@topolo/sdk 0.6.0 → 0.8.0

package/dist/node/credential-store.cjs

@@ -1,440 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/node/credential-store.ts
-var credential_store_exports = {};
-__export(credential_store_exports, {
-  ENVIRONMENT_DEFAULT_SERVICE_URLS: () => ENVIRONMENT_DEFAULT_SERVICE_URLS,
-  TOPOLO_ENVIRONMENTS: () => TOPOLO_ENVIRONMENTS,
-  clearProfileCredential: () => clearProfileCredential,
-  configPath: () => configPath,
-  credentialSourceFromConfig: () => credentialSourceFromConfig,
-  envVarPrefix: () => envVarPrefix,
-  normalizeEnvironment: () => normalizeEnvironment,
-  profileForEnvironment: () => profileForEnvironment,
-  readConfig: () => readConfig,
-  refreshCredentialIfNeeded: () => refreshCredentialIfNeeded,
-  resolveAgentName: () => resolveAgentName,
-  resolveCredential: () => resolveCredential,
-  resolveServiceUrls: () => resolveServiceUrls,
-  resolvedProfileConfig: () => resolvedProfileConfig,
-  selectedEnvironment: () => selectedEnvironment,
-  writeConfig: () => writeConfig,
-  writeProfileConfig: () => writeProfileConfig
-});
-module.exports = __toCommonJS(credential_store_exports);
-var import_promises = require("fs/promises");
-var import_node_fs = require("fs");
-var import_node_os = require("os");
-var import_node_path = require("path");
-
-// src/errors.ts
-var TopoloSdkError = class extends Error {
-  code;
-  constructor(code, message) {
-    super(message);
-    this.name = "TopoloSdkError";
-    this.code = code;
-  }
-};
-var TopoloAuthError = class extends TopoloSdkError {
-  constructor(message, code = "auth_error") {
-    super(code, message);
-    this.name = "TopoloAuthError";
-  }
-};
-var TopoloHttpError = class extends TopoloSdkError {
-  status;
-  body;
-  service;
-  path;
-  constructor(service, path, status, body, message) {
-    super("http_error", message ?? `HTTP ${status} from ${service}${path}`);
-    this.name = "TopoloHttpError";
-    this.status = status;
-    this.body = body;
-    this.service = service;
-    this.path = path;
-  }
-};
-
-// src/services.generated.ts
-var APP_API_URLS = {
-  agent: "https://agent.topolo.app",
-  auth: "https://auth.topolo.app",
-  backup: "https://backup.topolo.app",
-  books: "https://books.topolo.app",
-  bugfix: "https://bugfix.topolo.app",
-  bytes: "https://bytes.topolo.app",
-  calendar: "https://calendar.topolo.app",
-  capacity: "https://capacity.topolo.app",
-  chat: "https://chat.topolo.app",
-  commerce: "https://commerce.topolo.app",
-  compose: "https://compose.topolo.app",
-  consent: "https://consent.topolo.app",
-  crm: "https://crm.topolo.app",
-  developers: "https://developers.topolo.app",
-  director: "https://director.topolo.app",
-  feed: "https://feed.topolo.app",
-  flow: "https://flow.topolo.app",
-  forecast: "https://forecast.topolo.app",
-  forms: "https://forms.topolo.app",
-  home: "https://home.topolo.app",
-  insights: "https://insights.topolo.app",
-  inventory: "https://inventory.topolo.app",
-  learn: "https://learn.topolo.app",
-  localize: "https://localize.topolo.app",
-  mail: "https://mail.topolo.app",
-  mdm: "https://mdm.topolo.app",
-  messages: "https://messages.topolo.app",
-  nexus: "https://nexus.topolo.app",
-  notify: "https://notify.topolo.app",
-  observability_watch: "https://observability-watch.topolo.app",
-  one: "https://www.topolo.app",
-  p2p: "https://p2p.topolo.app",
-  pay: "https://pay.topolo.app",
-  people: "https://people.topolo.app",
-  "quro.api": "https://api.ol0.me",
