@topolo/sdk 0.4.9 → 0.4.10

package/dist/index.cjs

@@ -2422,8 +2422,9 @@ var TopoloClient = class _TopoloClient {
     return entries;
   }
   /**
-   * List callable actions from the live Auth catalog. The response is scoped to
-   * the caller's organization and effective permissions; no bundled/static app
+   * List callable actions from the live registry-canonical catalog (definitions
+   * from the Catalog registry, scoping from Auth). The response is scoped to the
+   * caller's organization and effective permissions; no bundled/static app
    * action list is used as an authorization source.
    */
   async listActions(options = {}) {
@@ -2432,7 +2433,7 @@ var TopoloClient = class _TopoloClient {
       return this.actionCatalogCache.entries;
     }
     const res = await this.request({
-      service: "auth",
+      service: "developers",
       method: "GET",
       path: "/api/actions/catalog",
       ...options.service ? { query: { service: options.service } } : {}
@@ -2667,6 +2668,7 @@ function normalizeActionCatalogEntry(item) {
     readOnly: Boolean(a.read_only ?? a.readOnly),
     destructive: Boolean(a.destructive),
     requiresConfirmation: Boolean(a.requires_confirmation ?? a.requiresConfirmation),
+    agentAccess: pickAgentAccess(a.agent_access ?? a.agentAccess),
     status: pickActionString(a.status),
     sourceRevision: pickActionString(a.source_revision) ?? pickActionString(a.sourceRevision)
   };
@@ -2677,6 +2679,9 @@ function isHttpMethod(value) {
 function pickActionString(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
+function pickAgentAccess(value) {
+  return value === "auto" || value === "confirm" || value === "off" ? value : null;
+}
 function plainObject(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : {};
 }

package/dist/index.d.cts

@@ -145,6 +145,8 @@ interface TopoloActionCatalogEntry {
     readOnly: boolean;
     destructive: boolean;
     requiresConfirmation: boolean;
+    /** Agent access tier. null/absent when the catalog does not specify one (consumers derive a default). */
+    agentAccess?: 'auto' | 'confirm' | 'off' | null;
     status: string | null;
     sourceRevision: string | null;
 }
@@ -206,8 +208,9 @@ declare class TopoloClient {
      */
     listServices(): Promise<TopoloServiceCatalogEntry[]>;
     /**
-     * List callable actions from the live Auth catalog. The response is scoped to
-     * the caller's organization and effective permissions; no bundled/static app
+     * List callable actions from the live registry-canonical catalog (definitions
+     * from the Catalog registry, scoping from Auth). The response is scoped to the
+     * caller's organization and effective permissions; no bundled/static app
      * action list is used as an authorization source.
      */
     listActions(options?: {

package/dist/index.d.ts

@@ -145,6 +145,8 @@ interface TopoloActionCatalogEntry {
     readOnly: boolean;
     destructive: boolean;
     requiresConfirmation: boolean;
+    /** Agent access tier. null/absent when the catalog does not specify one (consumers derive a default). */
+    agentAccess?: 'auto' | 'confirm' | 'off' | null;
     status: string | null;
     sourceRevision: string | null;
 }
@@ -206,8 +208,9 @@ declare class TopoloClient {
      */
     listServices(): Promise<TopoloServiceCatalogEntry[]>;
     /**
-     * List callable actions from the live Auth catalog. The response is scoped to
-     * the caller's organization and effective permissions; no bundled/static app
+     * List callable actions from the live registry-canonical catalog (definitions
+     * from the Catalog registry, scoping from Auth). The response is scoped to the
+     * caller's organization and effective permissions; no bundled/static app
      * action list is used as an authorization source.
      */
     listActions(options?: {

