@topolo/cli 0.1.31 → 0.1.32

package/README.md

@@ -165,10 +165,15 @@ including package/auth/shell/docs/CloudControl files, a deploy-ready
 Wrangler Worker/static-assets baseline, an Auth service manifest, and a
 `topolo-conformance.yml` GitHub Actions workflow for first-party platform
 apps. Add `--write --repo-root <topolo-checkout>` to create the files on disk;
-existing files are refused unless `--force` is passed. The generated workflow
-checks out the app under `PlatformApplications/<AppDir>`, checks out
-`Topolo-io/TopoloDocs`, `Topolo-io/topolo-sdk`, and `Topolo-io/TopoloCli`, builds the
-current CLI from source, then runs the local conformance audit with
+existing files are refused unless `--force` is passed. The first-party scaffold
+writes apps under `apps/<AppDir>`, writes canonical docs under
+`system-apps/TopoloDocs/apps/web/src/content`, writes Auth service manifests
+under `topolo-platform/core/TopoloAuth/catalog/service-manifests`, emits a
+project-local `AGENTS.md` for future agent work in the scaffold, and pins the
+generated starter to the current published shared package baseline. The
+generated workflow checks out the app under `apps/<AppDir>`, checks out
+`Topolo-io/TopoloDocs`, `Topolo-io/topolo-sdk`, and `Topolo-io/TopoloCli`, builds
+the current CLI from source, then runs the local conformance audit with
 `--fail-on needs_review`.
 
 For third-party developers, use `--target developer` or `--developer`. Developer

package/dist/index.js

@@ -2712,7 +2712,6 @@ var CrmModule = class {
   constructor(client) {
     this.client = client;
   }
-  client;
   async listContacts(options = {}) {
     const res = await this.client.request({
       service: "crm",
@@ -2758,7 +2757,6 @@ var IdentityModule = class {
   constructor(client) {
     this.client = client;
   }
-  client;
   /** Returns the resolved user, organization, and permission set for the
    *  current credential. Equivalent to `TopoloClient.introspect()` — exposed
    *  on this module for symmetry with the other domain modules. */
@@ -3684,7 +3682,7 @@ var SOURCE_EXTENSIONS = /* @__PURE__ */ new Set([
 function enrichApplicationAuditWithLocalEvidence(report, options = {}) {
   const repoRoot = resolveTopoloRepoRoot(options.repoRoot, options.cwd ?? process.cwd());
   if (!repoRoot) {
-    throw new Error("Could not locate the Topolo checkout. Pass --repo-root with the path that contains PlatformApplications.");
+    throw new Error("Could not locate the Topolo checkout. Pass --repo-root with the path that contains apps/ and system-apps/.");
   }
   const applications = report.applications.map(
     (audit) => enrichApplicationAudit(audit, collectEvidence(repoRoot, audit.application))
@@ -3713,8 +3711,10 @@ function resolveTopoloRepoRoot(explicitRoot, cwd = process.cwd()) {
   }
 }
 function normalizeTopoloRoot(candidate) {
-  if (isDirectory(path.join(candidate, "PlatformApplications"))) return candidate;
-  if (path.basename(candidate) === "PlatformApplications" && isDirectory(path.join(candidate, "TopoloCli"))) {
+  if (isDirectory(path.join(candidate, "apps")) && isDirectory(path.join(candidate, "system-apps"))) {
+    return candidate;
+  }
+  if (path.basename(candidate) === "apps" && isDirectory(path.join(path.dirname(candidate), "system-apps"))) {
     return path.dirname(candidate);
   }
   return null;
@@ -4298,7 +4298,8 @@ function nativeDashboardWidgetEvidence(evidence) {
   return unique(items);
 }
 function collectEvidence(repoRoot, application) {
-  const appRoot = path.join(repoRoot, "PlatformApplications", application.appDir);
+  const appRepoPath = applicationSourcePath(application.appDir);
+  const appRoot = path.join(repoRoot, appRepoPath);
   const packageJsonPath = path.join(appRoot, "package.json");
