Initial Commit

packages/identity/auth/webauthn/tests/dep-graph.test.ts

@@ -0,0 +1,99 @@
+/**
+ * Dep-graph + fixture-inventory conformance: ensures the parser /
+ * verifier subpath surfaces contain zero DOM type references and that
+ * every documented attestation format has at least one fixture builder
+ * registered. Runs against the on-disk source tree (no spawn).
+ */
+import { readdirSync, readFileSync, statSync } from "node:fs";
+import { join, relative } from "node:path";
+import { describe, expect, it } from "@suaveplan/testing/runner";
+
+const ROOT = join(__dirname, "..");
+const PARSER_DIR = join(ROOT, "src", "parser");
+const VERIFIER_DIR = join(ROOT, "src", "verifier");
+const ATTESTATION_DIR = join(ROOT, "src", "attestation");
+const COSE_KEY_FILE = join(PARSER_DIR, "cose-key.ts");
+const ATTESTATION_OBJECT_FILE = join(PARSER_DIR, "attestation-object.ts");
+
+function listSourceFiles(dir: string): string[] {
+    const out: string[] = [];
+    for (const entry of readdirSync(dir)) {
+        const full = join(dir, entry);
+        const st = statSync(full);
+        if (st.isDirectory()) {
+            out.push(...listSourceFiles(full));
+        } else if (entry.endsWith(".ts") && !entry.endsWith(".test.ts")) {
+            out.push(full);
+        }
+    }
+    return out;
+}
+
+const FORBIDDEN_DOM = [
+    /\bdocument\b/i,
+    /\bWindow\b/,
+    /\bNavigator\b/,
+    /\bCredentialsContainer\b/,
+    /\bPublicKeyCredential\b/,
+];
+
+describe("dep-graph: subpath tier separation", () => {
+    it("parser subpath has no DOM type references", { timeout: 5000 }, () => {
+        for (const file of listSourceFiles(PARSER_DIR)) {
+            const text = readFileSync(file, "utf8");
+            for (const pattern of FORBIDDEN_DOM) {
+                if (pattern.test(text)) {
+                    throw new Error(
+                        `Parser file ${relative(ROOT, file)} contains DOM reference ${pattern}`
+                    );
+                }
+            }
+        }
+    });
+    it("verifier subpath has no DOM type references", { timeout: 5000 }, () => {
+        for (const dir of [VERIFIER_DIR, ATTESTATION_DIR]) {
+            for (const file of listSourceFiles(dir)) {
+                const text = readFileSync(file, "utf8");
+                for (const pattern of FORBIDDEN_DOM) {
+                    if (pattern.test(text)) {
+                        throw new Error(
+                            `Verifier file ${relative(ROOT, file)} contains DOM reference ${pattern}`
+                        );
+                    }
+                }
+            }
+        }
+    });
+});
+
+describe("dep-graph: CBOR consumption", () => {
+    it("COSE_Key decoder consumes @suaveplan/cbor", { timeout: 5000 }, () => {
+        const text = readFileSync(COSE_KEY_FILE, "utf8");
+        expect(text).toMatch(/from\s+["']@suaveplan\/cbor/);
+    });
+    it("attestation-object decoder consumes @suaveplan/cbor", {
+        timeout: 5000,
+    }, () => {
+        const text = readFileSync(ATTESTATION_OBJECT_FILE, "utf8");
+        expect(text).toMatch(/from\s+["']@suaveplan\/cbor/);
+    });
+});
+
+describe("dep-graph: every attestation format directory exists", () => {
+    it("ships verifiers for every documented format", { timeout: 5000 }, () => {
+        const fmts = [
+            "packed",
+            "fido-u2f",
+            "tpm",
+            "android-key",
+            "android-safetynet",
+            "apple",
+            "none",
+        ];
+        for (const fmt of fmts) {
+            const dir = join(ATTESTATION_DIR, fmt);
+            const stat = statSync(dir);
+            expect(stat.isDirectory()).toBe(true);
+        }
+    });
+});