@topolo/mcp 0.4.10 → 0.6.0

package/README.md

@@ -123,7 +123,7 @@ yet. GET requests work without confirmation; mutating HTTP methods must pass
 `confirm: true` or the SDK rejects the call. Backing services still enforce
 permissions for every request. The tool schema intentionally does not embed a
 large service enum; agents should call `topolo_list_services` first, then pass a
-service ID/slug from that credential-scoped result. New services become callable
+app ID/slug from that credential-scoped result. New services become callable
 without an MCP release once Auth grants the organization and credential the
 relevant permissions, and new actions become typed tools without an MCP release
 once the application publishes them.

package/dist/dispatch.js

@@ -6,7 +6,7 @@ import {
   APPLICATION_REQUIREMENTS,
   APPLICATION_REQUIREMENTS_VERSION,
   APPLICATIONS,
-  DEFAULT_SERVICE_URLS,
+  DEFAULT_APP_URLS,
   auditAllApplicationRequirements,
   applicationRequirementScopes,
   requirementsForApplication,
@@ -22,13 +22,13 @@ function hasScope(set, required) {
   if (set.permissions.includes("*")) return true;
   const [servicePart, actionPart] = splitPermission(required);
   if (!servicePart) return set.permissions.includes(required);
-  const [serviceId, resource] = splitService(servicePart);
+  const [appId, resource] = splitService(servicePart);
   const candidates = new Set([
     required,
     "*",
-    serviceId ? `${serviceId}.*` : null,
-    serviceId && resource && actionPart ? `${serviceId}.${resource}:*` : null,
-    serviceId && resource && actionPart ? `${serviceId}.${resource}.${actionPart}` : null,
+    appId ? `${appId}.*` : null,
+    appId && resource && actionPart ? `${appId}.${resource}:*` : null,
+    appId && resource && actionPart ? `${appId}.${resource}.${actionPart}` : null,
     resource && actionPart ? `${resource}:*` : null,
     resource && actionPart ? `${resource}.${actionPart}` : null,
     resource && actionPart ? `${resource}:${actionPart}` : null
@@ -80,10 +80,10 @@ var TOOLS = [
     },
     handler: async (topolo) => {
       const services = (await topolo.client.listServices()).map((entry) => {
-        const id = displayServiceId(entry);
+        const id = displayAppId(entry);
         return {
           id,
-          serviceId: entry.serviceId,
+          appId: entry.appId,
           slug: entry.slug,
           name: entry.name,
           apiBaseUrl: entry.apiBaseUrl,
@@ -110,7 +110,7 @@ var TOOLS = [
       properties: {
         service: {
           type: "string",
-          description: "Optional service id, slug, or name filter."
+          description: "Optional app id, slug, or name filter."
         }
       },
       additionalProperties: false
@@ -139,7 +139,7 @@ var TOOLS = [
   {
     name: "topolo_get_application",
     title: "Describe one Topolo platform application",
-    description: "Returns one live application catalog entry (service id, slug, name, API URL, launch URL, status). Accepts the service id, slug, or name. Resolved against the live registry so newly-registered apps work without a client rebuild.",
+    description: "Returns one live application catalog entry (app id, slug, name, API URL, launch URL, status). Accepts the app id, slug, or name. Resolved against the live registry so newly-registered apps work without a client rebuild.",
     requiredScopes: [],
     destructive: false,
     inputSchema: {
@@ -147,7 +147,7 @@ var TOOLS = [
       properties: {
         application: {
           type: "string",
-          description: "Application identifier: service id, slug, or name from topolo_list_applications."
+          description: "Application identifier: app id, slug, or name from topolo_list_applications."
         }
       },
       required: ["application"],
@@ -161,10 +161,10 @@ var TOOLS = [
       const needle = application.trim().toLowerCase();
       const catalog = await topolo.client.listServices();
       const match = catalog.find(
