fastapi-gsap/.venv/lib/python3.12/site-packages/pygments/lexers/spice.py
Tyler J King e744336385 fix: capability enforcement, credential safety, atomic delegations, input validation
C-6: ConnectorRuntime enforces capability_mask per operation.
     READ-only ACs cannot invoke MUTATE operations (wipe, lock, retire).
C-7: AC validated against database (exists, active, not expired)
     before connector invocation.
C-9: Delegated AC capability bounded by delegator's capability.
C-10: Command counter uses atomic SQL increment with limit check.
M-23: expire_stale() uses same atomic SQL pattern.

H-1: Sensitive credential fields hidden from repr/logs via repr=False.
H-2: Stub backend requires ALLOW_STUB_CREDENTIALS=true to activate.
H-3: Kerberos backend raises CredentialResolutionError instead of
     returning stub ticket.
H-4: Chronicle INTENT emitted before execution, RESULT after.
H-5: device_id validated as UUID before Graph API URL interpolation.
H-8: ConnectorRuntime enforces governance for all connector invocations.

Signed-off-by: Tyler King <tking@guildhouse.dev>
2026-04-14 08:13:27 -04:00

70 lines
2.7 KiB
Python

"""
pygments.lexers.spice
~~~~~~~~~~~~~~~~~~~~~
Lexers for the Spice programming language.
:copyright: Copyright 2006-present by the Pygments team, see AUTHORS.
:license: BSD, see LICENSE for details.
"""
from pygments.lexer import RegexLexer, bygroups, words
from pygments.token import Text, Comment, Operator, Keyword, Name, String, \
Number, Punctuation, Whitespace
__all__ = ['SpiceLexer']
class SpiceLexer(RegexLexer):
"""
For Spice source.
"""
name = 'Spice'
url = 'https://www.spicelang.com'
filenames = ['*.spice']
aliases = ['spice', 'spicelang']
mimetypes = ['text/x-spice']
version_added = '2.11'
tokens = {
'root': [
(r'\n', Whitespace),
(r'\s+', Whitespace),
(r'\\\n', Text),
# comments
(r'//(.*?)\n', Comment.Single),
(r'/(\\\n)?[*]{2}(.|\n)*?[*](\\\n)?/', String.Doc),
(r'/(\\\n)?[*](.|\n)*?[*](\\\n)?/', Comment.Multiline),
# keywords
(r'(import|as)\b', Keyword.Namespace),
(r'(f|p|type|struct|interface|enum|alias|operator)\b', Keyword.Declaration),
(words(('if', 'else', 'switch', 'case', 'default', 'for', 'foreach', 'do',
'while', 'break', 'continue', 'fallthrough', 'return', 'assert',
'unsafe', 'ext', 'cast'), suffix=r'\b'), Keyword),
(words(('const', 'signed', 'unsigned', 'inline', 'public', 'heap', 'compose'),
suffix=r'\b'), Keyword.Pseudo),
(words(('new', 'yield', 'stash', 'pick', 'sync', 'class'), suffix=r'\b'),
Keyword.Reserved),
(r'(true|false|nil)\b', Keyword.Constant),
(words(('double', 'int', 'short', 'long', 'byte', 'char', 'string',
'bool', 'dyn'), suffix=r'\b'), Keyword.Type),
(words(('printf', 'sizeof', 'alignof', 'len', 'panic'), suffix=r'\b(\()'),
bygroups(Name.Builtin, Punctuation)),
# numeric literals
(r'[-]?[0-9]*[.][0-9]+([eE][+-]?[0-9]+)?', Number.Double),
(r'0[bB][01]+[slu]?', Number.Bin),
(r'0[oO][0-7]+[slu]?', Number.Oct),
(r'0[xXhH][0-9a-fA-F]+[slu]?', Number.Hex),
(r'(0[dD])?[0-9]+[slu]?', Number.Integer),
# string literal
(r'"(\\\\|\\[^\\]|[^"\\])*"', String),
# char literal
(r'\'(\\\\|\\[^\\]|[^\'\\])\'', String.Char),
# tokens
(r'<<=|>>=|<<|>>|<=|>=|\+=|-=|\*=|/=|\%=|\|=|&=|\^=|&&|\|\||&|\||'
r'\+\+|--|\%|\^|\~|==|!=|->|::|[.]{3}|#!|#|[+\-*/&]', Operator),
(r'[|<>=!()\[\]{}.,;:\?]', Punctuation),
# identifiers
(r'[^\W\d]\w*', Name.Other),
]
}