from __future__ import annotations

from cloud.observability import redact_sensitive_fields


def test_sensitive_payload_fields_are_redacted_recursively() -> None:
    payload = {
        "authorization": "Bearer secret",
        "task_id": "task-a",
        "result": {
            "screenshot": "base64-data",
            "ui_tree": {"typed_text": "private input"},
        },
    }

    redacted = redact_sensitive_fields(payload)

    assert redacted == {
        "authorization": "[REDACTED]",
        "task_id": "task-a",
        "result": {
            "screenshot": "[REDACTED]",
            "ui_tree": "[REDACTED]",
        },
    }