@topolo/mcp 0.11.1 → 0.11.2

package/dist/index.js

@@ -3,7 +3,7 @@
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 
-// node_modules/@topolo/sdk/dist/index.js
+// ../../../package-topolo-sdk-0.11.2/packages/topolo-sdk/dist/index.js
 function applyAuthHeaders(headers, credential) {
   if (credential.kind === "api_key") {
     headers.set("X-Api-Key", credential.apiKey);
@@ -758,6 +758,18 @@ function prepareTopoloUrlSessionUploadInput(contractValue, byteLength, input, op
 function topoloUploadResponseValue(response, path) {
   return path.split(".").reduce((value, segment) => isRecord2(value) ? value[segment] : void 0, response);
 }
+function redactTopoloUrlSessionResult(response, uploadUrlPath) {
+  const redacted = cloneUploadValue(response);
+  let target = redacted;
+  const segments = uploadUrlPath.split(".");
+  for (const segment of segments.slice(0, -1)) {
+    target = isRecord2(target) ? target[segment] : void 0;
+  }
+  const finalSegment = segments.at(-1);
+  if (finalSegment && isRecord2(target) && finalSegment in target) target[finalSegment] = "[REDACTED]";
+  redactUploadHeaders(redacted);
+  return redacted;
+}
 function decodeTopoloActionBase64(contentBase64) {
   if (!isCanonicalBase64(contentBase64)) {
     throw new TopoloSdkError("invalid_upload_content", "Upload content must be canonical base64.");
@@ -776,6 +788,28 @@ function mapUploadInput(contract, contentBase64, input, options) {
     [contract.fileNameField]: fileName
   };
 }
+function cloneUploadValue(value) {
+  if (Array.isArray(value)) return value.map(cloneUploadValue);
+  if (!isRecord2(value)) return value;
+  return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, cloneUploadValue(item)]));
+}
+function redactUploadHeaders(value) {
+  if (Array.isArray(value)) {
+    value.forEach(redactUploadHeaders);
+    return;
+  }
+  if (!isRecord2(value)) return;
+  for (const [key, item] of Object.entries(value)) {
+    if (key.toLowerCase() === "headers" && isRecord2(item)) {
+      for (const header of Object.keys(item)) {
+        if (["authorization", "cookie", "set-cookie", "proxy-authorization", "x-api-key"].includes(header.toLowerCase())) {
+          item[header] = "[REDACTED]";
+        }
+      }
+    }
+    redactUploadHeaders(item);
+  }
+}
 function validateUploadMetadata(contract, byteLength, options) {
   const fileName = options.fileName.trim();
   const contentType = options.contentType.trim().toLowerCase();
@@ -1417,7 +1451,7 @@ var TopoloClient = class _TopoloClient {
       throw new TopoloSdkError("invalid_upload_response", `Upload action response is missing ${contract.uploadUrlPath}.`);
     }
     await this.putUrlSessionContent(entry, uploadUrl, contract.uploadMethod, bytes, options);
-    if (!contract.complete) return initiation;
+    if (!contract.complete) return redactTopoloUrlSessionResult(initiation, contract.uploadUrlPath);
     const completionValue = topoloUploadResponseValue(initiation, contract.complete.responsePath);
     if (typeof completionValue !== "string" || !completionValue.trim()) {
       throw new TopoloSdkError("invalid_upload_response", `Upload action response is missing ${contract.complete.responsePath}.`);
@@ -2169,7 +2203,7 @@ function createTopolo(options) {
   };
 }
 
-// node_modules/@topolo/sdk/dist/node/credential-store.js
+// ../../../package-topolo-sdk-0.11.2/packages/topolo-sdk/dist/node/credential-store.js
 import { mkdir, readFile, writeFile, chmod, rm, stat } from "fs/promises";
 import { existsSync } from "fs";
 import { homedir, platform } from "os";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@topolo/mcp",
-  "version": "0.11.1",
-  "topoloPublishedVersion": "0.11.1",
+  "version": "0.11.2",
+  "topoloPublishedVersion": "0.11.2",
   "description": "Model Context Protocol server for the Topolo platform. Exposes scope-gated tools that third-party agents (Claude, Codex, etc.) can call natively.",
   "license": "UNLICENSED",
   "author": "Topolo",
@@ -29,13 +29,13 @@
     "dev": "tsup --watch",
     "typecheck": "tsc --noEmit",
     "start": "node dist/index.js",
-    "test": "vitest run",
+    "test": "if test \"$TOPOLO_BUILD_READY\" = 1; then vitest run; else python3 ../../tooling/with-resource-lock.py ../topolo-sdk -- sh -c 'pnpm --dir ../topolo-sdk build && exec vitest run'; fi",
     "test:watch": "vitest",
-    "coverage": "vitest run --coverage"
+    "coverage": "if test \"$TOPOLO_BUILD_READY\" = 1; then vitest run --coverage; else python3 ../../tooling/with-resource-lock.py ../topolo-sdk -- sh -c 'pnpm --dir ../topolo-sdk build && exec vitest run --coverage'; fi"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
-    "@topolo/sdk": "0.11.1"
+    "@topolo/sdk": "0.11.2"
   },
   "devDependencies": {
     "@types/node": "^20.12.0",