-  "quro.redirect": "https://ol0.me",
-  roadmapper: "https://roadmapper.topolo.app",
-  sign: "https://sign.topolo.app",
-  social_studio: "https://studio.topolo.app",
-  socialize: "https://socialize.topolo.app",
-  spaces: "https://spaces.topolo.app",
-  status: "https://status.topolo.app",
-  success: "https://success.topolo.app",
-  support: "https://support.topolo.app",
-  survey: "https://survey.topolo.app",
-  voice: "https://voice.topolo.app",
-  web: "https://web.topolo.app"
-};
-
-// src/services.ts
-var DEFAULT_APP_URLS = APP_API_URLS;
-function resolveServiceUrl(service, overrides) {
-  const override = resolveServiceUrlOverride([service], overrides);
-  if (override) return override;
-  return DEFAULT_APP_URLS[service];
-}
-function resolveServiceUrlOverride(keys, overrides) {
-  for (const key of keys) {
-    const direct = overrides?.[key];
-    if (direct) return direct;
-    const envStyleKey = key.replace(/\./g, "_");
-    const envStyle = overrides?.[envStyleKey];
-    if (envStyle) return envStyle;
-  }
-  for (const key of keys) {
-    const envKey = `TOPOLO_APP_URL_${key.replace(/\./g, "_").toUpperCase()}`;
-    const envValue = typeof process !== "undefined" ? process.env?.[envKey] : void 0;
-    if (envValue) return envValue;
-  }
-  return null;
-}
-
-// src/oauth.ts
-var DEVICE_GRANT = "urn:ietf:params:oauth:grant-type:device_code";
-var TopoloOAuth = class {
-  baseUrl;
-  fetchImpl;
-  constructor(options = {}) {
-    this.baseUrl = resolveServiceUrl("auth", options.serviceUrls);
-    this.fetchImpl = options.fetch ?? fetch;
-  }
-  /**
-   * RFC 8628 device authorization grant — starts the flow by asking the server
-   * for a device_code + user_code. The caller prints the user_code +
-   * verification_uri and then polls `pollDeviceToken` until approval.
-   */
-  async requestDeviceCode(params) {
-    const body = new URLSearchParams();
-    body.set("client_id", params.clientId);
-    if (params.scope) {
-      body.set("scope", Array.isArray(params.scope) ? params.scope.join(" ") : params.scope);
-    }
-    return this.#postForm("/api/developer-oauth/device_authorization", body);
-  }
-  /**
-   * Polls the token endpoint once. Returns the token pair on success, or
-   * throws a `TopoloAuthError` whose `code` is one of the RFC 8628 poll
-   * states: `authorization_pending`, `slow_down`, `access_denied`,
-   * `expired_token`. Callers should back off on `slow_down`, wait at least
-   * one `interval` on `authorization_pending`, and give up on the rest.
-   */
-  async pollDeviceToken(params) {
-    const body = new URLSearchParams();
-    body.set("grant_type", DEVICE_GRANT);
-    body.set("client_id", params.clientId);
-    body.set("device_code", params.deviceCode);
-    if (params.clientSecret) body.set("client_secret", params.clientSecret);
-    return this.#postForm("/api/developer-oauth/token", body);
-  }
-  /** Exchange an authorization code (with PKCE) for tokens. */
-  async exchangeAuthorizationCode(params) {
-    const body = new URLSearchParams();
-    body.set("grant_type", "authorization_code");
-    body.set("client_id", params.clientId);
-    body.set("code", params.code);
-    body.set("redirect_uri", params.redirectUri);
-    if (params.codeVerifier) body.set("code_verifier", params.codeVerifier);
-    if (params.clientSecret) body.set("client_secret", params.clientSecret);
-    return this.#postForm("/api/developer-oauth/token", body);
-  }
-  /** Rotate a refresh token for a new token pair. */
