from app.agent.tool_events import sanitize_tool_args, tool_event_payload def test_sanitize_secrets(): safe = sanitize_tool_args({"command": "uptime", "password": "secret123"}) assert safe["command"] == "uptime" assert safe["password"] == "••••" def test_tool_event_includes_command(): p = tool_event_payload( device="docker_vm", tool="ssh_run", args={"command": "docker ps"}, status="running", ) assert p["command"] == "docker ps" assert p["device"] == "docker_vm"