Make /status output safer to share by redacting account and session details

What variant of Codex are you using?

App / CLI, etc

What feature would you like to see?

Summary

The /status command can expose information that users may not realize is sensitive:

• In the Codex app, it includes the session ID.
• In the Codex CLI, it can include account details such as the user’s personal email address.

People frequently share screenshots of /status on social media and in the Codex Discord to show their weekly limits, usage, or progress. They may not notice that the same screenshot also reveals their
account details. It would also be preferable not to expose the full session ID unnecessarily.

## Suggested behavior

Consider redacting sensitive fields in /status output, such as:

  - Email address: `f••••@example.com`
  - Session ID: `019•••••••••••••••••••••••••••••`

One possible approach would be to make the redacted output the default and provide an explicit option to reveal everything:

/status --full

Alternatively, to preserve the existing behavior, /status could continue showing the full details while offering a share-safe mode:

/status --privacy

The first option—redacting sensitive information by default, would provide stronger protection because users may not realize they need to enable privacy mode before taking a screenshot.

Additional information

## Why this would help

A share-safe /status output would reduce accidental disclosure while preserving access to the full information when it is genuinely needed. This is especially useful because screenshots of usage and
rate-limit information are commonly shared publicly.