Function redactValue

src/utils/redact.ts:8–18

(key: string, value: unknown)

const SENSITIVE_KEY_PATTERN = /(api[_-]?key|token|password|passwd|secret|authorization|auth(?!or)|access[_-]?key|private[_-]?key|client[_-]?secret|bearer|x[_-]api[_-]key|session[_-]?id)/i;

export function redactValue(key: string, value: unknown): unknown {
  if (SENSITIVE_KEY_PATTERN.test(key)) {
    if (typeof value === 'string' && value.length > 0) {
      // Keep first 2 chars so the user knows something is set, redact the rest
      const visible = value.slice(0, 2);
      return `${visible}***[redacted ${value.length} chars]`;
    }
    return '[redacted]';
  }
  return value;
}

export function redactObject<T extends Record<string, unknown>>(obj: T): Record<string, unknown> {
  const out: Record<string, unknown> = {};