New AcDream.Launcher.Core (BCL-only, ProjectReference: AcDream.Platform
ONLY) plus tests/AcDream.Launcher.Core.Tests, both registered in
AcDream.slnx. This is the file-contract orchestrator core the Avalonia
launcher (LA4) will bind to — the game solution (Core/Runtime/App/
Headless) stays entirely out of this dependency graph, so the launcher
can never accidentally grow a game-protocol coupling.
- Profiles/: LauncherProfileStore owns launcher-profiles.json (spec §5
schema: version 1, servers[]/accounts[]/characters[]), strict
camelCase System.Text.Json (UnmappedMemberHandling.Disallow), typed
CRUD (add/edit/remove server; add/edit/remove account; edit character
settings), and MergeRoster (fold a reported roster into an account's
characters[] while preserving user-owned launchMode/plugins/
loginCommands, adding new rows with default guiSelect, and retaining
rows absent from the roster — they may be pending-delete). 0600 on
Linux via File.SetUnixFileMode after save.
- Launching/: SessionConfigComposer builds the pinned session-config
contract (Headless K1 shape + plugins/loginCommands/
loginCommandDelayMs/statusFile) from a profile character + install
record — character selector omitted entirely for guiSelect, policy
{id:"idle"} only for headless, credential always standardInput/
session. Passwords never enter this document (proven by a dedicated
test). LauncherProcessSupervisor spawns a host, feeds the password to
stdin then closes it, and exposes Starting/Running/Exited lifecycle;
Stop calls CloseMainWindow falling back to Kill after a timeout, both
reachable through an injectable ILauncherChildProcess/factory seam so
the state machine is unit-testable without real OS process timing.
- Status/: StatusEventParser decodes the v1 status.jsonl vocabulary
(started/connected/characterList/enteredWorld/pluginLoaded/
pluginFailed/disconnected/exited); an unrecognized "e" or a malformed
line degrades to a typed Unknown event rather than throwing.
StatusFileTailer incrementally reads new lines, tolerating a
not-yet-existing file and a partial trailing line (only advances its
read position past confirmed '\n' boundaries; a truncated tail is
simply re-read next poll, never parsed early).
- Integrity/: streaming SHA-256 + hex verify for later pak/download
checks (LA9/LA10).
Tests: 71 passed (profile CRUD + roster-merge matrix + strict-schema
rejection; composer golden-shape tests for gui/guiSelect/headless +
password-absence; supervisor tests against both an injected fake child
(state-machine determinism) and a real spawned `dotnet --version`
child (genuine cross-platform stdin/exit-code proof); tailer tests
incl. partial-line and not-yet-existing-file; SHA-256 tests). Verified
green on Windows (Release) and native WSL/Linux (Release) — the Linux
0600 test executes its real assertion body under WSL rather than
early-returning.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
98 lines
3 KiB
C#
98 lines
3 KiB
C#
using System.Security.Cryptography;
|
|
using System.Text;
|
|
using AcDream.Launcher.Core.Integrity;
|
|
|
|
namespace AcDream.Launcher.Core.Tests.Integrity;
|
|
|
|
public sealed class FileIntegrityTests : IDisposable
|
|
{
|
|
private readonly string _root;
|
|
|
|
public FileIntegrityTests()
|
|
{
|
|
_root = Path.Combine(
|
|
Path.GetTempPath(),
|
|
"acdream-launcher-integrity-tests",
|
|
Guid.NewGuid().ToString("N"));
|
|
Directory.CreateDirectory(_root);
|
|
}
|
|
|
|
public void Dispose()
|
|
{
|
|
if (Directory.Exists(_root))
|
|
{
|
|
Directory.Delete(_root, recursive: true);
|
|
}
|
|
}
|
|
|
|
[Fact]
|
|
public void ComputeSha256HexMatchesTheFrameworkHasher()
|
|
{
|
|
string path = Path.Combine(_root, "file.bin");
|
|
byte[] content = Encoding.UTF8.GetBytes("acdream launcher integrity fixture");
|
|
File.WriteAllBytes(path, content);
|
|
string expected = Convert.ToHexStringLower(SHA256.HashData(content));
|
|
|
|
string actual = FileIntegrity.ComputeSha256Hex(path);
|
|
|
|
Assert.Equal(expected, actual);
|
|
}
|
|
|
|
[Fact]
|
|
public async Task ComputeSha256HexAsyncMatchesTheSyncResult()
|
|
{
|
|
string path = Path.Combine(_root, "file.bin");
|
|
File.WriteAllBytes(path, Encoding.UTF8.GetBytes("async path fixture"));
|
|
|
|
string sync = FileIntegrity.ComputeSha256Hex(path);
|
|
string asyncResult = await FileIntegrity.ComputeSha256HexAsync(path);
|
|
|
|
Assert.Equal(sync, asyncResult);
|
|
}
|
|
|
|
[Fact]
|
|
public void VerifySucceedsForAMatchingDigestRegardlessOfCase()
|
|
{
|
|
string path = Path.Combine(_root, "file.bin");
|
|
File.WriteAllBytes(path, Encoding.UTF8.GetBytes("case-insensitive fixture"));
|
|
string lower = FileIntegrity.ComputeSha256Hex(path);
|
|
|
|
Assert.True(FileIntegrity.Verify(path, lower));
|
|
Assert.True(FileIntegrity.Verify(path, lower.ToUpperInvariant()));
|
|
}
|
|
|
|
[Fact]
|
|
public void VerifyFailsForAMismatchedDigest()
|
|
{
|
|
string path = Path.Combine(_root, "file.bin");
|
|
File.WriteAllBytes(path, Encoding.UTF8.GetBytes("original content"));
|
|
|
|
Assert.False(FileIntegrity.Verify(path, new string('0', 64)));
|
|
}
|
|
|
|
[Fact]
|
|
public void DifferentContentProducesDifferentDigests()
|
|
{
|
|
string pathA = Path.Combine(_root, "a.bin");
|
|
string pathB = Path.Combine(_root, "b.bin");
|
|
File.WriteAllBytes(pathA, Encoding.UTF8.GetBytes("content A"));
|
|
File.WriteAllBytes(pathB, Encoding.UTF8.GetBytes("content B"));
|
|
|
|
Assert.NotEqual(
|
|
FileIntegrity.ComputeSha256Hex(pathA),
|
|
FileIntegrity.ComputeSha256Hex(pathB));
|
|
}
|
|
|
|
[Fact]
|
|
public void EmptyFileHashesToTheWellKnownSha256OfEmptyInput()
|
|
{
|
|
string path = Path.Combine(_root, "empty.bin");
|
|
File.WriteAllBytes(path, []);
|
|
|
|
string actual = FileIntegrity.ComputeSha256Hex(path);
|
|
|
|
Assert.Equal(
|
|
"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
|
|
actual);
|
|
}
|
|
}
|