dugout 0.1.10

Git-native secrets manager for development teams, written in Rust
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104

//! Tests for `dugout team add/list/rm` commands.

use crate::support::*;

#[test]
fn test_team_list_shows_members() {
    let t = Test::init("alice");

    // Initially just the creator
    let output = t.team_list();
    assert_success(&output);
    assert_stdout_contains(&output, "alice");
}

#[test]
fn test_team_list_json_output() {
    let t = Test::init("alice");

    let output = t.team_list_json();
    assert_success(&output);

    let out = stdout(&output);
    let parsed: serde_json::Value = serde_json::from_str(&out).expect("valid JSON");
    assert!(parsed.get("members").is_some());
}

#[test]
fn test_team_add_with_valid_key() {
    let t = Test::init("alice");

    let output = t.team_add("bob", BOB_PUBLIC_KEY);
    assert_success(&output);

    // Verify bob appears in team list
    let output = t.team_list();
    assert_success(&output);
    assert_stdout_contains(&output, "bob");
}

#[test]
fn test_team_add_with_invalid_key_fails() {
    let t = Test::init("alice");

    let output = t.team_add("bob", INVALID_PUBLIC_KEY);
    assert_failure(&output);
}

#[test]
fn test_team_add_duplicate_member() {
    let t = Test::init("alice");

    t.team_add("bob", BOB_PUBLIC_KEY);

    // Try adding bob again - may succeed idempotently or fail
    let output = t.team_add("bob", BOB_PUBLIC_KEY);
    // Just verify it doesn't crash - either success or failure is acceptable
    let _ = output;
}

#[test]
fn test_team_rm_member() {
    let t = Test::init("alice");
    t.team_add("bob", BOB_PUBLIC_KEY);

    // Remove bob
    let output = t.team_rm("bob");
    assert_success(&output);

    // Verify bob is gone
    let output = t.team_list();
    assert_success(&output);
    let out = stdout(&output);
    assert!(!out.contains("bob") || out.contains("removed"));
}

#[test]
fn test_team_rm_nonexistent_fails() {
    let t = Test::init("alice");

    let output = t.team_rm("nonexistent");
    assert_failure(&output);
}

#[test]
fn test_team_add_reencrypts_secrets() {
    let t = Test::with_secrets("alice", &[("TEAM_SECRET", "team_value")]);

    let output = t.team_add("bob", BOB_PUBLIC_KEY);
    assert_success(&output);

    // Original user should still be able to access the secret
    let output = t.get("TEAM_SECRET");
    assert_success(&output);
    assert_stdout_contains(&output, "team_value");
}

#[test]
fn test_team_add_rejects_invalid_member_name() {
    let t = Test::init("alice");

    let output = t.team_add("../bob", BOB_PUBLIC_KEY);
    assert_failure(&output);
    assert_stderr_contains(&output, "invalid member name");
}