test(agents): cover C1 control chars in buildProviderReauthCommand

lsr911 · lsr911 · commit 015d1dbf4a4b · 2026-07-11T15:57:08.000+08:00
Add a focused regression case asserting that a provider id containing any
C1 byte (0x80-0x9f), including the U+009B CSI introducer, is rejected so no
reauthentication command with an embedded C1 escape is rendered, while a
clean provider id still produces the expected command.

Signed-off-by: lsr911 &lt;liao.shirong@xydigit.com&gt;
diff --git a/src/agents/failover-error.test.ts b/src/agents/failover-error.test.ts
@@ -1436,6 +1436,21 @@ describe("buildFailoverRemediationHint", () => {
     expect(buildProviderReauthCommand("custom\nprovider")).toBeUndefined();
   });
 
+  it("refuses C1 control characters (U+0080-U+009F) in provider ids", () => {
+    // U+009B is the CSI introducer, an alternative ANSI escape prefix (ESC [).
+    // Without the C1 range, buildProviderReauthCommand would emit a
+    // remediation command with the raw C1 byte embedded in the shell literal.
+    const CSI = String.fromCharCode(0x9b);
+    expect(buildProviderReauthCommand(`anthropic${CSI}[2J`)).toBeUndefined();
+    for (let code = 0x80; code <= 0x9f; code += 1) {
+      expect(buildProviderReauthCommand(`anthropic${String.fromCharCode(code)}`)).toBeUndefined();
+    }
+    // A clean provider id is still accepted.
+    expect(buildProviderReauthCommand("anthropic")).toBe(
+      "openclaw models auth login --provider 'anthropic' --force",
+    );
+  });
+
   it("wraps rendered provider commands in the standard CLI formatter", () => {
     expect(buildProviderReauthCommand("anthropic", { OPENCLAW_PROFILE: "work" })).toBe(
       "openclaw --profile work models auth login --provider 'anthropic' --force",
