@topolo/mcp 0.9.1 → 0.9.3

package/dist/index.js

@@ -3,7 +3,7 @@
 // src/index.ts
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 
-// ../../../topolo-platform/packages/topolo-sdk/dist/index.js
+// ../topolo-sdk/dist/index.js
 function applyAuthHeaders(headers, credential) {
   if (credential.kind === "api_key") {
     headers.set("X-Api-Key", credential.apiKey);
@@ -69,6 +69,7 @@ var APP_API_URLS = {
   auth: "https://auth.topolo.app",
   backup: "https://backup.topolo.app",
   books: "https://books.topolo.app",
+  brand: "https://brand.topolo.app",
   bugfix: "https://bugfix.topolo.app",
   bytes: "https://bytes.topolo.app",
   calendar: "https://calendar.topolo.app",
@@ -130,7 +131,9 @@ var APPLICATIONS = {
         "domains": [
           "admin.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "admin.topolo.app"
+        ],
         "appId": null
       },
       {
@@ -178,7 +181,7 @@ var APPLICATIONS = {
     "appDir": "TopoloAuth",
     "name": "topolo-auth",
     "packageName": "topolo-auth",
-    "productionUrl": "https://auth.topolo.app/login",
+    "productionUrl": "https://auth.topolo.app",
     "services": [
       "auth"
     ],
@@ -214,7 +217,9 @@ var APPLICATIONS = {
         "domains": [
           "backup.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "backup.topolo.app"
+        ],
         "appId": "backup"
       }
     ]
@@ -249,6 +254,36 @@ var APPLICATIONS = {
       }
     ]
   },
+  "brand": {
+    "id": "brand",
+    "appDir": "TopoloBrand",
+    "name": "topolo-brand",
+    "packageName": "@topolo/topolo-brand",
+    "productionUrl": "https://brand.topolo.app",
+    "services": [
+      "brand"
+    ],
+    "deployTargets": [
+      {
+        "name": "topolo-brand",
+        "kind": "worker",
+        "apiUrl": "https://brand.topolo.app",
+        "domains": [
+          "brand.topolo.app"
+        ],
+        "routes": [],
+        "appId": "brand"
+      },
+      {
+        "name": "topolo-brand-api",
+        "kind": "worker",
+        "apiUrl": null,
+        "domains": [],
+        "routes": [],
+        "appId": null
+      }
+    ]
+  },
   "bugfix": {
     "id": "bugfix",
     "appDir": "TopoloBugFix",
@@ -288,7 +323,9 @@ var APPLICATIONS = {
         "domains": [
           "bytes.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "bytes.topolo.app"
+        ],
         "appId": "bytes"
       },
       {
@@ -318,7 +355,9 @@ var APPLICATIONS = {
         "domains": [
           "calendar.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "calendar.topolo.app"
+        ],
         "appId": "calendar"
       },
       {
@@ -348,9 +387,7 @@ var APPLICATIONS = {
         "domains": [
           "campaigns.topolo.app"
         ],
-        "routes": [
-          "campaigns.topolo.app"
-        ],
+        "routes": [],
         "appId": "campaigns"
       },
       {
@@ -440,7 +477,9 @@ var APPLICATIONS = {
         "domains": [
           "guest.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "guest.topolo.app"
+        ],
         "appId": null
       },
       {
@@ -450,7 +489,9 @@ var APPLICATIONS = {
         "domains": [
           "commerce.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "commerce.topolo.app"
+        ],
         "appId": "commerce"
       },
       {
@@ -460,7 +501,9 @@ var APPLICATIONS = {
         "domains": [
           "station-commerce.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "station-commerce.topolo.app"
+        ],
         "appId": null
       }
     ]
@@ -638,7 +681,9 @@ var APPLICATIONS = {
         "domains": [
           "docs.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "docs.topolo.app"
+        ],
         "appId": null
       },
       {
@@ -668,7 +713,9 @@ var APPLICATIONS = {
         "domains": [
           "feed-analytics-api.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "feed-analytics-api.topolo.app"
+        ],
         "appId": null
       },
       {
@@ -678,7 +725,9 @@ var APPLICATIONS = {
         "domains": [
           "feed-api.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "feed-api.topolo.app"
+        ],
         "appId": null
       },
       {
@@ -688,7 +737,9 @@ var APPLICATIONS = {
