@topolo/sdk 0.4.8 → 0.4.9

package/dist/index.cjs

@@ -140,7 +140,7 @@ var SERVICES = {
   mail: "https://mail.topolo.app",
   mdm: "https://mdm.topolo.app",
   messages: "https://messages.topolo.app",
-  nexus: "https://nexus-api.topolo.app",
+  nexus: "https://nexus.topolo.app",
   notify: "https://notify.topolo.app",
   observability_watch: "https://observability-watch.topolo.app",
   one: "https://www.topolo.app",
@@ -691,8 +691,10 @@ var APPLICATIONS = {
       {
         "name": "topolo-feed-api",
         "kind": "worker",
-        "apiUrl": null,
-        "domains": [],
+        "apiUrl": "https://feed-api.topolo.app",
+        "domains": [
+          "feed-api.topolo.app"
+        ],
         "routes": [],
         "serviceId": null
       },
@@ -1063,9 +1065,9 @@ var APPLICATIONS = {
       {
         "name": "topolo-nexus-gateway",
         "kind": "worker",
-        "apiUrl": "https://nexus-api.topolo.app",
+        "apiUrl": "https://nexus.topolo.app",
         "domains": [
-          "nexus-api.topolo.app"
+          "nexus.topolo.app"
         ],
         "routes": [],
         "serviceId": "nexus"
@@ -1425,8 +1427,10 @@ var APPLICATIONS = {
       {
         "name": "topolo-socialize-api",
         "kind": "worker",
-        "apiUrl": null,
-        "domains": [],
+        "apiUrl": "https://socialize-api.topolo.app",
+        "domains": [
+          "socialize-api.topolo.app"
+        ],
         "routes": [],
         "serviceId": null
       },
@@ -2276,10 +2280,14 @@ var TopoloClient = class _TopoloClient {
     if (!serviceKey) {
       throw new TopoloSdkError("unknown_service", "service is required");
     }
-    if (serviceKey === "auth") {
+    if (serviceKey === "auth" || serviceKey === "developers") {
       const overrideUrl = resolveConfiguredServiceUrl(serviceKey, this.serviceUrls);
       if (overrideUrl) return { serviceKey, baseUrl: overrideUrl };
-      return { serviceKey, baseUrl: DEFAULT_SERVICE_URLS.auth };
+      if (serviceKey === "developers") {
+        const derived = deriveDevelopersFromAuth(resolveConfiguredServiceUrl("auth", this.serviceUrls));
+        if (derived) return { serviceKey, baseUrl: derived };
+      }
+      return { serviceKey, baseUrl: DEFAULT_SERVICE_URLS[serviceKey] };
     }
     const live = await this.resolveLiveCallableService(serviceKey);
     if (live) {
@@ -2319,7 +2327,7 @@ var TopoloClient = class _TopoloClient {
     if (!normalized) return null;
     const configuredServiceId = resolveConfiguredServiceId(normalized, this.serviceIds);
     if (configuredServiceId) return configuredServiceId;
-    const authBase = resolveServiceUrl("auth", this.serviceUrls);
+    const authBase = resolveServiceUrl("developers", this.serviceUrls);
     const cacheKey = `${authBase}|${normalized}`;
     const now = Date.now();
     const cached = _TopoloClient.serviceIdCache.get(cacheKey);
@@ -2373,7 +2381,7 @@ var TopoloClient = class _TopoloClient {
     if (this.serviceCatalogCache && this.serviceCatalogCache.expiresAt > now) {
       return this.serviceCatalogCache.entries;
     }
-    const res = await this.request({ service: "auth", method: "GET", path: "/api/services/catalog" });
+    const res = await this.request({ service: "developers", method: "GET", path: "/api/services/catalog" });
     const raw = res.data?.services ?? res.services;
     if (!Array.isArray(raw)) {
       throw new TopoloSdkError(
@@ -2604,6 +2612,17 @@ function serviceKeyCandidates2(slug) {
 function normalizeLookupKey(value) {
   return String(value || "").trim().toLowerCase().replace(/\s+/g, "-");
 }
+function deriveDevelopersFromAuth(authUrl) {
+  if (!authUrl) return null;
+  try {
+    const url = new URL(authUrl);
+    if (!/^auth\./i.test(url.hostname)) return null;
+    url.hostname = url.hostname.replace(/^auth\./i, "developers.");
+    return url.origin;
+  } catch {
+    return null;
+  }
+}
 function catalogEntryMatches(entry, needle) {
   return catalogEntryLookupKeys(entry).includes(needle);
 }
@@ -2751,7 +2770,6 @@ var CrmModule = class {
   constructor(client) {
     this.client = client;
   }
-  client;
   async listContacts(options = {}) {
     const res = await this.client.request({
       service: "crm",
@@ -2799,7 +2817,6 @@ var IdentityModule = class {
   constructor(client) {
     this.client = client;
   }
-  client;
   /** Returns the resolved user, organization, and permission set for the
    *  current credential. Equivalent to `TopoloClient.introspect()` — exposed
    *  on this module for symmetry with the other domain modules. */
@@ -2813,7 +2830,6 @@ var P2PModule = class {
   constructor(client) {
     this.client = client;
   }
-  client;
   // Directory ----------------------------------------------------------------
   async listDirectory(options = {}) {
     const res = await this.client.request({

