uto4e4ka/poteninson_net

Review signals: 1 connection review.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written.

Repository processes attempted these non-loopback connections; proxies can hide the final hostname. 8 distinct locations. 2 attributed processes.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• pack builds a plugin zip for installing through the panel: Real input produced the expected result: beer_plugin-1.0.0.zip

  Source: собрать zip плагина для установки через панель

  Input: beer_plugin folder with --no-data and --out

  Expected: zip file beer_plugin-1.0.0.zip is written to the output folder

  Command: <guest-path> -m potehinsonnet.pack <guest-path> --no-data --out <guest-path>

  Observed: beer_plugin-1.0.0.zip: 3 файлов, 1 КБ, без data/

Examples

• Repository test suite passes (CI command python -m pytest -q): command completed successfully

  Source: .github/workflows/tests.yml

  Input: python -m pytest -q

  Expected: all tests pass

  Command: <guest-path> -m pytest -q

  Observed: te-packages/pytest_asyncio/plugin.py:300: PytestDeprecationWarning: The configuration option "asyncio_default_fixture_loop_scope" is unset. The event loop scope for asynchronous fixtures will default to the "fixture" caching scope. Future versions of pytest-asyncio will default the loop scope for asynchronous fixtures to "function" scope. Set the default fixture loop scope explicitly in order to avoid unexpected behavior in the future. Valid fixture loop scopes are: "function", "class", "module", "package", "session" warnings.warn(PytestDeprecationWarning(_DEFAULT_FIXTURE_LOOP_SCOPE_UNSET))

Local or hosted: local

Run the potehinsonnet plugin host (python -m potehinsonnet.run <plugin folder>) against NATS, and build a plugin zip (python -m potehinsonnet.pack); repository test suite (python -m pytest -q)

cd <guest-path> && git status 2>&1 | head -3; ls -la; cat README.md 2>/dev/null | head -200; id -u; python3 --version
echo $CDP_URL $<env-var>; ls /inputs 2>&1; ls <guest-path> 2>&1
cd <guest-path> && cat pyproject.toml; ls -la .coldpass tests potehinsonnet; ls .github/workflows && cat .github/workflows/*.yml | head -80; which uv nats-server docker 2>&1; ls /usr/bin/python3* 2>&1; cat /etc/os-release | head -2
cd /tmp && export NODE_USE_ENV_PROXY=1; uv python install 3.14 2>&1 | tail -5; uv python find 3.14 2>&1
cd /tmp && <guest-path> -m venv <guest-path> && <guest-path> -m pip install -q potehinsonnet 2>&1 | tail -5; <guest-path> -m pip show potehinsonnet | head -3; <guest-path> -m potehinsonnet.run --help 2>&1 | head -40
cd /tmp && apt-cache policy nats-server 2>&1 | head -3; <guest-path> -m pip download -q nats-server -d <guest-path> 2>&1 | tail -2; cat <guest-path> | head -80
ls -la <guest-path> 2>&1; cd /tmp && (curl -sSL -m 120 -o <guest-path> https://github.com/nats-io/nats-server/releases/download/v2.10.24/nats-server-v2.10.24-linux-amd64.tar.gz && echo ok) 2>&1 | tail -2; ls -la <guest-path> 2>&1
cd <guest-path> && mkdir -p natsbin && tar -xzf nats.tgz -C natsbin --strip-components=1 && ./natsbin/nats-server --version && (nohup ./natsbin/nats-server -p 4222 > <guest-path> 2>&1 &) ; sleep 2; tail -3 <guest-path>; (exec 3<>/dev/tcp/127.0.0.1/4222 && echo port-open)
mkdir -p <guest-path> && cd <guest-path> && cat > plugin.toml <<'EOF'
[plugin]
name = "beer_plugin"
label = "Beer exchange"
version = "1.0.0"

[runtime]
entry = "beer_plugin.main:create_plugin"
potehinsonnet = ">=0.19,<1.0"

[permissions]
discord = ["send_message"]
commands = true
panel = true

[settings.api_key]
label = "API key"
secret = <secret>
EOF
touch beer_plugin/__init__.py
cat > beer_plugin/main.py <<'EOF'
from potehinsonnet import Plugin, PluginContext
from potehinsonnet.net_models.discord_models import Command, ExecutedCommand, ExecutedCommandResponse
from potehinsonnet.net_models.panel_ui import Button, PanelContext, PanelPage, Text
from pydantic import BaseModel


class Price(BaseModel):
    beer: str
    rub: int


def create_plugin(ctx: PluginContext) -> Plugin:
    plugin = Plugin.from_context(ctx)
    prices = ctx.data.collection("prices.json", Price, key="beer")

