@topolo/mcp 0.11.10 → 0.11.11

package/dist/index.js

@@ -1540,7 +1540,9 @@ var TopoloClient = class _TopoloClient {
     };
   }
   planResolvedAction(entry, input, options) {
-    const validation = validateTopoloActionInput(entry.inputSchema, input);
+    const inputValidation = validateTopoloActionInput(entry.inputSchema, input);
+    const resourceIssue = validateActionResource(entry, options.resource);
+    const validation = resourceIssue ? { valid: false, errors: [...inputValidation.errors, resourceIssue] } : inputValidation;
     const agentAccess = entry.agentAccess ?? (entry.destructive ? "off" : entry.readOnly && !entry.requiresConfirmation ? "auto" : "confirm");
     const confirmationRequired = agentAccess === "confirm" || entry.requiresConfirmation || entry.destructive;
     let request = null;
@@ -1599,6 +1601,13 @@ var TopoloClient = class _TopoloClient {
         `Topolo action "${entry.actionId}" input is invalid: ${validation.errors.map((issue) => `${issue.path} ${issue.message}`).join("; ")}`
       );
     }
+    const resourceIssue = validateActionResource(entry, options.resource);
+    if (resourceIssue) {
+      throw new TopoloSdkError(
+        "invalid_action_resource",
+        `Topolo action "${entry.actionId}" resource context is invalid: ${resourceIssue.message}`
+      );
+    }
     const mapped = mapActionInput(entry, input);
     const service = entry.appSlug || entry.appId;
     const result = await this.request({
@@ -1661,6 +1670,32 @@ var TopoloClient = class _TopoloClient {
     };
   }
 };
+function validateActionResource(entry, resource) {
+  const permissionName = entry.permissionName || entry.requiredPermission.split(".").at(-1) || "";
+  if (!permissionName.startsWith("workspace:")) return null;
+  if (!resource) {
+    return {
+      path: "$.resource",
+      code: "required",
+      message: "Select a workspace with the application resource catalog before planning or calling this action."
+    };
+  }
+  if (resource.resourceType !== "workspace") {
+    return {
+      path: "$.resource.resourceType",
+      code: "const",
+      message: 'This action requires resourceType "workspace".'
+    };
+  }
+  if (!resource.resourceId.trim()) {
+    return {
+      path: "$.resource.resourceId",
+      code: "required",
+      message: "This action requires a workspace resourceId."
+    };
+  }
+  return null;
+}
 function resolveConfiguredAppId(slug, appIds) {
   for (const serviceKey of serviceKeyCandidates2(slug)) {
     const configured = appIds?.[serviceKey];

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@topolo/mcp",
-  "version": "0.11.10",
-  "topoloPublishedVersion": "0.11.10",
+  "version": "0.11.11",
+  "topoloPublishedVersion": "0.11.11",
   "description": "Model Context Protocol server for the Topolo platform. Exposes scope-gated tools that third-party agents (Claude, Codex, etc.) can call natively.",
   "license": "UNLICENSED",
   "author": "Topolo",
@@ -35,7 +35,7 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.0.0",
-    "@topolo/sdk": "0.11.10"
+    "@topolo/sdk": "0.11.11"
   },
   "devDependencies": {
     "@types/node": "^20.12.0",