@topolo/mcp 0.1.1 → 0.2.0

package/dist/index.js

@@ -1,12 +1,7 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { Server } from "@modelcontextprotocol/sdk/server/index.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
-import {
-  CallToolRequestSchema,
-  ListToolsRequestSchema
-} from "@modelcontextprotocol/sdk/types.js";
 
 // node_modules/@topolo/sdk/dist/index.js
 function applyAuthHeaders(headers, credential) {
@@ -63,17 +58,38 @@ var TopoloHttpError = class extends TopoloSdkError {
     this.path = path;
   }
 };
-var DEFAULT_SERVICE_URLS = {
+var SERVICES = {
+  agent: "https://topolo-agent-worker.topolo.workers.dev",
   auth: "https://auth.topolo.app",
-  crm: "https://topolo-crm-worker.topolo.workers.dev"
+  bugfix: "https://bugfix.topolo.app",
+  bytes: "https://r2-media-manager-worker.topolo.workers.dev",
+  chat: "https://chat.topolo.app",
+  commerce: "https://topolo-commerce-api.topolo.workers.dev",
+  crm: "https://crm-api.topolo.app",
+  forecast: "https://forecast-worker-production.topolo.workers.dev",
+  learn: "https://topololearn-api.topolo.workers.dev",
+  mdm: "https://nodo-mdm-api.topolo.app",
+  messaging: "https://messages.topolo.app",
+  nexus: "https://topolo-nexus-gateway.topolo.workers.dev",
+  one: "https://topoloone-worker.topolo.workers.dev",
+  pay: "https://topolo-pay.topolo.workers.dev",
+  "quro.api": "https://api.ol0.me",
+  "quro.redirect": "https://ol0.me",
+  roadmapper: "https://roadmapper-api.topolo.app",
+  social_studio: "https://topolo-social-studio-api.topolo.workers.dev",
+  socialize: "https://socialize-prod-api.topolo.workers.dev",
+  support: "https://support.topolo.app",
+  "web.api": "https://web-api.topolo.app",
+  "web.runtime": "https://sites.topolo.app"
 };
 var PLATFORM_SERVICE_IDS = {
   crm: "srv_iCwM4jGXcwlj"
 };
+var DEFAULT_SERVICE_URLS = SERVICES;
 function resolveServiceUrl(service, overrides) {
   const override = overrides?.[service];
   if (override) return override;
-  const envKey = `TOPOLO_SERVICE_URL_${service.toUpperCase()}`;
+  const envKey = `TOPOLO_SERVICE_URL_${service.replace(/\./g, "_").toUpperCase()}`;
   const envValue = typeof process !== "undefined" ? process.env?.[envKey] : void 0;
   if (envValue) return envValue;
   return DEFAULT_SERVICE_URLS[service];
@@ -86,6 +102,7 @@ var TopoloClient = class {
   requireConfirmForWrites;
   timeoutMs;
   fetchImpl;
+  debug;
   constructor(options) {
     if (!options.credential) throw new TopoloAuthError("credential is required");
     if (!options.agent?.clientName) throw new TopoloAuthError("agent.clientName is required");
@@ -95,6 +112,14 @@ var TopoloClient = class {
     this.requireConfirmForWrites = options.requireConfirmForWrites !== false;
     this.timeoutMs = options.timeoutMs ?? 3e4;
     this.fetchImpl = options.fetch ?? fetch;
+    this.debug = options.debug;
+  }
+  emit(event) {
+    if (!this.debug) return;
+    try {
+      this.debug(event);
+    } catch {
+    }
   }
   /**
    * Low-level JSON request. Prefer the typed module helpers (identity, crm, ...)
@@ -121,27 +146,56 @@ var TopoloClient = class {
     const platformServiceId = PLATFORM_SERVICE_IDS[opts.service];
     if (platformServiceId) headers.set("X-Service-ID", platformServiceId);
     applyAuthHeaders(headers, this.credential);
-    applyAuditHeaders(headers, this.agent, generateRequestId());
+    const requestId = generateRequestId();
+    applyAuditHeaders(headers, this.agent, requestId);
     if (opts.headers) {
       for (const [k, v] of Object.entries(opts.headers)) headers.set(k, v);
     }
     const controller = new AbortController();
     const timeoutId = setTimeout(() => controller.abort(), this.timeoutMs);
     const signal = opts.signal ? mergeSignals(opts.signal, controller.signal) : controller.signal;
+    const urlStr = url.toString();
+    const startedAt = Date.now();
+    this.emit({ phase: "request", method, service: opts.service, path: opts.path, url: urlStr, requestId });
     let res;
     try {
-      res = await this.fetchImpl(url.toString(), {
+      res = await this.fetchImpl(urlStr, {
         method,
         headers,
         body: opts.body !== void 0 ? JSON.stringify(opts.body) : null,
         signal
       });
+    } catch (err) {
+      this.emit({
+        phase: "error",
+        method,
+        service: opts.service,
+        path: opts.path,
+        url: urlStr,
+        requestId,
+        durationMs: Date.now() - startedAt,
+        error: err instanceof Error ? err.message : String(err)
+      });
+      throw err;
     } finally {
       clearTimeout(timeoutId);
     }
     const contentType = res.headers.get("Content-Type") ?? "";
     const parsed = contentType.includes("application/json") ? await res.json().catch(() => null) : await res.text().catch(() => null);
     if (!res.ok) {
+      const durationMs = Date.now() - startedAt;
+      const message = describeError(parsed, `HTTP ${res.status}`);
+      this.emit({
+        phase: "error",
+        method,
+        service: opts.service,
+        path: opts.path,
+        url: urlStr,
+        requestId,
+        durationMs,
+        error: message,
+        status: res.status
+      });
       if (res.status === 401) throw new TopoloAuthError(describeError(parsed, "Unauthorized"));
       if (res.status === 403) {
         throw new TopoloPermissionError(
@@ -151,6 +205,16 @@ var TopoloClient = class {
       }
       throw new TopoloHttpError(opts.service, opts.path, res.status, parsed);
     }
+    this.emit({
+      phase: "response",
+      method,
+      service: opts.service,
+      path: opts.path,
+      url: urlStr,
+      requestId,
+      status: res.status,
+      durationMs: Date.now() - startedAt
+    });
     return parsed;
   }
   /**
@@ -308,6 +372,13 @@ function resolveServiceUrlsFromEnv() {
   return Object.keys(out).length > 0 ? out : void 0;
 }
 
