GDScript
33 views
Skip to first unread message
Rob Beezer
Jun 24, 2026, 1:20:16 PMJun 24
to prete...@googlegroups.com
I am reviewing
https://github.com/PreTeXtBook/pretext/pull/2892
which David Cooper has been working on for a while now. It contains two binary
*.pck files.
Most of what I have learned about these files does not make the security
implications clear to me. But maybe the following helps set teh stag:
"A Godot PCK is a packed resource archive: it bundles scenes and GDScript (often
compiled to bytecode, optionally encrypted) that the Godot WASM engine mounts as
a virtual filesystem and executes."
1. Will Runestone sandbox these?
2. Do we want binary blobs of executable code in the PreTeXt repository?
3. Is there a way to ship text/source that gets transformed into *.pck files,
or their equivalent? Maybe the Python routines manage making these from source?
Three related things on my mind:
(1) Good hygiene for teh repository (tracking changes, not the mere presence of
binary files).
(2) Security, which I do not understand.
(3) The PreTeXt principle that your project has authored source (like code/text
for an Asymptote diagram) and we manufacture the derived product (a PDF of the
diagram, for example).
Rob
https://github.com/PreTeXtBook/pretext/pull/2892
which David Cooper has been working on for a while now. It contains two binary
*.pck files.
Most of what I have learned about these files does not make the security
implications clear to me. But maybe the following helps set teh stag:
"A Godot PCK is a packed resource archive: it bundles scenes and GDScript (often
compiled to bytecode, optionally encrypted) that the Godot WASM engine mounts as
a virtual filesystem and executes."
1. Will Runestone sandbox these?
2. Do we want binary blobs of executable code in the PreTeXt repository?
3. Is there a way to ship text/source that gets transformed into *.pck files,
or their equivalent? Maybe the Python routines manage making these from source?
Three related things on my mind:
(1) Good hygiene for teh repository (tracking changes, not the mere presence of
binary files).
(2) Security, which I do not understand.
(3) The PreTeXt principle that your project has authored source (like code/text
for an Asymptote diagram) and we manufacture the derived product (a PDF of the
diagram, for example).
Rob
Cooper, David
Jun 24, 2026, 3:30:55 PMJun 24
to prete...@googlegroups.com
1. Currently the .pck file will be in the external directory of the book.
2. I like the idea of having the contents of the .pck as a directory structure. Currently the .pck has the directory structure, plain text files for godot scenes and godot scripts, binary files that are assets like images and sounds. For the book, each
.pck will hold activecode specific problems, so there could potentially be a lot of .pck files. The biggest security risk of the .pck files is that they can have arbitrary code that runs. Perhaps we could add a checksum or other hash to help verify that the
.pck file hasn’t been tampered with.
David G. Cooper, PhD
Assistant Professor
Computer Science
Assistant Professor
Computer Science
West Chester University
25 University Ave
Office 142
x2651
On Jun 24, 2026, at 1:20 PM, 'Rob Beezer' via PreTeXt development <prete...@googlegroups.com> wrote:
--
You received this message because you are subscribed to the Google Groups "PreTeXt development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to pretext-dev...@googlegroups.com.
To view this discussion visit https://urldefense.com/v3/__https://groups.google.com/d/msgid/pretext-dev/MTAwMDAwOS5iZWV6ZXI.1782321613*40pnsh__;JQ!!BGRtF3g!rNemPq_75w_fZjnR3ye7itmhHAlpP-5RhQXQt5CwUiciwXr56POTuH15Hfq_NofrYOcr7S2MlrcQAy6RgvXlHvOofmw$ .
Cooper, David
Jun 25, 2026, 8:40:01 PMJun 25
to prete...@googlegroups.com
I looked into this a little bit more, and it looks like importing a zip file would work as well, and that may be easier to handle by pretext, since the source could be files you can see, but the book could have the zip files for import.
It would be a little less efficient, but I can try it as an option if that would be preferred on the pretext side of things.
