@topolo/mcp 0.11.0 → 0.11.2

package/dist/index.js

@@ -3,7 +3,7 @@
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 
-// ../../../public-platform-tooling-boundary-20260813/packages/topolo-sdk/dist/index.js
+// ../../../package-topolo-sdk-0.11.2/packages/topolo-sdk/dist/index.js
 function applyAuthHeaders(headers, credential) {
   if (credential.kind === "api_key") {
     headers.set("X-Api-Key", credential.apiKey);
@@ -758,6 +758,18 @@ function prepareTopoloUrlSessionUploadInput(contractValue, byteLength, input, op
 function topoloUploadResponseValue(response, path) {
   return path.split(".").reduce((value, segment) => isRecord2(value) ? value[segment] : void 0, response);
 }
+function redactTopoloUrlSessionResult(response, uploadUrlPath) {
+  const redacted = cloneUploadValue(response);
+  let target = redacted;
+  const segments = uploadUrlPath.split(".");
+  for (const segment of segments.slice(0, -1)) {
+    target = isRecord2(target) ? target[segment] : void 0;
+  }
+  const finalSegment = segments.at(-1);
+  if (finalSegment && isRecord2(target) && finalSegment in target) target[finalSegment] = "[REDACTED]";
+  redactUploadHeaders(redacted);
+  return redacted;
+}
 function decodeTopoloActionBase64(contentBase64) {
   if (!isCanonicalBase64(contentBase64)) {
     throw new TopoloSdkError("invalid_upload_content", "Upload content must be canonical base64.");
@@ -776,6 +788,28 @@ function mapUploadInput(contract, contentBase64, input, options) {
     [contract.fileNameField]: fileName
   };
 }
+function cloneUploadValue(value) {
+  if (Array.isArray(value)) return value.map(cloneUploadValue);
+  if (!isRecord2(value)) return value;
+  return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, cloneUploadValue(item)]));
+}
+function redactUploadHeaders(value) {
+  if (Array.isArray(value)) {
+    value.forEach(redactUploadHeaders);
+    return;
+  }
+  if (!isRecord2(value)) return;
+  for (const [key, item] of Object.entries(value)) {
+    if (key.toLowerCase() === "headers" && isRecord2(item)) {
+      for (const header of Object.keys(item)) {
+        if (["authorization", "cookie", "set-cookie", "proxy-authorization", "x-api-key"].includes(header.toLowerCase())) {
+          item[header] = "[REDACTED]";
+        }
+      }
+    }
+    redactUploadHeaders(item);
+  }
+}
 function validateUploadMetadata(contract, byteLength, options) {
   const fileName = options.fileName.trim();
   const contentType = options.contentType.trim().toLowerCase();
@@ -1417,7 +1451,7 @@ var TopoloClient = class _TopoloClient {
       throw new TopoloSdkError("invalid_upload_response", `Upload action response is missing ${contract.uploadUrlPath}.`);
     }
     await this.putUrlSessionContent(entry, uploadUrl, contract.uploadMethod, bytes, options);
-    if (!contract.complete) return initiation;
+    if (!contract.complete) return redactTopoloUrlSessionResult(initiation, contract.uploadUrlPath);
     const completionValue = topoloUploadResponseValue(initiation, contract.complete.responsePath);
     if (typeof completionValue !== "string" || !completionValue.trim()) {
       throw new TopoloSdkError("invalid_upload_response", `Upload action response is missing ${contract.complete.responsePath}.`);
@@ -2169,8 +2203,8 @@ function createTopolo(options) {
   };
 }
 
