zeroclaw/src
agorevski 52f72692ba fix(security): remove sensitive fields from Debug impls
Resolve 18 CodeQL cleartext-logging/cleartext-transmission alerts by
removing sensitive data from Debug output entirely rather than redacting.

Changes:
- memory/mod.rs: omit api_key from ResolvedEmbeddingConfig Debug
- tools/browser.rs: omit api_key from ComputerUseConfig Debug
- providers/mod.rs: omit access_token/refresh_token from
  QwenOauthCredentials Debug, credential from QwenOauthProviderContext
- memory/traits.rs: custom Debug for MemoryEntry omitting session_id
- auth/profiles.rs: custom Debug for AuthProfile omitting token,
  token_set, account_id
- channels/matrix.rs: add Debug impl for MatrixChannel omitting
  access_token
- channels/qq.rs: sanitize user_id before URL interpolation
- channels/whatsapp_storage.rs: document false-positive analysis

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-20 22:06:21 -08:00
..
agent fix: resolve clippy warnings and rustfmt across codebase 2026-02-21 12:39:34 +08:00
approval refactor(sync): migrate remaining std mutex usage to parking_lot 2026-02-18 00:45:26 +08:00
auth fix(security): remove sensitive fields from Debug impls 2026-02-20 22:06:21 -08:00
channels fix(security): remove sensitive fields from Debug impls 2026-02-20 22:06:21 -08:00
config feat(channel): add Nostr channel with NIP-04 and NIP-17 support 2026-02-21 13:16:20 +08:00
cost fix(agent): parse MiniMax tool call formats for execution 2026-02-21 12:36:28 +08:00
cron fix: resolve all compilation, test, and fmt errors on main 2026-02-21 12:09:06 +08:00
daemon feat(channel): add Nostr channel with NIP-04 and NIP-17 support 2026-02-21 13:16:20 +08:00
doctor fix(onboard): make model refresh and doctor model checks async-safe 2026-02-21 13:03:10 +08:00
gateway feat(observability): wire token usage through observer events 2026-02-21 12:29:02 +08:00
hardware fix(ci): restore containerized validation on main (#1096) 2026-02-20 07:48:58 -05:00
health refactor(sync): migrate remaining std mutex usage to parking_lot 2026-02-18 00:45:26 +08:00
heartbeat test: deepen and complete project-wide test coverage (#297) 2026-02-16 05:58:24 -05:00
integrations fix(onboard): require explicit overwrite confirmation for existing config 2026-02-21 02:25:21 +08:00
memory fix(security): remove sensitive fields from Debug impls 2026-02-20 22:06:21 -08:00
observability test(provider): fix ChatResponse usage in reliable mocks 2026-02-21 12:46:22 +08:00
onboard fix: adjust wizard padding 2026-02-21 13:16:20 +08:00
peripherals fix(ci): restore containerized validation on main (#1096) 2026-02-20 07:48:58 -05:00
providers fix(security): remove sensitive fields from Debug impls 2026-02-20 22:06:21 -08:00
rag chore(lint): extend low-risk clippy cleanup batch 2026-02-17 16:40:58 +08:00
runtime docs(code): expand doc comments on security, observability, runtime, and peripheral traits 2026-02-19 13:19:46 -08:00
security fix: resolve clippy warnings and rustfmt across codebase 2026-02-21 12:39:34 +08:00
service fix: resolve all compilation, test, and fmt errors on main 2026-02-21 12:09:06 +08:00
skillforge chore: Remove blocking read strings 2026-02-19 14:52:29 +08:00
skills feat(skills): add configurable compact skills prompt injection 2026-02-21 00:00:51 +08:00
tools fix(security): remove sensitive fields from Debug impls 2026-02-20 22:06:21 -08:00
tunnel feat(proxy): add scoped proxy configuration and docs runbooks 2026-02-18 22:10:42 +08:00
identity.rs test: cover deterministic HashMap ordering paths 2026-02-18 21:55:40 +08:00
lib.rs fix(cli): restore shared command enum wiring 2026-02-21 11:57:29 +08:00
main.rs fix(onboard): make model refresh and doctor model checks async-safe 2026-02-21 13:03:10 +08:00
migration.rs readd tests, remove markdown files 2026-02-18 14:42:39 +08:00
multimodal.rs fix: resolve clippy warnings and rustfmt across codebase 2026-02-21 12:39:34 +08:00
util.rs fix(ci): restore containerized validation on main (#1096) 2026-02-20 07:48:58 -05:00