@topolo/cli 0.6.10 → 0.7.0

package/dist/index.js

@@ -110,57 +110,8 @@ var TopoloHttpError = class extends TopoloSdkError {
   }
 };
 var APP_API_URLS = {
-  agent: "https://agent.topolo.app",
   auth: "https://auth.topolo.app",
-  backup: "https://backup.topolo.app",
-  blog: "https://blog.topolo.app",
-  books: "https://books.topolo.app",
-  brand: "https://brand.topolo.app",
-  bugfix: "https://bugfix.topolo.app",
-  bytes: "https://bytes.topolo.app",
-  calendar: "https://calendar.topolo.app",
-  campaigns: "https://campaigns.topolo.app",
-  capacity: "https://capacity.topolo.app",
-  chat: "https://chat.topolo.app",
-  commerce: "https://commerce.topolo.app",
-  compose: "https://compose.topolo.app",
-  consent: "https://consent.topolo.app",
-  crm: "https://crm.topolo.app",
-  design: "https://design.topolo.app",
-  developers: "https://developers.topolo.app",
-  director: "https://director.topolo.app",
-  feed: "https://feed.topolo.app",
-  flow: "https://flow.topolo.app",
-  forecast: "https://forecast.topolo.app",
-  forms: "https://forms.topolo.app",
-  home: "https://home.topolo.app",
-  insights: "https://insights.topolo.app",
-  inventory: "https://inventory.topolo.app",
-  learn: "https://learn.topolo.app",
-  localize: "https://localize.topolo.app",
-  mail: "https://mail.topolo.app",
-  mdm: "https://mdm.topolo.app",
-  messages: "https://messages.topolo.app",
-  nexus: "https://nexus.topolo.app",
-  notify: "https://notify.topolo.app",
-  observability_watch: "https://observability-watch.topolo.app",
-  one: "https://www.topolo.app",
-  p2p: "https://p2p.topolo.app",
-  pay: "https://pay.topolo.app",
-  people: "https://people.topolo.app",
-  "quro.api": "https://api.ol0.me",
-  "quro.redirect": "https://ol0.me",
-  roadmapper: "https://roadmapper.topolo.app",
-  sign: "https://sign.topolo.app",
-  social_studio: "https://studio.topolo.app",
-  socialize: "https://socialize.topolo.app",
-  spaces: "https://spaces.topolo.app",
-  status: "https://status.topolo.app",
-  success: "https://success.topolo.app",
-  support: "https://support.topolo.app",
-  survey: "https://survey.topolo.app",
-  voice: "https://voice.topolo.app",
-  web: "https://web.topolo.app"
+  developers: "https://developers.topolo.app"
 };
 var APPLICATIONS = {
   "admin": {
@@ -1886,7 +1837,145 @@ var APPLICATIONS = {
     ]
   }
 };
-var APPLICATION_REQUIREMENTS_VERSION = "2026-06-07.1";
+function friendlyAppId(entry) {
+  for (const value of [entry.slug, entry.name, entry.appId]) {
+    if (typeof value !== "string" || !value.trim()) continue;
+    const normalized = value.trim().toLowerCase().replace(/\s+/g, "-");
+    const withoutPrefix = normalized.replace(/^(?:app[_-])?topolo[-_]+/, "");
+    if (withoutPrefix) return withoutPrefix;
+  }
+  return entry.appId;
+}
+function idVariants(value) {
+  const normalized = value.trim().toLowerCase().replace(/\s+/g, "-");
+  return [.../* @__PURE__ */ new Set([
+    normalized,
+    normalized.replace(/-/g, "_"),
+    normalized.replace(/_/g, "-")
+  ])].filter(Boolean);
+}
+var STATIC_APPLICATIONS = APPLICATIONS;
+function staticApplicationForId(id) {
+  for (const variant of idVariants(id)) {
+    const entry = STATIC_APPLICATIONS[variant];
+    if (entry) return entry;
+  }
+  return null;
+}
+function applicationEntryFromCatalog(live) {
+  const id = friendlyAppId(live);
+  return {
+    id,
+    appDir: "-",
+    name: live.name ?? live.slug ?? live.appId,
+    packageName: null,
+    productionUrl: live.launchUrl ?? live.apiBaseUrl ?? null,
+    services: live.apiBaseUrl ? [id] : [],
+    deployTargets: []
+  };
+}
+var DIRECTORY_PAGE_LIMIT = 100;
+var DIRECTORY_MAX_PAGES = 100;
+function staticApplicationDirectory() {
+  const applications = Object.entries(STATIC_APPLICATIONS).map(([id, application]) => ({
+    id,
+    application,
+    source: "static",
+    live: null
+  })).sort((left, right) => left.id.localeCompare(right.id));
+  return { source: "static_fallback", applications };
+}
+function directoryApplicationFromLive(live) {
+  const id = friendlyAppId(live);
+  return {
+    id,
+    // Prefer the static snapshot's richer repo/deploy metadata when the live
+    // registry confirms the app; synthesize from the live entry otherwise.
