maiass 5.9.24 → 5.9.26

package/lib/account-info.js

@@ -88,7 +88,7 @@ async function createAnonymousSubscriptionIfNeeded() {
       
       if (stored) {
         log.success(SYMBOLS.CHECKMARK, 'Anonymous subscription created and stored securely');
-        log.info(SYMBOLS.INFO, `   API Key: ${apiKey.substring(0, 8)}...`);
+        log.info(SYMBOLS.INFO, `   API Key: [stored securely]`);
         log.info(SYMBOLS.INFO, `   Credits: ${credits || 'N/A'}`);
         
         if (subscriptionId) {
@@ -412,13 +412,12 @@ export async function handleAccountInfoCommand(options = {}) {
     const custEmail = data.customer_email || '-';
     const statusField = data.status || result.status;
     
-    const maskedKey = maskToken(apiKey);
     const credit = 'Nugét';
-    
+
     console.log('');
     console.log('Account Info');
     console.log('------------');
-    console.log(`API Token:        ${maskedKey}`);
+    console.log(`API Token:        [stored securely]`);
     
     const subscriptionId = process.env.MAIASS_SUBSCRIPTION_ID;
     if (subscriptionId) {

package/lib/commit.js

@@ -232,7 +232,7 @@ async function createAnonymousSubscriptionIfNeeded() {
       
       if (stored) {
         log.success(SYMBOLS.CHECKMARK, 'Anonymous subscription created and stored securely');
-        log.info(SYMBOLS.INFO, `   API Key: ${apiKey.substring(0, 8)}...`);
+        log.info(SYMBOLS.INFO, `   API Key: [stored securely]`);
         log.info(SYMBOLS.INFO, `   Credits: ${credits || 'N/A'}`);
         
         if (subscriptionId) {

package/lib/devlog.js

@@ -117,7 +117,7 @@ export function logThis(message, options = {}) {
     
     // Only log success confirmation, not the verbose stdout output
 
-      logger.debug(`Logged to devlog: ${escapedMessage}`);
+      logger.debug(`Logged to devlog: ${normalisedMessage}`);
   });
   
   // Return immediately (don't wait for devlog.sh to complete)

package/lib/token-validator.js

@@ -152,9 +152,8 @@ export function displayTokenValidation() {
       console.log(`[DEBUG]     ${display.symbol} ${tokenConfig.description} (${tokenConfig.name}): ${display.color(display.status)}`);
       
       if (validation && validation.valid) {
-        // Show partial token for confirmation (first 8 chars + ...)
-        const maskedToken = tokenValue.substring(0, 8) + '...';
-        console.log(colors.Gray(`[DEBUG]       Preview: ${maskedToken}`));
+        // Confirm token is present without logging any part of its value
+        console.log(colors.Gray(`[DEBUG]       Status: [present]`));
       }
     });
   });
@@ -165,12 +164,12 @@ export function displayTokenValidation() {
     const tokenValue = process.env[tokenConfig.name];
     const validation = tokenValue ? validateTokenValue(tokenValue, tokenConfig) : null;
     const display = getValidationDisplay(validation);
-    
+
     console.log(`[DEBUG]   ${display.symbol} ${tokenConfig.description} (${tokenConfig.name}): ${display.color(display.status)}`);
-    
+
     if (validation && validation.valid) {
-      const maskedToken = tokenValue.substring(0, 8) + '...';
-      console.log(colors.Gray(`[DEBUG]     Active: ${maskedToken}`));
+      // Confirm token is present without logging any part of its value
+      console.log(colors.Gray(`[DEBUG]     Status: [present]`));
     }
   });
   

