Function hamrpassValidate

internal/tui/slash.go:241–258

hamrpassValidate is the single source of truth for whether a key is acceptable and what the UI says about it. Shared by the inline /hamrpass handler and the arg popover hint. ok=false with an empty trimmed key is the "show status block" signal. Non-printable/non-ASCII runes are rejected up front: h

(raw string)

// Non-printable/non-ASCII runes are rejected up front: http.Header.Set accepts
// the bytes but http.Client.Do then errors with `invalid header field value
// for "Authorization"` on the wire, after the key has already been persisted
// to config.yaml. Real keys are ASCII-printable; reject anything else early.
func hamrpassValidate(raw string) (key, hint string, ok bool) {
	key = strings.TrimSpace(raw)
	switch {
	case key == "":
		return "", "paste your hamrpass key, or Enter for status", false
	case strings.ContainsAny(key, " \t\r\n"):
		return key, "no whitespace allowed", false
	}
	for _, r := range key {
		if r < 0x21 || r > 0x7e {
			return key, "key must be printable ASCII (no control chars)", false
		}
	}
	if len(key) < hamrpassMinKeyLen {
		return key, fmt.Sprintf("%d/%d chars · keep typing", len(key), hamrpassMinKeyLen), false
	}
	return key, "Enter to activate", true
}