OXYGENHUB
# 028545dfa7a4 oxygen / crates / oxy-core / src / repo / config.rs
13.9 KiB · Rust · last changed Agents sign keyless: author.signer = keyless (keyless step 5c) 19 days ago source blame history raw
1
//! Layered configuration: defaults, the user file, the repository file.
2
3
use super::*;
4
5
/// Effective settings: defaults, then the user file (`~/.config/oxy/config.toml`,
6
/// spec §19), then the repository file (`.oxy/config`). Both files are
7
/// `key = "value"` lines. `save` writes only the repository layer.
8
#[derive(Clone, Debug, PartialEq, Eq)]
9
pub struct Config {
10
    /// Keys set in the repository file (or via `set`), written by `save`.
11
    repo_layer: BTreeMap<String, String>,
12
    pub author_name: String,
13
    pub author_email: String,
14
    /// The KeyId of the author's identity, once `create_identity` has run.
15
    pub author_key: Option<KeyId>,
16
    /// `author.signer` (or `$OXY_SIGNER`): the key that signs and seals in
17
    /// place of `author.key`, whose identity lists it as a delegate. An
18
    /// agent sets it to its own key, so its changes carry the human as
19
    /// author and the agent's signature (spec §14.2, agent workflows §2).
20
    pub signer_key: Option<KeyId>,
21
    /// `author.signer = "keyless"`: sign with fresh keys the hub certifies
22
    /// under the agent's grant, keeping no key on disk (spec §14.7,
23
    /// oxygenhub#241).
24
    pub signer_keyless: bool,
25
    /// `keyless.hub`: the hub that certifies them (default: the default
26
    /// remote's hub).
27
    pub keyless_hub: Option<String>,
28
    /// `core.sign`: sign every change at commit (`true`) or leave signing to
29
    /// push-time seals (`false`, the spec default).
30
    pub sign_changes: bool,
31
    pub bookmark: String,
32
    /// `remote.<name>.url`.
33
    pub remotes: BTreeMap<String, String>,
34
    /// `remote.<name>.token`: bearer token for HTTP pushes.
35
    pub remote_tokens: BTreeMap<String, String>,
36
    /// `remote.<name>.ca`: PEM file of extra roots to trust for that remote.
37
    pub remote_cas: BTreeMap<String, String>,
38
    /// `core.remote`: the remote `pull`, `fetch` and `push` use when none is
39
    /// named, for a repository whose remotes include no `origin`.
40
    pub default_remote: Option<String>,
41
    /// `git.claim`: a Git import authors the commits whose Git author email
42
    /// is this repository's identity's with its key (oxygen#97).
43
    pub git_claim: bool,
44
    /// `core.op-retention`: days for which operations keep their states reachable (spec §12.1, §21).
45
    pub op_retention_days: u64,
46
    /// `core.gc-grace`: days an unreachable object survives, protecting concurrent writers (spec §21).
47
    pub gc_grace_days: u64,
48
    /// `core.checkpoint-interval`: changes between automatic checkpoints (spec §11).
49
    pub checkpoint_interval: u64,
50
    /// `push.batch-bytes`: about how many bytes of changes and their texts
51
    /// one request of a long push carries (spec §16.3).
52
    pub push_batch_bytes: u64,
53
    /// `filter.max-blob`: blobs larger than this many bytes are fetched lazily (spec §17).
54
    pub max_blob: Option<u64>,
55
    /// `filter.paths`: only these subtrees are materialized (spec §17); empty means everything.
56
    pub sparse_paths: Vec<String>,
57
    /// `hooks.semantic-deps`: run the semantic-deps hook at commit (spec §20).
58
    pub semantic_deps: bool,
59
    /// `revset.<name>`: a saved revset, used as `name()`.
60
    pub revsets: BTreeMap<String, String>,
61
    /// `storage.url`: the store the repository's objects and operation
62
    /// head are kept on (`dir://`, `s3://`, …) instead of `.oxy/objects`
63
    /// (oxygen#68).
64
    pub storage_url: Option<String>,
65
    /// `storage.cache`: the most the local cache in front of that store
66
    /// holds, in bytes.
67
    pub storage_cache: u64,
68
}
69
70
impl Config {
71
    /// Whether the repository's own file sets `key` (as against the user
72
    /// config or a default).
