test(gateway): cover C1 replacement in config lookup-path log sanitizer

lsr911 · lsr911 · commit 38d1d18d11b9 · 2026-07-11T16:29:12.000+08:00
Add a regression asserting that a config path carrying a C1 byte (U+009B CSI)
is replaced with '?' by sanitizeLookupPathForLog before it reaches the
config.openFile warning log, and that no raw C1 byte survives. Assertion is
scoped to the sanitized filename so it is OS-path-prefix independent.

Signed-off-by: lsr911 &lt;liao.shirong@xydigit.com&gt;
diff --git a/src/gateway/server-methods/config.test.ts b/src/gateway/server-methods/config.test.ts
@@ -145,6 +145,27 @@ describe("config.openFile", () => {
     });
   });
 
+  it("replaces C1 control characters in the logged failed config path", async () => {
+    // U+009B is the C1 CSI introducer, an alternative ANSI escape prefix (ESC [).
+    // Assert only on the sanitized filename portion so the check is independent
+    // of the OS-specific path prefix (e.g. /tmp vs D:\tmp).
+    const CSI = String.fromCharCode(0x9b);
+    await withEnvAsync({ OPENCLAW_CONFIG_PATH: `/tmp/cfg${CSI}.json` }, async () => {
+      mockExecFileError(new Error("open failed"));
+
+      const { logGateway } = await invokeConfigOpenFile();
+
+      const logged = String(
+        (logGateway.warn as unknown as { mock: { calls: unknown[][] } }).mock.calls.at(-1)?.[0] ??
+          "",
+      );
+      expect(logged.startsWith("config.openFile failed path=")).toBe(true);
+      // The raw C1 byte is replaced with "?" before it reaches the warning log.
+      expect(logged).toContain("cfg?.json");
+      expect(logged).not.toContain(CSI);
+    });
+  });
+
   it("returns actionable headless environment error when xdg-open reports no method available", async () => {
     await withEnvAsync({ OPENCLAW_CONFIG_PATH: "/tmp/config.json" }, async () => {
       mockExecFileError(new Error("xdg-open: no method available for opening '/tmp/config.json'"));