package/dist/index.d.cts

@@ -277,7 +277,7 @@ declare const SERVICES: {
     readonly mail: "https://mail.topolo.app";
     readonly mdm: "https://mdm.topolo.app";
     readonly messages: "https://messages.topolo.app";
-    readonly nexus: "https://nexus-api.topolo.app";
+    readonly nexus: "https://nexus.topolo.app";
     readonly notify: "https://notify.topolo.app";
     readonly observability_watch: "https://observability-watch.topolo.app";
     readonly one: "https://www.topolo.app";
@@ -702,8 +702,8 @@ declare const APPLICATIONS: {
         }, {
             readonly name: "topolo-feed-api";
             readonly kind: "worker";
-            readonly apiUrl: null;
-            readonly domains: readonly [];
+            readonly apiUrl: "https://feed-api.topolo.app";
+            readonly domains: readonly ["feed-api.topolo.app"];
             readonly routes: readonly [];
             readonly serviceId: null;
         }, {
@@ -985,8 +985,8 @@ declare const APPLICATIONS: {
         }, {
             readonly name: "topolo-nexus-gateway";
             readonly kind: "worker";
-            readonly apiUrl: "https://nexus-api.topolo.app";
-            readonly domains: readonly ["nexus-api.topolo.app"];
+            readonly apiUrl: "https://nexus.topolo.app";
+            readonly domains: readonly ["nexus.topolo.app"];
             readonly routes: readonly [];
             readonly serviceId: "nexus";
         }];
@@ -1245,8 +1245,8 @@ declare const APPLICATIONS: {
         }, {
             readonly name: "topolo-socialize-api";
             readonly kind: "worker";
-            readonly apiUrl: null;
-            readonly domains: readonly [];
+            readonly apiUrl: "https://socialize-api.topolo.app";
+            readonly domains: readonly ["socialize-api.topolo.app"];
             readonly routes: readonly [];
             readonly serviceId: null;
         }, {