-  async refreshToken(params) {
-    const body = new URLSearchParams();
-    body.set("grant_type", "refresh_token");
-    body.set("client_id", params.clientId);
-    body.set("refresh_token", params.refreshToken);
-    if (params.clientSecret) body.set("client_secret", params.clientSecret);
-    return this.#postForm("/api/developer-oauth/token", body);
-  }
-  async #postForm(path, body) {
-    const url = new URL(path, this.baseUrl.endsWith("/") ? this.baseUrl : `${this.baseUrl}/`);
-    const res = await this.fetchImpl(url.toString(), {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/x-www-form-urlencoded",
-        Accept: "application/json"
-      },
-      body: body.toString()
-    });
-    const contentType = res.headers.get("Content-Type") ?? "";
-    const parsed = contentType.includes("application/json") ? await res.json().catch(() => null) : await res.text().catch(() => null);
-    if (!res.ok) {
-      if (parsed && typeof parsed === "object" && "error" in parsed) {
-        const err = parsed;
-        throw new TopoloAuthError(err.error_description || err.error, err.error);
-      }
-      throw new TopoloHttpError("auth", path, res.status, parsed);
-    }
-    return parsed;
-  }
-};
-
-// src/node/credential-store.ts
-var TOPOLO_ENVIRONMENTS = ["production", "staging", "development", "local"];
-var ENVIRONMENT_DEFAULT_SERVICE_URLS = {
-  production: {
-    developers: "https://developers.topolo.app"
-  },
-  staging: {
-    auth: "https://auth.stg.topolo.us",
-    developers: "https://developers.stg.topolo.us",
-    seed: "https://seed.stg.topolo.us"
-  },
-  development: {
-    auth: "https://auth.topolo.dev",
-    developers: "https://developers.topolo.dev"
-  },
-  local: {}
-};
-function configPath() {
-  const override = process.env.TOPOLO_CONFIG_PATH;
-  if (override) return override;
-  const base = process.env.XDG_CONFIG_HOME || ((0, import_node_os.platform)() === "win32" ? (0, import_node_path.join)((0, import_node_os.homedir)(), "AppData", "Roaming") : (0, import_node_path.join)((0, import_node_os.homedir)(), ".config"));
-  return (0, import_node_path.join)(base, "topolo", "config.json");
-}
-async function readConfig() {
-  const path = configPath();
-  if (!(0, import_node_fs.existsSync)(path)) return {};
-  try {
-    const raw = await (0, import_promises.readFile)(path, "utf8");
-    return JSON.parse(raw);
-  } catch {
-    return {};
-  }
-}
-async function writeConfig(config) {
-  const path = configPath();
-  await (0, import_promises.mkdir)((0, import_node_path.dirname)(path), { recursive: true });
-  await (0, import_promises.writeFile)(path, JSON.stringify(config, null, 2) + "\n", "utf8");
-  if ((0, import_node_os.platform)() !== "win32") {
-    try {
-      await (0, import_promises.chmod)(path, 384);
-    } catch {
-    }
-  }
-}
-function normalizeEnvironment(value) {
-  const normalized = (value ?? "production").trim().toLowerCase();
-  if (normalized === "" || normalized === "production" || normalized === "prod") {
-    return "production";
-  }
-  if (normalized === "staging" || normalized === "stage" || normalized === "stg") {
-    return "staging";
-  }
-  if (normalized === "development" || normalized === "dev") {
-    return "development";
-  }
-  if (normalized === "local" || normalized === "localhost") {
-    return "local";
-  }
-  throw new Error(
-    `Unknown Topolo environment "${value}". Expected production, staging, development, or local.`
-  );
-}
-function selectedEnvironment() {
