SleuthCo.AI 9c87b53c8e security(cli): redact sensitive values in config get output (#23654) ...

* security(cli): redact sensitive values in config get output

`runConfigGet()` reads raw config values but never applies redaction
before printing. When a user runs `openclaw config get gateway.token`
the real credential is printed to the terminal, leaking it into shell
history, scrollback buffers, and screenshots.

Use the existing `redactConfigObject()` (from redact-snapshot.ts,
already used by the Web UI path) to scrub sensitive fields before
`getAtPath()` resolves the requested key.

Fixes #13683

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* CLI/Config: add redaction regression test and changelog

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Co-authored-by: Vincent Koc <vincentkoc@ieee.org>

2026-02-22 19:37:33 -05:00

..

browser-cli-actions-input

fix(browser): block upload symlink escapes (#21972)

2026-02-20 16:36:25 +00:00

cron-cli

test(cli): dedupe cron shared test fixtures

2026-02-22 07:44:56 +00:00

daemon-cli

refactor(gateway): unify credential precedence across entrypoints

2026-02-22 18:55:44 +01:00

gateway-cli

refactor(test): dedupe run-loop signal harness setup

2026-02-22 21:19:09 +00:00

node-cli

refactor(cli): share runtime status color rendering

2026-02-18 23:09:09 +00:00

nodes-cli

test(core): reduce mock reset overhead across unit and e2e specs

2026-02-22 08:22:58 +00:00

program

test: tighten mistral media and onboarding coverage

2026-02-23 00:19:05 +00:00

shared

…

update-cli

feat(update): add core auto-updater and dry-run preview

2026-02-22 17:11:36 +01:00

acp-cli.option-collisions.test.ts

test(cli): dedupe acp program setup and cover token-file errors

2026-02-21 21:40:39 +00:00

acp-cli.ts

fix(cli): correct --verbose / -v option syntax in acp commands (#21303)

2026-02-19 21:04:22 -05:00

argv.test.ts

Feat/logger support log level validation0222 (#23436)

2026-02-22 11:15:13 +01:00

argv.ts

Feat/logger support log level validation0222 (#23436)

2026-02-22 11:15:13 +01:00

banner.ts

fix(cli): correct --verbose / -v option syntax in acp commands (#21303)

2026-02-19 21:04:22 -05:00

browser-cli-actions-input.ts

…

browser-cli-actions-observe.ts

…

browser-cli-debug.ts

refactor(cli): dedupe browser debug and download opts

2026-02-18 23:34:15 +00:00

browser-cli-examples.ts

…

browser-cli-extension.test.ts

test(cli): seed stable defaults while replacing setup resets

2026-02-22 07:35:54 +00:00

browser-cli-extension.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

browser-cli-inspect.test.ts

test(cli): dedupe inspect runner and cover snapshot/screenshot mode defaults

2026-02-21 21:40:39 +00:00

browser-cli-inspect.ts

…

browser-cli-manage.ts

refactor(cli): dedupe browser tab listing output

2026-02-15 05:35:49 +00:00

browser-cli-resize.ts

refactor(cli): share browser resize output helper

2026-02-15 18:25:47 +00:00

browser-cli-shared.ts

refactor(cli): share browser resize request

2026-02-15 05:08:08 +00:00

browser-cli-state.cookies-storage.ts

CLI: resolve parent/subcommand option collisions (#18725)

2026-02-17 20:57:09 -05:00

browser-cli-state.option-collisions.test.ts

test(cli): dedupe browser state command runner and cover input validation

2026-02-21 21:40:39 +00:00

browser-cli-state.ts

CLI: resolve parent/subcommand option collisions (#18725)

2026-02-17 20:57:09 -05:00

browser-cli.test.ts

test: dedupe and optimize test suites

2026-02-19 15:19:38 +00:00

browser-cli.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

channel-auth.test.ts

fix: stop hardcoded channel fallback and auto-pick sole configured channel (#23357) (thanks @lbo728)

2026-02-22 11:21:43 +01:00

channel-auth.ts

fix: stop hardcoded channel fallback and auto-pick sole configured channel (#23357) (thanks @lbo728)

2026-02-22 11:21:43 +01:00

channel-options.ts

…

channels-cli.ts

fix: stop hardcoded channel fallback and auto-pick sole configured channel (#23357) (thanks @lbo728)

2026-02-22 11:21:43 +01:00

clawbot-cli.ts

docs: align CLI docs and help surface

2026-02-22 20:05:01 +01:00

cli-name.ts

…

cli-utils.test.ts

test(cli): table-drive repeated argv and byte-size checks

2026-02-21 23:28:07 +00:00

cli-utils.ts

…

command-format.ts

…

command-options.test.ts

test(cli): extend command option inheritance edge coverage

2026-02-21 21:40:39 +00:00

command-options.ts

CLI: resolve parent/subcommand option collisions (#18725)

