@topolo/cli 0.12.24 → 0.12.25

package/dist/index.js

@@ -487,20 +487,25 @@ async function protectActionResult(value, store, options = {}) {
     if (options.preserveActionContracts === true && ["agentContract", "agent_contract"].includes(key) && isRecord(item)) return true;
     return options.preserveAgentGuidance === true && key === "agentGuidance" && isRecord(item) && item.schemaVersion === 1 && typeof item.kind === "string" && ["action-guide", "product-guide", "concept"].includes(item.kind);
   }
-  async function protect(item, key = "") {
+  function localizationMap(path) {
+    const location = path.join("/");
+    if (options.localizationAction === "sources.verify") return location === "data/hashes";
+    return ["translation.release.prepare", "translation.release.import", "translation.release.get"].includes(options.localizationAction ?? "") && /^data\/bundle\/catalogs\/\*\/(sources|(?:packs|provenance)\/[^/]+)$/.test(location);
+  }
+  async function protect(item, key = "", path = []) {
     if (documentation(item, key)) return item;
     if (isActionSecretReference(item)) return item;
     if (Array.isArray(item) && /(?:backup|recovery)codes$/.test(key.toLowerCase().replace(/[^a-z0-9]/g, ""))) {
-      return Promise.all(item.map((child) => protect(child, key)));
+      return Promise.all(item.map((child) => protect(child, key, [...path, "*"])));
     }
     if (sensitive(key, item)) {
       const reference = store ? await store.save(item) : "[REDACTED]";
       if (typeof item === "string" && item) secrets.set(item, reference);
       return reference;
     }
-    if (Array.isArray(item)) return Promise.all(item.map((child) => protect(child)));
+    if (Array.isArray(item)) return Promise.all(item.map((child) => protect(child, "", [...path, "*"])));
     if (!isRecord(item)) return item;
-    return Object.fromEntries(await Promise.all(Object.entries(item).map(async ([name, child]) => [name, await protect(child, name)])));
+    return Object.fromEntries(await Promise.all(Object.entries(item).map(async ([name, child]) => [name, await protect(child, localizationMap(path) ? "" : name, [...path, name])])));
   }
   const protectedValue = await protect(value);
   async function protectEmbedded(item, key = "") {
@@ -2244,7 +2249,8 @@ var TopoloClient = class _TopoloClient {
     return preserveSensitiveResult ? result : await protectActionResult(result, this.actionSecretStore, {
       preserveAgentGuidance: entry.appId === "app_topolo_docs",
       preserveActionSchemas: entry.appId === "app_topolo_developers" && entry.name === "apps.actions.list",
-      preserveActionContracts: entry.appId === "app_topolo_developers" && entry.name === "apps.actions.list"
+      preserveActionContracts: entry.appId === "app_topolo_developers" && entry.name === "apps.actions.list",
+      localizationAction: entry.appId === "app_topolo_localize" ? entry.name : void 0
     });
   }
   async releaseActionSecret(reference) {

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@topolo/cli",
   "packageManager": "pnpm@10.17.1",
-  "version": "0.12.24",
-  "topoloPublishedVersion": "0.12.24",
+  "version": "0.12.25",
+  "topoloPublishedVersion": "0.12.25",
   "description": "Public command-line interface for Topolo customer organizations, developers, and agents.",
   "license": "UNLICENSED",
   "author": "Topolo",
@@ -28,8 +28,8 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
-    "@topolo/mcp": "0.14.15",
-    "@topolo/sdk": "0.23.11",
+    "@topolo/mcp": "0.14.16",
+    "@topolo/sdk": "0.23.12",
     "commander": "^12.1.0"
   },
   "devDependencies": {