From 1637dc31226679c76a96af5e2e1d4d6e9fda42e2 Mon Sep 17 00:00:00 2001
From: rootiest <chris@rootiest.com>
Date: Mon, 8 Jun 2026 22:24:31 -0400
Subject: [PATCH] fix(sponge): use $$var[1] to avoid test arg-count error on
 array vars

---
 conf.d/sponge_privacy.fish           | 4 +++-
 functions/sponge_filter_secrets.fish | 3 ++-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/conf.d/sponge_privacy.fish b/conf.d/sponge_privacy.fish
index 675fd5b..f57da80 100644
--- a/conf.d/sponge_privacy.fish
+++ b/conf.d/sponge_privacy.fish
@@ -89,7 +89,9 @@ function __sponge_register_secret_values --on-event fish_prompt
         '(?i)(?:TOKEN|PASSWORD|PASSWD|SECRET|API[_-]KEY|PRIVATE[_-]KEY|ACCESS[_-]KEY|AUTH[_-]KEY|CREDENTIAL|KOPIA_PASSWORD)')
 
     for var in $sensitive_vars
-        set -l value $$var
+        # Take only the first element — array vars yield multiple values which
+        # would make `test (string length ...)` receive too many arguments.
+        set -l value $$var[1]
         # Skip empty, short, or path-like values
         test (string length -- $value) -gt 8; or continue
         string match --quiet --regex '^[/~]' -- $value; and continue
diff --git a/functions/sponge_filter_secrets.fish b/functions/sponge_filter_secrets.fish
index b6e7f36..fd4d171 100644
--- a/functions/sponge_filter_secrets.fish
+++ b/functions/sponge_filter_secrets.fish
@@ -35,7 +35,8 @@ function sponge_filter_secrets --argument-names command
         '(?i)(?:TOKEN|PASSWORD|PASSWD|SECRET|API[_-]KEY|PRIVATE[_-]KEY|ACCESS[_-]KEY|AUTH[_-]KEY|CREDENTIAL|KOPIA_PASSWORD)')
 
     for var in $sensitive_vars
-        set -l value $$var
+        # Take only the first element — array vars yield multiple values
+        set -l value $$var[1]
 
         # Skip empty, short, or path-like values — not real credentials
         test (string length -- $value) -gt 8; or continue