2026-02-17 20:57:09 -05:00

completion-cli.ts

docs: align CLI docs and help surface

2026-02-22 20:05:01 +01:00

completion-fish.test.ts

refactor(cli): extract fish completion line builders

2026-02-22 07:44:56 +00:00

completion-fish.ts

refactor(cli): extract fish completion line builders

2026-02-22 07:44:56 +00:00

config-cli.test.ts

security(cli): redact sensitive values in config get output (#23654)

2026-02-22 19:37:33 -05:00

config-cli.ts

security(cli): redact sensitive values in config get output (#23654)

2026-02-22 19:37:33 -05:00

cron-cli.test.ts

test(cli): use lightweight clear for cron gateway mock

2026-02-22 07:35:54 +00:00

cron-cli.ts

…

daemon-cli-compat.test.ts

fix (cli): harden daemon compat shim for minimal bundle exports

2026-02-14 20:53:32 -08:00

daemon-cli-compat.ts

fix (cli): harden daemon compat shim for minimal bundle exports

2026-02-14 20:53:32 -08:00

daemon-cli.coverage.test.ts

test: move cli local suites out of e2e

2026-02-22 11:30:29 +00:00

daemon-cli.ts

…

deps.test.ts

test: dedupe repeated test fixtures and assertions

2026-02-22 18:37:25 +00:00

deps.ts

refactor(cli): share outbound send dependency mapping

2026-02-21 21:40:39 +00:00

devices-cli.test.ts

test(core): reduce mock reset overhead in targeted suites

2026-02-22 08:40:29 +00:00

devices-cli.ts

CLI: recover devices commands via local pairing fallback

2026-02-20 05:12:05 +00:00

directory-cli.ts

refactor(cli): share directory list command flow

2026-02-18 18:38:58 +00:00

dns-cli.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

docs-cli.ts

…

exec-approvals-cli.test.ts

test: dedupe and optimize test suites

2026-02-19 15:19:38 +00:00

exec-approvals-cli.ts

refactor(cli): dedupe allowlist command wiring

2026-02-22 07:44:56 +00:00

gateway-cli.coverage.test.ts

test: move cli local suites out of e2e

2026-02-22 11:30:29 +00:00

gateway-cli.ts

…

gateway-rpc.ts

…

gateway.sigterm.test.ts

test: replace slow gateway SIGTERM integration coverage

2026-02-22 17:06:35 +00:00

help-format.ts

…

hooks-cli.test.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

hooks-cli.ts

refactor(cli): share pinned npm install record helper

2026-02-22 07:44:56 +00:00

log-level-option.test.ts

Feat/logger support log level validation0222 (#23436)

2026-02-22 11:15:13 +01:00

log-level-option.ts

Feat/logger support log level validation0222 (#23436)

