Deivid Soto 3f22d698da test(upgrade): exercise the real signed checksum flow, not a bypass ... Supersedes the previous "disable signature verification" stop-gap. The two checksum tests now run verifyChecksum with signature verification ENABLED using a per-test ed25519 keypair (withReleasePubKey) and a matching checksums.txt.sig served over the exact body — so they cover the real production path end to end instead of skipping it. Adds verifyChecksum-level coverage for the cases that actually protect a self-update: a checksums file signed by the wrong key is rejected, a missing .sig is rejected, and verifyChecksumOnly (--allow-unsigned) still passes on the checksum alone. No production code change.		2026-06-04 08:47:24 +02:00
..
cache.go	fix(daemon): use correct systemd user target and isolate test cache	2026-04-06 18:49:44 +02:00
download.go	fix(upgrade): fetch releases from TorrentClaw app, not GitHub	2026-05-21 14:46:10 +02:00
extract.go	fix(security): CORS allowlist, URL scheme guard, state perms, ZIP slip, mirror docs	2026-05-15 18:48:59 +02:00
signature.go	feat(release): sign release checksums (ed25519), enforce + bake pubkey	2026-06-03 19:23:19 +02:00
signature_test.go	fix(upgrade): fetch releases from TorrentClaw app, not GitHub	2026-05-21 14:46:10 +02:00
upgrade.go	fix(upgrade): fetch releases from TorrentClaw app, not GitHub	2026-05-21 14:46:10 +02:00
upgrade_test.go	test(upgrade): exercise the real signed checksum flow, not a bypass	2026-06-04 08:47:24 +02:00