Redact tool arguments in approval requests before exposing to metadata

- Apply redact_tool_arguments to ApprovalRequest.to_dict() so sensitive
  fields (content, command, new, old) are redacted in pending_approval
  and run_paused audit events and CLI/TUI payloads

Author: johnteee

teaagent/runner.py

@@ -5,7 +5,7 @@
 from typing import Any, Optional, Union
 from uuid import uuid4
 
-from teaagent.audit import AuditLogger
+from teaagent.audit import AuditLogger, redact_tool_arguments
 from teaagent.budget import RunBudget
 from teaagent.context import ContextCompactor
 from teaagent.errors import (
@@ -47,7 +47,7 @@ def to_dict(self) -> dict[str, Any]:
         return {
             'call_id': self.call_id,
             'tool_name': self.tool_name,
-            'arguments': self.arguments,
+            'arguments': redact_tool_arguments(self.arguments),
             'reason': self.reason,
             'annotations': self.annotations,
         }

tests/test_chat_agent.py

@@ -18,6 +18,7 @@
     parse_model_decision,
     run_chat_agent,
 )
+from teaagent.audit import AUDIT_REDACTED
 from teaagent.cli import main
 from teaagent.errors import ToolPermissionError
 from teaagent.runner import ToolRequest
@@ -299,6 +300,10 @@ def test_cli_agent_run_returns_pending_approval_for_unapproved_write(self) -> No
             self.assertEqual(exit_code, 1)
             self.assertEqual(payload['status'], 'pending_approval')
             self.assertEqual(payload['approval']['call_id'], 'write-1')
+            self.assertEqual(payload['approval']['arguments']['path'], 'x.txt')
+            self.assertEqual(
+                payload['approval']['arguments']['content'], AUDIT_REDACTED
+            )
 
     def test_cli_agent_run_hitl_approval_continues_same_run(self) -> None:
         with tempfile.TemporaryDirectory() as tmp:

tests/test_p0_harness.py

@@ -76,6 +76,7 @@ def decide(_context):
 
         self.assertEqual(result.status, 'pending_approval')
         self.assertEqual(result.metadata['approval']['call_id'], 'call-1')
+        self.assertEqual(result.metadata['approval']['arguments']['value'], 'delete')
         pending = [
             event
             for event in audit.events

tests/test_run_store.py

@@ -8,6 +8,7 @@
 from pathlib import Path
 
 from teaagent import FinalAnswer, RunStore
+from teaagent.audit import AUDIT_REDACTED
 from teaagent.cli import main
 from teaagent.runner import RunResult
 
@@ -213,6 +214,7 @@ def test_pending_approval_for_run_returns_last_unresolved(self) -> None:
             self.assertEqual(pending['call_id'], 'write-1')
             self.assertEqual(pending['tool_name'], 'workspace_write_file')
             self.assertEqual(pending['arguments']['path'], 'x.txt')
+            self.assertEqual(pending['arguments']['content'], AUDIT_REDACTED)
 
     def test_pending_approval_for_run_clears_after_resolution(self) -> None:
         with tempfile.TemporaryDirectory() as tmp: