Function SaveConfigToFile

internal/ui/components/config_wizard.go:719–761

SaveConfigToFile writes the config to the given path in YAML format.

(cfg *config.Config, path string)

// SaveConfigToFile writes the config to the given path in YAML format.
func SaveConfigToFile(cfg *config.Config, path string) error {
	// Check if SOPS is being used (read file to check)
	data, err := os.ReadFile(path)
	isSOPS := false
	if err == nil {
		isSOPS = config.IsSOPSEncrypted(path, data)
	}

	// If not using SOPS, encrypt sensitive fields before saving
	if !isSOPS {
		// Create a copy of the config to encrypt (don't modify the original)
		cfgCopy := *cfg
		cfgCopy.Profiles = make(map[string]config.ProfileConfig)
		for k, v := range cfg.Profiles {
			cfgCopy.Profiles[k] = v
		}

		// Encrypt sensitive fields
		if err := config.EncryptConfigSensitiveFields(&cfgCopy); err != nil {
			// Log warning but continue - allow saving even if encryption fails
			// This allows users to save cleartext if they prefer
			if config.DebugEnabled {
				fmt.Println(display.IconText("⚠️", fmt.Sprintf("Warning: Failed to encrypt some fields: %v", err), cfg.ShowIcons))
			}
		} else {
			cfg = &cfgCopy
		}
	}

	// Use the config package's YAML marshaling
	data, err = yaml.Marshal(cfg)
	if err != nil {
		return err
	}

	// Ensure the target directory exists using OS-agnostic path operations
	dir := filepath.Dir(path)
	if err := os.MkdirAll(dir, 0o750); err != nil {
		return err
	}

	return os.WriteFile(path, data, 0o600)
}

// LaunchConfigWizard launches the configuration wizard and returns the result.
func LaunchConfigWizard(cfg *config.Config, configPath string, activeProfile string) WizardResult {