         "domains": [
           "feed.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "feed.topolo.app"
+        ],
         "appId": "feed"
       }
     ]
@@ -800,7 +851,9 @@ var APPLICATIONS = {
         "domains": [
           "home.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "home.topolo.app"
+        ],
         "appId": "home"
       },
       {
@@ -890,7 +943,9 @@ var APPLICATIONS = {
         "domains": [
           "learn.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "learn.topolo.app"
+        ],
         "appId": "learn"
       },
       {
@@ -982,7 +1037,9 @@ var APPLICATIONS = {
         "domains": [
           "mdm.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "mdm.topolo.app"
+        ],
         "appId": "mdm"
       }
     ]
@@ -1004,7 +1061,9 @@ var APPLICATIONS = {
         "domains": [
           "messages.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "messages.topolo.app"
+        ],
         "appId": "messages"
       },
       {
@@ -1038,11 +1097,13 @@ var APPLICATIONS = {
       {
         "name": "topolo-nexus-dashboard",
         "kind": "worker",
-        "apiUrl": null,
+        "apiUrl": "https://nexus.topolo.app",
         "domains": [
           "nexus.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "nexus.topolo.app"
+        ],
         "appId": null
       },
       {
@@ -1170,7 +1231,9 @@ var APPLICATIONS = {
         "domains": [
           "p2p.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "p2p.topolo.app"
+        ],
         "appId": "p2p"
       },
       {
@@ -1367,7 +1430,9 @@ var APPLICATIONS = {
         "domains": [
           "studio.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "studio.topolo.app"
+        ],
         "appId": "social_studio"
       },
       {
@@ -1405,7 +1470,9 @@ var APPLICATIONS = {
         "domains": [
           "socialize.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "socialize.topolo.app"
+        ],
         "appId": "socialize"
       },
       {
@@ -1415,7 +1482,9 @@ var APPLICATIONS = {
         "domains": [
           "socialize-api.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "socialize-api.topolo.app"
+        ],
         "appId": null
       },
       {
@@ -1475,7 +1544,9 @@ var APPLICATIONS = {
         "domains": [
           "status.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "status.topolo.app"
+        ],
         "appId": "status"
       }
     ]
@@ -1591,7 +1662,9 @@ var APPLICATIONS = {
         "domains": [
           "voice.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "voice.topolo.app"
+        ],
         "appId": "voice"
       },
       {
@@ -1642,7 +1715,9 @@ var APPLICATIONS = {
         "domains": [
           "web.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "web.topolo.app"
+        ],
         "appId": "web"
       }
     ]
@@ -1719,7 +1794,7 @@ var APPLICATION_REQUIREMENTS = [
       "Use TopoloAppMetricCard, TopoloAppEmptyState, TopoloAppStatusBadge, TopoloAppGrid, and TopoloAppSection for repeated app body patterns",
       "Keep visual QA fixtures available through visualQa=1 or __devpreview=1 so screenshot checks do not depend on live API state",
       "Keep mobile and desktop shell behavior aligned with the platform UI kit",
-      "Constrain app-owned workspace wrappers with min-width: 0, width: auto, and viewport-aware max-width so shell padding cannot create page-level horizontal overflow"
+      "Constrain the app workspace-view layout wrappers with min-width: 0, width: auto, and viewport-aware max-width so shell padding cannot create page-level horizontal overflow"
     ]
   },
   {
@@ -2363,6 +2438,8 @@ var TopoloClient = class _TopoloClient {
   requireConfirmForWrites;
   timeoutMs;
   fetchImpl;
+  credentialProvider;
+  credentialLoadInFlight = null;
   refreshCredential;
   refreshInFlight = null;
   debug;
@@ -2390,6 +2467,7 @@ var TopoloClient = class _TopoloClient {
     this.requireConfirmForWrites = options.requireConfirmForWrites !== false;
     this.timeoutMs = options.timeoutMs ?? 3e4;
     this.fetchImpl = options.fetch ?? fetch;
+    this.credentialProvider = options.credentialProvider;