-        (e) => e.serviceId.toLowerCase() === needle || e.slug && e.slug.toLowerCase() === needle || e.name && e.name.toLowerCase() === needle
+        (e) => e.appId.toLowerCase() === needle || e.slug && e.slug.toLowerCase() === needle || e.name && e.name.toLowerCase() === needle
       );
       if (!match) {
-        const known = catalog.map((e) => e.slug || e.serviceId).sort().filter((value) => typeof value === "string" && value.length > 0);
+        const known = catalog.map((e) => e.slug || e.appId).sort().filter((value) => typeof value === "string" && value.length > 0);
         throw new Error(
           `Unknown application "${application}". ${formatKnownValues(known, "applications")}`
         );
@@ -257,7 +257,7 @@ var TOOLS = [
   {
     name: "topolo_api_call",
     title: "Call any Topolo platform service",
-    description: "Low-level passthrough to any Topolo service. Use when no domain-specific tool exists for the operation you need. The request is signed with the current credential and scoped to the caller's organization \u2014 the target service will return 403 if your scopes do not permit the operation, even though this tool is advertised. Mutating calls (non-GET methods) require confirm:true. Call topolo_list_services first to discover callable service IDs; the SDK can also resolve live Auth-catalog service ids/slugs for newly registered API surfaces.",
+    description: "Low-level passthrough to any Topolo service. Use when no domain-specific tool exists for the operation you need. The request is signed with the current credential and scoped to the caller's organization \u2014 the target service will return 403 if your scopes do not permit the operation, even though this tool is advertised. Mutating calls (non-GET methods) require confirm:true. Call topolo_list_services first to discover callable app IDs; the SDK can also resolve live Auth-catalog app ids/slugs for newly registered API surfaces.",
     requiredScopes: [],
     destructive: true,
     inputSchema: {
@@ -265,7 +265,7 @@ var TOOLS = [
       properties: {
         service: {
           type: "string",
-          description: "Target service ID from the platform registry."
+          description: "Target app ID from the platform registry."
         },
         method: {
           type: "string",
@@ -370,7 +370,7 @@ function actionsToToolDefs(actions) {
   }));
 }
 function toolNameForAction(action) {
-  const service = (action.serviceSlug || action.serviceId || "service").replace(/^topolo-/, "").toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
+  const service = (action.appSlug || action.appId || "service").replace(/^topolo-/, "").toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
   const name = action.name.toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
   return ["topolo", service, name].filter(Boolean).join("_").slice(0, 96);
 }
@@ -431,18 +431,18 @@ function statusesAtOrWorse(threshold) {
   if (threshold === "needs_review") return ["missing", "needs_review"];
   return ["missing", "needs_review", "partial"];
 }
-function displayServiceId(entry) {
-  for (const value of [entry.slug, entry.name, entry.serviceId]) {
+function displayAppId(entry) {
+  for (const value of [entry.slug, entry.name, entry.appId]) {
     if (typeof value !== "string" || !value.trim()) continue;
-    for (const candidate of serviceIdCandidates(value)) {
-      if (Object.prototype.hasOwnProperty.call(DEFAULT_SERVICE_URLS, candidate)) {
+    for (const candidate of appIdCandidates(value)) {
+      if (Object.prototype.hasOwnProperty.call(DEFAULT_APP_URLS, candidate)) {
         return candidate;
       }
     }
   }
-  return serviceIdCandidates(entry.slug || entry.serviceId)[0] || entry.serviceId;
+  return appIdCandidates(entry.slug || entry.appId)[0] || entry.appId;
 }
-function serviceIdCandidates(value) {
+function appIdCandidates(value) {
   const normalized = value.trim().toLowerCase().replace(/\s+/g, "-");
   const withoutTopolo = normalized.startsWith("topolo-") ? normalized.slice("topolo-".length) : normalized;
   return [.../* @__PURE__ */ new Set([

