@chesterbrains/translify-cli 0.6.0 → 0.6.1

package/README.md

@@ -128,7 +128,9 @@ server converts both ways:
 { "files": [{ "pattern": "src/locale/messages.{locale}.xlf", "format": "xliff", "namespace": "web", "xliffDialect": "angular" }] }
 ```
 
-Give every template string `i18n="@@<key>"` so the unit ids are your keys. What `pull` writes:
+Give every template string `i18n="@@<key>"` so the unit ids are your keys. A translation file's `trgLang` must be the
+Translify locale code: with `"locales": { "it": "it-IT" }` the file is still `messages.it.xlf`, but it declares
+`trgLang="it-IT"`, or `push` is refused with `File targets it but it-IT was requested`. What `pull` writes:
 
 | Translify value | Angular unit |
 |---|---|
@@ -217,7 +219,7 @@ fields are refused, and so is any field whose name contains `key`, `secret` or `
 | `files[].jsonStyle` | `nested` \| `flat` | no | Only for `json`. `nested` (the default) writes `{ "a": { "b": "…" } }`, `flat` writes `{ "a.b": "…" }`. |
 | `files[].xliffDialect` | `angular` \| `xcode` | no | Only for `xliff`. `angular` writes `@angular/localize` placeholders on pull and reads `ng extract-i18n` output on push ([Angular (XLIFF)](#angular-xliff)); `xcode` writes XLIFF 1.2 for String Catalogs and reads `xcodebuild -exportLocalizations` output ([Xcode (XLIFF)](#xcode-xliff)). |
 | `files[].xliffOriginal` | string | with `xliffDialect: "xcode"` | The String Catalog path Xcode knows, e.g. `Sources/App/Localizable.xcstrings`; written to `<file original>`. Xcode imports nothing when it does not match the project. Only with `xcode`. |
-| `locales` | object | no | Maps a locale name on disk to a Translify locale code, e.g. `{ "en_US": "en-US" }`. Unmapped names pass through unchanged. Two names may not map to the same code, and a target may not itself be a mapped name. |
+| `locales` | object | no | Maps a locale name on disk to a Translify locale code, e.g. `{ "en_US": "en-US" }`. Unmapped names pass through unchanged. Two names may not map to the same code, and a target may not itself be a mapped name. The map renames files only: an XLIFF's `trgLang` (2.0) or `target-language` (1.2), when present, must be the Translify code itself, or `push` is refused with `File targets it but it-IT was requested`. |
 
 Each file must be matched by one rule only, and each (locale, namespace) pair must come from one file only;
 otherwise the CLI stops before sending anything and names the files involved.

package/dist/credentials.js

@@ -10,6 +10,7 @@ export function credentialsPath(env = process.env) {
         return join(appData, 'translify', 'credentials');
     return join(absolute(env.XDG_CONFIG_HOME) ?? join(homedir(), '.config'), 'translify', 'credentials');
 }
+const SECRET_KEY_SHAPE = /^sk_[A-Za-z0-9_-]+$/;
 // Messages never echo the value: a mistyped key is still a secret.
 export const assertSecret = (key) => {
     if (key.startsWith('pk_')) {
@@ -17,6 +18,11 @@ export const assertSecret = (key) => {
     }
     if (!key.startsWith('sk_'))
         throw new CliError(EXIT.auth, 'Not a Translify secret key (expected sk_...).');
+    // A key is `sk_` plus base64url. Anything else (a pasted `…`, a space, a `/`) is caught here: fetch
+    // would refuse it as a header value, which reads as a connection error (TRLIFY-128).
+    if (!SECRET_KEY_SHAPE.test(key)) {
+        throw new CliError(EXIT.auth, 'The key has characters a secret key never has (only letters, digits, - and _ after sk_). Check TRANSLIFY_SECRET_KEY.');
+    }
     return key;
 };
 export async function resolveKey(env = process.env) {

package/dist/version.js

@@ -1,3 +1,3 @@
 // Must equal package.json "version"; src/version.test.ts fails when they drift.
-export const VERSION = '0.6.0';
+export const VERSION = '0.6.1';
 export const USER_AGENT = `translify-cli/${VERSION}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chesterbrains/translify-cli",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "Push, pull and publish Translify translations from your repository",
   "license": "MIT",
   "repository": {