Thanks,
David
David G. Cooper, PhD
Assistant Professor
Computer Science
Assistant Professor
Computer Science
West Chester University
25 University Ave
Office 142
x2651
On Jun 24, 2026, at 1:20 PM, 'Rob Beezer' via PreTeXt development <prete...@googlegroups.com> wrote:
Rob Beezer
Jun 26, 2026, 12:22:06 PMJun 26
to prete...@googlegroups.com
Dear David,
Thanks for your replies, here and on the PR. I got some info from Brad
(off-list, perhaps by mistake).
A zip-file, managed by PreTeXt sounds like a good compromise. Source/text/code
files can go in the external directory as author's source, for inspection and
for preservation. The pretext/pretext script can manufacture zip files to
place into the generated directory, perhaps with a checksum, as you suggest (or
perhaps some other sort of integrity measure that can be automatically checked
when the files are used?).
Thanks for your work on this one - you've bitten off a big one for your first
contribution. ;-) But we will stick with it and get the kinks ironed out.
Please report any insights on the zip-file approach.
Thanks,
Rob
On 6/25/26 17:39, Cooper, David wrote:
> I looked into this a little bit more, and it looks like importing a zip file
> would work as well, and that may be easier to handle by pretext, since the
> source could be files you can see, but the book could have the zip files for
> import.
>
> It would be a little less efficient, but I can try it as an option if that would
> be preferred on the pretext side of things.
>
> Thanks,
>
> David
>
> David G. Cooper, PhD
> Assistant Professor
> Computer Science
> West Chester University
> 25 University Ave
> Office 142
> x2651
> dco...@wcupa.edu <mailto:dco...@wcupa.edu>
>
>
>> On Jun 24, 2026, at 1:20 PM, 'Rob Beezer' via PreTeXt development <pretext-
> to pretext-dev...@googlegroups.com <mailto:pretext-
> dev+uns...@googlegroups.com>.
> To view this discussion visit https://groups.google.com/d/msgid/pretext-
> dev/9C5C319A-E464-4449-B0DB-9CECB4611B3C%40wcupa.edu <https://groups.google.com/
> d/msgid/pretext-dev/9C5C319A-E464-4449-B0DB-9CECB4611B3C%40wcupa.edu?
> utm_medium=email&utm_source=footer>.
Thanks for your replies, here and on the PR. I got some info from Brad
(off-list, perhaps by mistake).
A zip-file, managed by PreTeXt sounds like a good compromise. Source/text/code
files can go in the external directory as author's source, for inspection and
for preservation. The pretext/pretext script can manufacture zip files to
place into the generated directory, perhaps with a checksum, as you suggest (or
perhaps some other sort of integrity measure that can be automatically checked
when the files are used?).
Thanks for your work on this one - you've bitten off a big one for your first
contribution. ;-) But we will stick with it and get the kinks ironed out.
Please report any insights on the zip-file approach.
Thanks,
Rob
On 6/25/26 17:39, Cooper, David wrote:
> I looked into this a little bit more, and it looks like importing a zip file
> would work as well, and that may be easier to handle by pretext, since the
> source could be files you can see, but the book could have the zip files for
> import.
>
> It would be a little less efficient, but I can try it as an option if that would
> be preferred on the pretext side of things.
>
> Thanks,
>
> David
>
> David G. Cooper, PhD
> Assistant Professor
> Computer Science
> West Chester University
> 25 University Ave
> Office 142
> x2651
>
>
>> On Jun 24, 2026, at 1:20 PM, 'Rob Beezer' via PreTeXt development <pretext-
> dev+uns...@googlegroups.com>.
> To view this discussion visit https://groups.google.com/d/msgid/pretext-
> dev/9C5C319A-E464-4449-B0DB-9CECB4611B3C%40wcupa.edu <https://groups.google.com/
> d/msgid/pretext-dev/9C5C319A-E464-4449-B0DB-9CECB4611B3C%40wcupa.edu?
