Hello world 👋

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

internal/update/update_test.go

@@ -0,0 +1,125 @@
+package update
+
+import (
+	"archive/tar"
+	"bytes"
+	"compress/gzip"
+	"context"
+	"crypto/sha256"
+	"encoding/hex"
+	"fmt"
+	"net/http"
+	"net/http/httptest"
+	"os"
+	"path/filepath"
+	"runtime"
+	"strings"
+	"testing"
+)
+
+func TestNewer(t *testing.T) {
+	for _, c := range []struct {
+		current, latest string
+		want            bool
+	}{
+		{"0.1.1", "v0.2.0", true},
+		{"v0.2.0", "v0.2.0", false},
+		{"0.3.0", "v0.2.0", false},
+		{"v0.1.2-0.20261009185704-2ba762ce2224", "v0.1.1", false}, // go install of a later commit
+		{"v0.1.2-0.20261009185704-2ba762ce2224", "v0.1.2", true},
+		{"dev-2ba762c", "v0.2.0", false},
+		{"dev", "v0.2.0", false},
+		{"", "v0.2.0", false},
+	} {
+		if got := Newer(c.current, c.latest); got != c.want {
+			t.Errorf("Newer(%q, %q) = %v", c.current, c.latest, got)
+		}
+	}
+}
+
+func TestNotes(t *testing.T) {
+	r := Release{Body: "### Added\n\n- Install with a one-liner (#7)\n\n## Install\n\nOn macOS…"}
+	if got := r.Notes(); got != "### Added\n\n- Install with a one-liner (#7)" {
+		t.Errorf("notes %q", got)
+	}
+}
+
+func TestManaged(t *testing.T) {
+	if Managed("/opt/homebrew/Cellar/lazysecrets/0.2.0/bin/lazysecrets") == "" || Managed("/nix/store/abc-lazysecrets/bin/lazysecrets") == "" {
+		t.Error("package managers not recognised")
+	}
+	if m := Managed("/Users/x/.local/bin/lazysecrets"); m != "" {
+		t.Errorf("~/.local/bin is ours: %q", m)
+	}
+}
+
+// server publishes v0.2.0 with a "binary" (a script) printing its version.
+func server(t *testing.T, tamper bool) *httptest.Server {
+	t.Helper()
+	name := fmt.Sprintf("lazysecrets_0.2.0_%s_%s", runtime.GOOS, runtime.GOARCH)
+	var archive bytes.Buffer
+	gz := gzip.NewWriter(&archive)
+	tw := tar.NewWriter(gz)
+	script := []byte("#!/bin/sh\necho lazysecrets 0.2.0\n")
+	tw.WriteHeader(&tar.Header{Name: name + "/lazysecrets", Mode: 0o755, Size: int64(len(script)), Typeflag: tar.TypeReg})
+	tw.Write(script)
+	tw.Close()
+	gz.Close()
+	sum := sha256.Sum256(archive.Bytes())
+	if tamper {
+		sum[0] ^= 0xff
+	}
+	mux := http.NewServeMux()
+	mux.HandleFunc("/api/releases/latest", func(w http.ResponseWriter, _ *http.Request) {
+		fmt.Fprint(w, `{"tag_name":"v0.2.0","body":"### Added\n\n- x\n\n## Install\n","html_url":"https://example.com/r"}`)
+	})
+	mux.HandleFunc("/repo/releases/download/v0.2.0/checksums.txt", func(w http.ResponseWriter, _ *http.Request) {
+		fmt.Fprintf(w, "%s  %s.tar.gz\n", hex.EncodeToString(sum[:]), name)
+	})
+	mux.HandleFunc("/repo/releases/download/v0.2.0/"+name+".tar.gz", func(w http.ResponseWriter, _ *http.Request) {
+		w.Write(archive.Bytes())
+	})
+	srv := httptest.NewServer(mux)
+	t.Cleanup(srv.Close)
+	return srv
+}
+
+func TestInstall(t *testing.T) {
+	if runtime.GOOS != "darwin" && runtime.GOOS != "linux" {
+		t.Skip("releases are for macOS and Linux")
+	}
+	srv := server(t, false)
+	c := &Client{API: srv.URL + "/api", Repo: srv.URL + "/repo"}
+	r, err := c.Latest(context.Background())
+	if err != nil || r.Tag != "v0.2.0" {
+		t.Fatalf("latest %+v %v", r, err)
+	}
+	exe := filepath.Join(t.TempDir(), "lazysecrets")
+	os.WriteFile(exe, []byte("old"), 0o755)
+	if err := c.Install(context.Background(), r, exe); err != nil {
+		t.Fatal(err)
+	}
+	if b, _ := os.ReadFile(exe); !strings.Contains(string(b), "echo lazysecrets 0.2.0") {
+		t.Errorf("not replaced: %q", b)
+	}
+	if left, _ := filepath.Glob(filepath.Join(filepath.Dir(exe), ".lazysecrets-update-*")); len(left) > 0 {
+		t.Errorf("left behind: %v", left)
+	}
+}
+
+func TestInstallRefusesATamperedArchive(t *testing.T) {
+	if runtime.GOOS != "darwin" && runtime.GOOS != "linux" {
+		t.Skip("releases are for macOS and Linux")
+	}
+	srv := server(t, true)
+	c := &Client{API: srv.URL + "/api", Repo: srv.URL + "/repo"}
+	exe := filepath.Join(t.TempDir(), "lazysecrets")
+	os.WriteFile(exe, []byte("old"), 0o755)
+	err := c.Install(context.Background(), Release{Tag: "v0.2.0"}, exe)
+	if err == nil || !strings.Contains(err.Error(), "doesn't match checksums.txt") {
+		t.Fatalf("err %v", err)
+	}
+	if b, _ := os.ReadFile(exe); string(b) != "old" {
+		t.Error("replaced anyway")
+	}
+}