Checkpoint web parity through Chromium input tasks

web/tests/unit/io-format-receipt-binding.test.mjs

@@ -0,0 +1,33 @@
+import assert from "node:assert/strict";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { pathToFileURL } from "node:url";
+import test from "node:test";
+import ts from "typescript";
+
+const root = path.resolve(import.meta.dirname, "../../..");
+const temporary = fs.mkdtempSync(path.join(os.tmpdir(), "io-format-receipt-binding-unit-"));
+const sourcePath = path.join(root, "web/protocol/io-format-receipt-binding.ts");
+const transpiled = ts.transpileModule(fs.readFileSync(sourcePath, "utf8"), { compilerOptions: { module: ts.ModuleKind.ES2022, target: ts.ScriptTarget.ES2022 }, fileName: sourcePath, reportDiagnostics: true });
+assert.deepEqual(transpiled.diagnostics, []); fs.writeFileSync(path.join(temporary, "protocol.mjs"), transpiled.outputText);
+const protocol = await import(pathToFileURL(path.join(temporary, "protocol.mjs")));
+const bound = JSON.parse(fs.readFileSync(path.join(root, "tests/golden/M12-05E/bound-runtime-receipts.json"), "utf8"));
+
+test("M12-05E accepts receipts with all three identity hashes", () => {
+  const parsed = protocol.validateIOFormatBoundReceiptSet(bound, bound.parentReceiptSetSha256, bound.inventorySha256);
+  assert.match(protocol.resolveBoundReceipt(parsed, "GLB", "EXPORT").sourceSha256, /^[a-f0-9]{64}$/);
+  assert.match(protocol.resolveBoundReceipt(parsed, "GLB", "EXPORT").settingsSha256, /^[a-f0-9]{64}$/);
+  assert.match(protocol.resolveBoundReceipt(parsed, "GLB", "EXPORT").runtimeSha256, /^[a-f0-9]{64}$/);
+});
+
+test("M12-05E rejects source, settings, runtime and parent hash drift", () => {
+  for (const field of ["sourceSha256", "settingsSha256", "runtimeSha256"]) {
+    const mutated = structuredClone(bound); mutated.receipts[0][field] = "invalid-hash";
+    assert.throws(() => protocol.validateIOFormatBoundReceiptSet(mutated, mutated.parentReceiptSetSha256, mutated.inventorySha256), { code: "IO_FORMAT_UNSUPPORTED" });
+  }
+  const stale = structuredClone(bound); stale.parentReceiptSetSha256 = "0".repeat(64);
+  assert.throws(() => protocol.validateIOFormatBoundReceiptSet(stale, bound.parentReceiptSetSha256, bound.inventorySha256), { code: "IO_FORMAT_UNSUPPORTED" });
+});
+
+test.after(() => fs.rmSync(temporary, { recursive: true, force: true }));