From 13cc065ec014b86369dfe4ad60d1a43fa06fd251 Mon Sep 17 00:00:00 2001
From: Igor Soarez <igor@soarez.org>
Date: Thu, 17 Sep 2026 19:45:23 +0100
Subject: dotfiles

Shell, editor and terminal configuration, the tools that go with them, and
szecret, an age-based secret manager whose store lives elsewhere.

History restarts here. What came before was not written to be read by
anyone else, and carried machine names, addresses and an encrypted secret
store; it is kept privately instead. What is left is meant to be safe on
any machine, including one whose owner is not me: see CLAUDE.md for the
rule it is written to.
---
 secrets/test/ensure.sh | 29 +++++++++++++++++++++++++++++
 1 file changed, 29 insertions(+)
 create mode 100755 secrets/test/ensure.sh

(limited to 'secrets/test/ensure.sh')

diff --git a/secrets/test/ensure.sh b/secrets/test/ensure.sh
new file mode 100755
index 0000000..720d328
--- /dev/null
+++ b/secrets/test/ensure.sh
@@ -0,0 +1,29 @@
+#!/bin/bash
+# Tests for ensure command
+
+this_dir="$(cd "$(dirname "$0")" && pwd)"
+source "${this_dir}/common.sh"
+
+test_ensure_succeeds_when_key_exists() {
+    # Key already exists from setup, should succeed silently
+    assert_success szecret ensure
+    pass "ensure succeeds when key exists"
+}
+
+test_ensure_fails_noninteractive_without_key() {
+    local saved_key="${SZECRET_PRIVATE_KEY}"
+    export SZECRET_PRIVATE_KEY="${TEST_DIR}/nonexistent-key"
+
+    # Force non-interactive mode by redirecting stdin from /dev/null
+    assert_failure szecret ensure < /dev/null
+
+    export SZECRET_PRIVATE_KEY="${saved_key}"
+    pass "ensure fails non-interactive without key"
+}
+
+run_tests() {
+    test_ensure_succeeds_when_key_exists
+    test_ensure_fails_noninteractive_without_key
+}
+
+[[ "${BASH_SOURCE[0]}" == "${0}" ]] && run_tests
-- 
cgit v1.2.3