fix(core): redact secrets from session references

Author: testikun

apps/desktop/renderer-architecture.json

@@ -979,8 +979,8 @@
           "@maka/ui/icons": 1,
           "react": 1
         },
-        "importSpecifiers": 186,
-        "nonTriviaTokens": 15722
+        "importSpecifiers": 184,
+        "nonTriviaTokens": 15689
       },
       "src/renderer/use-app-shell-composer-quotes.ts": {
         "importDeclarations": 1,

docs/astryx-surface-file-inventory.md

@@ -6,7 +6,7 @@ Generated against `@astryxdesign/core@0.5.2` (194 component exports).
 
 Wiki bar: Design Conventions · API Use-the-System · Theming · Container Padding.
 
-**Totals:** 245 files — blocker 0, reimplementation 0, polish 1, aligned 244.
+**Totals:** 246 files — blocker 0, reimplementation 0, polish 1, aligned 245.
 
 ## Exclusions (explicit)
 

packages/core/src/__tests__/session-reference.test.ts

@@ -74,6 +74,24 @@ test('creates a recent, redacted snapshot and excludes non-conversation messages
   assert.equal(snapshot.reference.capturedAt, 123);
 });
 
+test('redacts secrets from retained user and assistant messages before quoting them', () => {
+  const snapshot = createSessionSnapshot(
+    [
+      user('user-secret', 'Use Authorization: Bearer sk-live-secret-token-value'),
+      assistant('assistant-secret', 'The key is sk-ant-api03-live-secret-token-value'),
+    ],
+    {
+      sessionId: 'session-source',
+      sessionName: 'Sensitive session',
+    },
+  );
+
+  assert.doesNotMatch(snapshot.text, /sk-live-secret-token-value/);
+  assert.doesNotMatch(snapshot.text, /sk-ant-api03-live-secret-token-value/);
+  assert.match(snapshot.text, /\[redacted\]/);
+  assert.doesNotMatch(sessionSnapshotToQuote(snapshot).text, /sk-live-secret-token-value/);
+});
+
 test('bounds a snapshot from the newest content and preserves truncation provenance', () => {
   const snapshot = createSessionSnapshot(
     [

packages/core/src/session-reference.ts

@@ -18,6 +18,7 @@
  */
 
 import type { QuoteRef } from './events.js';
+import { redactSecrets } from './redaction.js';
 import type { StoredMessage } from './session.js';
 import { userFacingText } from './session.js';
 
@@ -81,7 +82,7 @@ export function createSessionSnapshot(
   const candidates: SessionSnapshotItem[] = messages.flatMap((message) => {
     if (message.type !== 'user' && message.type !== 'assistant') return [];
     const text = message.type === 'user' ? userFacingText(message) : message.text;
-    const normalized = text.trim();
+    const normalized = redactSecrets(text).trim();
     if (!normalized) return [];
     return [
       {