[HLCC-ICE-000001][ZY-CONTRIB-20260723-001] feat: 以来光者贡献链启用冰朔第五域个人子频道

server-tools/fifth-domain-sync-agent/test/sync-agent.test.js

@@ -0,0 +1,24 @@
+"use strict";
+
+const assert = require("node:assert/strict");
+const crypto = require("node:crypto");
+const test = require("node:test");
+const { validPush, verifySignature } = require("../sync-agent");
+
+const config = { repository_full_name: "bingshuo/fifth-domain", allowed_ref: "refs/heads/main" };
+const good = { ref: "refs/heads/main", after: "a".repeat(40), repository: { full_name: "bingshuo/fifth-domain" } };
+
+test("verifies Forgejo HMAC signatures", () => {
+  const secret = "a".repeat(32);
+  const body = Buffer.from('{"ok":true}');
+  const signature = crypto.createHmac("sha256", secret).update(body).digest("hex");
+  assert.equal(verifySignature(secret, body, signature), true);
+  assert.equal(verifySignature(secret, body, "0".repeat(64)), false);
+});
+
+test("accepts only the registered Fifth Domain main push", () => {
+  assert.equal(validPush(good, config), true);
+  assert.equal(validPush({ ...good, ref: "refs/heads/feature" }, config), false);
+  assert.equal(validPush({ ...good, repository: { full_name: "other/repo" } }, config), false);
+  assert.equal(validPush({ ...good, after: "not-a-commit" }, config), false);
+});