@topolo/mcp 0.4.9 → 0.5.0

package/dist/index.js

@@ -124,7 +124,7 @@ var APPLICATIONS = {
           "admin.topolo.app"
         ],
         "routes": [],
-        "serviceId": null
+        "appId": null
       },
       {
         "name": "topolo-admin-api",
@@ -132,7 +132,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -154,7 +154,7 @@ var APPLICATIONS = {
           "agent.topolo.app"
         ],
         "routes": [],
-        "serviceId": "agent"
+        "appId": "agent"
       },
       {
         "name": "topolo-agent-api",
@@ -162,7 +162,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -186,7 +186,7 @@ var APPLICATIONS = {
         "routes": [
           "auth.topolo.app"
         ],
-        "serviceId": "auth"
+        "appId": "auth"
       }
     ]
   },
@@ -208,7 +208,7 @@ var APPLICATIONS = {
           "backup.topolo.app"
         ],
         "routes": [],
-        "serviceId": "backup"
+        "appId": "backup"
       }
     ]
   },
@@ -230,7 +230,7 @@ var APPLICATIONS = {
           "books.topolo.app"
         ],
         "routes": [],
-        "serviceId": "books"
+        "appId": "books"
       },
       {
         "name": "topolo-books-api",
@@ -238,7 +238,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -260,7 +260,7 @@ var APPLICATIONS = {
           "bugfix.topolo.app"
         ],
         "routes": [],
-        "serviceId": "bugfix"
+        "appId": "bugfix"
       }
     ]
   },
@@ -282,7 +282,7 @@ var APPLICATIONS = {
           "bytes.topolo.app"
         ],
         "routes": [],
-        "serviceId": "bytes"
+        "appId": "bytes"
       },
       {
         "name": "topolo-bytes-api",
@@ -290,7 +290,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -312,7 +312,7 @@ var APPLICATIONS = {
           "calendar.topolo.app"
         ],
         "routes": [],
-        "serviceId": "calendar"
+        "appId": "calendar"
       },
       {
         "name": "topolo-calendar-api",
@@ -320,7 +320,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -342,7 +342,7 @@ var APPLICATIONS = {
           "capacity.topolo.app"
         ],
         "routes": [],
-        "serviceId": "capacity"
+        "appId": "capacity"
       }
     ]
   },
@@ -364,7 +364,7 @@ var APPLICATIONS = {
           "chat.topolo.app"
         ],
         "routes": [],
-        "serviceId": "chat"
+        "appId": "chat"
       },
       {
         "name": "topolo-chat-api",
@@ -372,7 +372,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -392,7 +392,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       },
       {
         "name": "topolo-commerce-guest-web",
@@ -402,7 +402,7 @@ var APPLICATIONS = {
           "guest.topolo.app"
         ],
         "routes": [],
-        "serviceId": null
+        "appId": null
       },
       {
         "name": "topolo-commerce-ops-web",
@@ -412,7 +412,7 @@ var APPLICATIONS = {
           "commerce.topolo.app"
         ],
         "routes": [],
-        "serviceId": "commerce"
+        "appId": "commerce"
       },
       {
         "name": "topolo-commerce-station-web",
@@ -422,7 +422,7 @@ var APPLICATIONS = {
           "station-commerce.topolo.app"
         ],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -444,7 +444,7 @@ var APPLICATIONS = {
           "compose.topolo.app"
         ],
         "routes": [],
-        "serviceId": "compose"
+        "appId": "compose"
       },
       {
         "name": "topolo-compose-api",
@@ -452,7 +452,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -474,7 +474,7 @@ var APPLICATIONS = {
           "consent.topolo.app"
         ],
         "routes": [],
-        "serviceId": "consent"
+        "appId": "consent"
       },
       {
         "name": "topolo-consent-api",
@@ -482,7 +482,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -502,7 +502,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       },
       {
         "name": "topolo-crm-app",
@@ -512,7 +512,7 @@ var APPLICATIONS = {
           "crm.topolo.app"
         ],
         "routes": [],
-        "serviceId": "crm"
+        "appId": "crm"
       }
     ]
   },
@@ -532,7 +532,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       },
       {
         "name": "topolo-developers",
@@ -542,7 +542,7 @@ var APPLICATIONS = {
           "developers.topolo.app"
         ],
         "routes": [],
-        "serviceId": "developers"
+        "appId": "developers"
       },
       {
         "name": "topolo-developers-api",