   const packageJson2 = readPackageJson(packageJsonPath);
   const cloudcontrolPath = path.join(appRoot, "topolo.cloudcontrol.json");
@@ -4539,7 +4540,7 @@ function matchingSystems(repoRoot, application) {
   const docsRoot = topoloDocsRoot(repoRoot);
   const systemsRoot = path.join(docsRoot, "src", "content", "systems");
   if (!isDirectory(systemsRoot)) return [];
-  const appRepoPath = `PlatformApplications/${application.appDir}`;
+  const appRepoPath = applicationSourcePath(application.appDir);
   return readdirSync(systemsRoot).filter((entry) => entry.endsWith(".json")).map((entry) => readJson(path.join(systemsRoot, entry))).filter((system) => Boolean(system)).filter((system) => {
     const repoPaths = [...system.repo_paths ?? [], ...system.repoPaths ?? []];
     return repoPaths.some(
@@ -4560,9 +4561,14 @@ function existingDocs(repoRoot, systems) {
   );
 }
 function topoloDocsRoot(repoRoot) {
-  const platformDocs = path.join(repoRoot, "PlatformApplications", "TopoloDocs");
-  if (isDirectory(platformDocs)) return platformDocs;
-  return path.join(repoRoot, "TopoloDocs");
+  return path.join(repoRoot, "system-apps", "TopoloDocs", "apps", "web");
+}
+function applicationSourcePath(appDir) {
+  if (appDir === "TopoloCli" || appDir === "TopoloCLI") return "topolo-platform/packages/topolo-cli";
+  if (appDir === "TopoloDocs") return "system-apps/TopoloDocs";
+  if (appDir === "TopoloAuth") return "topolo-platform/core/TopoloAuth";
+  if (appDir === "TopoloCloudControl") return "topolo-platform/core/TopoloCloudControl";
+  return `apps/${appDir}`;
 }
 function docExists(contentRoot, docPath) {
   return [
@@ -4690,10 +4696,12 @@ function unique(items) {
   return Array.from(new Set(items));
 }
 function relativeTopoloPath(filePath) {
-  const index = filePath.indexOf("PlatformApplications/");
+  const index = filePath.indexOf("apps/");
   if (index >= 0) return filePath.slice(index);
-  const docsIndex = filePath.indexOf("TopoloDocs/");
+  const docsIndex = filePath.indexOf("system-apps/TopoloDocs/");
   if (docsIndex >= 0) return filePath.slice(docsIndex);
+  const platformIndex = filePath.indexOf("topolo-platform/");
+  if (platformIndex >= 0) return filePath.slice(platformIndex);
   return filePath;
 }
 function isDirectory(filePath) {
@@ -4849,11 +4857,11 @@ function escapeSingleQuoted(value) {
 function escapeFrontmatter(value) {
   return value.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
 }
-function firstPartyAppPath(appDir, audience) {
-  if (appDir === "TopoloCli" || appDir === "TopoloCLI") return "Apps/system/TopoloCLI";
-  if (appDir === "TopoloDocs") return "Apps/system/TopoloDocs";
-  if (appDir === "TopoloAuth") return "Apps/system/TopoloAuth";
-  return `${audience === "personal" ? "Apps/personal" : "Apps/business"}/${appDir}`;
+function firstPartyAppPath(appDir, _audience) {
+  if (appDir === "TopoloCli" || appDir === "TopoloCLI") return "topolo-platform/packages/topolo-cli";
+  if (appDir === "TopoloDocs") return "system-apps/TopoloDocs";
+  if (appDir === "TopoloAuth") return "topolo-platform/core/TopoloAuth";
+  return `apps/${appDir}`;
 }
 
 // src/commands/app-scaffold-package-template.ts
@@ -4871,10 +4879,10 @@ function packageJson(application, target, options) {
     typecheck: "tsc --noEmit"
   };
   if (options.browser) {
-    dependencies.react = "^18.3.1";
-    dependencies["react-dom"] = "^18.3.1";
-    devDependencies["@types/react"] = "^18.3.3";
-    devDependencies["@types/react-dom"] = "^18.3.0";
+    dependencies.react = "^19.2.0";
+    dependencies["react-dom"] = "^19.2.0";
+    devDependencies["@types/react"] = "^19.2.2";
+    devDependencies["@types/react-dom"] = "^19.2.2";
     devDependencies["@vitejs/plugin-react"] = "^4.7.0";
     if (target === "platform") {
