refactor: adapter 구현중..

scripts/verify-archived-local-evidence.ts

@@ -1,18 +1,36 @@
 import { readFile } from "node:fs/promises";
 
+import {
+  captureCiCandidateArchive,
+  withVerifiedCapturedCandidate,
+} from "./lib/ci-candidate-archive.ts";
 import { verifyArchivedLocalEvidence } from "./lib/local-release-evidence.ts";
 import {
   RELEASE_CANDIDATE_MANIFEST_PATH,
   releaseCandidateManifestSchema,
 } from "./lib/release-candidate.ts";
 
-const candidate = releaseCandidateManifestSchema.parse(
-  JSON.parse(await readFile(RELEASE_CANDIDATE_MANIFEST_PATH, "utf8")),
-);
-const result = await verifyArchivedLocalEvidence({
-  extractionRoot: process.cwd(),
-  expectedManifest: candidate,
-});
+const argument = (name: string): string | undefined => {
+  const index = process.argv.indexOf(name);
+  if (index < 0) return undefined;
+  const value = process.argv[index + 1];
+  if (!value || value.startsWith("--")) {
+    throw new TypeError(`${name} requires a value`);
+  }
+  return value;
+};
+const archivePath = argument("--archive");
+const expectedSha256 = argument("--sha256");
+if (Boolean(archivePath) !== Boolean(expectedSha256)) {
+  throw new TypeError("--archive and --sha256 must be supplied together");
+}
+const result = archivePath && expectedSha256
+  ? await withVerifiedCapturedCandidate({
+      captured: await captureCiCandidateArchive({ archivePath, expectedSha256 }),
+      verify: ({ extractionRoot, manifest }) =>
+        verifyArchivedLocalEvidence({ extractionRoot, expectedManifest: manifest }),
+    })
+  : await verifyCheckoutEvidence();
 if (result.status !== "PASS") {
   process.stderr.write(
     `Archived local evidence verification failed:\n- ${result.failures.join("\n- ")}\n`,
@@ -20,3 +38,13 @@ if (result.status !== "PASS") {
   process.exit(1);
 }
 process.stdout.write("Archived local evidence verification: PASS\n");
+
+async function verifyCheckoutEvidence() {
+  const candidate = releaseCandidateManifestSchema.parse(
+    JSON.parse(await readFile(RELEASE_CANDIDATE_MANIFEST_PATH, "utf8")),
+  );
+  return verifyArchivedLocalEvidence({
+    extractionRoot: process.cwd(),
+    expectedManifest: candidate,
+  });
+}