@aryacode/dsh-engineering 0.0.0-stage → 0.4.0

package/vendor/mwi/bridge/sdk-interop-importer.cs

@@ -0,0 +1,30 @@
+using System; using System.IO; using System.Reflection; using System.Reflection.Emit;
+using System.Runtime.InteropServices; using System.Runtime.InteropServices.ComTypes;
+using System.Collections.Generic;
+public class MwSdkInteropImporter : ITypeLibImporterNotifySink {
+ [DllImport("oleaut32.dll",CharSet=CharSet.Unicode)] static extern int LoadTypeLibEx(string file,int kind,out ITypeLib lib);
+ readonly string directory; readonly Dictionary<string,Assembly> imports=new Dictionary<string,Assembly>();
+ public readonly List<string> Notices=new List<string>();
+ public MwSdkInteropImporter(string dir){directory=dir;}
+ public void ReportEvent(ImporterEventKind kind,int code,string text){if(kind!=ImporterEventKind.NOTIF_TYPECONVERTED)Notices.Add(kind+":"+code+":"+text);}
+ public Assembly ResolveRef(object lib){throw new InvalidOperationException("Untested SDK assembly reference");}
+ public Assembly Import(ITypeLib lib,string ns){
+  string name,doc,helpFile;int help;lib.GetDocumentation(-1,out name,out doc,out help,out helpFile);
+  name=System.Text.RegularExpressions.Regex.Replace(name,"[^A-Za-z0-9_]","_");
+  Assembly found;if(imports.TryGetValue(name,out found))return found;
+  var file=Path.Combine(directory,name+".dll");
+  if(File.Exists(file))throw new InvalidOperationException("Refusing existing generated assembly "+file);
+  var assembly=new TypeLibConverter().ConvertTypeLibToAssembly(lib,file,TypeLibImporterFlags.ImportAsX86,this,null,null,ns,null);
+  assembly.Save(Path.GetFileName(file));imports.Add(name,assembly);return assembly;
+ }
+ public static string[] Generate(string tlb,string directory){
+  ITypeLib lib;Marshal.ThrowExceptionForHR(LoadTypeLibEx(tlb,2,out lib));
+  var importer=new MwSdkInteropImporter(directory);var assembly=importer.Import(lib,"MwAdeGenerated");
+  var results=new List<string>();
+  foreach(var type in assembly.GetTypes())if(type.Name=="_Variables"||type.Name=="_Variable"){
+   results.Add(type.FullName+" GUID="+type.GUID);
+   foreach(var method in type.GetMethods())results.Add(method.ToString());
+  }
+  results.AddRange(importer.Notices);return results.ToArray();
+ }
+}

package/vendor/mwi/bridge/sdk-variable-reader.cs

@@ -0,0 +1,22 @@
+using System;
+using System.Collections.Generic;
+using MwAdeGenerated;
+public static class MwSdkVariableReader {
+ static object Optional(string value){return String.IsNullOrEmpty(value)?null:value;}
+ public static Dictionary<string,object>[] Read(object source){
+  var vars=(_Variables)source;int count=vars.Count;
+  var result=new List<Dictionary<string,object>>();
+  var sections=new Dictionary<int,string>{{1,"VAR"},{2,"VAR_INPUT"},{3,"VAR_OUTPUT"},{4,"VAR_IN_OUT"},{5,"VAR_EXTERNAL"},{6,"VAR_GLOBAL"}};
+  for(int n=1;n<=count;n++){
+   var v=(_Variable)vars.Item(n);string section;
+   if(!sections.TryGetValue((int)v.BlockType,out section))throw new InvalidOperationException("Unsupported native declaration usage");
+   result.Add(new Dictionary<string,object>{
+    {"name",v.Name},{"type",v.DataType},{"section",section},{"group",v.Group.Name},
+    {"address",Optional(v.IecAddress)},{"initial_value",Optional(v.InitialValue)},{"description",Optional(v.Comment)},
+    {"retain",v.Retain},{"pdd",v.PDD},{"opc",v.OPC},{"disabled",v.Disabled},{"not_on_plc",v.NotOnPlc},{"redundant",v.Redundant}
+   });
+  }
+  if(vars.Count!=count)throw new InvalidOperationException("Native declaration count changed during inspection");
+  return result.ToArray();
+ }
+}

package/vendor/mwi/bridge/start_bridge.cmd

@@ -0,0 +1,21 @@
+@echo off
+rem Launches the MotionWorks Use COM bridge under 32-bit Windows PowerShell.