-  return normalizeEnvironment(process.env.TOPOLO_ENV);
-}
-function envVarPrefix(environment) {
-  if (environment === "production") return "TOPOLO_PRODUCTION";
-  if (environment === "staging") return "TOPOLO_STAGING";
-  if (environment === "development") return "TOPOLO_DEVELOPMENT";
-  return "TOPOLO_LOCAL";
-}
-function profileForEnvironment(config, environment = selectedEnvironment()) {
-  const profile = config.profiles?.[environment] ?? {};
-  if (environment === "production") {
-    return {
-      credential: config.credential,
-      oauthClientId: config.oauthClientId,
-      ...profile,
-      serviceUrls: {
-        ...config.serviceUrls ?? {},
-        ...profile.serviceUrls ?? {}
-      },
-      agentName: profile.agentName ?? config.agentName
-    };
-  }
-  return profile;
-}
-function writeProfileConfig(config, environment, profile) {
-  const profiles = { ...config.profiles ?? {} };
-  profiles[environment] = {
-    ...profiles[environment] ?? {},
-    ...profile
-  };
-  return { ...config, profiles };
-}
-function clearProfileCredential(config, environment) {
-  const next = { ...config };
-  if (environment === "production") {
-    delete next.credential;
-    delete next.oauthClientId;
-  }
-  const profiles = { ...config.profiles ?? {} };
-  const profile = { ...profiles[environment] ?? {} };
-  delete profile.credential;
-  delete profile.oauthClientId;
-  profiles[environment] = profile;
-  return { ...next, profiles };
-}
-function credentialSourceFromConfig(config, environment = selectedEnvironment()) {
-  const prefix = envVarPrefix(environment);
-  if (process.env[`${prefix}_API_KEY`]) return `env:${prefix}_API_KEY`;
-  if (process.env[`${prefix}_ACCESS_TOKEN`]) return `env:${prefix}_ACCESS_TOKEN`;
-  if (process.env.TOPOLO_API_KEY) return "env:TOPOLO_API_KEY";
-  if (process.env.TOPOLO_ACCESS_TOKEN) return "env:TOPOLO_ACCESS_TOKEN";
-  return profileForEnvironment(config, environment).credential ? "config-file" : "none";
-}
-async function resolveCredential(environment = selectedEnvironment()) {
-  const prefix = envVarPrefix(environment);
-  const apiKey = process.env[`${prefix}_API_KEY`] ?? process.env.TOPOLO_API_KEY;
-  if (apiKey) return { kind: "api_key", apiKey };
-  const accessToken = process.env[`${prefix}_ACCESS_TOKEN`] ?? process.env.TOPOLO_ACCESS_TOKEN;
-  if (accessToken) return { kind: "access_token", accessToken };
-  const config = await readConfig();
-  return profileForEnvironment(config, environment).credential ?? null;
-}
-var REFRESH_SKEW_SECONDS = 60;
-async function refreshCredentialIfNeeded(environment = selectedEnvironment()) {
-  const prefix = envVarPrefix(environment);
-  if (process.env[`${prefix}_API_KEY`] || process.env[`${prefix}_ACCESS_TOKEN`] || process.env.TOPOLO_API_KEY || process.env.TOPOLO_ACCESS_TOKEN) {
-    return resolveCredential(environment);
-  }
-  const config = await readConfig();
-  const profile = profileForEnvironment(config, environment);
-  const cred = profile.credential;
-  if (!cred || cred.kind !== "access_token") return cred ?? null;
-  if (!cred.refreshToken || !cred.expiresAt || !profile.oauthClientId) return cred;
-  const now = Math.floor(Date.now() / 1e3);
-  if (cred.expiresAt - REFRESH_SKEW_SECONDS > now) return cred;
-  try {
-    const oauth = new TopoloOAuth({
-      serviceUrls: resolveServiceUrls(profile.serviceUrls, environment)
-    });
-    const tokens = await oauth.refreshToken({
-      clientId: profile.oauthClientId,
-      refreshToken: cred.refreshToken