       dependencies["@topolo-io/auth-client"] = topoloPackageVersion("@topolo-io/auth-client", target);
@@ -4923,28 +4931,28 @@ function topoloPackageVersion(packageName, target) {
   if (target === "developer") {
     if (packageName === "@topolo/login") return "^0.1.0";
     if (packageName === "@topolo-io/auth-client") return "^1.0.0";
-    if (packageName === "@topolo/sdk") return "^0.4.1";
+    if (packageName === "@topolo/sdk") return "^0.4.9";
     return "^0.1.0";
   }
-  const platformPackageFolders = {
-    "@topolo/sdk": "topolo-sdk",
-    "@topolo/login": "topolo-login",
-    "@topolo-io/app-funnel": "topolo-app-funnel",
-    "@topolo-io/app-launcher": "topolo-app-launcher",
-    "@topolo-io/app-shell": "topolo-app-shell",
-    "@topolo-io/auth-client": "topolo-auth-client",
-    "@topolo-io/auth-middleware": "topolo-auth-middleware",
-    "@topolo-io/worker-runtime": "topolo-worker-runtime",
-    "@topolo-io/design-tokens": "topolo-design-tokens",
-    "@topolo-io/onboarding": "topolo-onboarding",
-    "@topolo-io/tour": "topolo-tour",
-    "@topolo-io/ui-kit": "topolo-ui-kit"
+  const platformPackageVersions = {
+    "@topolo/sdk": "^0.4.9",
+    "@topolo/login": "^0.1.0",
+    "@topolo-io/app-funnel": "^0.1.6",
+    "@topolo-io/app-launcher": "^0.1.15",
+    "@topolo-io/app-shell": "^0.5.54",
+    "@topolo-io/auth-client": "^1.2.1",
+    "@topolo-io/auth-middleware": "^0.3.4",
+    "@topolo-io/worker-runtime": "^0.1.11",
+    "@topolo-io/design-tokens": "^0.1.8",
+    "@topolo-io/onboarding": "^0.9.5",
+    "@topolo-io/tour": "^0.3.4",
+    "@topolo-io/ui-kit": "^0.4.233"
   };
-  const folder = platformPackageFolders[packageName];
-  if (!folder) {
+  const version = platformPackageVersions[packageName];
+  if (!version) {
     throw new Error(`Unknown Topolo platform package: ${packageName}`);
   }
-  return `file:../packages/${folder}`;
+  return version;
 }
 function hasScaffoldResources(resources) {
   return resources.d1 || resources.r2 || resources.queue || resources.workflow || resources.containerProcessing;
@@ -5073,6 +5081,67 @@ function readme(application, target, options) {
   return `${lines.join("\n")}
 `;
 }
+function agentRules(application, target, options) {
+  const displayName = toTitle(application.name);
+  if (target === "developer") {
+    return [
+      `# AGENTS.md - ${displayName}`,
+      "",
+      "These rules apply to this scaffolded Topolo developer application.",
+      "",
+      "## Scope First",
+      "",
+      "- Confirm whether a change belongs in this app, the public Topolo SDK/Login integration boundary, or the registered `topolo.app.json` manifest before editing.",
+      "- Keep public developer scaffolds independent from private first-party Topolo packages.",
+      "- Keep `topolo.app.json`, callback URLs, requested scopes, and README verification steps aligned with runtime behavior.",
+      "",
+      "## Implementation Rules",
+      "",
+      "- Make focused changes only; do not rewrite generated structure unless the task requires it.",
+      "- For API-backed changes, validate bearer tokens through Topolo Auth and derive tenant context from the verified credential.",
+      "- For browser changes, keep the OAuth authorization-code + PKCE flow intact and do not hardcode user, organization, or household ids.",
+      "- Add or update tests for changed behavior before handoff.",
+      "",
+      "## Verification",
+      "",
+      "- Run `npm run typecheck` and `npm run build` before handoff.",
+      ...options.api ? ["- Run Worker deploy dry-runs or the project deploy check after changing API bindings."] : [],
+      "- Flag any required Topolo Developers registration or provisioning follow-up explicitly.",
+      ""
+    ].join("\n");
+  }
+  const portfolioLabel = options.portfolio === "personal" ? "personal" : "platform";
