@topolo/mcp 0.10.0 → 0.10.2

package/README.md

@@ -217,6 +217,9 @@ sent.
   catalog. They do not expose the global generated platform catalog.
 - **Credential-scoped action discovery.** `topolo_search_actions` reads only one
   app partition and returns at most 100 permission-filtered actions per page.
+  Search, capability discovery, validation, planning, and application audit
+  return compact agent guidance by default; pass `detail: true` only when the
+  full contracts or findings are needed.
 - **Audit headers.** Every request sends `X-Topolo-Client: topolo-mcp/<ver>`,
   `X-Topolo-Agent: <label>`, `X-Topolo-Request-Id: <uuid>`.
 - **Write-action confirmation.** The SDK refuses mutating HTTP methods unless

package/dist/dispatch.js

@@ -7,6 +7,10 @@ import {
   APPLICATION_REQUIREMENTS_VERSION,
   auditApplicationEntries,
   applicationRequirementScopes,
+  compactActionCatalogEntry,
+  compactActionPlan,
+  compactActionValidation,
+  compactApplicationAudit,
   friendlyAppId,
   listApplicationDirectory,
   requirementsForApplication,
@@ -78,6 +82,17 @@ function optionalResourceContext(args) {
   }
   return { resourceType, resourceId };
 }
+function summarizeActionCapabilities(service, actions) {
+  return {
+    service,
+    total: actions.length,
+    readOnly: actions.filter((action) => action.readOnly).length,
+    mutating: actions.filter((action) => !action.readOnly).length,
+    destructive: actions.filter((action) => action.destructive).length,
+    confirmationRequired: actions.filter((action) => action.requiresConfirmation).length,
+    resourceTypes: [...new Set(actions.map((action) => action.agentContract?.resource?.kind).filter(Boolean))].sort()
+  };
+}
 function coerceObjectParam(value, name) {
   let candidate = value;
   if (typeof candidate === "string" && candidate.trim().startsWith("{")) {
@@ -117,7 +132,8 @@ var TOOLS = [
       properties: {
         query: { type: "string" },
         cursor: { type: "string" },
-        limit: { type: "integer", minimum: 1, maximum: 100, default: 25 }
+        limit: { type: "integer", minimum: 1, maximum: 100, default: 25 },
+        detail: { type: "boolean", description: "Return full schemas and agent contracts. Defaults to compact action guidance." }
       },
       additionalProperties: false
     },
@@ -171,12 +187,13 @@ var TOOLS = [
     handler: async (topolo, args) => {
       const service = typeof args["service"] === "string" ? args["service"].trim() : "";
       if (!service) throw new TopoloMcpPublicError("service is required for bounded action discovery.");
-      return topolo.client.searchActions({
+      const result = await topolo.client.searchActions({
         service,
         query: typeof args["query"] === "string" ? args["query"] : void 0,
         cursor: typeof args["cursor"] === "string" ? args["cursor"] : void 0,
         limit: typeof args["limit"] === "number" ? args["limit"] : void 0
       });
+      return args["detail"] === true ? result : { actions: result.actions.map(compactActionCatalogEntry), page: result.page };
     }
   },
   {
@@ -342,7 +359,8 @@ var TOOLS = [
       type: "object",
       properties: {
         actionId: { type: "string", minLength: 1 },
-        input: { type: "object", additionalProperties: true }
+        input: { type: "object", additionalProperties: true },
+        detail: { type: "boolean", description: "Include the full action contract. Defaults to a compact validation result." }
       },
       required: ["actionId"],
       additionalProperties: false
@@ -351,7 +369,8 @@ var TOOLS = [
       const actionId = typeof args["actionId"] === "string" ? args["actionId"].trim() : "";
       if (!actionId) throw new TopoloMcpPublicError("actionId is required.");
       const input = coerceObjectParam(args["input"], "input");
-      return topolo.client.validateActionInput(actionId, input);
+      const result = await topolo.client.validateActionInput(actionId, input);
+      return args["detail"] === true ? result : compactActionValidation(result.action.actionId, result.validation);
     }
   },
   {
@@ -367,7 +386,8 @@ var TOOLS = [
         input: { type: "object", additionalProperties: true },
