From 9a656c70624a9f352b724c6a586fb563ace0dafa Mon Sep 17 00:00:00 2001
From: Bharat Bhojwani <bharatbhojwani885@gmail.com>
Date: Sat, 25 Jul 2026 22:22:54 +0530
Subject: [PATCH] fix: redact tokens before logging bootstrap responses

---
 src/commands/bootstrapAdmin.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/commands/bootstrapAdmin.ts b/src/commands/bootstrapAdmin.ts
index 4937578..be27f59 100644
--- a/src/commands/bootstrapAdmin.ts
+++ b/src/commands/bootstrapAdmin.ts
@@ -2,6 +2,7 @@ import { intro, outro, text, confirm, spinner } from "@clack/prompts";
 import kleur from "kleur";
 import { extractFlag } from "../core/args.js";
 import { resolveBootstrapSecret } from "../core/bootstrapSecret.js";
+import { scrubTokens } from "../core/keychain.js";
 
 const DEFAULT_API_URL = "http://localhost:3000";
 
@@ -87,7 +88,7 @@ export async function runBootstrapAdmin(args: string[] = []) {
       s.stop("Failed");
 
       console.error(kleur.red("Error creating bootstrap invite"));
-      console.error(data);
+      console.error(scrubTokens(data));
 
       process.exit(1);
     }