3 people 9beb3b8c6e fix(cli): mask credential env values in --help output (#3570) ...

clap renders live env var values in help text by default. Three args
carrying credentials were exposed this way:

- `BUZZ_PRIVATE_KEY` in `buzz-cli` (`crates/buzz-cli/src/lib.rs`)
- `BUZZ_AUTH_TAG` in `buzz-cli`
- `BUZZ_PRIVATE_KEY` in `buzz-acp` (`crates/buzz-acp/src/config.rs`)

Add `hide_env_values = true` to each. Env var names remain visible for
discoverability; only their runtime values are withheld from `--help`
output.

Also adds a regression guard in each crate's test module that walks the
clap command tree (recursing into subcommands for `buzz-cli`) and
asserts every arg whose env var name contains `KEY`, `SECRET`, `TOKEN`,
`PASSWORD`, `CRED`, or `AUTH` has `hide_env_values` set. This prevents
future credential-bearing args from being added without the masking in
place.

Signed-off-by: Will Pfleger <pfleger.will@gmail.com>
Co-authored-by: Duncan <dcfd242e557282d7a1e2cf2e6877522682f1e5c6156dc92ca7d90eaedd3b0f95@buzz.block.builderlab.xyz>

2026-07-29 12:23:02 -04:00

..

commands

feat(cli): add users set-status command for NIP-38 profile status (#3253)

2026-07-28 13:44:57 -04:00

agent_management.rs

Chat-first agent creation via portable buzz CLI drafts (#1878)

2026-07-15 09:24:57 -07:00

client.rs

fix(cli): retry transient relay failures and raise timeouts (#2196)

2026-07-21 12:17:44 -04:00

error.rs

fix(cli): retry transient relay failures and raise timeouts (#2196)

2026-07-21 12:17:44 -04:00

lib.rs

fix(cli): mask credential env values in --help output (#3570)

2026-07-29 12:23:02 -04:00

main.rs

refactor: rename sprout backend to buzz (#958)

2026-06-10 19:29:51 -04:00

validate.rs

chore: remove LLM-slop comments across the codebase (#1277)

2026-06-25 11:03:05 -04:00