SubMiner/scripts/package-audit.cjs

const fs = require('node:fs');
const path = require('node:path');
const assert = require('node:assert/strict');
const asar = require('@electron/asar');
const { Arch } = require('builder-util');

const REQUIRED_APP_FILES = [
  'package.json',
  'LICENSE',
  'config.example.jsonc',
  'dist/main-entry.js',
  'dist/main.js',
  'dist/preload.js',
  'dist/preload-settings.js',
  'dist/preload-syncui.js',
  'dist/preload-stats.js',
  'dist/preload-jellyfin-setup.js',
  'dist/fonts/MPLUS1[wght].ttf',
  'stats/dist/index.html',
  'vendor/texthooker-ui/docs/index.html',
  ...['renderer', 'settings', 'syncui'].flatMap((ui) => [
    `dist/${ui}/index.html`,
    `dist/${ui}/style.css`,
    `dist/${ui}/${ui}.js`,
  ]),
];
const REQUIRED_RESOURCES = [
  'yomitan/manifest.json',
  'yomitan/data/fonts/kanji-stroke-orders.ttf',
  'yomitan/fonts/NotoSansJP-Regular.ttf',
  'yomitan/lib/resvg.wasm',
  'launcher/subminer',
  'plugin/subminer/main.lua',
  'plugin/subminer.conf',
  'assets/SubMiner.png',
  'assets/SubMiner-square.png',
  'assets/themes/subminer.rasi',
  'assets/thumbnailers/subminer-ffmpegthumbnailer.thumbnailer',
  'CHANGELOG.md',
];

// Skip symlinks when checking resource contents.
function listFiles(root, prefix = '') {
  return fs.readdirSync(path.join(root, prefix), { withFileTypes: true }).flatMap((entry) => {
    const name = prefix ? `${prefix}/${entry.name}` : entry.name;
    if (entry.isSymbolicLink()) return [];
    if (entry.isDirectory()) return listFiles(root, name);
    return [name];
  });
}

// asar resolves lookups with the platform separator, so stat with the listed
// native path and only normalize the reported name.
function listAppFiles(archive) {
  return asar.listPackage(archive).flatMap((entry) => {
    const native = entry.replace(/^[\\/]/, '');
    const stat = asar.statFile(archive, native);
    const name = native.replaceAll('\\', '/');
    return 'size' in stat ? [name] : [];
  });
}

function verifyAppPath(name, platform, arch) {
  const allowedRoots = new Set([
    'dist',
    'node_modules',
    'stats',
    'vendor',
    'package.json',
    'LICENSE',
    'config.example.jsonc',
  ]);
  assert(allowedRoots.has(name.split('/')[0]), `Unexpected app file: ${name}`);
  assert(!name.endsWith('.map'), `Packaged source map: ${name}`);
  assert(!/\.(?:[cm]?ts|tsx)$/.test(name), `Packaged TypeScript: ${name}`);
  assert(!/\.(?:test|spec)\./.test(name), `Packaged test: ${name}`);
  assert(
    !/(?:^|\/)(?:tests?|__tests__|fixtures?|__fixtures__)\//.test(name),
    `Packaged test or fixture directory: ${name}`,
  );
  assert(!/^dist\/.*\.test\./.test(name), `Packaged test: ${name}`);
  assert(!/^dist\/(launcher|scripts)\//.test(name), `Duplicate helper: ${name}`);
  assert(!/^dist\/(renderer|settings|syncui)\/fonts\//.test(name), `Duplicate font: ${name}`);
  assert(!name.startsWith('stats/') || name.startsWith('stats/dist/'), `Stats source: ${name}`);
  assert(
    !name.startsWith('vendor/') || name.startsWith('vendor/texthooker-ui/docs/'),
    `Vendor source: ${name}`,
  );
  if (name.startsWith('node_modules/koffi/')) {
    assert.equal(platform, 'win32', `Koffi shipped on ${platform}`);
    assert(!/^node_modules\/koffi\/(src|vendor|doc)\//.test(name), `Koffi build files: ${name}`);
    if (name.endsWith('.node')) {
      assert.equal(name, `node_modules/koffi/build/koffi/win32_${arch}/koffi.node`);
    }
  }
}

function verifyContents(archive, resources, platform, arch) {
  const entries = listAppFiles(archive);
  const names = new Set(entries);
  for (const name of REQUIRED_APP_FILES) assert(names.has(name), `Missing app file: ${name}`);
  for (const name of REQUIRED_RESOURCES) {
    assert(fs.statSync(path.join(resources, name)).size > 0, `Empty resource: ${name}`);
  }
  assert(listFiles(path.join(resources, 'yomitan-jlpt-vocab')).length > 0, 'Missing JLPT data');
  for (const name of entries) verifyAppPath(name, platform, arch);
  const libsqlPlatform = {
    linux: `linux-${arch}-gnu`,
    darwin: `darwin-${arch}`,
    win32: `win32-${arch}-msvc`,
  }[platform];
  const libsqlBinary = `node_modules/@libsql/${libsqlPlatform}/index.node`;
  assert(names.has(libsqlBinary), `Missing SQLite native binary: ${libsqlBinary}`);
  for (const name of names) {
    if (name.startsWith('node_modules/@libsql/') && name.endsWith('.node')) {
      assert.equal(name, libsqlBinary, `Foreign SQLite binary: ${name}`);
    }
  }
  if (platform === 'win32') {
    for (const name of [
      'index.js',
      'package.json',
      'LICENSE.txt',
      `build/koffi/win32_${arch}/koffi.node`,
    ]) {
      assert(names.has(`node_modules/koffi/${name}`), `Missing Windows FFI file: ${name}`);
    }
  }
  for (const name of listFiles(path.join(resources, 'assets'))) {
    assert(!name.startsWith('minecard'), `Demo media shipped: ${name}`);
  }
  for (const ui of ['renderer', 'settings', 'syncui']) {
    const css = asar.extractFile(archive, path.join('dist', ui, 'style.css')).toString();
    assert(css.includes('../fonts/MPLUS1[wght].ttf'), `Shared font missing from ${ui} CSS`);
  }
  return entries;
}

async function auditPackage(context) {
  const platform = context.electronPlatformName;
  const arch = Arch[context.arch];
  const key = `${platform}-${arch}`;
  const appRoot =
    platform === 'darwin'
      ? path.join(context.appOutDir, `${context.packager.appInfo.productFilename}.app`)
      : context.appOutDir;
  const resources = path.join(appRoot, platform === 'darwin' ? 'Contents/Resources' : 'resources');
  verifyContents(path.join(resources, 'app.asar'), resources, platform, arch);
  console.log(`Package contents verified: ${key}`);
}

module.exports = {
  auditPackage,
  verifyContents,
  verifyAppPath,
  listFiles,
  listAppFiles,
};