teknium1 57b48a81ca feat: add config toggle to disable secret redaction ...

New config option:

  security:
    redact_secrets: false  # default: true

When set to false, API keys, tokens, and passwords are shown in
full in read_file, search_files, and terminal output. Useful for
debugging auth issues where you need to verify the actual key value.

Bridged to both CLI and gateway via HERMES_REDACT_SECRETS env var.
The check is in redact_sensitive_text() itself, so all call sites
(terminal, file tools, log formatter) respect it.

2026-03-09 01:04:33 -07:00

177 KiB

Executable File

Raw Blame History

View Raw