@@ -550,7 +550,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -572,7 +572,7 @@ var APPLICATIONS = {
           "director.topolo.app"
         ],
         "routes": [],
-        "serviceId": "director"
+        "appId": "director"
       },
       {
         "name": "topolo-director-api",
@@ -580,7 +580,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -600,7 +600,7 @@ var APPLICATIONS = {
           "docs.topolo.app"
         ],
         "routes": [],
-        "serviceId": null
+        "appId": null
       },
       {
         "name": "topolo-docs-api",
@@ -608,7 +608,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -630,7 +630,7 @@ var APPLICATIONS = {
           "feed-analytics-api.topolo.app"
         ],
         "routes": [],
-        "serviceId": null
+        "appId": null
       },
       {
         "name": "topolo-feed-api",
@@ -640,7 +640,7 @@ var APPLICATIONS = {
           "feed-api.topolo.app"
         ],
         "routes": [],
-        "serviceId": null
+        "appId": null
       },
       {
         "name": "topolo-feed-web",
@@ -650,7 +650,7 @@ var APPLICATIONS = {
           "feed.topolo.app"
         ],
         "routes": [],
-        "serviceId": "feed"
+        "appId": "feed"
       }
     ]
   },
@@ -672,7 +672,7 @@ var APPLICATIONS = {
           "flow.topolo.app"
         ],
         "routes": [],
-        "serviceId": "flow"
+        "appId": "flow"
       },
       {
         "name": "topolo-flow-api",
@@ -680,7 +680,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -702,7 +702,7 @@ var APPLICATIONS = {
           "forecast.topolo.app"
         ],
         "routes": [],
-        "serviceId": "forecast"
+        "appId": "forecast"
       },
       {
         "name": "topolo-forecast-api",
@@ -710,7 +710,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -732,7 +732,7 @@ var APPLICATIONS = {
           "forms.topolo.app"
         ],
         "routes": [],
-        "serviceId": "forms"
+        "appId": "forms"
       },
       {
         "name": "topolo-forms-api",
@@ -740,7 +740,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -762,7 +762,7 @@ var APPLICATIONS = {
           "home.topolo.app"
         ],
         "routes": [],
-        "serviceId": "home"
+        "appId": "home"
       },
       {
         "name": "topolo-home-api",
@@ -770,7 +770,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -792,7 +792,7 @@ var APPLICATIONS = {
           "insights.topolo.app"
         ],
         "routes": [],
-        "serviceId": "insights"
+        "appId": "insights"
       },
       {
         "name": "topolo-insights-api",
@@ -800,7 +800,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -822,7 +822,7 @@ var APPLICATIONS = {
           "inventory.topolo.app"
         ],
         "routes": [],
-        "serviceId": "inventory"
+        "appId": "inventory"
       },
       {
         "name": "topolo-inventory-api",
@@ -830,7 +830,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -852,7 +852,7 @@ var APPLICATIONS = {
           "learn.topolo.app"
         ],
         "routes": [],
-        "serviceId": "learn"
+        "appId": "learn"
       },
       {
         "name": "topolo-learn-api",
@@ -860,7 +860,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -884,7 +884,7 @@ var APPLICATIONS = {
         "routes": [
           "localize.topolo.app"
         ],
-        "serviceId": "localize"
+        "appId": "localize"
       }
     ]
   },
@@ -906,7 +906,7 @@ var APPLICATIONS = {
           "mail.topolo.app"
         ],
         "routes": [],
-        "serviceId": "mail"
+        "appId": "mail"
       },
       {
         "name": "topolo-mail-api",
@@ -914,7 +914,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -934,7 +934,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       },
       {
         "name": "topolo-mdm-console",
@@ -944,7 +944,7 @@ var APPLICATIONS = {
           "mdm.topolo.app"
         ],
         "routes": [],
-        "serviceId": "mdm"
+        "appId": "mdm"
       }
     ]
   },
@@ -966,7 +966,7 @@ var APPLICATIONS = {
           "messages.topolo.app"
         ],
         "routes": [],
-        "serviceId": "messages"
+        "appId": "messages"
       },
       {
         "name": "topolo-messages-api",
@@ -974,7 +974,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       },
       {
         "name": "topolo-messages-dispatch",
@@ -982,7 +982,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -1004,7 +1004,7 @@ var APPLICATIONS = {
