fix(storage): redact credentials in driver errors + advisory lock (FED-M1-10) (#479)

packages/storage/src/tier-detection.ts

@@ -12,6 +12,7 @@
 
 import postgres from 'postgres';
 import { Redis } from 'ioredis';
+import { redactErrMsg } from './redact-error.js';
 
 /* ------------------------------------------------------------------ */
 /*  Local structural type — avoids circular dependency                  */
@@ -159,7 +160,7 @@ async function probePostgresMeasured(url: string): Promise<ProbeResult> {
       port,
       durationMs: Date.now() - start,
       error: {
-        message: cause instanceof Error ? cause.message : String(cause),
+        message: redactErrMsg(cause instanceof Error ? cause.message : String(cause)),
         remediation:
           'Start Postgres: `docker compose -f docker-compose.federated.yml --profile federated up -d postgres-federated`',
       },
@@ -231,7 +232,10 @@ async function probePgvectorMeasured(url: string): Promise<ProbeResult> {
       host,
       port,
       durationMs: Date.now() - start,
-      error: { message: cause instanceof Error ? cause.message : String(cause), remediation },
+      error: {
+        message: redactErrMsg(cause instanceof Error ? cause.message : String(cause)),
+        remediation,
+      },
     };
   } finally {
     if (sql) {
@@ -299,7 +303,7 @@ async function probeValkeyMeasured(url: string): Promise<ProbeResult> {
       port,
       durationMs: Date.now() - start,
       error: {
-        message: cause instanceof Error ? cause.message : String(cause),
+        message: redactErrMsg(cause instanceof Error ? cause.message : String(cause)),
         remediation:
           'Start Valkey: `docker compose -f docker-compose.federated.yml --profile federated up -d valkey-federated`',
       },