@topolo/mcp 0.4.9 → 0.4.10

package/dist/dispatch.js

@@ -347,14 +347,20 @@ async function buildTopoloTools(topolo, scopes, tools = TOOLS) {
   const actionTools = actionsToToolDefs(actions);
   return filterToolsByScopes([...baseTools, ...actionTools], scopes);
 }
+function effectiveAgentAccess(a) {
+  if (a.agentAccess) return a.agentAccess;
+  if (a.destructive) return "off";
+  if (a.readOnly && !a.requiresConfirmation) return "auto";
+  return "confirm";
+}
 function actionsToToolDefs(actions) {
-  return actions.map((action) => ({
+  return actions.map((action) => ({ action, access: effectiveAgentAccess(action) })).filter(({ access }) => access !== "off").map(({ action, access }) => ({
     name: action.toolName || toolNameForAction(action),
     title: action.title,
     description: action.description,
     requiredScopes: action.requiredPermission ? [action.requiredPermission] : [],
-    destructive: action.destructive || action.requiresConfirmation || action.method !== "GET",
-    inputSchema: actionInputSchema(action),
+    destructive: access === "confirm",
+    inputSchema: actionInputSchema(action, access),
     handler: async (topolo, args) => {
       const confirm = Boolean(args["confirm"]);
       const input = { ...args };
@@ -368,7 +374,7 @@ function toolNameForAction(action) {
   const name = action.name.toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
   return ["topolo", service, name].filter(Boolean).join("_").slice(0, 96);
 }
-function actionInputSchema(action) {
+function actionInputSchema(action, access = "auto") {
   const schema = {
     type: "object",
     properties: {},
@@ -376,7 +382,7 @@ function actionInputSchema(action) {
     ...action.inputSchema
   };
   const properties = schema.properties && typeof schema.properties === "object" && !Array.isArray(schema.properties) ? { ...schema.properties } : {};
-  if (action.requiresConfirmation || action.method !== "GET") {
+  if (access === "confirm") {
     properties.confirm = {
       type: "boolean",
       description: "Required for mutating actions. Explicit human-in-the-loop acknowledgement."

package/dist/http.d.ts

@@ -0,0 +1,63 @@
+import { WebStandardStreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js';
+import { TopoloCredential, Topolo } from '@topolo/sdk';
+
+/**
+ * Hosted, multi-tenant MCP Streamable HTTP transport for the Topolo platform.
+ *
+ * stdio (index.ts) binds ONE env credential to the whole process. The hosted
+ * HTTP transport is the opposite: every request carries its OWN caller
+ * credential (Authorization: Bearer <jwt> or X-Api-Key: <key>). We build a
+ * per-request Topolo SDK client from THAT credential, introspect it to resolve
+ * the caller's scopes, and wire a per-session MCP server via buildServer — the
+ * exact same scope-gated tool list + dispatch path used by stdio. There is no
+ * process-wide credential fallback; a request with no/invalid credential is
+ * rejected with 401.
+ *
+ * Protocol: implemented by the SDK's WebStandardStreamableHTTPServerTransport,
+ * which speaks the MCP Streamable HTTP spec (POST JSON-RPC -> JSON or SSE,
+ * Mcp-Session-Id continuity, GET SSE stream, DELETE to terminate) over pure
+ * Web-Standard Request/Response — so it runs unchanged in a Cloudflare Worker.
+ */
+interface TopoloMcpHttpOptions {
+    /** Path the MCP endpoint is mounted at. Defaults to '/mcp'. */
+    path?: string;
+    /** Per-service URL overrides (e.g. staging). Passed through to createTopolo. */
+    serviceUrls?: Record<string, string>;
+    /** Per-service TopoloAuth service-id overrides. Passed through to createTopolo. */
+    serviceIds?: Record<string, string>;
+    /** Human-readable agent label for audit logs (forwarded to the SDK). */
+    agentName?: string;
+    /**
+     * Injected fetch passed to the default createTopolo factory. Defaults to the
+     * runtime global fetch. Useful in a Worker (to forward `env`-bound fetch) and
+     * in tests. Ignored when `createClient` is supplied.
+     */
+    fetch?: typeof fetch;
+    /**
+     * Build the per-request SDK client. Injectable so tests can supply a fake
+     * Topolo without real network I/O. Defaults to createTopolo. The credential
+     * is always the per-request caller credential — never an env credential.
+     */
+    createClient?: (credential: TopoloCredential) => Topolo;
+}
+interface McpSession {
+    transport: WebStandardStreamableHTTPServerTransport;
+    /** Fingerprint of the credential that created this session. */
+    fingerprint: string;
+}
+/**
+ * Create a Cloudflare-Worker-compatible fetch handler that serves the Topolo
+ * MCP over Streamable HTTP. Mount it as the Worker's default export, e.g.:
+ *
+ *   const handler = createTopoloMcpHttpHandler();
+ *   export default { fetch: handler.fetch };
+ */
+declare function createTopoloMcpHttpHandler(options?: TopoloMcpHttpOptions): {
+    /** Cloudflare Worker / fetch-compatible entrypoint. */
+    fetch: (request: Request) => Promise<Response>;
+    /** Exposed for tests/introspection. */
+    sessions: Map<string, McpSession>;
+};
+type TopoloMcpHttpHandler = ReturnType<typeof createTopoloMcpHttpHandler>;
+
+export { type TopoloMcpHttpHandler, type TopoloMcpHttpOptions, createTopoloMcpHttpHandler };