     this.refreshCredential = options.refreshCredential;
     this.debug = options.debug;
   }
@@ -2412,6 +2490,7 @@ var TopoloClient = class _TopoloClient {
         `Mutating ${method} requests require { confirm: true }. This guardrail prevents agents from issuing writes without an explicit human-in-the-loop acknowledgement.`
       );
     }
+    await this.loadCurrentCredential();
     const resolvedService = opts.baseUrl ? { serviceKey: normalizeLookupKey(opts.service), baseUrl: requireHttpOrigin(opts.baseUrl) } : await this.resolveRequestService(opts.service);
     const baseUrl = resolvedService.baseUrl;
     const url = new URL(opts.path, baseUrl.endsWith("/") ? baseUrl : `${baseUrl}/`);
@@ -2523,6 +2602,19 @@ var TopoloClient = class _TopoloClient {
     });
     return parsed;
   }
+  async loadCurrentCredential() {
+    if (!this.credentialProvider) return;
+    this.credentialLoadInFlight ??= this.credentialProvider().then((credential) => {
+      if (!credential) {
+        throw new TopoloAuthError("The configured Topolo credential is no longer available.");
+      }
+      this.credential = credential;
+      return credential;
+    }).finally(() => {
+      this.credentialLoadInFlight = null;
+    });
+    await this.credentialLoadInFlight;
+  }
   async refreshRejectedAccessToken(attemptedAccessToken) {
     if (this.credential.kind === "access_token" && this.credential.accessToken !== attemptedAccessToken) {
       return this.credential;
@@ -3191,6 +3283,7 @@ function normalizeActionCatalogEntry(item) {
     permissionName: pickActionString(a.permission_name) ?? pickActionString(a.permissionName) ?? "",
     requiredPermission: pickActionString(a.required_permission) ?? pickActionString(a.requiredPermission) ?? "",
     authorizationMode: pickAuthorizationMode(a.authorization_mode ?? a.authorizationMode),
+    allowedServices: stringArray(a.allowed_services ?? a.allowedServices),
     inputSchema: plainObject(a.input_schema ?? a.inputSchema),
     outputSchema: plainObject(a.output_schema ?? a.outputSchema),
     agentContract: plainObject(a.agent_contract ?? a.agentContract),
@@ -3212,7 +3305,7 @@ function pickAgentAccess(value) {
   return value === "auto" || value === "confirm" || value === "off" ? value : null;
 }
 function pickAuthorizationMode(value) {
-  return value === "runtime" ? "runtime" : "static";
+  return value === "runtime" || value === "public" || value === "service" ? value : "static";
 }
 function plainObject(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : {};
@@ -3369,7 +3462,7 @@ function createTopolo(options) {
   };
 }
 
-// ../../../topolo-platform/packages/topolo-sdk/dist/node/credential-store.js
+// ../topolo-sdk/dist/node/credential-store.js
 import { mkdir, readFile, writeFile, chmod } from "fs/promises";
 import { existsSync } from "fs";
 import { homedir, platform } from "os";
@@ -3407,6 +3500,7 @@ var APP_API_URLS2 = {
   auth: "https://auth.topolo.app",
   backup: "https://backup.topolo.app",
   books: "https://books.topolo.app",
+  brand: "https://brand.topolo.app",
   bugfix: "https://bugfix.topolo.app",
   bytes: "https://bytes.topolo.app",
   calendar: "https://calendar.topolo.app",
@@ -3663,9 +3757,9 @@ async function refreshCredentialIfNeeded(environment = selectedEnvironment(), op
   const profile = profileForEnvironment(config, environment);
   const cred = profile.credential;
   if (!cred || cred.kind !== "access_token") return cred ?? null;
-  if (!cred.refreshToken || !cred.expiresAt || !profile.oauthClientId) return cred;
+  if (!cred.refreshToken || !profile.oauthClientId) return cred;
   const now = Math.floor(Date.now() / 1e3);
-  if (!options.force && cred.expiresAt - REFRESH_SKEW_SECONDS > now) return cred;
+  if (!options.force && cred.expiresAt && cred.expiresAt - REFRESH_SKEW_SECONDS > now) return cred;
   try {
     const oauth = new TopoloOAuth({
       serviceUrls: resolveServiceUrls(profile.serviceUrls, environment)
@@ -3706,9 +3800,9 @@ async function refreshContextCredentialIfNeeded(environment, key, options = {})
   const credential = context?.credential;
   if (!credential || credential.kind !== "access_token") return credential ?? null;
   const oauthClientId = context.oauthClientId ?? profile.oauthClientId;