73
    pub fn is_repo_set(&self, key: &str) -> bool {
74
        self.repo_layer.contains_key(key)
75
    }
76
77
    pub(super) fn default_for_user() -> Config {
78
        let user = std::env::var("USER").unwrap_or_else(|_| "unknown".into());
79
        Config {
80
            repo_layer: BTreeMap::new(),
81
            author_name: std::env::var("OXY_AUTHOR_NAME").unwrap_or_else(|_| user.clone()),
82
            author_email: std::env::var("OXY_AUTHOR_EMAIL")
83
                .unwrap_or_else(|_| format!("{user}@localhost")),
84
            author_key: None,
85
            signer_key: std::env::var("OXY_SIGNER")
86
                .ok()
87
                .and_then(|v| KeyId::from_hex(&v)),
88
            signer_keyless: std::env::var("OXY_SIGNER").is_ok_and(|v| v == "keyless"),
89
            keyless_hub: None,
90
            sign_changes: false,
91
            bookmark: "main".into(),
92
            remotes: BTreeMap::new(),
93
            remote_tokens: BTreeMap::new(),
94
            remote_cas: BTreeMap::new(),
95
            default_remote: None,
96
            git_claim: false,
97
            op_retention_days: 90,
98
            gc_grace_days: 14,
99
            checkpoint_interval: 256,
100
            push_batch_bytes: 256 << 20,
101
            max_blob: None,
102
            sparse_paths: Vec::new(),
103
            semantic_deps: false,
104
            revsets: BTreeMap::new(),
105
            storage_url: None,
106
            storage_cache: DEFAULT_STORAGE_CACHE,
107
        }
108
    }
109
110
    /// Set a key in the repository layer, as `oxy config` does.
111
    pub fn set(&mut self, key: &str, value: &str) -> Result<()> {
112
        self.apply(key, value)?;
113
        if value.is_empty() {
114
            self.repo_layer.remove(key);
115
        } else {
116
            self.repo_layer.insert(key.to_string(), value.to_string());
117
        }
118
        Ok(())
119
    }
120
121
    /// Set a key in the user file without touching any repository.
122
    pub fn set_user(user_path: &Path, key: &str, value: &str) -> Result<()> {
123
        Config::default_for_user().apply(key, value)?;
124
        let mut entries = read_config_file(user_path)?;
125
        if value.is_empty() {
126
            entries.remove(key);
127
        } else {
128
            entries.insert(key.to_string(), value.to_string());
129
        }
130
        if let Some(parent) = user_path.parent() {
131
            fs::create_dir_all(parent)?;
132
        }
133
        write_config_file(user_path, &entries)
134
    }
135
136
    /// Apply a key to the effective values.
137
    pub(super) fn apply(&mut self, key: &str, value: &str) -> Result<()> {
138
        match key {
139
            "author.name" => self.author_name = value.into(),
140
            "author.email" => self.author_email = value.into(),
141
            "author.key" => {
142
                self.author_key = if value.is_empty() {
143
                    None
144
                } else {
145
                    Some(KeyId::from_hex(value).ok_or_else(|| {
146
                        RepoError::Msg("author.key must be a 64-character hex KeyId".into())
147
                    })?)
148
                }
149
            }
150
            "author.signer" => {
151
                self.signer_keyless = value == "keyless";
152
                self.signer_key = if value.is_empty() || self.signer_keyless {
153
                    None
154
                } else {
155
                    Some(KeyId::from_hex(value).ok_or_else(|| {
156
                        RepoError::Msg(
157
                            "author.signer must be a 64-character hex KeyId, or \"keyless\"".into(),
158
                        )
159
                    })?)
160
                }
161
            }
162
            "core.sign" => {
163
                self.sign_changes = match value {
164
                    "change" => true,
165
                    "seal" => false,
166
                    _ => return fail("core.sign must be \"change\" or \"seal\""),
167
                }
168
            }
169
            "workspace.bookmark" => self.bookmark = value.into(),
170
            "keyless.hub" => self.keyless_hub = (!value.is_empty()).then(|| value.to_string()),
171
            // Read by the credential store from the user file.
172
            "auth.helper" => {}
173
            "core.op-retention" => self.op_retention_days = parse_days(value)?,
174
            "core.gc-grace" => self.gc_grace_days = parse_days(value)?,
175
            "filter.max-blob" => {
176
                self.max_blob = if value.is_empty() {
177
                    None
178
                } else {
179
                    Some(parse_size(value)?)
180
                }
181
            }
182
            "storage.url" => {
183
                self.storage_url = (!value.is_empty()).then(|| value.to_string());
184
            }
185
            "storage.cache" => {
186
                self.storage_cache = if value.is_empty() {
187
                    DEFAULT_STORAGE_CACHE
188
                } else {
189
                    parse_size(value)?