         resourceType: { type: "string", description: "Optional resource-scoping alias published in the app resource catalog (e.g. workspace, brand, merchant)." },
         resourceId: { type: "string", description: "Resource id. Required when resourceType is provided." },
-        confirm: { type: "boolean", description: "Include confirmation in the plan without executing the action." }
+        confirm: { type: "boolean", description: "Include confirmation in the plan without executing the action." },
+        detail: { type: "boolean", description: "Include the full action contract. Defaults to the executable request and verification plan." }
       },
       required: ["actionId"],
       additionalProperties: false
@@ -377,7 +397,7 @@ var TOOLS = [
       if (!actionId) throw new TopoloMcpPublicError("actionId is required.");
       const input = coerceObjectParam(args["input"], "input");
       const resource = optionalResourceContext(args);
-      return topolo.client.planAction(
+      const plan = await topolo.client.planAction(
         actionId,
         input,
         {
@@ -385,6 +405,7 @@ var TOOLS = [
           ...resource ? { resource } : {}
         }
       );
+      return args["detail"] === true ? plan : compactActionPlan(plan);
     }
   },
   {
@@ -413,19 +434,42 @@ var TOOLS = [
   {
     name: "topolo_discover_capabilities",
     title: "Discover one Topolo application capability contract",
-    description: "Lists every action published by one application \u2014 its full capability contract, straight from the registry-canonical catalog. Use the actionService value returned by topolo_search_applications as service. Follow page.nextCursor via topolo_search_actions when the contract exceeds one page.",
+    description: "Lists every action published by one application \u2014 its full capability contract, straight from the registry-canonical catalog. Use the actionService value returned by topolo_search_applications as service.",
     requiredScopes: [],
     destructive: false,
     inputSchema: {
       type: "object",
-      properties: { service: { type: "string", minLength: 1 } },
+      properties: {
+        service: { type: "string", minLength: 1 },
+        summary: { type: "boolean", description: "Return compact counts without action rows." },
+        detail: { type: "boolean", description: "Return full schemas and agent contracts. Defaults to compact capability guidance." }
+      },
       required: ["service"],
       additionalProperties: false
     },
     handler: async (topolo, args) => {
       const service = typeof args["service"] === "string" ? args["service"].trim() : "";
       if (!service) throw new TopoloMcpPublicError("service is required.");
-      return topolo.client.searchActions({ service, limit: 100 });
+      if (args["summary"] === true && args["detail"] === true) {
+        throw new TopoloMcpPublicError("summary cannot be combined with detail.");
+      }
+      const actions = [];
+      const seenCursors = /* @__PURE__ */ new Set();
+      let cursor;
+      for (; ; ) {
+        const page = await topolo.client.searchActions({ service, limit: 100, ...cursor ? { cursor } : {} });
+        actions.push(...page.actions);
+        if (!page.page.hasMore) break;
+        const nextCursor = page.page.nextCursor?.trim();
+        if (!nextCursor || seenCursors.has(nextCursor)) {
+          throw new TopoloMcpPublicError("Capability discovery returned an invalid continuation cursor.");
+        }
+        seenCursors.add(nextCursor);
+        cursor = nextCursor;
+      }
+      if (args["summary"] === true) return summarizeActionCapabilities(service, actions);
+      const result = { actions, page: { nextCursor: null, hasMore: false } };
+      return args["detail"] === true ? result : { actions: actions.map(compactActionCatalogEntry), page: result.page };
     }
   },
   {
@@ -593,6 +637,10 @@ var TOOLS = [
           type: "string",
           enum: ["missing", "needs_review", "partial"],
           description: "Optional conformance gate. Returns conformanceGate.passed=false when findings at this severity or worse exist."
+        },
+        detail: {
+          type: "boolean",
+          description: "Include every finding and migration item. Defaults to per-app scores and a queue count."
