51 lines
1.8 KiB
PHP
51 lines
1.8 KiB
PHP
|
<?php
|
||
|
|
/**
|
||
|
|
* Generates admin/src/Licensing/integrity-manifest.json — sha256 hashes of
|
||
|
|
* the files that implement the free/paid gate (see Integrity.php), used to
|
||
|
|
* detect tampering in distributed copies of the plugin.
|
||
|
|
*
|
||
|
|
* Run against the STAGING directory right before zipping, not against the
|
||
|
|
* git checkout — the manifest is a build artifact (same "regenerate, don't
|
||
|
|
* version" pattern as app/dist) and must never ship in a git checkout,
|
||
|
|
* since Integrity::is_tampered() treats "no manifest present" as "this is
|
||
|
|
* a dev checkout, don't lock anyone out."
|
||
|
|
*
|
||
|
|
* Usage: php bin/build-integrity-manifest.php /path/to/staging/aurora-admin
|
||
|
|
*/
|
||
|
|
|
||
|
|
$root = $argv[1] ?? null;
|
||
|
|
if (!$root || !is_dir($root)) {
|
||
|
|
fwrite(STDERR, "Usage: php build-integrity-manifest.php <path-to-staged-plugin-root>\n");
|
||
|
|
exit(1);
|
||
|
|
}
|
||
|
|
$root = rtrim($root, "/") . "/";
|
||
|
|
|
||
|
|
// Keep in sync with Integrity::is_tampered()'s callers — every file that
|
||
|
|
// implements or directly enforces the license gate.
|
||
|
|
$protected = [
|
||
|
|
"aurora-admin.php",
|
||
|
|
"admin/src/App/AuroraAdmin.php",
|
||
|
|
"admin/src/Licensing/License.php",
|
||
|
|
"admin/src/Licensing/Integrity.php",
|
||
|
|
"admin/src/Pages/SubApps.php",
|
||
|
|
"admin/src/Analytics/Analytics.php",
|
||
|
|
"admin/src/Rest/AnalyticsData.php",
|
||
|
|
"admin/src/WhiteLabel/WhiteLabel.php",
|
||
|
|
"admin/src/Shell/Shell.php",
|
||
|
|
];
|
||
|
|
|
||
|
|
$manifest = [];
|
||
|
|
foreach ($protected as $relative) {
|
||
|
|
$full = $root . $relative;
|
||
|
|
if (!file_exists($full)) {
|
||
|
|
fwrite(STDERR, "Missing protected file, aborting: {$relative}\n");
|
||
|
|
exit(1);
|
||
|
|
}
|
||
|
|
$manifest[$relative] = hash_file("sha256", $full);
|
||
|
|
}
|
||
|
|
|
||
|
|
$out_path = $root . "admin/src/Licensing/integrity-manifest.json";
|
||
|
|
file_put_contents($out_path, json_encode($manifest, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES));
|
||
|
|
|
||
|
|
echo "Wrote " . count($manifest) . " hashes to {$out_path}\n";
|