+    application: staticApplicationForId(id) ?? applicationEntryFromCatalog(live),
+    source: "live",
+    live
+  };
+}
+async function listApplicationDirectory(client) {
+  if (!client) return staticApplicationDirectory();
+  let services;
+  try {
+    services = [];
+    let cursor;
+    for (let page = 0; page < DIRECTORY_MAX_PAGES; page += 1) {
+      const result = await client.searchServices({
+        ...cursor ? { cursor } : {},
+        limit: DIRECTORY_PAGE_LIMIT
+      });
+      services.push(...result.services);
+      if (!result.page.nextCursor) break;
+      cursor = result.page.nextCursor;
+    }
+  } catch {
+    return staticApplicationDirectory();
+  }
+  const seen = /* @__PURE__ */ new Map();
+  for (const live of services) {
+    const entry = directoryApplicationFromLive(live);
+    if (!seen.has(entry.id)) seen.set(entry.id, entry);
+  }
+  return {
+    source: "live",
+    applications: [...seen.values()].sort((left, right) => left.id.localeCompare(right.id))
+  };
+}
+function matchesDirectoryApplication(app, needle) {
+  const candidates = new Set(idVariants(needle));
+  const keys = [
+    app.id,
+    app.application.id,
+    app.application.name,
+    app.live?.appId,
+    app.live?.slug,
+    app.live?.name
+  ];
+  for (const key of keys) {
+    if (typeof key !== "string" || !key.trim()) continue;
+    for (const variant of idVariants(key)) {
+      if (candidates.has(variant)) return true;
+    }
+    for (const variant of idVariants(friendlyAppId({ appId: key }))) {
+      if (candidates.has(variant)) return true;
+    }
+  }
+  return false;
+}
+function formatDirectoryApplicationIds(directory) {
+  const ids = directory.applications.map((app) => app.id).sort();
+  const preview = ids.slice(0, 50).join(", ");
+  const suffix = ids.length > 50 ? `, ... +${ids.length - 50} more` : "";
+  const label = directory.source === "live" ? "Applications available to this credential" : "Applications in the bundled static snapshot (live registry unreachable)";
+  return `${label}: ${preview}${suffix}`;
+}
+async function resolveApplicationDirectoryEntry(client, application) {
+  const needle = typeof application === "string" ? application.trim() : "";
+  if (!needle) {
+    throw new TopoloSdkError("unknown_application", "application is required");
+  }
+  if (client) {
+    let live = null;
+    try {
+      live = await client.getService(needle);
+    } catch {
+      live = null;
+    }
+    if (live) return directoryApplicationFromLive(live);
+  }
+  const directory = await listApplicationDirectory(client);
+  const match = directory.applications.find((app) => matchesDirectoryApplication(app, needle));
+  if (match) return match;
+  throw new TopoloSdkError(
+    "unknown_application",
+    `Unknown application "${application}". ${formatDirectoryApplicationIds(directory)}`
+  );
+}
+var STATIC_APPLICATIONS2 = APPLICATIONS;
+var APPLICATION_REQUIREMENTS_VERSION = "2026-08-11.1";
 var APPLICATION_REQUIREMENTS = [
   {
     id: "platform-metadata",
@@ -1896,10 +1985,10 @@ var APPLICATION_REQUIREMENTS = [
     evidence: [
       "topolo.cloudcontrol.json exists for every deployed app surface",
       "package.json names the package or app when the repo ships code",
-      "The SDK application catalog exposes the app through topolo apps and MCP discovery"
+      "The live platform registry exposes the app through topolo apps and MCP discovery"
     ],
     implementation: [
