34 lines
1.2 KiB
JavaScript
34 lines
1.2 KiB
JavaScript
#!/usr/bin/env node
|
|
import { createHash } from "node:crypto";
|
|
import { existsSync, readFileSync } from "node:fs";
|
|
import path from "node:path";
|
|
import { fileURLToPath } from "node:url";
|
|
|
|
const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
|
|
const lockPath = path.join(root, "mobile-runtime.lock.json");
|
|
const lockedFiles = JSON.parse(readFileSync(lockPath, "utf8"));
|
|
const failures = [];
|
|
|
|
for (const [relativePath, expectedHash] of Object.entries(lockedFiles)) {
|
|
const filePath = path.join(root, relativePath);
|
|
|
|
if (!existsSync(filePath)) {
|
|
failures.push(`${relativePath} is missing`);
|
|
continue;
|
|
}
|
|
|
|
const actualHash = createHash("sha256").update(readFileSync(filePath)).digest("hex");
|
|
if (actualHash !== expectedHash) {
|
|
failures.push(`${relativePath} was modified`);
|
|
}
|
|
}
|
|
|
|
if (failures.length > 0) {
|
|
console.error("Mobile runtime integrity check failed:\n");
|
|
for (const failure of failures) console.error(`- ${failure}`);
|
|
console.error("\nRestore the protected runtime. Put app UI in src/Prototype.tsx and src/prototype.css.");
|
|
process.exit(1);
|
|
}
|
|
|
|
console.log(`Mobile runtime integrity check passed (${Object.keys(lockedFiles).length} protected files).`);
|