@topolo/cli 0.12.12 → 0.12.14

package/dist/index.js

@@ -9,7 +9,7 @@ import { platform as platform2 } from "os";
 import { createInterface } from "readline/promises";
 import { stdin as input } from "process";
 
-// node_modules/.pnpm/@topolo+sdk@0.22.0/node_modules/@topolo/sdk/dist/index.js
+// node_modules/@topolo/sdk/dist/index.js
 function applyAuthHeaders(headers, credential) {
   if (credential.kind === "api_key") {
     headers.set("X-Api-Key", credential.apiKey);
@@ -124,9 +124,9 @@ function canonicalTopoloServiceErrorCode(value) {
 }
 function sanitizeTopoloServiceMessage(value) {
   if (typeof value !== "string") return void 0;
-  const text2 = value.replace(/[\u0000-\u001f\u007f-\u009f\u200b-\u200f\u2028-\u202e\u2066-\u2069\ufeff]/g, " ").replace(/\b[a-z][a-z0-9+.-]*:\/\/\S+/gi, "[url]").replace(/[^\s@<>()[\],;:"']+@[^\s@<>()[\],;:"']+\.[a-z]{2,}/gi, "[email]").replace(/[A-Za-z0-9_\-+/=.]{20,}/g, (run) => /[0-9]/.test(run) && /[A-Za-z]/.test(run) ? "[redacted]" : run).replace(/\s+/g, " ").trim();
-  if (!text2) return void 0;
-  return text2.length > SERVICE_MESSAGE_MAX_LENGTH ? `${text2.slice(0, SERVICE_MESSAGE_MAX_LENGTH - 1).trimEnd()}\u2026` : text2;
+  const text3 = value.replace(/[\u0000-\u001f\u007f-\u009f\u200b-\u200f\u2028-\u202e\u2066-\u2069\ufeff]/g, " ").replace(/\b[a-z][a-z0-9+.-]*:\/\/\S+/gi, "[url]").replace(/[^\s@<>()[\],;:"']+@[^\s@<>()[\],;:"']+\.[a-z]{2,}/gi, "[email]").replace(/[A-Za-z0-9_\-+/=.]{20,}/g, (run) => /[0-9]/.test(run) && /[A-Za-z]/.test(run) ? "[redacted]" : run).replace(/\s+/g, " ").trim();
+  if (!text3) return void 0;
+  return text3.length > SERVICE_MESSAGE_MAX_LENGTH ? `${text3.slice(0, SERVICE_MESSAGE_MAX_LENGTH - 1).trimEnd()}\u2026` : text3;
 }
 function canonicalTopoloRequestId(value) {
   if (typeof value !== "string") return void 0;
@@ -194,10 +194,10 @@ var TopoloPermissionError = class extends TopoloSdkError {
 };
 function extractTopoloServiceErrorCode(body) {
   if (!body || typeof body !== "object" || Array.isArray(body)) return null;
-  const record2 = body;
-  const topLevel = canonicalTopoloServiceErrorCode(record2.code);
+  const record3 = body;
+  const topLevel = canonicalTopoloServiceErrorCode(record3.code);
   if (topLevel) return topLevel;
-  const nested = record2.error;
+  const nested = record3.error;
   const nestedString = canonicalTopoloServiceErrorCode(nested);
   if (nestedString) return nestedString;
   if (nested && typeof nested === "object" && !Array.isArray(nested)) {
@@ -209,13 +209,13 @@ function extractTopoloServiceErrorCode(body) {
 }
 function extractTopoloServiceErrorMessage(body) {
   if (!body || typeof body !== "object" || Array.isArray(body)) return void 0;
-  const record2 = body;
-  const nested = record2.error;
+  const record3 = body;
+  const nested = record3.error;
   const candidates = [];
   if (nested && typeof nested === "object" && !Array.isArray(nested)) {
     candidates.push(nested.message);
   }
-  candidates.push(record2.message, record2.error_description);
+  candidates.push(record3.message, record3.error_description);
   if (typeof nested === "string" && !canonicalTopoloServiceErrorCode(nested)) candidates.push(nested);
   for (const candidate of candidates) {
     const message2 = sanitizeTopoloServiceMessage(candidate);
@@ -228,14 +228,14 @@ function serviceErrorCode(body, fallback) {
 }
 function extractTopoloServiceErrorDetails(body) {
   if (!body || typeof body !== "object" || Array.isArray(body)) return void 0;
-  const record2 = body;
-  let candidate = record2.details;
-  const nested = record2.error;
+  const record3 = body;
+  let candidate = record3.details;
+  const nested = record3.error;
   if (nested && typeof nested === "object" && !Array.isArray(nested)) {
     const nestedRecord = nested;
     if (candidate === void 0) candidate = nestedRecord.details ?? nestedRecord;
   }
-  if (candidate === void 0) candidate = record2;
+  if (candidate === void 0) candidate = record3;
   if (Array.isArray(candidate)) return validationIssueDetails(canonicalTopoloValidationIssues(candidate)) ?? void 0;
   if (!candidate || typeof candidate !== "object") return void 0;
   const source = candidate;
@@ -294,18 +294,18 @@ function validationIssueDetails(issues) {
   return paths.length ? { paths, issues } : { issues };