         }
       },
       additionalProperties: false
@@ -608,11 +656,13 @@ var TOOLS = [
       if (application === void 0) {
         const directory = await listApplicationDirectory(topolo.client);
         report = auditApplicationEntries(directory.applications.map((app) => app.application));
-        return gate ? { ...report, conformanceGate: evaluateApplicationAuditGate(report, gate) } : report;
+        const output2 = args["detail"] === true ? report : compactApplicationAudit(report);
+        return gate ? { ...output2, conformanceGate: evaluateApplicationAuditGate(report, gate) } : output2;
       }
       const resolved = await resolveDirectoryApplication(topolo, application);
       report = auditApplicationEntries([resolved.application]);
-      return gate ? { ...report, conformanceGate: evaluateApplicationAuditGate(report, gate) } : report;
+      const output = args["detail"] === true ? report : compactApplicationAudit(report);
+      return gate ? { ...output, conformanceGate: evaluateApplicationAuditGate(report, gate) } : output;
     }
   },
   {

package/dist/http.js

@@ -3098,9 +3098,9 @@ var require_data = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/fast-uri@3.1.4/node_modules/fast-uri/lib/utils.js
+// ../../node_modules/.pnpm/fast-uri@3.1.5/node_modules/fast-uri/lib/utils.js
 var require_utils = __commonJS({
-  "../../node_modules/.pnpm/fast-uri@3.1.4/node_modules/fast-uri/lib/utils.js"(exports, module) {
+  "../../node_modules/.pnpm/fast-uri@3.1.5/node_modules/fast-uri/lib/utils.js"(exports, module) {
     "use strict";
     var isUUID = RegExp.prototype.test.bind(/^[\da-f]{8}-[\da-f]{4}-[\da-f]{4}-[\da-f]{4}-[\da-f]{12}$/iu);
     var isIPv4 = RegExp.prototype.test.bind(/^(?:(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d{2}|[1-9]\d|\d)$/u);
@@ -3411,9 +3411,9 @@ var require_utils = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/fast-uri@3.1.4/node_modules/fast-uri/lib/schemes.js
+// ../../node_modules/.pnpm/fast-uri@3.1.5/node_modules/fast-uri/lib/schemes.js
 var require_schemes = __commonJS({
-  "../../node_modules/.pnpm/fast-uri@3.1.4/node_modules/fast-uri/lib/schemes.js"(exports, module) {
+  "../../node_modules/.pnpm/fast-uri@3.1.5/node_modules/fast-uri/lib/schemes.js"(exports, module) {
     "use strict";
     var { isUUID } = require_utils();
     var URN_REG = /([\da-z][\d\-a-z]{0,31}):((?:[\w!$'()*+,\-.:;=@]|%[\da-f]{2})+)/iu;
@@ -3621,9 +3621,9 @@ var require_schemes = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/fast-uri@3.1.4/node_modules/fast-uri/index.js
+// ../../node_modules/.pnpm/fast-uri@3.1.5/node_modules/fast-uri/index.js
 var require_fast_uri = __commonJS({
-  "../../node_modules/.pnpm/fast-uri@3.1.4/node_modules/fast-uri/index.js"(exports, module) {
+  "../../node_modules/.pnpm/fast-uri@3.1.5/node_modules/fast-uri/index.js"(exports, module) {
     "use strict";
     var { normalizeIPv6, removeDotSegments, recomposeAuthority, normalizePercentEncoding, normalizePathEncoding, escapePreservingEscapes, reescapeHostDelimiters, isIPv4, nonSimpleDomain } = require_utils();
     var { SCHEMES, getSchemeHandler } = require_schemes();
@@ -3639,7 +3639,12 @@ var require_fast_uri = __commonJS({
     }
     function resolve(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
-      const resolved = resolveComponent(parse3(baseURI, schemelessOptions), parse3(relativeURI, schemelessOptions), schemelessOptions, true);
+      const { parsed: baseParsed, malformedAuthorityOrPort: baseMalformed } = parseWithStatus(baseURI, schemelessOptions);
+      const { parsed: relativeParsed, malformedAuthorityOrPort: relativeMalformed } = parseWithStatus(relativeURI, schemelessOptions);
+      if (baseMalformed || relativeMalformed) {
+        throw new Error(baseParsed.error || relativeParsed.error || "URI is malformed.");
+      }
+      const resolved = resolveComponent(baseParsed, relativeParsed, schemelessOptions, true);
       schemelessOptions.skipEscape = true;
       return serialize(resolved, schemelessOptions);
     }
@@ -3765,6 +3770,7 @@ var require_fast_uri = __commonJS({
     }
     var URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
     var AUTHORITY_PREFIX = /^(?:[^#/:?]+:)?\/\/([^/?#]*)/;
+    var AUTHORITY_INTRODUCER_REGION = /^(?:[^#/:?]+:)?([/\\\t\n\r]*)/;
     function getParseError(parsed, matches) {
