ci build

Author: expend20

.github/workflows/ci.yml

@@ -0,0 +1,83 @@
+name: CI
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    branches: [master]
+
+jobs:
+  test:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [windows-latest, ubuntu-latest, macos-latest]
+    runs-on: ${{ matrix.os }}
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Python 3.12
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Setup uv
+        uses: astral-sh/setup-uv@v4
+        with:
+          enable-cache: true
+
+      # ── Install LLVM (Windows) ──────────────────────────────────────
+      - name: Cache LLVM (Windows)
+        if: runner.os == 'Windows'
+        id: cache-llvm-windows
+        uses: actions/cache@v4
+        with:
+          path: llvm-windows
+          key: llvm-windows-21.1.1-clang-21.1.1
+
+      - name: Install LLVM (Windows)
+        if: runner.os == 'Windows'
+        shell: bash
+        run: |
+          if [ ! -d "llvm-windows/llvm" ]; then
+            mkdir -p llvm-windows
+            curl -sL https://github.com/vovkos/llvm-package-windows/releases/download/llvm-21.1.1/llvm-21.1.1-windows-amd64-msvc17-msvcrt.7z -o llvm-windows/llvm.7z
+            7z x llvm-windows/llvm.7z -ollvm-windows/llvm
+            curl -sL https://github.com/vovkos/llvm-package-windows/releases/download/clang-21.1.1/clang-21.1.1-windows-amd64-msvc17-msvcrt.7z -o llvm-windows/clang.7z
+            7z x llvm-windows/clang.7z -ollvm-windows/llvm -aoa
+            rm -f llvm-windows/llvm.7z llvm-windows/clang.7z
+          fi
+          LLVM_PREFIX=$(ls -d llvm-windows/llvm/llvm-*)
+          echo "CMAKE_PREFIX_PATH=$(cygpath -w "$(pwd)/$LLVM_PREFIX")" >> "$GITHUB_ENV"
+          echo "$(pwd)/$LLVM_PREFIX/bin" >> "$GITHUB_PATH"
+
+      # ── Install LLVM (Linux) ────────────────────────────────────────
+      - name: Install LLVM (Linux)
+        if: runner.os == 'Linux'
+        run: |
+          wget -qO- https://apt.llvm.org/llvm-snapshot.gpg.key | sudo apt-key add -
+          sudo add-apt-repository -y "deb http://apt.llvm.org/$(lsb_release -cs)/ llvm-toolchain-$(lsb_release -cs)-21 main"
+          sudo apt-get update
+          sudo apt-get install -y llvm-21-dev llvm-21-tools clang-21 lld-21
+          echo "CMAKE_PREFIX_PATH=/usr/lib/llvm-21" >> "$GITHUB_ENV"
+
+      # ── Install LLVM (macOS) ────────────────────────────────────────
+      - name: Install LLVM (macOS)
+        if: runner.os == 'macOS'
+        run: |
+          brew install llvm
+          echo "CMAKE_PREFIX_PATH=$(brew --prefix llvm)" >> "$GITHUB_ENV"
+
+      # ── Setup MSVC (Windows) ────────────────────────────────────────
+      - name: Setup MSVC
+        if: runner.os == 'Windows'
+        uses: ilammy/msvc-dev-cmd@v1
+
+      # ── Install dependencies & run tests ────────────────────────────
+      - name: Install dependencies
+        run: uv sync
+
+      - name: Run tests
+        run: uv run pytest tests/ -v

CLAUDE.md

@@ -24,7 +24,7 @@ python -m uv run python -m shifting_codes.ui.app
 
 ## Dependencies
 
-- **llvm-nanobind**: Local editable dependency at `../llvm-nanobind/build/` (must be built separately before tests/UI work)
+- **llvm-nanobind**: Built from source via git by default; override to local path in `pyproject.toml` for development
 - **z3-solver**: Constraint solving for MBA coefficient generation
 - **PyQt6**: GUI framework (UI not yet tested)
 - Python 3.12+ required, managed with UV + hatchling build backend

README.md

@@ -21,7 +21,7 @@ Six obfuscation passes are available:
 
 - **Python 3.12+**
 - **[UV](https://docs.astral.sh/uv/)** package manager
-- **llvm-nanobind** — must be cloned and built separately (see below)
+- **LLVM 21** development libraries installed (see [llvm-nanobind](https://github.com/expend20/llvm-nanobind) for platform-specific instructions)
 
 ## Installation
 
@@ -31,21 +31,17 @@ Six obfuscation passes are available:
    pip install uv
    ```
 
-2. **Clone and build llvm-nanobind** as a sibling directory:
+2. **Install the project** (builds llvm-nanobind from source automatically):
 
