Function _scratch_dir

codeclash/utils/environment.py:14–20

Local scratch dir for staging `docker cp` transfers. Defaults to the system temp dir. Override with CODECLASH_TMPDIR (e.g. on AWS Batch, where the default temp dir misbehaves).

()

# Secret env vars whose values must never be recorded in command output / trajectories.
_SECRET_ENV_VARS = ("GITHUB_TOKEN", "LLAMA_API_KEY")


def redact_secrets(text: str | None) -> str | None:
    """Replace known secret values with a placeholder so they never land in recorded output."""
    if not text:
        return text
    for var in _SECRET_ENV_VARS:
        val = os.getenv(var)
        if val and val in text: