security(cli): mask credentials in command output; keep workspace key off broker argv - #1380

Merged

willwashburn merged 4 commits into

mainfrom

security/cli-secret-output-redaction

Jul 30, 2026

Commits on Jul 29, 2026

security(cli): mask credentials in command output; drop workspace key from broker argv

relay
and
claude
committed
security(cloud): redact credentials in endpoint error text; cld_at_ prefix; observer URL template

relay
and
claude
committed
security(cli): close review findings — background argv, error redaction parity, unknown-option echo, workspace key read-back

relay
and
claude
committed

Commits on Jul 30, 2026

fix(cli): omit unusable masked observer link
relay
committed