       if (matches[2] !== void 0 && parsed.path && parsed.path[0] !== "/") {
         return 'URI path must start with "/" when authority is present.';
@@ -3799,6 +3805,20 @@ var require_fast_uri = __commonJS({
         parsed.error = "URI authority must not contain a literal backslash.";
         malformedAuthorityOrPort = true;
       }
+      const introducerMatch = uri.match(AUTHORITY_INTRODUCER_REGION);
+      if (introducerMatch !== null) {
+        const region = introducerMatch[1];
+        const normalizedRegion = region.replace(/[\t\n\r]/g, "");
+        if (normalizedRegion.length >= 2) {
+          if (normalizedRegion.slice(0, 2) !== "//") {
+            parsed.error = parsed.error || "URI authority must not contain a literal backslash.";
+            malformedAuthorityOrPort = true;
+          } else if (region.length !== normalizedRegion.length) {
+            parsed.error = parsed.error || "URI authority introducer must not contain whitespace.";
+            malformedAuthorityOrPort = true;
+          }
+        }
+      }
       const matches = uri.match(URI_PARSE);
       if (matches) {
         parsed.scheme = matches[1];
@@ -15832,6 +15852,10 @@ import {
   APPLICATION_REQUIREMENTS_VERSION,
   auditApplicationEntries,
   applicationRequirementScopes,
+  compactActionCatalogEntry,
+  compactActionPlan,
+  compactActionValidation,
+  compactApplicationAudit,
   friendlyAppId,
   listApplicationDirectory,
   requirementsForApplication,
@@ -15892,6 +15916,17 @@ function optionalResourceContext(args) {
   }
   return { resourceType, resourceId };
 }
+function summarizeActionCapabilities(service, actions) {
+  return {
+    service,
+    total: actions.length,
+    readOnly: actions.filter((action) => action.readOnly).length,
+    mutating: actions.filter((action) => !action.readOnly).length,
+    destructive: actions.filter((action) => action.destructive).length,
+    confirmationRequired: actions.filter((action) => action.requiresConfirmation).length,
+    resourceTypes: [...new Set(actions.map((action) => action.agentContract?.resource?.kind).filter(Boolean))].sort()
+  };
+}
 function coerceObjectParam(value, name) {
   let candidate = value;
   if (typeof candidate === "string" && candidate.trim().startsWith("{")) {
@@ -15931,7 +15966,8 @@ var TOOLS = [
       properties: {
         query: { type: "string" },
         cursor: { type: "string" },
-        limit: { type: "integer", minimum: 1, maximum: 100, default: 25 }
+        limit: { type: "integer", minimum: 1, maximum: 100, default: 25 },
+        detail: { type: "boolean", description: "Return full schemas and agent contracts. Defaults to compact action guidance." }
       },
       additionalProperties: false
     },
@@ -15985,12 +16021,13 @@ var TOOLS = [
     handler: async (topolo, args) => {
       const service = typeof args["service"] === "string" ? args["service"].trim() : "";
       if (!service) throw new TopoloMcpPublicError("service is required for bounded action discovery.");
-      return topolo.client.searchActions({
+      const result = await topolo.client.searchActions({
         service,
         query: typeof args["query"] === "string" ? args["query"] : void 0,
         cursor: typeof args["cursor"] === "string" ? args["cursor"] : void 0,
         limit: typeof args["limit"] === "number" ? args["limit"] : void 0
       });
+      return args["detail"] === true ? result : { actions: result.actions.map(compactActionCatalogEntry), page: result.page };
     }
   },
   {
@@ -16156,7 +16193,8 @@ var TOOLS = [
       type: "object",
       properties: {
         actionId: { type: "string", minLength: 1 },
-        input: { type: "object", additionalProperties: true }
+        input: { type: "object", additionalProperties: true },
+        detail: { type: "boolean", description: "Include the full action contract. Defaults to a compact validation result." }
       },
       required: ["actionId"],
       additionalProperties: false
@@ -16165,7 +16203,8 @@ var TOOLS = [
       const actionId = typeof args["actionId"] === "string" ? args["actionId"].trim() : "";
       if (!actionId) throw new TopoloMcpPublicError("actionId is required.");
       const input = coerceObjectParam(args["input"], "input");
-      return topolo.client.validateActionInput(actionId, input);
+      const result = await topolo.client.validateActionInput(actionId, input);
