@topolo/mcp 0.11.1 → 0.11.3

package/dist/index.js

@@ -3,7 +3,7 @@
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 
-// node_modules/@topolo/sdk/dist/index.js
+// ../../node_modules/.pnpm/@topolo+sdk@0.11.3/node_modules/@topolo/sdk/dist/index.js
 function applyAuthHeaders(headers, credential) {
   if (credential.kind === "api_key") {
     headers.set("X-Api-Key", credential.apiKey);
@@ -758,6 +758,18 @@ function prepareTopoloUrlSessionUploadInput(contractValue, byteLength, input, op
 function topoloUploadResponseValue(response, path) {
   return path.split(".").reduce((value, segment) => isRecord2(value) ? value[segment] : void 0, response);
 }
+function redactTopoloUrlSessionResult(response, uploadUrlPath) {
+  const redacted = cloneUploadValue(response);
+  let target = redacted;
+  const segments = uploadUrlPath.split(".");
+  for (const segment of segments.slice(0, -1)) {
+    target = isRecord2(target) ? target[segment] : void 0;
+  }
+  const finalSegment = segments.at(-1);
+  if (finalSegment && isRecord2(target) && finalSegment in target) target[finalSegment] = "[REDACTED]";
+  redactUploadHeaders(redacted);
+  return redacted;
+}
 function decodeTopoloActionBase64(contentBase64) {
   if (!isCanonicalBase64(contentBase64)) {
     throw new TopoloSdkError("invalid_upload_content", "Upload content must be canonical base64.");
@@ -776,6 +788,28 @@ function mapUploadInput(contract, contentBase64, input, options) {
     [contract.fileNameField]: fileName
   };
 }
+function cloneUploadValue(value) {
+  if (Array.isArray(value)) return value.map(cloneUploadValue);
+  if (!isRecord2(value)) return value;
+  return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, cloneUploadValue(item)]));
+}
+function redactUploadHeaders(value) {
+  if (Array.isArray(value)) {
+    value.forEach(redactUploadHeaders);
+    return;
+  }
+  if (!isRecord2(value)) return;
+  for (const [key, item] of Object.entries(value)) {
+    if (key.toLowerCase() === "headers" && isRecord2(item)) {
+      for (const header of Object.keys(item)) {
+        if (["authorization", "cookie", "set-cookie", "proxy-authorization", "x-api-key"].includes(header.toLowerCase())) {
+          item[header] = "[REDACTED]";
+        }
+      }
+    }
+    redactUploadHeaders(item);
+  }
+}
 function validateUploadMetadata(contract, byteLength, options) {
   const fileName = options.fileName.trim();
   const contentType = options.contentType.trim().toLowerCase();
@@ -1417,7 +1451,7 @@ var TopoloClient = class _TopoloClient {
       throw new TopoloSdkError("invalid_upload_response", `Upload action response is missing ${contract.uploadUrlPath}.`);
     }
     await this.putUrlSessionContent(entry, uploadUrl, contract.uploadMethod, bytes, options);
-    if (!contract.complete) return initiation;
+    if (!contract.complete) return redactTopoloUrlSessionResult(initiation, contract.uploadUrlPath);
     const completionValue = topoloUploadResponseValue(initiation, contract.complete.responsePath);
     if (typeof completionValue !== "string" || !completionValue.trim()) {
       throw new TopoloSdkError("invalid_upload_response", `Upload action response is missing ${contract.complete.responsePath}.`);
@@ -1944,6 +1978,7 @@ function mergeSignals(a, b) {
 function compactActionCatalogEntry(action) {
   const required = Array.isArray(action.inputSchema["required"]) ? action.inputSchema["required"].filter((value) => typeof value === "string") : [];
   const examples = action.agentContract?.examples ?? [];
+  const example = compactExample(examples[0]?.input);
   return {
     actionId: action.actionId,
     title: action.title,
@@ -1955,13 +1990,75 @@ function compactActionCatalogEntry(action) {
     requiredPermission: action.requiredPermission,
     requiredInput: required,
