feat(cli): add --case-sensitive option to har:sanitize command

Add support for case-sensitive matching via the --case-sensitive flag.
By default, field name matching is case-insensitive. When enabled,
only exact case matches will be redacted.

Usage:
  har:sanitize input.har output.har --query-param api_key --case-sensitive

Author: claude

src/Command/SanitizeCommand.php

@@ -27,7 +27,8 @@ protected function configure(): void
             ->addArgument('output', InputArgument::OPTIONAL, 'The output file path. Defaults to stdout.')
             ->addOption('header', null, InputOption::VALUE_REQUIRED | InputOption::VALUE_IS_ARRAY, 'Header name to redact (can be specified multiple times).')
             ->addOption('query-param', null, InputOption::VALUE_REQUIRED | InputOption::VALUE_IS_ARRAY, 'Query parameter name to redact (can be specified multiple times).')
-            ->addOption('body-field', null, InputOption::VALUE_REQUIRED | InputOption::VALUE_IS_ARRAY, 'Body field name to redact (can be specified multiple times).');
+            ->addOption('body-field', null, InputOption::VALUE_REQUIRED | InputOption::VALUE_IS_ARRAY, 'Body field name to redact (can be specified multiple times).')
+            ->addOption('case-sensitive', null, InputOption::VALUE_NONE, 'Use case-sensitive matching for field names. Defaults to case-insensitive.');
     }
 
     protected function execute(InputInterface $input, OutputInterface $output): int
@@ -59,6 +60,10 @@ protected function execute(InputInterface $input, OutputInterface $output): int
 
         $sanitizer = new HarSanitizer();
 
+        if ($input->getOption('case-sensitive')) {
+            $sanitizer->setCaseSensitive(true);
+        }
+
         $headers = $input->getOption('header');
         if (!empty($headers)) {
             $sanitizer->redactHeaders($headers);

tests/src/Functional/SanitizeCommandTest.php

@@ -188,6 +188,8 @@ public function testCommandConfiguration(): void
         $this->assertTrue($definition->getOption('query-param')->isArray());
         $this->assertTrue($definition->hasOption('body-field'));
         $this->assertTrue($definition->getOption('body-field')->isArray());
+        $this->assertTrue($definition->hasOption('case-sensitive'));
+        $this->assertFalse($definition->getOption('case-sensitive')->isArray());
     }
 
     public function testSanitizeWithNoOptions(): void
@@ -405,6 +407,65 @@ public function testSanitizeAllOptionsTogether(): void
         $this->assertEquals('john', $bodyMap['username']);
     }
 
+    public function testCaseInsensitiveMatchingByDefault(): void
+    {
+        $harFile = $this->createHarFileWithQueryParams([
+            'API_KEY' => 'secret-key',
+            'Token' => 'auth-token',
+        ]);
+        $outputFile = $this->tempDir.'/sanitized.har';
+
+        // By default, matching is case-insensitive
+        $this->commandTester->execute([
+            'har' => $harFile,
+            'output' => $outputFile,
+            '--query-param' => ['api_key', 'token'],
+        ]);
+
+        $this->assertSame(Command::SUCCESS, $this->commandTester->getStatusCode());
+
+        $serializer = new Serializer();
+        $sanitized = $serializer->deserializeHar(file_get_contents($outputFile));
+
+        $params = $sanitized->getLog()->getEntries()[0]->getRequest()->getQueryString();
+        $paramMap = $this->paramsToMap($params);
+
+        // Both should be redacted despite case mismatch
+        $this->assertEquals('[REDACTED]', $paramMap['API_KEY']);
+        $this->assertEquals('[REDACTED]', $paramMap['Token']);
+    }
+
+    public function testCaseSensitiveMatchingWhenEnabled(): void
+    {
+        $harFile = $this->createHarFileWithQueryParams([
+            'API_KEY' => 'secret-key',
+            'api_key' => 'another-key',
+            'Token' => 'auth-token',
+        ]);
+        $outputFile = $this->tempDir.'/sanitized.har';
+
+        // With case-sensitive enabled, only exact matches should be redacted
+        $this->commandTester->execute([
+            'har' => $harFile,
+            'output' => $outputFile,
+            '--query-param' => ['api_key'],
+            '--case-sensitive' => true,
+        ]);
+
+        $this->assertSame(Command::SUCCESS, $this->commandTester->getStatusCode());
+
+        $serializer = new Serializer();
+        $sanitized = $serializer->deserializeHar(file_get_contents($outputFile));
+
+        $params = $sanitized->getLog()->getEntries()[0]->getRequest()->getQueryString();
+        $paramMap = $this->paramsToMap($params);
+
+        // Only exact case match should be redacted
+        $this->assertEquals('secret-key', $paramMap['API_KEY']);
+        $this->assertEquals('[REDACTED]', $paramMap['api_key']);
+        $this->assertEquals('auth-token', $paramMap['Token']);
+    }
+
     /**
      * @param \Deviantintegral\Har\Header[] $headers
      *