package/dist/http.d.ts

@@ -23,8 +23,8 @@ interface TopoloMcpHttpOptions {
     path?: string;
     /** Per-service URL overrides (e.g. staging). Passed through to createTopolo. */
     serviceUrls?: Record<string, string>;
-    /** Per-service TopoloAuth service-id overrides. Passed through to createTopolo. */
-    serviceIds?: Record<string, string>;
+    /** Per-service TopoloAuth app-id overrides. Passed through to createTopolo. */
+    appIds?: Record<string, string>;
     /** Human-readable agent label for audit logs (forwarded to the SDK). */
     agentName?: string;
     /**

package/dist/http.js

@@ -15814,7 +15814,7 @@ import {
   APPLICATION_REQUIREMENTS,
   APPLICATION_REQUIREMENTS_VERSION,
   APPLICATIONS,
-  DEFAULT_SERVICE_URLS,
+  DEFAULT_APP_URLS,
   auditAllApplicationRequirements,
   applicationRequirementScopes,
   requirementsForApplication,
@@ -15830,13 +15830,13 @@ function hasScope(set, required2) {
   if (set.permissions.includes("*")) return true;
   const [servicePart, actionPart] = splitPermission(required2);
   if (!servicePart) return set.permissions.includes(required2);
-  const [serviceId, resource] = splitService(servicePart);
+  const [appId, resource] = splitService(servicePart);
   const candidates = new Set([
     required2,
     "*",
-    serviceId ? `${serviceId}.*` : null,
-    serviceId && resource && actionPart ? `${serviceId}.${resource}:*` : null,
-    serviceId && resource && actionPart ? `${serviceId}.${resource}.${actionPart}` : null,
+    appId ? `${appId}.*` : null,
+    appId && resource && actionPart ? `${appId}.${resource}:*` : null,
+    appId && resource && actionPart ? `${appId}.${resource}.${actionPart}` : null,
     resource && actionPart ? `${resource}:*` : null,
     resource && actionPart ? `${resource}.${actionPart}` : null,
     resource && actionPart ? `${resource}:${actionPart}` : null
@@ -15888,10 +15888,10 @@ var TOOLS = [
     },
     handler: async (topolo) => {
       const services = (await topolo.client.listServices()).map((entry) => {
-        const id = displayServiceId(entry);
+        const id = displayAppId(entry);
         return {
           id,
-          serviceId: entry.serviceId,
+          appId: entry.appId,
           slug: entry.slug,
           name: entry.name,
           apiBaseUrl: entry.apiBaseUrl,
@@ -15918,7 +15918,7 @@ var TOOLS = [
       properties: {
         service: {
           type: "string",
-          description: "Optional service id, slug, or name filter."
+          description: "Optional app id, slug, or name filter."
         }
       },
       additionalProperties: false
@@ -15947,7 +15947,7 @@ var TOOLS = [
   {
     name: "topolo_get_application",
     title: "Describe one Topolo platform application",
-    description: "Returns one live application catalog entry (service id, slug, name, API URL, launch URL, status). Accepts the service id, slug, or name. Resolved against the live registry so newly-registered apps work without a client rebuild.",
+    description: "Returns one live application catalog entry (app id, slug, name, API URL, launch URL, status). Accepts the app id, slug, or name. Resolved against the live registry so newly-registered apps work without a client rebuild.",
     requiredScopes: [],
     destructive: false,
     inputSchema: {
@@ -15955,7 +15955,7 @@ var TOOLS = [
       properties: {
         application: {
           type: "string",
-          description: "Application identifier: service id, slug, or name from topolo_list_applications."
+          description: "Application identifier: app id, slug, or name from topolo_list_applications."
         }
       },
       required: ["application"],
@@ -15969,10 +15969,10 @@ var TOOLS = [
       const needle = application.trim().toLowerCase();
       const catalog = await topolo.client.listServices();
       const match = catalog.find(
-        (e) => e.serviceId.toLowerCase() === needle || e.slug && e.slug.toLowerCase() === needle || e.name && e.name.toLowerCase() === needle
+        (e) => e.appId.toLowerCase() === needle || e.slug && e.slug.toLowerCase() === needle || e.name && e.name.toLowerCase() === needle
       );
       if (!match) {