package/dist/index.d.ts

@@ -277,7 +277,7 @@ declare const SERVICES: {
     readonly mail: "https://mail.topolo.app";
     readonly mdm: "https://mdm.topolo.app";
     readonly messages: "https://messages.topolo.app";
-    readonly nexus: "https://nexus-api.topolo.app";
+    readonly nexus: "https://nexus.topolo.app";
     readonly notify: "https://notify.topolo.app";
     readonly observability_watch: "https://observability-watch.topolo.app";
     readonly one: "https://www.topolo.app";
@@ -702,8 +702,8 @@ declare const APPLICATIONS: {
         }, {
             readonly name: "topolo-feed-api";
             readonly kind: "worker";
-            readonly apiUrl: null;
-            readonly domains: readonly [];
+            readonly apiUrl: "https://feed-api.topolo.app";
+            readonly domains: readonly ["feed-api.topolo.app"];
             readonly routes: readonly [];
             readonly serviceId: null;
         }, {
@@ -985,8 +985,8 @@ declare const APPLICATIONS: {
         }, {
             readonly name: "topolo-nexus-gateway";
             readonly kind: "worker";
-            readonly apiUrl: "https://nexus-api.topolo.app";
-            readonly domains: readonly ["nexus-api.topolo.app"];
+            readonly apiUrl: "https://nexus.topolo.app";
+            readonly domains: readonly ["nexus.topolo.app"];
             readonly routes: readonly [];
             readonly serviceId: "nexus";
         }];
@@ -1245,8 +1245,8 @@ declare const APPLICATIONS: {
         }, {
             readonly name: "topolo-socialize-api";
             readonly kind: "worker";
-            readonly apiUrl: null;
-            readonly domains: readonly [];
+            readonly apiUrl: "https://socialize-api.topolo.app";
+            readonly domains: readonly ["socialize-api.topolo.app"];
             readonly routes: readonly [];
             readonly serviceId: null;
         }, {