+  const tenantLabel = options.tenancy === "household" ? "household" : "organization";
+  return [
+    `# AGENTS.md - ${displayName}`,
+    "",
+    "These rules apply to this first-party Topolo scaffold.",
+    "",
+    "## Canonical Ownership",
+    "",
+    "- The workspace-level `/Users/ashes/Projects/Topolo/AGENTS.md` rules still apply.",
+    `- This app is a first-party ${portfolioLabel} app under \`apps/${application.appDir}\` with ${tenantLabel}-scoped product behavior.`,
+    "- Put reusable UI in shared platform packages and reusable API/runtime behavior in shared platform packages; keep this app local only for app-specific product logic.",
+    "- Keep `topolo.app.json`, `topolo.cloudcontrol.json`, TopoloDocs system/public/internal docs, and Auth service manifests aligned with behavior changes.",
+    "- Keep `topolo.app.json` actions current for callable product operations and mark mutating, external-send, billing, export, destructive, and provisioning actions for confirmation.",
+    "",
+    "## Implementation Rules",
+    "",
+    "- Start from `staging`, preserve other agents' work, and do not revert unrelated local changes.",
+    "- Make contained changes at the real ownership boundary; do not patch around shared runtime, auth, launcher, shell, or resource-context issues locally.",
+    "- Browser code should stay on the shared landing/login/callback/AppShell baseline generated by the scaffold.",
+    ...options.api ? ["- API code should stay on `@topolo-io/worker-runtime`, derive auth context from verified credentials, and preserve Nexus usage monitoring."] : [],
+    ...hasScaffoldResources(options.resources) ? ["- Keep Cloudflare resource bindings in Wrangler, CloudControl, Env typing, docs, and README verification output in sync."] : [],
+    "",
+    "## Verification",
+    "",
+    "- Add or update tests for changed behavior; newly added code should be covered.",
+    "- Run the most specific affected tests plus `npm run typecheck` and `npm run build` before handoff.",
+    "- Run `npm run check:deploy-config` after resource binding changes when the script exists.",
+    "- Deploy and verify staging before any production promotion.",
+    ""
+  ].join("\n");
+}
 function tsconfigJson(api, target) {
   const include = target === "platform" ? ["apps/web/src", ...api ? ["apps/api/src"] : []] : ["src"];
   return `${json({
@@ -6487,10 +6556,10 @@ function scaffoldCommands(options) {
   const portfolioFlags = options.portfolio === "personal" ? " --portfolio personal" : "";
   const profileFlags = options.profile ? ` --profile ${options.profile}` : "";
   return [
-    `topolo platform apps scaffold ${scaffoldId}${portfolioFlags}${profileFlags} --write --provision --repo-root /Users/ashes/Projects/Topolo/Platform --json`,
+    `topolo platform apps scaffold ${scaffoldId}${portfolioFlags}${profileFlags} --write --provision --repo-root /Users/ashes/Projects/Topolo --json`,
     "topolo apps requirements --json",
-    `topolo apps audit ${options.id} --local --repo-root /Users/ashes/Projects/Topolo/Platform --fail-on needs_review --json`,
-    `topolo apps audit ${options.id} --local --repo-root /Users/ashes/Projects/Topolo/Platform --fail-on partial --json`
+    `topolo apps audit ${options.id} --local --repo-root /Users/ashes/Projects/Topolo --fail-on needs_review --json`,
+    `topolo apps audit ${options.id} --local --repo-root /Users/ashes/Projects/Topolo --fail-on partial --json`
   ];
 }
 function topoloConformanceWorkflow(options) {
@@ -6502,7 +6571,7 @@ function topoloConformanceWorkflow(options) {
     "        uses: actions/checkout@v4",
     "        with:",
     "          repository: Topolo-io/TopoloDocs",
-    "          path: Apps/system/TopoloDocs",