+rem
+rem WHY A .cmd WRAPPER
+rem ------------------
+rem Mwt.exe is a 32-bit LocalServer32, so a 64-bit client cannot create its COM
+rem objects at all - the bitness here is load-bearing.
+rem
+rem The plugin spawns THIS file rather than invoking powershell.exe directly,
+rem because Node's Windows argument quoting mangles the
+rem     -Command "& '<path>'"
+rem form: the child starts and exits 0 without ever running the script. Passing a
+rem single launcher path to cmd.exe is unambiguous.
+rem
+rem %~dp0 already ends with a backslash, so '%~dp0mw_bridge.ps1' resolves to the
+rem sibling script.
+rem
+rem -WindowStyle Hidden matters: without it, powershell.exe creates its OWN
+rem visible console window. That console then sits on top of the IDE, and because
+rem mw_ide_screenshot captures a screen region it appeared inside the capture.
+"%SystemRoot%\SysWOW64\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "& '%~dp0mw_bridge.ps1'"

package/vendor/mwi/bridge/watch_dialogs.cmd

@@ -0,0 +1,13 @@
+@echo off
+rem Launches the MotionWorks Use modal-dialog watcher, hidden and detached.
+rem
+rem The bridge starts this immediately before OpenProject, because that COM call
+rem blocks for as long as MotionWorks keeps a prompt on screen - so the prompt can
+rem only be answered from another process. It is killed once OpenProject returns
+rem or the bridge gives up.
+rem
+rem Takes the lifetime in seconds as %1, so the bridge controls the budget.
+rem
+rem -WindowStyle Hidden for the same reason start_bridge.cmd needs it: a visible
+rem console would sit on top of the IDE and end up inside any screenshot.
+"%SystemRoot%\SysWOW64\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "& '%~dp0watch_dialogs.ps1' -Seconds %1"

package/vendor/mwi/bridge/watch_dialogs.ps1

@@ -0,0 +1,153 @@
+<#
+  MotionWorks Use - modal-dialog watcher.
+
+  WHY THIS IS A SEPARATE PROCESS
+  ------------------------------
+  OpenProject is a synchronous out-of-process COM call. When MotionWorks raises a
+  prompt *during* the load - "this project was not closed cleanly, load anyway?",
+  "defragment?" - the server enters a modal loop and the call does not return until
+  that prompt is answered. The bridge thread is therefore BLOCKED by definition and
+  cannot answer it; no retry, no timeout, no catch. Measured: an open call sat for
+  minutes with the request logged and no response.
+
+  So the answering has to happen on another thread, and in PowerShell that means
+  another process. The bridge starts this watcher immediately before OpenProject and
+  kills it afterwards; in between it presses the obvious answer on any known prompt.
+
+  SAFETY
+  ------
+  Only ever touches prompts raised by the MotionWorks IDE process, and only presses
+  buttons from a fixed list of obviously-safe answers about a STAGED COPY - the
+  plugin never opens the user's original project. Anything unrecognised is left
+  completely alone.
+#>
+param(
+    [int]$Seconds = 150,
+    [int]$PollMs = 400
+)
+
+$ErrorActionPreference = 'Continue'
+
+Add-Type -TypeDefinition @'
+using System; using System.Text; using System.Runtime.InteropServices;
+public class WDW {
+  [DllImport("user32.dll")] public static extern bool EnumWindows(EnumWindowsProc cb, IntPtr l);
+  [DllImport("user32.dll")] public static extern bool EnumChildWindows(IntPtr p, EnumWindowsProc cb, IntPtr l);
+  public delegate bool EnumWindowsProc(IntPtr h, IntPtr l);
+  [DllImport("user32.dll",CharSet=CharSet.Unicode)] public static extern int GetClassNameW(IntPtr h, StringBuilder s, int n);
+  [DllImport("user32.dll",CharSet=CharSet.Unicode)] public static extern int GetWindowTextW(IntPtr h, StringBuilder s, int n);
+  [DllImport("user32.dll")] public static extern bool IsWindowVisible(IntPtr h);
+  [DllImport("user32.dll")] public static extern int GetDlgCtrlID(IntPtr h);
+  [DllImport("user32.dll")] public static extern uint GetWindowThreadProcessId(IntPtr h, out uint p);
+  [DllImport("user32.dll", EntryPoint="SendMessageTimeoutW", CharSet=CharSet.Unicode)]