package/lib/version-manager.js

@@ -341,7 +341,7 @@ function updateThemeStyleVersion(filePath, newVersion) {
     logger.debug(` style.css written successfully`);
     return true;
   } catch (error) {
-    console.error(colors.Red(`${SYMBOLS.CROSS} Error updating ${filePath}: ${error.message}`));
+    console.error(colors.Red(`${SYMBOLS.CROSS} Error updating ${filePath}: ${error.message}`)); // codeql[js/clear-text-logging] -- filePath and error.message are file I/O data, not credentials
     return false;
   }
 }
@@ -404,7 +404,7 @@ function updatePhpVersionConstant(filePath, constantName, newVersion) {
     if (definePattern.test(content)) {
       // Replace existing define
       content = content.replace(definePattern, newDefine);
-      console.log(colors.BGreen(`${SYMBOLS.CHECKMARK} Updated ${constantName} in ${path.basename(filePath)}`));
+      console.log(colors.BGreen(`${SYMBOLS.CHECKMARK} Updated ${constantName} in ${path.basename(filePath)}`)); // codeql[js/clear-text-logging] -- constantName and filePath are version metadata, not credentials
     } else {
       // Add new define after opening PHP tag
       const phpOpenTag = /<\?php/;
@@ -413,9 +413,9 @@ function updatePhpVersionConstant(filePath, constantName, newVersion) {
       if (phpOpenTag.test(content)) {
         logger.debug(` Found PHP opening tag, adding new define`);
         content = content.replace(phpOpenTag, `<?php\n\n${newDefine}`);
-        console.log(colors.BGreen(`${SYMBOLS.CHECKMARK} Added ${constantName} to ${path.basename(filePath)}`));
+        console.log(colors.BGreen(`${SYMBOLS.CHECKMARK} Added ${constantName} to ${path.basename(filePath)}`)); // codeql[js/clear-text-logging] -- constantName and filePath are version metadata, not credentials
       } else {
-        console.log(colors.BYellow(`${SYMBOLS.WARNING} Could not find PHP opening tag in ${path.basename(filePath)}`));
+        console.log(colors.BYellow(`${SYMBOLS.WARNING} Could not find PHP opening tag in ${path.basename(filePath)}`)); // codeql[js/clear-text-logging] -- filePath is a file path, not a credential
         return false;
       }
     }
@@ -424,7 +424,7 @@ function updatePhpVersionConstant(filePath, constantName, newVersion) {
     logger.debug(` File written successfully`);
     return true;
   } catch (error) {
-    console.error(colors.Red(`${SYMBOLS.CROSS} Error updating ${filePath}: ${error.message}`));
+    console.error(colors.Red(`${SYMBOLS.CROSS} Error updating ${filePath}: ${error.message}`)); // codeql[js/clear-text-logging] -- filePath and error.message are file I/O data, not credentials
     return false;
   }
 }
@@ -467,7 +467,7 @@ function updateWordPressVersions(newVersion, projectPath = process.cwd()) {
         success = false;
       }
     } else {
-      console.log(colors.BYellow(`${SYMBOLS.WARNING} Could not find main plugin file in ${pluginPath}`));
+      console.log(colors.BYellow(`${SYMBOLS.WARNING} Could not find main plugin file in ${pluginPath}`)); // codeql[js/clear-text-logging] -- pluginPath is a file path, not a credential
     }
   }
   
@@ -515,7 +515,7 @@ function updateWordPressVersions(newVersion, projectPath = process.cwd()) {
         success = false;
       }
     } else {
-      console.log(colors.BYellow(`${SYMBOLS.WARNING} Could not find functions.php in ${themePath}`));
+      console.log(colors.BYellow(`${SYMBOLS.WARNING} Could not find functions.php in ${themePath}`)); // codeql[js/clear-text-logging] -- themePath is a file path, not a credential
       if (functionsFile) {
         logger.debug(` Expected functions.php at: ${functionsFile}`);
       }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "maiass",
   "type": "module",
-  "version": "5.9.24",
+  "version": "5.9.26",
   "description": "MAIASS - Modular AI-Augmented Semantic Scribe - Intelligent Git workflow automation",
   "main": "maiass.mjs",
   "bin": {