const displaySubsystem =

opts.style === "json" ? opts.subsystem : formatSubsystemForConsole(opts.subsystem);

if (opts.style === "json") {

return JSON.stringify({

time: formatConsoleTimestamp("json"),

level: opts.level,

subsystem: displaySubsystem,

message: opts.message,

...opts.meta,

});

return redactSensitiveText(

JSON.stringify({

time: formatConsoleTimestamp("json"),

level: opts.level,

subsystem: displaySubsystem,

message: opts.message,

...opts.meta,

}),

);

}

const color = getColorForConsole();

const prefix = `[${displaySubsystem}]`;

: opts.level === "debug" || opts.level === "trace"

? color.gray

: color.cyan;

const displayMessage = stripRedundantSubsystemPrefixForConsole(opts.message, displaySubsystem);

const redactedMessage = redactSensitiveText(opts.message);

const displayMessage = stripRedundantSubsystemPrefixForConsole(redactedMessage, displaySubsystem);

const time = (() => {

if (opts.style === "pretty") {

return color.gray(formatConsoleTimestamp("pretty"));

return `${head} ${levelColor(displayMessage)}`;

}

function writeConsoleLine(level: LogLevel, line: string) {

function writeConsoleLine(level: LogLevel, line: string, opts: { redacted?: boolean } = {}) {

clearActiveProgressLine();

const sanitized =

process.platform === "win32" && process.env.GITHUB_ACTIONS === "true"

? line.replace(/[\uD800-\uDBFF][\uDC00-\uDFFF]/g, "?").replace(/[\uD800-\uDFFF]/g, "?")

: line;

// Subsystem console output bypasses the patched console.* capture handler in

// ./console.ts to avoid recursion, so the sink-boundary redaction applied

// there does not run for these writes (#73284). Redact at this exit instead

// so secrets reaching subsystem loggers as message strings or formatted meta

// do not appear verbatim on the terminal.

const redacted = redactSensitiveText(sanitized);

// ./console.ts to avoid recursion. Normal formatted messages are redacted

// before colorization; keep this exit guard for raw writes and structured

// lines that reach the sink already serialized (#73284).

const redacted = opts.redacted ? sanitized : redactSensitiveText(sanitized);

const sink = loggingState.rawConsole ?? console;

if (loggingState.forceConsoleToStderr || level === "error" || level === "fatal") {

(sink.error ?? console.error)(redacted);

style: consoleSettings.style,

meta: fileMeta,

}),

{ redacted: true },

);

};