+  public static extern IntPtr SendTimeoutStr(IntPtr h, uint msg, IntPtr wp, StringBuilder lp, uint flags, uint ms, out IntPtr res);
+  [DllImport("user32.dll", EntryPoint="SendMessageTimeoutW", CharSet=CharSet.Unicode)]
+  public static extern IntPtr SendTimeoutInt(IntPtr h, uint msg, IntPtr wp, IntPtr lp, uint flags, uint ms, out IntPtr res);
+
+  const uint SMTO_ABORTIFHUNG = 0x0002;
+
+  public static string ReadText(IntPtr h) {
+    IntPtr r;
+    if (SendTimeoutInt(h, 0x000E, IntPtr.Zero, IntPtr.Zero, SMTO_ABORTIFHUNG, 150, out r) == IntPtr.Zero) return "";
+    int n = r.ToInt32(); if (n <= 0) return ""; if (n > 32768) n = 32768;
+    StringBuilder sb = new StringBuilder(n + 2);
+    if (SendTimeoutStr(h, 0x000D, (IntPtr)(n + 1), sb, SMTO_ABORTIFHUNG, 150, out r) == IntPtr.Zero) return "";
+    return sb.ToString();
+  }
+
+  public static bool Click(IntPtr h) {
+    IntPtr r;
+    return SendTimeoutInt(h, 0x00F5, IntPtr.Zero, IntPtr.Zero, SMTO_ABORTIFHUNG, 1500, out r) != IntPtr.Zero;
+  }
+}
+'@
+
+# Prompts with one obviously-safe answer. These are questions about a staged COPY,
+# so the answer cannot endanger real work. Anything absent from this table is left
+# strictly alone - the watcher never guesses.
+$known = @(
+    @{ match = 'defragment';                                button = 'No'  },
+    @{ match = 'would you like to load the project anyway';  button = 'Yes' },
+    @{ match = 'currently loaded by';                       button = 'Yes' },
+    @{ match = 'abnormal termination';                      button = 'Yes' },
+    @{ match = 'disabled/enabled by software key';          button = 'OK'  },
+    @{ match = 'project is currently loaded';               button = 'Yes' }
+)
+
+$deadline = (Get-Date).AddSeconds($Seconds)
+$answeredCount = 0
+
+while ((Get-Date) -lt $deadline) {
+    Start-Sleep -Milliseconds $PollMs
+
+    # IDE pid, taken from the IDE window (never from a process-name lookup).
+    $script:idePid = 0
+    $cbIde = [WDW+EnumWindowsProc]{
+        param($h, $l)
+        $t = New-Object System.Text.StringBuilder 256
+        [void][WDW]::GetWindowTextW($h, $t, 256)
+        $title = $t.ToString()
+        if ([WDW]::IsWindowVisible($h) -and ($title -like 'MotionWorks IEC 3 Pro*' -or $title -like 'MULTIPROG*')) {
+            $p = [uint32]0; [void][WDW]::GetWindowThreadProcessId($h, [ref]$p)
+            $script:idePid = [int]$p
+        }
+        return $true
+    }
+    [void][WDW]::EnumWindows($cbIde, [IntPtr]::Zero)
+    if ($script:idePid -eq 0) { continue }
+
+    $script:hits = New-Object System.Collections.ArrayList
+    $cbDlg = [WDW+EnumWindowsProc]{
+        param($h, $l)
+        if (-not [WDW]::IsWindowVisible($h)) { return $true }
+        $p = [uint32]0; [void][WDW]::GetWindowThreadProcessId($h, [ref]$p)
+        if ([int]$p -ne $script:idePid) { return $true }
+        $c = New-Object System.Text.StringBuilder 64
+        [void][WDW]::GetClassNameW($h, $c, 64)
+        if ($c.ToString() -ne '#32770') { return $true }
+
+        $script:btnHandles = @{}
+        $texts = New-Object System.Collections.ArrayList
+        $cbKid = [WDW+EnumWindowsProc]{
+            param($k, $l2)
+            if (-not [WDW]::IsWindowVisible($k)) { return $true }
+            $kc = New-Object System.Text.StringBuilder 64
+            [void][WDW]::GetClassNameW($k, $kc, 64)
+            $cn = $kc.ToString()
+            if ($cn -ne 'Button' -and $cn -ne 'Static') { return $true }
+            $txt = [WDW]::ReadText($k)
+            if (-not $txt) { return $true }
+            if ($cn -eq 'Button') {
+                # Strip the accelerator marker to get the plain label. NB: a named
+                # regex group does NOT become a variable in PowerShell - it lives in
+                # $Matches - so the earlier `-match '^(?<lbl>.+)$'` form silently
+                # keyed every button on the empty string, the lookup never matched,
+                # and the watcher sat there answering nothing while the IDE stayed
+                # blocked. Verified by instrumenting it: message read fine, buttons
+                # dictionary empty.
