#[tokio::test]
async fn rejects_whitespace_command_executable() {
    let result = envseal_mcp::tools::run::execute(envseal_mcp::tools::run::RunParams {
        command: vec!["   ".to_string(), "arg".to_string()],
    })
    .await;

    let err = result.expect_err("expected whitespace executable to be rejected");
    assert!(
        err.contains("command executable must not be empty"),
        "unexpected error: {err}"
    );
}