+// src/server.ts
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import {
+  CallToolRequestSchema,
+  ListToolsRequestSchema
+} from "@modelcontextprotocol/sdk/types.js";
+
 // src/gating.ts
 function hasScope(set, required) {
   if (set.role === "super_admin") return true;
@@ -340,6 +411,8 @@ function splitService(servicePart) {
 }
 
 // src/tools.ts
+var SERVICE_IDS = Object.keys(DEFAULT_SERVICE_URLS).sort();
+var HTTP_METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE"];
 var TOOLS = [
   {
     name: "topolo_whoami",
@@ -377,6 +450,75 @@ var TOOLS = [
       });
     }
   },
+  {
+    name: "topolo_api_call",
+    title: "Call any Topolo platform service",
+    description: `Low-level passthrough to any Topolo service. Use when no domain-specific tool exists for the operation you need. The request is signed with the current credential and scoped to the caller's organization \u2014 the target service will return 403 if your scopes do not permit the operation, even though this tool is advertised. Mutating calls (non-GET methods) require confirm:true. Known services: ${SERVICE_IDS.join(", ")}.`,
+    requiredScopes: [],
+    destructive: true,
+    inputSchema: {
+      type: "object",
+      properties: {
+        service: {
+          type: "string",
+          enum: SERVICE_IDS,
+          description: "Target service ID from the platform registry."
+        },
+        method: {
+          type: "string",
+          enum: HTTP_METHODS,
+          default: "GET",
+          description: "HTTP method. Defaults to GET."
+        },
+        path: {
+          type: "string",
+          minLength: 1,
+          description: 'Request path including any leading slash, e.g. "/api/contacts".'
+        },
+        body: {
+          description: "JSON request body. Ignored for GET."
+        },
+        query: {
+          type: "object",
+          additionalProperties: { type: "string" },
+          description: "Query string parameters as string values."
+        },
+        confirm: {
+          type: "boolean",
+          description: "Required for non-GET methods. Explicit human-in-the-loop acknowledgement for writes."
+        }
+      },
+      required: ["service", "path"],
+      additionalProperties: false
+    },
+    handler: async (topolo, args) => {
+      const service = args["service"];
+      const path = args["path"];
+      if (typeof service !== "string" || !SERVICE_IDS.includes(service)) {
+        throw new Error(`Unknown service "${String(service)}". Known: ${SERVICE_IDS.join(", ")}`);
+      }
+      if (typeof path !== "string" || !path) {
+        throw new Error("path is required");
+      }
+      const methodRaw = args["method"] ?? "GET";
+      if (typeof methodRaw !== "string" || !HTTP_METHODS.includes(methodRaw)) {
+        throw new Error(`Unknown HTTP method "${String(methodRaw)}"`);
+      }
+      const method = methodRaw;
+      const query = args["query"];
+      const normalisedQuery = query && typeof query === "object" && !Array.isArray(query) ? Object.fromEntries(
+        Object.entries(query).map(([k, v]) => [k, String(v)])
+      ) : void 0;
+      return topolo.client.request({
+        service,
+        method,
+        path,
+        body: args["body"],
+        ...normalisedQuery ? { query: normalisedQuery } : {},
+        confirm: Boolean(args["confirm"])
+      });
+    }
+  },
   {
     name: "topolo_crm_get_contact",
     title: "Fetch a single CRM contact",
@@ -409,37 +551,12 @@ function filterToolsByScopes(tools, scopes) {
 // src/version.ts
 var MCP_VERSION = "0.1.0";
 
