Move workspace.profile regression test from unit to acceptance

The previous unit test for the Workspace.Profile == "" guard sat
alongside other configureProfile unit tests, but per
.agent/rules/testing.md, cmd/... behavior is a strong candidate for
acceptance tests, and the existing acceptance/auth/bundle_default_profile/
already covers the related host-empty guard end-to-end. Extending it
keeps the related cases together.

The new sub-case spawns a child bundle directory with workspace.profile
pinned and asserts the bundle's profile (not [__settings__].default_profile)
is what gets used.

Co-authored-by: Isaac

Author: janniklasrose

acceptance/auth/bundle_default_profile/output.txt

@@ -31,3 +31,15 @@ Exit code: 1
   "host": "[DATABRICKS_URL]",
   "profile": null
 }
+
+=== Bundle with workspace.profile: pinned profile wins over default_profile
+
+>>> errcode [CLI] bundle validate -o json
+Error: failed during request visitor: default auth: cannot configure default credentials, please check https://docs.databricks.com/en/dev-tools/auth.html#databricks-client-unified-authentication to configure credentials for your preferred authentication method. Config: profile=other, databricks_cli_path=[CLI]. Env: DATABRICKS_CLI_PATH
+
+
+Exit code: 1
+{
+  "host": null,
+  "profile": "other"
+}

acceptance/auth/bundle_default_profile/script

@@ -41,3 +41,18 @@ EOF
 
 title "Bundle with workspace.host: default_profile is NOT applied\n"
 (cd ./bundle-with-host && trace errcode $CLI bundle validate -o json | jq '{host: .workspace.host, profile: .workspace.profile}')
+
+# Switch to a bundle that pins workspace.profile but no host. The pinned
+# profile must win over default_profile — configureProfile's guard skips
+# default_profile when workspace.profile is already set.
+mkdir -p ./bundle-with-profile
+cat > ./bundle-with-profile/databricks.yml <<EOF
+bundle:
+  name: bundle-with-profile
+
+workspace:
+  profile: other
+EOF
+
+title "Bundle with workspace.profile: pinned profile wins over default_profile\n"
+(cd ./bundle-with-profile && trace errcode $CLI bundle validate -o json | jq '{host: .workspace.host, profile: .workspace.profile}')

acceptance/auth/bundle_default_profile/test.toml

@@ -2,6 +2,7 @@ Ignore = [
     "home",
     ".databricks",
     "bundle-with-host",
+    "bundle-with-profile",
 ]
 
 # Negative case: -p other tries to reach a non-existing host. Redact the

cmd/root/bundle_test.go

@@ -294,35 +294,6 @@ func TestBundleConfigureWithDefaultProfile_EnvVarOverrides(t *testing.T) {
 	assert.Equal(t, "PROFILE-2", cmdctx.ConfigUsed(cmd.Context()).Profile)
 }
 
-func TestBundleConfigureWithDefaultProfile_BundleProfileWins(t *testing.T) {
-	testutil.CleanupEnvironment(t)
-	// The bundle pins workspace.profile: PROFILE-2 but no host. cfg has
-	// default_profile = PROFILE-1. The bundle's pinned profile must win —
-	// configureProfile's guard skips default_profile when workspace.profile
-	// is already set. Inline the bundle write because setupWithProfile would
-	// overwrite the cfg fixture.
-	setupDatabricksCfgWithDefault(t, "PROFILE-1")
-
-	rootPath := t.TempDir()
-	t.Chdir(rootPath)
-
-	contents := `workspace:
-  profile: "PROFILE-2"
-`
-	err := os.WriteFile(filepath.Join(rootPath, "databricks.yml"), []byte(contents), 0o644)
-	require.NoError(t, err)
-
-	cmd := emptyCommand(t)
-	ctx := logdiag.InitContext(cmd.Context())
-	logdiag.SetCollect(ctx, true)
-	cmd.SetContext(ctx)
-	_ = MustConfigureBundle(cmd)
-	diags := logdiag.FlushCollected(ctx)
-	require.Empty(t, diags)
-	assert.Equal(t, "https://b.test", cmdctx.ConfigUsed(cmd.Context()).Host)
-	assert.Equal(t, "PROFILE-2", cmdctx.ConfigUsed(cmd.Context()).Profile)
-}
-
 func TestBundleConfigureWithDefaultProfile_BundleHostWins(t *testing.T) {
 	testutil.CleanupEnvironment(t)
 	// PROFILE-1 points at https://a.test, but the bundle pins https://b.test.