+                $label = ($txt.Trim() -replace '&', '')
+                if ($label) { $script:btnHandles[$label] = $k }
+            } else { [void]$texts.Add($txt.Trim()) }
+            return $true
+        }
+        [void][WDW]::EnumChildWindows($h, $cbKid, [IntPtr]::Zero)
+        [void]$script:hits.Add([pscustomobject]@{
+            HWND    = $h
+            Message = (($texts | Select-Object -Unique) -join "`n")
+            Buttons = $script:btnHandles
+        })
+        return $true
+    }
+    [void][WDW]::EnumWindows($cbDlg, [IntPtr]::Zero)
+
+    foreach ($d in $script:hits) {
+        $hay = $d.Message.ToLower()
+        foreach ($k in $known) {
+            if ($hay -notlike "*$($k.match)*") { continue }
+            $target = $null
+            foreach ($lbl in $d.Buttons.Keys) { if ($lbl -ieq $k.button) { $target = $d.Buttons[$lbl]; break } }
+            if ($target -and [WDW]::Click($target)) { $answeredCount++ }
+            break
+        }
+    }
+}

package/vendor/mwi/code/engine/motionworks_iec_mcp/__init__.py

@@ -0,0 +1,14 @@
+"""File engine behind the MotionWorks plugin.
+
+The package is layered so that the dangerous parts stay in one place:
+
+    cfb          - OLE/CFB reader + writer primitives (no MotionWorks knowledge)
+    project      - project/expanded-directory resolution and inventory
+    variables    - merged view of the .VB text and .VGR binary variable stores
+    errors       - typed failures that surface as readable tool errors
+    staging      - refuses anything that is not a proven staged copy
+
+The plugin in index.js is the tool surface. Writes go through mw_code.py.
+"""
+
+__version__ = "0.1.0"

package/vendor/mwi/code/engine/motionworks_iec_mcp/block_interfaces.py

@@ -0,0 +1,275 @@
+"""Read block interfaces from the project's bound, installed libraries.
+
+Firmware .PT parameter tables explicitly encode direction/type. User library
+interfaces come from declaration streams, never from compiled identifier heaps.
+Unsupported worksheets can expose independently counted, explicit cache
+declarations as diagnostic evidence only, with insertion eligibility false.
+This module only reads; no library is opened for editing or copied into a POU.
+"""
+import hashlib
+import re
+from pathlib import Path
+from .cfb import CompoundFile
+from .project import Project
+from .tree import parse_document
+from .variables import decode_declarations,read_grid_variable_count,cross_check,parse_declarations,CompressedStreamError
+from .graphical_listing import DEPENDENCY_DECLARATION,identity as compiler_identity
+
+SECTIONS={'VAR_INPUT':'input','VAR_OUTPUT':'output','VAR_IN_OUT':'in_out'}
+KINDS={'FUNCTION':'FUNCTION','FUNCTION_BLOCK':'FUNCTION_BLOCK','FUNCTIONBLOCK':'FUNCTION_BLOCK','PROGRAM':'PROGRAM'}
+IDENTIFIER=re.compile(r'^[A-Za-z_][A-Za-z_0-9]*$')
+
+def compiler_type_names(text):
+    """Read explicit names/type IDs from the observed complete TYLLIST table."""
