Note

Low Risk
Logging-only change in the relay publisher; behavior and error handling boundaries are unchanged aside from what gets written to logs.

Overview
Agent-awareness relay logging no longer emits full relay URLs or serialized Effect causes.

Relay URL logging now goes through relayUrlLogAttributes, which uses shared getUrlDiagnostics so logs only record whether a URL is configured, input length, protocol, and hostname—credentials, path, query, and fragment are omitted from startup and reconciliation info logs.

Publish failure logging replaces Cause.pretty(cause) with relayPublishCauseLogAttributes, which records reason/failure/defect/interruption counts and deduplicated _tag values from typed failures, without embedding nested error bodies or defect messages.

Regression tests assert sentinel secrets and private failure/defect strings never appear in the projected attribute payloads.

^{Reviewed by Cursor Bugbot for commit dd68a77. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Redact relay URL and cause details in AgentAwarenessRelay logs

• Adds relayUrlLogAttributes to replace raw relay URL strings in logs with safe attributes: configured flag, input length, protocol, and hostname.
• Adds relayPublishCauseLogAttributes to replace Cause.pretty strings with structured summaries: reason counts by type and aggregated failure tags.
• Both utilities are used in AgentAwarenessRelay.make for startup, enablement, and publishThread error logging.
• Behavioral Change: warning logs for publish failures no longer include full pretty-printed cause details or raw URLs.

^{Macroscope summarized dd68a77.}