@topolo/mcp 0.2.3 → 0.2.5

package/dist/index.js

@@ -3,7 +3,7 @@
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 
-// node_modules/@topolo/sdk/dist/index.js
+// ../packages/topolo-sdk/dist/index.js
 function applyAuthHeaders(headers, credential) {
   if (credential.kind === "api_key") {
     headers.set("X-Api-Key", credential.apiKey);
@@ -67,13 +67,14 @@ var SERVICES = {
   chat: "https://chat.topolo.app",
   commerce: "https://topolo-commerce-api.topolo.workers.dev",
   crm: "https://crm-api.topolo.app",
+  feed: "https://topolo-feed-api.topolo.app",
   forecast: "https://forecast-worker-production.topolo.workers.dev",
   learn: "https://topololearn-api.topolo.workers.dev",
   mail: "https://mail.topolo.app",
   mdm: "https://topolo-mdm-api.topolo.app",
   messaging: "https://messages.topolo.app",
   nexus: "https://topolo-nexus-gateway.topolo.workers.dev",
-  one: "https://topoloone-worker.topolo.workers.dev",
+  one: "https://one.topolo.app",
   pay: "https://topolo-pay.topolo.workers.dev",
   "quro.api": "https://api.ol0.me",
   "quro.redirect": "https://ol0.me",
@@ -403,24 +404,34 @@ var APPLICATIONS = {
     "appDir": "TopoloFeed",
     "name": "TopoloFeed",
     "packageName": null,
-    "productionUrl": null,
-    "services": [],
+    "productionUrl": "https://topolo-feed-api.topolo.app",
+    "services": [
+      "feed"
+    ],
     "deployTargets": [
       {
         "name": "topolo-feed-analytics-api",
         "kind": "worker",
-        "apiUrl": null,
-        "domains": [],
-        "routes": [],
+        "apiUrl": "https://topolo-feed-analytics-api.topolo.app",
+        "domains": [
+          "topolo-feed-analytics-api.topolo.app"
+        ],
+        "routes": [
+          "topolo-feed-analytics-api.topolo.app"
+        ],
         "serviceId": null
       },
       {
         "name": "topolo-feed-api",
         "kind": "worker",
-        "apiUrl": null,
-        "domains": [],
-        "routes": [],
-        "serviceId": null
+        "apiUrl": "https://topolo-feed-api.topolo.app",
+        "domains": [
+          "topolo-feed-api.topolo.app"
+        ],
+        "routes": [
+          "topolo-feed-api.topolo.app"
+        ],
+        "serviceId": "feed"
       }
     ]
   },
@@ -660,7 +671,7 @@ var APPLICATIONS = {
       {
         "name": "topoloone-worker",
         "kind": "worker",
-        "apiUrl": "https://topoloone-worker.topolo.workers.dev",
+        "apiUrl": "https://one.topolo.app",
         "domains": [],
         "routes": [
           "one.topolo.app/*"
@@ -957,10 +968,12 @@ var APPLICATION_REQUIREMENTS = [
     evidence: [
       "@topolo/ui-kit is used for the platform shell where the app has authenticated UI",
       "The shared launcher/app switcher is reachable from authenticated app chrome",
-      "Account menu and sign-out behavior use the shared platform affordance"
+      "Account menu and sign-out behavior use TopoloAppShell or TopoloAccountMenu"
     ],
     implementation: [
-      "Use TopoloShell or the current shared shell contract for authenticated app layouts",
+      "Use TopoloAppShell for authenticated app layouts",
+      "Use TopoloAccountMenu when a partial-shell surface still needs account chrome",
+      "Pass app-specific account actions as additive menu items instead of forking dropdowns",
       "Use shared design tokens and platform UI primitives before creating local equivalents",
       "Keep mobile and desktop shell behavior aligned with the platform UI kit"
     ]
@@ -1064,8 +1077,9 @@ var APPLICATION_REQUIREMENTS = [
 ];
 function applicationRequirementScopes(application) {
   const scopes = /* @__PURE__ */ new Set(["all"]);
-  const hasBrowserSurface = Boolean(application.productionUrl) || application.deployTargets.some((target) => target.kind === "pages");
-  const hasApiSurface = application.services.length > 0 || application.deployTargets.some((target) => Boolean(target.apiUrl));
+  const deployTargets = application.deployTargets;
+  const hasBrowserSurface = Boolean(application.productionUrl) || deployTargets.some((target) => target.kind === "pages");
+  const hasApiSurface = application.services.length > 0 || deployTargets.some((target) => Boolean(target.apiUrl));
   if (hasBrowserSurface) scopes.add("browser");
   if (hasApiSurface) scopes.add("api");
   if (application.id === "cli" || application.id === "mcp" || application.id === "cloudcontrol") {
@@ -1251,10 +1265,11 @@ function statusRank(status) {
 }
 var DEFAULT_SERVICE_URLS = SERVICES;
 function resolveServiceUrl(service, overrides) {
-  const override = overrides?.[service];
+  var _a;
+  const override = overrides == null ? void 0 : overrides[service];
   if (override) return override;
   const envKey = `TOPOLO_SERVICE_URL_${service.replace(/\./g, "_").toUpperCase()}`;
-  const envValue = typeof process !== "undefined" ? process.env?.[envKey] : void 0;
+  const envValue = typeof process !== "undefined" ? (_a = process.env) == null ? void 0 : _a[envKey] : void 0;
   if (envValue) return envValue;
   return DEFAULT_SERVICE_URLS[service];
 }
@@ -1268,8 +1283,9 @@ var TopoloClient = class {
   fetchImpl;
   debug;
   constructor(options) {
+    var _a;
     if (!options.credential) throw new TopoloAuthError("credential is required");
-    if (!options.agent?.clientName) throw new TopoloAuthError("agent.clientName is required");
+    if (!((_a = options.agent) == null ? void 0 : _a.clientName)) throw new TopoloAuthError("agent.clientName is required");
     this.credential = options.credential;
     this.agent = options.agent;
     this.serviceUrls = options.serviceUrls;
@@ -1457,6 +1473,7 @@ var CrmModule = class {
   }
   client;
   async listContacts(options = {}) {
+    var _a, _b, _c;
     const res = await this.client.request({
       service: "crm",
       path: "/api/contacts",
@@ -1466,12 +1483,12 @@ var CrmModule = class {
         pageSize: options.pageSize
       }
     });
-    const rows = Array.isArray(res?.contacts) ? res.contacts : Array.isArray(res?.data) ? res.data : [];
+    const rows = Array.isArray(res == null ? void 0 : res.contacts) ? res.contacts : Array.isArray(res == null ? void 0 : res.data) ? res.data : [];
     return {
       contacts: rows.map(toSummary),
-      total: res?.total ?? res?.pagination?.total ?? rows.length,
-      page: res?.page ?? res?.pagination?.page ?? options.page ?? 1,
-      pageSize: res?.pageSize ?? res?.pagination?.pageSize ?? options.pageSize ?? rows.length
+      total: (res == null ? void 0 : res.total) ?? ((_a = res == null ? void 0 : res.pagination) == null ? void 0 : _a.total) ?? rows.length,
+      page: (res == null ? void 0 : res.page) ?? ((_b = res == null ? void 0 : res.pagination) == null ? void 0 : _b.page) ?? options.page ?? 1,
+      pageSize: (res == null ? void 0 : res.pageSize) ?? ((_c = res == null ? void 0 : res.pagination) == null ? void 0 : _c.pageSize) ?? options.pageSize ?? rows.length
     };
   }
   async getContact(contactId) {
@@ -1544,8 +1561,11 @@ import {
 } from "@modelcontextprotocol/sdk/types.js";
 
