vercel 52.0.0 → 52.2.1

package/dist/chunks/{add-32PTAGQE.js → add-6TZOFI3R.js}

@@ -9,35 +9,35 @@ import {
   handleRulesApiError,
   parseRulesFlagsAndScope,
   rulesCollectionPath
-} from "./chunk-FOWUL5QD.js";
-import "./chunk-3Q7JX627.js";
+} from "./chunk-G5EHVWFI.js";
+import "./chunk-VROU4JKW.js";
 import "./chunk-HTOH3MSD.js";
-import "./chunk-V67XYW74.js";
+import "./chunk-KHSD7WPG.js";
 import {
   validateJsonOutput
 } from "./chunk-XPKWKPWA.js";
 import {
   rulesAddSubcommand
-} from "./chunk-DVQ4SIWF.js";
+} from "./chunk-P3H4MP5H.js";
 import {
   AGENT_REASON
 } from "./chunk-E3NE4SKN.js";
-import "./chunk-VPI2ZRPP.js";
+import "./chunk-NAUUP4G6.js";
 import "./chunk-U3WLEFHU.js";
 import {
   buildCommandWithGlobalFlags,
   outputAgentError
-} from "./chunk-XKHLPA6V.js";
+} from "./chunk-IABMY4Q3.js";
 import "./chunk-CO5D46AG.js";
 import {
   getFlagsSpecification,
   parseArguments,
   printError
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   isAPIError,
   packageName
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 import {
   output_manager_default
 } from "./chunk-ZQKJVHXY.js";

package/dist/chunks/{chunk-JJBN66Y6.js → chunk-2OWOUKOK.js}

@@ -7,7 +7,7 @@ const __dirname = __dirname_(__filename);
 import {
   formatCondition,
   formatTransform
-} from "./chunk-BNSXPMDP.js";
+} from "./chunk-5WC7QCYE.js";
 import {
   output_manager_default
 } from "./chunk-ZQKJVHXY.js";

package/dist/chunks/{chunk-K7R6WOLC.js → chunk-3QA5ZIDF.js}

@@ -10,13 +10,13 @@ import {
 import {
   getEnvTargetPlaceholder,
   global_path_default
-} from "./chunk-VPI2ZRPP.js";
+} from "./chunk-NAUUP4G6.js";
 import {
   yesOption
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   packageName
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 import {
   output_manager_default
 } from "./chunk-ZQKJVHXY.js";

package/dist/chunks/{chunk-TAOVG4PS.js → chunk-4Q5VS23S.js}

@@ -6,14 +6,14 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   rulesAggregateCommand
-} from "./chunk-DVQ4SIWF.js";
+} from "./chunk-P3H4MP5H.js";
 import {
   formatOption,
   limitOption
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   packageName
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 
 // src/commands/alerts/command.ts
 var listSubcommand = {

package/dist/chunks/{chunk-VGWGLBUC.js → chunk-5EDL2IVB.js}

@@ -10,10 +10,10 @@ import {
   formatOption,
   nextOption,
   yesOption
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   packageName
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 
 // src/commands/list/command.ts
 var listCommand = {

package/dist/chunks/{chunk-I5IBRE7Q.js → chunk-5R6AOACI.js}

@@ -6,20 +6,20 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   setupAndLink
-} from "./chunk-PEB65MJA.js";
+} from "./chunk-EKSIQ3UW.js";
 import {
   getLinkedProject,
   param,
   resolveProjectCwd
-} from "./chunk-VPI2ZRPP.js";
+} from "./chunk-NAUUP4G6.js";
 import {
   buildCommandWithYes,
   outputActionRequired
-} from "./chunk-XKHLPA6V.js";
+} from "./chunk-IABMY4Q3.js";
 import {
   getCommandName,
   getCommandNamePlain
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 import {
   output_manager_default
 } from "./chunk-ZQKJVHXY.js";

package/dist/chunks/{chunk-BNSXPMDP.js → chunk-5WC7QCYE.js}

@@ -10,21 +10,21 @@ import {
 } from "./chunk-E3NE4SKN.js";
 import {
   getLinkedProject
-} from "./chunk-VPI2ZRPP.js";
+} from "./chunk-NAUUP4G6.js";
 import {
   buildCommandWithYes,
   outputAgentError
-} from "./chunk-XKHLPA6V.js";
+} from "./chunk-IABMY4Q3.js";
 import {
   getFlagsSpecification,
   getGlobalFlagsOnlyFromArgs,
   parseArguments,
   printError
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   getCommandName,
   getCommandNamePlain
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 import {
   output_manager_default
 } from "./chunk-ZQKJVHXY.js";

package/dist/chunks/{chunk-EG4NYQUS.js → chunk-64DDAGJR.js}

@@ -7,7 +7,7 @@ const __dirname = __dirname_(__filename);
 import {
   require_end_of_stream,
   require_once
-} from "./chunk-VPI2ZRPP.js";
+} from "./chunk-NAUUP4G6.js";
 import {
   require_signal_exit
 } from "./chunk-ZQKJVHXY.js";

package/dist/chunks/{chunk-YLGCZTHB.js → chunk-6TMKD3SZ.js}

@@ -9,7 +9,7 @@ import {
 } from "./chunk-IB5L4LKZ.js";
 import {
   require_execa
-} from "./chunk-EG4NYQUS.js";
+} from "./chunk-64DDAGJR.js";
 import {
   VERCEL_DIR,
   readJSONFile,
@@ -18,12 +18,12 @@ import {
   require_lib,
   require_minimatch,
   require_pluralize
-} from "./chunk-VPI2ZRPP.js";
+} from "./chunk-NAUUP4G6.js";
 import {
   CantParseJSONFile,
   cmd,
   code
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 import {
   output_manager_default,
   require_dist

package/dist/chunks/{chunk-BHDZCUTT.js → chunk-77JGNI4Z.js}

@@ -6,10 +6,10 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   formatOption
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   packageName
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 
 // src/commands/metrics/command.ts
 var schemaSubcommand = {

package/dist/chunks/{chunk-GJEZXG32.js → chunk-7FQKQPBD.js}

@@ -6,21 +6,21 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   getUpdateCommand
-} from "./chunk-US5SYA7N.js";
+} from "./chunk-QWJ7O2C7.js";
 import {
   login
-} from "./chunk-LY3PUG7C.js";
+} from "./chunk-RC7YZO6Q.js";
 import {
   apiCommand,
   listSubcommand2 as listSubcommand,
   loginCommand
-} from "./chunk-2OPPBD5D.js";
+} from "./chunk-DQWTHIXD.js";
 import {
   help
-} from "./chunk-LDXYSGPZ.js";
+} from "./chunk-QPPVRYOB.js";
 import {
   global_path_default
-} from "./chunk-VPI2ZRPP.js";
+} from "./chunk-NAUUP4G6.js";
 import {
   TelemetryClient
 } from "./chunk-U3WLEFHU.js";
@@ -32,10 +32,10 @@ import {
   parseArguments,
   printError,
   require_strip_ansi
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   packageName
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 import {
   output_manager_default
 } from "./chunk-ZQKJVHXY.js";

package/dist/chunks/{chunk-GE6G37P4.js → chunk-ABDTA3V2.js}

@@ -6,7 +6,7 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   require_string_width
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   __commonJS,
   __require,

package/dist/chunks/{chunk-G6RXZLQ2.js → chunk-DFUTSURK.js}

@@ -6,10 +6,10 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   table
-} from "./chunk-GE6G37P4.js";
+} from "./chunk-ABDTA3V2.js";
 import {
   require_strip_ansi
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   require_source
 } from "./chunk-S7KYDPEM.js";

package/dist/chunks/{chunk-2OPPBD5D.js → chunk-DQWTHIXD.js}

@@ -6,29 +6,29 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   routesCommand
-} from "./chunk-CRZM5WM2.js";
+} from "./chunk-HMM7V4AU.js";
 import {
   metricsCommand
-} from "./chunk-BHDZCUTT.js";
+} from "./chunk-77JGNI4Z.js";
 import {
   devCommand
-} from "./chunk-BJQTGP42.js";
+} from "./chunk-NCUOSZ6X.js";
 import {
   activityCommand
-} from "./chunk-UWKTUK3W.js";
+} from "./chunk-LN5ZMLBU.js";
 import {
   alertsCommand
-} from "./chunk-TAOVG4PS.js";
+} from "./chunk-4Q5VS23S.js";
 import {
   listCommand
-} from "./chunk-VGWGLBUC.js";
+} from "./chunk-5EDL2IVB.js";
 import {
   buildCommand,
   pullCommand
-} from "./chunk-K7R6WOLC.js";
+} from "./chunk-3QA5ZIDF.js";
 import {
   envCommand
-} from "./chunk-VPI2ZRPP.js";
+} from "./chunk-NAUUP4G6.js";
 import {
   confirmOption,
   forceOption,
@@ -37,10 +37,10 @@ import {
   limitOption,
   nextOption,
   yesOption
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   packageName
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 import {
   output_manager_default
 } from "./chunk-ZQKJVHXY.js";
@@ -2172,9 +2172,9 @@ var tokensSubcommand = {
       name: "remove",
       shorthand: null,
       type: [String],
-      argument: "TOKEN",
+      argument: "ID_OR_TOKEN",
       deprecated: false,
-      description: "Revoke one or more token strings (repeatable). Requires `--yes` in non-interactive mode"
+      description: "Revoke one or more tokens by id or plaintext token (repeatable). Requires `--yes` in non-interactive mode"
     }
   ],
   examples: []

package/dist/chunks/{chunk-PEB65MJA.js → chunk-EKSIQ3UW.js}

@@ -6,10 +6,10 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   getLocalPathConfig
-} from "./chunk-FVWOH3F3.js";
+} from "./chunk-SCAOSA7F.js";
 import {
   table
-} from "./chunk-GE6G37P4.js";
+} from "./chunk-ABDTA3V2.js";
 import {
   VERCEL_DIR_PROJECT,
   VERCEL_DIR_README,
@@ -37,15 +37,15 @@ import {
   selectAndParseRemoteUrl,
   selectOrg,
   writeServicesConfig
-} from "./chunk-VPI2ZRPP.js";
+} from "./chunk-NAUUP4G6.js";
 import {
   printError
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   CantParseJSONFile,
   ProjectNotFound,
   isAPIError
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 import {
   output_manager_default
 } from "./chunk-ZQKJVHXY.js";

package/dist/chunks/{chunk-FOWUL5QD.js → chunk-G5EHVWFI.js}

@@ -6,7 +6,7 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   resolveAlertsScope
-} from "./chunk-3Q7JX627.js";
+} from "./chunk-VROU4JKW.js";
 import {
   handleValidationError,
   outputError,
@@ -18,7 +18,7 @@ import {
 import {
   buildCommandWithGlobalFlags,
   outputAgentError
-} from "./chunk-XKHLPA6V.js";
+} from "./chunk-IABMY4Q3.js";
 