package/dist/index.js

@@ -85,7 +85,7 @@ var SERVICES = {
   mail: "https://mail.topolo.app",
   mdm: "https://mdm.topolo.app",
   messages: "https://messages.topolo.app",
-  nexus: "https://nexus-api.topolo.app",
+  nexus: "https://nexus.topolo.app",
   notify: "https://notify.topolo.app",
   observability_watch: "https://observability-watch.topolo.app",
   one: "https://www.topolo.app",
@@ -636,8 +636,10 @@ var APPLICATIONS = {
       {
         "name": "topolo-feed-api",
         "kind": "worker",
-        "apiUrl": null,
-        "domains": [],
+        "apiUrl": "https://feed-api.topolo.app",
+        "domains": [
+          "feed-api.topolo.app"
+        ],
         "routes": [],
         "serviceId": null
       },
@@ -1008,9 +1010,9 @@ var APPLICATIONS = {
       {
         "name": "topolo-nexus-gateway",
         "kind": "worker",
-        "apiUrl": "https://nexus-api.topolo.app",
+        "apiUrl": "https://nexus.topolo.app",
         "domains": [
-          "nexus-api.topolo.app"
+          "nexus.topolo.app"
         ],
         "routes": [],
         "serviceId": "nexus"
@@ -1370,8 +1372,10 @@ var APPLICATIONS = {
       {
         "name": "topolo-socialize-api",
         "kind": "worker",
-        "apiUrl": null,
-        "domains": [],
+        "apiUrl": "https://socialize-api.topolo.app",
+        "domains": [
+          "socialize-api.topolo.app"
+        ],
         "routes": [],
         "serviceId": null
       },
@@ -2221,10 +2225,14 @@ var TopoloClient = class _TopoloClient {
     if (!serviceKey) {
       throw new TopoloSdkError("unknown_service", "service is required");
     }
-    if (serviceKey === "auth") {
+    if (serviceKey === "auth" || serviceKey === "developers") {
       const overrideUrl = resolveConfiguredServiceUrl(serviceKey, this.serviceUrls);
       if (overrideUrl) return { serviceKey, baseUrl: overrideUrl };
-      return { serviceKey, baseUrl: DEFAULT_SERVICE_URLS.auth };
+      if (serviceKey === "developers") {
+        const derived = deriveDevelopersFromAuth(resolveConfiguredServiceUrl("auth", this.serviceUrls));
+        if (derived) return { serviceKey, baseUrl: derived };
+      }
+      return { serviceKey, baseUrl: DEFAULT_SERVICE_URLS[serviceKey] };
     }
     const live = await this.resolveLiveCallableService(serviceKey);
     if (live) {
@@ -2264,7 +2272,7 @@ var TopoloClient = class _TopoloClient {
     if (!normalized) return null;
     const configuredServiceId = resolveConfiguredServiceId(normalized, this.serviceIds);
     if (configuredServiceId) return configuredServiceId;
-    const authBase = resolveServiceUrl("auth", this.serviceUrls);
+    const authBase = resolveServiceUrl("developers", this.serviceUrls);
     const cacheKey = `${authBase}|${normalized}`;
     const now = Date.now();
     const cached = _TopoloClient.serviceIdCache.get(cacheKey);
@@ -2318,7 +2326,7 @@ var TopoloClient = class _TopoloClient {
     if (this.serviceCatalogCache && this.serviceCatalogCache.expiresAt > now) {
       return this.serviceCatalogCache.entries;
     }
-    const res = await this.request({ service: "auth", method: "GET", path: "/api/services/catalog" });
+    const res = await this.request({ service: "developers", method: "GET", path: "/api/services/catalog" });
     const raw = res.data?.services ?? res.services;
     if (!Array.isArray(raw)) {
       throw new TopoloSdkError(
@@ -2549,6 +2557,17 @@ function serviceKeyCandidates2(slug) {
 function normalizeLookupKey(value) {
   return String(value || "").trim().toLowerCase().replace(/\s+/g, "-");
 }
+function deriveDevelopersFromAuth(authUrl) {
+  if (!authUrl) return null;
+  try {
+    const url = new URL(authUrl);
+    if (!/^auth\./i.test(url.hostname)) return null;
+    url.hostname = url.hostname.replace(/^auth\./i, "developers.");
+    return url.origin;
+  } catch {
+    return null;
+  }
+}
 function catalogEntryMatches(entry, needle) {
   return catalogEntryLookupKeys(entry).includes(needle);
 }
@@ -2696,7 +2715,6 @@ var CrmModule = class {
   constructor(client) {
     this.client = client;
   }
-  client;
   async listContacts(options = {}) {
     const res = await this.client.request({
       service: "crm",
@@ -2744,7 +2762,6 @@ var IdentityModule = class {
   constructor(client) {
     this.client = client;
   }
-  client;
   /** Returns the resolved user, organization, and permission set for the
    *  current credential. Equivalent to `TopoloClient.introspect()` — exposed
    *  on this module for symmetry with the other domain modules. */
@@ -2758,7 +2775,6 @@ var P2PModule = class {
   constructor(client) {
     this.client = client;
   }
-  client;
   // Directory ----------------------------------------------------------------
   async listDirectory(options = {}) {
     const res = await this.client.request({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@topolo/sdk",
-  "version": "0.4.8",
+  "version": "0.4.9",
   "description": "Typed client SDK for the Topolo platform. Used by TopoloCli, TopoloMCP, and third-party agents.",
   "type": "module",
   "main": "./dist/index.js",

package/src/applications.generated.ts

@@ -530,8 +530,10 @@ export const APPLICATIONS = {
       {
         "name": "topolo-feed-api",
         "kind": "worker",
-        "apiUrl": null,
-        "domains": [],
+        "apiUrl": "https://feed-api.topolo.app",
+        "domains": [
+          "feed-api.topolo.app"
+        ],
         "routes": [],
         "serviceId": null
       },
@@ -902,9 +904,9 @@ export const APPLICATIONS = {
       {
         "name": "topolo-nexus-gateway",
         "kind": "worker",
-        "apiUrl": "https://nexus-api.topolo.app",
+        "apiUrl": "https://nexus.topolo.app",
         "domains": [
-          "nexus-api.topolo.app"
+          "nexus.topolo.app"
         ],
         "routes": [],
         "serviceId": "nexus"
@@ -1264,8 +1266,10 @@ export const APPLICATIONS = {
       {
         "name": "topolo-socialize-api",
         "kind": "worker",
-        "apiUrl": null,
-        "domains": [],
+        "apiUrl": "https://socialize-api.topolo.app",
+        "domains": [
+          "socialize-api.topolo.app"
+        ],
         "routes": [],
         "serviceId": null
       },