           "nexus.topolo.app"
         ],
         "routes": [],
-        "serviceId": null
+        "appId": null
       },
       {
         "name": "topolo-nexus-gateway",
@@ -1014,7 +1014,7 @@ var APPLICATIONS = {
           "nexus.topolo.app"
         ],
         "routes": [],
-        "serviceId": "nexus"
+        "appId": "nexus"
       }
     ]
   },
@@ -1038,7 +1038,7 @@ var APPLICATIONS = {
         "routes": [
           "notify.topolo.app"
         ],
-        "serviceId": "notify"
+        "appId": "notify"
       }
     ]
   },
@@ -1060,7 +1060,7 @@ var APPLICATIONS = {
           "observability-watch.topolo.app"
         ],
         "routes": [],
-        "serviceId": "observability_watch"
+        "appId": "observability_watch"
       }
     ]
   },
@@ -1084,7 +1084,7 @@ var APPLICATIONS = {
         "routes": [
           "one.topolo.app/*"
         ],
-        "serviceId": null
+        "appId": null
       },
       {
         "name": "topolo-one-api",
@@ -1096,7 +1096,7 @@ var APPLICATIONS = {
         "routes": [
           "www.topolo.app/*"
         ],
-        "serviceId": "one"
+        "appId": "one"
       },
       {
         "name": "topolo-one-website",
@@ -1109,7 +1109,7 @@ var APPLICATIONS = {
           "topolo.io",
           "www.topolo.io"
         ],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -1131,7 +1131,7 @@ var APPLICATIONS = {
           "p2p.topolo.app"
         ],
         "routes": [],
-        "serviceId": "p2p"
+        "appId": "p2p"
       },
       {
         "name": "topolo-p2p-api",
@@ -1139,7 +1139,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -1161,7 +1161,7 @@ var APPLICATIONS = {
           "pay.topolo.app"
         ],
         "routes": [],
-        "serviceId": "pay"
+        "appId": "pay"
       },
       {
         "name": "topolo-pay-api",
@@ -1169,7 +1169,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -1191,7 +1191,7 @@ var APPLICATIONS = {
           "people.topolo.app"
         ],
         "routes": [],
-        "serviceId": "people"
+        "appId": "people"
       },
       {
         "name": "topolo-people-api",
@@ -1199,7 +1199,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -1224,7 +1224,7 @@ var APPLICATIONS = {
         "routes": [
           "api.ol0.me/*"
         ],
-        "serviceId": "quro.api"
+        "appId": "quro.api"
       },
       {
         "name": "quro-redirect-system",
@@ -1236,7 +1236,7 @@ var APPLICATIONS = {
         "routes": [
           "ol0.me/*"
         ],
-        "serviceId": "quro.redirect"
+        "appId": "quro.redirect"
       },
       {
         "name": "quro-ui",
@@ -1246,7 +1246,7 @@ var APPLICATIONS = {
           "quro.topolo.app"
         ],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -1268,7 +1268,7 @@ var APPLICATIONS = {
           "roadmapper.topolo.app"
         ],
         "routes": [],
-        "serviceId": "roadmapper"
+        "appId": "roadmapper"
       },
       {
         "name": "topolo-roadmapper-api",
@@ -1276,7 +1276,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -1298,7 +1298,7 @@ var APPLICATIONS = {
           "sign.topolo.app"
         ],
         "routes": [],
-        "serviceId": "sign"
+        "appId": "sign"
       },
       {
         "name": "topolo-sign-api",
@@ -1306,7 +1306,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -1328,7 +1328,7 @@ var APPLICATIONS = {
           "studio.topolo.app"
         ],
         "routes": [],
-        "serviceId": "social_studio"
+        "appId": "social_studio"
       },
       {
         "name": "topolo-social-studio-api",
@@ -1336,7 +1336,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       },
       {
         "name": "topolo-social-studio-queue",
@@ -1344,7 +1344,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -1366,7 +1366,7 @@ var APPLICATIONS = {
           "socialize.topolo.app"
         ],
         "routes": [],
-        "serviceId": "socialize"
+        "appId": "socialize"
       },
       {
         "name": "topolo-socialize-api",
@@ -1376,7 +1376,7 @@ var APPLICATIONS = {
           "socialize-api.topolo.app"
         ],
         "routes": [],
-        "serviceId": null
+        "appId": null
       },
       {
         "name": "topolo-socialize-scheduler",
@@ -1384,7 +1384,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -1406,7 +1406,7 @@ var APPLICATIONS = {
           "spaces.topolo.app"
         ],
         "routes": [],