-      "Add the app to the SDK application catalog generator before exposing it to agents",
+      "Register the app in the live platform registry (Auth service catalog) before exposing it to agents",
       "Keep production URLs, Worker names, Pages projects, routes, domains, and bindings current in CloudControl metadata",
       "Do not leave a new Topolo* app directory without an explicit application ID"
     ]
@@ -1974,7 +2063,7 @@ var APPLICATION_REQUIREMENTS = [
     implementation: [
       "Add production Worker api_url metadata and sdk_app_id for every agent-callable API target",
       "Mark browser, documentation, and runtime-only Worker targets with agent_callable:false",
-      "Expose stable app IDs through generated DEFAULT_APP_URLS and live catalog discovery",
+      "Expose stable app IDs through live catalog discovery",
       "Keep typed SDK/CLI/MCP surfaces in sync when an API contract stabilizes"
     ]
   },
@@ -2094,15 +2183,24 @@ function applicationRequirementScopes(application) {
   }
   return Array.from(scopes);
 }
+function fallbackApplication(id) {
+  const entry = STATIC_APPLICATIONS2[id];
+  if (!entry) {
+    throw new Error(
+      `Unknown application "${id}" in the static fallback snapshot. Resolve applications from the live registry (resolveApplicationDirectoryEntry) and pass the entry directly.`
+    );
+  }
+  return entry;
+}
 function requirementsForApplication(applicationOrId) {
-  const application = typeof applicationOrId === "string" ? APPLICATIONS[applicationOrId] : applicationOrId;
+  const application = typeof applicationOrId === "string" ? fallbackApplication(applicationOrId) : applicationOrId;
   const scopes = new Set(applicationRequirementScopes(application));
   return APPLICATION_REQUIREMENTS.filter(
     (requirement) => requirement.appliesTo.some((scope) => scopes.has(scope))
   );
 }
 function auditApplicationRequirements(applicationOrId) {
-  const application = typeof applicationOrId === "string" ? APPLICATIONS[applicationOrId] : applicationOrId;
+  const application = typeof applicationOrId === "string" ? fallbackApplication(applicationOrId) : applicationOrId;
   const scopes = applicationRequirementScopes(application);
   const findings = requirementsForApplication(application).map(
     (requirement) => evaluateRequirement(application, requirement)
@@ -2115,10 +2213,12 @@ function auditApplicationRequirements(applicationOrId) {
     findings
   };
 }
-function auditAllApplicationRequirements(applicationIds = Object.keys(APPLICATIONS).sort()) {
-  const applications = applicationIds.map(
-    (applicationId) => auditApplicationRequirements(applicationId)
+function auditApplicationEntries(applications) {
+  return buildAuditReport(
+    applications.map((application) => auditApplicationRequirements(application))
   );
+}
+function buildAuditReport(applications) {
   const migrationQueue = applications.flatMap(
     (audit) => audit.findings.filter((finding2) => finding2.status !== "met").map((finding2) => ({
       applicationId: audit.application.id,
@@ -3421,8 +3521,9 @@ var TopoloClient = class _TopoloClient {
     });
   }
   /**
-   * Bundled generated registry for tooling that audits platform packaging, not
-   * for deciding what the current credential may use.
+   * @deprecated Static fallback snapshot only. Use `searchServices()` (the
+   * live credential-scoped registry) for anything that decides behavior; this
+   * exists for offline packaging audits when the registry is unreachable.
