From ffedc84cfb42e20cf50e8f1a5554384ab3dee3fd Mon Sep 17 00:00:00 2001
From: Nic O'Connor <nic.oconnor@gmail.com>
Date: Fri, 18 Sep 2026 11:59:02 -0400
Subject: [PATCH] secrets: widen the token mask to 10 stars and label
 first/last 10

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 secrets/install.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/secrets/install.sh b/secrets/install.sh
index 78db6fb..e3ee9c9 100755
--- a/secrets/install.sh
+++ b/secrets/install.sh
@@ -86,7 +86,7 @@ ask() {
 mask() {
   printf '%s' "$1" | awk '{ n = length($0)
     if (n <= 20) printf "%s (%d chars)", "(too short)", n
-    else printf "%s**%s (%d chars)", substr($0, 1, 10), substr($0, n - 9), n }'
+    else printf "%s**********%s (first 10 + last 10 of %d chars)", substr($0, 1, 10), substr($0, n - 9), n }'
 }
 
 if [ -z "$OP_SERVICE_ACCOUNT_TOKEN" ] && [ -f "$SECRETS_ENV" ]; then