-        "serviceId": "spaces"
+        "appId": "spaces"
       },
       {
         "name": "topolo-spaces-api",
@@ -1414,7 +1414,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -1436,7 +1436,7 @@ var APPLICATIONS = {
           "status.topolo.app"
         ],
         "routes": [],
-        "serviceId": "status"
+        "appId": "status"
       }
     ]
   },
@@ -1460,7 +1460,7 @@ var APPLICATIONS = {
         "routes": [
           "success.topolo.app"
         ],
-        "serviceId": "success"
+        "appId": "success"
       },
       {
         "name": "topolo-success-api",
@@ -1468,7 +1468,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -1492,7 +1492,7 @@ var APPLICATIONS = {
         "routes": [
           "support.topolo.app/*"
         ],
-        "serviceId": "support"
+        "appId": "support"
       },
       {
         "name": "topolo-support-api",
@@ -1500,7 +1500,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -1522,7 +1522,7 @@ var APPLICATIONS = {
           "survey.topolo.app"
         ],
         "routes": [],
-        "serviceId": "survey"
+        "appId": "survey"
       },
       {
         "name": "topolo-survey-api",
@@ -1530,7 +1530,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -1552,7 +1552,7 @@ var APPLICATIONS = {
           "voice.topolo.app"
         ],
         "routes": [],
-        "serviceId": "voice"
+        "appId": "voice"
       },
       {
         "name": "topolo-voice-api",
@@ -1560,7 +1560,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       }
     ]
   },
@@ -1580,7 +1580,7 @@ var APPLICATIONS = {
         "apiUrl": null,
         "domains": [],
         "routes": [],
-        "serviceId": null
+        "appId": null
       },
       {
         "name": "topolo-web-runtime",
@@ -1593,7 +1593,7 @@ var APPLICATIONS = {
           "*.sites.topolo.app/*",
           "sites.topolo.app"
         ],
-        "serviceId": null
+        "appId": null
       },
       {
         "name": "topolo-web-studio",
@@ -1603,7 +1603,7 @@ var APPLICATIONS = {
           "web.topolo.app"
         ],
         "routes": [],
-        "serviceId": "web"
+        "appId": "web"
       }
     ]
   }
@@ -1805,7 +1805,7 @@ function applicationRequirementScopes(application) {
   const hasBrowserSurface = Boolean(application.productionUrl) || // String() keeps this guard valid after the Pages->Worker migration narrowed
   // the generated kind union to "worker" (no "pages" literal remains).
   application.deployTargets.some((target) => String(target.kind) === "pages");
-  const hasApiSurface = application.services.length > 0 || application.deployTargets.some((target) => Boolean(target.serviceId));
+  const hasApiSurface = application.services.length > 0 || application.deployTargets.some((target) => Boolean(target.appId));
   if (hasBrowserSurface) scopes.add("browser");
   if (hasApiSurface) scopes.add("api");
   if (appId === "cli" || appId === "mcp" || appId === "cloudcontrol") {
@@ -2012,7 +2012,7 @@ function resolveServiceUrl(service, overrides) {
   return DEFAULT_SERVICE_URLS[service];
 }
 function catalogServiceKeyCandidates(entry, preferred) {
-  const values = [preferred, entry.slug, entry.name, entry.serviceId].filter(
+  const values = [preferred, entry.slug, entry.name, entry.appId].filter(
     (value) => typeof value === "string" && value.trim().length > 0
   );
   const keys = /* @__PURE__ */ new Set();
@@ -2064,7 +2064,7 @@ var TopoloClient = class _TopoloClient {
   credential;
   agent;
   serviceUrls;
-  serviceIds;
+  appIds;
   requireConfirmForWrites;
   timeoutMs;
   fetchImpl;
@@ -2072,18 +2072,18 @@ var TopoloClient = class _TopoloClient {
   serviceCatalogCache = null;
   actionCatalogCache = null;
   /**
-   * Process-wide cache for slug → service-id lookups. Keyed by
+   * Process-wide cache for slug → app-id lookups. Keyed by
    * `${authBaseUrl}|${slug}` so multiple `TopoloClient` instances pointing at
    * the same Auth share, but staging vs prod don't poison each other.
-   * Cleared via `TopoloClient.clearServiceIdCache()` if a test needs it.
+   * Cleared via `TopoloClient.clearAppIdCache()` if a test needs it.
    */
-  static serviceIdCache = /* @__PURE__ */ new Map();
+  static appIdCache = /* @__PURE__ */ new Map();
   /**
-   * Drop the slug→service-id cache. Test-only — production callers should
+   * Drop the slug→app-id cache. Test-only — production callers should
    * let the 5-minute TTL expire naturally.
