@topolo/mcp 0.9.0 → 0.9.2

package/dist/index.js

@@ -3,7 +3,7 @@
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 
-// ../../../topolo-platform/packages/topolo-sdk/dist/index.js
+// ../topolo-sdk/dist/index.js
 function applyAuthHeaders(headers, credential) {
   if (credential.kind === "api_key") {
     headers.set("X-Api-Key", credential.apiKey);
@@ -69,6 +69,7 @@ var APP_API_URLS = {
   auth: "https://auth.topolo.app",
   backup: "https://backup.topolo.app",
   books: "https://books.topolo.app",
+  brand: "https://brand.topolo.app",
   bugfix: "https://bugfix.topolo.app",
   bytes: "https://bytes.topolo.app",
   calendar: "https://calendar.topolo.app",
@@ -249,6 +250,38 @@ var APPLICATIONS = {
       }
     ]
   },
+  "brand": {
+    "id": "brand",
+    "appDir": "TopoloBrand",
+    "name": "topolo-brand",
+    "packageName": "@topolo/topolo-brand",
+    "productionUrl": "https://brand.topolo.app",
+    "services": [
+      "brand"
+    ],
+    "deployTargets": [
+      {
+        "name": "topolo-brand",
+        "kind": "worker",
+        "apiUrl": "https://brand.topolo.app",
+        "domains": [
+          "brand.topolo.app"
+        ],
+        "routes": [
+          "brand.topolo.app"
+        ],
+        "appId": "brand"
+      },
+      {
+        "name": "topolo-brand-api",
+        "kind": "worker",
+        "apiUrl": null,
+        "domains": [],
+        "routes": [],
+        "appId": null
+      }
+    ]
+  },
   "bugfix": {
     "id": "bugfix",
     "appDir": "TopoloBugFix",
@@ -2363,6 +2396,8 @@ var TopoloClient = class _TopoloClient {
   requireConfirmForWrites;
   timeoutMs;
   fetchImpl;
+  credentialProvider;
+  credentialLoadInFlight = null;
   refreshCredential;
   refreshInFlight = null;
   debug;
@@ -2390,6 +2425,7 @@ var TopoloClient = class _TopoloClient {
     this.requireConfirmForWrites = options.requireConfirmForWrites !== false;
     this.timeoutMs = options.timeoutMs ?? 3e4;
     this.fetchImpl = options.fetch ?? fetch;
+    this.credentialProvider = options.credentialProvider;
     this.refreshCredential = options.refreshCredential;
     this.debug = options.debug;
   }
@@ -2412,6 +2448,7 @@ var TopoloClient = class _TopoloClient {
         `Mutating ${method} requests require { confirm: true }. This guardrail prevents agents from issuing writes without an explicit human-in-the-loop acknowledgement.`
       );
     }
+    await this.loadCurrentCredential();
     const resolvedService = opts.baseUrl ? { serviceKey: normalizeLookupKey(opts.service), baseUrl: requireHttpOrigin(opts.baseUrl) } : await this.resolveRequestService(opts.service);
     const baseUrl = resolvedService.baseUrl;
     const url = new URL(opts.path, baseUrl.endsWith("/") ? baseUrl : `${baseUrl}/`);
@@ -2523,6 +2560,19 @@ var TopoloClient = class _TopoloClient {
     });
     return parsed;
   }
+  async loadCurrentCredential() {
+    if (!this.credentialProvider) return;
+    this.credentialLoadInFlight ??= this.credentialProvider().then((credential) => {
+      if (!credential) {
+        throw new TopoloAuthError("The configured Topolo credential is no longer available.");
+      }
+      this.credential = credential;
+      return credential;
+    }).finally(() => {
+      this.credentialLoadInFlight = null;
+    });
+    await this.credentialLoadInFlight;
+  }
   async refreshRejectedAccessToken(attemptedAccessToken) {
     if (this.credential.kind === "access_token" && this.credential.accessToken !== attemptedAccessToken) {
       return this.credential;
@@ -3369,7 +3419,7 @@ function createTopolo(options) {
   };
 }
 