-    });
-    const refreshed = {
-      kind: "access_token",
-      accessToken: tokens.access_token,
-      ...tokens.refresh_token ? { refreshToken: tokens.refresh_token } : { refreshToken: cred.refreshToken },
-      expiresAt: Math.floor(Date.now() / 1e3) + tokens.expires_in
-    };
-    await writeConfig(
-      environment === "production" && !config.profiles?.production ? { ...config, credential: refreshed } : writeProfileConfig(config, environment, { credential: refreshed })
-    );
-    return refreshed;
-  } catch {
-    return cred;
-  }
-}
-function resolveAgentName(configAgentName) {
-  return process.env.TOPOLO_AGENT_NAME ?? configAgentName;
-}
-function resolveServiceUrls(configUrls, environment = selectedEnvironment()) {
-  const merged = {
-    ...ENVIRONMENT_DEFAULT_SERVICE_URLS[environment],
-    ...configUrls ?? {}
-  };
-  const prefix = `${envVarPrefix(environment)}_SERVICE_URL_`;
-  for (const [k, v] of Object.entries(process.env)) {
-    if (k.startsWith(prefix) && v) {
-      merged[k.slice(prefix.length).toLowerCase()] = v;
-    }
-  }
-  for (const [k, v] of Object.entries(process.env)) {
-    if (k.startsWith("TOPOLO_SERVICE_URL_") && v) {
-      merged[k.slice("TOPOLO_SERVICE_URL_".length).toLowerCase()] = v;
-    }
-  }
-  return Object.keys(merged).length > 0 ? merged : void 0;
-}
-function resolvedProfileConfig(config, environment = selectedEnvironment()) {
-  const profile = profileForEnvironment(config, environment);
-  return {
-    credential: profile.credential,
-    oauthClientId: profile.oauthClientId,
-    agentName: profile.agentName,
-    serviceUrls: resolveServiceUrls(profile.serviceUrls, environment)
-  };
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  ENVIRONMENT_DEFAULT_SERVICE_URLS,
-  TOPOLO_ENVIRONMENTS,
-  clearProfileCredential,
-  configPath,
-  credentialSourceFromConfig,
-  envVarPrefix,
-  normalizeEnvironment,
-  profileForEnvironment,
-  readConfig,
-  refreshCredentialIfNeeded,
-  resolveAgentName,
-  resolveCredential,
-  resolveServiceUrls,
-  resolvedProfileConfig,
-  selectedEnvironment,
-  writeConfig,
-  writeProfileConfig
-});

package/dist/node/credential-store.d.cts

@@ -1,81 +0,0 @@
-/**
- * Auth credential types used by the SDK.
- *
- * Phase 1 supports two modes:
- *   - `api_key`: a single platform API key (service-scoped at issuance).
- *     Preferred for long-lived agent installs.
- *   - `access_token`: a short-lived JWT from the interactive login flow.
- *     Used by TopoloCli after `topolo auth login`.
- *
- * Phase 2 will add OAuth access tokens issued by the authorization-code +
- * PKCE flow in TopoloAuth. Those will plug in as a third variant.
- */
-type TopoloCredential = {
-    kind: 'api_key';
-    apiKey: string;
-} | {
-    kind: 'access_token';
-    accessToken: string;
-    refreshToken?: string;
-    expiresAt?: number;
-};
-
-/**
- * Node-only credential store shared by the `topolo` CLI and `@topolo/mcp`.
- *
- * Both need to read (and refresh) the credential that `topolo auth login`
- * writes to `$XDG_CONFIG_HOME/topolo/config.json`. This lives in a Node-only
- * subpath (`@topolo/sdk/node`) so the isomorphic SDK core never imports
- * `node:fs` — importing this module in a browser/worker bundle is a mistake.
- *
- * The CLI re-exports every symbol here from `packages/topolo-cli/src/config.ts`
- * so existing call sites are unchanged; the MCP imports it directly to fall
- * back to the on-disk credential when no `TOPOLO_*` env credential is set.
