Use a read token for pipeline pulls
CI jobs that only export bundles should use a token with read-only translation scope. Keep write tokens for controlled update flows.
Pipeline sketch
npm install --global @lexique/cli@0.2.0
export LEXIQUE_TOKEN="$LEXIQUE_MACHINE_TOKEN"
lexique pull --project 123 --locale en --format yaml --output translations/messages.en.yaml
Failure handling
- Fail the job on unauthenticated, forbidden, or payment-required API responses.
- Keep generated files deterministic so review diffs are readable.
- Do not log token values or translation content containing secrets.