Prepare ms-private 0.0.1 release candidate

native/MsPrivate.Launcher.Tests/Program.cs

@@ -0,0 +1,58 @@
+using System.IO.Compression;
+using System.Security.Cryptography;
+using System.Text.Json;
+using MsPrivate.Launcher;
+
+var passed = 0;
+void Assert(bool condition, string message) { if (!condition) throw new Exception(message); passed++; }
+byte[] CreateArchive(string path, byte[] content, string? declaredPath = null, string? declaredHash = null, bool extra = false)
+{
+    var manifest = new PayloadManifest
+    {
+        Schema = 1,
+        Version = "test",
+        EntryPoint = declaredPath ?? path,
+        Files = [new PayloadFile { Path = declaredPath ?? path, Length = content.Length, Sha256 = declaredHash ?? Convert.ToHexString(SHA256.HashData(content)).ToLowerInvariant() }]
+    };
+    using var memory = new MemoryStream();
+    using (var archive = new ZipArchive(memory, ZipArchiveMode.Create, leaveOpen: true))
+    {
+        var file = archive.CreateEntry(path);
+        using (var output = file.Open()) output.Write(content);
+        var metadata = archive.CreateEntry(PayloadInstaller.ManifestName);
+        using (var output = metadata.Open()) JsonSerializer.Serialize(output, manifest);
+        if (extra) archive.CreateEntry("undeclared.txt");
+    }
+    return memory.ToArray();
+}
+
+var root = Path.Combine(Path.GetTempPath(), "ms-private-launcher-tests-" + Guid.NewGuid().ToString("N"));
+try
+{
+    var content = "Write-Output test"u8.ToArray();
+    var valid = CreateArchive("ms-private-GUI.ps1", content);
+    var manifest = PayloadInstaller.ReadAndValidateArchive(valid);
+    Assert(manifest.Files.Count == 1, "Valid embedded archive was rejected.");
+    var install = Path.Combine(root, "runtime");
+    PayloadInstaller.EnsureInstalled(valid, install);
+    Assert(PayloadInstaller.IsValidInstallation(install, manifest), "Installed payload did not verify.");
+    File.WriteAllText(Path.Combine(install, "ms-private-GUI.ps1"), "tampered");
+    PayloadInstaller.EnsureInstalled(valid, install);
+    Assert(PayloadInstaller.IsValidInstallation(install, manifest), "Tampered installed payload was not repaired.");
+    File.WriteAllText(Path.Combine(install, "unexpected.ps1"), "not declared");
+    Assert(!PayloadInstaller.IsValidInstallation(install, manifest), "Unexpected installed file was accepted.");
+    PayloadInstaller.EnsureInstalled(valid, install);
+    Assert(PayloadInstaller.IsValidInstallation(install, manifest), "Installation with an unexpected file was not repaired.");
+    File.WriteAllText(Path.Combine(install, PayloadInstaller.ManifestName), "{}");
+    Assert(!PayloadInstaller.IsValidInstallation(install, manifest), "Modified installed manifest was accepted.");
+    PayloadInstaller.EnsureInstalled(valid, install);
+    Assert(PayloadInstaller.IsValidInstallation(install, manifest), "Modified installed manifest was not repaired.");
+    try { PayloadInstaller.ReadAndValidateArchive(CreateArchive("safe.ps1", content, "../escape.ps1")); throw new Exception("Traversal manifest was accepted."); } catch (InvalidDataException) { passed++; }
+    try { PayloadInstaller.ReadAndValidateArchive(CreateArchive("ms-private-GUI.ps1", content, declaredHash: new string('0', 64))); throw new Exception("Bad hash was accepted."); } catch (InvalidDataException) { passed++; }
+    try { PayloadInstaller.ReadAndValidateArchive(CreateArchive("ms-private-GUI.ps1", content, extra: true)); throw new Exception("Undeclared archive entry was accepted."); } catch (InvalidDataException) { passed++; }
+}
+finally
+{
+    if (Directory.Exists(root)) Directory.Delete(root, recursive: true);
+}
+Console.WriteLine($"{passed} native launcher tests passed.");