@topolo/sdk 0.11.8 → 0.11.9

package/dist/index.cjs

@@ -1818,7 +1818,7 @@ var TopoloClient = class _TopoloClient {
     }
     const mapped = mapActionInput(entry, input);
     const service = entry.appSlug || entry.appId;
-    return this.request({
+    const result = await this.request({
       service,
       ...entry.apiBaseUrl ? { baseUrl: entry.apiBaseUrl } : {},
       method: entry.method,
@@ -1832,6 +1832,7 @@ var TopoloClient = class _TopoloClient {
       },
       confirm: options.confirm === true || entry.readOnly && !entry.destructive && !entry.requiresConfirmation
     });
+    return redactActionResult(result);
   }
   /**
    * Introspect the current credential. Returns the caller's resolved identity,
@@ -1955,6 +1956,18 @@ function readOptionalString(value) {
 function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+function redactActionResult(value) {
+  if (Array.isArray(value)) return value.map(redactActionResult);
+  if (!isRecord3(value)) return value;
+  return Object.fromEntries(Object.entries(value).map(([key, item]) => [
+    key,
+    isSensitiveActionResultKey(key) ? "[REDACTED]" : redactActionResult(item)
+  ]));
+}
+function isSensitiveActionResultKey(key) {
+  const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
+  return ["authorization", "cookie", "setcookie", "proxyauthorization", "capability"].includes(normalized) || /(token|secret|password|privatekey|apikey)$/.test(normalized);
+}
 function resolveConfiguredServiceUrl(slug, serviceUrls) {
   for (const serviceKey of serviceKeyCandidates2(slug)) {
     const configured = serviceUrls?.[serviceKey];

package/dist/index.js

@@ -1735,7 +1735,7 @@ var TopoloClient = class _TopoloClient {
     }
     const mapped = mapActionInput(entry, input);
     const service = entry.appSlug || entry.appId;
-    return this.request({
+    const result = await this.request({
       service,
       ...entry.apiBaseUrl ? { baseUrl: entry.apiBaseUrl } : {},
       method: entry.method,
@@ -1749,6 +1749,7 @@ var TopoloClient = class _TopoloClient {
       },
       confirm: options.confirm === true || entry.readOnly && !entry.destructive && !entry.requiresConfirmation
     });
+    return redactActionResult(result);
   }
   /**
    * Introspect the current credential. Returns the caller's resolved identity,
@@ -1872,6 +1873,18 @@ function readOptionalString(value) {
 function isRecord3(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
+function redactActionResult(value) {
+  if (Array.isArray(value)) return value.map(redactActionResult);
+  if (!isRecord3(value)) return value;
+  return Object.fromEntries(Object.entries(value).map(([key, item]) => [
+    key,
+    isSensitiveActionResultKey(key) ? "[REDACTED]" : redactActionResult(item)
+  ]));
+}
+function isSensitiveActionResultKey(key) {
+  const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, "");
+  return ["authorization", "cookie", "setcookie", "proxyauthorization", "capability"].includes(normalized) || /(token|secret|password|privatekey|apikey)$/.test(normalized);
+}
 function resolveConfiguredServiceUrl(slug, serviceUrls) {
   for (const serviceKey of serviceKeyCandidates2(slug)) {
     const configured = serviceUrls?.[serviceKey];

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@topolo/sdk",
-  "version": "0.11.8",
-  "topoloPublishedVersion": "0.11.8",
+  "version": "0.11.9",
+  "topoloPublishedVersion": "0.11.9",
   "description": "Typed client SDK for the Topolo platform. Used by TopoloCli, TopoloMCP, and third-party agents.",
   "license": "UNLICENSED",
   "author": "Topolo",