Candor Deploy v1.2.14 — Candor Deploy

Your database URL and generated secrets stop being readable back. A database connection string carries its password, and a {generate: …} value in your .candorfile is minted by us and exists nowhere else — both are now treated as secrets, so the environment screen and the Claude connector show the name and withhold the value, exactly as they already did for anything you marked secret yourself. Your app still receives them unchanged, and a plain literal from your .candorfile stays readable, since it is sitting in the repository you committed.