+    header=re.match(r'\A\(\*\r?\nNDTE: (\d+)\r?\nNCPE: (\d+)\r?\nNDME: (\d+)\r?\n\*\)\r?\n',text)
+    if not header or '\0' in text:raise ValueError('Unsupported compiler type-table header/encoding')
+    roots=[];properties=0;dimensions=0;current=None;children=0;types={};root_ids=set();root_names=set()
+    def bind(name,number):
+        if not IDENTIFIER.fullmatch(name) or not number.isdigit() or int(number)<1:raise ValueError('Invalid compiler type identity')
+        key=int(number)
+        if key in types and types[key].casefold()!=name.casefold():raise ValueError('Conflicting compiler type names')
+        types[key]=name
+    def finish():
+        if current and current[6]!='STRING' and children!=int(current[4]):raise ValueError('Compiler type member count mismatch')
+    for line in text[header.end():].splitlines():
+        if not line:continue
+        fields=line.split('\t')
+        if len(fields)<2:raise ValueError('Unsupported compiler type row')
+        if not re.fullmatch(r'\d+ \d+',fields[0]):raise ValueError('Invalid compiler type source identity')
+        if len(fields)>6 and fields[1]:
+            finish()
+            if len(fields) not in (11,12) or fields[5]!='USER' or fields[6] not in ('STRUCT','ARRAY','ENUM','STRING') or not fields[4].isdigit():raise ValueError('Unsupported compiler type root')
+            if fields[3] in root_ids or fields[2].casefold() in root_names:raise ValueError('Duplicate compiler type root')
+            root_ids.add(fields[3]);root_names.add(fields[2].casefold());bind(fields[2],fields[3])
+            if fields[6]=='ARRAY':bind(fields[7],fields[8])
+            roots.append(fields);current=fields;children=0
+        else:
+            if current is None or fields[1] or len(fields) not in (6,7):raise ValueError('Unsupported compiler type member')
+            children+=1
+            if current[6]=='STRUCT':
+                if not IDENTIFIER.fullmatch(fields[2]):raise ValueError('Invalid compiler structure member')
+                bind(fields[3],fields[4]);properties+=1
+            elif current[6]=='ARRAY':
+                if fields[2] or not re.fullmatch(r'-?\d+',fields[3]) or not re.fullmatch(r'-?\d+',fields[4]):raise ValueError('Invalid compiler array dimension')
+                dimensions+=1
+            elif current[6]=='ENUM':
+                if not IDENTIFIER.fullmatch(fields[2]):raise ValueError('Invalid compiler enum member')
+                properties+=1
+            else:raise ValueError('Unexpected compiler string member')
+    finish()
+    if (len(roots),properties,dimensions)!=tuple(int(x) for x in header.groups()):raise ValueError('Compiler type table is incomplete')
+    return types
+
+def parse_compiled_interface(listing,dependency,name,worksheet,type_names=None):
+    """Diagnostic pins from explicit cache declarations, independently counted.
+
+    This does not establish freshness against a protected source worksheet and
+    intentionally has a different evidence kind from insertion-eligible tables.
+    """
+    if '\0' in listing or '\0' in dependency:raise ValueError('Unsupported compiled interface encoding')
+    listing=listing.replace('\r','')
+    header=re.match(r'\A\(\*\n(.*?)\n\*\)\nFUNCTION_BLOCK ([A-Za-z_][A-Za-z_0-9]*)\n',listing,re.S)
+    if not header or header[2]!=name:raise ValueError('Compiled library interface identity mismatch')
+    counts=re.findall(r'^NVD:\s*(\d+)\s*$',header[1],re.M)
+    kinds=re.findall(r'^T:\s*(\w+)\s*$',header[1],re.M)
+    if kinds!=['FUNCTION_BLOCK'] or len(counts)!=1:raise ValueError('Compiled library header absent or ambiguous')
+    markers=list(re.finditer(r'^@WS (.+)$',listing,re.M))
+    expected='POE/'+name+'/'+worksheet
+    if len(markers)<2 or markers[0][1].replace('\\','/').casefold()!=expected.casefold():
+        raise ValueError('Compiled declaration worksheet identity mismatch')
+    declaration=listing[markers[0].end():markers[1].start()]
+    handles=re.findall(r'^@V (\d+) (\d+)\s+',declaration,re.M)
+    if not handles or len(set(handles))!=len(handles):raise ValueError('Compiled source declaration handles absent or duplicate')
+    cleaned=re.sub(r'^@V \d+ \d+\s*','',declaration,flags=re.M)
+    table=parse_declarations(cleaned)
+    if table.warnings or len(table.variables)!=len(handles):raise ValueError('Compiled source declarations incomplete')
+    names=[v.name.casefold() for v in table.variables]
+    if len(set(names))!=len(names):raise ValueError('Duplicate compiled source declaration name')
+    if compiler_identity(dependency)!=('FUNCTION_BLOCK',name):raise ValueError('Compiler dependency block identity mismatch')
+    dep_header=dependency.split('*)',1)[0]
+    dep_counts=re.findall(r'^QVE:\s*(\d+)\s*$',dep_header,re.M)
