meocord 4.0.0 → 4.0.1

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # meocord
 
+## 4.0.1
+
+### Patch Changes
+
+- [#290](https://github.com/meocord/meocord/pull/290) [`6e6e68e`](https://github.com/meocord/meocord/commit/6e6e68eff696481b40810b2bf713f2bec769b564) Thanks [@l7aromeo](https://github.com/l7aromeo)! - `Logger` prints objects as `console.log` does, and redacts the bot's credentials from everything it prints: non-enumerable properties no longer appear, and objects print four levels deep.
+
+  - Nested data a bot logs, such as a payload or its settings, still shows in full, and a discord.js structure prints a few hundred lines instead of everything it reaches.
+  - An error prints as before: its stack, its own properties such as `code`, its `cause`, and an `AggregateError`'s errors. Its message and stack are no longer printed a second time below it.
+  - Nothing to change in your code.
+
 ## 4.0.0
 
 MeoCord 4 builds with Rsbuild instead of webpack, requires Node.js 22.13 and dotenv 18, and can

package/dist/cjs/_shared/{theme-C8w8ivsR.cjs → theme-Bt2Xw_fH.cjs}

@@ -31,7 +31,7 @@ let configLoaded = false;
     try {
         // Called through a variable so a bundler does not try to resolve the path while building the
         // application; the file is only there once the build is done.
-        const load = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('_shared/theme-C8w8ivsR.cjs', document.baseURI).href)));
+        const load = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('_shared/theme-Bt2Xw_fH.cjs', document.baseURI).href)));
         const loaded = load(compiledPath);
         return loaded.default ?? loaded;
     } catch (error) {
@@ -42,6 +42,34 @@ let configLoaded = false;
 
 dayjs.extend(utc);
 dayjs.extend(timezone);
+/**
+ * How deep an object argument prints: nested data a bot logs, such as a payload or its settings, shows in full, while
+ * a discord.js structure, which reaches its client and every cache, stops at a few hundred lines.
+ */ const OBJECT_DEPTH = 4;
+/** What a value registered with {@link hideInLogs} prints as. */ const REDACTED = '[redacted]';
+/**
+ * The shortest value registered: a bot's credential is far longer, and a short value, such as a test's placeholder,
+ * would replace ordinary words in every line.
+ */ const MIN_HIDDEN_LENGTH = 16;
+const hiddenValues = new Set();
+/**
+ * Keeps `value`, such as the bot's credential, out of every line Logger prints from now on, whatever object, string
+ * or error carries it: as given, trimmed, and without the `Bot ` or `Bearer ` prefix discord.js strips.
+ */ function hideInLogs(value) {
+    if (typeof value !== 'string') return;
+    const trimmed = value.trim();
+    for (const form of [
+        trimmed,
+        trimmed.replace(/^(Bot|Bearer)\s*/i, '')
+    ]){
+        if (form.length >= MIN_HIDDEN_LENGTH) hiddenValues.add(form);
+    }
+}
+const redact = (text)=>{
+    let out = text;
+    for (const value of hiddenValues)out = out.replaceAll(value, REDACTED);
+    return out;
+};
 class Logger {
     log(...args) {
         this.logWithContext('log', args);
@@ -63,12 +91,11 @@ class Logger {
     }
     formatMessage(message, logType) {
         if (typeof message === 'object' && message !== null) {
+            // As console.log inspects: without non-enumerable properties, which discord.js uses to keep its internals out of logs
             return node_util.inspect(message, {
-                showHidden: true,
-                depth: null,
+                depth: OBJECT_DEPTH,
                 colors: true,
-                compact: false,
-                showProxy: true
+                compact: false
             });
         }
         return (this.colorMap[logType] || ((msg)=>msg))(message);
@@ -76,6 +103,7 @@ class Logger {
     logWithContext(logLevel, messages) {
         if (messages.length === 0) return;
         const config = loadMeoCordConfig();
+        hideInLogs(config?.discordToken);
         const logType = logLevel.toUpperCase();
         const applyColor = this.colorMap[logType] || ((msg)=>msg);
         const formattedMessages = messages.map((message)=>this.formatMessage(message, logType));
@@ -90,7 +118,7 @@ class Logger {
             coloredContext,
             ...formattedMessages
         ].filter((log)=>!!log);
-        console[logLevel](...logTexts);
+        console[logLevel](...logTexts.map(redact));
     }
     constructor(context){
         this.context = context;
@@ -113,4 +141,5 @@ Theme.warningColor = '#FFC107';
 
 exports.Logger = Logger;
 exports.Theme = Theme;
+exports.hideInLogs = hideInLogs;
 exports.loadMeoCordConfig = loadMeoCordConfig;

package/dist/cjs/common/index.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var theme = require('../_shared/theme-C8w8ivsR.cjs');
+var theme = require('../_shared/theme-Bt2Xw_fH.cjs');
 require('node:util');
 require('dayjs');
 require('dayjs/plugin/utc.js');

package/dist/cjs/core/index.cjs

@@ -3,7 +3,7 @@
 require('reflect-metadata');
 var inversify = require('inversify');
 var discord_js = require('discord.js');
-var theme = require('../_shared/theme-C8w8ivsR.cjs');
+var theme = require('../_shared/theme-Bt2Xw_fH.cjs');
 var controller_decorator = require('../_shared/controller.decorator-DnKZ29W4.cjs');
 var lodashEs = require('lodash-es');
 var enum_index = require('../enum/index.cjs');
@@ -467,6 +467,8 @@ class MeoCordApp {
         this.isShuttingDown = false;
         this.activityInterval = null;
         this.controllerInstancesCache = new Map();
+        // First, so nothing logged from here on, before login or after, prints it
+        theme.hideInLogs(discordToken);
         this.bot = this.discordClient;
         process.on('SIGINT', ()=>this.gracefulShutdown());
         process.on('SIGTERM', ()=>this.gracefulShutdown());

