Found during cdidx code-search audit. Evidence: src/CodeIndex/Cli/GlobalToolLog.cs writes process_path= and base_dir= in the lifecycle session header, while src/CodeIndex/Cli/ReportCommandRunner.cs only redacts args= and cwd= when --include-args is not set. Impact: support report bundles can still disclose local install paths and user directory names even though adjacent lifecycle fields are redacted. Suggested fix: redact all path-bearing lifecycle fields by default, or classify safe fields explicitly and test the report output.
Found during cdidx code-search audit. Evidence:
src/CodeIndex/Cli/GlobalToolLog.cswritesprocess_path=andbase_dir=in the lifecycle session header, whilesrc/CodeIndex/Cli/ReportCommandRunner.csonly redactsargs=andcwd=when--include-argsis not set. Impact: support report bundles can still disclose local install paths and user directory names even though adjacent lifecycle fields are redacted. Suggested fix: redact all path-bearing lifecycle fields by default, or classify safe fields explicitly and test the report output.