teamclaude-cloud 1.5.5 → 1.5.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "teamclaude-cloud",
-  "version": "1.5.5",
+  "version": "1.5.6",
   "description": "Multi-account Claude proxy with quota-based rotation + cloud token sync and auth-key control",
   "type": "module",
   "main": "src/index.js",

package/src/tui.js

@@ -201,12 +201,26 @@ export class TUI {
   }
 
   _addLog(msg) {
-    msg = msg.replace(/^\[TeamClaude\]\s*/, '');
-    this.log.unshift({ t: timestamp(), msg });
+    // Store RAW; masking is applied at RENDER time (_maskLog) so a mid-session mask
+    // toggle re-masks already-buffered lines too (Codex HIGH: buffered logs stayed raw).
+    this.log.unshift({ t: timestamp(), msg: msg.replace(/^\[TeamClaude\]\s*/, '') });
     if (this.log.length > 200) this.log.length = 200;
     if (this.running) this.render();
   }
 
+  // Mask every email in a log line when mask mode is on — applied at RENDER time. Uses
+  // an email REGEX (not the current account list) so it also masks a just-deleted
+  // account's name and can't partially expose one email that is a substring of another
+  // (Codex HIGH ×3). Covers TUI-generated lines AND redirected server/account-manager
+  // console output, so ordinary request/activity logging can't bypass mask mode.
+  _maskLog(s) {
+    if (this.config?.maskMode !== true || typeof s !== 'string') return s;
+    return s.replace(/[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/g, (m) => maskIf(m, true));
+  }
+
+  // Mask a single account name for direct render (active-requests line, etc.).
+  _mn(name) { return maskIf(name, this.config?.maskMode === true); }
+
   // ── input handling ─────────────────────────────────
 
   _onData(d) {
@@ -736,7 +750,7 @@ export class TUI {
     for (const [, r] of this.active) {
       const el = ((now - r.started) / 1000).toFixed(1);
       const sp = cyan(SPINNER[this.frame]);
-      const a = r.account ? ` → ${r.account}` : '';
+      const a = r.account ? ` → ${this._mn(r.account)}` : '';
       lines.push(` ${sp} ${gray(r.t)}  ${r.method} ${r.path}${a} ${dim(`(${el}s...)`)}`);
     }
 
@@ -744,7 +758,7 @@ export class TUI {
     const footerH = 2;
     const space = Math.max(0, H - lines.length - footerH);
     for (let i = 0; i < space && i < this.log.length; i++) {
-      lines.push(`   ${gray(this.log[i].t)}  ${this.log[i].msg}`);
+      lines.push(`   ${gray(this.log[i].t)}  ${this._maskLog(this.log[i].msg)}`);
     }
 
     // Pad to fill