@topolo/cli 0.6.0 → 0.6.2

package/dist/generate-wrangler.mjs

@@ -845,7 +845,12 @@ function emitCloudcontrol() {
     }
   }
   cc.tags = existing.tags || ['application', 'cloudflare', 'github-actions', 'javascript'];
-  cc.cloudflare_account_id = manifest.environments.production.accountId;
+  const primaryEnvironment = [...ENVS]
+    .reverse()
+    .find((environment) => deployableEnvironments.has(environment));
+  if (primaryEnvironment) {
+    cc.cloudflare_account_id = manifest.environments[primaryEnvironment].accountId;
+  }
 
   return JSON.stringify(cc, null, 2) + '\n';
 }

package/dist/index.js

@@ -4724,14 +4724,26 @@ function isEvidenceStampFresh(stamp) {
   return Date.now() - recordedAt <= EVIDENCE_FRESHNESS_MS;
 }
 var SKIPPED_DIRS = /* @__PURE__ */ new Set([
+  ".action-normalize",
+  ".claude",
+  ".codex-worktrees",
+  ".deploy",
   ".git",
   ".next",
+  ".playwright",
+  ".topolo-tmp",
   ".turbo",
+  ".worktrees",
   ".wrangler",
+  "_tmp",
+  "_worktrees",
+  "artifacts",
   "build",
   "coverage",
   "dist",
-  "node_modules"
+  "node_modules",
+  "output",
+  "tmp"
 ]);
 var SOURCE_EXTENSIONS = /* @__PURE__ */ new Set([
   ".cjs",
@@ -5416,8 +5428,11 @@ function sharedAuthEvidence(evidence) {
   if (text.includes("TopoloAuthMiddleware")) items.push("source=TopoloAuthMiddleware");
   if (text.includes("TopoloClient")) items.push("source=TopoloClient");
   if (text.includes("TopoloOAuth")) items.push("source=TopoloOAuth");
-  if (/\.initialize(?:Session)?\(\s*\)/.test(text)) items.push("auth-boot=blocking-cookie-refresh");
-  if (/cookieRefresh:\s*['"]background['"]/.test(text)) items.push("auth-boot=background-cookie-refresh");
+  const browserRecords = productionBrowserSourceRecords(evidence);
+  const blockingBoot = browserRecords.find(({ text: source }) => /\b(?:auth|authClient|topoloAuth)\.initialize(?:Session)?\(\s*\)/i.test(source));
+  const backgroundBoot = browserRecords.find(({ text: source }) => /cookieRefresh:\s*['"]background['"]/.test(source));
+  if (blockingBoot) items.push("auth-boot=blocking-cookie-refresh", `auth-boot-file=${blockingBoot.path}`);
+  if (backgroundBoot) items.push("auth-boot=background-cookie-refresh", `auth-background-file=${backgroundBoot.path}`);
   if (/Authorization.*Bearer/i.test(text) && (text.includes("/validate") || text.includes("TOPOLO_AUTH_URL") || text.includes("AUTH_BASE_URL") || text.includes("auth.topolo.app"))) {
     items.push("source=auth-validate-fetch");
   }
@@ -5436,7 +5451,8 @@ function documentedOperatorLocalAuthBoundaryEvidence(evidence) {
 }
 function sharedShellEvidence(evidence) {
   const deps = dependencyNames(evidence);
-  const text = evidence.source.text;
+  const browserRecords = productionBrowserSourceRecords(evidence);
+  const text = browserRecords.map((record4) => record4.text).join("\n");
   const items = [];
   if (deps.has("@topolo-io/app-shell")) items.push("dependency=@topolo-io/app-shell");
   if (deps.has("@topolo-io/ui-kit")) items.push("dependency=@topolo-io/ui-kit");
@@ -5456,11 +5472,9 @@ function sharedShellEvidence(evidence) {
   const hasVisualQaFixtures = hasVisualQaMode && /fixture|visualQaResponse|visualQaApi|mock[A-Z]\w*|devpreview/i.test(text) && /fetch|useQuery|api/i.test(text);
   if (hasVisualQaFixtures) items.push("source=visual-qa-fixtures");
   if (/from\s+['"]lucide-react['"]/.test(text)) items.push("local=direct-lucide-react");
-  if (/(?:icon|Icon)\s*:\s*['"][◈◇⬡⬢▣◉✉▷✦○◆✕⚙🔑💡⚠✓♫]/.test(text)) {
-    items.push("local=raw-symbol-icons");
-  }
-  if (/(?:<span[^>]*>|<div[^>]*>)[^<]{0,16}[◈◇⬡⬢▣◉✉▷✦○◆✕⚙🔑💡⚠✓♫]/.test(text)) {
-    items.push("local=raw-symbol-icons");