    @plugin.command(Command(name="beer", description="Beer price", tag="beer"))
    async def beer(cmd: ExecutedCommand) -> ExecutedCommandResponse:
        price = prices.get("лагер")
        return ExecutedCommandResponse(message=f"{price.rub if price else '?'} ₽", is_final=True)

    @plugin.panel_page("beer", title="Beer", icon="🍺")
    async def beer_page(panel: PanelContext) -> PanelPage:
        return PanelPage(blocks=[Text(f"Brands: {len(prices.all())}"), Button(action="reset", label="Reset")])

    @plugin.panel_action("reset")
    async def reset(panel: PanelContext, values: dict) -> str:
        prices.replace_all([])
        return "Prices reset"

    return plugin
EOF
cd <guest-path> && timeout 8 <guest-path> -m potehinsonnet.run beer_plugin 2>&1 | tail -15; echo "rc=$?"
cd <guest-path> && sed -n 1,60p potehinsonnet/pack.py; <guest-path> -m pip install -q -e . pytest pytest-asyncio pytest-cov 2>&1 | tail -3; git -C . status 2>/dev/null; ls
cd <guest-path> && sed -n 60,140p potehinsonnet/pack.py
cd <guest-path> && timeout 600 <guest-path> -m pytest -q 2>&1 | tail -15; echo rc=$?; grep -rn "sleep\|while True\|every\|schedule\|cron" potehinsonnet --include=*.py | head -20
mkdir -p <guest-path> && cd <guest-path> && <guest-path> -m potehinsonnet.pack --no-data --out <guest-path>; echo rc=$?; ls <guest-path>; cd <guest-path> && (timeout 6 <guest-path> -m potehinsonnet.run . ; echo rc=$?) 2>&1 | tail -3; cd <guest-path> && ls -a; mkdir -p <guest-path> && ls -la .coldpass
cd <guest-path> && grep -rn "environ\|getenv\|4222" potehinsonnet --include=*.py | head; rm -rf <guest-path>
cd <guest-path> && sed -n 40,70p potehinsonnet/context.py
cd <guest-path> && PY=<guest-path> && ENVJ='{"NATS_URL":"nats://localhost:4222"}' && cat > claims.json <<EOF
[
  {"kind":"claim","claim":"Running the plugin folder with python -m potehinsonnet.run . starts the plugin on NATS","source":"из папки плагина (нужен NATS на \`localhost:4222\`).","input":"beer_plugin folder with plugin.toml","expected":"plugin starts and logs its name and version","probe_kind":"cli","argv":["$PY","-m","potehinsonnet.run","."],"cwd":"<guest-path>","env":$ENVJ,"stays_running":true,"expected_text":"Запуск beer_plugin 1.0.0"},
  {"kind":"claim","claim":"pack builds a plugin zip for installing through the panel","source":"собрать zip плагина для установки через панель","input":"beer_plugin folder with --no-data and --out","expected":"zip file beer_plugin-1.0.0.zip is written to the output folder","probe_kind":"cli","argv":["$PY","-m","potehinsonnet.pack","<guest-path>","--no-data","--out","<guest-path>"],"cwd":"<guest-path>","env":$ENVJ,"output_directory":"<guest-path>","expected_text":"beer_plugin-1.0.0.zip"}
]
EOF
cat > probe.json <<EOF
{"kind":"cli","argv":["$PY","-m","potehinsonnet.pack","<guest-path>","--no-data","--out","<guest-path>"],"cwd":"<guest-path>","env":$ENVJ,"output_directory":"<guest-path>","expected_text":"beer_plugin-1.0.0.zip"}
EOF
cat > examples.json <<EOF
[
  {"kind":"example","claim":"Repository test suite passes (CI command python -m pytest -q)","source":".github/workflows/tests.yml","input":"python -m pytest -q","expected":"all tests pass","argv":["$PY","-m","pytest","-q"],"cwd":"<guest-path>","env":$ENVJ,"expected_text":"104 passed"}
]
EOF
cat > cycles.json <<'EOF'
{"detected":false,"reason":"Entry points inspected: potehinsonnet/run.py (one-shot start: loads plugin.toml, builds the plugin, calls plugin.serve()) and potehinsonnet/pack.py (one-shot zip build). The plugin reacts to NATS commands, panel requests and button events; no cron, schedule, --once/--now or polling loop was found in the product code (grep for sleep/while/every/schedule/cron only hit testing.py helpers). No product cycle to trigger.","checks":[]}
EOF
for f in claims probe examples cycles; do <guest-path> -I -c "import json,sys; json.load(open('$f.json')); print('$f ok')" 2>&1; done; cat > /dev/null
cd <guest-path> && ls <guest-path>; <env-var>=<guest-path> timeout 900 python3 -I <guest-path> --validate --replay 2>&1 | tail -60; echo rc=$?
cd <guest-path> && grep -n "stays_running\|did not finish\|120" check.py | head -30; pgrep -af potehinsonnet | head
cd <guest-path> && sed -n 960,985p check.py; grep -n "def run_until_text" -A25 check.py | head -40