 // src/gating.ts
+function hasPlatformAccess(set) {
+  return (set.role === "platform_super_admin" || set.role === "platform_admin") && set.orgSlug === "admin";
+}
 function hasScope(set, required) {
-  if (set.role === "super_admin") return true;
+  if (hasPlatformAccess(set)) return true;
   if (set.permissions.includes("*")) return true;
   const [servicePart, actionPart] = splitPermission(required);
   if (!servicePart) return set.permissions.includes(required);
@@ -1900,7 +1920,7 @@ function statusesAtOrWorse(threshold) {
 }
 
 // src/version.ts
-var MCP_VERSION = "0.2.3";
+var MCP_VERSION = "0.2.5";
 
 // src/server.ts
 function buildServer(topolo, scopes, tools = TOOLS) {
@@ -1995,9 +2015,11 @@ async function main() {
 async function loadScopes(topolo) {
   try {
     const info = await topolo.identity.whoami();
+    const userWithOrgSlug = info.user;
     return {
       permissions: info.user.permissions,
-      role: info.user.role
+      role: info.user.role,
+      orgSlug: info.organization?.slug || userWithOrgSlug.orgSlug || void 0
     };
   } catch (err) {
     if (err instanceof TopoloAuthError) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@topolo/mcp",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "description": "Model Context Protocol server for the Topolo platform. Exposes scope-gated tools that third-party agents (Claude, Codex, etc.) can call natively.",
   "type": "module",
   "bin": {
@@ -21,7 +21,7 @@
     "@modelcontextprotocol/sdk": "^1.0.0"
   },
   "devDependencies": {
-    "@topolo/sdk": "latest",
+    "@topolo/sdk": "file:../packages/topolo-sdk",
     "@types/node": "^20.12.0",
     "tsup": "^8.0.0",
     "typescript": "^5.4.0",