Timothy J. Aveni
41 lines
1.6 KiB
JavaScript
41 lines
1.6 KiB
JavaScript
import fs from "node:fs";
|
|
import crypto from "node:crypto";
|
|
const [schemaPath, packageRevisionId, bindingOutput, generatorPath, output] = process.argv.slice(2);
|
|
if (!schemaPath || !packageRevisionId || !bindingOutput || !generatorPath || !output)
|
|
throw new Error("Missing candidate check receipt inputs");
|
|
const canonical = (value) =>
|
|
Array.isArray(value)
|
|
? value.map(canonical)
|
|
: value && typeof value === "object"
|
|
? Object.fromEntries(
|
|
Object.entries(value)
|
|
.sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
|
|
.map(([key, entry]) => [key, canonical(entry)]),
|
|
)
|
|
: value;
|
|
const hash = (value) =>
|
|
`sha256:${crypto
|
|
.createHash("sha256")
|
|
.update(JSON.stringify(canonical(value)))
|
|
.digest("hex")}`;
|
|
const schema = JSON.parse(fs.readFileSync(schemaPath, "utf8"));
|
|
if (!schema.packages.some((entry) => entry.revisionId === packageRevisionId))
|
|
throw new Error("Checked binding schema lacks the package");
|
|
const generated = fs.readFileSync(bindingOutput, "utf8");
|
|
if (generated !== fs.readFileSync(".qx-checked-bindings", "utf8"))
|
|
throw new Error("Build replaced candidate-generated bindings; its check is not evidence for this candidate");
|
|
const receipt = {
|
|
schemaVersion: 1,
|
|
packageRevisionId,
|
|
success: true,
|
|
bindingSchema: schema,
|
|
bindingSchemaDigest: hash(schema),
|
|
generatedDigest: hash(generated),
|
|
checkerDigest: hash({
|
|
generatorPath,
|
|
compiler: JSON.parse(fs.readFileSync("node_modules/typescript/package.json", "utf8")),
|
|
lock: fs.readFileSync("yarn.lock", "utf8"),
|
|
}),
|
|
};
|
|
fs.writeFileSync(output, `${JSON.stringify(receipt, null, 2)}\n`, { flag: "wx" });
|