package/src/client.test.ts

@@ -401,7 +401,7 @@ describe('TopoloClient.getServiceIdBySlug', () => {
       credential: { kind: 'api_key', apiKey: 'x' },
       agent: AGENT,
       fetch: impl,
-      serviceUrls: { auth: 'https://auth.example.com' } as never,
+      serviceUrls: { auth: 'https://auth.example.com', developers: 'https://auth.example.com' } as never,
       serviceIds: { notify: 'service_notify' },
     });
     const id = await client.getServiceIdBySlug('topolo-notify');
@@ -413,7 +413,7 @@ describe('TopoloClient.getServiceIdBySlug', () => {
     const { impl, calls } = stubFetch([
       { body: { success: true, data: { service_id: 'service_abc123', api_base_url: 'https://x-api' } } },
     ]);
-    const client = freshClient(impl, { auth: 'https://auth.example.com' });
+    const client = freshClient(impl, { auth: 'https://auth.example.com', developers: 'https://auth.example.com' });
     const id = await client.getServiceIdBySlug('external-service');
     expect(id).toBe('service_abc123');
     expect(calls[0]!.url).toBe('https://auth.example.com/api/services/by-slug/external-service');
@@ -425,7 +425,7 @@ describe('TopoloClient.getServiceIdBySlug', () => {
 
   it('returns null on 404 and caches the negative result', async () => {
     const { impl, calls } = stubFetch([{ status: 404, body: { success: false } }]);
-    const client = freshClient(impl, { auth: 'https://auth.example.com' });
+    const client = freshClient(impl, { auth: 'https://auth.example.com', developers: 'https://auth.example.com' });
     expect(await client.getServiceIdBySlug('nope')).toBeNull();
     expect(await client.getServiceIdBySlug('nope')).toBeNull();
     expect(calls.length).toBe(1);
@@ -435,7 +435,7 @@ describe('TopoloClient.getServiceIdBySlug', () => {
     const { impl, calls } = stubFetch([
       { body: { success: true, data: { service_id: 'service_external' } } },
     ]);
-    const client = freshClient(impl, { auth: 'https://auth.example.com' });
+    const client = freshClient(impl, { auth: 'https://auth.example.com', developers: 'https://auth.example.com' });
     expect(await client.getServiceIdBySlug('external-service')).toBe('service_external');
     expect(await client.getServiceIdBySlug('external-service')).toBe('service_external');
     expect(calls.length).toBe(1);
@@ -445,7 +445,7 @@ describe('TopoloClient.getServiceIdBySlug', () => {
     const { impl, calls } = stubFetch([
       { body: { success: true, data: { service_id: 'service_x' } } },
     ]);
-    const client = freshClient(impl, { auth: 'https://auth.example.com' });
+    const client = freshClient(impl, { auth: 'https://auth.example.com', developers: 'https://auth.example.com' });
     await client.getServiceIdBySlug('  EXTERNAL-SERVICE  ');
     expect(calls[0]!.url).toBe('https://auth.example.com/api/services/by-slug/external-service');
   });
@@ -467,7 +467,7 @@ describe('TopoloClient.getServiceIdBySlug', () => {
       credential: { kind: 'api_key', apiKey: 'x' },
       agent: AGENT,
       fetch: impl,
-      serviceUrls: { auth: 'https://auth.example.com' } as never,
+      serviceUrls: { auth: 'https://auth.example.com', developers: 'https://auth.example.com' } as never,
     });
     expect(await client.getServiceIdBySlug('flaky')).toBeNull();
     // Second call retries — earlier null was not cached.
@@ -523,7 +523,7 @@ describe('TopoloClient.listServices', () => {
       credential: { kind: 'access_token', accessToken: 'tok_abc' },
       agent: AGENT,
       fetch: impl,
-      serviceUrls: { auth: 'https://auth.example.com' },
+      serviceUrls: { auth: 'https://auth.example.com', developers: 'https://auth.example.com' },
     });
     const out = await client.listServices();
     expect(out).toEqual([
@@ -574,7 +574,7 @@ describe('TopoloClient.listServices', () => {
       credential: { kind: 'api_key', apiKey: 'dak_xyz' },
       agent: AGENT,
       fetch: impl,
-      serviceUrls: { auth: 'https://auth.example.com' },
+      serviceUrls: { auth: 'https://auth.example.com', developers: 'https://auth.example.com' },
     });
     await expect(client.listServices()).rejects.toBeInstanceOf(TopoloHttpError);
   });
@@ -605,7 +605,7 @@ describe('TopoloClient.listServices', () => {
       credential: { kind: 'api_key', apiKey: 'dak_xyz' },
       agent: AGENT,
       fetch: impl,
-      serviceUrls: { auth: 'https://auth.example.com' },
+      serviceUrls: { auth: 'https://auth.example.com', developers: 'https://auth.example.com' },
     });
 
