). There is no ``VcsPolicy``-style gate: the download is hash-verified, and which archive URLs are permitted is decided at config parse. archive source z has no hash in its URL: rb) rrprUhas_usable_hashrr r rg vcs_sources)rrr!r"r$r#s&& rindex_archive_sourcesr s  $&C##CGG,<<<#CHHz: download from z failed) rr=r rhashesrKindexrequest_direct_archiverUwaitget_sdist_archive_errorget_sdist_archiver ) rr)rvr=r#digestreventfailurer$data pinned_hashs &&& r_fetch_archive_bytesr0s1!&++.I ^^A q !F  & &E  7 7 7;; WE JJL++I>G b :#C(g5  " "9 5D | .>w{{m7S#C((~~ $,& Krc$V^8dQhRRRRRR/#)rrrr)rrztuple[Path, ArchiveRequest]r)rs"rrrTs+"N"N"N "N!"Nrc^RIHpVPpVfRVP: R2pV!V4h\P !VP 4pVP^,^,pW6, p\VP4pV\, P4'dV\V48:d\V4V3#\WV4p \W6WP4V3#)afReturn the extracted tree's root and the parsed request for ``source``. The cached tree is used with no download, offline runs included, only when the record left at extraction covers every hash this resolve declares. Otherwise the archive is downloaded and checked against the whole declaration, so adding a hash re-verifies rather than trusting the tree. rlr|z; declared but no archive_cache_dir was supplied to Provider)rr=archive_cache_dirrrrprUrset_COMPLETE_MARKERis_file_verified_hashes_extracted_rootr_extract_archive) rr)r= cache_dirr$rvrtargetdeclaredrs && r_prepare_archive_treerTs1**Ifkk_-: ; $C((""6::.G ^^A q !F  F7>>"H!!**,,=Mf=U1Uv&// ' :D It^^ Dg MMrc V^8dQhRRRR/#)rrrrzset[tuple[str, str]]r)rs"rrrysT&:rcV\, pVP4'g \4#VPRR7P 4pRV4UUUu0uF wr4pW53kK uppp#uupppi)zReturn the hashes the tree at ``target`` was verified against. The record is written with the completion marker, so a tree with no record covers nothing and is refetched rather than trusted. utf-8encodingc3B"TFqPR4xK R#5i=N) partition).0lines& r #_verified_hashes..s(O)<)<s)_HASHES_MARKERrr read_text splitlines)rrecordlines algorithm_ hex_digests& rrryss n $F >>  u   g  . 9 9 ;E)P(O (O $I* (O  sA/c(V^8dQhRRRRRRRR/#) rrrr'r(r)rrr*r)rs"rrrs6TTTT T% Trc\W4wr4VP'dW4P, MTpRVP: 2p\VVV\ VP4RR7p\ WWWV4#)aMaterialise ``source`` from its extracted tree, downloading if needed. Every hash ``source`` declares is checked: against the downloaded bytes in :func:`_fetch_archive_bytes`, or against the record the extraction left when the cached tree is reused. A tampered archive therefore fails the resolve loudly rather than being used and pinned unverified. The extracted tree then takes the same path as a LocalSource. r|archiver-)rr2rr3r r4)rr'r)rxrvr1r.r5s&&& rmaterialize_archive_sourcersp*(;MD+2*>*>*>4&& &DD"6;;/2J& !&++.  H "( SSrc ,V^8dQhRRRRRRRRR R/#) rrrrr(rrverifiedztuple[tuple[str, str], ...]rr)rs"rrrsAF#F#F# F# F#* F#  F#rc^RIHpW, pV\, pVP4'Eg%VP RRR7\ \ P!W R2RR74pVR, pVP 4\W(4p T PT\, 4\\4;_uu_4TP4R R R 4R PR T44p T\ , P#T R R 7T\, P%4TP'T4\*P,!TRR7\/V4# \dp RT 2p T!T 4T hR p ? ii;i +'giL;i \(dp TP4'g^\*P,!TRR7\\(4;_uu_4TP'T4R R R 4M +'giM;iTP4'gRT 2p T!T 4T hR p ? LR p ? ii;i \*P,!TRR7i;i)aExtract ``data`` under ``cache_dir`` keyed by ``digest``; return the root. The archive's root is published at ``_TREE_DIR`` inside the entry, so no name the archive chose reaches the entry's top level. ``verified`` names the hashes the caller checked ``data`` against, recorded beside the completion marker so a later resolve reuses the tree only for a declaration those hashes cover. Idempotent, like :func:`prepare_clone`: a tree another run published between the caller's cache check and this call is reused rather than re-extracted. A fresh extraction lands in a temporary sibling and is renamed into place once its completion marker is written, so the cache path never holds a partial tree. rlT)parentsexist_ok.z.tmp)dirprefixsuffixunpackedz archive could not be extracted: N c34"TFwrV RV 2xK R#5irr)rrrs& rr#_extract_archive..s!IQ0E 9+Qzl+srr) ignore_errorsz1extracted archive could not be moved into place: )rr=rrmkdirrtempfilemkdtemprr replace _TREE_DIRrFileNotFoundErrorrmdirjoinr write_texttouchrenameOSErrorshutilrmtreer) rrrrr=rmarkertmprrxrLr$rs &&&& rrrs*1  F & &F >>  t48## HA,vVW& 3Z'H NN  :,T< LLy )+,, -YYIQF> ! - -fw - G # # * * , > 6" MM#T 2 6 ""E :8>+C0c9 :-, >~~''MM&=!'** 6*+***~~''McUSC/4#=( > MM#T 2s+I E"3IFAI.F" F-E;;FI F I I!AH=&H8 H= H H=*H=8I=IIIc V^8dQhRRRR/#)rrrrr)rs"rrrs**D*T*rc8V\, P4#)z?Return the source root inside the extracted tree at ``target``.)rrt)rs&rrrs Y  ' ' ))r)/__doc__ __future__rrr contextlibrpathlibrtypingrnab_index.archivernab_index.clientrrr nab_index.vcsr r _vendor.packaging.utilsr _vendor.packaging.versionr r5rrrrrrrrrr%r6r3r4rhryrrrrrrrrrrrs#  ,PP373(JJ  ".T292x$'N'T)TX F!H"NJ8T8F#R*r