72 lines
2.6 KiB
Go
72 lines
2.6 KiB
Go
package main
|
|
|
|
import (
|
|
"bufio"
|
|
"errors"
|
|
"fmt"
|
|
"io"
|
|
"io/fs"
|
|
"os"
|
|
"strings"
|
|
)
|
|
|
|
// dotenv.go: reads backend/.env (gitignored) into the environment. The parser is split
|
|
// out as a pure function (package №4): the «matched quotes» and «do not override what
|
|
// is already set» rules are review findings that used to live only in comments; now they
|
|
// are pinned by unit tests (a regression that «simplified to strings.Trim» would corrupt
|
|
// API key values and surface as inexplicable 401s in the middle of an acceptance run).
|
|
|
|
// dotenvPair is one KEY=VALUE line of a .env file.
|
|
type dotenvPair struct{ K, V string }
|
|
|
|
// parseDotEnv reads KEY=VALUE lines: skips empty ones/comments/those without «=»,
|
|
// trims key and value, strips only MATCHED enclosing quotes — a Trim over a character
|
|
// set would bite off a legitimate quote at the end of the value (review finding).
|
|
func parseDotEnv(r io.Reader) []dotenvPair {
|
|
var out []dotenvPair
|
|
sc := bufio.NewScanner(r)
|
|
for sc.Scan() {
|
|
line := strings.TrimSpace(sc.Text())
|
|
if line == "" || strings.HasPrefix(line, "#") {
|
|
continue
|
|
}
|
|
k, v, ok := strings.Cut(line, "=")
|
|
if !ok {
|
|
continue
|
|
}
|
|
k, v = strings.TrimSpace(k), strings.TrimSpace(v)
|
|
if n := len(v); n >= 2 && (v[0] == '"' || v[0] == '\'') && v[n-1] == v[0] {
|
|
v = v[1 : n-1]
|
|
}
|
|
out = append(out, dotenvPair{K: k, V: v})
|
|
}
|
|
return out
|
|
}
|
|
|
|
// loadDotEnv reads KEY=VALUE lines into the environment without overriding
|
|
// already-set variables. Keys come from backend/.env (gitignored); secrets never
|
|
// end up in configs/the repo. Note: a variable set to an EMPTY string is treated
|
|
// as unset and will be overridden (current behavior, frozen).
|
|
// It WARNS but never fails. A missing file is normal — the keys may come from the real environment —
|
|
// but a file that exists and cannot be read, or a line os.Setenv refuses (an empty key from a `=VALUE`
|
|
// typo), used to be swallowed and surfaced much later as an unexplained 401. Warning rather than
|
|
// returning keeps that visible without taking down `status`/`report`/`export`, which are $0 read-only
|
|
// projections that must not demand keys at all (D20.4), and lets the remaining valid lines still load.
|
|
func loadDotEnv(path string, warn io.Writer) {
|
|
f, err := os.Open(path)
|
|
if err != nil {
|
|
if !errors.Is(err, fs.ErrNotExist) {
|
|
fmt.Fprintf(warn, "tmctl: %s exists but cannot be read (%v) — its keys are NOT loaded\n", path, err)
|
|
}
|
|
return
|
|
}
|
|
defer f.Close()
|
|
for _, p := range parseDotEnv(f) {
|
|
if os.Getenv(p.K) != "" {
|
|
continue
|
|
}
|
|
if err := os.Setenv(p.K, p.V); err != nil {
|
|
fmt.Fprintf(warn, "tmctl: %s: malformed line ignored, key %q rejected (%v)\n", path, p.K, err)
|
|
}
|
|
}
|
|
}
|