webclaw/crates
Valerio eb8c1c93f2
fix(cli): hide secret env values in --help output (#83)
clap prints the current value of an arg's `env` var in --help by default,
which leaks secrets (e.g. `[env: WEBCLAW_API_KEY=wc_...]`) for anyone who
has them set. Add `hide_env_values = true` to every arg backed by a
credential-bearing env var so --help shows the variable name only.

Covers the CLI (WEBCLAW_API_KEY, SERPER_API_KEY, WEBCLAW_PROXY,
WEBCLAW_PROXY_FILE, WEBCLAW_WEBHOOK_URL, WEBCLAW_LLM_BASE_URL) and the
server (WEBCLAW_API_KEY).

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-02 15:12:23 +02:00
..
webclaw-cli fix(cli): hide secret env values in --help output (#83) 2026-07-02 15:12:23 +02:00
webclaw-core perf: hot-path extraction speedups (selector hoist, shared og, QuickJS gating) 2026-06-17 16:41:45 +02:00
webclaw-fetch perf: hot-path extraction speedups (selector hoist, shared og, QuickJS gating) 2026-06-17 16:41:45 +02:00
webclaw-llm feat(llm): add Gemini provider and fix stale Anthropic default model 2026-06-16 15:52:37 +02:00
webclaw-mcp fix(mcp): accept boolean params sent as JSON strings (#62) 2026-06-17 15:37:36 +02:00
webclaw-pdf Initial release: webclaw v0.1.0 — web content extraction for LLMs 2026-03-23 18:31:11 +01:00
webclaw-server fix(cli): hide secret env values in --help output (#83) 2026-07-02 15:12:23 +02:00