dohertj2/ScadaBridge
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

feat(scripts): read-only, allow-listed Files global for site scripts; Delmia test receiver parses recipe files

Browse Source 
Script file access (design docs/plans/2026-09-28-script-file-access-design.md): Files.ReadTextAsync /
ReadLinesAsync / ExistsAsync on site ScriptGlobals (+ Instance.Files), backed by the site-singleton
ScriptFileReader. The one host-mediated exception to the System.IO ban - scripts still never name a
System.IO type. OFF by default: ScadaBridge:SiteRuntime:ScriptFileAccess:AllowedRoots (empty = every call
throws Disabled) + MaxFileBytes (1 MiB, validated 1..64 MiB, roots must be absolute). Guard: fully
qualified, no device paths / ADS, canonical path strictly inside a root (directory-boundary match), no
reparse point on the file or any directory below the root, size cap before and during the read.
Errors are one Commons type, ScriptFileAccessException(+ScriptFileAccessFailure); Commons.Types.Scripts
joins the default script imports on every surface so it binds by short name. Mirrored on
ScriptCompileSurface (CompileFiles, parity-pinned) and the Test Run sandbox (binds, refuses Disabled).
Inbound (central) scripts do not get it.

Rig: docker/recipes (sample RecipeValueName,RecipeValue files incl. an invalid one) bind-mounted
read-only at /app/recipes on both site-a nodes with AllowedRoots [/app/recipes]. The TestMesMachine
SimDelmiaRecipe simulator now reads + parses the downloaded file, converts each value to its recipe tag's
type and loads it all-or-nothing (14 new TestDelmiaReceiver attributes); verify-mes-test-machine.sh
group A covers accept / re-download / invalid lines / NotFound / OutsideAllowedRoots, VERIFY_GROUPS
selects groups (rig: AD).
This commit is contained in:
Joseph Doherty
2026-09-28 10:36:42 -04:00
parent 0af0672597
commit b3021e7c5f
31 changed files with 1157 additions and 77 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker/recipes/SBTEST-R100.txt
+16
View File
@@ -0,0 +1,16 @@
# Delmia recipe download - sample for the SBTEST test machines (docker/seed-mes-test-machine.sh)
# One value per line: RecipeValueName,RecipeValue
# The value may be an int, a double (invariant culture, '.' decimal), a bool (true/false) or text.
# Blank lines and lines starting with '#' are ignored. Everything after the FIRST comma is the value.
RecipeName,Aluminide Coat R100
RecipeRevision,7
CoatingType,Aluminide
ReactorTempSP,1050.5
PotTempSP,980
ArgonFlowSP,40.25
HydrogenFlowSP,25
ChlorineFlowSP,12.5
VacuumSP,0.5
TargetRuntime,480
PurgeEnabled,true
OperatorNote,Load parts cold, verify fixture ID