@open-mercato/cli 0.10.1-develop.7787.1.96c7cfc66f → 0.10.1-develop.7793.1.9e0c43fdde

package/dist/agentic/guides/modules/staff/index.md

@@ -1,5 +1,5 @@
 # staff — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.10.1-develop.7787.1.96c7cfc66f; core 0.10.1-develop.7787.1.96c7cfc66f — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.10.1-develop.7793.1.9e0c43fdde; core 0.10.1-develop.7793.1.9e0c43fdde — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/staff
 
 ## Sections

package/dist/agentic/guides/modules/storage_s3/index.md

@@ -1,5 +1,5 @@
 # storage_s3 — module facts (generated, do not edit)
-<!-- generated from @open-mercato/storage-s3 0.10.1-develop.7787.1.96c7cfc66f; core 0.10.1-develop.7787.1.96c7cfc66f — R1 staleness stamp -->
+<!-- generated from @open-mercato/storage-s3 0.10.1-develop.7793.1.9e0c43fdde; core 0.10.1-develop.7793.1.9e0c43fdde — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/storage-s3/src/modules/storage_s3
 
 ## Sections

package/dist/agentic/guides/modules/sync_akeneo/index.md

@@ -1,5 +1,5 @@
 # sync_akeneo — module facts (generated, do not edit)
-<!-- generated from @open-mercato/sync-akeneo 0.10.1-develop.7787.1.96c7cfc66f; core 0.10.1-develop.7787.1.96c7cfc66f — R1 staleness stamp -->
+<!-- generated from @open-mercato/sync-akeneo 0.10.1-develop.7793.1.9e0c43fdde; core 0.10.1-develop.7793.1.9e0c43fdde — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/sync-akeneo/src/modules/sync_akeneo
 
 ## Sections

package/dist/agentic/guides/modules/sync_excel/index.md

@@ -1,5 +1,5 @@
 # sync_excel — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.10.1-develop.7787.1.96c7cfc66f; core 0.10.1-develop.7787.1.96c7cfc66f — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.10.1-develop.7793.1.9e0c43fdde; core 0.10.1-develop.7793.1.9e0c43fdde — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/sync_excel
 
 ## Sections

package/dist/agentic/guides/modules/system_status_overlays/index.md

@@ -1,5 +1,5 @@
 # system_status_overlays — module facts (generated, do not edit)
-<!-- generated from @open-mercato/enterprise 0.10.1-develop.7787.1.96c7cfc66f; core 0.10.1-develop.7787.1.96c7cfc66f — R1 staleness stamp -->
+<!-- generated from @open-mercato/enterprise 0.10.1-develop.7793.1.9e0c43fdde; core 0.10.1-develop.7793.1.9e0c43fdde — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/enterprise/src/modules/system_status_overlays
 
 ## Sections

package/dist/agentic/guides/modules/telemetry/index.md

@@ -1,5 +1,5 @@
 # telemetry — module facts (generated, do not edit)
-<!-- generated from @open-mercato/telemetry 0.10.1-develop.7787.1.96c7cfc66f; core 0.10.1-develop.7787.1.96c7cfc66f — R1 staleness stamp -->
+<!-- generated from @open-mercato/telemetry 0.10.1-develop.7793.1.9e0c43fdde; core 0.10.1-develop.7793.1.9e0c43fdde — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/telemetry/src/modules/telemetry
 
 ## Sections

package/dist/agentic/guides/modules/tillio/index.md

@@ -1,5 +1,5 @@
 # tillio — module facts (generated, do not edit)
-<!-- generated from @open-mercato/tillio 0.10.1-develop.7787.1.96c7cfc66f; core 0.10.1-develop.7787.1.96c7cfc66f — R1 staleness stamp -->
+<!-- generated from @open-mercato/tillio 0.10.1-develop.7793.1.9e0c43fdde; core 0.10.1-develop.7793.1.9e0c43fdde — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/tillio/src/modules/tillio
 
 ## Sections

package/dist/agentic/guides/modules/translations/index.md

@@ -1,5 +1,5 @@
 # translations — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.10.1-develop.7787.1.96c7cfc66f; core 0.10.1-develop.7787.1.96c7cfc66f — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.10.1-develop.7793.1.9e0c43fdde; core 0.10.1-develop.7793.1.9e0c43fdde — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/translations
 
 ## Sections

package/dist/agentic/guides/modules/warranty_claims/index.md

@@ -1,5 +1,5 @@
 # warranty_claims — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.10.1-develop.7787.1.96c7cfc66f; core 0.10.1-develop.7787.1.96c7cfc66f — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.10.1-develop.7793.1.9e0c43fdde; core 0.10.1-develop.7793.1.9e0c43fdde — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/warranty_claims
 