+    "          path: system-apps/TopoloDocs",
     "          token: ${{ steps.app-token.outputs.token || secrets.TOPOLO_CI_REPO_TOKEN }}"
   ];
   const cliCheckoutStep = options.appDir === "TopoloCLI" || options.appDir === "TopoloCli" ? [] : [
@@ -6512,7 +6581,7 @@ function topoloConformanceWorkflow(options) {
     "        uses: actions/checkout@v4",
     "        with:",
     "          repository: Topolo-io/TopoloCli",
-    "          path: Apps/system/TopoloCLI",
+    "          path: topolo-platform/packages/topolo-cli",
     "          token: ${{ steps.app-token.outputs.token || secrets.TOPOLO_CI_REPO_TOKEN }}"
   ];
   return [
@@ -6555,7 +6624,7 @@ function topoloConformanceWorkflow(options) {
     "        uses: actions/checkout@v4",
     "        with:",
     "          repository: Topolo-io/topolo-sdk",
-    "          path: Apps/packages/topolo-sdk",
+    "          path: topolo-platform/packages/topolo-sdk",
     "          token: ${{ steps.app-token.outputs.token || secrets.TOPOLO_CI_REPO_TOKEN }}",
     ...cliCheckoutStep,
     "",
@@ -6572,14 +6641,14 @@ function topoloConformanceWorkflow(options) {
     "",
     "      - name: Build Topolo SDK",
     `        if: steps.app-token.outputs.token != '' || env.HAS_TOPOLO_CI_REPO_TOKEN == 'true'`,
-    "        working-directory: Apps/packages/topolo-sdk",
+    "        working-directory: topolo-platform/packages/topolo-sdk",
     "        run: |",
     "          npm install --no-audit --no-fund",
     "          npm run build",
     "",
     "      - name: Build Topolo CLI",
     `        if: steps.app-token.outputs.token != '' || env.HAS_TOPOLO_CI_REPO_TOKEN == 'true'`,
-    "        working-directory: Apps/system/TopoloCLI",
+    "        working-directory: topolo-platform/packages/topolo-cli",
     "        run: |",
     "          npm install --no-audit --no-fund",
     "          npm run build",
@@ -6587,13 +6656,13 @@ function topoloConformanceWorkflow(options) {
     "      - name: Run Topolo app conformance audit",
     `        if: steps.app-token.outputs.token != '' || env.HAS_TOPOLO_CI_REPO_TOKEN == 'true'`,
     "        run: |",
-    `          node Apps/system/TopoloCLI/dist/index.js apps audit ${options.id} --local --repo-root "$GITHUB_WORKSPACE" --fail-on needs_review --json`,
+    `          node topolo-platform/packages/topolo-cli/dist/index.js apps audit ${options.id} --local --repo-root "$GITHUB_WORKSPACE" --fail-on needs_review --json`,
     "",
     "      - name: Record green CI evidence",
     `        if: \${{ success() && (steps.app-token.outputs.token != '' || env.HAS_TOPOLO_CI_REPO_TOKEN == 'true') }}`,
     `        working-directory: ${appPath}`,
     "        run: |",
-    `          node "$GITHUB_WORKSPACE/Apps/system/TopoloCLI/dist/index.js" apps record-evidence ${options.id} --build --typecheck --test --commit "$GITHUB_SHA"`
+    `          node "$GITHUB_WORKSPACE/topolo-platform/packages/topolo-cli/dist/index.js" apps record-evidence ${options.id} --build --typecheck --test --commit "$GITHUB_SHA"`
   ].join("\n");
 }
 
@@ -6743,6 +6812,9 @@ function scaffoldPackages(options) {
     packages.add("@topolo-io/app-launcher");
     packages.add("@topolo-io/app-shell");
     packages.add("@topolo-io/auth-client");
+    packages.add("@topolo-io/design-tokens");
+    packages.add("@topolo-io/onboarding");
+    packages.add("@topolo-io/tour");
     packages.add("@topolo-io/ui-kit");
   }
   if (options.api) {
@@ -6805,6 +6877,21 @@ function scaffoldFiles(options) {
       ],
       content: gitignore()
     },
+    {
+      path: `${base}/AGENTS.md`,
+      purpose: "Local agent rules for safe work inside the generated project.",
+      requiredSignals: [
+        "states the app-specific ownership boundary",
+        "keeps future agents aligned with Topolo docs, manifest, testing, and staging expectations"