 }
 function issue(path, message2) {
-  const text2 = sanitizeTopoloServiceMessage(message2);
-  if (!path && !text2) return null;
-  return { ...path ? { path } : {}, ...text2 ? { message: text2 } : {} };
+  const text3 = sanitizeTopoloServiceMessage(message2);
+  if (!path && !text3) return null;
+  return { ...path ? { path } : {}, ...text3 ? { message: text3 } : {} };
 }
 function canonicalTopoloValidationIssues(values) {
   const issues = [];
   for (const value of values) {
     if (!value || typeof value !== "object" || Array.isArray(value)) continue;
-    const record2 = value;
-    const path = canonicalTopoloValidationPath(record2.field) ?? canonicalTopoloValidationPath(record2.path);
+    const record3 = value;
+    const path = canonicalTopoloValidationPath(record3.field) ?? canonicalTopoloValidationPath(record3.path);
     if (!path) continue;
-    const projected = issue(path, record2.message);
+    const projected = issue(path, record3.message);
     if (projected) issues.push(projected);
     if (issues.length === SERVICE_ISSUE_LIMIT) break;
   }
@@ -437,10 +437,10 @@ function sensitive(key, value) {
   const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
   if (normalized === "capability") {
     if (typeof value !== "string") return value !== null && value !== void 0 && typeof value !== "boolean" && typeof value !== "number";
-    const text2 = value.trim();
-    return Boolean(text2) && !/^[a-z][a-z0-9_-]{0,31}$/.test(text2);
+    const text3 = value.trim();
+    return Boolean(text3) && !/^[a-z][a-z0-9_-]{0,31}$/.test(text3);
   }
-  return ["authorization", "cookie", "setcookie", "proxyauthorization"].includes(normalized) || /(token|secret|password|privatekey|apikey)$/.test(normalized);
+  return ["authorization", "cookie", "setcookie", "proxyauthorization"].includes(normalized) || /(token|secret|password|privatekey|apikey|backupcodes?|recoverycodes?)$/.test(normalized);
 }
 function maskActionSecrets(value, secrets) {
   let masked = value;
@@ -467,6 +467,9 @@ async function protectActionResult(value, store) {
   const secrets = /* @__PURE__ */ new Map();
   async function protect(item, key = "") {
     if (isActionSecretReference(item)) return item;
+    if (Array.isArray(item) && /(?:backup|recovery)codes$/.test(key.toLowerCase().replace(/[^a-z0-9]/g, ""))) {
+      return Promise.all(item.map((child) => protect(child, key)));
+    }
     if (sensitive(key, item)) {
       const reference = store ? await store.save(item) : "[REDACTED]";
       if (typeof item === "string" && item) secrets.set(item, reference);
@@ -722,7 +725,7 @@ function inspectSchema(schema, path, root, depth) {
   if (unsupportedKeyword) {
     return { path, code: "unsupported_schema_keyword", message: `Action schema uses unsupported keyword ${unsupportedKeyword}.` };
   }
-  if (typeof schema.format === "string" && !["uri", "email", "date-time"].includes(schema.format)) {
+  if (typeof schema.format === "string" && !["uri", "email", "date-time", "uuid"].includes(schema.format)) {
     return { path, code: "unsupported_schema_format", message: `Action schema uses unsupported format ${schema.format}.` };
   }
   if (typeof schema.$ref === "string" && !resolveLocalReference(root, schema.$ref)) {
@@ -859,6 +862,7 @@ function validateString(schema, value, path, errors) {
   if (schema.format === "uri" && !isUrl(value)) errors.push({ path, code: "format_uri", message: "Expected an absolute URL." });
   if (schema.format === "email" && !/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(value)) errors.push({ path, code: "format_email", message: "Expected an email address." });
   if (schema.format === "date-time" && !isDateTime(value)) errors.push({ path, code: "format_date_time", message: "Expected an ISO-8601 date-time." });
+  if (schema.format === "uuid" && (value.length !== 36 || !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(value))) errors.push({ path, code: "format_uuid", message: "Expected a hyphenated UUID." });
 }
 function validateNumber(schema, value, path, errors) {
   if (typeof schema.minimum === "number" && value < schema.minimum) errors.push({ path, code: "minimum", message: `Expected a value of at least ${schema.minimum}.` });
@@ -1916,14 +1920,14 @@ var TopoloClient = class _TopoloClient {