> utm_medium=email&utm_source=footer>.
Cooper, David
Jun 29, 2026, 8:47:33 AM (12 days ago) Jun 29
to prete...@googlegroups.com
Hi, Rob,
I got the wasm to accept .zip files in addition to .pck files so that our solution will work. Is there already a mechnism to make zip files from a directory using pretext or do I need to add this capability?
Thanks,
David
David G. Cooper, PhD
Assistant Professor
Computer Science
Assistant Professor
Computer Science
West Chester University
25 University Ave
Office 142
x2651
To view this discussion visit https://urldefense.com/v3/__https://groups.google.com/d/msgid/pretext-__;!!BGRtF3g!v4RTB_p81q54WTscWgvzUkS2ZatFvi9Faz51OO3cj6RU3mNTv4XPInYbbbuta27gcWuENDPva4r-XeG7x8phV7tpJno$ dev/9C5C319A-E464-4449-B0DB-9CECB4611B3C%40wcupa.edu<https://urldefense.com/v3/__https://groups.google.com/__;!!BGRtF3g!v4RTB_p81q54WTscWgvzUkS2ZatFvi9Faz51OO3cj6RU3mNTv4XPInYbbbuta27gcWuENDPva4r-XeG7x8phcVXYtKQ$ d/msgid/pretext-dev/9C5C319A-E464-4449-B0DB-9CECB4611B3C%40wcupa.edu? utm_medium=email&utm_source=footer>.
--
You received this message because you are subscribed to the Google Groups "PreTeXt development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to pretext-dev...@googlegroups.com.
To view this discussion visit https://urldefense.com/v3/__https://groups.google.com/d/msgid/pretext-dev/MTAwMDA0My5iZWV6ZXI.1782490923*40pnsh__;JQ!!BGRtF3g!v4RTB_p81q54WTscWgvzUkS2ZatFvi9Faz51OO3cj6RU3mNTv4XPInYbbbuta27gcWuENDPva4r-XeG7x8phlMO3zkc$ .
Rob Beezer
Jun 29, 2026, 11:33:22 AM (12 days ago) Jun 29
to prete...@googlegroups.com
Dear David,
That's great! Can you come to Drop-In tomorrow? There are several small steps, none too hard, plus one design decision.
And tonite I should be able to decide which existing setup would make a good model for you to follow.
Rob
>dco...@wcupa.edu<mailto:dco...@wcupa.edu> <mailto:dco...@wcupa.edu>
>To view this discussion visit https://urldefense.com/v3/__https://groups.google.com/d/msgid/pretext-__;!!BGRtF3g!v4RTB_p81q54WTscWgvzUkS2ZatFvi9Faz51OO3cj6RU3mNTv4XPInYbbbuta27gcWuENDPva4r-XeG7x8phV7tpJno$ dev/9C5C319A-E464-4449-B0DB-9CECB4611B3C%40wcupa.edu<http://40wcupa.edu/><https://urldefense.com/v3/__https://groups.google.com/__;!!BGRtF3g!v4RTB_p81q54WTscWgvzUkS2ZatFvi9Faz51OO3cj6RU3mNTv4XPInYbbbuta27gcWuENDPva4r-XeG7x8phcVXYtKQ$ d/msgid/pretext-dev/9C5C319A-E464-4449-B0DB-9CECB4611B3C%40wcupa.edu? utm_medium=email&utm_source=footer<https://urldefense.com/v3/__https://groups.google.com/__;!!BGRtF3g!v4RTB_p81q54WTscWgvzUkS2ZatFvi9Faz51OO3cj6RU3mNTv4XPInYbbbuta27gcWuENDPva4r-XeG7x8phcVXYtKQ$%20%20d/msgid/pretext-dev/9C5C319A-E464-4449-B0DB-9CECB4611B3C%40wcupa.edu?%20utm_medium=email&utm_source=footer>>.