 // src/commands/alerts/rules/parse-scope.ts
 async function parseRulesFlagsAndScope(client, flags, jsonOutput) {

package/dist/chunks/{chunk-CRZM5WM2.js → chunk-HMM7V4AU.js}

@@ -6,10 +6,10 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   yesOption
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   packageName
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 
 // src/commands/routes/command.ts
 var listSubcommand = {

package/dist/chunks/{chunk-XKHLPA6V.js → chunk-IABMY4Q3.js}

@@ -8,8 +8,9 @@ import {
   LinkRequiredError,
   ProjectNotFound,
   isAPIError,
-  packageName
-} from "./chunk-ECRBC4HL.js";
+  packageName,
+  stripSensitiveAuthArgs
+} from "./chunk-XZ7CVBQ4.js";
 import {
   require_dist
 } from "./chunk-ZQKJVHXY.js";
@@ -20,10 +21,10 @@ import {
 // src/util/agent-output.ts
 var import_error_utils = __toESM(require_dist(), 1);
 function buildCommandWithYes(argv, pkgName = packageName) {
-  const args = argv.slice(2);
+  const args = stripSensitiveAuthArgs(argv.slice(2));
   const hasYes = args.some((a) => a === "--yes" || a === "-y");
-  const out = hasYes ? [...args] : [...args, "--yes"];
-  return `${pkgName} ${out.join(" ")}`;
+  const out = hasYes ? args : [...args, "--yes"];
+  return `${pkgName} ${out.join(" ")}`.trim();
 }
 var GLOBAL_FLAG_NAMES = /* @__PURE__ */ new Set([
   "--cwd",
@@ -34,12 +35,12 @@ var GLOBAL_FLAG_NAMES = /* @__PURE__ */ new Set([
   "--scope",
   "--team",
   "-S",
-  "-T",
-  "--token"
+  "-T"
+  // --token/-t are intentionally excluded and stripped via stripSensitiveAuthArgs.
 ]);
 var BOOLEAN_GLOBAL_FLAG_NAMES = /* @__PURE__ */ new Set(["--yes", "-y", "--non-interactive"]);
 function getGlobalFlagsFromArgv(argv) {
-  const args = argv.slice(2);
+  const args = stripSensitiveAuthArgs(argv.slice(2));
   const out = [];
   for (let i = 0; i < args.length; i++) {
     const arg = args[i];
@@ -56,12 +57,13 @@ function getGlobalFlagsFromArgv(argv) {
   return out;
 }
 function omitGlobalFlagsFromArgs(args) {
+  const safeArgs = stripSensitiveAuthArgs(args);
   const out = [];
-  for (let i = 0; i < args.length; i++) {
-    const arg = args[i];
+  for (let i = 0; i < safeArgs.length; i++) {
+    const arg = safeArgs[i];
     const name = arg.startsWith("--") ? arg.split("=")[0] : arg;
     if (GLOBAL_FLAG_NAMES.has(name)) {
-      const skipSeparateValue = !BOOLEAN_GLOBAL_FLAG_NAMES.has(name) && !arg.includes("=") && i + 1 < args.length && !args[i + 1].startsWith("-");
+      const skipSeparateValue = !BOOLEAN_GLOBAL_FLAG_NAMES.has(name) && !arg.includes("=") && i + 1 < safeArgs.length && !safeArgs[i + 1].startsWith("-");
       if (skipSeparateValue) {
         i++;
       }
@@ -110,14 +112,14 @@ function getPreservedArgsForEnvAdd(argv) {
   const args = argv.slice(2);
   const addIdx = args.indexOf("add");
   if (addIdx === -1 || args[addIdx - 1] !== "env")
-    return args;
+    return stripSensitiveAuthArgs(args);
   let i = addIdx + 1;
   let positionals = 0;
   while (i < args.length && positionals < 3 && !args[i].startsWith("-")) {
     positionals++;
     i++;
   }
-  return args.slice(i);
+  return stripSensitiveAuthArgs(args.slice(i));
 }
 function buildEnvAddCommandWithPreservedArgs(argv, commandTemplate, pkgName = packageName) {
   let preserved = getPreservedArgsForEnvAdd(argv);
@@ -146,24 +148,24 @@ function getPreservedArgsForEnvPull(argv) {
   const args = argv.slice(2);
   const pullIdx = args.indexOf("pull");
   if (pullIdx === -1 || args[pullIdx - 1] !== "env")
-    return args;
+    return stripSensitiveAuthArgs(args);
   let i = pullIdx + 1;
   if (i < args.length && !args[i].startsWith("-"))
     i++;
-  return args.slice(i);
+  return stripSensitiveAuthArgs(args.slice(i));
 }
 function getPreservedArgsForEnvRm(argv) {
   const args = argv.slice(2);
   const rmIdx = args.indexOf("rm");
   if (rmIdx === -1 || args[rmIdx - 1] !== "env")
-    return args;
+    return stripSensitiveAuthArgs(args);
   let i = rmIdx + 1;
   let positionals = 0;
   while (i < args.length && positionals < 3 && !args[i].startsWith("-")) {
     positionals++;
     i++;
   }
-  return args.slice(i);
+  return stripSensitiveAuthArgs(args.slice(i));
 }
 function buildEnvRmCommandWithPreservedArgs(argv, commandTemplate, pkgName = packageName) {
   let preserved = getPreservedArgsForEnvRm(argv);
@@ -179,14 +181,14 @@ function getPreservedArgsForEnvUpdate(argv) {
   const args = argv.slice(2);
   const updateIdx = args.indexOf("update");
   if (updateIdx === -1 || args[updateIdx - 1] !== "env")
-    return args;
+    return stripSensitiveAuthArgs(args);
   let i = updateIdx + 1;
   let positionals = 0;
   while (i < args.length && positionals < 3 && !args[i].startsWith("-")) {
     positionals++;
     i++;
   }
-  return args.slice(i);
+  return stripSensitiveAuthArgs(args.slice(i));
 }
 function buildEnvUpdateCommandWithPreservedArgs(argv, commandTemplate, pkgName = packageName) {
   let preserved = getPreservedArgsForEnvUpdate(argv);
@@ -212,7 +214,7 @@ function buildEnvUpdateCommandWithPreservedArgs(argv, commandTemplate, pkgName =
   return `${base} ${preserved.join(" ")}`;
 }
 function buildCommandWithScope(argv, scopeSlug, pkgName = packageName) {
-  const args = argv.slice(2);
+  const args = stripSensitiveAuthArgs(argv.slice(2));
   const out = [];
   for (let i = 0; i < args.length; i++) {
     if (args[i] === "--scope" || args[i] === "--team" || args[i] === "-S" || args[i] === "-T") {

