129 lines
4.1 KiB
TypeScript
129 lines
4.1 KiB
TypeScript
// @vitest-environment node
|
|
|
|
import { createHash } from "node:crypto";
|
|
import {
|
|
appendFile,
|
|
cp,
|
|
mkdtemp,
|
|
readFile,
|
|
rm,
|
|
writeFile,
|
|
} from "node:fs/promises";
|
|
import { tmpdir } from "node:os";
|
|
import path from "node:path";
|
|
import { afterEach, describe, expect, it } from "vitest";
|
|
import {
|
|
buildPhpPack,
|
|
PHP_ENGINE_LOCK,
|
|
verifyPhpPack,
|
|
} from "./php-engine-pack.mjs";
|
|
|
|
const temporaryDirectories: string[] = [];
|
|
|
|
afterEach(async () => {
|
|
await Promise.all(
|
|
temporaryDirectories
|
|
.splice(0)
|
|
.map((directory) => rm(directory, { recursive: true, force: true })),
|
|
);
|
|
});
|
|
|
|
async function digest(file: string): Promise<string> {
|
|
return createHash("sha256")
|
|
.update(await readFile(file))
|
|
.digest("hex");
|
|
}
|
|
|
|
describe("PHP engine-pack gate", () => {
|
|
it("verifies the installed Asyncify PHP runtime and native smoke cases", async () => {
|
|
await expect(
|
|
verifyPhpPack(path.resolve("public", "engines", "php")),
|
|
).resolves.toEqual(
|
|
expect.objectContaining({
|
|
engineVersion: "PHP 8.5.8 preg / PCRE2 10.44",
|
|
platform: "wasm32-emscripten",
|
|
source: expect.objectContaining({
|
|
runtimeVariant: "PHP 8.5 Asyncify web build (without intl extension)",
|
|
nativeComponents: expect.objectContaining({
|
|
linkedComponentCount: 32,
|
|
excludedDetectionCount: 7,
|
|
}),
|
|
}),
|
|
licensing: expect.objectContaining({
|
|
nativeInventory: expect.objectContaining({
|
|
independentlyPinnedLegalAssets: 42,
|
|
}),
|
|
}),
|
|
}),
|
|
);
|
|
});
|
|
|
|
it("pins exact package, loader, and WebAssembly identities", () => {
|
|
expect(PHP_ENGINE_LOCK.packageVersion).toBe("3.1.46");
|
|
expect(PHP_ENGINE_LOCK.phpVersion).toBe("8.5.8");
|
|
expect(PHP_ENGINE_LOCK.pcreVersion).toBe("10.44");
|
|
expect(PHP_ENGINE_LOCK.asyncMode).toBe("asyncify");
|
|
expect(PHP_ENGINE_LOCK.npm.web.integrity).toMatch(/^sha512-/u);
|
|
expect(PHP_ENGINE_LOCK.npm.universal.integrity).toMatch(/^sha512-/u);
|
|
expect(PHP_ENGINE_LOCK.sourceAssets.wasm).toHaveLength(64);
|
|
expect(PHP_ENGINE_LOCK.sourceAssets.nativeInventory).toHaveLength(64);
|
|
expect(Object.keys(PHP_ENGINE_LOCK.legalAssets)).toHaveLength(42);
|
|
});
|
|
|
|
it("builds byte-identical closed packs from pinned npm inputs", async () => {
|
|
const directory = await mkdtemp(path.join(tmpdir(), "regex-php-pack-"));
|
|
temporaryDirectories.push(directory);
|
|
const first = path.join(directory, "first");
|
|
const second = path.join(directory, "second");
|
|
|
|
await buildPhpPack({ output: first });
|
|
await buildPhpPack({ output: second });
|
|
|
|
for (const file of [
|
|
"php.wasm",
|
|
"php-loader.mjs",
|
|
"engine-metadata.json",
|
|
"native-components.json",
|
|
"SHA256SUMS",
|
|
"LICENSE.Emscripten-4.0.19.txt",
|
|
"LICENSE.llvm-compiler-rt.txt",
|
|
"LICENSE.PHP-4.0.txt",
|
|
"LICENSE.PHP-Zend-2.0.txt",
|
|
"LICENSE.PCRE2-10.44.txt",
|
|
"LICENSE.php-wasm-GPL-2.0-or-later.txt",
|
|
"NOTICE.PHP-REDIST-BINS.txt",
|
|
"PATENTS.libaom-3.12.1.txt",
|
|
]) {
|
|
expect(await digest(path.join(first, file))).toBe(
|
|
await digest(path.join(second, file)),
|
|
);
|
|
}
|
|
}, 30_000);
|
|
|
|
it("anchors legal assets independently from the pack checksum manifest", async () => {
|
|
const directory = await mkdtemp(path.join(tmpdir(), "regex-php-legal-"));
|
|
temporaryDirectories.push(directory);
|
|
const pack = path.join(directory, "pack");
|
|
await cp(path.resolve("public", "engines", "php"), pack, {
|
|
recursive: true,
|
|
force: false,
|
|
errorOnExist: true,
|
|
});
|
|
const legalName = "LICENSE.OpenSSL-1.1.1t.txt";
|
|
const legalFile = path.join(pack, legalName);
|
|
await appendFile(legalFile, "\n");
|
|
const checksumsFile = path.join(pack, "SHA256SUMS");
|
|
const checksums = await readFile(checksumsFile, "utf8");
|
|
const updated = checksums.replace(
|
|
new RegExp(`^[a-f0-9]{64} ${legalName}$`, "mu"),
|
|
`${await digest(legalFile)} ${legalName}`,
|
|
);
|
|
expect(updated).not.toBe(checksums);
|
|
await writeFile(checksumsFile, updated);
|
|
|
|
await expect(verifyPhpPack(pack)).rejects.toThrow(
|
|
`Packed PHP legal asset ${legalName} SHA-256 mismatch`,
|
|
);
|
|
});
|
|
});
|