+    par_counts=re.findall(r'^QPar:\s*(\d+)\s*$',dep_header,re.M)
+    rows=list(DEPENDENCY_DECLARATION.finditer(dependency))
+    if len(dep_counts)!=1 or int(dep_counts[0])!=int(counts[0]) or len(rows)!=int(counts[0]):raise ValueError('Compiler declaration count mismatch')
+    if {int(r[2]) for r in rows}!=set(range(1,len(rows)+1)) or len({r[1].casefold() for r in rows})!=len(rows):
+        raise ValueError('Compiler declaration ordinals/names incomplete or duplicate')
+    source={(v.name,v.section) for v in table.variables}
+    ordinary={(r[1],r[3]) for r in rows if not re.fullmatch(r'@T_Code_\d+',r[1])}
+    if source!=ordinary or any(r[3]!='VAR' for r in rows if r[1].startswith('@')):
+        raise ValueError('Library/dependency declaration identities differ')
+    pins=[dict(name=v.name,type=v.type_name,section=v.section,direction=SECTIONS[v.section],initial_value=v.initial_value,description=v.description)
+          for v in table.variables if v.section in SECTIONS]
+    if par_counts!=[str(len(pins))] or not pins:raise ValueError('Compiler public parameter count mismatch')
+    if type_names is not None:
+        by_name={r[1]:r for r in rows}
+        for pin in pins:
+            token=re.fullmatch(r'@TYP:(\d+)\s*',by_name[pin['name']][4])
+            if not token or type_names.get(int(token[1]),'').casefold()!=pin['type'].casefold():raise ValueError('Compiled public pin type differs from explicit declaration')
+    return dict(pins=pins,source_declaration_count=len(table.variables),compiler_declaration_count=len(rows),compiler_pin_types_verified=type_names is not None)
+
+def _cached_library_interface(project_root,library_root,pou):
+    cache=pou.source_path.parent/'tmp.sto'
+    if not cache.resolve().is_relative_to(Path(library_root).resolve()):raise ValueError('Linked library cache escapes its bound root')
+    before=hashlib.sha256(cache.read_bytes()).hexdigest()
+    source_hash=hashlib.sha256(pou.source_path.read_bytes()).hexdigest()
+    container=CompoundFile(cache);stream='@$@$@$@$.clu'
+    matches=[n for n in container.stream_names() if n.casefold()==stream.casefold()]
+    worksheets=[n for n in pou.source().stream_names() if n.upper().endswith('.VB')]
+    if len(matches)!=1 or len(worksheets)!=1:raise ValueError('Compiled library declaration stream absent or ambiguous')
+    listing=container.read_stream(matches[0])
+    if len(listing)>2_000_000:raise ValueError('Compiled declaration cache exceeds bound')
+    dependencies=[]
+    for path in (Path(project_root)/'C').rglob('ICI*.DIT'):
+        if not path.resolve().is_relative_to(Path(project_root).resolve()):raise ValueError('Linked compiler dependency escapes project')
+        if path.stat().st_size>2_000_000:raise ValueError('Compiler dependency exceeds bound')
+        raw=path.read_bytes()
+        try:kind,name=compiler_identity(raw.decode('latin1'))
+        except ValueError:continue
+        if kind=='FUNCTION_BLOCK' and name==pou.name:dependencies.append((path,raw))
+    if len(dependencies)!=1:raise ValueError('Matching saved compiler dependency absent or ambiguous')
+    dependency,raw=dependencies[0]
+    type_table=dependency.with_name('TYLLIST.TYP')
+    if not type_table.resolve().is_relative_to(Path(project_root).resolve()) or type_table.stat().st_size>2_000_000:raise ValueError('Compiler type table outside project or oversized')
+    type_bytes=type_table.read_bytes();type_names=compiler_type_names(type_bytes.decode('latin1'))
+    identifiers=re.findall(r'^CI#:\s*(\d+)\s*$',raw.decode('latin1').split('*)',1)[0],re.M)
+    if len(identifiers)!=1 or int(identifiers[0])!=int(dependency.stem[3:]):raise ValueError('Compiler dependency file/type identity mismatch')
+    result=parse_compiled_interface(listing.decode('latin1'),raw.decode('latin1'),pou.name,worksheets[0],type_names)
+    if before!=hashlib.sha256(cache.read_bytes()).hexdigest() or raw!=dependency.read_bytes() or type_bytes!=type_table.read_bytes() or source_hash!=hashlib.sha256(pou.source_path.read_bytes()).hexdigest():raise ValueError('Compiled interface changed during read')
+    result.update(source_stream=matches[0],cache_file=str(cache),cache_sha256=before,
+                  worksheet_file=str(pou.source_path),worksheet_sha256=source_hash,
+                  compiler_dependency=str(dependency),compiler_dependency_sha256=hashlib.sha256(raw).hexdigest(),
+                  compiler_type_table=str(type_table),compiler_type_table_sha256=hashlib.sha256(type_bytes).hexdigest(),
+                  origin='user_library_compiled_declarations',compiler_cache_freshness_verified=False,compiler_source_binding_verified=False,
+                  insertion_eligible=False,evidence_kind='installed-compiled-block-interface')
