@topolo/cli 0.1.18 → 0.1.20

package/dist/index.js

@@ -2699,7 +2699,28 @@ function sleep(ms) {
 }
 
 // src/version.ts
-var CLI_VERSION = "0.1.17";
+import { readFileSync } from "fs";
+import { dirname as dirname2, join as join2 } from "path";
+import { fileURLToPath } from "url";
+function readCliVersion() {
+  try {
+    const here = dirname2(fileURLToPath(import.meta.url));
+    const candidates = [
+      join2(here, "package.json"),
+      join2(here, "..", "package.json")
+    ];
+    for (const path4 of candidates) {
+      try {
+        const pkg = JSON.parse(readFileSync(path4, "utf8"));
+        if (typeof pkg.version === "string" && pkg.version) return pkg.version;
+      } catch {
+      }
+    }
+  } catch {
+  }
+  return "0.0.0";
+}
+var CLI_VERSION = readCliVersion();
 
 // src/client.ts
 async function buildClient(options) {
@@ -2938,14 +2959,14 @@ function parseQueryPairs(pairs) {
 
 // src/commands/apps.ts
 import { execSync } from "child_process";
-import { existsSync as existsSync3, mkdirSync, readFileSync as readFileSync2, writeFileSync } from "fs";
+import { existsSync as existsSync3, mkdirSync, readFileSync as readFileSync3, writeFileSync } from "fs";
 import path2 from "path";
 