    */
-  static clearServiceIdCache() {
-    _TopoloClient.serviceIdCache.clear();
+  static clearAppIdCache() {
+    _TopoloClient.appIdCache.clear();
   }
   constructor(options) {
     if (!options.credential) throw new TopoloAuthError("credential is required");
@@ -2091,7 +2091,7 @@ var TopoloClient = class _TopoloClient {
     this.credential = options.credential;
     this.agent = options.agent;
     this.serviceUrls = options.serviceUrls;
-    this.serviceIds = options.serviceIds;
+    this.appIds = options.appIds;
     this.requireConfirmForWrites = options.requireConfirmForWrites !== false;
     this.timeoutMs = options.timeoutMs ?? 3e4;
     this.fetchImpl = options.fetch ?? fetch;
@@ -2127,8 +2127,8 @@ var TopoloClient = class _TopoloClient {
     const headers = new Headers();
     headers.set("Accept", "application/json");
     if (opts.body !== void 0) headers.set("Content-Type", "application/json");
-    const platformServiceId = resolveConfiguredServiceId(resolvedService.serviceKey, this.serviceIds);
-    if (platformServiceId) headers.set("X-Service-ID", platformServiceId);
+    const platformAppId = resolveConfiguredAppId(resolvedService.serviceKey, this.appIds);
+    if (platformAppId) headers.set("X-App-ID", platformAppId);
     applyAuthHeaders(headers, this.credential);
     const requestId = generateRequestId();
     applyAuditHeaders(headers, this.agent, requestId);
@@ -2248,7 +2248,7 @@ var TopoloClient = class _TopoloClient {
     return baseUrl ? { serviceKey, baseUrl } : null;
   }
   /**
-   * Resolve a service-slug → opaque service-id via caller config or TopoloAuth.
+   * Resolve a service-slug → opaque app-id via caller config or TopoloAuth.
    *
    * Cache: 5 minutes per process per `(slug, auth_base_url)`. Negative
    * results (404) are cached for 60s so a typo doesn't hot-loop the
@@ -2259,16 +2259,16 @@ var TopoloClient = class _TopoloClient {
    * This keeps the resolver usable during early bootstrap before a caller
    * has acquired an access token.
    */
-  async getServiceIdBySlug(slug) {
+  async getAppIdBySlug(slug) {
     if (typeof slug !== "string") return null;
     const normalized = slug.trim().toLowerCase();
     if (!normalized) return null;
-    const configuredServiceId = resolveConfiguredServiceId(normalized, this.serviceIds);
-    if (configuredServiceId) return configuredServiceId;
+    const configuredAppId = resolveConfiguredAppId(normalized, this.appIds);
+    if (configuredAppId) return configuredAppId;
     const authBase = resolveServiceUrl("developers", this.serviceUrls);
     const cacheKey = `${authBase}|${normalized}`;
     const now = Date.now();
-    const cached = _TopoloClient.serviceIdCache.get(cacheKey);
+    const cached = _TopoloClient.appIdCache.get(cacheKey);
     if (cached && cached.expiresAt > now) {
       return cached.value;
     }
@@ -2286,7 +2286,7 @@ var TopoloClient = class _TopoloClient {
       return null;
     }
     if (res.status === 404) {
-      _TopoloClient.serviceIdCache.set(cacheKey, {
+      _TopoloClient.appIdCache.set(cacheKey, {
         value: null,
         expiresAt: now + NEGATIVE_CACHE_TTL_MS
       });
@@ -2296,9 +2296,9 @@ var TopoloClient = class _TopoloClient {
       return null;
     }
     const body = await res.json().catch(() => null);
-    const serviceId = body?.data?.service_id;
-    const value = typeof serviceId === "string" && serviceId ? serviceId : null;
-    _TopoloClient.serviceIdCache.set(cacheKey, {
+    const appId = body?.data?.app_id;
+    const value = typeof appId === "string" && appId ? appId : null;
+    _TopoloClient.appIdCache.set(cacheKey, {
       value,
       expiresAt: now + POSITIVE_CACHE_TTL_MS
     });
@@ -2330,8 +2330,8 @@ var TopoloClient = class _TopoloClient {
     const entries = [];
     for (const item of raw) {
       const s = item;
-      const serviceId = typeof s.service_id === "string" ? s.service_id : typeof s.id === "string" ? s.id : null;
-      if (!serviceId) continue;
+      const appId = typeof s.app_id === "string" ? s.app_id : typeof s.id === "string" ? s.id : null;
+      if (!appId) continue;
       const permissions = Array.isArray(s.granted_permissions) ? s.granted_permissions.filter((permission) => typeof permission === "string" && permission.trim().length > 0) : [];
       const catalogApiKeyResources = normalizeApiKeyResourceMetadataList(
         s.api_key_resources ?? s.apiKeyResources
@@ -2339,7 +2339,7 @@ var TopoloClient = class _TopoloClient {
       const apiKeyResource = normalizeApiKeyResourceMetadata(s.api_key_resource ?? s.apiKeyResource) ?? catalogApiKeyResources[0] ?? null;
       const apiKeyResources = catalogApiKeyResources.length > 0 ? catalogApiKeyResources : apiKeyResource ? [apiKeyResource] : [];
       entries.push({
-        serviceId,
+        appId,
         slug: typeof s.app_slug === "string" ? s.app_slug : null,
         name: typeof s.name === "string" ? s.name : null,
         description: typeof s.description === "string" ? s.description : null,
@@ -2360,8 +2360,9 @@ var TopoloClient = class _TopoloClient {
     return entries;
   }
   /**
-   * List callable actions from the live Auth catalog. The response is scoped to
-   * the caller's organization and effective permissions; no bundled/static app
+   * List callable actions from the live registry-canonical catalog (definitions
+   * from the Catalog registry, scoping from Auth). The response is scoped to the
+   * caller's organization and effective permissions; no bundled/static app
    * action list is used as an authorization source.
