@topolo/cli 0.1.19 → 0.1.20

package/dist/index.js

@@ -4189,18 +4189,32 @@ function scaffoldFiles(options) {
       }
     );
     if (options.api && application.serviceId) {
-      files.push({
-        path: `PlatformApplications/TopoloAuth/catalog/service-manifests/${application.serviceId}.json`,
-        purpose: "Auth service manifest for first-party permissions, role bundles, and API-key scopes.",
-        requiredSignals: [
-          "serviceId matches the generated Worker service id",
-          "permissions, role bundles, and API-key scopes exist before the app is catalog-visible",
-          "systems metadata maps the service back to the generated TopoloDocs entries"
-        ],
-        content: serviceManifestJson(application, {
-          tenancy: options.payload.tenancy
-        })
-      });
+      files.push(
+        {
+          path: `PlatformApplications/TopoloAuth/catalog/service-manifests/${application.serviceId}.json`,
+          purpose: "Auth service manifest for first-party permissions, role bundles, and API-key scopes.",
+          requiredSignals: [
+            "serviceId matches the generated Worker service id",
+            "permissions, role bundles, and API-key scopes exist before the app is catalog-visible",
+            "systems metadata maps the service back to the generated TopoloDocs entries"
+          ],
+          content: serviceManifestJson(application, {
+            tenancy: options.payload.tenancy
+          })
+        },
+        {
+          path: `PlatformApplications/TopoloAuth/scripts/add-topolo-${slug}-service-production.sql`,
+          purpose: "Auth service catalog registration for embedded first-party login, launcher visibility, and callback origins.",
+          requiredSignals: [
+            "services.id matches the generated Worker service id",
+            "settings.launcher.category is first_party so embedded password login is allowed",
+            "base_url and auth_domain define the production callback origin"
+          ],
+          content: serviceRegistrationSql(application, {
+            tenancy: options.payload.tenancy
+          })
+        }
+      );
     }
   } else {
     files.push(
@@ -5595,6 +5609,7 @@ function internalDocs(application, options) {
     ...options.api ? [`- \`PlatformApplications/${application.appDir}/src/worker.ts\``] : [],
     `- \`PlatformApplications/${application.appDir}/topolo.cloudcontrol.json\``,
     ...options.api && application.serviceId ? [`- \`PlatformApplications/TopoloAuth/catalog/service-manifests/${application.serviceId}.json\``] : [],
+    ...options.api && application.serviceId ? [`- \`PlatformApplications/TopoloAuth/scripts/add-topolo-${slug}-service-production.sql\``] : [],
     "",
     "## API Reference",
     "",
@@ -5625,6 +5640,7 @@ function internalDocs(application, options) {
     "- run `topolo apps audit <app> --local --repo-root /Users/ashes/Projects/topolo --fail-on needs_review --json` after SDK catalog registration",
     "- inspect `topolo.cloudcontrol.json` before deployment changes",
     ...options.api && application.serviceId ? [`- inspect \`PlatformApplications/TopoloAuth/catalog/service-manifests/${application.serviceId}.json\` when permission grants fail`] : [],
+    ...options.api && application.serviceId ? [`- inspect \`PlatformApplications/TopoloAuth/scripts/add-topolo-${slug}-service-production.sql\` when embedded app login fails`] : [],
     "",
     "## Change Log / Verification",
     "",
@@ -5768,6 +5784,62 @@ function serviceManifestJson(application, options) {
   })}
 `;
 }
+function serviceRegistrationSql(application, options) {
+  const slug = toSlug(application.id);
+  const title = toTitle(application.name);
+  const serviceId = application.serviceId ?? application.id;
+  const productionUrl = application.productionUrl ?? `https://${slug}.topolo.app`;
+  const authDomain = hostnameFromUrl(productionUrl);
+  const surface = options.tenancy === "household" ? "personal-workspace" : "workspace";
+  const settings = JSON.stringify({
+    app_slug: `topolo-${slug}`,
+    surface,
+    auth_domain: authDomain,
+    launcher: {
+      category: "first_party",
+      app_id: slug
+    }
+  });
+  return [
+    `-- Register ${title} in the Topolo Auth service catalog.`,
+    "-- Safe to rerun.",
+    "",
+    "INSERT INTO services (",
+    "  id,",
+    "  name,",
+    "  description,",
+    "  base_url,",
+    "  version,",
+    "  status,",
+    "  settings,",
+    "  created_at,",
+    "  updated_at,",
+    "  show_in_app_switcher",
+    ")",
+    "VALUES (",
+    `  '${sqlString(serviceId)}',`,
+    `  '${sqlString(title)}',`,
+    `  'First-party ${sqlString(title)} ${sqlString(surface)} application.',`,
+    `  '${sqlString(productionUrl)}',`,
+    "  '1.0.0',",
+    "  'active',",
+    `  '${sqlString(settings)}',`,
+    "  strftime('%s', 'now'),",
+    "  strftime('%s', 'now'),",
+    "  1",
+    ")",
+    "ON CONFLICT(id) DO UPDATE SET",
+    "  name = excluded.name,",
+    "  description = excluded.description,",
+    "  base_url = excluded.base_url,",
+    "  version = excluded.version,",
+    "  status = excluded.status,",
+    "  settings = excluded.settings,",
+    "  updated_at = strftime('%s', 'now'),",
+    "  show_in_app_switcher = excluded.show_in_app_switcher;",
+    ""
+  ].join("\n");
+}
 function developerManifest(application, options) {
   return `${json({
     schema: "https://topolo.app/schemas/topolo-app-manifest.v1.json",
@@ -5891,6 +5963,13 @@ function toTitle(value) {
 function json(value) {
   return JSON.stringify(value, null, 2);
 }
+function hostnameFromUrl(value) {
+  try {
+    return new URL(value).hostname;
+  } catch {
+    return value.replace(/^https?:\/\//, "").replace(/\/.*$/, "");
+  }
+}
 async function pathExists(path4) {
   try {
     await access(path4, constants.F_OK);
@@ -5913,6 +5992,9 @@ function escapeHtml(value) {
 function escapeSingleQuoted(value) {
   return value.replace(/\\/g, "\\\\").replace(/'/g, "\\'");
 }
+function sqlString(value) {
+  return value.replace(/'/g, "''");
+}
 function escapeDoubleQuoted(value) {
   return value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@topolo/cli",
-  "version": "0.1.19",
+  "version": "0.1.20",
   "description": "Command-line interface for Topolo developers, operators, and agents, with internal first-party scaffolding available under the topolo platform namespace.",
   "type": "module",
   "bin": {