fix(payments): harden secret handling and auto-payment defaults#1556

Open

aidandaly24 wants to merge 7 commits into

mainfrom

fix/payments-security

Commits on Jun 17, 2026

fix(payments): redact payment API errors via allowlist instead of denylist
aidandaly24
committed
fix(payment-manager): warn loudly at add-time when auto-payment is enabled
aidandaly24
committed
fix(deploy): warn post-deploy when a payment manager has auto-payment enabled
aidandaly24
committed
fix(payment-connector): add --credentials-file for secret intake off the command line
aidandaly24
committed
fix(payment-manager): return auto-payment warning instead of writing to stderr
aidandaly24
committed
fix(payment-connector): read stdin via fd 0 so --credentials-file - works on Windows
aidandaly24
committed
fix(payments): surface server error message when provably free of secrets
aidandaly24
committed