+      ],
+      content: agentRules(application, target, {
+        api: options.api,
+        audience: options.payload.audience,
+        tenancy: options.payload.tenancy,
+        portfolio: options.payload.portfolio,
+        resources: options.payload.resources
+      })
+    },
     {
       path: `${base}/tsconfig.json`,
       purpose: "TypeScript configuration for the generated app.",
@@ -6904,15 +6991,15 @@ function scaffoldFiles(options) {
         path: `${base}/.github/workflows/topolo-conformance.yml`,
         purpose: "PR/push gate that runs the local Topolo app audit with docs evidence.",
         requiredSignals: [
-          "checks out this repo under its Apps lane directory",
-          "checks out TopoloDocs under Apps/system/TopoloDocs",
+          "checks out this repo under its workspace app directory",
+          "checks out TopoloDocs under system-apps/TopoloDocs",
           "checks out topolo-sdk and TopoloCli from main so the gate does not wait for an npm publish",
           "runs topolo apps audit with --local and --fail-on needs_review"
         ],
         content: options.ciWorkflow ?? ""
       },
       {
-        path: `Apps/system/TopoloDocs/src/content/systems/topolo-${slug}.json`,
+        path: `system-apps/TopoloDocs/apps/web/src/content/systems/topolo-${slug}.json`,
         purpose: "Canonical system registry entry.",
         requiredSignals: [
           `repo_paths includes ${base}`,
@@ -6929,7 +7016,7 @@ function scaffoldFiles(options) {
         })
       },
       {
-        path: `Apps/system/TopoloDocs/src/content/internal/apps/${slug}.mdx`,
+        path: `system-apps/TopoloDocs/apps/web/src/content/internal/apps/${slug}.mdx`,
         purpose: "Internal operator handbook.",
         requiredSignals: [
           "documents ownership, routes, auth boundary, deployment, operations, and verification",
@@ -6945,7 +7032,7 @@ function scaffoldFiles(options) {
         })
       },
       {
-        path: `Apps/system/TopoloDocs/src/content/public/applications/${slug}.mdx`,
+        path: `system-apps/TopoloDocs/apps/web/src/content/public/applications/${slug}.mdx`,
         purpose: "Public application overview.",
         requiredSignals: [
           "documents the product surface without internal-only details",
@@ -6964,7 +7051,7 @@ function scaffoldFiles(options) {
     if (options.api && application.serviceId) {
       files.push(
         {
-          path: `Apps/system/TopoloAuth/catalog/service-manifests/${application.serviceId}.json`,
+          path: `topolo-platform/core/TopoloAuth/catalog/service-manifests/${application.serviceId}.json`,
           purpose: "Auth service manifest for first-party permissions, role bundles, and API-key scopes.",
           requiredSignals: [
             "serviceId matches the generated Worker service id",
@@ -7412,7 +7499,7 @@ function cloudcontrolJson(application, options) {
   ];
   return `${json({
     name: `topolo-${slug}`,
-    description: `Canonical documentation for ${toTitle(application.name)} lives in Apps/system/TopoloDocs.`,
+    description: `Canonical documentation for ${toTitle(application.name)} lives in system-apps/TopoloDocs.`,
     deploy_method: "wrangler",
     ci_provider: "github_actions",
     repo_identity: {
@@ -7563,7 +7650,7 @@ function internalDocs(application, options) {
     `last_verified: "${CURRENT_VERIFICATION_DATE}"`,
     "source_repos:",
     `  - "${appPath}"`,
-    '  - "Apps/system/TopoloDocs"',
+    '  - "system-apps/TopoloDocs"',
     'audience: "internal"',
     "tags:",
     `  - "${slug}"`,
@@ -7596,7 +7683,7 @@ function internalDocs(application, options) {
     ...options.api ? [`- \`${appPath}/apps/api/src/worker.ts\``, `- \`${appPath}/apps/api/wrangler.toml\``] : [],