    */
   async listActions(options = {}) {
@@ -2370,7 +2371,7 @@ var TopoloClient = class _TopoloClient {
       return this.actionCatalogCache.entries;
     }
     const res = await this.request({
-      service: "auth",
+      service: "developers",
       method: "GET",
       path: "/api/actions/catalog",
       ...options.service ? { query: { service: options.service } } : {}
@@ -2406,7 +2407,7 @@ var TopoloClient = class _TopoloClient {
   async callAction(action, input = {}, options = {}) {
     const entry = await this.getAction(action);
     const mapped = mapActionInput(entry, input);
-    const service = entry.serviceSlug || entry.serviceId;
+    const service = entry.serviceSlug || entry.appId;
     return this.request({
       service,
       method: entry.method,
@@ -2427,7 +2428,7 @@ var TopoloClient = class _TopoloClient {
   listBundledServices() {
     const apps = Object.values(APPLICATIONS);
     return apps.map((app) => ({
-      serviceId: app.id,
+      appId: app.id,
       slug: app.id,
       name: app.name ?? app.id,
       description: null,
@@ -2477,11 +2478,11 @@ var TopoloClient = class _TopoloClient {
     };
   }
 };
-function resolveConfiguredServiceId(slug, serviceIds) {
+function resolveConfiguredAppId(slug, appIds) {
   for (const serviceKey of serviceKeyCandidates2(slug)) {
-    const configured = serviceIds?.[serviceKey];
+    const configured = appIds?.[serviceKey];
     if (typeof configured === "string" && configured.trim()) return configured.trim();
-    const envKey = `TOPOLO_SERVICE_ID_${serviceKey.replace(/\./g, "_").toUpperCase()}`;
+    const envKey = `TOPOLO_APP_ID_${serviceKey.replace(/\./g, "_").toUpperCase()}`;
     const envValue = typeof process !== "undefined" ? process.env?.[envKey] : void 0;
     if (typeof envValue === "string" && envValue.trim()) return envValue.trim();
   }
@@ -2565,7 +2566,7 @@ function catalogEntryMatches(entry, needle) {
   return catalogEntryLookupKeys(entry).includes(needle);
 }
 function catalogEntryLookupKeys(entry) {
-  const values = [entry.serviceId, entry.slug, entry.name].filter((value) => typeof value === "string" && value.trim().length > 0);
+  const values = [entry.appId, entry.slug, entry.name].filter((value) => typeof value === "string" && value.trim().length > 0);
   const keys = /* @__PURE__ */ new Set();
   for (const value of values) {
     const normalized = normalizeLookupKey(value);
@@ -2581,10 +2582,10 @@ function normalizeActionCatalogEntry(item) {
   const a = item;
   const actionId = pickActionString(a.action_id) ?? pickActionString(a.actionId);
   const name = pickActionString(a.name);
-  const serviceId = pickActionString(a.service_id) ?? pickActionString(a.serviceId);
+  const appId = pickActionString(a.app_id) ?? pickActionString(a.appId);
   const method = pickActionString(a.method)?.toUpperCase();
   const path = pickActionString(a.path);
-  if (!actionId || !name || !serviceId || !method || !path || !isHttpMethod(method)) {
+  if (!actionId || !name || !appId || !method || !path || !isHttpMethod(method)) {
     return null;
   }
   return {
@@ -2593,7 +2594,7 @@ function normalizeActionCatalogEntry(item) {
     toolName: pickActionString(a.tool_name) ?? pickActionString(a.toolName) ?? null,
     title: pickActionString(a.title) ?? name,
     description: pickActionString(a.description) ?? "",
-    serviceId,
+    appId,
     serviceSlug: pickActionString(a.service_slug) ?? pickActionString(a.serviceSlug) ?? null,
     serviceName: pickActionString(a.service_name) ?? pickActionString(a.serviceName) ?? null,
     method,
@@ -2605,6 +2606,7 @@ function normalizeActionCatalogEntry(item) {
     readOnly: Boolean(a.read_only ?? a.readOnly),
     destructive: Boolean(a.destructive),
     requiresConfirmation: Boolean(a.requires_confirmation ?? a.requiresConfirmation),