-// ../../../topolo-platform/packages/topolo-sdk/dist/node/credential-store.js
+// ../topolo-sdk/dist/node/credential-store.js
 import { mkdir, readFile, writeFile, chmod } from "fs/promises";
 import { existsSync } from "fs";
 import { homedir, platform } from "os";
@@ -3407,6 +3457,7 @@ var APP_API_URLS2 = {
   auth: "https://auth.topolo.app",
   backup: "https://backup.topolo.app",
   books: "https://books.topolo.app",
+  brand: "https://brand.topolo.app",
   bugfix: "https://bugfix.topolo.app",
   bytes: "https://bytes.topolo.app",
   calendar: "https://calendar.topolo.app",
@@ -3663,9 +3714,9 @@ async function refreshCredentialIfNeeded(environment = selectedEnvironment(), op
   const profile = profileForEnvironment(config, environment);
   const cred = profile.credential;
   if (!cred || cred.kind !== "access_token") return cred ?? null;
-  if (!cred.refreshToken || !cred.expiresAt || !profile.oauthClientId) return cred;
+  if (!cred.refreshToken || !profile.oauthClientId) return cred;
   const now = Math.floor(Date.now() / 1e3);
-  if (!options.force && cred.expiresAt - REFRESH_SKEW_SECONDS > now) return cred;
+  if (!options.force && cred.expiresAt && cred.expiresAt - REFRESH_SKEW_SECONDS > now) return cred;
   try {
     const oauth = new TopoloOAuth({
       serviceUrls: resolveServiceUrls(profile.serviceUrls, environment)
@@ -3706,9 +3757,9 @@ async function refreshContextCredentialIfNeeded(environment, key, options = {})
   const credential = context?.credential;
   if (!credential || credential.kind !== "access_token") return credential ?? null;
   const oauthClientId = context.oauthClientId ?? profile.oauthClientId;
-  if (!credential.refreshToken || !credential.expiresAt || !oauthClientId) return credential;
+  if (!credential.refreshToken || !oauthClientId) return credential;
   const now = Math.floor(Date.now() / 1e3);
-  if (!options.force && credential.expiresAt - REFRESH_SKEW_SECONDS > now) return credential;
+  if (!options.force && credential.expiresAt && credential.expiresAt - REFRESH_SKEW_SECONDS > now) return credential;
   try {
     const oauth = new TopoloOAuth({
       serviceUrls: resolveServiceUrls(profile.serviceUrls, environment)
@@ -4529,6 +4580,10 @@ async function resolveMcpCredential(environment, selector = process.env.TOPOLO_C
     return {
       credential,
       contextKey,
+      credentialProvider: () => dependencies.refreshContextCredentialIfNeeded(
+        environment,
+        contextKey
+      ),
       refreshCredential: () => dependencies.refreshContextCredentialIfNeeded(
         environment,
         contextKey,
@@ -4539,6 +4594,7 @@ async function resolveMcpCredential(environment, selector = process.env.TOPOLO_C
   return {
     credential: await dependencies.refreshCredentialIfNeeded(environment),
     contextKey: null,
+    credentialProvider: () => dependencies.refreshCredentialIfNeeded(environment),
     refreshCredential: () => dependencies.refreshCredentialIfNeeded(environment, { force: true })
   };
 }
@@ -4567,6 +4623,7 @@ async function main() {
     },
     serviceUrls,
     requireConfirmForWrites: true,
+    ...resolvedCredential.credentialProvider ? { credentialProvider: resolvedCredential.credentialProvider } : {},
     ...resolvedCredential.refreshCredential ? { refreshCredential: resolvedCredential.refreshCredential } : {}
   });
   const scopes = await loadScopes(topolo);

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "@topolo/mcp",
-  "version": "0.9.0",
+  "version": "0.9.2",
   "description": "Model Context Protocol server for the Topolo platform. Exposes scope-gated tools that third-party agents (Claude, Codex, etc.) can call natively.",
   "type": "module",
   "bin": {
-    "topolo-mcp": "./dist/index.js"
+    "topolo-mcp": "dist/index.js"
   },
   "exports": {
     "./dispatch": {
@@ -36,7 +36,7 @@
     "@modelcontextprotocol/sdk": "^1.0.0"
   },
   "peerDependencies": {
-    "@topolo/sdk": "^0.9.0"
+    "@topolo/sdk": "^0.9.2"
   },
   "devDependencies": {
     "@topolo/sdk": "file:../topolo-sdk",