+    return result
+
+def parse_parameter_table(data):
+    headers={}; pins=[]; started=False
+    for line in data.decode('latin1').splitlines():
+        if not line.strip():continue
+        if line=='parameters:':started=True;continue
+        if not started:
+            key,sep,value=line.partition(':')
+            if not sep or key in headers:raise ValueError('Malformed parameter-table header')
+            headers[key]=value.strip()
+        else:
+            columns=line.split('\t')
+            if len(columns)<4 or columns[0] or columns[1] not in SECTIONS:raise ValueError('Unsupported parameter-table row')
+            section,name,type_name=columns[1:4]
+            if not IDENTIFIER.fullmatch(name) or not type_name:raise ValueError('Invalid parameter identity')
+            pins.append(dict(name=name,type=type_name,section=section,direction=SECTIONS[section],native_attributes=columns[4:]))
+    name=headers.get('pouName','');kind=KINDS.get(headers.get('pouKind',''))
+    if not IDENTIFIER.fullmatch(name) or not kind or not started or not headers.get('parNum','').isdigit():raise ValueError('Unsupported parameter-table identity/count')
+    if len(pins)!=int(headers['parNum']) or len({p['name'].casefold() for p in pins})!=len(pins):raise ValueError('Parameter-table count/identity mismatch')
+    return dict(name=name,kind=kind,pins=pins,native_headers=headers)
+
+def _registry(path):
+    rows=[]
+    for line in path.read_text(encoding='latin1').splitlines():
+        if not line.strip():continue
+        cols=line.split('\t');kind=KINDS.get(cols[0].upper())
+        if not kind or len(cols)<2 or not IDENTIFIER.fullmatch(cols[1]):raise ValueError('Unsupported library registry row')
+        alias=cols[5] if len(cols)>5 and cols[5] else cols[1]
+        if not IDENTIFIER.fullmatch(alias):raise ValueError('Unsupported library worksheet alias')
+        rows.append(dict(name=cols[1],kind=kind,alias=alias,hidden=any(c=='HIDDEN=1' for c in cols)))
+    if len({r['name'].casefold() for r in rows})!=len(rows):raise ValueError('Duplicate library registry name')
+    return rows
+
+def _same_path(a,b):return str(Path(a).resolve()).casefold()==str(Path(b).resolve()).casefold()
+
+def _user_library_declarations(root,pou):
+    if pou.declaration_stream_name() is not None:
+        return pou.declarations()
+    # User libraries can name their worksheets Variables/Code instead of
+    # <POU>V/<POU>. Bind the one declaration stream to its saved grid worksheet;
+    # do not infer directions from compiler heaps or unrelated streams.
+    container=pou.source();names=container.stream_names()
+    matches=[n for n in names if n.upper().endswith('.VB')]
+    if len(matches)!=1 or not matches[0][:-3]:
+        raise ValueError('User-library declaration worksheet absent or ambiguous')
+    declaration=matches[0];grid=declaration[:-3]+'.VGR'
+    grids=[n for n in names if n.casefold()==grid.casefold()]
+    if len(grids)!=1:raise ValueError('User-library declaration/grid worksheet pair absent or ambiguous')
+    document=parse_document(CompoundFile(Path(root)/'src.st1').read_stream('PROJECT.TRE').decode('latin1'))
+    expected=('POE/'+pou.name+'/'+grids[0]).casefold()
+    nodes=[n for n,_ in document.walk_with_ancestors()
+           if n.path.split('\t')[0].replace('\\','/').casefold()==expected]
+    if document.warnings or len(nodes)!=1 or document.lines[nodes[0].start_line].strip()!='8':
+        raise ValueError('User-library variable worksheet tree identity absent or ambiguous')
+    table=decode_declarations(container.read_stream(declaration),declaration)
+    count=read_grid_variable_count(container.read_stream(grids[0]))
+    if count is None:raise ValueError('User-library variable grid count unavailable')
+    table.warnings.extend(cross_check(table,count))
+    return table
+
+def sources(root,native_libraries):
+    root=Path(root);project=Project(root)
+    native={r['name'].casefold():r for r in native_libraries}
+    if len(native)!=len(native_libraries):raise ValueError('Ambiguous native library inventory')
+    result=[dict(library='project',kind='PROJECT',root=root,registry=root/'LIST.POU',binding='active_project')]
+    lines=(root/'@LIBRARY.LST').read_text(encoding='latin1').splitlines()
+    if not lines or lines[0]!='Library List, V40':raise ValueError('Unsupported saved library registry')
+    used=set()
+    for line in lines[1:]:
+        if not line.strip():continue
+        fields=line.split(';')
+        if len(fields)!=4 or fields[0] not in ['FW','USER']:raise ValueError('Unsupported saved library reference')
+        kind,path,label,flags=fields;directory=Path(path)
+        library=directory.name if kind=='USER' else label