-  if (!credential.refreshToken || !credential.expiresAt || !oauthClientId) return credential;
+  if (!credential.refreshToken || !oauthClientId) return credential;
   const now = Math.floor(Date.now() / 1e3);
-  if (!options.force && credential.expiresAt - REFRESH_SKEW_SECONDS > now) return credential;
+  if (!options.force && credential.expiresAt && credential.expiresAt - REFRESH_SKEW_SECONDS > now) return credential;
   try {
     const oauth = new TopoloOAuth({
       serviceUrls: resolveServiceUrls(profile.serviceUrls, environment)
@@ -3958,7 +4052,7 @@ var TOOLS = [
       properties: {
         actionId: { type: "string", minLength: 1 },
         input: { type: "object", additionalProperties: true },
-        resourceType: { type: "string", description: "Optional app-local resource alias, such as workspace." },
+        resourceType: { type: "string", description: "Optional resource-scoping alias published in the app resource catalog (e.g. workspace, brand, merchant)." },
         resourceId: { type: "string", description: "Resource id. Required when resourceType is provided." }
       },
       required: ["actionId"],
@@ -3990,7 +4084,7 @@ var TOOLS = [
       properties: {
         actionId: { type: "string", minLength: 1 },
         input: { type: "object", additionalProperties: true },
-        resourceType: { type: "string", description: "Optional app-local resource alias, such as workspace." },
+        resourceType: { type: "string", description: "Optional resource-scoping alias published in the app resource catalog (e.g. workspace, brand, merchant)." },
         resourceId: { type: "string", description: "Resource id. Required when resourceType is provided." },
         confirm: { type: "boolean" }
       },
@@ -4051,7 +4145,7 @@ var TOOLS = [
       properties: {
         actionId: { type: "string", minLength: 1 },
         input: { type: "object", additionalProperties: true },
-        resourceType: { type: "string", description: "Optional app-local resource alias, such as workspace." },
+        resourceType: { type: "string", description: "Optional resource-scoping alias published in the app resource catalog (e.g. workspace, brand, merchant)." },
         resourceId: { type: "string", description: "Resource id. Required when resourceType is provided." },
         confirm: { type: "boolean", description: "Include confirmation in the plan without executing the action." }
       },
@@ -4529,6 +4623,10 @@ async function resolveMcpCredential(environment, selector = process.env.TOPOLO_C
     return {
       credential,
       contextKey,
+      credentialProvider: () => dependencies.refreshContextCredentialIfNeeded(
+        environment,
+        contextKey
+      ),
       refreshCredential: () => dependencies.refreshContextCredentialIfNeeded(
         environment,
         contextKey,
@@ -4539,6 +4637,7 @@ async function resolveMcpCredential(environment, selector = process.env.TOPOLO_C
   return {
     credential: await dependencies.refreshCredentialIfNeeded(environment),
     contextKey: null,
+    credentialProvider: () => dependencies.refreshCredentialIfNeeded(environment),
     refreshCredential: () => dependencies.refreshCredentialIfNeeded(environment, { force: true })
   };
 }
@@ -4567,6 +4666,7 @@ async function main() {
     },
     serviceUrls,
     requireConfirmForWrites: true,
+    ...resolvedCredential.credentialProvider ? { credentialProvider: resolvedCredential.credentialProvider } : {},
     ...resolvedCredential.refreshCredential ? { refreshCredential: resolvedCredential.refreshCredential } : {}
   });
   const scopes = await loadScopes(topolo);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@topolo/mcp",
-  "version": "0.9.1",
+  "version": "0.9.3",
   "description": "Model Context Protocol server for the Topolo platform. Exposes scope-gated tools that third-party agents (Claude, Codex, etc.) can call natively.",
   "type": "module",
   "bin": {
@@ -36,7 +36,7 @@
     "@modelcontextprotocol/sdk": "^1.0.0"
   },
   "peerDependencies": {
-    "@topolo/sdk": "^0.9.1"
+    "@topolo/sdk": "^0.9.4"
   },
   "devDependencies": {
     "@topolo/sdk": "file:../topolo-sdk",