    */
   listBundledServices() {
     const apps = Object.values(APPLICATIONS);
@@ -4079,57 +4180,8 @@ var TopoloHttpError2 = class extends TopoloSdkError2 {
   }
 };
 var APP_API_URLS2 = {
-  agent: "https://agent.topolo.app",
   auth: "https://auth.topolo.app",
-  backup: "https://backup.topolo.app",
-  blog: "https://blog.topolo.app",
-  books: "https://books.topolo.app",
-  brand: "https://brand.topolo.app",
-  bugfix: "https://bugfix.topolo.app",
-  bytes: "https://bytes.topolo.app",
-  calendar: "https://calendar.topolo.app",
-  campaigns: "https://campaigns.topolo.app",
-  capacity: "https://capacity.topolo.app",
-  chat: "https://chat.topolo.app",
-  commerce: "https://commerce.topolo.app",
-  compose: "https://compose.topolo.app",
-  consent: "https://consent.topolo.app",
-  crm: "https://crm.topolo.app",
-  design: "https://design.topolo.app",
-  developers: "https://developers.topolo.app",
-  director: "https://director.topolo.app",
-  feed: "https://feed.topolo.app",
-  flow: "https://flow.topolo.app",
-  forecast: "https://forecast.topolo.app",
-  forms: "https://forms.topolo.app",
-  home: "https://home.topolo.app",
-  insights: "https://insights.topolo.app",
-  inventory: "https://inventory.topolo.app",
-  learn: "https://learn.topolo.app",
-  localize: "https://localize.topolo.app",
-  mail: "https://mail.topolo.app",
-  mdm: "https://mdm.topolo.app",
-  messages: "https://messages.topolo.app",
-  nexus: "https://nexus.topolo.app",
-  notify: "https://notify.topolo.app",
-  observability_watch: "https://observability-watch.topolo.app",
-  one: "https://www.topolo.app",
-  p2p: "https://p2p.topolo.app",
-  pay: "https://pay.topolo.app",
-  people: "https://people.topolo.app",
-  "quro.api": "https://api.ol0.me",
-  "quro.redirect": "https://ol0.me",
-  roadmapper: "https://roadmapper.topolo.app",
-  sign: "https://sign.topolo.app",
-  social_studio: "https://studio.topolo.app",
-  socialize: "https://socialize.topolo.app",
-  spaces: "https://spaces.topolo.app",
-  status: "https://status.topolo.app",
-  success: "https://success.topolo.app",
-  support: "https://support.topolo.app",
-  survey: "https://survey.topolo.app",
-  voice: "https://voice.topolo.app",
-  web: "https://web.topolo.app"
+  developers: "https://developers.topolo.app"
 };
 var DEFAULT_APP_URLS2 = APP_API_URLS2;
 function resolveServiceUrl2(service, overrides) {
@@ -6523,12 +6575,6 @@ function normalizeContainerAppId(value, surfaceModel) {
 function normalizeApplicationId(application) {
   const raw = application.trim().toLowerCase();
   const normalized = raw.replace(/-/g, "_");
-  if (Object.prototype.hasOwnProperty.call(APPLICATIONS, raw)) {
-    return raw;
-  }
-  if (Object.prototype.hasOwnProperty.call(APPLICATIONS, normalized)) {
-    return normalized;
-  }
   if (/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/.test(raw) || /^[a-z0-9](?:[a-z0-9_]*[a-z0-9])?$/.test(raw)) {
     return normalized;
   }
@@ -9914,7 +9960,7 @@ function applicationScaffoldPayload(application, options = {}) {
   const requestedId = normalizeApplicationId(application);
   const id = target === "platform" ? normalizeFirstPartyApplicationId(requestedId) : requestedId;
   const slug = toSlug(id);
-  const catalogApplication = APPLICATIONS[id];
+  const catalogApplication = options.catalogApplication ?? null;
   const browser = options.browser !== false;
   const api = options.api ?? target === "platform";
   const audience = normalizeAudience(
@@ -11550,7 +11596,6 @@ function registerApplicationReconcileCommand(parent, ownerType, dependencies = {
 }
 
 // src/commands/apps.ts
-var APPLICATION_IDS = Object.keys(APPLICATIONS).sort();
 var CLOUDCONTROL_LOCAL_APPLICATION = {
   id: "cloudcontrol",
   appDir: "TopoloCloudControl",
@@ -11560,6 +11605,21 @@ var CLOUDCONTROL_LOCAL_APPLICATION = {
   services: [],
   deployTargets: []
 };
+async function directoryClient() {
+  try {
+    const topolo = await buildClient();
+    return topolo ? topolo.client : null;
+  } catch {
+    return null;
+  }
+}
+async function resolveScaffoldCatalogApplication(application) {
+  try {
+    return await resolveApplication(application, await directoryClient());
+  } catch {
+    return null;
+  }
+}
 function registerAppsCommand(program2) {
   const apps = program2.command("apps").description("Search Topolo platform applications available to the current credential").option("-q, --query <query>", "Filter by app id, slug, or name").option("--cursor <cursor>", "Continuation cursor from the previous page").option("--limit <limit>", "Page size (1-100)", "25").option("--json", "Output JSON", true).option("--no-json", "Output human-readable table").action(async (opts) => {
     const mode = resolveOutputMode(opts.json);
@@ -11597,10 +11657,10 @@ function registerAppsCommand(program2) {
   });
   apps.command("requirements [application]").description(
     "Show the versioned Topolo application-build requirements, optionally filtered to one app."
