fix(cortex-cli): fix failing tests in glob_match and test_redact_sensitive_value (#473)

- Fix glob_match to correctly handle **/*.rs pattern by treating the suffix
  part starting with * as a wildcard extension match (e.g., *.rs matches .rs)
- Fix test_redact_sensitive_value test assertion: for 'sk-abc123xyz789' the
  last 4 chars are 'z789' not '9789' (added clarifying comment)

Co-authored-by: Droid Agent <droid@factory.ai>

Author: echobt

cortex-cli/src/debug_cmd.rs

@@ -2812,7 +2812,8 @@ mod tests {
         assert_eq!(redact_sensitive_value("12345678"), "[REDACTED]");
 
         // Longer value shows first/last 4 chars
-        assert_eq!(redact_sensitive_value("sk-abc123xyz789"), "sk-a...9789");
+        // "sk-abc123xyz789" has 15 chars: first 4 = "sk-a", last 4 = "z789"
+        assert_eq!(redact_sensitive_value("sk-abc123xyz789"), "sk-a...z789");
         assert_eq!(redact_sensitive_value("supersecretpassword"), "supe...word");
     }
 }

cortex-cli/src/exec_cmd.rs

@@ -1550,8 +1550,17 @@ fn glob_match(pattern: &str, text: &str) -> bool {
         if parts.len() == 2 {
             let prefix = parts[0].trim_end_matches('/');
             let suffix = parts[1].trim_start_matches('/');
-            return (prefix.is_empty() || text.starts_with(prefix))
-                && (suffix.is_empty() || text.ends_with(suffix));
+            let prefix_ok = prefix.is_empty() || text.starts_with(prefix);
+            let suffix_ok = if suffix.is_empty() {
+                true
+            } else if suffix.starts_with('*') {
+                // Handle patterns like **/*.rs - suffix is "*.rs"
+                let ext = &suffix[1..];
+                text.ends_with(ext)
+            } else {
+                text.ends_with(suffix)
+            };
+            return prefix_ok && suffix_ok;
         }
     }