@topolo/mcp 0.3.0 → 0.4.1

package/README.md

@@ -112,7 +112,10 @@ clients surface that as a failed server launch.
 `topolo_api_call` is the escape hatch for endpoints without typed MCP tools
 yet. GET requests work without confirmation; mutating HTTP methods must pass
 `confirm: true` or the SDK rejects the call. Backing services still enforce
-permissions for every request.
+permissions for every request. The tool schema intentionally does not embed a
+large service enum; agents should call `topolo_list_services` first, then pass a
+service ID/slug. The SDK can resolve live Auth-catalog API/technical service
+surfaces for newly registered services before the next MCP package release.
 
 ## Safety rails
 
@@ -159,11 +162,12 @@ waiting for JSON-RPC on stdin. To drive it manually, use the MCP Inspector:
 npx @modelcontextprotocol/inspector node dist/index.js
 ```
 
-## Release flow
+## Release Flow
 
-Pushing a `v<x.y.z>` tag to `main` triggers GitHub Actions to typecheck, test,
-build, verify the tag matches `package.json`, and publish to npm via the
-`NPM_TOKEN` secret. No developer-machine credentials involved.
+Preferred flow: push a `v<x.y.z>` tag to `main`; GitHub Actions typechecks,
+tests, builds, verifies the tag matches `package.json`, and publishes to npm via
+the `NPM_TOKEN` secret. Operators may publish directly with an npm token only
+after running the same package checks and `npm pack --dry-run`.
 
 ## Phase 2 (planned)
 

package/dist/dispatch.js

@@ -52,7 +52,6 @@ function splitService(servicePart) {
 
 // src/tools.ts
 var APPLICATION_IDS = Object.keys(APPLICATIONS).sort();
-var SERVICE_IDS = Object.keys(DEFAULT_SERVICE_URLS).sort();
 var HTTP_METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE"];
 var TOOLS = [
   {
@@ -91,7 +90,7 @@ var TOOLS = [
   {
     name: "topolo_list_applications",
     title: "List every Topolo platform application",
-    description: "Returns the generated Topolo application catalog, including pages-only apps, tooling apps, and API-backed apps. Use this before choosing a service-specific or generic API operation. Pure metadata: no credential introspection, no permission check, no external call.",
+    description: "Returns the live Topolo application catalog from the platform registry. Reflects apps as they are registered/removed with no client rebuild. Authenticated callers in an entitled org also see the developer_only apps their role permits. Falls back to a bundled snapshot only if the registry is unreachable.",
     requiredScopes: [],
     destructive: false,
     inputSchema: {
@@ -99,14 +98,14 @@ var TOOLS = [
       properties: {},
       additionalProperties: false
     },
-    handler: async () => ({
-      applications: APPLICATION_IDS.map((id) => APPLICATIONS[id])
+    handler: async (topolo) => ({
+      applications: await topolo.client.listServices()
     })
   },
   {
     name: "topolo_get_application",
     title: "Describe one Topolo platform application",
-    description: "Returns one application catalog entry with its package name, production URL, deploy targets, and SDK service IDs when the app has callable APIs. Pure metadata: no credential introspection, no permission check, no external call.",
+    description: "Returns one live application catalog entry (service id, slug, name, base URL, status). Accepts the service id, slug, or name. Resolved against the live registry so newly-registered apps work without a client rebuild.",
     requiredScopes: [],
     destructive: false,
     inputSchema: {
@@ -114,21 +113,29 @@ var TOOLS = [
       properties: {
         application: {
           type: "string",
-          enum: APPLICATION_IDS,
-          description: "Application ID from topolo_list_applications."
+          description: "Application identifier: service id, slug, or name from topolo_list_applications."
         }
       },
       required: ["application"],
       additionalProperties: false
     },
-    handler: async (_topolo, args) => {
+    handler: async (topolo, args) => {
       const application = args["application"];
-      if (typeof application !== "string" || !APPLICATION_IDS.includes(application)) {
+      if (typeof application !== "string" || !application.trim()) {
+        throw new Error("`application` must be a non-empty string.");
+      }
+      const needle = application.trim().toLowerCase();
+      const catalog = await topolo.client.listServices();
+      const match = catalog.find(
+        (e) => e.serviceId.toLowerCase() === needle || e.slug && e.slug.toLowerCase() === needle || e.name && e.name.toLowerCase() === needle
+      );
+      if (!match) {
