The CLI hiding pasted data can accidentally expose sensitive information
What version of Codex CLI is running?
codex-cli 0.146.0
What subscription do you have?
Pro
Which model were you using?
n/a
What platform is your computer?
MacOS but not relevant
What terminal emulator and version are you using (if applicable)?
Terminal.app
Codex doctor report
What issue are you seeing?
When pasting content, the codex CLI reduces bulky content on display by hiding it with a summary of bytes.
<img width="697" height="79" alt="Image" src="https://github.com/user-attachments/assets/263175c9-7abf-4abf-8619-611654c1bf24" />
However, because sometimes users may forget or maybe their system didn't properly put in to the clipboard what the user expects, this can lead to accidental disclosure of sensitive information.
To resolve this, I think displaying maybe around 32 bytes of the pasted data would help the user confirm the content is what they expect and not something sensitive as they move between tasks.
What steps can reproduce the bug?
copy and then paste a long access token or JWT to simulate a user accidentally doing so.
What is the expected behavior?
There should be a small preview of pasted content.
Additional information
_No response_