     if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
       throw new TopoloSdkError("action_catalog_summary_unavailable", "Action catalog summary is unavailable.");
     }
-    const record2 = raw;
-    if (record2.algorithm !== "sha256-v1" || typeof record2.digest !== "string" || !/^[a-f0-9]{64}$/.test(record2.digest) || !Number.isSafeInteger(record2.actionCount) || Number(record2.actionCount) < 0) {
+    const record3 = raw;
+    if (record3.algorithm !== "sha256-v1" || typeof record3.digest !== "string" || !/^[a-f0-9]{64}$/.test(record3.digest) || !Number.isSafeInteger(record3.actionCount) || Number(record3.actionCount) < 0) {
       throw new TopoloSdkError("action_catalog_summary_unavailable", "Action catalog summary is invalid.");
     }
     return {
       algorithm: "sha256-v1",
-      digest: record2.digest,
-      actionCount: Number(record2.actionCount)
+      digest: record3.digest,
+      actionCount: Number(record3.actionCount)
     };
   }
   /** @deprecated Prefer searchActions() so callers retain the continuation cursor. */
@@ -2641,10 +2645,10 @@ function extractRequired(body) {
     if (Array.isArray(maybe.required)) return canonicalTopoloRequired(maybe.required);
     for (const nested of [maybe.details, maybe.error]) {
       if (!nested || typeof nested !== "object" || Array.isArray(nested)) continue;
-      const record2 = nested;
-      if (Array.isArray(record2.required)) return canonicalTopoloRequired(record2.required);
-      if (record2.details && typeof record2.details === "object" && !Array.isArray(record2.details)) {
-        const required = record2.details.required;
+      const record3 = nested;
+      if (Array.isArray(record3.required)) return canonicalTopoloRequired(record3.required);
+      if (record3.details && typeof record3.details === "object" && !Array.isArray(record3.details)) {
+        const required = record3.details.required;
         if (Array.isArray(required)) return canonicalTopoloRequired(required);
       }
     }
@@ -2719,8 +2723,8 @@ function compactResultValue(value, depth, budget) {
     return value.length > ACTION_RESULT_MAX_ITEMS ? { count: value.length, items, omittedItems: value.length - ACTION_RESULT_MAX_ITEMS } : items;
   }
   if (typeof value === "object") {
-    const record2 = value;
-    const allKeys = Object.keys(record2);
+    const record3 = value;
+    const allKeys = Object.keys(record3);
     const ranked = allKeys.sort((left, right) => resultKeyPriority(left) - resultKeyPriority(right));
     const prioritized = ranked.filter((key) => resultKeyPriority(key) < 2);
     const ordinary = ranked.filter((key) => resultKeyPriority(key) === 2);
@@ -2729,7 +2733,7 @@ function compactResultValue(value, depth, budget) {
       ...prioritized,
       ...ordinary.slice(0, ordinaryLimit)
     ].slice(0, ACTION_RESULT_MAX_KEYS);
-    const compact = Object.fromEntries(keys.map((key) => [key, compactResultValue(record2[key], depth + 1, budget)]));
+    const compact = Object.fromEntries(keys.map((key) => [key, compactResultValue(record3[key], depth + 1, budget)]));
     if (allKeys.length > keys.length) compact["_omittedKeys"] = allKeys.length - keys.length;
     return compact;
   }
@@ -3493,7 +3497,7 @@ function createTopolo(options) {
   };
 }
 
-// node_modules/.pnpm/@topolo+sdk@0.22.0/node_modules/@topolo/sdk/dist/node/credential-store.js
+// node_modules/@topolo/sdk/dist/node/credential-store.js
 import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2, chmod as chmod2, rm as rm2, stat } from "fs/promises";
 import { existsSync as existsSync2 } from "fs";
 import { homedir as homedir2, platform } from "os";

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@topolo/cli",
   "packageManager": "pnpm@10.17.1",
-  "version": "0.12.12",
-  "topoloPublishedVersion": "0.12.12",
+  "version": "0.12.14",
+  "topoloPublishedVersion": "0.12.14",
   "description": "Public command-line interface for Topolo customer organizations, developers, and agents.",
   "license": "UNLICENSED",
   "author": "Topolo",
@@ -28,8 +28,8 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
-    "@topolo/mcp": "0.14.5",
-    "@topolo/sdk": "0.22.0",
+    "@topolo/mcp": "0.14.7",
+    "@topolo/sdk": "0.23.2",
     "commander": "^12.1.0"
   },
   "devDependencies": {