package/dist/chunks/{chunk-GLDQ23LD.js → chunk-IEKDY4FP.js}

@@ -6,7 +6,7 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   isAPIError
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 import {
   output_manager_default
 } from "./chunk-ZQKJVHXY.js";

package/dist/chunks/{chunk-UC4NDDAU.js → chunk-J7KBPHDC.js}

@@ -6,24 +6,24 @@ const __filename = __fileURLToPath(import.meta.url);
 const __dirname = __dirname_(__filename);
 import {
   writeProjectSettings
-} from "./chunk-OP4YIHHX.js";
+} from "./chunk-RCK5HPNI.js";
 import {
   ensureLink
-} from "./chunk-I5IBRE7Q.js";
+} from "./chunk-5R6AOACI.js";
 import {
   autoInstallVercelPlugin,
   pullCommand
-} from "./chunk-K7R6WOLC.js";
+} from "./chunk-3QA5ZIDF.js";
 import {
   help
-} from "./chunk-LDXYSGPZ.js";
+} from "./chunk-QPPVRYOB.js";
 import {
   VERCEL_DIR,
   VERCEL_DIR_PROJECT,
   envPullCommandLogic,
   humanizePath,
   parseTarget
-} from "./chunk-VPI2ZRPP.js";
+} from "./chunk-NAUUP4G6.js";
 import {
   TelemetryClient
 } from "./chunk-U3WLEFHU.js";
@@ -34,7 +34,7 @@ import {
   getFlagsSpecification,
   parseArguments,
   printError
-} from "./chunk-RFMC2QXQ.js";
+} from "./chunk-JNOMOD7R.js";
 import {
   emoji,
   output_manager_default,

package/dist/chunks/{chunk-4PQA6H63.js → chunk-JCLLQ23G.js}

@@ -7,7 +7,7 @@ const __dirname = __dirname_(__filename);
 import {
   init_pkg,
   pkg_default
-} from "./chunk-ECRBC4HL.js";
+} from "./chunk-XZ7CVBQ4.js";
 