>To view this discussion visit https://urldefense.com/v3/__https://groups.google.com/d/msgid/pretext-dev/MTAwMDA0My5iZWV6ZXI.1782490923*40pnsh__;JQ!!BGRtF3g!v4RTB_p81q54WTscWgvzUkS2ZatFvi9Faz51OO3cj6RU3mNTv4XPInYbbbuta27gcWuENDPva4r-XeG7x8phlMO3zkc$ .
>
That's great! Can you come to Drop-In tomorrow? There are several small steps, none too hard, plus one design decision.
And tonite I should be able to decide which existing setup would make a good model for you to follow.
Rob
>On Jun 24, 2026, at 1:20 PM, 'Rob Beezer' via PreTeXt development <pretext- d...@googlegroups.com> wrote:
>
>I am reviewing
>
>https://urldefense.com/v3/__https://github.com/PreTeXtBook/pretext/ pull/2892__;!!BGRtF3g! rNemPq_75w_fZjnR3ye7itmhHAlpP-5RhQXQt5CwUiciwXr56POTuH15Hfq_NofrYOcr7S2MlrcQAy6RgvXl4_lx_Uo$
>which David Cooper has been working on for a while now. It contains two binary *.pck files.
>
>Most of what I have learned about these files does not make the security implications clear to me. But maybe the following helps set teh stag:
>
>"A Godot PCK is a packed resource archive: it bundles scenes and GDScript (often compiled to bytecode, optionally encrypted) that the Godot WASM engine mounts as a virtual filesystem and executes."
>
>1. Will Runestone sandbox these?
>
>2. Do we want binary blobs of executable code in the PreTeXt repository?
>
>3. Is there a way to ship text/source that gets transformed into *.pck files, or their equivalent? Maybe the Python routines manage making these from source?
>
>Three related things on my mind:
>
>(1) Good hygiene for teh repository (tracking changes, not the mere presence of binary files).
>
>(2) Security, which I do not understand.
>
>(3) The PreTeXt principle that your project has authored source (like code/ text for an Asymptote diagram) and we manufacture the derived product (a PDF of the diagram, for example).
>
>Rob
>
>--
>You received this message because you are subscribed to the Google Groups "PreTeXt development" group.
>To unsubscribe from this group and stop receiving emails from it, send an email to pretext-dev...@googlegroups.com.
>To view this discussion visit https://urldefense.com/v3/__https:// groups.google.com/d/msgid/pretext-dev/ MTAwMDAwOS5iZWV6ZXI.1782321613*40pnsh__;JQ!!BGRtF3g! rNemPq_75w_fZjnR3ye7itmhHAlpP-5RhQXQt5CwUiciwXr56POTuH15Hfq_NofrYOcr7S2MlrcQAy6RgvXlHvOofmw$ .
>--
>You received this message because you are subscribed to the Google Groups "PreTeXt development" group.
>To unsubscribe from this group and stop receiving emails from it, send an email to pretext-dev...@googlegroups.com<mailto:pretext-dev...@googlegroups.com> <mailto:pretext- dev+uns...@googlegroups.com<mailto:dev+uns...@googlegroups.com>>.
>
>I am reviewing
>
>https://urldefense.com/v3/__https://github.com/PreTeXtBook/pretext/ pull/2892__;!!BGRtF3g! rNemPq_75w_fZjnR3ye7itmhHAlpP-5RhQXQt5CwUiciwXr56POTuH15Hfq_NofrYOcr7S2MlrcQAy6RgvXl4_lx_Uo$
>which David Cooper has been working on for a while now. It contains two binary *.pck files.
>
>Most of what I have learned about these files does not make the security implications clear to me. But maybe the following helps set teh stag:
>
>"A Godot PCK is a packed resource archive: it bundles scenes and GDScript (often compiled to bytecode, optionally encrypted) that the Godot WASM engine mounts as a virtual filesystem and executes."
>
>1. Will Runestone sandbox these?
>
>2. Do we want binary blobs of executable code in the PreTeXt repository?
