bump to v1.1.0: sanitize API key leakage in error logs

- redact API key, token hash from error messages
- show clear "authentication failed" hint on 401 errors

Made-with: Cursor

Author: joe0731

codet/__init__.py

@@ -11,4 +11,4 @@
 - Code hotspot analysis to identify frequently modified areas.
 """
 
-__version__ = "1.0.9" 
+__version__ = "1.1.0" 

codet/codet.py

@@ -475,7 +475,20 @@ def ai_analysis(self, text_input):
             print(full_reply)
             return full_reply
         except Exception as e:
-            self.logger.error(f"AI API call failed ({base_url}): {e}")
+            import re
+            sanitized = re.sub(
+                r'(API Key|Key Hash|Token|api_key|Bearer)\s*[=:]\s*\S+',
+                r'\1=***',
+                str(e)
+            )
+            error_str = str(e).lower()
+            if '401' in error_str or 'auth' in error_str:
+                self.logger.error(
+                    f"AI authentication failed ({base_url}). "
+                    "Check your --api-token (-to) value."
+                )
+            else:
+                self.logger.error(f"AI API call failed ({base_url}): {sanitized}")
             return None
 
 

setup.py

@@ -5,7 +5,7 @@
 
 setup(
     name="codet",
-    version="1.0.9",
+    version="1.1.0",
     author="clemente0620",
     author_email="",
     description="A cross-platform command-line tool for file processing and Git repository analysis with support for commit history tracking, code hotspot detection, and customizable filtering options",