190
                }
191
            }
192
            "core.remote" => {
193
                self.default_remote = (!value.is_empty()).then(|| value.to_string());
194
            }
195
            "hooks.semantic-deps" => self.semantic_deps = matches!(value, "true" | "1" | "yes"),
196
            "git.claim" => self.git_claim = matches!(value, "true" | "1" | "yes"),
197
            "filter.paths" => {
198
                self.sparse_paths = value
199
                    .split(',')
200
                    .map(|p| {
201
                        p.trim()
202
                            .trim_start_matches("./")
203
                            .trim_matches('/')
204
                            .to_string()
205
                    })
206
                    .filter(|p| !p.is_empty())
207
                    .collect();
208
            }
209
            "core.checkpoint-interval" => {
210
                self.checkpoint_interval = value
211
                    .parse()
212
                    .map_err(|_| RepoError::Msg(format!("expected a number, got {value:?}")))?;
213
            }
214
            "push.batch-bytes" => {
215
                self.push_batch_bytes = value.parse().ok().filter(|n| *n > 0).ok_or_else(|| {
216
                    RepoError::Msg(format!("expected a number of bytes, got {value:?}"))
217
                })?;
218
            }
219
            k if k.starts_with("remote.") => {
220
                let rest = &k["remote.".len()..];
221
                let Some((name, field)) = rest.rsplit_once('.') else {
222
                    return fail(format!("unknown configuration key {key:?}"));
223
                };
224
                if name.is_empty() || name.contains('/') {
225
                    return fail(format!("invalid remote name in {key:?}"));
226
                }
227
                let map = match field {
228
                    "url" => &mut self.remotes,
229
                    "token" => &mut self.remote_tokens,
230
                    "ca" => &mut self.remote_cas,
231
                    _ => return fail(format!("unknown configuration key {key:?}")),
232
                };
233
                if value.is_empty() {
234
                    map.remove(name);
235
                    if field == "url" {
236
                        self.remote_tokens.remove(name);
237
                        self.remote_cas.remove(name);
238
                    }
239
                } else {
240
                    map.insert(name.to_string(), value.into());
241
                }
242
            }
243
            k if k.starts_with("revset.") => {
244
                let name = &k["revset.".len()..];
245
                if name.is_empty()
246
                    || !name
247
                        .chars()
248
                        .all(|c| c.is_ascii_alphanumeric() || c == '_' || c == '-')
249
                {
250
                    return fail(format!(
251
                        "a revset's name is letters, digits, _ and -: {key:?}"
252
                    ));
253
                }
254
                if value.is_empty() {
255
                    self.revsets.remove(name);
256
                } else {
257
                    crate::revset::parse(value)
258
                        .map_err(|e| RepoError::Msg(format!("{key} = {value:?}: {e}")))?;
259
                    self.revsets.insert(name.to_string(), value.into());
260
                }
261
            }
262
            _ => return fail(format!("unknown configuration key {key:?}")),
263
        }
264
        Ok(())
265
    }
266
267
    /// Defaults, then the user file if it exists, then the repository file.
268
    pub(super) fn load(user_path: Option<&Path>, repo_path: &Path) -> Result<Config> {
269
        let mut c = Config::default_for_user();
270
        if let Some(u) = user_path {
271
            for (k, v) in read_config_file(u)? {
272
                let _ = c.apply(&k, &v);
273
            }
274
        }
275
        for (k, v) in read_config_file(repo_path)? {
276
            if c.apply(&k, &v).is_ok() {
277
                c.repo_layer.insert(k, v);
278
            }
279
        }
280
        Ok(c)
281
    }
282
283
    pub(super) fn save(&self, path: &Path) -> Result<()> {
284
        write_config_file(path, &self.repo_layer)
285
    }
286
287
    /// Keys explicitly set for this repository.
288
    pub fn repo_layer(&self) -> &BTreeMap<String, String> {
289
        &self.repo_layer
290
    }
291
}
292
293
/// A byte count with an optional `K`, `M`, or `G` suffix (binary units).
294
/// `storage.cache` when unset: 2 GiB.
295
pub const DEFAULT_STORAGE_CACHE: u64 = 2 << 30;
296
297
pub fn parse_size(v: &str) -> Result<u64> {
298
    let v = v.trim();
299
    let (num, mult) = match v.chars().last() {
300
        Some('K' | 'k') => (&v[..v.len() - 1], 1u64 << 10),
301
        Some('M' | 'm') => (&v[..v.len() - 1], 1u64 << 20),
302
        Some('G' | 'g') => (&v[..v.len() - 1], 1u64 << 30),
303
        _ => (v, 1),
304
    };
305
    let n: u64 = num
306
        .trim()
307
        .parse()
308
        .map_err(|_| RepoError::Msg(format!("expected a size like 1M, got {v:?}")))?;
309
    Ok(n * mult)
310
}
311
312
/// A count of days, optionally suffixed `d`.
313
fn parse_days(v: &str) -> Result<u64> {
314
    v.trim_end_matches('d')
315
        .parse()
316
        .map_err(|_| RepoError::Msg(format!("expected a number of days, got {v:?}")))
317
}
318
319
/// Read `key = "value"` lines; a missing file is empty.
320
pub fn read_config_file(path: &Path) -> Result<BTreeMap<String, String>> {
321
    let text = match fs::read_to_string(path) {
322
        Ok(t) => t,
323
        Err(e) if e.kind() == std::io::ErrorKind::NotFound => return Ok(BTreeMap::new()),
324
        Err(e) => return Err(e.into()),
325
    };
326
    let mut out = BTreeMap::new();
327
    for line in text.lines() {
328
        let line = line.trim();
329
        if line.is_empty() || line.starts_with('#') {
330
            continue;
331
        }
332
        let Some((k, v)) = line.split_once('=') else {
333
            continue;
334
        };
335
        out.insert(k.trim().to_string(), v.trim().trim_matches('"').to_string());
336
    }
337
    Ok(out)
338
}
339
340
fn write_config_file(path: &Path, entries: &BTreeMap<String, String>) -> Result<()> {
341
    let text: String = entries
342
        .iter()
343
        .map(|(k, v)| format!("{k} = \"{v}\"\n"))
344
        .collect();
345
    write_atomic(path, text.as_bytes())
346
}