-  ).option("--json", "Output JSON", true).option("--no-json", "Output human-readable details").action((application, opts) => {
+  ).option("--json", "Output JSON", true).option("--no-json", "Output human-readable details").action(async (application, opts) => {
     const mode = resolveOutputMode(opts.json);
     try {
-      const payload = applicationRequirementsPayload(application);
+      const payload = await applicationRequirementsPayload(application, await directoryClient());
       emit(payload, mode, () => formatRequirements(payload));
     } catch (err) {
       fail(err, mode);
@@ -11611,12 +11671,13 @@ function registerAppsCommand(program2) {
   ).option("--json", "Output JSON", true).option("--no-json", "Output human-readable table").option("--local", "Inspect the local Topolo checkout for filesystem-backed evidence").option("--repo-root <path>", "Topolo checkout root to inspect when --local is set").option(
     "--fail-on <status>",
     "Exit non-zero when audit has findings at this severity or worse: missing, needs_review, partial"
-  ).action((application, opts) => {
+  ).action(async (application, opts) => {
     const mode = resolveOutputMode(opts.json);
     try {
-      const payload = applicationAuditPayload(application, {
+      const payload = await applicationAuditPayload(application, {
         local: opts.local,
-        repoRoot: opts.repoRoot
+        repoRoot: opts.repoRoot,
+        client: await directoryClient()
       });
       const gate = opts.failOn ? evaluateApplicationAuditGate(payload, opts.failOn) : null;
       const output2 = gate ? { ...payload, conformanceGate: gate } : payload;
@@ -11636,10 +11697,13 @@ function registerAppsCommand(program2) {
   });
   apps.command("record-evidence <application>").description(
     "Stamp <repo>/.topolo/evidence.json with the latest CI gate results so the audit can flip verification-gates / observability-and-audit / canonical-docs from partial to met when the recorded run is fresh (< 24h)."
-  ).option("--json", "Output JSON", true).option("--no-json", "Output human-readable summary").option("--app-root <path>", "Path to the application repo root (defaults to cwd)").option("--build", "Mark the latest build as successful").option("--typecheck", "Mark the latest typecheck as successful").option("--test", "Mark the latest test run as successful").option("--docs-validate", "Mark the latest TopoloDocs npm run validate as successful").option("--smoke <url>", "Mark the latest live smoke as successful against this URL").option("--commit <sha>", "Override the commit hash (defaults to git HEAD)").action((application, opts) => {
+  ).option("--json", "Output JSON", true).option("--no-json", "Output human-readable summary").option("--app-root <path>", "Path to the application repo root (defaults to cwd)").option("--build", "Mark the latest build as successful").option("--typecheck", "Mark the latest typecheck as successful").option("--test", "Mark the latest test run as successful").option("--docs-validate", "Mark the latest TopoloDocs npm run validate as successful").option("--smoke <url>", "Mark the latest live smoke as successful against this URL").option("--commit <sha>", "Override the commit hash (defaults to git HEAD)").action(async (application, opts) => {
     const mode = resolveOutputMode(opts.json);
     try {
-      const payload = recordApplicationEvidence(application, opts);
+      const payload = await recordApplicationEvidence(application, {
+        ...opts,
+        client: await directoryClient()
+      });
       emit(payload, mode, () => formatEvidence(payload));
     } catch (err) {
       fail(err, mode);
@@ -11661,6 +11725,7 @@ function registerAppsCommand(program2) {
     try {
       const api = resolveScaffoldApiOption(opts.api, opts.withApi);
       const payload = applicationScaffoldPayload(application, {
+        catalogApplication: await resolveScaffoldCatalogApplication(application),
         appDir: opts.appDir,
         name: opts.name,
