Genarrative/apps/ai-game-creator-shell/src-tauri/vendor/codex-patch-parser/upstream-integrity.test.mjs

import assert from 'node:assert/strict';
import { createHash } from 'node:crypto';
import { readFileSync } from 'node:fs';
import path from 'node:path';
import test from 'node:test';
import { fileURLToPath } from 'node:url';

const parserRoot = path.dirname(fileURLToPath(import.meta.url));
const vendorRoot = path.dirname(parserRoot);
const packages = [
  'codex-patch-parser',
  'codex-utils-absolute-path',
  'codex-utils-path-uri',
];
const commit = 'be2951ea34f0d295ed0becf97079f92fa5f6950e';

for (const packageName of packages) {
  test(`${packageName} 保留固定版本的完整源码与许可`, () => {
    const packageRoot = path.join(vendorRoot, packageName);
    const provenance = JSON.parse(
      readFileSync(path.join(packageRoot, 'UPSTREAM.json'), 'utf8'),
    );
    assert.equal(provenance.repository, 'https://github.com/openai/codex');
    assert.equal(provenance.commit, commit);
    assert.equal(provenance.tag, 'rust-v0.155.1');
    assert.ok(provenance.files.length >= 4);
    for (const entry of provenance.files) {
      const absolute = path.resolve(packageRoot, entry.path);
      const relative = path.relative(packageRoot, absolute);
      assert.ok(
        relative && relative !== '..' && !relative.startsWith(`..${path.sep}`),
      );
      assert.ok(!path.isAbsolute(relative));
      const bytes = readFileSync(absolute);
      assert.doesNotThrow(() =>
        new TextDecoder('utf-8', { fatal: true }).decode(bytes),
      );
      const digest = createHash('sha256').update(bytes).digest('hex');
      assert.equal(
        digest,
        entry.sha256,
        `${packageName}/${entry.path} 与上游固定源码不同`,
      );
    }
    for (const license of ['LICENSE', 'NOTICE']) {
      assert.ok(
        provenance.files.some(
          (entry) => entry.path === license && entry.upstreamPath === license,
        ),
      );
    }
    for (const extraction of provenance.extractions ?? []) {
      const source = readFileSync(
        path.join(packageRoot, extraction.path),
        'utf8',
      );
      const start = source.indexOf(extraction.startMarker);
      assert.notEqual(start, -1);
      const end = source.indexOf(extraction.endMarker, start);
      assert.notEqual(end, -1);
      const snippet = source.slice(start, end + extraction.endMarker.length);
      assert.equal(
        createHash('sha256').update(snippet).digest('hex'),
        extraction.sha256,
      );
    }
    const manifest = readFileSync(path.join(packageRoot, 'Cargo.toml'), 'utf8');
    assert.doesNotMatch(
      manifest,
      /codex-(?:core|exec-server|protocol|api)\s*=/,
    );
  });
}