Reuse credential discovery and diagnostic redactors

internal/framework/llm/diagnostics.go

@@ -23,13 +23,13 @@ type InteractionArtifacts struct {
 
 // DiagnosticsWriter writes generic machine-readable LLM interaction artifacts.
 type DiagnosticsWriter struct {
-	dir     string
-	secrets []string
+	dir      string
+	redactor redaction.Redactor
 }
 
 // NewDiagnosticsWriter creates a diagnostics writer rooted at dir.
 func NewDiagnosticsWriter(dir string, secrets []string) *DiagnosticsWriter {
-	return &DiagnosticsWriter{dir: dir, secrets: append([]string(nil), secrets...)}
+	return &DiagnosticsWriter{dir: dir, redactor: redaction.New(secrets)}
 }
 
 // WriteInteraction writes request/response/error artifacts for a generic LLM
@@ -82,7 +82,7 @@ func sanitizeStageName(stage string) string {
 }
 
 func (w *DiagnosticsWriter) writeJSON(path string, payload any) error {
-	redacted, err := redaction.New(w.secrets).JSON(payload)
+	redacted, err := w.redactor.JSON(payload)
 	if err != nil {
 		return fmt.Errorf("marshal json artifact %q: %w", filepath.Base(path), err)
 	}