Phase 1.3.3: Mask credentials in all log output#30

Open

richard-devbot wants to merge 9 commits into

CursorTouch:mainfrom

richard-devbot:richardson/phase1-credential-masking

Commits on Apr 19, 2026

security: mask credentials in all log output [#22]

authored and
Richardson Gunde
committed
test: update plugin tests to match refactored hook architecture

Richardson Gunde
authored and
Richardson Gunde
committed
fix: pass graceful_fn to _do_restart on restart [from security-hardening]

Richardson Gunde
authored and
Richardson Gunde
committed
fix: rename log_masking.py → log_filter.py per compliance requirement [#22]

authored and
Richardson Gunde
committed
docs: document install_credential_masking() handler ordering contract [#22]

Richardson Gunde
authored and
Richardson Gunde
committed
fix: mask URL DSN credentials (postgresql://, mongodb://, redis://) [#22]

Richardson Gunde
authored and
Richardson Gunde
committed
fix: add word boundary to prefix pattern to prevent false positives [#22]

Richardson Gunde
authored and
Richardson Gunde
committed
fix: update test imports for refactored tools paths [ci]

Richardson Gunde
authored and
Richardson Gunde
committed
fix: fix remaining test_agent.py and e2e imports for refactored tools [ci]

Richardson Gunde
authored and
Richardson Gunde
committed