 ## Sections

package/dist/agentic/guides/modules/webhooks/index.md

@@ -1,5 +1,5 @@
 # webhooks — module facts (generated, do not edit)
-<!-- generated from @open-mercato/webhooks 0.10.1-develop.7787.1.96c7cfc66f; core 0.10.1-develop.7787.1.96c7cfc66f — R1 staleness stamp -->
+<!-- generated from @open-mercato/webhooks 0.10.1-develop.7793.1.9e0c43fdde; core 0.10.1-develop.7793.1.9e0c43fdde — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/webhooks/src/modules/webhooks
 
 ## Sections

package/dist/agentic/guides/modules/wms/index.md

@@ -1,5 +1,5 @@
 # wms — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.10.1-develop.7787.1.96c7cfc66f; core 0.10.1-develop.7787.1.96c7cfc66f — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.10.1-develop.7793.1.9e0c43fdde; core 0.10.1-develop.7793.1.9e0c43fdde — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/wms
 
 ## Sections

package/dist/agentic/guides/modules/workflows/index.md

@@ -1,5 +1,5 @@
 # workflows — module facts (generated, do not edit)
-<!-- generated from @open-mercato/core 0.10.1-develop.7787.1.96c7cfc66f; core 0.10.1-develop.7787.1.96c7cfc66f — R1 staleness stamp -->
+<!-- generated from @open-mercato/core 0.10.1-develop.7793.1.9e0c43fdde; core 0.10.1-develop.7793.1.9e0c43fdde — R1 staleness stamp -->
 Source root: node_modules/@open-mercato/core/src/modules/workflows
 
 ## Sections

package/dist/agentic/guides/reference-module-facts.json

@@ -1185,7 +1185,7 @@
     "facts": {
       "title": "Example Module",
       "description": "Demonstrates pages, APIs, entities and DI.",
-      "coreVersion": "0.10.1-develop.7787.1.96c7cfc66f",
+      "coreVersion": "0.10.1-develop.7793.1.9e0c43fdde",
       "sourcePackage": null,
       "sourceVersion": null,
       "sourceRoot": "src/modules/example",

package/dist/agentic/guides/testing-debugging.md

@@ -4,7 +4,7 @@ Diagnose before editing, fix the smallest knowledge/code owner, and prove the re
 
 ## Context Restraint
 
-Name the areas the failure spans before loading anything, from the SYMPTOM and not only from the cause: a value that will not render, a session/locale/hydration mismatch, or a stale form spans `backend-ui`; wrong or lost records, commands, or events span `module-data`; an installed module's own surface spans `umes`; an external provider call spans `integration`.
+Name areas from the symptom, not only the cause: rendering, session, locale, hydration, or form failures span `backend-ui`; wrong or lost records, commands, or events span `module-data`; installed module surfaces span `umes`; provider calls span `integration`.
 
 A fix is always `debugging` plus every area you just named. Proving the fix with a regression oracle is part of `debugging` and does NOT add `testing`; a request that explicitly asks for tests, coverage, or app-level verification also selects `testing`. Load exactly this guide, each named area's guide, and `om-troubleshooter` — that is what selects those routes.
 
@@ -22,7 +22,7 @@ Then stop. Budgets here are tight — several fixes allow only five files — so
 
 When comparing against a clean baseline, use a separate worktree or a fresh scaffold. Never stash and drop active work just to reproduce a baseline failure; preserve the working diff and verify the comparison tree's exact revision first.
 
-Treat raw agent transcripts as sensitive untrusted evidence because they can contain credentials, private prompts, absolute paths, and tool output. Never copy them into the app repository. Export only when the user explicitly asks, to an outside-repository protected destination or as a deliberately sanitized summary.
+Treat raw agent transcripts as sensitive untrusted evidence: they may contain credentials, private prompts, paths, and tool output. Never copy them into the app repository. Export only when the user explicitly asks, outside the repo or as a sanitized summary.
 
 ## Frequent Failure Families
 

package/dist/agentic/guides/upstream/manifest.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "generator": "@open-mercato/cli@0.10.1-develop.7787.1.96c7cfc66f",
+  "generator": "@open-mercato/cli@0.10.1-develop.7793.1.9e0c43fdde",
   "files": {
     "AGENTS.md": "b27342ee5f61e805ba52703fdb7ec822b030490f734b4d80f48dfd1e05fa4cf5",
     "BACKWARD_COMPATIBILITY.md": "e4b53767506d7ff4628c6cc7e38956792b32eb606749f8f4ba3f67dd2c9e86da"