     await client.request({ service: 'mail', path: '/api/health' });
@@ -640,7 +640,7 @@ describe('TopoloClient.listServices', () => {
       credential: { kind: 'api_key', apiKey: 'dak_xyz' },
       agent: AGENT,
       fetch: impl,
-      serviceUrls: { auth: 'https://auth.example.com' },
+      serviceUrls: { auth: 'https://auth.example.com', developers: 'https://auth.example.com' },
     });
 
     await client.request({ service: 'crm', path: '/health' });
@@ -649,6 +649,21 @@ describe('TopoloClient.listServices', () => {
     expect(calls[1]!.url).toBe('https://crm-api.topolo.app/health');
   });
 
+  it('derives the catalog (developers) host from the auth url when developers is unset', async () => {
+    const { impl, calls } = stubFetch([{ body: { data: { services: [] } } }]);
+    const client = new TopoloClient({
+      credential: { kind: 'api_key', apiKey: 'dak_xyz' },
+      agent: AGENT,
+      fetch: impl,
+      // Fleet apps configure only `auth` per-env; the catalog host is derived.
+      serviceUrls: { auth: 'https://auth.stg.topolo.us' },
+    });
+
+    await client.listServices();
+
+    expect(calls[0]!.url).toBe('https://developers.stg.topolo.us/api/services/catalog');
+  });
+
   it('prefers live catalog api_base_url for dynamic services', async () => {
     const { impl, calls } = stubFetch([
       {
@@ -675,7 +690,7 @@ describe('TopoloClient.listServices', () => {
       credential: { kind: 'api_key', apiKey: 'dak_xyz' },
       agent: AGENT,
       fetch: impl,
-      serviceUrls: { auth: 'https://auth.example.com' },
+      serviceUrls: { auth: 'https://auth.example.com', developers: 'https://auth.example.com' },
     });
 
     await client.request({ service: 'future', path: '/health' });
@@ -708,7 +723,7 @@ describe('TopoloClient.listServices', () => {
       credential: { kind: 'api_key', apiKey: 'dak_xyz' },
       agent: AGENT,
       fetch: impl,
-      serviceUrls: { auth: 'https://auth.example.com' },
+      serviceUrls: { auth: 'https://auth.example.com', developers: 'https://auth.example.com' },
     });
 