+      return args["detail"] === true ? result : compactActionValidation(result.action.actionId, result.validation);
     }
   },
   {
@@ -16181,7 +16220,8 @@ var TOOLS = [
         input: { type: "object", additionalProperties: true },
         resourceType: { type: "string", description: "Optional resource-scoping alias published in the app resource catalog (e.g. workspace, brand, merchant)." },
         resourceId: { type: "string", description: "Resource id. Required when resourceType is provided." },
-        confirm: { type: "boolean", description: "Include confirmation in the plan without executing the action." }
+        confirm: { type: "boolean", description: "Include confirmation in the plan without executing the action." },
+        detail: { type: "boolean", description: "Include the full action contract. Defaults to the executable request and verification plan." }
       },
       required: ["actionId"],
       additionalProperties: false
@@ -16191,7 +16231,7 @@ var TOOLS = [
       if (!actionId) throw new TopoloMcpPublicError("actionId is required.");
       const input = coerceObjectParam(args["input"], "input");
       const resource = optionalResourceContext(args);
-      return topolo.client.planAction(
+      const plan = await topolo.client.planAction(
         actionId,
         input,
         {
@@ -16199,6 +16239,7 @@ var TOOLS = [
           ...resource ? { resource } : {}
         }
       );
+      return args["detail"] === true ? plan : compactActionPlan(plan);
     }
   },
   {
@@ -16227,19 +16268,42 @@ var TOOLS = [
   {
     name: "topolo_discover_capabilities",
     title: "Discover one Topolo application capability contract",
-    description: "Lists every action published by one application \u2014 its full capability contract, straight from the registry-canonical catalog. Use the actionService value returned by topolo_search_applications as service. Follow page.nextCursor via topolo_search_actions when the contract exceeds one page.",
+    description: "Lists every action published by one application \u2014 its full capability contract, straight from the registry-canonical catalog. Use the actionService value returned by topolo_search_applications as service.",
     requiredScopes: [],
     destructive: false,
     inputSchema: {
       type: "object",
-      properties: { service: { type: "string", minLength: 1 } },
+      properties: {
+        service: { type: "string", minLength: 1 },
+        summary: { type: "boolean", description: "Return compact counts without action rows." },
+        detail: { type: "boolean", description: "Return full schemas and agent contracts. Defaults to compact capability guidance." }
+      },
       required: ["service"],
       additionalProperties: false
     },
     handler: async (topolo, args) => {
       const service = typeof args["service"] === "string" ? args["service"].trim() : "";
       if (!service) throw new TopoloMcpPublicError("service is required.");
-      return topolo.client.searchActions({ service, limit: 100 });
+      if (args["summary"] === true && args["detail"] === true) {
+        throw new TopoloMcpPublicError("summary cannot be combined with detail.");
+      }
+      const actions = [];
+      const seenCursors = /* @__PURE__ */ new Set();
+      let cursor;
+      for (; ; ) {
+        const page = await topolo.client.searchActions({ service, limit: 100, ...cursor ? { cursor } : {} });
+        actions.push(...page.actions);
+        if (!page.page.hasMore) break;
+        const nextCursor = page.page.nextCursor?.trim();
+        if (!nextCursor || seenCursors.has(nextCursor)) {
+          throw new TopoloMcpPublicError("Capability discovery returned an invalid continuation cursor.");
+        }
+        seenCursors.add(nextCursor);
+        cursor = nextCursor;
+      }
+      if (args["summary"] === true) return summarizeActionCapabilities(service, actions);
+      const result = { actions, page: { nextCursor: null, hasMore: false } };
+      return args["detail"] === true ? result : { actions: actions.map(compactActionCatalogEntry), page: result.page };
     }
   },
   {
@@ -16407,6 +16471,10 @@ var TOOLS = [
           type: "string",
           enum: ["missing", "needs_review", "partial"],
           description: "Optional conformance gate. Returns conformanceGate.passed=false when findings at this severity or worse exist."
