[joelmccoy]

Description

A bug fix in CLI legacy logic to limit printing sensitive info in logs. Updated the debug log message to only print a subset of the UDSConfig. Updated e2e tests to catch this better in the future.

Related Issue

Fixes CLI-342

Type of change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Other (security config, docs update, etc)

Checklist before merging

• Test, docs, adr added or updated as needed
• Contributor Guide Steps followed

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-15T19:35:07.978778Z	1ce10f0	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge, with no actionable correctness, security, or repository-rule violations identified.

Summary

This PR prevents legacy bundle initialization from serializing the complete bundle configuration into debug logs.

• Replaces full-config logging with selected deployment and creation metadata.
• Extends variable end-to-end coverage to verify sensitive values are absent from stdout, stderr, and generated log files.
• Updates log-file path extraction to handle multiline and formatted command output.

_{Reviews (1) · Last reviewed commit: "fix: don't print full bundle config in d..."}