-// ../../../public-platform-tooling-boundary-20260813/packages/topolo-sdk/dist/node/credential-store.js
-import { mkdir, readFile, writeFile, chmod } from "fs/promises";
+// ../../../package-topolo-sdk-0.11.2/packages/topolo-sdk/dist/node/credential-store.js
+import { mkdir, readFile, writeFile, chmod, rm, stat } from "fs/promises";
 import { existsSync } from "fs";
 import { homedir, platform } from "os";
 import { dirname, join } from "path";
@@ -2633,6 +2667,41 @@ async function resolveCredential(environment = selectedEnvironment()) {
   return profileForEnvironment(config, environment).credential ?? null;
 }
 var REFRESH_SKEW_SECONDS = 60;
+var CONFIG_LOCK_RETRY_MS = 25;
+var CONFIG_LOCK_TIMEOUT_MS = 5e3;
+var CONFIG_LOCK_STALE_MS = 12e4;
+async function withConfigWriteLock(operation) {
+  const lockPath = `${configPath()}.lock`;
+  await mkdir(dirname(lockPath), { recursive: true });
+  const startedAt = Date.now();
+  while (true) {
+    try {
+      await mkdir(lockPath);
+      break;
+    } catch (error) {
+      if (error.code !== "EEXIST") throw error;
+      try {
+        const lock = await stat(lockPath);
+        if (Date.now() - lock.mtimeMs > CONFIG_LOCK_STALE_MS) {
+          await rm(lockPath, { recursive: true, force: true });
+          continue;
+        }
+      } catch (inspectionError) {
+        if (inspectionError.code !== "ENOENT") throw inspectionError;
+        continue;
+      }
+      if (Date.now() - startedAt >= CONFIG_LOCK_TIMEOUT_MS) {
+        throw new Error(`Timed out waiting for credential configuration lock at ${lockPath}.`);
+      }
+      await new Promise((resolve2) => setTimeout(resolve2, CONFIG_LOCK_RETRY_MS));
+    }
+  }
+  try {
+    return await operation();
+  } finally {
+    await rm(lockPath, { recursive: true, force: true });
+  }
+}
 async function refreshCredentialIfNeeded(environment = selectedEnvironment(), options = {}) {
   const prefix = envVarPrefix(environment);
   if (process.env[`${prefix}_API_KEY`] || process.env[`${prefix}_ACCESS_TOKEN`] || environment === "production" && process.env.TOPOLO_API_KEY || environment === "production" && process.env.TOPOLO_ACCESS_TOKEN) {
@@ -2686,51 +2755,47 @@ async function refreshCredentialIfNeeded(environment = selectedEnvironment(), op
   }
 }
 async function refreshContextCredentialIfNeeded(environment, key, options = {}) {
-  const config = await readConfig();
-  const profile = profileForEnvironment(config, environment);
-  const context = profile.contexts?.[key];
-  const credential = context?.credential;
-  if (!credential || credential.kind !== "access_token") return credential ?? null;
-  const oauthClientId = context.oauthClientId ?? profile.oauthClientId;
-  if (!credential.refreshToken || !oauthClientId) return credential;
-  const now = Math.floor(Date.now() / 1e3);
-  if (!options.force && credential.expiresAt && credential.expiresAt - REFRESH_SKEW_SECONDS > now) return credential;
-  const serviceUrls = resolveServiceUrls(profile.serviceUrls, environment);
-  if (environment === "local" && !serviceUrls?.auth) {
-    throw new TopoloSdkError2(
-      "environment_service_url_required",
-      "Local Topolo context refresh requires an explicit local Auth service origin."
-    );
-  }
-  try {
-    const oauth = new TopoloOAuth({
-      serviceUrls
-    });
-    const tokens = await oauth.refreshToken({
-      clientId: oauthClientId,
-      refreshToken: credential.refreshToken
-    });
-    const refreshed = {
-      kind: "access_token",
-      accessToken: tokens.access_token,
-      ...tokens.refresh_token ? { refreshToken: tokens.refresh_token } : { refreshToken: credential.refreshToken },
-      expiresAt: Math.floor(Date.now() / 1e3) + tokens.expires_in
-    };
-    await writeConfig(writeProfileConfig(config, environment, {
-      ...profile.activeContext === key ? { credential: refreshed } : {},
-      contexts: {
-        ...profile.contexts ?? {},
-        [key]: {
-          ...context,
-          credential: refreshed,
-          oauthClientId
+  return withConfigWriteLock(async () => {
+    const config = await readConfig();
+    const profile = profileForEnvironment(config, environment);
+    const context = profile.contexts?.[key];
+    const credential = context?.credential;
+    if (!credential || credential.kind !== "access_token") return credential ?? null;
+    const oauthClientId = context.oauthClientId ?? profile.oauthClientId;
+    if (!credential.refreshToken || !oauthClientId) return credential;
+    const now = Math.floor(Date.now() / 1e3);
+    if (!options.force && credential.expiresAt && credential.expiresAt - REFRESH_SKEW_SECONDS > now) return credential;
+    const serviceUrls = resolveServiceUrls(profile.serviceUrls, environment);
+    if (environment === "local" && !serviceUrls?.auth) {
+      throw new TopoloSdkError2(
+        "environment_service_url_required",
+        "Local Topolo context refresh requires an explicit local Auth service origin."
+      );
+    }
+    try {
+      const oauth = new TopoloOAuth({ serviceUrls });
+      const tokens = await oauth.refreshToken({
+        clientId: oauthClientId,
+        refreshToken: credential.refreshToken
+      });
+      const refreshed = {
+        kind: "access_token",
+        accessToken: tokens.access_token,
+        ...tokens.refresh_token ? { refreshToken: tokens.refresh_token } : { refreshToken: credential.refreshToken },
+        expiresAt: Math.floor(Date.now() / 1e3) + tokens.expires_in
+      };
+      await writeConfig(writeProfileConfig(config, environment, {
+        ...profile.activeContext === key ? { credential: refreshed } : {},
+        contexts: {
+          ...profile.contexts ?? {},
+          [key]: { ...context, credential: refreshed, oauthClientId }
         }
-      }
-    }));
-    return refreshed;
-  } catch {
-    return credential;
-  }
+      }));
+      return refreshed;
+    } catch {
+      return credential;
+    }
+  });
 }
 function resolveAgentName(configAgentName) {
   return process.env.TOPOLO_AGENT_NAME ?? configAgentName;