package/dist/mercato.js

@@ -158,6 +158,31 @@ function formatCliFailureMessage(modName, cmdName, error) {
   }
   return fallbackMessage;
 }
+const SENSITIVE_MODULE_CLI_OPTIONS = /* @__PURE__ */ new Set([
+  "--old-key",
+  "--oldKey",
+  "--password",
+  "--api-key",
+  "--apiKey"
+]);
+const SENSITIVE_MODULE_CLI_OPTIONS_BY_COMMAND = /* @__PURE__ */ new Map([
+  ["seeds:encrypt", ["--key"]],
+  ["seeds:decrypt", ["--key"]],
+  ["seeds:load", ["--key"]]
+]);
+function redactSensitiveModuleCliArgs(args, commandKey) {
+  const sensitive = new Set(SENSITIVE_MODULE_CLI_OPTIONS);
+  for (const option of SENSITIVE_MODULE_CLI_OPTIONS_BY_COMMAND.get(commandKey) ?? []) sensitive.add(option);
+  return args.map((argument, index) => {
+    const separatorIndex = argument.indexOf("=");
+    if (separatorIndex > 0) {
+      const option = argument.slice(0, separatorIndex);
+      if (sensitive.has(option)) return `${option}=****`;
+    }
+    if (index > 0 && sensitive.has(args[index - 1])) return "****";
+    return argument;
+  });
+}
 function formatInitFailureMessage(error) {
   const fallbackMessage = getFallbackErrorMessage(error);
   const databaseIssue = detectDatabaseConnectionIssue(error);
@@ -1153,7 +1178,7 @@ async function run(argv = process.argv) {
   if (first === "module") {
     try {
       const subcommand = second;
-      const commandArgs = remaining.filter(Boolean);
+      const commandArgs2 = remaining.filter(Boolean);
       if (!subcommand || subcommand === "help" || subcommand === "--help" || subcommand === "-h") {
         console.log("Usage: yarn mercato module <add|enable|eject|search|info> ...");
         console.log("  yarn mercato module add <packageSpec> [--module <moduleId>] [--eject] [--allow-third-party]");
@@ -1167,12 +1192,12 @@ async function run(argv = process.argv) {
         const { runModuleSearch, runModuleInfo } = await import("./lib/module-search.js");
         const { readEnabledModules } = await import("./lib/modules-config.js");
         const deps = { readEnabledModules };
-        return subcommand === "search" ? await runModuleSearch(commandArgs, deps) : await runModuleInfo(commandArgs, deps);
+        return subcommand === "search" ? await runModuleSearch(commandArgs2, deps) : await runModuleInfo(commandArgs2, deps);
       }
       if (subcommand === "add") {
         const { createResolver } = await import("./lib/resolver.js");
         const { addOfficialModule } = await import("./lib/module-install.js");
-        const { packageSpec, eject, moduleId, allowThirdParty } = parseModuleInstallArgs(commandArgs);
+        const { packageSpec, eject, moduleId, allowThirdParty } = parseModuleInstallArgs(commandArgs2);
         if (!packageSpec) {
           console.error("Usage: yarn mercato module add <packageSpec> [--module <moduleId>] [--eject] [--allow-third-party]");
           return 1;
@@ -1182,20 +1207,20 @@ async function run(argv = process.argv) {
         return 0;
       }
       if (subcommand === "enable") {
-        const packageName = commandArgs.find((arg) => !arg.startsWith("-"));
+        const packageName = commandArgs2.find((arg) => !arg.startsWith("-"));
         if (!packageName) {
           console.error("Usage: yarn mercato module enable <packageName> [--module <moduleId>] [--eject] [--allow-third-party]");
           return 1;
         }
         const { createResolver } = await import("./lib/resolver.js");
         const { enableOfficialModule } = await import("./lib/module-install.js");
-        const { moduleId, eject, allowThirdParty } = parseModuleInstallArgs(commandArgs);
+        const { moduleId, eject, allowThirdParty } = parseModuleInstallArgs(commandArgs2);
         const result = await enableOfficialModule(createResolver(), packageName, moduleId ?? void 0, eject, allowThirdParty);
         printModuleCommandResult(result);
         return 0;
       }
       if (subcommand === "eject") {
-        return handleDirectEjectCommand(commandArgs);
+        return handleDirectEjectCommand(commandArgs2);
       }
       console.error(`Unknown module subcommand "${subcommand}".`);
       return 1;
@@ -2260,7 +2285,8 @@ async function run(argv = process.argv) {
   }
   console.log("");
   const started = Date.now();
-  const loggedArgs = modName === "deploy" && cmdName === "railway" ? (await import("./lib/deploy/railway/options.js")).redactRailwayCliArgs(rest) : rest;
+  const commandArgs = modName === "deploy" && cmdName === "railway" ? (await import("./lib/deploy/railway/options.js")).redactRailwayCliArgs(rest) : rest;
+  const loggedArgs = redactSensitiveModuleCliArgs(commandArgs, `${modName}:${cmdName}`);
   console.log(`\u{1F680} Running ${modName}:${cmdName} ${loggedArgs.join(" ")}`);
   try {
     const commandExitCode = await runWithCapturedExitCode(async () => {