cd <guest-path> && PY=<guest-path> && ENVJ='{"NATS_URL":"nats://localhost:4222"}' && cat > probe.json <<EOF
{"kind":"cli","argv":["$PY","-m","potehinsonnet.run","<guest-path>"],"cwd":"<guest-path>","env":$ENVJ,"stays_running":true,"expected_text":"Запуск beer_plugin 1.0.0"}
EOF
cat > claims.json <<EOF
[
  {"kind":"claim","claim":"pack builds a plugin zip for installing through the panel","source":"собрать zip плагина для установки через панель","input":"beer_plugin folder with --no-data and --out","expected":"zip file beer_plugin-1.0.0.zip is written to the output folder","probe_kind":"cli","argv":["$PY","-m","potehinsonnet.pack","<guest-path>","--no-data","--out","<guest-path>"],"cwd":"<guest-path>","env":$ENVJ,"output_directory":"<guest-path>","expected_text":"beer_plugin-1.0.0.zip"}
]
EOF
<guest-path> -I -c "import json; json.load(open('probe.json')); json.load(open('claims.json')); print('ok')"; pgrep -af "potehinsonnet.run" | grep -v pgrep | head -3; ls <guest-path>
cd <guest-path> && <env-var>=<guest-path> timeout 900 python3 -I <guest-path> --validate --replay 2>&1 | python3 -c "import sys,json; d=json.loads(sys.stdin.read()); print(json.dumps({'valid':d.get('valid'),'problems':d.get('problems'),'replay':d.get('replay',{}).get('status'),'probe':d.get('replay',{}).get('details',{}).get('working'),'claims':[(c['claim'][:40],c['verdict'],c.get('outcome')) for c in d.get('replay',{}).get('details',{}).get('claims',[])],'ex':[(e.get('verdict') or e.get('outcome')) for e in d.get('replay',{}).get('details',{}).get('example_checks',[])]},ensure_ascii=False,indent=1))" 2>&1 | head -60
cd <guest-path> && <env-var>=<guest-path> timeout 900 python3 -I <guest-path> --validate --replay 2>/dev/null | grep -o '"verdict": "[a-z]*"' | sort | uniq -c; pgrep -af "potehinsonnet.run" | grep -v pgrep | wc -l
cd <guest-path> && cat > report.json <<'EOF'
{"outcome":"working","fault_owner":null,"operation":"Run the potehinsonnet plugin host (python -m potehinsonnet.run <plugin folder>) against NATS, and build a plugin zip (python -m potehinsonnet.pack); repository test suite (python -m pytest -q)","operation_scope":"Linux guest, Python 3.14 venv, NATS server on localhost:4222, sample beer plugin from the README outside the repo. Does not include a live Discord connection or the web panel.","steps":["uv python install 3.14 (guest had Python 3.12.3; README requires Python 3.14+)","python3.14 -m venv <guest-path> && <guest-path> -m pip install potehinsonnet (README: pip install potehinsonnet)","Started nats-server v2.10.24 on localhost:4222 (backend needed by the plugin host, README: нужен NATS на localhost:4222)","Wrote the README beer_plugin example into <guest-path> (plugin.toml + beer_plugin/main.py)","<guest-path> -m potehinsonnet.run <guest-path> plugin started, logged 'Запуск beer_plugin 1.0.0'","<guest-path> -m potehinsonnet.pack --no-data --out <fresh dir>: wrote beer_plugin-1.0.0.zip (3 files)","<guest-path> -m pip install -e . pytest pytest-asyncio pytest-cov, then python -m pytest -q: 104 passed"],"deviations":["README requires Python 3.14+; guest default was 3.12.3, so installed CPython 3.14.9 with uv (uv python install 3.14) - setup, not a product failure.","NATS is not installed in the guest; downloaded nats-server v2.10.24 linux-amd64 release tarball from GitHub (curl) and ran it on port 4222. apt has no nats-server package.","The repository root has no plugin.toml, so 'python -m potehinsonnet.run .' from the repo root is not applicable; the run was done on the README beer_plugin example written outside the repo (<guest-path>), which is the README's documented usage.","Editable install of the workspace (pip install -e .) was used for the CI-style test run, as in .github/workflows/tests.yml.","The run probe uses stays_running, which the checker only supports for probes; the claim path has no stays_running support and timed out, so the run was recorded as the probe and not as a claim."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":"None required for this run. Optional: the README does not say NATS must be installed in a particular way; the README's pytest CI path depends on Python 3.14 being available."}
EOF
<guest-path> -I -c "import json; json.load(open('report.json')); print('report ok')"; ls -la <guest-path>