Function TestRedactSlashHidesHamrpassKey

internal/tui/tui_test.go:621–646

TestRedactSlashHidesHamrpassKey: with `logging: true`, every prompt (including `/hamrpass `) is written to .codehamr/log.txt. The log is meant to be easy to share for bug reports, so a key in there is a quiet leak even at 0o600. redactSlash is the seam every dbgWritef on a slash payload routes

(t *testing.T)

// easy to share for bug reports, so a key in there is a quiet leak even at 0o600.
// redactSlash is the seam every dbgWritef on a slash payload routes through.
func TestRedactSlashHidesHamrpassKey(t *testing.T) {
	cases := map[string]string{
		"/hamrpass hp_secret_1234567890abcdef": "/hamrpass <redacted>",
		"/hamrpass":                            "/hamrpass",  // no arg, nothing to redact
		"/hamrpass ":                           "/hamrpass ", // trailing space, no key to redact
		"/clear":                               "/clear",     // unrelated commands pass through
		"/models hamrpass":                     "/models hamrpass",
		"hello /hamrpass key":                  "hello /hamrpass key", // not at line start = not a hamrpass invocation
		// Multi-line / tab-separated: Alt+Enter inserts a literal newline, and
		// runSlash's strings.Fields splits on any whitespace, so the key activates.
		// redactSlash must tokenise the same way or the key survives in log.txt.
		"/hamrpass\nhp_secret_1234567890abcdef":  "/hamrpass <redacted>",
		"/hamrpass\thp_secret_1234567890abcdef":  "/hamrpass <redacted>",
		"  /hamrpass hp_secret_1234567890abcdef": "/hamrpass <redacted>",
		// Case-folded name: /HamrPass doesn't activate the key (dispatch is
		// case-sensitive) but submit still routes through redactSlash, so the
		// token must not survive into scrollback, recall, history, or log.txt.
		"/HamrPass hp_secret_1234567890abcdef": "/hamrpass <redacted>",
		"/HAMRPASS hp_secret_1234567890abcdef": "/hamrpass <redacted>",
	}
	for in, want := range cases {
		if got := redactSlash(in); got != want {
			t.Errorf("redactSlash(%q) = %q, want %q", in, got, want)
		}
	}
}

// TestSubmitRedactsHamrpassKeyFromHistoryAndScroll: redactSlash keeps the bearer
// token out of the debug log, but submit must also keep it out of scrollback