 // src/commands/app-audit-local.ts
 import {
   existsSync as existsSync2,
   readdirSync,
-  readFileSync,
+  readFileSync as readFileSync2,
   statSync
 } from "fs";
 import path from "path";
@@ -2954,7 +2975,7 @@ function readEvidenceFile(appRoot) {
   const candidate = path.join(appRoot, ".topolo", "evidence.json");
   if (!isFile(candidate)) return null;
   try {
-    const raw = JSON.parse(readFileSync(candidate, "utf8"));
+    const raw = JSON.parse(readFileSync2(candidate, "utf8"));
     if (raw && typeof raw === "object" && raw.version === 1) {
       return raw;
     }
@@ -3737,7 +3758,7 @@ function readSourceIndex(root) {
   const files = collectSourceFiles(root, 4e3);
   const chunks = files.map((file) => {
     try {
-      return readFileSync(file, "utf8");
+      return readFileSync2(file, "utf8");
     } catch {
       return "";
     }
@@ -3797,7 +3818,7 @@ function sortedDirEntries(dir) {
 function readJson(filePath) {
   if (!isFile(filePath)) return null;
   try {
-    return JSON.parse(readFileSync(filePath, "utf8"));
+    return JSON.parse(readFileSync2(filePath, "utf8"));
   } catch {
     return null;
   }
@@ -3870,7 +3891,7 @@ function isFile(filePath) {
 // src/commands/app-scaffold.ts
 import { constants } from "fs";
 import { access, mkdir as mkdir2, writeFile as writeFile2 } from "fs/promises";
-import { dirname as dirname2, relative, resolve } from "path";
+import { dirname as dirname3, relative, resolve } from "path";
 var CLOUDFLARE_ACCOUNT_ID = "49ef1ba682ad8cfd720c86699ae17521";
 var STAGING_CLOUDFLARE_ACCOUNT_ID = "4f4e1c69a3830946f9fea7b1eb7531ac";
 var CLOUDFLARE_COMPATIBILITY_DATE = "2026-05-05";
@@ -3977,7 +3998,7 @@ async function writeApplicationScaffold(payload, options = {}) {
   const files = [];
   for (const planned of plannedFiles) {
     const existed = await pathExists(planned.absolutePath);
-    await mkdir2(dirname2(planned.absolutePath), { recursive: true });
+    await mkdir2(dirname3(planned.absolutePath), { recursive: true });
     await writeFile2(planned.absolutePath, planned.file.content, "utf8");
     files.push({
       path: planned.file.path,
@@ -4168,18 +4189,32 @@ function scaffoldFiles(options) {
       }
     );
     if (options.api && application.serviceId) {
-      files.push({
-        path: `PlatformApplications/TopoloAuth/catalog/service-manifests/${application.serviceId}.json`,
-        purpose: "Auth service manifest for first-party permissions, role bundles, and API-key scopes.",
-        requiredSignals: [
-          "serviceId matches the generated Worker service id",
-          "permissions, role bundles, and API-key scopes exist before the app is catalog-visible",
-          "systems metadata maps the service back to the generated TopoloDocs entries"
-        ],
-        content: serviceManifestJson(application, {
-          tenancy: options.payload.tenancy
-        })
-      });
+      files.push(
+        {
+          path: `PlatformApplications/TopoloAuth/catalog/service-manifests/${application.serviceId}.json`,
+          purpose: "Auth service manifest for first-party permissions, role bundles, and API-key scopes.",
+          requiredSignals: [
+            "serviceId matches the generated Worker service id",
+            "permissions, role bundles, and API-key scopes exist before the app is catalog-visible",
+            "systems metadata maps the service back to the generated TopoloDocs entries"
+          ],
+          content: serviceManifestJson(application, {
+            tenancy: options.payload.tenancy
+          })
+        },
+        {
+          path: `PlatformApplications/TopoloAuth/scripts/add-topolo-${slug}-service-production.sql`,
+          purpose: "Auth service catalog registration for embedded first-party login, launcher visibility, and callback origins.",
+          requiredSignals: [
+            "services.id matches the generated Worker service id",
+            "settings.launcher.category is first_party so embedded password login is allowed",
+            "base_url and auth_domain define the production callback origin"
+          ],
+          content: serviceRegistrationSql(application, {
+            tenancy: options.payload.tenancy
+          })
+        }
+      );
     }
   } else {
     files.push(
@@ -5574,6 +5609,7 @@ function internalDocs(application, options) {
     ...options.api ? [`- \`PlatformApplications/${application.appDir}/src/worker.ts\``] : [],
     `- \`PlatformApplications/${application.appDir}/topolo.cloudcontrol.json\``,
     ...options.api && application.serviceId ? [`- \`PlatformApplications/TopoloAuth/catalog/service-manifests/${application.serviceId}.json\``] : [],
+    ...options.api && application.serviceId ? [`- \`PlatformApplications/TopoloAuth/scripts/add-topolo-${slug}-service-production.sql\``] : [],
     "",
     "## API Reference",
     "",
@@ -5604,6 +5640,7 @@ function internalDocs(application, options) {
