25 lines
747 B
JavaScript
25 lines
747 B
JavaScript
|
import assert from "node:assert/strict";
|
||
|
|
import { realpath } from "node:fs/promises";
|
||
|
|
|
||
|
|
/** Verify caller provenance separately from the resolved artifact identity. */
|
||
|
|
export const assertJavaScriptApplicationInputPaths = async (
|
||
|
|
evidence,
|
||
|
|
inputPath,
|
||
|
|
) => {
|
||
|
|
const canonicalPath = await realpath(inputPath);
|
||
|
|
assert.equal(
|
||
|
|
evidence.parameters.input_path,
|
||
|
|
inputPath,
|
||
|
|
"JavaScript Evidence must retain the caller's input_path",
|
||
|
|
);
|
||
|
|
assert.equal(
|
||
|
|
evidence.subject?.local_path,
|
||
|
|
canonicalPath,
|
||
|
|
"JavaScript Evidence subject must identify the resolved artifact",
|
||
|
|
);
|
||
|
|
assert.equal(
|
||
|
|
evidence.normalized_result.input_path,
|
||
|
|
canonicalPath,
|
||
|
|
"JavaScript analysis result must identify the resolved artifact",
|
||
|
|
);
|
||
|
|
};
|