>
>3. Is there a way to ship text/source that gets transformed into *.pck files, or their equivalent? Maybe the Python routines manage making these from source?
>
>Three related things on my mind:
>
>(1) Good hygiene for teh repository (tracking changes, not the mere presence of binary files).
>
>(2) Security, which I do not understand.
>
>(3) The PreTeXt principle that your project has authored source (like code/ text for an Asymptote diagram) and we manufacture the derived product (a PDF of the diagram, for example).
>
>Rob
>
>--
>You received this message because you are subscribed to the Google Groups "PreTeXt development" group.
>To unsubscribe from this group and stop receiving emails from it, send an email to pretext-dev...@googlegroups.com.
>To view this discussion visit https://urldefense.com/v3/__https:// groups.google.com/d/msgid/pretext-dev/ MTAwMDAwOS5iZWV6ZXI.1782321613*40pnsh__;JQ!!BGRtF3g! rNemPq_75w_fZjnR3ye7itmhHAlpP-5RhQXQt5CwUiciwXr56POTuH15Hfq_NofrYOcr7S2MlrcQAy6RgvXlHvOofmw$ .
>--
>You received this message because you are subscribed to the Google Groups "PreTeXt development" group.
>To view this discussion visit https://urldefense.com/v3/__https://groups.google.com/d/msgid/pretext-__;!!BGRtF3g!v4RTB_p81q54WTscWgvzUkS2ZatFvi9Faz51OO3cj6RU3mNTv4XPInYbbbuta27gcWuENDPva4r-XeG7x8phV7tpJno$ dev/9C5C319A-E464-4449-B0DB-9CECB4611B3C%40wcupa.edu<http://40wcupa.edu/><https://urldefense.com/v3/__https://groups.google.com/__;!!BGRtF3g!v4RTB_p81q54WTscWgvzUkS2ZatFvi9Faz51OO3cj6RU3mNTv4XPInYbbbuta27gcWuENDPva4r-XeG7x8phcVXYtKQ$ d/msgid/pretext-dev/9C5C319A-E464-4449-B0DB-9CECB4611B3C%40wcupa.edu? utm_medium=email&utm_source=footer<https://urldefense.com/v3/__https://groups.google.com/__;!!BGRtF3g!v4RTB_p81q54WTscWgvzUkS2ZatFvi9Faz51OO3cj6RU3mNTv4XPInYbbbuta27gcWuENDPva4r-XeG7x8phcVXYtKQ$%20%20d/msgid/pretext-dev/9C5C319A-E464-4449-B0DB-9CECB4611B3C%40wcupa.edu?%20utm_medium=email&utm_source=footer>>.
>
>--
>You received this message because you are subscribed to the Google Groups "PreTeXt development" group.
>To unsubscribe from this group and stop receiving emails from it, send an email to pretext-dev...@googlegroups.com<mailto:pretext-dev...@googlegroups.com>.
>--
>You received this message because you are subscribed to the Google Groups "PreTeXt development" group.
>To view this discussion visit https://urldefense.com/v3/__https://groups.google.com/d/msgid/pretext-dev/MTAwMDA0My5iZWV6ZXI.1782490923*40pnsh__;JQ!!BGRtF3g!v4RTB_p81q54WTscWgvzUkS2ZatFvi9Faz51OO3cj6RU3mNTv4XPInYbbbuta27gcWuENDPva4r-XeG7x8phlMO3zkc$ .
>
Cooper, David
Jun 29, 2026, 3:53:59 PM (11 days ago) Jun 29
to prete...@googlegroups.com
I’ll be there.