 // src/util/ua.ts
 init_pkg();

package/dist/chunks/{chunk-RFMC2QXQ.js → chunk-JNOMOD7R.js}

@@ -7,9 +7,11 @@ const __dirname = __dirname_(__filename);
 import {
   getCommandName,
   getCommandNamePlain,
+  normalizeFlagName,
   parseRetryAfterHeaderAsMillis,
-  require_bytes
-} from "./chunk-ECRBC4HL.js";
+  require_bytes,
+  stripSensitiveAuthArgs
+} from "./chunk-XZ7CVBQ4.js";
 import {
   output_manager_default
 } from "./chunk-ZQKJVHXY.js";
@@ -339,7 +341,7 @@ var GLOBAL_CLI_FLAG_NAMES = (() => {
   return set;
 })();
 function globalCliFlagTakesValue(flagName) {
-  const normalized = flagName.includes("=") ? flagName.slice(0, flagName.indexOf("=")) : flagName;
+  const normalized = normalizeFlagName(flagName);
   for (const opt of globalCommandOptions) {
     if (`--${opt.name}` === normalized) {
       return opt.type === String;
@@ -362,23 +364,24 @@ var SUBCOMMAND_FLAG_TAKES_VALUE = /* @__PURE__ */ new Set([
   "--per-page"
 ]);
 function suggestionFlagTakesSeparateValue(flagName) {
-  const name = flagName.includes("=") ? flagName.slice(0, flagName.indexOf("=")) : flagName;
+  const name = normalizeFlagName(flagName);
   if (globalCliFlagTakesValue(name))
     return true;
   return SUBCOMMAND_FLAG_TAKES_VALUE.has(name);
 }
 function getSameSubcommandSuggestionFlags(args) {
+  const safeArgs = stripSensitiveAuthArgs(args);
   const out = [];
-  for (let i = 0; i < args.length; i++) {
-    const a = args[i];
+  for (let i = 0; i < safeArgs.length; i++) {
+    const a = safeArgs[i];
     if (!a.startsWith("-"))
       continue;
     out.push(a);
     if (a.includes("="))
       continue;
     const name = a;
-    if (suggestionFlagTakesSeparateValue(name) && i + 1 < args.length && !args[i + 1].startsWith("-")) {
-      out.push(args[++i]);
+    if (suggestionFlagTakesSeparateValue(name) && i + 1 < safeArgs.length && !safeArgs[i + 1].startsWith("-")) {
+      out.push(safeArgs[++i]);
     }
   }
   return out;
@@ -451,9 +454,10 @@ for (const opt of globalCommandOptions) {
   }
 }
 function getGlobalFlagsOnlyFromArgs(args) {
+  const safeArgs = stripSensitiveAuthArgs(args);
   const out = [];
-  for (let i = 0; i < args.length; i++) {
-    const a = args[i];
+  for (let i = 0; i < safeArgs.length; i++) {
+    const a = safeArgs[i];
     let opt;
     if (a.startsWith("--") && a.includes("=")) {
       const name = a.slice(2).split("=")[0];
@@ -467,7 +471,7 @@ function getGlobalFlagsOnlyFromArgs(args) {
       continue;
     out.push(a);
     if (opt.type === String && !a.includes("=")) {
-      const next = args[i + 1];
+      const next = safeArgs[i + 1];
       if (next && !next.startsWith("-")) {
         out.push(next);
         i++;