+    agentAccess: pickAgentAccess(a.agent_access ?? a.agentAccess),
     status: pickActionString(a.status),
     sourceRevision: pickActionString(a.source_revision) ?? pickActionString(a.sourceRevision)
   };
@@ -2615,6 +2617,9 @@ function isHttpMethod(value) {
 function pickActionString(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
+function pickAgentAccess(value) {
+  return value === "auto" || value === "confirm" || value === "off" ? value : null;
+}
 function plainObject(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
@@ -2706,7 +2711,6 @@ var CrmModule = class {
   constructor(client) {
     this.client = client;
   }
-  client;
   async listContacts(options = {}) {
     const res = await this.client.request({
       service: "crm",
@@ -2752,7 +2756,6 @@ var IdentityModule = class {
   constructor(client) {
     this.client = client;
   }
-  client;
   /** Returns the resolved user, organization, and permission set for the
    *  current credential. Equivalent to `TopoloClient.introspect()` — exposed
    *  on this module for symmetry with the other domain modules. */
@@ -2803,13 +2806,13 @@ function hasScope(set, required) {
   if (set.permissions.includes("*")) return true;
   const [servicePart, actionPart] = splitPermission(required);
   if (!servicePart) return set.permissions.includes(required);
-  const [serviceId, resource] = splitService(servicePart);
+  const [appId, resource] = splitService(servicePart);
   const candidates = new Set([
     required,
     "*",
-    serviceId ? `${serviceId}.*` : null,
-    serviceId && resource && actionPart ? `${serviceId}.${resource}:*` : null,
-    serviceId && resource && actionPart ? `${serviceId}.${resource}.${actionPart}` : null,
+    appId ? `${appId}.*` : null,
+    appId && resource && actionPart ? `${appId}.${resource}:*` : null,
+    appId && resource && actionPart ? `${appId}.${resource}.${actionPart}` : null,
     resource && actionPart ? `${resource}:*` : null,
     resource && actionPart ? `${resource}.${actionPart}` : null,
     resource && actionPart ? `${resource}:${actionPart}` : null
@@ -2861,10 +2864,10 @@ var TOOLS = [
     },
     handler: async (topolo) => {
       const services = (await topolo.client.listServices()).map((entry) => {
-        const id = displayServiceId(entry);
+        const id = displayAppId(entry);
         return {
           id,
-          serviceId: entry.serviceId,
+          appId: entry.appId,
           slug: entry.slug,
           name: entry.name,
           apiBaseUrl: entry.apiBaseUrl,
@@ -2891,7 +2894,7 @@ var TOOLS = [
       properties: {
         service: {
           type: "string",
-          description: "Optional service id, slug, or name filter."
+          description: "Optional app id, slug, or name filter."
         }
       },
       additionalProperties: false
@@ -2920,7 +2923,7 @@ var TOOLS = [
   {
     name: "topolo_get_application",
     title: "Describe one Topolo platform application",
-    description: "Returns one live application catalog entry (service id, slug, name, API URL, launch URL, status). Accepts the service id, slug, or name. Resolved against the live registry so newly-registered apps work without a client rebuild.",
+    description: "Returns one live application catalog entry (app id, slug, name, API URL, launch URL, status). Accepts the app id, slug, or name. Resolved against the live registry so newly-registered apps work without a client rebuild.",
     requiredScopes: [],
     destructive: false,
     inputSchema: {
@@ -2928,7 +2931,7 @@ var TOOLS = [
       properties: {
         application: {
           type: "string",
-          description: "Application identifier: service id, slug, or name from topolo_list_applications."
+          description: "Application identifier: app id, slug, or name from topolo_list_applications."