package/dist/esm/common/logger.js

@@ -7,6 +7,34 @@ import chalk from 'chalk';
 
 dayjs.extend(utc);
 dayjs.extend(timezone);
+/**
+ * How deep an object argument prints: nested data a bot logs, such as a payload or its settings, shows in full, while
+ * a discord.js structure, which reaches its client and every cache, stops at a few hundred lines.
+ */ const OBJECT_DEPTH = 4;
+/** What a value registered with {@link hideInLogs} prints as. */ const REDACTED = '[redacted]';
+/**
+ * The shortest value registered: a bot's credential is far longer, and a short value, such as a test's placeholder,
+ * would replace ordinary words in every line.
+ */ const MIN_HIDDEN_LENGTH = 16;
+const hiddenValues = new Set();
+/**
+ * Keeps `value`, such as the bot's credential, out of every line Logger prints from now on, whatever object, string
+ * or error carries it: as given, trimmed, and without the `Bot ` or `Bearer ` prefix discord.js strips.
+ */ function hideInLogs(value) {
+    if (typeof value !== 'string') return;
+    const trimmed = value.trim();
+    for (const form of [
+        trimmed,
+        trimmed.replace(/^(Bot|Bearer)\s*/i, '')
+    ]){
+        if (form.length >= MIN_HIDDEN_LENGTH) hiddenValues.add(form);
+    }
+}
+const redact = (text)=>{
+    let out = text;
+    for (const value of hiddenValues)out = out.replaceAll(value, REDACTED);
+    return out;
+};
 class Logger {
     log(...args) {
         this.logWithContext('log', args);
@@ -28,12 +56,11 @@ class Logger {
     }
     formatMessage(message, logType) {
         if (typeof message === 'object' && message !== null) {
+            // As console.log inspects: without non-enumerable properties, which discord.js uses to keep its internals out of logs
             return inspect(message, {
-                showHidden: true,
-                depth: null,
+                depth: OBJECT_DEPTH,
                 colors: true,
-                compact: false,
-                showProxy: true
+                compact: false
             });
         }
         return (this.colorMap[logType] || ((msg)=>msg))(message);
@@ -41,6 +68,7 @@ class Logger {
     logWithContext(logLevel, messages) {
         if (messages.length === 0) return;
         const config = loadMeoCordConfig();
+        hideInLogs(config?.discordToken);
         const logType = logLevel.toUpperCase();
         const applyColor = this.colorMap[logType] || ((msg)=>msg);
         const formattedMessages = messages.map((message)=>this.formatMessage(message, logType));
@@ -55,7 +83,7 @@ class Logger {
             coloredContext,
             ...formattedMessages
         ].filter((log)=>!!log);
-        console[logLevel](...logTexts);
+        console[logLevel](...logTexts.map(redact));
     }
     constructor(context){
         this.context = context;
@@ -69,4 +97,4 @@ class Logger {
     }
 }
 
-export { Logger };
+export { Logger, REDACTED, hideInLogs };

package/dist/esm/core/meocord.app.js

@@ -1,5 +1,5 @@
 import { ApplicationCommandType, SlashCommandBuilder, MessageFlagsBitField } from 'discord.js';
-import { Logger } from '../common/logger.js';
+import { Logger, hideInLogs } from '../common/logger.js';
 import '../common/theme.js';
 import { getCommandMap, PARAM_SEPARATOR, getAutocompleteHandlers, getMessageHandlers, getReactionHandlers } from '../decorator/controller.decorator.js';
 import { sample } from 'lodash-es';
@@ -450,6 +450,8 @@ class MeoCordApp {
         this.isShuttingDown = false;
         this.activityInterval = null;
         this.controllerInstancesCache = new Map();
+        // First, so nothing logged from here on, before login or after, prints it
+        hideInLogs(discordToken);
         this.bot = this.discordClient;
         process.on('SIGINT', ()=>this.gracefulShutdown());
         process.on('SIGTERM', ()=>this.gracefulShutdown());

package/dist/esm/package.json.js

@@ -1,4 +1,4 @@
-var version = "4.0.0";
+var version = "4.0.1";
 var packageJson = {
 	version: version};
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "meocord",
   "description": "Decorator-based Discord bot framework built on discord.js. Brings NestJS-style controllers, dependency injection, guards, and testing utilities to bot development — with a full CLI and TypeScript-first design.",
-  "version": "4.0.0",
+  "version": "4.0.1",
   "type": "module",
   "engines": {
     "node": ">=22.13"
@@ -26,11 +26,11 @@
   "bin": "./dist/esm/bin/meocord.js",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/l7aromeo/meocord.git"
+    "url": "git+https://github.com/meocord/meocord.git"
   },
-  "homepage": "https://github.com/l7aromeo/meocord#readme",
+  "homepage": "https://meocord.dev",
   "bugs": {
-    "url": "https://github.com/l7aromeo/meocord/issues"
+    "url": "https://github.com/meocord/meocord/issues"
   },
   "license": "MIT",
   "exports": {