2 Commits

Author	SHA1	Message	Date
Teknium	b267516851	fix: also exclude .env from default profile exports ... The original PR excluded auth.json from _DEFAULT_EXPORT_EXCLUDE_ROOT and filtered both auth.json and .env from named profile exports, but missed adding .env to the default profile exclusion set. Default exports would still leak .env containing API keys. Added .env to _DEFAULT_EXPORT_EXCLUDE_ROOT, added test coverage, and updated the existing test that incorrectly asserted .env presence.	2026-04-01 11:20:33 -07:00
dieutx	d435acc2c0	fix(security): exclude auth.json and .env from profile exports	2026-04-01 11:20:33 -07:00