feat(cli): redact access_token in config output

2026-02-15 18:02:14 -08:00
parent e0cb3b96cc
commit 035deb008b
2 changed files with 11 additions and 1 deletions
@@ -74,7 +74,7 @@ export function loadConfigSafe(configPath?: string): { config?: Config; error?:

 /** Deep-clone config and replace sensitive fields with '***'. */
 export function redactSecrets(config: Record<string, unknown>): Record<string, unknown> {
-  const sensitiveKeys = ['bot_token', 'api_key', 'auth_token'];
+  const sensitiveKeys = ['bot_token', 'api_key', 'auth_token', 'access_token'];

  function redact(obj: unknown): unknown {
    if (obj === null || obj === undefined) {return obj;}