mirror of
https://github.com/sipeed/picoclaw.git
synced 2026-06-12 18:08:54 +00:00
wenjie
d23c24ce72
Normalize missing security sections when attaching, loading, and saving security config so existing config files without `.security.yml` can still be updated safely. This fixes Pico channel setup for legacy/existing configs and adds coverage for the missing security file path and unexported JSON field behavior.
94 lines
2.1 KiB
Go
94 lines
2.1 KiB
Go
// PicoClaw - Ultra-lightweight personal AI agent
|
|
// License: MIT
|
|
//
|
|
// Copyright (c) 2026 PicoClaw contributors
|
|
|
|
package config
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
func TestSecurityConfig(t *testing.T) {
|
|
t.Run("LoadNonExistent", func(t *testing.T) {
|
|
sec, err := loadSecurityConfig("/nonexistent/.security.yml")
|
|
require.NoError(t, err)
|
|
assert.NotNil(t, sec)
|
|
assert.Empty(t, sec.ModelList)
|
|
assert.NotNil(t, sec.Channels)
|
|
assert.NotNil(t, sec.Web)
|
|
assert.NotNil(t, sec.Skills)
|
|
})
|
|
}
|
|
|
|
func TestSecurityPath(t *testing.T) {
|
|
tests := []struct {
|
|
name string
|
|
configDir string
|
|
want string
|
|
}{
|
|
{
|
|
name: "standard path",
|
|
configDir: "/home/user/.picoclaw/config.json",
|
|
want: "/home/user/.picoclaw/.security.yml",
|
|
},
|
|
{
|
|
name: "nested path",
|
|
configDir: "/path/to/config/myconfig.json",
|
|
want: "/path/to/config/.security.yml",
|
|
},
|
|
}
|
|
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
got := securityPath(tt.configDir)
|
|
assert.Equal(t, tt.want, got)
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestSaveAndLoadSecurityConfig(t *testing.T) {
|
|
tmpDir := t.TempDir()
|
|
secPath := filepath.Join(tmpDir, SecurityConfigFile)
|
|
|
|
original := &SecurityConfig{
|
|
ModelList: map[string]ModelSecurityEntry{
|
|
"model1:0": {
|
|
APIKeys: []string{"key1", "key2"},
|
|
},
|
|
},
|
|
Channels: &ChannelsSecurity{
|
|
Telegram: &TelegramSecurity{
|
|
Token: "telegram-token",
|
|
},
|
|
},
|
|
Web: &WebToolsSecurity{
|
|
Brave: &BraveSecurity{
|
|
APIKeys: []string{"brave-api-key"},
|
|
},
|
|
},
|
|
}
|
|
|
|
// Save
|
|
err := saveSecurityConfig(secPath, original)
|
|
require.NoError(t, err)
|
|
|
|
// Verify file was created with correct permissions
|
|
info, err := os.Stat(secPath)
|
|
require.NoError(t, err)
|
|
assert.Equal(t, os.FileMode(0o600), info.Mode())
|
|
|
|
// Load
|
|
loaded, err := loadSecurityConfig(secPath)
|
|
require.NoError(t, err)
|
|
|
|
assert.Equal(t, original.ModelList, loaded.ModelList)
|
|
assert.Equal(t, original.Channels.Telegram.Token, loaded.Channels.Telegram.Token)
|
|
assert.EqualValues(t, original.Web.Brave.APIKeys, loaded.Web.Brave.APIKeys)
|
|
}
|