     "- run `topolo apps audit <app> --local --repo-root /Users/ashes/Projects/topolo --fail-on needs_review --json` after SDK catalog registration",
     "- inspect `topolo.cloudcontrol.json` before deployment changes",
     ...options.api && application.serviceId ? [`- inspect \`PlatformApplications/TopoloAuth/catalog/service-manifests/${application.serviceId}.json\` when permission grants fail`] : [],
+    ...options.api && application.serviceId ? [`- inspect \`PlatformApplications/TopoloAuth/scripts/add-topolo-${slug}-service-production.sql\` when embedded app login fails`] : [],
     "",
     "## Change Log / Verification",
     "",
@@ -5747,6 +5784,62 @@ function serviceManifestJson(application, options) {
   })}
 `;
 }
+function serviceRegistrationSql(application, options) {
+  const slug = toSlug(application.id);
+  const title = toTitle(application.name);
+  const serviceId = application.serviceId ?? application.id;
+  const productionUrl = application.productionUrl ?? `https://${slug}.topolo.app`;
+  const authDomain = hostnameFromUrl(productionUrl);
+  const surface = options.tenancy === "household" ? "personal-workspace" : "workspace";
+  const settings = JSON.stringify({
+    app_slug: `topolo-${slug}`,
+    surface,
+    auth_domain: authDomain,
+    launcher: {
+      category: "first_party",
+      app_id: slug
+    }
+  });
+  return [
+    `-- Register ${title} in the Topolo Auth service catalog.`,
+    "-- Safe to rerun.",
+    "",
+    "INSERT INTO services (",
+    "  id,",
+    "  name,",
+    "  description,",
+    "  base_url,",
+    "  version,",
+    "  status,",
+    "  settings,",
+    "  created_at,",
+    "  updated_at,",
+    "  show_in_app_switcher",
+    ")",
+    "VALUES (",
+    `  '${sqlString(serviceId)}',`,
+    `  '${sqlString(title)}',`,
+    `  'First-party ${sqlString(title)} ${sqlString(surface)} application.',`,
+    `  '${sqlString(productionUrl)}',`,
+    "  '1.0.0',",
+    "  'active',",
+    `  '${sqlString(settings)}',`,
+    "  strftime('%s', 'now'),",
+    "  strftime('%s', 'now'),",
+    "  1",
+    ")",
+    "ON CONFLICT(id) DO UPDATE SET",
+    "  name = excluded.name,",
+    "  description = excluded.description,",
+    "  base_url = excluded.base_url,",
+    "  version = excluded.version,",
+    "  status = excluded.status,",
+    "  settings = excluded.settings,",
+    "  updated_at = strftime('%s', 'now'),",
+    "  show_in_app_switcher = excluded.show_in_app_switcher;",
+    ""
+  ].join("\n");
+}
 function developerManifest(application, options) {
   return `${json({
     schema: "https://topolo.app/schemas/topolo-app-manifest.v1.json",
@@ -5870,6 +5963,13 @@ function toTitle(value) {
 function json(value) {
   return JSON.stringify(value, null, 2);
 }
+function hostnameFromUrl(value) {
+  try {
+    return new URL(value).hostname;
+  } catch {
+    return value.replace(/^https?:\/\//, "").replace(/\/.*$/, "");
+  }
+}
 async function pathExists(path4) {
   try {
     await access(path4, constants.F_OK);
@@ -5892,6 +5992,9 @@ function escapeHtml(value) {
 function escapeSingleQuoted(value) {
   return value.replace(/\\/g, "\\\\").replace(/'/g, "\\'");
 }
+function sqlString(value) {
+  return value.replace(/'/g, "''");
+}
 function escapeDoubleQuoted(value) {
   return value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
 }
@@ -6223,7 +6326,7 @@ function recordApplicationEvidence(application, options = {}) {
   let before = null;
   if (existsSync3(evidencePath)) {
     try {
-      const raw = JSON.parse(readFileSync2(evidencePath, "utf8"));
+      const raw = JSON.parse(readFileSync3(evidencePath, "utf8"));
       if (raw && typeof raw === "object" && raw.version === 1) {
         before = raw;
       }
@@ -6499,7 +6602,7 @@ function statusesAtOrWorse(threshold) {
 }
 
 // src/commands/platform.ts
-import { readdirSync as readdirSync2, readFileSync as readFileSync3, statSync as statSync2 } from "fs";
+import { readdirSync as readdirSync2, readFileSync as readFileSync4, statSync as statSync2 } from "fs";
 import path3 from "path";
 function registerPlatformCommand(program2) {
   const platform3 = program2.command("platform").description("Internal Topolo first-party platform and personal app commands");
@@ -6625,7 +6728,7 @@ function scanStagingProductionUrls(rootInput, allowPatterns) {
   function scanFile(filePath) {
     if (shouldSkipFile(filePath)) return;
     const relativePath = path3.relative(root, filePath);
-    const content = readFileSync3(filePath, "utf8");
+    const content = readFileSync4(filePath, "utf8");
     const lines = content.split(/\r?\n/);
     lines.forEach((line, index) => {
       const matches = [...line.matchAll(PRODUCTION_TOPOLO_URL_PATTERN)].map((match) => match[0]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@topolo/cli",
-  "version": "0.1.18",
+  "version": "0.1.20",
   "description": "Command-line interface for Topolo developers, operators, and agents, with internal first-party scaffolding available under the topolo platform namespace.",
   "type": "module",
   "bin": {