     await expect(client.request({ service: 'mail', path: '/api/health' })).rejects.toMatchObject({
@@ -742,7 +757,7 @@ describe('TopoloClient.listServices', () => {
       credential: { kind: 'api_key', apiKey: 'dak_xyz' },
       agent: AGENT,
       fetch: impl,
-      serviceUrls: { auth: 'https://auth.example.com' },
+      serviceUrls: { auth: 'https://auth.example.com', developers: 'https://auth.example.com' },
     });
 
     await expect(client.request({ service: 'future-app', path: '/api/health' })).rejects.toMatchObject({
@@ -777,7 +792,7 @@ describe('TopoloClient.listServices', () => {
       credential: { kind: 'api_key', apiKey: 'dak_xyz' },
       agent: AGENT,
       fetch: impl,
-      serviceUrls: { auth: 'https://auth.example.com' },
+      serviceUrls: { auth: 'https://auth.example.com', developers: 'https://auth.example.com' },
     });
 
     await client.request({ service: 'warehouse', path: '/api/one' });
@@ -798,7 +813,7 @@ describe('TopoloClient action catalog', () => {
       credential: { kind: 'access_token', accessToken: 'tok_abc' },
       agent: AGENT,
       fetch: impl,
-      serviceUrls: { auth: 'https://auth.example.com' },
+      serviceUrls: { auth: 'https://auth.example.com', developers: 'https://auth.example.com' },
     });
     const actions = await client.listActions();
     expect(actions.map((action) => action.name)).toEqual([
@@ -815,7 +830,7 @@ describe('TopoloClient action catalog', () => {
       credential: { kind: 'api_key', apiKey: 'dak_xyz' },
       agent: AGENT,
       fetch: impl,
-      serviceUrls: { auth: 'https://auth.example.com' },
+      serviceUrls: { auth: 'https://auth.example.com', developers: 'https://auth.example.com' },
     });
     await client.callAction('messages.list', { mailboxId: 'primary', q: 'Ada', page: 2 });
     const call = requestCalls(calls)[0]!;
@@ -833,7 +848,7 @@ describe('TopoloClient action catalog', () => {
       credential: { kind: 'api_key', apiKey: 'dak_xyz' },
       agent: AGENT,
       fetch: impl,
-      serviceUrls: { auth: 'https://auth.example.com' },
+      serviceUrls: { auth: 'https://auth.example.com', developers: 'https://auth.example.com' },
     });
     await client.callAction('topolo_mail_messages_get', {
       mailboxId: 'primary',
@@ -853,7 +868,7 @@ describe('TopoloClient action catalog', () => {
       credential: { kind: 'api_key', apiKey: 'dak_xyz' },
       agent: AGENT,
       fetch: impl,
-      serviceUrls: { auth: 'https://auth.example.com' },
+      serviceUrls: { auth: 'https://auth.example.com', developers: 'https://auth.example.com' },
     });
     await expect(
       client.callAction('messages.send', { mailboxId: 'primary', subject: 'Hello' }),
@@ -866,7 +881,7 @@ describe('TopoloClient action catalog', () => {
       credential: { kind: 'api_key', apiKey: 'dak_xyz' },
       agent: AGENT,
       fetch: impl,
-      serviceUrls: { auth: 'https://auth.example.com' },
+      serviceUrls: { auth: 'https://auth.example.com', developers: 'https://auth.example.com' },
     });
     await client.callAction('messages.send', { mailboxId: 'primary', subject: 'Hello' }, { confirm: true });
     const call = requestCalls(calls)[0]!;

package/src/client.ts

@@ -337,10 +337,20 @@ export class TopoloClient {
       throw new TopoloSdkError('unknown_service', 'service is required');
     }
 