+        },
+        detail: {
+          type: "boolean",
+          description: "Include every finding and migration item. Defaults to per-app scores and a queue count."
         }
       },
       additionalProperties: false
@@ -16422,11 +16490,13 @@ var TOOLS = [
       if (application === void 0) {
         const directory = await listApplicationDirectory(topolo.client);
         report = auditApplicationEntries(directory.applications.map((app) => app.application));
-        return gate ? { ...report, conformanceGate: evaluateApplicationAuditGate(report, gate) } : report;
+        const output2 = args["detail"] === true ? report : compactApplicationAudit(report);
+        return gate ? { ...output2, conformanceGate: evaluateApplicationAuditGate(report, gate) } : output2;
       }
       const resolved = await resolveDirectoryApplication(topolo, application);
       report = auditApplicationEntries([resolved.application]);
-      return gate ? { ...report, conformanceGate: evaluateApplicationAuditGate(report, gate) } : report;
+      const output = args["detail"] === true ? report : compactApplicationAudit(report);
+      return gate ? { ...output, conformanceGate: evaluateApplicationAuditGate(report, gate) } : output;
     }
   },
   {

package/dist/index.js

@@ -3908,6 +3908,52 @@ function mergeSignals(a, b) {
   b.addEventListener("abort", onAbort, { once: true });
   return controller.signal;
 }
+function compactActionCatalogEntry(action) {
+  const required = Array.isArray(action.inputSchema["required"]) ? action.inputSchema["required"].filter((value) => typeof value === "string") : [];
+  const examples = action.agentContract?.examples ?? [];
+  return {
+    actionId: action.actionId,
+    title: action.title,
+    description: action.description,
+    method: action.method,
+    readOnly: action.readOnly,
+    requiresConfirmation: action.requiresConfirmation,
+    agentAccess: action.agentAccess ?? (action.requiresConfirmation ? "confirm" : action.readOnly ? "auto" : "confirm"),
+    requiredPermission: action.requiredPermission,
+    requiredInput: required,
+    resourceType: action.agentContract?.resource?.kind ?? null,
+    exampleInput: examples[0]?.input ?? null,
+    docsUrl: action.agentContract?.docsUrl ?? null
+  };
+}
+function compactActionValidation(actionId, validation) {
+  return { actionId, valid: validation.valid, errors: validation.errors };
+}
+function compactActionPlan(plan) {
+  return {
+    actionId: plan.action.actionId,
+    valid: plan.validation.valid,
+    errors: plan.validation.errors,
+    executable: plan.executable,
+    confirmationRequired: plan.confirmationRequired,
+    confirmationProvided: plan.confirmationProvided,
+    request: plan.request,
+    verification: plan.verification,
+    rollbackActionId: plan.rollbackActionId,
+    nextActionIds: plan.nextActionIds
+  };
+}
+function compactApplicationAudit(report) {
+  return {
+    version: report.version,
+    applications: report.applications.map((audit) => ({
+      applicationId: audit.application.id,
+      applicationName: audit.application.name,
+      score: audit.score
+    })),
+    migrationQueueCount: report.migrationQueue.length
+  };
+}
 var CrmModule = class {
   constructor(client) {
     this.client = client;
@@ -4479,6 +4525,17 @@ function optionalResourceContext(args) {
   }
   return { resourceType, resourceId };
 }
+function summarizeActionCapabilities(service, actions) {
+  return {
+    service,
+    total: actions.length,
+    readOnly: actions.filter((action) => action.readOnly).length,
+    mutating: actions.filter((action) => !action.readOnly).length,
+    destructive: actions.filter((action) => action.destructive).length,
+    confirmationRequired: actions.filter((action) => action.requiresConfirmation).length,
+    resourceTypes: [...new Set(actions.map((action) => action.agentContract?.resource?.kind).filter(Boolean))].sort()
+  };
+}
 function coerceObjectParam(value, name) {
   let candidate = value;
   if (typeof candidate === "string" && candidate.trim().startsWith("{")) {
