Sanitize and bound raw HTTP response body in BitbucketResponseError

Truncate the response body to 512 characters before storing it in
BitbucketResponseError.responseBody. This prevents sensitive data
exposure (tokens, internal paths) and excessively large error payloads
(HTML error pages) from propagating through error chains and logs.

The bound is applied in the responseError() helper before constructing
the error, consistent with the existing transportSafeSourceControlErrorValue
pattern used elsewhere in the source control layer.

Author: cursoragent

apps/server/src/sourceControl/BitbucketApi.ts

@@ -27,6 +27,8 @@ import * as VcsDriverRegistry from "../vcs/VcsDriverRegistry.ts";
 
 const DEFAULT_API_BASE_URL = "https://api.bitbucket.org/2.0";
 
+const MAX_RESPONSE_BODY_LENGTH = 512;
+
 const BitbucketApiEnvConfig = Config.all({
   baseUrl: Config.string("T3CODE_BITBUCKET_API_BASE_URL").pipe(
     Config.withDefault(DEFAULT_API_BASE_URL),
@@ -488,15 +490,20 @@ function responseError(
           cause,
         }),
     ),
-    Effect.flatMap((body) =>
-      Effect.fail(
+    Effect.flatMap((body) => {
+      const trimmed = body.trim();
+      const bounded =
+        trimmed.length > MAX_RESPONSE_BODY_LENGTH
+          ? `${trimmed.slice(0, MAX_RESPONSE_BODY_LENGTH)}…`
+          : trimmed;
+      return Effect.fail(
         new BitbucketResponseError({
           operation,
           status: response.status,
-          responseBody: body,
+          responseBody: bounded,
         }),
-      ),
-    ),
+      );
+    }),
   );
 }