zeroclaw/src/memory
agorevski 52f72692ba fix(security): remove sensitive fields from Debug impls
Resolve 18 CodeQL cleartext-logging/cleartext-transmission alerts by
removing sensitive data from Debug output entirely rather than redacting.

Changes:
- memory/mod.rs: omit api_key from ResolvedEmbeddingConfig Debug
- tools/browser.rs: omit api_key from ComputerUseConfig Debug
- providers/mod.rs: omit access_token/refresh_token from
  QwenOauthCredentials Debug, credential from QwenOauthProviderContext
- memory/traits.rs: custom Debug for MemoryEntry omitting session_id
- auth/profiles.rs: custom Debug for AuthProfile omitting token,
  token_set, account_id
- channels/matrix.rs: add Debug impl for MatrixChannel omitting
  access_token
- channels/qq.rs: sanitize user_id before URL interpolation
- channels/whatsapp_storage.rs: document false-positive analysis

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-20 22:06:21 -08:00
..
backend.rs feat: reduce release binary size with opt-in heavy features 2026-02-21 02:23:59 +08:00
chunker.rs perf: eliminate unnecessary heap allocations across agent loop, memory, and channels 2026-02-19 07:06:27 -08:00
cli.rs chore(fmt): apply rustfmt after main rebase 2026-02-21 12:09:06 +08:00
embeddings.rs fix(memory): add openrouter as recognized embedding provider 2026-02-19 15:10:25 -05:00
hygiene.rs feat(memory): add session_id isolation to Memory trait (#530) 2026-02-17 07:44:05 -05:00
lucid.rs fix(tests): increase lucid memory test timeouts to prevent flakiness 2026-02-21 12:01:38 +08:00
markdown.rs chore: Remove blocking read strings 2026-02-19 14:52:29 +08:00
mod.rs fix(security): remove sensitive fields from Debug impls 2026-02-20 22:06:21 -08:00
none.rs feat(memory): add session_id isolation to Memory trait (#530) 2026-02-17 07:44:05 -05:00
postgres.rs fix(memory): avoid tokio runtime panic when initializing postgres backend 2026-02-20 16:21:25 +08:00
response_cache.rs readd tests, remove markdown files 2026-02-18 14:42:39 +08:00
snapshot.rs fix(build): complete strict lint and test cleanup (replacement for #476) 2026-02-18 00:18:54 +08:00
sqlite.rs fix(security): prevent cleartext logging of sensitive data 2026-02-18 20:12:45 -08:00
traits.rs fix(security): remove sensitive fields from Debug impls 2026-02-20 22:06:21 -08:00
vector.rs fix: resolve all clippy --all-targets warnings across 15 files 2026-02-14 03:52:57 -05:00