+  const rawSymbolRecord = browserRecords.find(({ text: source }) => /(?:icon|Icon)\s*:\s*['"][◈◇⬡⬢▣◉✉▷✦○◆✕⚙🔑💡⚠✓♫]/.test(source) || /(?:<span[^>]*>|<div[^>]*>)[^<]{0,16}[◈◇⬡⬢▣◉✉▷✦○◆✕⚙🔑💡⚠✓♫]/.test(source));
+  if (rawSymbolRecord) {
+    items.push("local=raw-symbol-icons", `raw-symbol-file=${rawSymbolRecord.path}`);
   }
   if (text.includes(["Topolo", "Workspace", "Shell"].join(""))) items.push("forbidden=workspace-shell");
   if (/\bTopoloShell\b/.test(text)) items.push("legacy=TopoloShellFrame");
@@ -5490,6 +5504,16 @@ function hasLocalBrowserSurface(evidence) {
     (file) => file.endsWith(".tsx") || file.endsWith(".jsx") || file.includes("/src/client/") || file.includes("/client/")
   );
 }
+function productionBrowserSourceRecords(evidence) {
+  return evidence.source.records.filter((record4) => {
+    const sourcePath = record4.path.toLowerCase();
+    if (/(^|\/)(?:__tests__|test|tests|scripts|fixtures|migrations)(\/|$)/.test(sourcePath)) return false;
+    if (/\.(?:test|spec)\.[^.]+$/.test(sourcePath)) return false;
+    if (/\/apps\/(?:api|analytics|gateway|jobs|queue|runtime|worker)\//.test(sourcePath)) return false;
+    if (/\.(?:tsx|jsx)$/.test(sourcePath)) return true;
+    return /\/(?:web|marketing|desktop)\/src\//.test(sourcePath) && /\.(?:ts|js)$/.test(sourcePath);
+  });
+}
 function organizationScopeEvidence(evidence) {
   const text = evidence.source.text;
   const items = [];
@@ -5657,18 +5681,21 @@ function findWranglerFiles(appRoot) {
   return ["wrangler.json", "wrangler.jsonc", "wrangler.toml"].filter((file) => isFile(path.join(appRoot, file))).map((file) => relativeTopoloPath(path.join(appRoot, file)));
 }
 function readSourceIndex(root) {
-  if (!isDirectory(root)) return { files: [], text: "" };
+  if (!isDirectory(root)) return { files: [], text: "", records: [] };
   const files = collectSourceFiles(root, 4e3);
-  const chunks = files.map((file) => {
+  const records = files.map((file) => {
+    let text = "";
     try {
-      return readFileSync3(file, "utf8");
+      text = readFileSync3(file, "utf8");
     } catch {
-      return "";
+      text = "";
     }
+    return { path: relativeTopoloPath(file), text };
   });
   return {
-    files: files.map(relativeTopoloPath),
-    text: chunks.join("\n")
+    files: records.map((record4) => record4.path),
+    text: records.map((record4) => record4.text).join("\n"),
+    records
   };
 }
 function collectSourceFiles(root, limit) {
@@ -6192,7 +6219,7 @@ var APPLICATION_CAPABILITY_REGISTRY = {
     platform: ["@topolo-io/notifications"],
     developer: []
   }, [], [], [], ["notification-consumer"], ["notification-inbox-smoke"]),
-  notification_producer: capability("notification_producer", "TopoloNotify + TopoloDevelopers", platformTarget, ["notifications", "api"], ["api"], {
+  notification_producer: capability("notification_producer", "TopoloNotify + TopoloDevelopers", platformTarget, ["api"], ["api"], {
     platform: ["@topolo-io/notifications", "@topolo-io/auth-middleware"],
     developer: []
   }, [], ["events:write"], [], ["notification-producer-adapter", "notification-contracts"], ["notification-delivery-smoke"]),
@@ -9396,20 +9423,13 @@ function scaffoldFiles(options) {
     `CREATE TABLE IF NOT EXISTS ${tablePrefix}_workspaces (`,
     "  id TEXT PRIMARY KEY,",
     `  ${tenantColumn} TEXT NOT NULL,`,
-    "  name TEXT NOT NULL,",
-    "  slug TEXT NOT NULL,",
-    "  created_by_user_id TEXT,",
-    "  created_by_email TEXT,",
+    "  status TEXT NOT NULL DEFAULT 'active' CHECK (status IN ('active', 'archived')),",
     "  created_at TEXT NOT NULL,",
