Redact secrets in logs

packages/core-utils/src/string/index.ts

@@ -1,2 +1,3 @@
 export * from './chapters.js'
 export * from './hash.js'
+export * from './secret.js'

packages/core-utils/src/string/secret.ts

@@ -0,0 +1,9 @@
+export function maskSecret (secret: string) {
+  if (!secret) return secret
+  if (typeof secret !== 'string') return '****'
+
+  if (secret.length <= 4) return '****'
+  if (secret.length <= 8) return secret.slice(0, 2) + '***'
+
+  return secret.slice(0, 4) + '****'
+}