+        if not IDENTIFIER.fullmatch(library):raise ValueError('Unsupported library name')
+        row=native.get(library.casefold())
+        expected=Path(str(directory)+'.mwt') if kind=='USER' else directory/(label+'.fwl')
+        if row:
+            if not _same_path(row['full_name'],expected):raise ValueError('Saved/native library paths disagree: '+library)
+            used.add(library.casefold());binding='native_reference'
+        elif kind=='FW' and library.casefold() in ['iec','eclr']:
+            binding='saved_implicit_reference'
+        else:raise ValueError('Saved/native library inventories disagree: '+library)
+        registry=directory/'LIST.POU' if kind=='USER' else directory/(label+'.POU')
+        result.append(dict(library=library,kind=kind,root=directory,registry=registry,binding=binding,reference_file=expected,flags=flags))
+    if used!=set(native):raise ValueError('Native library absent from saved references')
+    return result
+
+def inspect(root,native_libraries,name=None,library=None):
+    candidates=[];unavailable=[]
+    for source in sources(root,native_libraries):
+        if library and source['library'].casefold()!=library.casefold():continue
+        try:rows=_registry(source['registry'])
+        except (OSError,ValueError) as error:
+            unavailable.append(dict(library=source['library'],error=str(error)));continue
+        for row in rows:
+            if name and row['name'].casefold()!=name.casefold():continue
+            candidates.append({**row,'library':source['library'],'binding':source['binding'],'_source':source})
+    if not name:
+        return dict(blocks=[{k:v for k,v in row.items() if k!='_source'} for row in candidates],unavailable_libraries=unavailable,
+                    evidence_kind='bound-installed-block-catalog',action_performed=False)
+    if len(candidates)!=1:raise ValueError('Block absent or ambiguous; specify its library. Candidates: '+str([(c['library'],c['name']) for c in candidates])+'; unavailable: '+str(unavailable))
+    row=candidates[0];source=row.pop('_source')
+    if source['kind']=='FW':
+        file=source['root']/'tmp.sto';container=CompoundFile(file)
+        matches=[n for n in container.stream_names() if n.casefold()==(row['alias']+'.PT').casefold()]
+        if len(matches)!=1:raise ValueError('Firmware parameter table absent or ambiguous')
+        data=container.read_stream(matches[0]);interface=parse_parameter_table(data)
+        if interface['name'].casefold()!=row['name'].casefold() or interface['kind']!=row['kind']:raise ValueError('Registry/parameter interface identity mismatch')
+        row.update(interface);row.update(source_stream=matches[0],source_sha256=hashlib.sha256(data).hexdigest(),origin='firmware_parameter_table')
+    else:
+        pou=Project(source['root']).pou(row['name'])
+        try:
+            table=_user_library_declarations(source['root'],pou) if source['kind']=='USER' else pou.declarations()
+        except CompressedStreamError:
+            if source['kind']!='USER':raise
+            row.update(_cached_library_interface(root,source['root'],pou))
+            file=Path(row['cache_file'])
+            row.update(source_sha256=hashlib.sha256(file.read_bytes()).hexdigest(),source_file=str(file),
+                       reference_registry=str(source['registry']),registry_sha256=hashlib.sha256(source['registry'].read_bytes()).hexdigest(),
+                       action_performed=False,note='Diagnostic cache declarations matched a saved compiler dependency. Freshness against the protected worksheet is unverified; do not use this interface for insertion. Native Build and complete source/library validation are still required.')
+            return row
+        if table.warnings:raise ValueError('Declaration interface parse warnings: '+str(table.warnings))
+        file=pou.source_path
+        row['pins']=[dict(name=v.name,type=v.type_name,section=v.section,direction=SECTIONS[v.section],initial_value=v.initial_value,description=v.description)
+                     for v in table.variables if v.section in SECTIONS]
+        row.update(source_sha256=hashlib.sha256(file.read_bytes()).hexdigest(),source_stream=table.source_stream,origin='project_declarations' if source['kind']=='PROJECT' else 'user_library_declarations')
+    row.update(source_file=str(file),reference_registry=str(source['registry']),registry_sha256=hashlib.sha256(source['registry'].read_bytes()).hexdigest(),
+               evidence_kind='installed-declared-block-interface',action_performed=False,
+               note='Pin directions/types come from declarations or native parameter tables. Implicit references are identified separately. Verify the selected controller/firmware profile and Build/Make before machine use.')
+    return row