ms2k/lazaret
SHA256
Watch
0
Code Releases 3 Activity

Decouple client contracts and close private role registries

Browse source
This commit is contained in:
ms2k 2026-07-19 03:44:30 +09:00
commit 22325aa76a
1 changed files with 1041 additions and 321 deletions
Download patch file Download diff file Expand all files Collapse all files

8
tools/lazaret_verify.py
View file

@ -461,6 +461,14 @@ def audit_dependencies(metadata: dict) -> None:
policy = load_toml(ROOT / "deny.toml")
allowed_licenses = set(policy["licenses"]["allow"])
workspace_members = set(metadata["workspace_members"])
client = next(package for package in metadata["packages"] if package["name"] == "lazaret-client")
client_dependencies = {dependency["name"] for dependency in client["dependencies"]}
require(
client_dependencies.isdisjoint(
{"lazaret-host-coordinator", "lazaret-runtime-supervisor"}
),
"Lazaret Client depends on Host Coordinator or Runtime Supervisor implementation",
)
for package in metadata["packages"]:
if package["id"] not in workspace_members:
source = package.get("source") or ""