- */
-declare const TOPOLO_ENVIRONMENTS: readonly ["production", "staging", "development", "local"];
-type TopoloEnvironment = (typeof TOPOLO_ENVIRONMENTS)[number];
-interface TopoloConfig {
-    credential?: TopoloCredential;
-    /** OAuth client_id used for the most recent login — needed to refresh the access token. */
-    oauthClientId?: string;
-    /** Per-service URL overrides — written when user runs `topolo config set-url`. */
-    serviceUrls?: Record<string, string>;
-    /** Optional agent label propagated as `X-Topolo-Agent`. */
-    agentName?: string;
-    /** Environment-scoped profiles. Legacy top-level fields are treated as production. */
-    profiles?: Partial<Record<TopoloEnvironment, TopoloEnvironmentProfile>>;
-}
-interface TopoloEnvironmentProfile {
-    credential?: TopoloCredential;
-    oauthClientId?: string;
-    serviceUrls?: Record<string, string>;
-    agentName?: string;
-}
-/**
- * Default service URLs per environment. `local` has no baked defaults — a
- * local dev loop points services at ad-hoc ports, so it is driven entirely by
- * `TOPOLO_LOCAL_SERVICE_URL_*` / `TOPOLO_SERVICE_URL_*` overrides.
- */
-declare const ENVIRONMENT_DEFAULT_SERVICE_URLS: Record<TopoloEnvironment, Record<string, string>>;
-declare function configPath(): string;
-declare function readConfig(): Promise<TopoloConfig>;
-declare function writeConfig(config: TopoloConfig): Promise<void>;
-declare function normalizeEnvironment(value: string | undefined): TopoloEnvironment;
-declare function selectedEnvironment(): TopoloEnvironment;
-declare function envVarPrefix(environment: TopoloEnvironment): string;
-declare function profileForEnvironment(config: TopoloConfig, environment?: TopoloEnvironment): TopoloEnvironmentProfile;
-declare function writeProfileConfig(config: TopoloConfig, environment: TopoloEnvironment, profile: TopoloEnvironmentProfile): TopoloConfig;
-declare function clearProfileCredential(config: TopoloConfig, environment: TopoloEnvironment): TopoloConfig;
-declare function credentialSourceFromConfig(config: TopoloConfig, environment?: TopoloEnvironment): string;
-/**
- * Resolve credentials with env-var precedence over on-disk config.
- * Env vars are what agents set in their environment; config is what
- * interactive users get after running `topolo auth login`.
- */
-declare function resolveCredential(environment?: TopoloEnvironment): Promise<TopoloCredential | null>;
-declare function refreshCredentialIfNeeded(environment?: TopoloEnvironment): Promise<TopoloCredential | null>;
-declare function resolveAgentName(configAgentName?: string): string | undefined;
-declare function resolveServiceUrls(configUrls?: Record<string, string>, environment?: TopoloEnvironment): Record<string, string> | undefined;
-declare function resolvedProfileConfig(config: TopoloConfig, environment?: TopoloEnvironment): TopoloEnvironmentProfile;
-
-export { ENVIRONMENT_DEFAULT_SERVICE_URLS, TOPOLO_ENVIRONMENTS, type TopoloConfig, type TopoloEnvironment, type TopoloEnvironmentProfile, clearProfileCredential, configPath, credentialSourceFromConfig, envVarPrefix, normalizeEnvironment, profileForEnvironment, readConfig, refreshCredentialIfNeeded, resolveAgentName, resolveCredential, resolveServiceUrls, resolvedProfileConfig, selectedEnvironment, writeConfig, writeProfileConfig };

package/dist/node/credential-store.d.ts

@@ -1,81 +0,0 @@
-/**
- * Auth credential types used by the SDK.
- *
- * Phase 1 supports two modes:
- *   - `api_key`: a single platform API key (service-scoped at issuance).
- *     Preferred for long-lived agent installs.
- *   - `access_token`: a short-lived JWT from the interactive login flow.
- *     Used by TopoloCli after `topolo auth login`.
- *
- * Phase 2 will add OAuth access tokens issued by the authorization-code +
- * PKCE flow in TopoloAuth. Those will plug in as a third variant.
- */
-type TopoloCredential = {
-    kind: 'api_key';
-    apiKey: string;
-} | {
-    kind: 'access_token';
-    accessToken: string;
-    refreshToken?: string;
-    expiresAt?: number;
-};
-
-/**
- * Node-only credential store shared by the `topolo` CLI and `@topolo/mcp`.