Thanks,
David G. Cooper, PhD
Assistant Professor
Computer Science
Assistant Professor
Computer Science
West Chester University
25 University Ave
Office 142
x2651
To view this discussion visit https://urldefense.com/v3/__https://groups.google.com/d/msgid/pretext-__;!!BGRtF3g!v4RTB_p81q54WTscWgvzUkS2ZatFvi9Faz51OO3cj6RU3mNTv4XPInYbbbuta27gcWuENDPva4r-XeG7x8phV7tpJno$ dev/9C5C319A-E464-4449-B0DB-9CECB4611B3C%40wcupa.edu<https://urldefense.com/v3/__http://40wcupa.edu/__;!!BGRtF3g!qapuXBAgcneDyjemUjc6ACYIjlW92VCHg49LGoKOKP2zoNRqhl6_YTgcTDzzaxrywINJxVgv_xHq452MLwlZTKypnfs$ ><https://urldefense.com/v3/__https://groups.google.com/__;!!BGRtF3g!v4RTB_p81q54WTscWgvzUkS2ZatFvi9Faz51OO3cj6RU3mNTv4XPInYbbbuta27gcWuENDPva4r-XeG7x8phcVXYtKQ$ d/msgid/pretext-dev/9C5C319A-E464-4449-B0DB-9CECB4611B3C%40wcupa.edu? utm_medium=email&utm_source=footer<https://urldefense.com/v3/__https://groups.google.com/__;!!BGRtF3g!v4RTB_p81q54WTscWgvzUkS2ZatFvi9Faz51OO3cj6RU3mNTv4XPInYbbbuta27gcWuENDPva4r-XeG7x8phcVXYtKQ$%20%20d/msgid/pretext-dev/9C5C319A-E464-4449-B0DB-9CECB4611B3C%40wcupa.edu?%20utm_medium=email&utm_source=footer>>.
--
You received this message because you are subscribed to the Google Groups "PreTeXt development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to pretext-dev...@googlegroups.com<mailto:pretext-dev...@googlegroups.com>.
To view this discussion visit https://urldefense.com/v3/__https://groups.google.com/d/msgid/pretext-dev/MTAwMDA0My5iZWV6ZXI.1782490923*40pnsh__;JQ!!BGRtF3g!v4RTB_p81q54WTscWgvzUkS2ZatFvi9Faz51OO3cj6RU3mNTv4XPInYbbbuta27gcWuENDPva4r-XeG7x8phlMO3zkc$ .
--
You received this message because you are subscribed to the Google Groups "PreTeXt development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to pretext-dev...@googlegroups.com.
Cooper, David
Jul 3, 2026, 9:42:17 AM (8 days ago) Jul 3
to prete...@googlegroups.com
Hi, Rob,
I think everything is working. Please, let me know if you need me to make any changes.
I did have to make a PR to the prefix-cli for everything to work.
Best,
David
David G. Cooper, PhD
Assistant Professor
Computer Science
Assistant Professor
Computer Science
West Chester University
25 University Ave
Office 142
x2651
On Jun 26, 2026, at 12:22 PM, 'Rob Beezer' via PreTeXt development <prete...@googlegroups.com> wrote:
Dear David,
To view this discussion visit https://urldefense.com/v3/__https://groups.google.com/d/msgid/pretext-__;!!BGRtF3g!v4RTB_p81q54WTscWgvzUkS2ZatFvi9Faz51OO3cj6RU3mNTv4XPInYbbbuta27gcWuENDPva4r-XeG7x8phV7tpJno$ dev/9C5C319A-E464-4449-B0DB-9CECB4611B3C%40wcupa.edu <https://urldefense.com/v3/__https://groups.google.com/__;!!BGRtF3g!v4RTB_p81q54WTscWgvzUkS2ZatFvi9Faz51OO3cj6RU3mNTv4XPInYbbbuta27gcWuENDPva4r-XeG7x8phcVXYtKQ$ d/msgid/pretext-dev/9C5C319A-E464-4449-B0DB-9CECB4611B3C%40wcupa.edu? utm_medium=email&utm_source=footer>.
--
You received this message because you are subscribed to the Google Groups "PreTeXt development" group.
To unsubscribe from this group and stop receiving emails from it, send an email to pretext-dev...@googlegroups.com.
Reply all
Reply to author
Forward
0 new messages