package/dist/index.js

@@ -2367,8 +2367,9 @@ var TopoloClient = class _TopoloClient {
     return entries;
   }
   /**
-   * List callable actions from the live Auth catalog. The response is scoped to
-   * the caller's organization and effective permissions; no bundled/static app
+   * List callable actions from the live registry-canonical catalog (definitions
+   * from the Catalog registry, scoping from Auth). The response is scoped to the
+   * caller's organization and effective permissions; no bundled/static app
    * action list is used as an authorization source.
    */
   async listActions(options = {}) {
@@ -2377,7 +2378,7 @@ var TopoloClient = class _TopoloClient {
       return this.actionCatalogCache.entries;
     }
     const res = await this.request({
-      service: "auth",
+      service: "developers",
       method: "GET",
       path: "/api/actions/catalog",
       ...options.service ? { query: { service: options.service } } : {}
@@ -2612,6 +2613,7 @@ function normalizeActionCatalogEntry(item) {
     readOnly: Boolean(a.read_only ?? a.readOnly),
     destructive: Boolean(a.destructive),
     requiresConfirmation: Boolean(a.requires_confirmation ?? a.requiresConfirmation),
+    agentAccess: pickAgentAccess(a.agent_access ?? a.agentAccess),
     status: pickActionString(a.status),
     sourceRevision: pickActionString(a.source_revision) ?? pickActionString(a.sourceRevision)
   };
@@ -2622,6 +2624,9 @@ function isHttpMethod(value) {
 function pickActionString(value) {
   return typeof value === "string" && value.trim() ? value.trim() : null;
 }
+function pickAgentAccess(value) {
+  return value === "auto" || value === "confirm" || value === "off" ? value : null;
+}
 function plainObject(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : {};
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@topolo/sdk",
-  "version": "0.4.9",
+  "version": "0.4.10",
   "description": "Typed client SDK for the Topolo platform. Used by TopoloCli, TopoloMCP, and third-party agents.",
   "type": "module",
   "main": "./dist/index.js",

package/src/client.ts

@@ -151,6 +151,8 @@ export interface TopoloActionCatalogEntry {
   readOnly: boolean;
   destructive: boolean;
   requiresConfirmation: boolean;
+  /** Agent access tier. null/absent when the catalog does not specify one (consumers derive a default). */
+  agentAccess?: 'auto' | 'confirm' | 'off' | null;
   status: string | null;
   sourceRevision: string | null;
 }
@@ -539,8 +541,9 @@ export class TopoloClient {
   }
 
   /**
-   * List callable actions from the live Auth catalog. The response is scoped to
-   * the caller's organization and effective permissions; no bundled/static app
+   * List callable actions from the live registry-canonical catalog (definitions
+   * from the Catalog registry, scoping from Auth). The response is scoped to the
+   * caller's organization and effective permissions; no bundled/static app
    * action list is used as an authorization source.
    */
   async listActions(options: { service?: string } = {}): Promise<TopoloActionCatalogEntry[]> {
@@ -553,7 +556,7 @@ export class TopoloClient {
       | { data?: { actions?: unknown[] } }
       | { actions?: unknown[] }
     >({
-      service: 'auth',
+      service: 'developers',
       method: 'GET',
       path: '/api/actions/catalog',
       ...(options.service ? { query: { service: options.service } } : {}),
@@ -855,6 +858,7 @@ function normalizeActionCatalogEntry(item: unknown): TopoloActionCatalogEntry |
     readOnly: Boolean(a.read_only ?? a.readOnly),
     destructive: Boolean(a.destructive),
     requiresConfirmation: Boolean(a.requires_confirmation ?? a.requiresConfirmation),
+    agentAccess: pickAgentAccess(a.agent_access ?? a.agentAccess),
     status: pickActionString(a.status),
     sourceRevision: pickActionString(a.source_revision) ?? pickActionString(a.sourceRevision),
   };
@@ -868,6 +872,10 @@ function pickActionString(value: unknown): string | null {
   return typeof value === 'string' && value.trim() ? value.trim() : null;
 }
 
+function pickAgentAccess(value: unknown): 'auto' | 'confirm' | 'off' | null {
+  return value === 'auto' || value === 'confirm' || value === 'off' ? value : null;
+}
+
 function plainObject(value: unknown): Record<string, unknown> {
   return value && typeof value === 'object' && !Array.isArray(value)
     ? value as Record<string, unknown>

package/src/index.test.ts

@@ -63,7 +63,7 @@ describe('createTopolo', () => {
 describe('package surface re-exports', () => {
   it('re-exports the error classes from the barrel', () => {
     expect(new TopoloAuthError('x').name).toBe('TopoloAuthError');
-    expect(new TopoloHttpError('auth', '/p', 500).name).toBe('TopoloHttpError');
+    expect(new TopoloHttpError('auth', '/p', 500, null).name).toBe('TopoloHttpError');
     expect(new TopoloPermissionError('nope', []).name).toBe('TopoloPermissionError');
   });
 });