Function redactSecrets

src/engine.ts:312–317

(s: string)

 * `~/.fieldtheory/library/log.md` forever.
 */
export function redactSecrets(s: string): string {
  return s
    .replace(/\bsk-[A-Za-z0-9_-]{16,}/g, 'sk-***REDACTED***')
    .replace(/\b(ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{16,}/g, '$1_***REDACTED***')
    .replace(/\bBearer\s+[A-Za-z0-9._-]{16,}/gi, 'Bearer ***REDACTED***');
}

/** Build a user-facing failure message. Deliberately does NOT inline the
 *  prompt — see EngineInvocationError for why. */