@topolo/mcp 0.2.4 → 0.2.5

package/dist/index.js

@@ -3,7 +3,7 @@
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 
-// ../../PlatformApplications/packages/topolo-sdk/dist/index.js
+// ../packages/topolo-sdk/dist/index.js
 function applyAuthHeaders(headers, credential) {
   if (credential.kind === "api_key") {
     headers.set("X-Api-Key", credential.apiKey);
@@ -74,7 +74,7 @@ var SERVICES = {
   mdm: "https://topolo-mdm-api.topolo.app",
   messaging: "https://messages.topolo.app",
   nexus: "https://topolo-nexus-gateway.topolo.workers.dev",
-  one: "https://topoloone-worker.topolo.workers.dev",
+  one: "https://one.topolo.app",
   pay: "https://topolo-pay.topolo.workers.dev",
   "quro.api": "https://api.ol0.me",
   "quro.redirect": "https://ol0.me",
@@ -671,7 +671,7 @@ var APPLICATIONS = {
       {
         "name": "topoloone-worker",
         "kind": "worker",
-        "apiUrl": "https://topoloone-worker.topolo.workers.dev",
+        "apiUrl": "https://one.topolo.app",
         "domains": [],
         "routes": [
           "one.topolo.app/*"
@@ -1077,8 +1077,9 @@ var APPLICATION_REQUIREMENTS = [
 ];
 function applicationRequirementScopes(application) {
   const scopes = /* @__PURE__ */ new Set(["all"]);
-  const hasBrowserSurface = Boolean(application.productionUrl) || application.deployTargets.some((target) => target.kind === "pages");
-  const hasApiSurface = application.services.length > 0 || application.deployTargets.some((target) => Boolean(target.apiUrl));
+  const deployTargets = application.deployTargets;
+  const hasBrowserSurface = Boolean(application.productionUrl) || deployTargets.some((target) => target.kind === "pages");
+  const hasApiSurface = application.services.length > 0 || deployTargets.some((target) => Boolean(target.apiUrl));
   if (hasBrowserSurface) scopes.add("browser");
   if (hasApiSurface) scopes.add("api");
   if (application.id === "cli" || application.id === "mcp" || application.id === "cloudcontrol") {
@@ -1264,10 +1265,11 @@ function statusRank(status) {
 }
 var DEFAULT_SERVICE_URLS = SERVICES;
 function resolveServiceUrl(service, overrides) {
-  const override = overrides?.[service];
+  var _a;
+  const override = overrides == null ? void 0 : overrides[service];
   if (override) return override;
   const envKey = `TOPOLO_SERVICE_URL_${service.replace(/\./g, "_").toUpperCase()}`;
-  const envValue = typeof process !== "undefined" ? process.env?.[envKey] : void 0;
+  const envValue = typeof process !== "undefined" ? (_a = process.env) == null ? void 0 : _a[envKey] : void 0;
   if (envValue) return envValue;
   return DEFAULT_SERVICE_URLS[service];
 }
@@ -1281,8 +1283,9 @@ var TopoloClient = class {
   fetchImpl;
   debug;
   constructor(options) {
+    var _a;
     if (!options.credential) throw new TopoloAuthError("credential is required");
-    if (!options.agent?.clientName) throw new TopoloAuthError("agent.clientName is required");
+    if (!((_a = options.agent) == null ? void 0 : _a.clientName)) throw new TopoloAuthError("agent.clientName is required");
     this.credential = options.credential;
     this.agent = options.agent;
     this.serviceUrls = options.serviceUrls;
@@ -1470,6 +1473,7 @@ var CrmModule = class {
   }
   client;
   async listContacts(options = {}) {
+    var _a, _b, _c;
     const res = await this.client.request({
       service: "crm",
       path: "/api/contacts",
@@ -1479,12 +1483,12 @@ var CrmModule = class {
         pageSize: options.pageSize
       }
     });
-    const rows = Array.isArray(res?.contacts) ? res.contacts : Array.isArray(res?.data) ? res.data : [];
+    const rows = Array.isArray(res == null ? void 0 : res.contacts) ? res.contacts : Array.isArray(res == null ? void 0 : res.data) ? res.data : [];
     return {
       contacts: rows.map(toSummary),
-      total: res?.total ?? res?.pagination?.total ?? rows.length,
-      page: res?.page ?? res?.pagination?.page ?? options.page ?? 1,
-      pageSize: res?.pageSize ?? res?.pagination?.pageSize ?? options.pageSize ?? rows.length
+      total: (res == null ? void 0 : res.total) ?? ((_a = res == null ? void 0 : res.pagination) == null ? void 0 : _a.total) ?? rows.length,
+      page: (res == null ? void 0 : res.page) ?? ((_b = res == null ? void 0 : res.pagination) == null ? void 0 : _b.page) ?? options.page ?? 1,
+      pageSize: (res == null ? void 0 : res.pageSize) ?? ((_c = res == null ? void 0 : res.pagination) == null ? void 0 : _c.pageSize) ?? options.pageSize ?? rows.length
     };
   }
   async getContact(contactId) {
@@ -1557,8 +1561,11 @@ import {
 } from "@modelcontextprotocol/sdk/types.js";
 
 // src/gating.ts
+function hasPlatformAccess(set) {
+  return (set.role === "platform_super_admin" || set.role === "platform_admin") && set.orgSlug === "admin";
+}
 function hasScope(set, required) {
-  if (set.role === "super_admin") return true;
+  if (hasPlatformAccess(set)) return true;
   if (set.permissions.includes("*")) return true;
   const [servicePart, actionPart] = splitPermission(required);
   if (!servicePart) return set.permissions.includes(required);
@@ -1913,7 +1920,7 @@ function statusesAtOrWorse(threshold) {
 }
 
 // src/version.ts
-var MCP_VERSION = "0.2.4";
+var MCP_VERSION = "0.2.5";
 
 // src/server.ts
 function buildServer(topolo, scopes, tools = TOOLS) {
@@ -2008,9 +2015,11 @@ async function main() {
 async function loadScopes(topolo) {
   try {
     const info = await topolo.identity.whoami();
+    const userWithOrgSlug = info.user;
     return {
       permissions: info.user.permissions,
-      role: info.user.role
+      role: info.user.role,
+      orgSlug: info.organization?.slug || userWithOrgSlug.orgSlug || void 0
     };
   } catch (err) {
     if (err instanceof TopoloAuthError) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@topolo/mcp",
-  "version": "0.2.4",
+  "version": "0.2.5",
   "description": "Model Context Protocol server for the Topolo platform. Exposes scope-gated tools that third-party agents (Claude, Codex, etc.) can call natively.",
   "type": "module",
   "bin": {