@@ -4518,7 +4575,8 @@ var TOOLS = [
       properties: {
         query: { type: "string" },
         cursor: { type: "string" },
-        limit: { type: "integer", minimum: 1, maximum: 100, default: 25 }
+        limit: { type: "integer", minimum: 1, maximum: 100, default: 25 },
+        detail: { type: "boolean", description: "Return full schemas and agent contracts. Defaults to compact action guidance." }
       },
       additionalProperties: false
     },
@@ -4572,12 +4630,13 @@ var TOOLS = [
     handler: async (topolo, args) => {
       const service = typeof args["service"] === "string" ? args["service"].trim() : "";
       if (!service) throw new TopoloMcpPublicError("service is required for bounded action discovery.");
-      return topolo.client.searchActions({
+      const result = await topolo.client.searchActions({
         service,
         query: typeof args["query"] === "string" ? args["query"] : void 0,
         cursor: typeof args["cursor"] === "string" ? args["cursor"] : void 0,
         limit: typeof args["limit"] === "number" ? args["limit"] : void 0
       });
+      return args["detail"] === true ? result : { actions: result.actions.map(compactActionCatalogEntry), page: result.page };
     }
   },
   {
@@ -4743,7 +4802,8 @@ var TOOLS = [
       type: "object",
       properties: {
         actionId: { type: "string", minLength: 1 },
-        input: { type: "object", additionalProperties: true }
+        input: { type: "object", additionalProperties: true },
+        detail: { type: "boolean", description: "Include the full action contract. Defaults to a compact validation result." }
       },
       required: ["actionId"],
       additionalProperties: false
@@ -4752,7 +4812,8 @@ var TOOLS = [
       const actionId = typeof args["actionId"] === "string" ? args["actionId"].trim() : "";
       if (!actionId) throw new TopoloMcpPublicError("actionId is required.");
       const input = coerceObjectParam(args["input"], "input");
-      return topolo.client.validateActionInput(actionId, input);
+      const result = await topolo.client.validateActionInput(actionId, input);
+      return args["detail"] === true ? result : compactActionValidation(result.action.actionId, result.validation);
     }
   },
   {
@@ -4768,7 +4829,8 @@ var TOOLS = [
         input: { type: "object", additionalProperties: true },
         resourceType: { type: "string", description: "Optional resource-scoping alias published in the app resource catalog (e.g. workspace, brand, merchant)." },
         resourceId: { type: "string", description: "Resource id. Required when resourceType is provided." },
-        confirm: { type: "boolean", description: "Include confirmation in the plan without executing the action." }
+        confirm: { type: "boolean", description: "Include confirmation in the plan without executing the action." },
+        detail: { type: "boolean", description: "Include the full action contract. Defaults to the executable request and verification plan." }
       },
       required: ["actionId"],
       additionalProperties: false
@@ -4778,7 +4840,7 @@ var TOOLS = [
       if (!actionId) throw new TopoloMcpPublicError("actionId is required.");
       const input = coerceObjectParam(args["input"], "input");
       const resource = optionalResourceContext(args);
-      return topolo.client.planAction(
+      const plan = await topolo.client.planAction(
         actionId,
         input,
         {
@@ -4786,6 +4848,7 @@ var TOOLS = [
           ...resource ? { resource } : {}
         }
       );
+      return args["detail"] === true ? plan : compactActionPlan(plan);
     }
   },
   {
@@ -4814,19 +4877,42 @@ var TOOLS = [
   {
     name: "topolo_discover_capabilities",
     title: "Discover one Topolo application capability contract",
-    description: "Lists every action published by one application \u2014 its full capability contract, straight from the registry-canonical catalog. Use the actionService value returned by topolo_search_applications as service. Follow page.nextCursor via topolo_search_actions when the contract exceeds one page.",
