WeKnora deployment source with the reviewed wiki identity, summary and recovery fixes

cli/internal/config/config.go

@@ -0,0 +1,81 @@
+// Package config reads and writes the user-level config at
+// $XDG_CONFIG_HOME/weknora/config.yaml. yaml.v3 directly; viper is
+// intentionally not used. Multi-host profile map lives here;
+// the per-project link (.weknora/project.yaml) is handled by the
+// projectlink package.
+package config
+
+import (
+	"errors"
+	"fmt"
+	"os"
+
+	"gopkg.in/yaml.v3"
+
+	"github.com/Tencent/WeKnora/cli/internal/xdg"
+)
+
+// Config is the on-disk schema. Empty zero-value is valid (returned when the
+// file does not exist) so commands like --help / version don't fail.
+type Config struct {
+	CurrentProfile string             `yaml:"current_profile,omitempty"`
+	Profiles       map[string]Profile `yaml:"profiles,omitempty"`
+
+	// Defaults holds CLI-wide defaults; fields opt-in.
+	Defaults struct {
+		Format         string `yaml:"format,omitempty"`
+		NoVersionCheck bool   `yaml:"no_version_check,omitempty"`
+	} `yaml:"defaults,omitempty"`
+}
+
+// Profile is one named connection target (host + tenant + credential reference).
+type Profile struct {
+	Host        string `yaml:"host"`
+	TenantID    uint64 `yaml:"tenant_id,omitempty"`
+	User        string `yaml:"user,omitempty"`
+	APIKeyRef   string `yaml:"api_key_ref,omitempty"` // keychain://... or file://...
+	TokenRef    string `yaml:"token_ref,omitempty"`   // keychain://... or file://...
+	RefreshRef  string `yaml:"refresh_token_ref,omitempty"`
+	DefaultKBID string `yaml:"default_kb_id,omitempty"`
+}
+
+// ErrCorrupt is returned by Load when the file exists but cannot be parsed.
+// Callers should map this to error code "local.config_corrupt".
+var ErrCorrupt = errors.New("config: file is malformed")
+
+// Path returns the absolute config file path.
+// Honors XDG_CONFIG_HOME via internal/xdg.
+func Path() (string, error) {
+	return xdg.Path("XDG_CONFIG_HOME", ".config", "config.yaml")
+}
+
+// Load reads the config file. If it does not exist, returns a zero-value
+// Config with no error (commands like `version` and `--help` must not fail
+// just because the user has not run `auth login` yet).
+func Load() (*Config, error) {
+	p, err := Path()
+	if err != nil {
+		return nil, err
+	}
+	data, err := os.ReadFile(p)
+	if errors.Is(err, os.ErrNotExist) {
+		return &Config{}, nil
+	}
+	if err != nil {
+		return nil, fmt.Errorf("read config: %w", err)
+	}
+	var c Config
+	if err := yaml.Unmarshal(data, &c); err != nil {
+		return nil, fmt.Errorf("%w: %v", ErrCorrupt, err)
+	}
+	return &c, nil
+}
+
+// Save writes the config atomically with mode 0600 via internal/xdg.WriteAtomicYAML.
+func Save(c *Config) error {
+	p, err := Path()
+	if err != nil {
+		return err
+	}
+	return xdg.WriteAtomicYAML(p, c)
+}

cli/internal/config/config_test.go

@@ -0,0 +1,90 @@
+package config
+
+import (
+	"errors"
+	"os"
+	"path/filepath"
+	"runtime"
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+
+	"github.com/Tencent/WeKnora/cli/internal/testutil"
+)
+
+func TestLoad_FileMissing(t *testing.T) {
+	testutil.XDGTempDir(t)
+	c, err := Load()
+	require.NoError(t, err, "missing file must not error (commands like --help must work)")
+	assert.NotNil(t, c)
+	assert.Empty(t, c.Profiles)
+}
+
+func TestSaveLoad_RoundTrip(t *testing.T) {
+	testutil.XDGTempDir(t)
+	in := &Config{
+		CurrentProfile: "prod",
+		Profiles: map[string]Profile{
+			"prod": {Host: "https://kb.example.com", TenantID: 7, APIKeyRef: "keychain://weknora/prod/access"},
+		},
+	}
+	require.NoError(t, Save(in))
+
+	out, err := Load()
+	require.NoError(t, err)
+	assert.Equal(t, "prod", out.CurrentProfile)
+	assert.Equal(t, "https://kb.example.com", out.Profiles["prod"].Host)
+	assert.Equal(t, uint64(7), out.Profiles["prod"].TenantID)
+
+	p, err := Path()
+	require.NoError(t, err)
+	st, err := os.Stat(p)
+	require.NoError(t, err)
+	if runtime.GOOS != "windows" {
+		// Windows file ACLs don't map to Unix mode bits; os.Chmod is
+		// effectively a no-op for owner/group/other distinctions, so the
+		// 0600 invariant only meaningfully holds on Unix-like platforms.
+		assert.Equal(t, os.FileMode(0o600), st.Mode().Perm())
+	}
+}
+
+func TestLoad_Corrupt(t *testing.T) {
+	dir := testutil.XDGTempDir(t)
+	p := filepath.Join(dir, "weknora", "config.yaml")
+	require.NoError(t, os.MkdirAll(filepath.Dir(p), 0o700))
+	require.NoError(t, os.WriteFile(p, []byte("not: valid: yaml: ::"), 0o600))
+
+	_, err := Load()
+	require.Error(t, err)
+	assert.True(t, errors.Is(err, ErrCorrupt))
+}
+
+func TestPath_HonorsXDG(t *testing.T) {
+	xdg := filepath.Join(t.TempDir(), "xdg")
+	t.Setenv("XDG_CONFIG_HOME", xdg)
+	p, err := Path()
+	require.NoError(t, err)
+	assert.Equal(t, filepath.Join(xdg, "weknora", "config.yaml"), p)
+}
+
+func TestPath_FallsBackToHome(t *testing.T) {
+	t.Setenv("XDG_CONFIG_HOME", "")
+	t.Setenv("HOME", filepath.Join(t.TempDir(), "home"))
+	p, err := Path()
+	require.NoError(t, err)
+	// Compare via slash-normalized form so the assertion is platform-agnostic
+	// (Windows uses backslash; semantics here is "the relative tail").
+	assert.Contains(t, filepath.ToSlash(p), "/.config/weknora/config.yaml")
+}
+
+func TestSave_AtomicReplace(t *testing.T) {
+	dir := testutil.XDGTempDir(t)
+	require.NoError(t, Save(&Config{CurrentProfile: "a"}))
+	require.NoError(t, Save(&Config{CurrentProfile: "b"}))
+	out, err := Load()
+	require.NoError(t, err)
+	assert.Equal(t, "b", out.CurrentProfile)
+	matches, _ := filepath.Glob(filepath.Join(dir, "weknora", "*.tmp"))
+	assert.Empty(t, matches)
+}