-// src/index.ts
-async function main() {
-  const credential = resolveCredentialFromEnv();
-  if (!credential) {
-    process.stderr.write(
-      "TopoloMCP: TOPOLO_API_KEY or TOPOLO_ACCESS_TOKEN must be set in the environment.\n"
-    );
-    process.exit(1);
-  }
-  const agentName = process.env.TOPOLO_AGENT_NAME;
-  const serviceUrls = resolveServiceUrlsFromEnv();
-  const topolo = createTopolo({
-    credential,
-    agent: {
-      clientName: "topolo-mcp",
-      clientVersion: MCP_VERSION,
-      ...agentName ? { agentName } : {}
-    },
-    serviceUrls,
-    requireConfirmForWrites: true
-  });
-  const scopes = await loadScopes(topolo);
-  const availableTools = filterToolsByScopes(TOOLS, scopes);
+// src/server.ts
+function buildServer(topolo, scopes, tools = TOOLS) {
+  const availableTools = filterToolsByScopes(tools, scopes);
   const server = new Server(
-    {
-      name: "topolo",
-      version: MCP_VERSION
-    },
-    {
-      capabilities: { tools: {} }
-    }
+    { name: "topolo", version: MCP_VERSION },
+    { capabilities: { tools: {} } }
   );
   server.setRequestHandler(ListToolsRequestSchema, async () => ({
     tools: availableTools.map((t) => ({
@@ -469,9 +586,7 @@ async function main() {
     try {
       const result = await tool.handler(topolo, params.arguments ?? {});
       return {
-        content: [
-          { type: "text", text: JSON.stringify(result, null, 2) }
-        ]
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
       };
     } catch (err) {
       if (err instanceof TopoloPermissionError) {
@@ -483,10 +598,46 @@ async function main() {
       return toolError(err instanceof Error ? err.message : String(err));
     }
   });
+  return server;
+}
+function advertisedToolNames(scopes, tools = TOOLS) {
+  return filterToolsByScopes(tools, scopes).map((t) => t.name);
+}
+function toolError(message) {
+  return {
+    isError: true,
+    content: [{ type: "text", text: message }]
+  };
+}
+
+// src/index.ts
+async function main() {
+  const credential = resolveCredentialFromEnv();
+  if (!credential) {
+    process.stderr.write(
+      "TopoloMCP: TOPOLO_API_KEY or TOPOLO_ACCESS_TOKEN must be set in the environment.\n"
+    );
+    process.exit(1);
+  }
+  const agentName = process.env.TOPOLO_AGENT_NAME;
+  const serviceUrls = resolveServiceUrlsFromEnv();
+  const topolo = createTopolo({
+    credential,
+    agent: {
+      clientName: "topolo-mcp",
+      clientVersion: MCP_VERSION,
+      ...agentName ? { agentName } : {}
+    },
+    serviceUrls,
+    requireConfirmForWrites: true
+  });
+  const scopes = await loadScopes(topolo);
+  const server = buildServer(topolo, scopes);
   const transport = new StdioServerTransport();
   await server.connect(transport);
+  const toolNames = advertisedToolNames(scopes);
   process.stderr.write(
-    `TopoloMCP v${MCP_VERSION} connected. Tools available: ${availableTools.map((t) => t.name).join(", ") || "(none)"}
+    `TopoloMCP v${MCP_VERSION} connected. Tools available: ${toolNames.join(", ") || "(none)"}
 `
   );
 }
@@ -506,12 +657,6 @@ async function loadScopes(topolo) {
     throw err;
   }
 }
-function toolError(message) {
-  return {
-    isError: true,
-    content: [{ type: "text", text: message }]
-  };
-}
 main().catch((err) => {
   process.stderr.write(`TopoloMCP fatal: ${err instanceof Error ? err.message : String(err)}
 `);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@topolo/mcp",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Model Context Protocol server for the Topolo platform. Exposes scope-gated tools that third-party agents (Claude, Codex, etc.) can call natively.",
   "type": "module",
   "bin": {