@topolo/cli 0.12.17 → 0.12.19

package/dist/index.js

@@ -463,9 +463,13 @@ async function resolveActionSecrets(value, store, secrets) {
   if (!isRecord(value)) return value;
   return Object.fromEntries(await Promise.all(Object.entries(value).map(async ([key, item]) => [key, await resolveActionSecrets(item, store, secrets)])));
 }
-async function protectActionResult(value, store) {
+async function protectActionResult(value, store, options = {}) {
   const secrets = /* @__PURE__ */ new Map();
+  function documentation(item, key) {
+    return options.preserveAgentGuidance === true && key === "agentGuidance" && isRecord(item) && item.schemaVersion === 1 && typeof item.kind === "string" && ["action-guide", "product-guide", "concept"].includes(item.kind);
+  }
   async function protect(item, key = "") {
+    if (documentation(item, key)) return item;
     if (isActionSecretReference(item)) return item;
     if (Array.isArray(item) && /(?:backup|recovery)codes$/.test(key.toLowerCase().replace(/[^a-z0-9]/g, ""))) {
       return Promise.all(item.map((child) => protect(child, key)));
@@ -480,13 +484,14 @@ async function protectActionResult(value, store) {
     return Object.fromEntries(await Promise.all(Object.entries(item).map(async ([name, child]) => [name, await protect(child, name)])));
   }
   const protectedValue = await protect(value);
-  async function protectEmbedded(item) {
+  async function protectEmbedded(item, key = "") {
+    if (documentation(item, key)) return item;
     if (typeof item === "string" && !isActionSecretReference(item) && maskActionSecrets(item, secrets) !== item) {
       return store ? store.save(item) : maskActionSecrets(item, secrets);
     }
-    if (Array.isArray(item)) return Promise.all(item.map(protectEmbedded));
+    if (Array.isArray(item)) return Promise.all(item.map((child) => protectEmbedded(child)));
     if (!isRecord(item)) return item;
-    return Object.fromEntries(await Promise.all(Object.entries(item).map(async ([key, child]) => [key, await protectEmbedded(child)])));
+    return Object.fromEntries(await Promise.all(Object.entries(item).map(async ([key2, child]) => [key2, await protectEmbedded(child, key2)])));
   }
   return protectEmbedded(protectedValue);
 }
@@ -692,6 +697,9 @@ var SUPPORTED_SCHEMA_KEYWORDS = /* @__PURE__ */ new Set([
   "allOf",
   "anyOf",
   "oneOf",
+  "if",
+  "then",
+  "else",
   "properties",
   "required",
   "additionalProperties",
@@ -731,6 +739,11 @@ function inspectSchema(schema, path, root, depth) {
   if (typeof schema.$ref === "string" && !resolveLocalReference(root, schema.$ref)) {
     return { path, code: "unsupported_schema_ref", message: `Cannot resolve schema reference ${schema.$ref}.` };
   }
+  for (const keyword of ["if", "then", "else"]) {
+    if (Object.prototype.hasOwnProperty.call(schema, keyword) && typeof schema[keyword] !== "boolean" && !isRecord2(schema[keyword])) {
+      return { path: `${path}.${keyword}`, code: "invalid_conditional_schema", message: "Conditional schemas must be objects or booleans." };
+    }
+  }
   const children = [];
   if (isRecord2(schema.properties)) children.push(...Object.entries(schema.properties));
   if (isRecord2(schema.$defs)) children.push(...Object.entries(schema.$defs));
@@ -739,6 +752,9 @@ function inspectSchema(schema, path, root, depth) {
     ["additionalProperties", schema.additionalProperties],
     ["propertyNames", schema.propertyNames],
     ["items", schema.items],
+    ["if", schema.if],
+    ["then", schema.then],
+    ["else", schema.else],
     ...arraySchemaEntries("allOf", schema.allOf),
     ...arraySchemaEntries("anyOf", schema.anyOf),
     ...arraySchemaEntries("oneOf", schema.oneOf)
@@ -771,6 +787,15 @@ function validateNode(schema, value, path, root, errors, depth) {
       if (isRecord2(candidate)) validateNode(candidate, value, path, root, errors, depth + 1);
     }
   }
+  if (Object.prototype.hasOwnProperty.call(schema, "if")) {
+    const matches = schema.if === true || isRecord2(schema.if) && candidateMatches(schema.if, value, root, depth);
+    const selected = matches ? schema.then : schema.else;
+    if (selected === false) {
+      errors.push({ path, code: "conditional_schema", message: "Value is rejected by the selected conditional schema." });
+    } else if (isRecord2(selected)) {
+      validateNode(selected, value, path, root, errors, depth + 1);
+    }
+  }
   if (Array.isArray(schema.anyOf) && !schema.anyOf.some((candidate) => candidateMatches(candidate, value, root, depth))) {
     errors.push({ path, code: "any_of", message: "Value does not match any allowed schema." });
     return;
@@ -2174,7 +2199,9 @@ var TopoloClient = class _TopoloClient {
     } catch (error) {
       throw maskActionSecretError(error, this.actionSecrets);
     }
-    return preserveSensitiveResult ? result : await protectActionResult(result, this.actionSecretStore);
+    return preserveSensitiveResult ? result : await protectActionResult(result, this.actionSecretStore, {
+      preserveAgentGuidance: entry.appId === "app_topolo_docs"
+    });
   }
   async releaseActionSecret(reference) {
     if (!this.actionSecretStore) throw new TopoloSdkError("action_secret_store_required", "Protected action references require a secret store.");

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@topolo/cli",
   "packageManager": "pnpm@10.17.1",
-  "version": "0.12.17",
-  "topoloPublishedVersion": "0.12.17",
+  "version": "0.12.19",
+  "topoloPublishedVersion": "0.12.19",
   "description": "Public command-line interface for Topolo customer organizations, developers, and agents.",
   "license": "UNLICENSED",
   "author": "Topolo",
@@ -28,8 +28,8 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
-    "@topolo/mcp": "0.14.9",
-    "@topolo/sdk": "0.23.4",
+    "@topolo/mcp": "0.14.11",
+    "@topolo/sdk": "0.23.6",
     "commander": "^12.1.0"
   },
   "devDependencies": {