fraim-framework 2.0.198 → 2.0.199

package/dist/src/middleware/logger.js

@@ -58,6 +58,16 @@ function getApiKeyForLogging(req) {
     }
     return 'ANONYMOUS';
 }
+function getBodyForLogging(req) {
+    if (req.path === '/api/ai-hub/brand' && req.body && typeof req.body === 'object') {
+        const body = { ...req.body };
+        if (typeof body.logo === 'string' && body.logo.length > 0) {
+            body.logo = `[redacted logo payload, ${body.logo.length} chars]`;
+        }
+        return JSON.stringify(body);
+    }
+    return JSON.stringify(req.body);
+}
 /**
  * Middleware to log all requests
  */
@@ -82,7 +92,7 @@ function requestLogger(req, res, next) {
     let params = '';
     if (method === 'POST') {
         try {
-            params = JSON.stringify(req.body);
+            params = getBodyForLogging(req);
         }
         catch (e) {
             params = '[Unserializable Body]';

package/dist/src/middleware/telemetry.js

@@ -61,7 +61,9 @@ class TelemetryMiddleware {
             // `fraim sync` CLI, which runs outside any MCP session (same lifecycle
             // position as /api/registry/sync). Auth still applies; only the
             // session-active gate is exempted.
-            const exemptPaths = ['/health', '/admin', '/api/registry/sync', '/api/registry/github-workflows', '/api/registry/topology/personalized', '/api/registry/topology/usage-heatmap', '/api/org/', '/api/manager/', '/api/payment/', '/api/sales/', '/api/signup', '/api/providers', '/api/analytics', '/analytics', '/api/auth/', '/api/account/'];
+            // Issue #701/#744 - hosted AI Hub HTTP APIs are browser/gateway routes,
+            // not MCP tool calls. They are still authenticated by API key/session.
+            const exemptPaths = ['/health', '/admin', '/api/registry/sync', '/api/registry/github-workflows', '/api/registry/topology/personalized', '/api/registry/topology/usage-heatmap', '/api/org/', '/api/manager/', '/api/ai-hub/', '/api/payment/', '/api/sales/', '/api/signup', '/api/providers', '/api/analytics', '/analytics', '/api/auth/', '/api/account/'];
             if (exemptPaths.some(p => req.path.startsWith(p))) {
                 return next();
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fraim-framework",
-  "version": "2.0.198",
+  "version": "2.0.199",
   "description": "FRAIM: AI Workforce Infrastructure — the organizational capability that turns AI agents into an accountable workforce, their operators into capable AI managers, and executives into leaders with clear optics on AI proficiency.",
   "main": "index.js",
   "bin": {