-        const known = catalog.map((e) => e.slug || e.serviceId).sort().filter((value) => typeof value === "string" && value.length > 0);
+        const known = catalog.map((e) => e.slug || e.appId).sort().filter((value) => typeof value === "string" && value.length > 0);
         throw new Error(
           `Unknown application "${application}". ${formatKnownValues(known, "applications")}`
         );
@@ -16065,7 +16065,7 @@ var TOOLS = [
   {
     name: "topolo_api_call",
     title: "Call any Topolo platform service",
-    description: "Low-level passthrough to any Topolo service. Use when no domain-specific tool exists for the operation you need. The request is signed with the current credential and scoped to the caller's organization \u2014 the target service will return 403 if your scopes do not permit the operation, even though this tool is advertised. Mutating calls (non-GET methods) require confirm:true. Call topolo_list_services first to discover callable service IDs; the SDK can also resolve live Auth-catalog service ids/slugs for newly registered API surfaces.",
+    description: "Low-level passthrough to any Topolo service. Use when no domain-specific tool exists for the operation you need. The request is signed with the current credential and scoped to the caller's organization \u2014 the target service will return 403 if your scopes do not permit the operation, even though this tool is advertised. Mutating calls (non-GET methods) require confirm:true. Call topolo_list_services first to discover callable app IDs; the SDK can also resolve live Auth-catalog app ids/slugs for newly registered API surfaces.",
     requiredScopes: [],
     destructive: true,
     inputSchema: {
@@ -16073,7 +16073,7 @@ var TOOLS = [
       properties: {
         service: {
           type: "string",
-          description: "Target service ID from the platform registry."
+          description: "Target app ID from the platform registry."
         },
         method: {
           type: "string",
@@ -16178,7 +16178,7 @@ function actionsToToolDefs(actions) {
   }));
 }
 function toolNameForAction(action) {
-  const service = (action.serviceSlug || action.serviceId || "service").replace(/^topolo-/, "").toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
+  const service = (action.appSlug || action.appId || "service").replace(/^topolo-/, "").toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
   const name = action.name.toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
   return ["topolo", service, name].filter(Boolean).join("_").slice(0, 96);
 }
@@ -16239,18 +16239,18 @@ function statusesAtOrWorse(threshold) {
   if (threshold === "needs_review") return ["missing", "needs_review"];
   return ["missing", "needs_review", "partial"];
 }
-function displayServiceId(entry) {
-  for (const value of [entry.slug, entry.name, entry.serviceId]) {
+function displayAppId(entry) {
+  for (const value of [entry.slug, entry.name, entry.appId]) {
     if (typeof value !== "string" || !value.trim()) continue;
-    for (const candidate of serviceIdCandidates(value)) {
-      if (Object.prototype.hasOwnProperty.call(DEFAULT_SERVICE_URLS, candidate)) {
+    for (const candidate of appIdCandidates(value)) {
+      if (Object.prototype.hasOwnProperty.call(DEFAULT_APP_URLS, candidate)) {
         return candidate;
       }
     }
   }
-  return serviceIdCandidates(entry.slug || entry.serviceId)[0] || entry.serviceId;
+  return appIdCandidates(entry.slug || entry.appId)[0] || entry.appId;
 }
-function serviceIdCandidates(value) {
+function appIdCandidates(value) {
   const normalized = value.trim().toLowerCase().replace(/\s+/g, "-");
   const withoutTopolo = normalized.startsWith("topolo-") ? normalized.slice("topolo-".length) : normalized;
   return [.../* @__PURE__ */ new Set([
@@ -16383,7 +16383,7 @@ function createTopoloMcpHttpHandler(options = {}) {
       ...options.agentName ? { agentName: options.agentName } : {}
     },
     serviceUrls: options.serviceUrls,
-    serviceIds: options.serviceIds,
+    appIds: options.appIds,
     ...options.fetch ? { fetch: options.fetch } : {},
     // Hosted writes still go through the SDK's confirm gate: the tool layer
     // sets { confirm } per-call based on each tool's requiresConfirmation.