     resourceType: action.agentContract?.resource?.kind ?? null,
-    exampleInput: examples[0]?.input ?? null,
+    exampleInput: example.value,
+    exampleInputAvailable: example.available,
     docsUrl: action.agentContract?.docsUrl ?? null
   };
 }
+function compactExample(input) {
+  if (!input) return { value: null, available: false };
+  const serialized = JSON.stringify(input);
+  if (serialized.length > 512) return { value: null, available: true };
+  return { value: input, available: true };
+}
 function compactActionValidation(actionId, validation) {
   return { actionId, valid: validation.valid, errors: validation.errors };
 }
+var ACTION_RESULT_MAX_DEPTH = 4;
+var ACTION_RESULT_MAX_KEYS = 16;
+var ACTION_RESULT_MAX_ITEMS = 5;
+var ACTION_RESULT_MAX_SCALARS = 120;
+var ACTION_RESULT_MAX_STRING = 512;
+function resultKeyPriority(key) {
+  if (/^(id|requestId|status|state|url|slug|name|title|version)$/i.test(key)) return 0;
+  if (/(Id|Ids|Url|Uri|Status|State|Count|Total|Version|CreatedAt|UpdatedAt)$/i.test(key)) return 1;
+  return 2;
+}
+function compactResultValue(value, depth, budget) {
+  if (value === null || typeof value === "boolean" || typeof value === "number") {
+    budget.scalars += 1;
+    return value;
+  }
+  if (typeof value === "string") {
+    budget.scalars += 1;
+    if (value.length <= ACTION_RESULT_MAX_STRING) return value;
+    return `${value.slice(0, ACTION_RESULT_MAX_STRING)}\u2026 (${value.length} chars)`;
+  }
+  if (depth >= ACTION_RESULT_MAX_DEPTH || budget.scalars >= ACTION_RESULT_MAX_SCALARS) {
+    return Array.isArray(value) ? { count: value.length, omitted: true } : { omitted: true };
+  }
+  if (Array.isArray(value)) {
+    const items = value.slice(0, ACTION_RESULT_MAX_ITEMS).map((item) => compactResultValue(item, depth + 1, budget));
+    return value.length > ACTION_RESULT_MAX_ITEMS ? { count: value.length, items, omittedItems: value.length - ACTION_RESULT_MAX_ITEMS } : items;
+  }
+  if (typeof value === "object") {
+    const record = value;
+    const allKeys = Object.keys(record);
+    const keys = allKeys.sort((left, right) => resultKeyPriority(left) - resultKeyPriority(right)).slice(0, ACTION_RESULT_MAX_KEYS);
+    const compact = Object.fromEntries(keys.map((key) => [key, compactResultValue(record[key], depth + 1, budget)]));
+    if (allKeys.length > keys.length) compact["_omittedKeys"] = allKeys.length - keys.length;
+    return compact;
+  }
+  budget.scalars += 1;
+  return String(value);
+}
+function compactActionResult(actionId, result) {
+  let normalized = result;
+  if (typeof result === "string") {
+    try {
+      normalized = JSON.parse(result);
+    } catch {
+      normalized = result;
+    }
+  }
+  return { actionId, result: compactResultValue(normalized, 0, { scalars: 0 }) };
+}
+function preferExactActionMatches(actions, query) {
+  const expected = query?.trim().toLowerCase();
+  if (!expected) return actions;
+  const exact = actions.filter((action) => [action.actionId, action.name, action.toolName].some((candidate) => candidate?.trim().toLowerCase() === expected));
+  return exact.length ? exact : actions;
+}
 function compactActionPlan(plan) {
   return {
     actionId: plan.action.actionId,
@@ -2169,7 +2266,7 @@ function createTopolo(options) {
   };
 }
 
-// node_modules/@topolo/sdk/dist/node/credential-store.js
+// ../../node_modules/.pnpm/@topolo+sdk@0.11.3/node_modules/@topolo/sdk/dist/node/credential-store.js
 import { mkdir, readFile, writeFile, chmod, rm, stat } from "fs/promises";
 import { existsSync } from "fs";
 import { homedir, platform } from "os";
@@ -2950,7 +3047,8 @@ var TOOLS = [
         },
         query: { type: "string" },
         cursor: { type: "string" },
-        limit: { type: "integer", minimum: 1, maximum: 100, default: 25 }
