Valerio eb8c1c93f2 fix(cli): hide secret env values in --help output (#83) ... clap prints the current value of an arg's `env` var in --help by default, which leaks secrets (e.g. `[env: WEBCLAW_API_KEY=wc_...]`) for anyone who has them set. Add `hide_env_values = true` to every arg backed by a credential-bearing env var so --help shows the variable name only. Covers the CLI (WEBCLAW_API_KEY, SERPER_API_KEY, WEBCLAW_PROXY, WEBCLAW_PROXY_FILE, WEBCLAW_WEBHOOK_URL, WEBCLAW_LLM_BASE_URL) and the server (WEBCLAW_API_KEY). Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>		2026-07-02 15:12:23 +02:00
..
bench.rs	feat(cli): add webclaw bench <url> subcommand (closes #26)	2026-04-22 12:25:29 +02:00
main.rs	fix(cli): hide secret env values in --help output (#83)	2026-07-02 15:12:23 +02:00