         }
       },
       required: ["application"],
@@ -2942,10 +2945,10 @@ var TOOLS = [
       const needle = application.trim().toLowerCase();
       const catalog = await topolo.client.listServices();
       const match = catalog.find(
-        (e) => e.serviceId.toLowerCase() === needle || e.slug && e.slug.toLowerCase() === needle || e.name && e.name.toLowerCase() === needle
+        (e) => e.appId.toLowerCase() === needle || e.slug && e.slug.toLowerCase() === needle || e.name && e.name.toLowerCase() === needle
       );
       if (!match) {
-        const known = catalog.map((e) => e.slug || e.serviceId).sort().filter((value) => typeof value === "string" && value.length > 0);
+        const known = catalog.map((e) => e.slug || e.appId).sort().filter((value) => typeof value === "string" && value.length > 0);
         throw new Error(
           `Unknown application "${application}". ${formatKnownValues(known, "applications")}`
         );
@@ -3128,14 +3131,20 @@ async function buildTopoloTools(topolo, scopes, tools = TOOLS) {
   const actionTools = actionsToToolDefs(actions);
   return filterToolsByScopes([...baseTools, ...actionTools], scopes);
 }
+function effectiveAgentAccess(a) {
+  if (a.agentAccess) return a.agentAccess;
+  if (a.destructive) return "off";
+  if (a.readOnly && !a.requiresConfirmation) return "auto";
+  return "confirm";
+}
 function actionsToToolDefs(actions) {
-  return actions.map((action) => ({
+  return actions.map((action) => ({ action, access: effectiveAgentAccess(action) })).filter(({ access }) => access !== "off").map(({ action, access }) => ({
     name: action.toolName || toolNameForAction(action),
     title: action.title,
     description: action.description,
     requiredScopes: action.requiredPermission ? [action.requiredPermission] : [],
-    destructive: action.destructive || action.requiresConfirmation || action.method !== "GET",
-    inputSchema: actionInputSchema(action),
+    destructive: access === "confirm",
+    inputSchema: actionInputSchema(action, access),
     handler: async (topolo, args) => {
       const confirm = Boolean(args["confirm"]);
       const input = { ...args };
@@ -3145,11 +3154,11 @@ function actionsToToolDefs(actions) {
   }));
 }
 function toolNameForAction(action) {
-  const service = (action.serviceSlug || action.serviceId || "service").replace(/^topolo-/, "").toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
+  const service = (action.serviceSlug || action.appId || "service").replace(/^topolo-/, "").toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
   const name = action.name.toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
   return ["topolo", service, name].filter(Boolean).join("_").slice(0, 96);
 }
-function actionInputSchema(action) {
+function actionInputSchema(action, access = "auto") {
   const schema = {
     type: "object",
     properties: {},
@@ -3157,7 +3166,7 @@ function actionInputSchema(action) {
     ...action.inputSchema
   };
   const properties = schema.properties && typeof schema.properties === "object" && !Array.isArray(schema.properties) ? { ...schema.properties } : {};
-  if (action.requiresConfirmation || action.method !== "GET") {
+  if (access === "confirm") {
     properties.confirm = {
       type: "boolean",
       description: "Required for mutating actions. Explicit human-in-the-loop acknowledgement."
@@ -3206,18 +3215,18 @@ function statusesAtOrWorse(threshold) {
   if (threshold === "needs_review") return ["missing", "needs_review"];
   return ["missing", "needs_review", "partial"];
 }
-function displayServiceId(entry) {
-  for (const value of [entry.slug, entry.name, entry.serviceId]) {
+function displayAppId(entry) {
+  for (const value of [entry.slug, entry.name, entry.appId]) {
     if (typeof value !== "string" || !value.trim()) continue;
-    for (const candidate of serviceIdCandidates(value)) {
+    for (const candidate of appIdCandidates(value)) {
       if (Object.prototype.hasOwnProperty.call(DEFAULT_SERVICE_URLS, candidate)) {
         return candidate;
       }
     }
   }
-  return serviceIdCandidates(entry.slug || entry.serviceId)[0] || entry.serviceId;
+  return appIdCandidates(entry.slug || entry.appId)[0] || entry.appId;
 }
-function serviceIdCandidates(value) {
+function appIdCandidates(value) {
   const normalized = value.trim().toLowerCase().replace(/\s+/g, "-");
   const withoutTopolo = normalized.startsWith("topolo-") ? normalized.slice("topolo-".length) : normalized;
   return [.../* @__PURE__ */ new Set([