         packageName: opts.packageName,
@@ -11722,14 +11787,11 @@ function parsePageSize2(value) {
   }
   return parsed;
 }
-function resolveApplication(application) {
-  const id = application.trim().toLowerCase();
-  if (!APPLICATION_IDS.includes(id)) {
-    throw new Error(`Unknown application "${application}". ${formatKnownValues(APPLICATION_IDS, "applications")}`);
-  }
-  return APPLICATIONS[id];
+async function resolveApplication(application, client = null) {
+  const resolved = await resolveApplicationDirectoryEntry(client, application);
+  return resolved.application;
 }
-function applicationRequirementsPayload(application) {
+async function applicationRequirementsPayload(application, client = null) {
   if (!application) {
     return {
       version: APPLICATION_REQUIREMENTS_VERSION,
@@ -11738,7 +11800,7 @@ function applicationRequirementsPayload(application) {
       requirements: [...APPLICATION_REQUIREMENTS]
     };
   }
-  const app = resolveApplication(application);
+  const app = await resolveApplication(application, client);
   return {
     version: APPLICATION_REQUIREMENTS_VERSION,
     application: app,
@@ -11746,18 +11808,21 @@ function applicationRequirementsPayload(application) {
     requirements: requirementsForApplication(app)
   };
 }
-function applicationAuditPayload(application, options = {}) {
+async function applicationAuditPayload(application, options = {}) {
+  const client = options.client ?? null;
   const requestedId = application?.trim().toLowerCase();
   const report = requestedId === "cloudcontrol" && options.local ? {
     version: APPLICATION_REQUIREMENTS_VERSION,
     applications: [auditApplicationRequirements(CLOUDCONTROL_LOCAL_APPLICATION)],
     migrationQueue: []
-  } : application ? auditAllApplicationRequirements([resolveApplication(application).id]) : auditAllApplicationRequirements();
+  } : application ? auditApplicationEntries([await resolveApplication(application, client)]) : auditApplicationEntries(
+    (await listApplicationDirectory(client)).applications.map((app) => app.application)
+  );
   if (!options.local) return report;
   return enrichApplicationAuditWithLocalEvidence(report, { repoRoot: options.repoRoot });
 }
-function recordApplicationEvidence(application, options = {}) {
-  const appId = resolveApplication(application).id;
+async function recordApplicationEvidence(application, options = {}) {
+  const appId = (await resolveApplication(application, options.client ?? null)).id;
   const root = path6.resolve(options.appRoot ?? process.cwd());
   if (!existsSync4(root)) {
     throw new Error(`Application root does not exist: ${root}`);
@@ -11888,22 +11953,7 @@ function applicationUrl(application) {
   return application.apiBaseUrl ?? application.launchUrl ?? application.productionUrl ?? null;
 }
 function displayCatalogId(entry) {
-  for (const value of [entry.slug, entry.name, entry.appId]) {
-    if (typeof value !== "string" || !value.trim()) continue;
-    const candidates = catalogIdCandidates(value);
-    const withoutTopolo = candidates.find((candidate) => !candidate.startsWith("topolo-"));
-    if (withoutTopolo) return withoutTopolo;
-    if (candidates[0]) return candidates[0];
-  }
-  return entry.appId;
-}
-function catalogIdCandidates(value) {
-  const normalized = value.trim().toLowerCase().replace(/\s+/g, "-");
-  const withoutTopolo = normalized.startsWith("topolo-") ? normalized.slice("topolo-".length) : normalized;
-  return [.../* @__PURE__ */ new Set([
-    normalized,
-    withoutTopolo
-  ])].filter(Boolean);
+  return friendlyAppId(entry);
 }
 function formatRequirements(payload) {
   const lines = [
@@ -12067,12 +12117,6 @@ function normalizeFailOn(value) {
   }
   throw new Error("Invalid --fail-on value. Use missing, needs_review, or partial.");
 }
-function formatKnownValues(values, label) {
-  const sorted = [...values].sort();
-  const preview = sorted.slice(0, 25).join(", ");
-  const suffix = sorted.length > 25 ? `, ... +${sorted.length - 25} more` : "";
