from app.security.output_guard import filter_output


def test_api_key_redaction():
    result = filter_output("密钥是 sk-demo-fake-12345-abcdef")
    assert result.leakage_detected is True
    assert "sk-demo" not in result.filtered_output


def test_phone_redaction():
    result = filter_output("用户手机：13800138001")
    assert result.leakage_detected is True
    assert "13800138001" not in result.filtered_output