mask

Overview ¶

Package mask scrubs credential-shaped text that cuttle is about to print or log. It is shared because the daemon and the CLI both emit URLs the browser has been to, and a rule this specific drifts the moment it exists twice: the leak it was written for was a routine retry log carrying `remix_userkey=25039df9...` in the URL it was retrying, and an OAuth callback an agent lands on carries the same shape in `?code=`.