Addresses CodeQL cleartext-logging alerts (#1, #2, #3) by implementing
session ID redaction for CLI output.
Changes:
- Extract marathonctl into standalone crate (crates/marathonctl)
- Add session ID redaction showing only first 8 characters by default
- Add --show-sensitive/-s flag for full session IDs when debugging
- Implement beautiful ratatui-based UI module with inline viewport
- Add .envrc to .gitignore for secure token management
- Document GitHub token setup in CONTRIBUTING.md
The CLI now provides a secure-by-default experience while maintaining
debugging capabilities through explicit opt-in flags. Session IDs are
redacted to format "abc-def-..." unless --show-sensitive is specified.
UI module provides easy-to-use builder APIs (ui::table, ui::grid, ui::list)
that render beautiful terminal output without hijacking the terminal.
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
- Rename `macros` crate to `libmarathon-macros` for better discoverability on crates.io
- Update all imports from `macros::` to `libmarathon_macros::`
- Add crates.io metadata (description, license, repository, homepage, etc.)
- Bump version to 0.1.1
- Add version requirement for libmarathon-macros dependency
this commit includes a whole lotta fuck yeah, a whole lotta we fuckin
got this, and a lot of "please change the future."
i hope it works.
Signed-off-by: Sienna Meridian Satterwhite <sienna@r3t.io>
Added --db-path and --control-socket arguments to app binary to enable
running multiple instances simultaneously.
Updated marathonctl to use clap with --socket argument for targeting
different instances.
Enables multi-client testing with isolated databases and control sockets.
Refs #131, #132
Signed-off-by: Sienna Meridian Satterwhite <sienna@r3t.io>