- *
- * Both need to read (and refresh) the credential that `topolo auth login`
- * writes to `$XDG_CONFIG_HOME/topolo/config.json`. This lives in a Node-only
- * subpath (`@topolo/sdk/node`) so the isomorphic SDK core never imports
- * `node:fs` — importing this module in a browser/worker bundle is a mistake.
- *
- * The CLI re-exports every symbol here from `packages/topolo-cli/src/config.ts`
- * so existing call sites are unchanged; the MCP imports it directly to fall
- * back to the on-disk credential when no `TOPOLO_*` env credential is set.
- */
-declare const TOPOLO_ENVIRONMENTS: readonly ["production", "staging", "development", "local"];
-type TopoloEnvironment = (typeof TOPOLO_ENVIRONMENTS)[number];
-interface TopoloConfig {
-    credential?: TopoloCredential;
-    /** OAuth client_id used for the most recent login — needed to refresh the access token. */
-    oauthClientId?: string;
-    /** Per-service URL overrides — written when user runs `topolo config set-url`. */
-    serviceUrls?: Record<string, string>;
-    /** Optional agent label propagated as `X-Topolo-Agent`. */
-    agentName?: string;
-    /** Environment-scoped profiles. Legacy top-level fields are treated as production. */
-    profiles?: Partial<Record<TopoloEnvironment, TopoloEnvironmentProfile>>;
-}
-interface TopoloEnvironmentProfile {
-    credential?: TopoloCredential;
-    oauthClientId?: string;
-    serviceUrls?: Record<string, string>;
-    agentName?: string;
-}
-/**
- * Default service URLs per environment. `local` has no baked defaults — a
- * local dev loop points services at ad-hoc ports, so it is driven entirely by
- * `TOPOLO_LOCAL_SERVICE_URL_*` / `TOPOLO_SERVICE_URL_*` overrides.
- */
-declare const ENVIRONMENT_DEFAULT_SERVICE_URLS: Record<TopoloEnvironment, Record<string, string>>;
-declare function configPath(): string;
-declare function readConfig(): Promise<TopoloConfig>;
-declare function writeConfig(config: TopoloConfig): Promise<void>;
-declare function normalizeEnvironment(value: string | undefined): TopoloEnvironment;
-declare function selectedEnvironment(): TopoloEnvironment;
-declare function envVarPrefix(environment: TopoloEnvironment): string;
-declare function profileForEnvironment(config: TopoloConfig, environment?: TopoloEnvironment): TopoloEnvironmentProfile;
-declare function writeProfileConfig(config: TopoloConfig, environment: TopoloEnvironment, profile: TopoloEnvironmentProfile): TopoloConfig;
-declare function clearProfileCredential(config: TopoloConfig, environment: TopoloEnvironment): TopoloConfig;
-declare function credentialSourceFromConfig(config: TopoloConfig, environment?: TopoloEnvironment): string;
-/**
- * Resolve credentials with env-var precedence over on-disk config.
- * Env vars are what agents set in their environment; config is what
- * interactive users get after running `topolo auth login`.
- */
-declare function resolveCredential(environment?: TopoloEnvironment): Promise<TopoloCredential | null>;
-declare function refreshCredentialIfNeeded(environment?: TopoloEnvironment): Promise<TopoloCredential | null>;
-declare function resolveAgentName(configAgentName?: string): string | undefined;
-declare function resolveServiceUrls(configUrls?: Record<string, string>, environment?: TopoloEnvironment): Record<string, string> | undefined;
-declare function resolvedProfileConfig(config: TopoloConfig, environment?: TopoloEnvironment): TopoloEnvironmentProfile;
-
-export { ENVIRONMENT_DEFAULT_SERVICE_URLS, TOPOLO_ENVIRONMENTS, type TopoloConfig, type TopoloEnvironment, type TopoloEnvironmentProfile, clearProfileCredential, configPath, credentialSourceFromConfig, envVarPrefix, normalizeEnvironment, profileForEnvironment, readConfig, refreshCredentialIfNeeded, resolveAgentName, resolveCredential, resolveServiceUrls, resolvedProfileConfig, selectedEnvironment, writeConfig, writeProfileConfig };