morluto
7fe5e5ff5e
Publish Godot res:// declarations and PyInstaller CArchive/PYZ keys through shared occurrence source_path while preserving safe logical extraction paths. Consolidate PyInstaller file, directory and namespace projection through one owner, and account for the additional retained source spelling before allocation. Cover producer inventory, Windows separator conversion, PYZ module/data keys, CLI extraction bytes and retained MCP inventory views. Format fixtures are synthetic; real Godot/PyInstaller producer lanes were not run.
181 lines
11 KiB
Markdown
181 lines
11 KiB
Markdown
# Python packaged applications
|
|
|
|
REA statically inventories PyInstaller executables with an appended CArchive.
|
|
`inspect_artifact` and `extract_artifact` share the same reader through CLI and
|
|
MCP. They read archive bytes without launching the application. Bytecode
|
|
source decompilation, encrypted PYZ recovery, zipapp and PEX analysis are outside
|
|
this capability.
|
|
|
|
`extract_artifact.coverage` preserves the inventory producer's source traversal
|
|
scope and certainty. Successful publication proves that the selected inventoried
|
|
regular files were written and verified; it does not prove that every source
|
|
entry was representable or every embedded payload was decoded. For example, a
|
|
directory containing an invalid UTF-8 filename can publish its representable
|
|
files successfully while coverage remains `unknown`. Extraction reta |