0.41.0

Security

• A run record hides a secret by what it looks like, not only by the option's name (cli-core 0.446.0). A token in
  a known format (GitHub, OpenAI, Anthropic, Slack, AWS, Google, Stripe, npm, Telegram, a JWT, a private key), a
  Bearer credential, the value after password=, pin 1234 or another secret name, and a random-looking string are
  [redacted] inside the word, with the words around it kept: drive work search documents "Kai password=tulip42"
  keeps Kai password=[redacted]. A config that will not load now hides every typed value, as record_input false
  does.

Added

• drive <profile> session start --json also gives the Google sign-in page as one open_url line on stderr
  (cli-core 0.443.0), before the plain Open Google sign-in: line, so WireCat Desktop can show it as a button.
• drive <profile> mcp server start|stop|status runs the HTTP MCP server in the background (cli-core 0.446.0).
  start takes --public-url, --port and --permission and answers once it listens; status --json gives the
  port, the connector address, the current login code with when it runs out, and the apps logged in, each by the
  name it gave itself; stop ends only a server start started. mcp --http now keeps a lock beside the profile's
  token file, so a second server for the profile is refused, and its login code renews when it runs out. WireCat
  Desktop uses these.

Changed — may break callers

• A run keeps the command as typed (cli-core 0.440.0). drive runs show and run.json now carry argv, the
  words after drive, so the owner can read back what was run: a search, a file's name. A secret is still
  [redacted] (an option named for a token, password or API key, a password in a URL, a long opaque string), and so is
  a phone number. drive config set record_input false --defaults writes every value that may be content as
  [redacted]. --record help says so; it read "ids and timings, never document content".