+        limit: { type: "integer", minimum: 1, maximum: 100, default: 25 },
+        detail: { type: "boolean", description: "Return full schemas and agent contracts. Defaults to compact action guidance." }
       },
       required: ["service"],
       additionalProperties: false
@@ -2958,13 +3056,15 @@ var TOOLS = [
     handler: async (topolo, args) => {
       const service = typeof args["service"] === "string" ? args["service"].trim() : "";
       if (!service) throw new TopoloMcpPublicError("service is required for bounded action discovery.");
+      const query = typeof args["query"] === "string" ? args["query"] : void 0;
       const result = await topolo.client.searchActions({
         service,
-        query: typeof args["query"] === "string" ? args["query"] : void 0,
+        query,
         cursor: typeof args["cursor"] === "string" ? args["cursor"] : void 0,
         limit: typeof args["limit"] === "number" ? args["limit"] : void 0
       });
-      return args["detail"] === true ? result : { actions: result.actions.map(compactActionCatalogEntry), page: result.page };
+      const actions = preferExactActionMatches(result.actions, query);
+      return args["detail"] === true ? { ...result, actions } : { actions: actions.map(compactActionCatalogEntry), page: result.page };
     }
   },
   {
@@ -3052,7 +3152,8 @@ var TOOLS = [
         input: { type: "object", additionalProperties: true },
         resourceType: { type: "string", description: "Optional resource-scoping alias published in the app resource catalog (e.g. workspace, brand, merchant)." },
         resourceId: { type: "string", description: "Resource id. Required when resourceType is provided." },
-        confirm: { type: "boolean" }
+        confirm: { type: "boolean" },
+        detail: { type: "boolean", description: "Return the complete action response. Defaults to a bounded agent projection." }
       },
       required: ["actionId"],
       additionalProperties: false
@@ -3062,7 +3163,7 @@ var TOOLS = [
       if (!actionId) throw new TopoloMcpPublicError("actionId is required.");
       const input = coerceObjectParam(args["input"], "input");
       const resource = optionalResourceContext(args);
-      return topolo.client.callAction(
+      const result = await topolo.client.callAction(
         actionId,
         input,
         {
@@ -3070,6 +3171,7 @@ var TOOLS = [
           ...resource ? { resource } : {}
         }
       );
+      return args["detail"] === true ? result : compactActionResult(actionId, result);
     }
   },
   {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@topolo/mcp",
-  "version": "0.11.1",
-  "topoloPublishedVersion": "0.11.1",
+  "version": "0.11.3",
+  "topoloPublishedVersion": "0.11.3",
   "description": "Model Context Protocol server for the Topolo platform. Exposes scope-gated tools that third-party agents (Claude, Codex, etc.) can call natively.",
   "license": "UNLICENSED",
   "author": "Topolo",
@@ -29,13 +29,13 @@
     "dev": "tsup --watch",
     "typecheck": "tsc --noEmit",
     "start": "node dist/index.js",
-    "test": "vitest run",
+    "test": "if test \"$TOPOLO_BUILD_READY\" = 1; then vitest run; else python3 ../../tooling/with-resource-lock.py ../topolo-sdk -- sh -c 'pnpm --dir ../topolo-sdk build && exec vitest run'; fi",
     "test:watch": "vitest",
-    "coverage": "vitest run --coverage"
+    "coverage": "if test \"$TOPOLO_BUILD_READY\" = 1; then vitest run --coverage; else python3 ../../tooling/with-resource-lock.py ../topolo-sdk -- sh -c 'pnpm --dir ../topolo-sdk build && exec vitest run --coverage'; fi"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
-    "@topolo/sdk": "0.11.1"
+    "@topolo/sdk": "0.11.3"
   },
   "devDependencies": {
     "@types/node": "^20.12.0",