    ```bash
-   git clone -b transformation-api https://github.com/expend20/llvm-nanobind ../llvm-nanobind
-   cd ../llvm-nanobind
-   # Follow llvm-nanobind's build instructions to produce the build/ directory
-   cd -
+   uv sync
    ```
 
-   The project expects the built package at `../llvm-nanobind/build/`.
-
-3. **Install the project**:
+   For local development with a local llvm-nanobind checkout, override the source in `pyproject.toml`:
 
-   ```bash
-   uv sync
+   ```toml
+   [tool.uv.sources]
+   llvm-nanobind = { path = "../llvm-nanobind", editable = true }
    ```
 
 ## Usage

pyproject.toml

@@ -4,6 +4,7 @@ version = "0.1.0"
 description = "LLVM obfuscation passes ported from Pluto to Python, with PyQt6 visualization"
 requires-python = ">=3.12"
 dependencies = [
+    "llvm-nanobind",
     "z3-solver>=4.12",
     "PyQt6>=6.6",
 ]
@@ -16,7 +17,7 @@ build-backend = "hatchling.build"
 packages = ["src/shifting_codes"]
 
 [tool.uv.sources]
-llvm-nanobind = { path = "../llvm-nanobind", editable = true }
+llvm-nanobind = { git = "https://github.com/expend20/llvm-nanobind" }
 
 [dependency-groups]
 dev = [
@@ -26,4 +27,4 @@ dev = [
 
 [tool.pytest.ini_options]
 testpaths = ["tests"]
-pythonpath = ["src", "../llvm-nanobind/build"]
+pythonpath = ["src"]

src/shifting_codes/ui/diff_view.py

@@ -32,7 +32,8 @@ def __init__(self, parent: QWidget | None = None):
     def set_diff_colors(self, colors: dict[str, QColor]):
         self._diff_colors = colors
         # Reapply highlights if there's content
-        if self.document().blockCount() > 1:
+        doc = self.document()
+        if doc is not None and doc.blockCount() > 1:
             self._apply_highlights()
 
     def show_diff(self, before: str, after: str):

src/shifting_codes/ui/ir_editor.py

@@ -84,7 +84,9 @@ def _build_rules(self):
         comment_fmt.setForeground(QColor(c["comment"]))
         self._rules.append((QRegularExpression(r";.*$"), comment_fmt))
 
-    def highlightBlock(self, text: str):
+    def highlightBlock(self, text: str | None):
+        if text is None:
+            return
         for pattern, fmt in self._rules:
             it = pattern.globalMatch(text)
             while it.hasNext():

src/shifting_codes/ui/source_editor.py

@@ -112,7 +112,9 @@ def _build_rules(self):
         self._comment_fmt.setForeground(QColor(c["comment"]))
         self._comment_fmt.setFontItalic(True)
 
-    def highlightBlock(self, text: str):
+    def highlightBlock(self, text: str | None):
+        if text is None:
+            return
         # Apply single-line rules
         for pattern, fmt in self._rules:
             it = pattern.globalMatch(text)

src/shifting_codes/utils/crypto.py

@@ -13,18 +13,17 @@ class CryptoRandom:
 
     def __init__(self, seed: int | None = None):
         self._seeded = seed is not None
-        if self._seeded:
-            self._rng = random.Random(seed)
-        else:
-            self._rng = None
+        self._rng: random.Random | None = random.Random(seed) if self._seeded else None
 
     def get_uint32(self) -> int:
         if self._seeded:
+            assert self._rng is not None
             return self._rng.getrandbits(32)
         return secrets.randbits(32)
 
     def get_uint64(self) -> int:
         if self._seeded:
+            assert self._rng is not None
             return self._rng.getrandbits(64)
         return secrets.randbits(64)
 
@@ -33,6 +32,7 @@ def get_range(self, max_val: int) -> int:
         if max_val <= 0:
             return 0
         if self._seeded:
+            assert self._rng is not None
             return self._rng.randrange(max_val)
         return secrets.randbelow(max_val)
 

tests/test_xtea.py

@@ -171,11 +171,18 @@ def test_xtea_execution_correctness():
 
     # Determine target triple
     is_windows = platform.system() == "Windows"
+    is_macos = platform.system() == "Darwin"
+    machine = platform.machine()
     if is_windows:
         triple = "x86_64-pc-windows-msvc"
         shared_ext = ".dll"
+    elif is_macos:
+        arch = "arm64" if machine == "arm64" else "x86_64"
+        triple = f"{arch}-apple-darwin"
+        shared_ext = ".dylib"
     else:
-        triple = "x86_64-unknown-linux-gnu"
+        arch = "aarch64" if machine == "aarch64" else "x86_64"
+        triple = f"{arch}-unknown-linux-gnu"
         shared_ext = ".so"
 
     tmpdir = tempfile.mkdtemp()