Function TestToolInvokeCommandInputs

internal/cli/tool_test.go:138–449

(t *testing.T)

}

func TestToolInvokeCommandInputs(t *testing.T) {
	t.Parallel()

	t.Run("Should invoke with inline json and redact sensitive result fields", func(t *testing.T) {
		t.Parallel()

		client := &stubClient{
			invokeToolFn: func(_ context.Context, id string, request ToolInvokeRequest) (ToolInvokeResponseRecord, error) {
				if id != toolspkg.ToolIDToolInfo.String() {
					t.Fatalf("InvokeTool id = %q, want %q", id, toolspkg.ToolIDToolInfo)
				}
				if got, want := string(request.Input), `{"tool_id":"agh__skill_view"}`; got != want {
					t.Fatalf("InvokeTool input = %s, want %s", got, want)
				}
				if len(request.SensitiveInputFields) != 1 || request.SensitiveInputFields[0] != "token" {
					t.Fatalf("SensitiveInputFields = %#v, want token", request.SensitiveInputFields)
				}
				return ToolInvokeResponseRecord{
					ToolID:     toolspkg.ToolIDToolInfo,
					Status:     "completed",
					DurationMS: 9,
					Result: toolspkg.ToolResult{
						Preview:    "token=super-secret",
						Structured: json.RawMessage(`{"token":"super-secret","visible":"ok"}`),
						DurationMS: 9,
					},
					Events: []contract.ToolCallEventPayload{},
				}, nil
			},
		}
		stdout, _, err := executeRootCommand(
			t,
			newTestDeps(t, client),
			"tool",
			"invoke",
			toolspkg.ToolIDToolInfo.String(),
			"--input",
			`{"tool_id":"agh__skill_view"}`,
			"--sensitive-input-field",
			"token",
			"-o",
			"json",
		)
		if err != nil {
			t.Fatalf("tool invoke inline error = %v", err)
		}
		if strings.Contains(stdout, "super-secret") {
			t.Fatalf("tool invoke output leaked secret: %s", stdout)
		}

		var response ToolInvokeResponseRecord
		decodeJSONOutput(t, stdout, &response)
		if got, want := compactJSON(response.Result.Structured), `{"token":"[REDACTED]","visible":"ok"}`; got != want {
			t.Fatalf("structured result = %s, want %s", got, want)
		}
	})

	t.Run("Should invoke with json input file", func(t *testing.T) {