-    "  updated_at TEXT NOT NULL,",
-    `  UNIQUE(${tenantColumn}, slug)`,
+    "  updated_at TEXT NOT NULL",
     ");",
     "",
     `CREATE INDEX IF NOT EXISTS idx_${tablePrefix}_workspaces_${tenantColumn}`,
     `  ON ${tablePrefix}_workspaces(${tenantColumn});`,
-    "",
-    `CREATE INDEX IF NOT EXISTS idx_${tablePrefix}_workspaces_slug`,
-    `  ON ${tablePrefix}_workspaces(${tenantColumn}, slug);`,
     ""
   ].join("\n");
   const base = target === "platform" ? firstPartyAppPath(application.appDir, options.payload.audience) : application.appDir;
@@ -9972,10 +9992,10 @@ export default defineConfig({
       if (options.payload.resources.d1) {
         files.push({
           path: `${apiBase}/migrations/0001_initial.sql`,
-          purpose: "Canonical multi-tenant baseline: the app workspaces table.",
+          purpose: "Canonical multi-tenant baseline: the identity-only workspace mirror (platform owns the record).",
           requiredSignals: [
-            `${tablePrefix}_workspaces carries ${tenantColumn} on every row`,
-            "every domain table added later carries the tenant + workspace columns"
+            `${tablePrefix}_workspaces is an identity-only mirror (id, ${tenantColumn}, status) \u2014 no name/slug/is_default; the workspace record lives in TopoloAuth`,
+            `every domain table added later carries ${tenantColumn} and a workspace_id scope column`
           ],
           content: workspacesMigrationSql
         });
@@ -10267,6 +10287,22 @@ async function reconcileApplicationCapabilitySource(options) {
     distributionModel: registration.distributionModel === "marketplace" ? "marketplace" : "organization_internal",
     requested: [...existing, ...options.additions ?? []]
   });
+  const marketplace = record(registration.marketplace);
+  const unlistedNativeArtifact = options.ownerType === "topolo_first_party" && registration.surfaceModel === "mobile_container" && registration.distributionModel === "organization_internal" && marketplace?.intent === "unlisted";
+  if (unlistedNativeArtifact) {
+    return {
+      mode: options.mode,
+      applied: false,
+      status: "in_sync",
+      manifestPath,
+      packagePath,
+      contractPath,
+      capabilities,
+      changes: [],
+      missingResources: [],
+      verticalConfiguration: []
+    };
+  }
   const expectedComposition = capabilityCompositionProjection(capabilities);
   const expectedNotifications = capabilities.selected.includes("notification_producer") ? { role: "producer", contracts: "topolo.notification-contracts.json" } : capabilities.selected.includes("notifications") ? { role: "consumer_only" } : { role: "internal_non_producer" };
   const changes = [];
@@ -10421,7 +10457,10 @@ function manifestProvidesResource(manifest, resource) {
   return false;
 }
 function packageVersion(packageName, target) {
-  if (target === "platform") return "latest";
+  if (target === "platform") {
+    if (packageName === "@topolo-io/notifications") return "^0.6.8";
+    return "latest";
+  }
   if (packageName === "@topolo/login") return "^0.1.0";
   if (packageName === "@topolo/sdk") return "^0.8.1";
   throw new Error(`Capability registry exposed private package ${packageName} to a third-party application.`);
@@ -10530,10 +10569,19 @@ function resolveManifestApplicationUrl(manifest, environment) {
   if (hostOverride) return `https://${hostOverride.replace(/^https?:\/\//, "").replace(/\/+$/, "")}`;
   const domain = manifest.environments?.[environment]?.domain;
   if (!target.subdomain || !domain) {
+    if (manifest.registration?.productionUrl) {
+      return manifest.registration.productionUrl.replace(/\/+$/, "");
