wip

Signed-off-by: Joe Isaacs <joe.isaacs@live.co.uk>

Author: joseph-isaacs

vortex-test/compat-gen/scripts/compat.py

@@ -650,6 +650,66 @@ def cmd_list(args: argparse.Namespace) -> None:
             print(v)
 
 
+def cmd_verify(args: argparse.Namespace) -> None:
+    """Verify fixture file integrity against manifest sha256 hashes."""
+    store = _parse_store(args.store)
+    versions = store.list_versions()
+
+    if not versions:
+        _info("no versions found")
+        sys.exit(1)
+
+    _info(f"verifying {len(versions)} version(s) in {store.display_name()}...")
+
+    total_ok = 0
+    errors: list[str] = []
+
+    for version in versions:
+        _info(f"\n--- v{version} ---")
+        manifest = _read_manifest(store, version)
+        if manifest is None:
+            msg = f"v{version}: manifest not found"
+            _info(f"  FAIL: {msg}")
+            errors.append(msg)
+            continue
+
+        prefix = manifest.pop("_prefix", f"v{version}/arrays")
+
+        for entry in manifest["fixtures"]:
+            name = entry["name"]
+            expected_hash = entry.get("sha256")
+            data = store.read(f"{prefix}/{name}")
+
+            if data is None:
+                msg = f"v{version}/{name}: file missing from store"
+                _info(f"  FAIL: {msg}")
+                errors.append(msg)
+                continue
+
+            if expected_hash is None:
+                msg = f"v{version}/{name}: no sha256 in manifest"
+                _info(f"  FAIL: {msg}")
+                errors.append(msg)
+                continue
+
+            actual_hash = hashlib.sha256(data).hexdigest()
+            if actual_hash != expected_hash:
+                msg = f"v{version}/{name}: sha256 mismatch expected={expected_hash[:12]} actual={actual_hash[:12]}"
+                _info(f"  FAIL: {msg}")
+                errors.append(msg)
+            else:
+                _info(f"  {name}: ok ({len(data)} bytes)")
+                total_ok += 1
+
+    _info(f"\nresult: {total_ok} ok, {len(errors)} failed")
+    if errors:
+        for e in errors:
+            _info(f"  {e}")
+        sys.exit(1)
+    else:
+        _info("all fixtures verified.")
+
+
 def cmd_validate_manifest(args: argparse.Namespace) -> None:
     """Check that manifests are additive-only across all versions."""
     store = _parse_store(args.store)
@@ -904,6 +964,26 @@ def main() -> None:
     )
     p.add_argument("version", nargs="?", help="Show manifest for this version")
 
+    # -- verify --
+    p = sub.add_parser(
+        "verify",
+        help="Verify fixture file integrity against manifest sha256 hashes",
+        description=(
+            "Download every fixture file for every version and verify its\n"
+            "SHA-256 hash matches the manifest. Also checks that all files\n"
+            "listed in manifests are present in the store."
+        ),
+        epilog=(
+            "examples:\n"
+            "  uv run compat.py verify\n"
+            "  uv run compat.py verify --store /tmp/store"
+        ),
+        formatter_class=argparse.RawDescriptionHelpFormatter,
+    )
+    p.add_argument(
+        "--store", default=DEFAULT_STORE, help="Store spec (default: %(default)s)"
+    )
+
     # -- validate-manifest --
     p = sub.add_parser(
         "validate-manifest",
@@ -930,6 +1010,7 @@ def main() -> None:
         "publish": cmd_publish,
         "check": cmd_check,
         "list": cmd_list,
+        "verify": cmd_verify,
         "validate-manifest": cmd_validate_manifest,
     }
     commands[args.command](args)