package/package.json

@@ -1,8 +1,11 @@
 {
   "name": "@topolo/mcp",
-  "version": "0.11.0",
-  "topoloPublishedVersion": "0.11.0",
+  "version": "0.11.2",
+  "topoloPublishedVersion": "0.11.2",
   "description": "Model Context Protocol server for the Topolo platform. Exposes scope-gated tools that third-party agents (Claude, Codex, etc.) can call natively.",
+  "license": "UNLICENSED",
+  "author": "Topolo",
+  "homepage": "https://docs.topolo.app/guides/agents-and-automation",
   "type": "module",
   "bin": {
     "topolo-mcp": "dist/index.js"
@@ -26,13 +29,13 @@
     "dev": "tsup --watch",
     "typecheck": "tsc --noEmit",
     "start": "node dist/index.js",
-    "test": "vitest run",
+    "test": "if test \"$TOPOLO_BUILD_READY\" = 1; then vitest run; else python3 ../../tooling/with-resource-lock.py ../topolo-sdk -- sh -c 'pnpm --dir ../topolo-sdk build && exec vitest run'; fi",
     "test:watch": "vitest",
-    "coverage": "vitest run --coverage"
+    "coverage": "if test \"$TOPOLO_BUILD_READY\" = 1; then vitest run --coverage; else python3 ../../tooling/with-resource-lock.py ../topolo-sdk -- sh -c 'pnpm --dir ../topolo-sdk build && exec vitest run --coverage'; fi"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
-    "@topolo/sdk": "0.11.0"
+    "@topolo/sdk": "0.11.2"
   },
   "devDependencies": {
     "@types/node": "^20.12.0",