feat: standards polish — G7 sensor translation_key naming + entity strings, G10 protocol-push device identity on the registry card, G12 unrecorded poll-driven attributes (media player DAG internals + sensors), G14 async_redact_data with an explicit redaction list behind the marker scan (t30)

custom_components/nvidia_shield/diagnostics.py

@@ -22,8 +22,19 @@ from .connection import ShieldConnectionManager
 _REDACT_KEY_MARKERS = ("pairing", "pin", "secret", "password", "token", "key_material")
 _REDACTED = "**REDACTED**"
 
+# G14: the documented explicit redaction field list (host paths stay
+# readable; pairing/key-shaped fields are masked by async_redact_data).
+_TO_REDACT = {
+    "pairing_code",
+    "adb_pairing_code",
+    "protocol_pairing_code",
+    "serial_number",
+    "uuid",
+}
+
 
 def _redact(obj):
+    """Marker-based defensive pass (kept behind the async_redact_data helper)."""
     """Redact sensitive keys from a JSON-ish diagnostics payload."""
     if isinstance(obj, dict):
         return {
@@ -72,6 +83,14 @@ async def async_get_config_entry_diagnostics(
                 "is_on": manager.is_on,
             },
         }
+    # G14 (t30): the documented helper is the primary redaction path with
+    # an explicit field list; the marker scan above runs defensively after.
+    try:
+        from homeassistant.util.diagnostic import async_redact_data
+    except ImportError:
+        async_redact_data = None
+    if async_redact_data is not None:
+        payload = async_redact_data(payload, _TO_REDACT)
     return _redact(payload)