-  return `Run discovery for the full ${label} list. Known snapshot sample: ${preview}${suffix}`;
-}
 function statusesAtOrWorse(threshold) {
   if (threshold === "missing") return ["missing"];
   if (threshold === "needs_review") return ["missing", "needs_review"];
@@ -12274,6 +12318,7 @@ function registerPlatformCommand(program2) {
       }
       const api = resolveScaffoldApiOption(opts.api, opts.withApi);
       const payload = applicationScaffoldPayload(application, {
+        catalogApplication: await resolveScaffoldCatalogApplication(application),
         appDir: opts.appDir,
         name: opts.name,
         packageName: opts.packageName,
@@ -12525,15 +12570,7 @@ function isStagingUrl(value) {
   return url.includes(".stg.topolo.us") || url.includes("localhost") || url.includes("127.0.0.1") || url.includes("topolo-staging");
 }
 function displayAppId(entry) {
-  for (const value of [entry.slug, entry.name, entry.appId]) {
-    if (typeof value !== "string" || !value.trim()) continue;
-    for (const candidate of appIdCandidates(value)) {
-      if (Object.prototype.hasOwnProperty.call(DEFAULT_APP_URLS, candidate)) {
-        return candidate;
-      }
-    }
-  }
-  return appIdCandidates(entry.slug || entry.appId)[0] || entry.appId;
+  return friendlyAppId(entry);
 }
 function defaultServiceUrl(id, entry) {
   return resolveCatalogServiceUrl(entry, { serviceKey: id });

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@topolo/cli",
-  "version": "0.6.10",
-  "topoloPublishedVersion": "0.6.10",
+  "version": "0.7.0",
+  "topoloPublishedVersion": "0.7.0",
   "description": "Command-line interface for Topolo developers, operators, and agents, with internal first-party scaffolding available under the topolo platform namespace.",
   "type": "module",
   "bin": {

package/skills/codex/AGENTS.md

@@ -4,7 +4,7 @@ This file teaches an agent how to interact with the Topolo platform via the `top
 
 ## What the platform is
 
-Topolo is a multi-app SaaS platform. The CLI and MCP server both use `@topolo/sdk`; bundled app IDs come from the generated registry, and newly registered API/technical services can be resolved from the live Auth catalog.
+Topolo is a multi-app SaaS platform. The CLI and MCP server both use `@topolo/sdk`; every application resolves from the live credential-scoped registry, so newly registered apps and API/technical services work immediately — there is no bundled application catalog to rely on or wait for.
 
 - Use `topolo apps --json` or the MCP `topolo_search_applications` tool to discover platform applications, including browser-only Worker apps.
 - Use `topolo apps requirements <application_id> --json` or the MCP `topolo_list_application_requirements` tool before creating or expanding a Topolo app.
@@ -12,7 +12,7 @@ Topolo is a multi-app SaaS platform. The CLI and MCP server both use `@topolo/sd
 - Use `topolo services --json` or the MCP `topolo_search_applications` tool to discover callable app ids and effective URLs.
 - Use `topolo actions --service <app> --json` or MCP `topolo_search_actions` to discover callable operations granted to the current credential; invoke automatic reads with `topolo_read_action` and confirmation-gated operations with `topolo_call_action`.
 - Use `topolo actions capabilities`, `actions examples`, `actions validate`, and `actions plan` (or their MCP equivalents) to obtain schemas, examples, verification, and rollback before execution.
-- The generic `api` command and MCP `topolo_api_call` tool can reach bundled SDK services and live Auth-catalog API/technical services when no action contract exists yet.
+- The generic `api` command and MCP `topolo_api_call` tool can reach any live Auth-catalog application or API/technical service when no action contract exists yet; discover ids with `topolo apps --json` first.
 
 Every call is scoped to the organization embedded in the credential. There is no `--org` flag anywhere — attempting to target another org will fail.