Function sanitizeToolOutput

src/security/sanitize.js:234–240

* Sanitize a tool result string before adding it to model context: * 1. Strip ANSI / C1 controls * 2. Redact secrets * 3. Normalize line endings

(input)

 *   3. Normalize line endings
 */
function sanitizeToolOutput(input) {
  if (typeof input !== 'string') return input;
  let out = stripAnsi(input);
  out = redactString(out);
  out = out.replace(/\r\n/g, '\n');
  return out;
}

// ─── Listener leak guard (for long-running stdio servers) ───────────────────