Repository navigation
Keep quickstart credentials out of commands and logs - #31
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Following the keyed Claude Code example could fail because the variadic
-Hoption consumed the server name and URL. Use a project MCP configuration with a literal environment-variable reference instead, and clarify which RPC calls can remain keyless. Both English and Chinese instructions are updated.The quickstart also stops printing API-key and session-token prefixes. Authentication, key persistence, and request behavior are unchanged. Four regression cases exercise short and long synthetic credentials through the CLI.
Validation: typecheck passed; the equivalent Node test entry ran all 308 tests successfully. The original
npm testattempt failed before loading tests when the task's long temporary path prevented tsx from creating its IPC socket; that failure is retained. No live account, key, or blockchain request was used for this change.