from agent_process_dashboard.sanitize import render_argv, sanitize_argv


def test_sanitize_flags_equals_urls_and_token_shapes():
    argv, masked = sanitize_argv(
        [
            "cmd",
            "--api-key",
            "sk-abcdefghijklmnopqrstuvwxyz",
            "--token=plain",
            "OPENAI_SECRET=abc",
            "https://user:pass@example.com/path?token=abc&ok=1",
        ]
    )

    assert argv[2] == "<redacted>"
    assert argv[3] == "--token=<redacted>"
    assert argv[4] == "OPENAI_SECRET=<redacted>"
    assert "token=%3Credacted%3E" in argv[5]
    assert "<redacted>@example.com" in argv[5]
    assert masked == 4


def test_render_argv_truncates():
    rendered = render_argv(("cmd", "x" * 400), max_len=20)

    assert rendered.endswith("...")
    assert len(rendered) == 20