+    description: "Lists every action published by one application \u2014 its full capability contract, straight from the registry-canonical catalog. Use the actionService value returned by topolo_search_applications as service.",
     requiredScopes: [],
     destructive: false,
     inputSchema: {
       type: "object",
-      properties: { service: { type: "string", minLength: 1 } },
+      properties: {
+        service: { type: "string", minLength: 1 },
+        summary: { type: "boolean", description: "Return compact counts without action rows." },
+        detail: { type: "boolean", description: "Return full schemas and agent contracts. Defaults to compact capability guidance." }
+      },
       required: ["service"],
       additionalProperties: false
     },
     handler: async (topolo, args) => {
       const service = typeof args["service"] === "string" ? args["service"].trim() : "";
       if (!service) throw new TopoloMcpPublicError("service is required.");
-      return topolo.client.searchActions({ service, limit: 100 });
+      if (args["summary"] === true && args["detail"] === true) {
+        throw new TopoloMcpPublicError("summary cannot be combined with detail.");
+      }
+      const actions = [];
+      const seenCursors = /* @__PURE__ */ new Set();
+      let cursor;
+      for (; ; ) {
+        const page = await topolo.client.searchActions({ service, limit: 100, ...cursor ? { cursor } : {} });
+        actions.push(...page.actions);
+        if (!page.page.hasMore) break;
+        const nextCursor = page.page.nextCursor?.trim();
+        if (!nextCursor || seenCursors.has(nextCursor)) {
+          throw new TopoloMcpPublicError("Capability discovery returned an invalid continuation cursor.");
+        }
+        seenCursors.add(nextCursor);
+        cursor = nextCursor;
+      }
+      if (args["summary"] === true) return summarizeActionCapabilities(service, actions);
+      const result = { actions, page: { nextCursor: null, hasMore: false } };
+      return args["detail"] === true ? result : { actions: actions.map(compactActionCatalogEntry), page: result.page };
     }
   },
   {
@@ -4994,6 +5080,10 @@ var TOOLS = [
           type: "string",
           enum: ["missing", "needs_review", "partial"],
           description: "Optional conformance gate. Returns conformanceGate.passed=false when findings at this severity or worse exist."
+        },
+        detail: {
+          type: "boolean",
+          description: "Include every finding and migration item. Defaults to per-app scores and a queue count."
         }
       },
       additionalProperties: false
@@ -5009,11 +5099,13 @@ var TOOLS = [
       if (application === void 0) {
         const directory = await listApplicationDirectory(topolo.client);
         report = auditApplicationEntries(directory.applications.map((app) => app.application));
-        return gate ? { ...report, conformanceGate: evaluateApplicationAuditGate(report, gate) } : report;
+        const output2 = args["detail"] === true ? report : compactApplicationAudit(report);
+        return gate ? { ...output2, conformanceGate: evaluateApplicationAuditGate(report, gate) } : output2;
       }
       const resolved = await resolveDirectoryApplication(topolo, application);
       report = auditApplicationEntries([resolved.application]);
-      return gate ? { ...report, conformanceGate: evaluateApplicationAuditGate(report, gate) } : report;
+      const output = args["detail"] === true ? report : compactApplicationAudit(report);
+      return gate ? { ...output, conformanceGate: evaluateApplicationAuditGate(report, gate) } : output;
     }
   },
   {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@topolo/mcp",
-  "version": "0.10.0",
-  "topoloPublishedVersion": "0.10.0",
+  "version": "0.10.2",
+  "topoloPublishedVersion": "0.10.2",
   "description": "Model Context Protocol server for the Topolo platform. Exposes scope-gated tools that third-party agents (Claude, Codex, etc.) can call natively.",
   "type": "module",
   "bin": {