Function scrubGitSecrets

apps/sim/executor/handlers/pi/cloud-backend.ts:130–133

* Redacts the GitHub token from git output before it is surfaced in an error. * Removes the literal token and any URL userinfo (`//user:token@`), so a failure * message can quote git's real stderr without leaking the credential.

(text: string, token: string)

 * message can quote git's real stderr without leaking the credential.
 */
function scrubGitSecrets(text: string, token: string): string {
  const withoutToken = token ? text.split(token).join('***') : text
  return withoutToken.replace(/\/\/[^/@\s]+@/g, '//***@')
}

function buildPrBody(task: string, finalText: string): string {
  const summary = finalText.trim()