CyberStrikeAI/internal/config/config_test.go

package config

import (
	"os"
	"path/filepath"
	"strings"
	"testing"
)

func TestPersistAuthPasswordQuotesYAMLSpecialCharacters(t *testing.T) {
	dir := t.TempDir()
	path := filepath.Join(dir, "config.yaml")
	initial := strings.Join([]string{
		"server:",
		"  host: 0.0.0.0",
		"auth:",
		"  password: old-password # Web 登录密码",
		"  session_duration_hours: 12",
		"log:",
		"  level: info",
		"",
	}, "\n")
	if err := os.WriteFile(path, []byte(initial), 0644); err != nil {
		t.Fatalf("write config: %v", err)
	}

	want := `@abc:def # still password`
	if err := PersistAuthPassword(path, want); err != nil {
		t.Fatalf("PersistAuthPassword: %v", err)
	}

	data, err := os.ReadFile(path)
	if err != nil {
		t.Fatalf("read config: %v", err)
	}
	if !strings.Contains(string(data), `password: "@abc:def # still password" # Web 登录密码`) {
		t.Fatalf("password was not safely quoted or comment was not preserved:\n%s", data)
	}

	cfg, err := Load(path)
	if err != nil {
		t.Fatalf("Load after PersistAuthPassword: %v", err)
	}
	if cfg.Auth.Password != want {
		t.Fatalf("Auth.Password = %q, want %q", cfg.Auth.Password, want)
	}
}

func TestPersistAuthPasswordDoesNotTreatQuotedHashAsComment(t *testing.T) {
	dir := t.TempDir()
	path := filepath.Join(dir, "config.yaml")
	initial := strings.Join([]string{
		"auth:",
		`  password: "old#password"`,
		"  session_duration_hours: 12",
		"",
	}, "\n")
	if err := os.WriteFile(path, []byte(initial), 0644); err != nil {
		t.Fatalf("write config: %v", err)
	}

	if err := PersistAuthPassword(path, "new-password"); err != nil {
		t.Fatalf("PersistAuthPassword: %v", err)
	}

	data, err := os.ReadFile(path)
	if err != nil {
		t.Fatalf("read config: %v", err)
	}
	if strings.Contains(string(data), "#password") {
		t.Fatalf("old quoted password fragment was incorrectly preserved as a comment:\n%s", data)
	}
}

func TestHitlAuditModelEffectiveFallsBackToMainConfig(t *testing.T) {
	main := OpenAIConfig{
		Provider: "openai",
		BaseURL:  "https://api.example.com/v1",
		APIKey:   "main-key",
		Model:    "large-model",
	}

	got := (HitlConfig{
		AuditModel: OpenAIConfig{Model: "small-reviewer"},
	}).AuditModelEffective(main)

	if got.Provider != main.Provider || got.BaseURL != main.BaseURL || got.APIKey != main.APIKey {
		t.Fatalf("expected provider/base_url/api_key to inherit main config, got %+v", got)
	}
	if got.Model != "small-reviewer" {
		t.Fatalf("expected audit model override, got %q", got.Model)
	}
}