2026-02-22 11:15:13 +01:00

logs-cli.test.ts

test(cli): use lightweight clear for logs gateway mock

2026-02-22 07:35:54 +00:00

logs-cli.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

memory-cli.test.ts

test(cli): use lightweight clear for memory manager mock

2026-02-22 07:35:54 +00:00

memory-cli.ts

refactor(cli): centralize memory manager setup wiring

2026-02-19 06:43:36 +00:00

models-cli.test.ts

test: dedupe and optimize test suites

2026-02-19 15:19:38 +00:00

models-cli.ts

…

node-cli.ts

…

nodes-camera.test.ts

test(utils): share temp-dir helper across cli and web tests

2026-02-22 07:44:57 +00:00

nodes-camera.ts

refactor(cli): share camera clip file writer

2026-02-18 23:48:32 +00:00

nodes-canvas.ts

refactor(cli): extract shared node media helpers

2026-02-18 23:34:15 +00:00

nodes-cli.coverage.test.ts

test: dedupe and optimize test suites

2026-02-19 15:19:38 +00:00

nodes-cli.ts

…

nodes-media-utils.test.ts

refactor(cli): extract shared node media helpers

2026-02-18 23:34:15 +00:00

nodes-media-utils.ts

Security: harden tool media paths

2026-02-20 13:32:49 -06:00

nodes-run.ts

…

nodes-screen.ts

refactor(cli): extract shared node media helpers

2026-02-18 23:34:15 +00:00

npm-resolution.test.ts

refactor(cli): share pinned npm install record helper

2026-02-22 07:44:56 +00:00

npm-resolution.ts

refactor(cli): share pinned npm install record helper

2026-02-22 07:44:56 +00:00

outbound-send-deps.ts

refactor(cli): share outbound send dependency mapping

2026-02-21 21:40:39 +00:00

outbound-send-mapping.test.ts

refactor(cli): share outbound send dependency mapping

2026-02-21 21:40:39 +00:00

outbound-send-mapping.ts

refactor(cli): share outbound send dependency mapping

2026-02-21 21:40:39 +00:00

pairing-cli.test.ts

test(cli): seed stable defaults while replacing setup resets

2026-02-22 07:35:54 +00:00

pairing-cli.ts

CLI: default pairing channel for pairing commands

2026-02-20 19:59:54 -08:00

parse-bytes.ts

…

parse-duration.ts

…

parse-timeout.ts

…

plugin-registry.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

plugins-cli.ts

refactor(cli): share pinned npm install record helper

2026-02-22 07:44:56 +00:00

plugins-config.test.ts

refactor(cli): share npm install metadata helpers

2026-02-22 07:44:56 +00:00

plugins-config.ts

refactor(cli): share npm install metadata helpers

2026-02-22 07:44:56 +00:00

ports.ts

…

profile-utils.ts

…

profile.test.ts

test: dedupe and optimize test suites

2026-02-19 15:19:38 +00:00

profile.ts

…

program.force.test.ts

chore: chore: Fix types in tests 19/N.

2026-02-17 12:23:12 +09:00

program.nodes-basic.test.ts

perf(test): run nodes program tests on focused nodes-cli harness

2026-02-22 17:51:38 +00:00

program.nodes-media.test.ts

perf(test): run nodes program tests on focused nodes-cli harness

2026-02-22 17:51:38 +00:00

program.nodes-test-helpers.test.ts

test(cli): share nodes ios fixture helpers

2026-02-22 07:44:56 +00:00

program.nodes-test-helpers.ts

test(cli): share nodes ios fixture helpers

2026-02-22 07:44:56 +00:00

program.smoke.test.ts

test: trim duplicate program smoke onboarding coverage

2026-02-22 17:06:35 +00:00

program.test-mocks.ts

fix(ci): repair e2e mocks and tool schemas

2026-02-15 23:14:42 +00:00

program.ts

…

progress.test.ts

…

progress.ts

…

prompt.test.ts

chore: Fix types in tests 30/N.

2026-02-17 14:32:57 +09:00

prompt.ts

…

qr-cli.test.ts

test: dedupe and optimize test suites

2026-02-19 15:19:38 +00:00

qr-cli.ts

docs: align CLI docs and help surface

2026-02-22 20:05:01 +01:00

requirements-test-fixtures.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

respawn-policy.ts

…

route.ts

…

run-main.exit.test.ts

…

run-main.test.ts

fix(cli): correct --verbose / -v option syntax in acp commands (#21303)

2026-02-19 21:04:22 -05:00

run-main.ts

…

sandbox-cli.ts

…

security-cli.ts

CLI: improve command descriptions in help output (#18486)

2026-02-16 22:06:25 +01:00

skills-cli.commands.test.ts

refactor(cli): dedupe skills command report loading

2026-02-22 07:44:56 +00:00

skills-cli.format.ts

refactor(cli): reuse skill missing summary

2026-02-15 16:46:04 +00:00

skills-cli.formatting.test.ts

test: move local cli and config scenario suites out of e2e

2026-02-22 10:58:04 +00:00

skills-cli.test.ts

test: drop duplicate skills-cli integration coverage

2026-02-19 07:33:37 +00:00

skills-cli.ts

refactor(cli): dedupe skills command report loading

2026-02-22 07:44:56 +00:00

system-cli.test.ts

refactor(cli): dedupe system gateway action handling

2026-02-21 21:40:39 +00:00

system-cli.ts

refactor(cli): dedupe system gateway action handling

2026-02-21 21:40:39 +00:00

tagline.ts

…

test-runtime-capture.ts

fix(cli): align runtime capture helper with RuntimeEnv signature

2026-02-18 13:34:03 +00:00

tui-cli.ts

…

update-cli.option-collisions.test.ts

test: dedupe and optimize test suites

2026-02-19 15:19:38 +00:00

update-cli.test.ts

feat(update): add core auto-updater and dry-run preview

2026-02-22 17:11:36 +01:00

update-cli.ts

feat(update): add core auto-updater and dry-run preview

2026-02-22 17:11:36 +01:00

wait.ts

…

webhooks-cli.ts

refactor(agent): dedupe harness and command workflows

2026-02-16 14:59:30 +00:00

windows-argv.ts

…