teamclaude-cloud 1.5.6 → 1.5.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "teamclaude-cloud",
-  "version": "1.5.6",
+  "version": "1.5.7",
   "description": "Multi-account Claude proxy with quota-based rotation + cloud token sync and auth-key control",
   "type": "module",
   "main": "src/index.js",

package/src/index.js

@@ -9,7 +9,7 @@ import { createProxyServer } from './server.js';
 import { importCredentials, loginOAuth, fetchProfile, refreshAccessToken, isTokenExpiringSoon } from './oauth.js';
 import { cloudLogin, cloudValidateOwner, cloudRefreshSession, cloudPush, cloudPushUsage, cloudReportUsage, cloudPull, cloudRefreshToken, cloudReportToken, cloudKeyCreate, cloudKeyList, cloudKeyRevoke, cloudKeyMove, cloudGroupList, cloudGroupCreate, cloudGroupRename, cloudGroupDelete, cloudGroupSetAccounts, cloudAccountSetEnabled, buildUsageFromQuota, mergePulledAccounts, resolveCloud, DEFAULT_CLOUD, keySource, reconcileRemovedAccounts } from './cloud.js';
 import { TUI } from './tui.js';
-import { maskIf, maskEmail } from './mask.js';
+import { maskIf, maskEmail, maskEmailsIn } from './mask.js';
 
 const args = process.argv.slice(2);
 const command = args[0];
@@ -989,7 +989,7 @@ async function accountsCommand() {
     const src = a.source ? `, ${a.source}` : '';
     console.log(`  [${i + 1}] ${maskIf(a.name, config.maskMode)} (${status}${src})`);
     if (hasProfile && p.email && p.email !== a.name) console.log(`       Email: ${maskIf(p.email, config.maskMode)}`);
-    if (hasProfile && p.orgName) console.log(`       Org:   ${p.orgName}`);
+    if (hasProfile && p.orgName) console.log(`       Org:   ${maskEmailsIn(p.orgName, config.maskMode)}`);
     if (verbose && a.expiresAt) {
       const remaining = a.expiresAt - Date.now();
       if (remaining <= 0) {

package/src/mask.js

@@ -29,3 +29,12 @@ export function maskEmail(value) {
 export function maskIf(value, on) {
   return on ? maskEmail(value) : value;
 }
+
+// Mask every email SUBSTRING inside a free-form string (log lines, "X's Organization",
+// generic table cells) — non-email text is left intact. Use this where an email is
+// embedded in a larger string, not the whole value.
+const EMAIL_RE = /[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/g;
+export function maskEmailsIn(value, on) {
+  if (!on || typeof value !== 'string') return value;
+  return value.replace(EMAIL_RE, (m) => maskEmail(m));
+}

package/src/tui.js

@@ -1,5 +1,5 @@
 import { importCredentials, fetchProfile } from './oauth.js';
-import { maskIf } from './mask.js';
+import { maskIf, maskEmailsIn } from './mask.js';
 
 // ── ANSI helpers ─────────────────────────────────────────────
 
@@ -214,8 +214,7 @@ export class TUI {
   // (Codex HIGH ×3). Covers TUI-generated lines AND redirected server/account-manager
   // console output, so ordinary request/activity logging can't bypass mask mode.
   _maskLog(s) {
-    if (this.config?.maskMode !== true || typeof s !== 'string') return s;
-    return s.replace(/[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/g, (m) => maskIf(m, true));
+    return maskEmailsIn(s, this.config?.maskMode === true);
   }
 
   // Mask a single account name for direct render (active-requests line, etc.).