     `- \`${appPath}/topolo.app.json\``,
     `- \`${appPath}/topolo.cloudcontrol.json\``,
-    ...options.api && application.serviceId ? [`- \`Apps/system/TopoloAuth/catalog/service-manifests/${application.serviceId}.json\``] : [],
+    ...options.api && application.serviceId ? [`- \`topolo-platform/core/TopoloAuth/catalog/service-manifests/${application.serviceId}.json\``] : [],
     "",
     "## API Reference",
     "",
@@ -7625,7 +7712,7 @@ function internalDocs(application, options) {
     "## Debugging",
     "",
     "- run `npm run typecheck` and `npm run build` in the application directory",
-    "- run `topolo apps audit <app> --local --repo-root /Users/ashes/Projects/Topolo/Platform --fail-on needs_review --json` after SDK catalog registration",
+    "- run `topolo apps audit <app> --local --repo-root /Users/ashes/Projects/Topolo --fail-on needs_review --json` after SDK catalog registration",
     "- inspect `topolo.cloudcontrol.json` before deployment changes",
     ...options.api ? ["- inspect the Worker `SERVICE_ID` binding and matching Auth service manifest when permission grants fail"] : [],
     ...options.api && application.serviceId ? [`- re-run \`topolo platform apps scaffold ${slug} --write --provision\` when embedded app login, launcher visibility, or callback origins drift`] : [],
@@ -8178,7 +8265,7 @@ function registerAppsCommand(program2) {
   });
   apps.command("scaffold <application>").description(
     "Generate a third-party Topolo application scaffold for business or personal/household use."
-  ).option("--json", "Output JSON").option("--no-json", "Output human-readable checklist").option("--app-dir <path>", "Application directory under PlatformApplications").option("--name <name>", "Application display/package source name").option("--package-name <name>", "package.json name").option("--production-url <url>", "Production browser URL").option("--service <id>", "Stable SDK/Auth service id for API-backed apps").option("--audience <audience>", "Developer app audience: business or personal").option("--tenancy <tenancy>", "Developer app tenancy: organization or household").option(
+  ).option("--json", "Output JSON").option("--no-json", "Output human-readable checklist").option("--app-dir <path>", "Application directory under the scaffold root").option("--name <name>", "Application display/package source name").option("--package-name <name>", "package.json name").option("--production-url <url>", "Production browser URL").option("--service <id>", "Stable SDK/Auth service id for API-backed apps").option("--audience <audience>", "Developer app audience: business or personal").option("--tenancy <tenancy>", "Developer app tenancy: organization or household").option(
     "--surface-model <surfaceModel>",
     "Developer app surface model: web_app, mobile_container, mobile_module, or messaging_surface"
   ).option("--container-app-id <appId>", "Container app id when --surface-model mobile_module is used").option("--write", "Write the generated scaffold files to disk").option("--repo-root <path>", "Directory where scaffold files should be written").option("--force", "Overwrite existing scaffold files when --write is set").option("--with-api", "Include API/service files for developer scaffolds").option("--no-api", "Do not include API/service requirements").option("--no-browser", "Do not include browser-shell requirements").option(
@@ -8602,7 +8689,7 @@ function registerPlatformCommand(program2) {
   const platformApps = platform3.command("apps").description("Scaffold and operate first-party Topolo platform and personal applications");
   platformApps.command("scaffold <application>").description(
     "Generate a first-party Topolo scaffold for the platform or personal portfolio."