+    }
     throw new Error(`Cannot derive the ${environment} application URL from target ${targetName}.`);
   }
   return `https://${target.subdomain}.${domain}`;
 }
+function resolveManifestHealthcheckPath(manifest) {
+  const targets = manifest.targets || {};
+  const targetName = manifest.primaryTarget || (targets.web ? "web" : Object.keys(targets)[0]);
+  const healthcheckPath = targetName ? targets[targetName]?.healthcheckPath?.trim() : "";
+  return healthcheckPath && healthcheckPath.startsWith("/") && !healthcheckPath.startsWith("//") ? healthcheckPath : "/health";
+}
 function assertRegistration(value) {
   const registration = record2(value);
   const required = [
@@ -10549,10 +10597,11 @@ function assertRegistration(value) {
     "version",
     "pricing",
     "supportEmail",
-    "auth",
     "capabilities",
     "marketplace"
   ];
+  const marketplace = record2(registration?.marketplace);
+  if (marketplace?.intent !== "unlisted") required.push("auth");
   const missing = required.filter((field) => registration?.[field] == null || registration[field] === "");
   if (missing.length) {
     throw new Error(
@@ -10656,7 +10705,7 @@ async function loadApplicationReconcileRequest(options) {
   }
   const environment = options.environment || selectedEnvironment();
   const productionUrl = resolveManifestApplicationUrl(manifest, environment);
-  const callbackPath = registration.auth.callbackPath.startsWith("/") ? registration.auth.callbackPath : `/${registration.auth.callbackPath}`;
+  const callbackPath = registration.auth ? registration.auth.callbackPath.startsWith("/") ? registration.auth.callbackPath : `/${registration.auth.callbackPath}` : null;
   const appId = String(manifest.appId || manifest.app_id || "").trim();
   if (!appId) throw new Error("topolo.app.json must declare the immutable appId.");
   return {
@@ -10680,13 +10729,14 @@ async function loadApplicationReconcileRequest(options) {
       pricingType: registration.pricing.type,
       monthlyPrice: registration.pricing.monthlyPrice ?? null,
       productionUrl,
+      healthcheckPath: resolveManifestHealthcheckPath(manifest),
       demoUrl: registration.ownerType === "topolo_first_party" ? productionUrl : registration.demoUrl ?? productionUrl,
       repoUrl: registration.repoUrl ?? null,
       supportEmail: registration.supportEmail,
       tags: registration.tags ?? [],
       screenshots: registration.screenshots ?? [],
-      callbackUrls: [`${productionUrl}${callbackPath}`],
-      requestedScopes: registration.auth.requestedScopes,
+      callbackUrls: callbackPath ? [`${productionUrl}${callbackPath}`] : [],
+      requestedScopes: registration.auth?.requestedScopes ?? [],
       capabilities: registration.capabilities,
       marketplace: { ...registration.marketplace, appUrl: productionUrl },
       notifications: manifest.notifications ?? null

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@topolo/cli",
-  "version": "0.6.0",
-  "topoloPublishedVersion": "0.6.0",
+  "version": "0.6.2",
+  "topoloPublishedVersion": "0.6.2",
   "description": "Command-line interface for Topolo developers, operators, and agents, with internal first-party scaffolding available under the topolo platform namespace.",
   "type": "module",
   "bin": {
@@ -31,10 +31,10 @@
   "devDependencies": {
     "@topolo/sdk": "latest",
     "@types/node": "^20.12.0",
-    "@vitest/coverage-v8": "^2.1.0",
+    "@vitest/coverage-v8": "3.2.6",
     "tsup": "^8.0.0",
     "typescript": "^5.4.0",
-    "vitest": "^2.1.0"
+    "vitest": "3.2.6"
   },
   "engines": {
     "node": ">=20"