Harden ProxiFyre installer downloads

src-tauri/tests/command_tests.rs

@@ -251,6 +251,35 @@ fn proxifyre_install_script_parses_as_powershell() {
     cleanup(&root);
 }
 
+#[test]
+fn proxifyre_install_script_uses_resilient_download_helpers() {
+    let root = test_root("proxifyre-install-script-downloads");
+    let script = commands::install_proxifyre_script(&root.join("proxifyre-app-config.json"));
+
+    assert!(script.contains("function Get-SafeUriForLog([string]$uri)"));
+    assert!(script.contains("function Invoke-ReleaseApi([string]$uri, [string]$label)"));
+    assert!(
+        script.contains("function Invoke-Download([string]$uri, [string]$path, [string]$label)")
+    );
+    assert!(script.contains("foreach ($attempt in 1..3)"));
+    assert!(script.contains("Invoke-WebClientDownload $uri $partialPath"));
+    assert!(script.contains("Invoke-CurlDownload $uri $partialPath"));
+    assert!(script.contains("--user-agent 'proxywarden' --output $partialPath --url $uri"));
+    assert!(script.contains("Move-Item -LiteralPath $partialPath -Destination $path -Force"));
+    assert!(script
+        .contains("Invoke-Download $vcRedistUrl $vcRedistPath 'Microsoft Visual C++ Runtime'"));
+    assert!(script.contains("Invoke-ReleaseApi $ndisapiReleaseApi 'Windows Packet Filter'"));
+    assert!(script.contains(
+        "Invoke-Download $ndisAsset.browser_download_url $ndisPath 'Windows Packet Filter'"
+    ));
+    assert!(script.contains("Invoke-ReleaseApi $proxifyreReleaseApi 'ProxiFyre'"));
+    assert!(script.contains(
+        "Invoke-Download $proxifyreAsset.browser_download_url $proxifyreZipPath 'ProxiFyre'"
+    ));
+
+    cleanup(&root);
+}
+
 #[test]
 fn singbox_runner_preserves_installer_args_with_spaces() {
     let script = commands::singbox_installer_runner_script(