-  ).option("--json", "Output JSON").option("--no-json", "Output human-readable checklist").option("--app-dir <path>", "Application directory under PlatformApplications").option("--name <name>", "Application display/package source name").option("--package-name <name>", "package.json name").option("--production-url <url>", "Production browser URL").option("--service <id>", "Stable SDK/Auth service id for API-backed apps").option("--portfolio <portfolio>", "First-party portfolio: platform or personal").option(
+  ).option("--json", "Output JSON").option("--no-json", "Output human-readable checklist").option("--app-dir <path>", "Application directory under apps/").option("--name <name>", "Application display/package source name").option("--package-name <name>", "package.json name").option("--production-url <url>", "Production browser URL").option("--service <id>", "Stable SDK/Auth service id for API-backed apps").option("--portfolio <portfolio>", "First-party portfolio: platform or personal").option(
     "--surface-model <surfaceModel>",
     "First-party surface model: web_app, mobile_container, mobile_module, or messaging_surface"
   ).option("--container-app-id <appId>", "Container app id when --surface-model mobile_module is used").option("--profile <profile>", "First-party scaffold profile such as spatial-assets").option("--with-d1", "Declare a D1 binding in the first-party scaffold").option("--with-r2", "Declare an R2 binding in the first-party scaffold").option("--with-queue", "Declare a Queue binding in the first-party scaffold").option("--with-workflow", "Declare a Workflow binding in the first-party scaffold").option("--with-container-processing", "Declare container-processing metadata in CloudControl").option("--write", "Write the generated scaffold files to disk").option("--repo-root <path>", "Directory where scaffold files should be written").option("--force", "Overwrite existing scaffold files when --write is set").option("--with-api", "Include the API/service baseline").option("--no-api", "Do not include API/service requirements").option("--no-browser", "Do not include browser-shell requirements").option(

package/package.json

@@ -1,35 +1,35 @@
 {
   "name": "@topolo/cli",
-  "version": "0.1.31",
+  "version": "0.1.32",
   "description": "Command-line interface for Topolo developers, operators, and agents, with internal first-party scaffolding available under the topolo platform namespace.",
   "type": "module",
   "bin": {
-    "topolo": "./dist/index.js"
+    "topolo": "dist/index.js"
   },
   "files": [
     "dist"
   ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "start": "node dist/index.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "coverage": "vitest run --coverage"
+  },
   "dependencies": {
     "commander": "^12.1.0"
   },
   "devDependencies": {
+    "@topolo/sdk": "workspace:*",
     "@types/node": "^20.12.0",
     "@vitest/coverage-v8": "^2.1.0",
     "tsup": "^8.0.0",
     "typescript": "^5.4.0",
-    "vitest": "^2.1.0",
-    "@topolo/sdk": "0.4.9"
+    "vitest": "^2.1.0"
   },
   "engines": {
     "node": ">=20"
-  },
-  "scripts": {
-    "build": "tsup",
-    "dev": "tsup --watch",
-    "typecheck": "tsc --noEmit",
-    "start": "node dist/index.js",
-    "test": "vitest run",
-    "test:watch": "vitest",
-    "coverage": "vitest run --coverage"
   }
-}
+}