"""Retired legacy Streamlit helpers.

The unauthenticated UI no longer exposes finding payloads or credentials. Use
dashboard.py for redacted observability metadata.
"""


def extract_secret_value(finding):
    """Return only an existing redacted representation for legacy callers."""
    if not isinstance(finding, dict):
        return 'N/A'
    return str(finding.get('Redacted') or finding.get('redacted_secret') or '***REDACTED***')