+        const known = catalog.map((e) => e.slug || e.serviceId).sort().filter((value) => typeof value === "string" && value.length > 0);
         throw new Error(
-          `Unknown application "${String(application)}". Known: ${APPLICATION_IDS.join(", ")}`
+          `Unknown application "${application}". ${formatKnownValues(known, "applications")}`
         );
       }
-      return { application: APPLICATIONS[application] };
+      return { application: match };
     }
   },
   {
@@ -142,7 +149,6 @@ var TOOLS = [
       properties: {
         application: {
           type: "string",
-          enum: APPLICATION_IDS,
           description: "Optional application ID from topolo_list_applications."
         }
       },
@@ -160,7 +166,7 @@ var TOOLS = [
       }
       if (typeof application !== "string" || !APPLICATION_IDS.includes(application)) {
         throw new Error(
-          `Unknown application "${String(application)}". Known: ${APPLICATION_IDS.join(", ")}`
+          `Unknown application "${String(application)}". ${formatKnownValues(APPLICATION_IDS, "applications")}`
         );
       }
       const app = APPLICATIONS[application];
@@ -183,7 +189,6 @@ var TOOLS = [
       properties: {
         application: {
           type: "string",
-          enum: APPLICATION_IDS,
           description: "Optional application ID from topolo_list_applications."
         },
         failOn: {
@@ -208,7 +213,7 @@ var TOOLS = [
       }
       if (typeof application !== "string" || !APPLICATION_IDS.includes(application)) {
         throw new Error(
-          `Unknown application "${String(application)}". Known: ${APPLICATION_IDS.join(", ")}`
+          `Unknown application "${String(application)}". ${formatKnownValues(APPLICATION_IDS, "applications")}`
         );
       }
       report = auditAllApplicationRequirements([application]);
@@ -241,7 +246,7 @@ var TOOLS = [
   {
     name: "topolo_api_call",
     title: "Call any Topolo platform service",
-    description: `Low-level passthrough to any Topolo service. Use when no domain-specific tool exists for the operation you need. The request is signed with the current credential and scoped to the caller's organization \u2014 the target service will return 403 if your scopes do not permit the operation, even though this tool is advertised. Mutating calls (non-GET methods) require confirm:true. Known services: ${SERVICE_IDS.join(", ")}.`,
+    description: "Low-level passthrough to any Topolo service. Use when no domain-specific tool exists for the operation you need. The request is signed with the current credential and scoped to the caller's organization \u2014 the target service will return 403 if your scopes do not permit the operation, even though this tool is advertised. Mutating calls (non-GET methods) require confirm:true. Call topolo_list_services first to discover callable service IDs; the SDK can also resolve live Auth-catalog service ids/slugs for newly registered API surfaces.",
     requiredScopes: [],
     destructive: true,
     inputSchema: {
@@ -249,7 +254,6 @@ var TOOLS = [
       properties: {
         service: {
           type: "string",
-          enum: SERVICE_IDS,
           description: "Target service ID from the platform registry."
         },
         method: {
@@ -282,8 +286,8 @@ var TOOLS = [
     handler: async (topolo, args) => {
       const service = args["service"];
       const path = args["path"];
-      if (typeof service !== "string" || !SERVICE_IDS.includes(service)) {
-        throw new Error(`Unknown service "${String(service)}". Known: ${SERVICE_IDS.join(", ")}`);
+      if (typeof service !== "string" || !service.trim()) {
+        throw new Error("service is required. Call topolo_list_services first to discover callable services.");
       }
       if (typeof path !== "string" || !path) {
         throw new Error("path is required");
@@ -298,7 +302,7 @@ var TOOLS = [
         Object.entries(query).map(([k, v]) => [k, String(v)])
       ) : void 0;
       return topolo.client.request({
-        service,
+        service: service.trim(),
         method,
         path,
         body: args["body"],
@@ -371,6 +375,12 @@ function statusesAtOrWorse(threshold) {
   if (threshold === "needs_review") return ["missing", "needs_review"];
   return ["missing", "needs_review", "partial"];
 }
+function formatKnownValues(values, label) {
+  const sorted = [...values].sort();
+  const preview = sorted.slice(0, 25).join(", ");
+  const suffix = sorted.length > 25 ? `, ... +${sorted.length - 25} more` : "";
+  return `Run discovery for the full ${label} list. Known snapshot sample: ${preview}${suffix}`;
+}
 
 // src/dispatch.ts
 function listAvailableTopoloTools(scopes, tools = TOOLS) {