romtuck/openclaw
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: prevent auth credential logs from leaking into GChat messages

Browse Source 
Change log level from info to debug for credential read/write operations
in cli-credentials.ts. These diagnostic messages were appearing as raw
ANSI-colored text prepended to GChat messages because they were going
to stdout at info level.

Affected log messages:
- "read codex credentials from keychain"
- "read anthropic credentials from claude cli keychain"
- "wrote refreshed credentials to claude cli keychain"
- "wrote refreshed credentials to claude cli file"

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Justin Massa 2026-01-19 14:05:30 -06:00
parent 3f1dacb8fc
commit ed776dd788
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/agents/cli-credentials.ts
View File

@ -120,7 +120,7 @@ function readCodexKeychainCredentials(options?: {
? lastRefresh + 60 * 60 * 1000
: Date.now() + 60 * 60 * 1000;
log.info("read codex credentials from keychain", {
log.debug("read codex credentials from keychain", {
source: "keychain",
expires: new Date(expires).toISOString(),
});
@ -185,7 +185,7 @@ export function readClaudeCliCredentials(options?: {
if (platform === "darwin" && options?.allowKeychainPrompt !== false) {
const keychainCreds = readClaudeCliKeychainCredentials();
if (keychainCreds) {
log.info("read anthropic credentials from claude cli keychain", {
log.debug("read anthropic credentials from claude cli keychain", {
type: keychainCreds.type,
});
return keychainCreds;
@ -282,7 +282,7 @@ export function writeClaudeCliKeychainCredentials(
{ encoding: "utf8", timeout: 5000, stdio: ["pipe", "pipe", "pipe"] },
);
log.info("wrote refreshed credentials to claude cli keychain", {
log.debug("wrote refreshed credentials to claude cli keychain", {
expires: new Date(newCredentials.expires).toISOString(),
});
return true;
@ -322,7 +322,7 @@ export function writeClaudeCliFileCredentials(
};
saveJsonFile(credPath, data);
log.info("wrote refreshed credentials to claude cli file", {
log.debug("wrote refreshed credentials to claude cli file", {
expires: new Date(newCredentials.expires).toISOString(),
});
return true;