-    if (serviceKey === 'auth') {
+    // auth + developers are DIRECT services resolved without a catalog lookup:
+    // developers serves the catalog itself, so resolving it via the catalog would
+    // recurse infinitely.
+    if (serviceKey === 'auth' || serviceKey === 'developers') {
       const overrideUrl = resolveConfiguredServiceUrl(serviceKey, this.serviceUrls);
       if (overrideUrl) return { serviceKey, baseUrl: overrideUrl };
-      return { serviceKey, baseUrl: DEFAULT_SERVICE_URLS.auth };
+      // The catalog host (developers) defaults to the SAME environment as auth.
+      // Apps configure only `auth` per-env; derive developers from it (auth.X ->
+      // developers.X) so the catalog cutover needs no per-app config change.
+      if (serviceKey === 'developers') {
+        const derived = deriveDevelopersFromAuth(resolveConfiguredServiceUrl('auth', this.serviceUrls));
+        if (derived) return { serviceKey, baseUrl: derived };
+      }
+      return { serviceKey, baseUrl: DEFAULT_SERVICE_URLS[serviceKey as 'auth' | 'developers'] };
     }
 
     const live = await this.resolveLiveCallableService(serviceKey);
@@ -386,7 +396,8 @@ export class TopoloClient {
     const configuredServiceId = resolveConfiguredServiceId(normalized, this.serviceIds);
     if (configuredServiceId) return configuredServiceId;
 
-    const authBase = resolveServiceUrl('auth', this.serviceUrls);
+    // app-catalog greenfield: by-slug resolver lives on the Catalog (developers).
+    const authBase = resolveServiceUrl('developers', this.serviceUrls);
     const cacheKey = `${authBase}|${normalized}`;
     const now = Date.now();
     const cached = TopoloClient.serviceIdCache.get(cacheKey);
@@ -450,10 +461,13 @@ export class TopoloClient {
       return this.serviceCatalogCache.entries;
     }
 
+    // app-catalog greenfield: the catalog moved to the Catalog (developers)
+    // service. Auth no longer owns the registry; it only provides scoping, which
+    // the Catalog composes server-side. Consumers pass the per-env developers URL.
     const res = await this.request<
       | { data?: { services?: unknown[] } }
       | { services?: unknown[] }
-    >({ service: 'auth', method: 'GET', path: '/api/services/catalog' });
+    >({ service: 'developers', method: 'GET', path: '/api/services/catalog' });
     const raw =
       (res as { data?: { services?: unknown[] } }).data?.services ??
       (res as { services?: unknown[] }).services;
@@ -774,6 +788,24 @@ function normalizeLookupKey(value: string): string {
   return String(value || '').trim().toLowerCase().replace(/\s+/g, '-');
 }
 
+/**
+ * Derive the Catalog (developers) base URL from a configured auth base URL by
+ * swapping the leading `auth` host label for `developers` (auth.stg.topolo.us ->
+ * developers.stg.topolo.us). Returns null if the auth URL is absent or doesn't
+ * start with the `auth.` label, so the caller falls back to the bundled default.
+ */
+function deriveDevelopersFromAuth(authUrl: string | null | undefined): string | null {
+  if (!authUrl) return null;
+  try {
+    const url = new URL(authUrl);
+    if (!/^auth\./i.test(url.hostname)) return null;
+    url.hostname = url.hostname.replace(/^auth\./i, 'developers.');
+    return url.origin;
+  } catch {
+    return null;
+  }
+}
+
 function catalogEntryMatches(entry: TopoloServiceCatalogEntry, needle: string): boolean {
   return catalogEntryLookupKeys(entry).includes(needle);
 }

package/src/services.generated.ts

@@ -30,7 +30,7 @@ export const SERVICES = {
   mail: "https://mail.topolo.app",
   mdm: "https://mdm.topolo.app",
   messages: "https://messages.topolo.app",
-  nexus: "https://nexus-api.topolo.app",
+  nexus: "https://nexus.topolo.app",
   notify: "https://notify.topolo.app",
   observability_watch: "https://observability-watch.topolo.app",
   one: "https://www.topolo.app",