mirror of
https://github.com/browseros-ai/BrowserOS.git
synced 2026-05-19 11:31:03 +00:00
ace9307878
* feat: add browseros-cli self-updater * fix: address review comments for 0327-cli_self_updater * fix: address PR review comments for 0327-cli_self_updater * fix: replace goreleaser with Makefile-based release build Remove .goreleaser.yml (required Pro license for monorepo field) and consolidate cross-compilation into `make release`. CI now uses the same Makefile target, fixing a bug where POSTHOG_API_KEY was missing from release ldflags. * fix: address critical self-updater bugs from code review - Fix SHA256 checksum mismatch: verify archive checksum before extraction instead of verifying extracted binary against archive hash (was always failing). Add VerifyChecksum() and integration test. - Fix JSON field name mismatch: TypeScript was emitting camelCase (publishedAt, archiveFormat) but Go expected snake_case (published_at, archive_format). Manifest parsing was silently broken. - Add decompression size limit (256 MB) to prevent zip/gzip bombs. - Don't update LastCheckedAt on transient errors so retry happens on next CLI invocation instead of waiting 24h.
101 lines
3.3 KiB
TypeScript
101 lines
3.3 KiB
TypeScript
import { describe, expect, test } from 'bun:test'
|
|
|
|
import {
|
|
buildCliReleaseManifest,
|
|
parseCliArchiveFilename,
|
|
parseCliChecksums,
|
|
} from './upload'
|
|
|
|
describe('parseCliChecksums', () => {
|
|
test('parses checksum lines into a filename map', () => {
|
|
const checksums = parseCliChecksums(
|
|
[
|
|
'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa browseros-cli_1.2.3_darwin_arm64.tar.gz',
|
|
'BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB *browseros-cli_1.2.3_windows_amd64.zip',
|
|
].join('\n'),
|
|
)
|
|
|
|
expect(checksums.get('browseros-cli_1.2.3_darwin_arm64.tar.gz')).toBe(
|
|
'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
|
|
)
|
|
expect(checksums.get('browseros-cli_1.2.3_windows_amd64.zip')).toBe(
|
|
'bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb',
|
|
)
|
|
})
|
|
|
|
test('rejects malformed checksum lines', () => {
|
|
expect(() => parseCliChecksums('not-a-checksum')).toThrow(
|
|
'Invalid checksum line',
|
|
)
|
|
})
|
|
})
|
|
|
|
describe('parseCliArchiveFilename', () => {
|
|
test('parses tar.gz archives', () => {
|
|
expect(
|
|
parseCliArchiveFilename('browseros-cli_1.2.3_darwin_arm64.tar.gz'),
|
|
).toEqual({
|
|
filename: 'browseros-cli_1.2.3_darwin_arm64.tar.gz',
|
|
version: '1.2.3',
|
|
os: 'darwin',
|
|
arch: 'arm64',
|
|
archive_format: 'tar.gz',
|
|
})
|
|
})
|
|
|
|
test('returns null for unexpected names', () => {
|
|
expect(parseCliArchiveFilename('checksums.txt')).toBeNull()
|
|
})
|
|
})
|
|
|
|
describe('buildCliReleaseManifest', () => {
|
|
test('builds versioned asset URLs from archive names and checksums', () => {
|
|
const manifest = buildCliReleaseManifest({
|
|
version: '1.2.3',
|
|
filenames: [
|
|
'browseros-cli_1.2.3_windows_arm64.zip',
|
|
'browseros-cli_1.2.3_darwin_arm64.tar.gz',
|
|
],
|
|
checksumsContent: [
|
|
'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa browseros-cli_1.2.3_darwin_arm64.tar.gz',
|
|
'bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb browseros-cli_1.2.3_windows_arm64.zip',
|
|
].join('\n'),
|
|
published_at: '2026-03-27T19:00:00Z',
|
|
cdnBaseURL: 'https://cdn.example.com',
|
|
uploadPrefix: 'cli',
|
|
})
|
|
|
|
expect(manifest).toEqual({
|
|
version: '1.2.3',
|
|
published_at: '2026-03-27T19:00:00Z',
|
|
tag: 'browseros-cli-v1.2.3',
|
|
assets: {
|
|
'darwin/arm64': {
|
|
filename: 'browseros-cli_1.2.3_darwin_arm64.tar.gz',
|
|
url: 'https://cdn.example.com/cli/v1.2.3/browseros-cli_1.2.3_darwin_arm64.tar.gz',
|
|
archive_format: 'tar.gz',
|
|
sha256:
|
|
'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',
|
|
},
|
|
'windows/arm64': {
|
|
filename: 'browseros-cli_1.2.3_windows_arm64.zip',
|
|
url: 'https://cdn.example.com/cli/v1.2.3/browseros-cli_1.2.3_windows_arm64.zip',
|
|
archive_format: 'zip',
|
|
sha256:
|
|
'bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb',
|
|
},
|
|
},
|
|
})
|
|
})
|
|
|
|
test('rejects archives without matching checksums', () => {
|
|
expect(() =>
|
|
buildCliReleaseManifest({
|
|
version: '1.2.3',
|
|
filenames: ['browseros-cli_1.2.3_linux_amd64.tar.gz'],
|
|
checksumsContent: '',
|
|
}),
|
|
).toThrow('Missing checksum')
|
|
})
|
|
})
|