@topolo/sdk 0.9.0 → 0.9.2

package/dist/index.cjs

@@ -127,6 +127,7 @@ var APP_API_URLS = {
   auth: "https://auth.topolo.app",
   backup: "https://backup.topolo.app",
   books: "https://books.topolo.app",
+  brand: "https://brand.topolo.app",
   bugfix: "https://bugfix.topolo.app",
   bytes: "https://bytes.topolo.app",
   calendar: "https://calendar.topolo.app",
@@ -309,6 +310,38 @@ var APPLICATIONS = {
       }
     ]
   },
+  "brand": {
+    "id": "brand",
+    "appDir": "TopoloBrand",
+    "name": "topolo-brand",
+    "packageName": "@topolo/topolo-brand",
+    "productionUrl": "https://brand.topolo.app",
+    "services": [
+      "brand"
+    ],
+    "deployTargets": [
+      {
+        "name": "topolo-brand",
+        "kind": "worker",
+        "apiUrl": "https://brand.topolo.app",
+        "domains": [
+          "brand.topolo.app"
+        ],
+        "routes": [
+          "brand.topolo.app"
+        ],
+        "appId": "brand"
+      },
+      {
+        "name": "topolo-brand-api",
+        "kind": "worker",
+        "apiUrl": null,
+        "domains": [],
+        "routes": [],
+        "appId": null
+      }
+    ]
+  },
   "bugfix": {
     "id": "bugfix",
     "appDir": "TopoloBugFix",
@@ -2431,6 +2464,8 @@ var TopoloClient = class _TopoloClient {
   requireConfirmForWrites;
   timeoutMs;
   fetchImpl;
+  credentialProvider;
+  credentialLoadInFlight = null;
   refreshCredential;
   refreshInFlight = null;
   debug;
@@ -2458,6 +2493,7 @@ var TopoloClient = class _TopoloClient {
     this.requireConfirmForWrites = options.requireConfirmForWrites !== false;
     this.timeoutMs = options.timeoutMs ?? 3e4;
     this.fetchImpl = options.fetch ?? fetch;
+    this.credentialProvider = options.credentialProvider;
     this.refreshCredential = options.refreshCredential;
     this.debug = options.debug;
   }
@@ -2480,6 +2516,7 @@ var TopoloClient = class _TopoloClient {
         `Mutating ${method} requests require { confirm: true }. This guardrail prevents agents from issuing writes without an explicit human-in-the-loop acknowledgement.`
       );
     }
+    await this.loadCurrentCredential();
     const resolvedService = opts.baseUrl ? { serviceKey: normalizeLookupKey(opts.service), baseUrl: requireHttpOrigin(opts.baseUrl) } : await this.resolveRequestService(opts.service);
     const baseUrl = resolvedService.baseUrl;
     const url = new URL(opts.path, baseUrl.endsWith("/") ? baseUrl : `${baseUrl}/`);
@@ -2591,6 +2628,19 @@ var TopoloClient = class _TopoloClient {
     });
     return parsed;
   }
+  async loadCurrentCredential() {
+    if (!this.credentialProvider) return;
+    this.credentialLoadInFlight ??= this.credentialProvider().then((credential) => {
+      if (!credential) {
+        throw new TopoloAuthError("The configured Topolo credential is no longer available.");
+      }
+      this.credential = credential;
+      return credential;
+    }).finally(() => {
+      this.credentialLoadInFlight = null;
+    });
+    await this.credentialLoadInFlight;
+  }
   async refreshRejectedAccessToken(attemptedAccessToken) {
     if (this.credential.kind === "access_token" && this.credential.accessToken !== attemptedAccessToken) {
       return this.credential;

package/dist/index.d.cts

@@ -58,6 +58,12 @@ interface TopoloClientOptions {
     timeoutMs?: number;
     /** Injected fetch, for testing. Defaults to global fetch. */
     fetch?: typeof fetch;
+    /**
+     * Load the credential currently stored for this client before each request.
+     * Long-lived hosts use this to adopt context reauthentication and claim
+     * changes without waiting for the previous token to fail with a 401.
+     */
+    credentialProvider?: () => Promise<TopoloCredential | null>;
     /**
      * Refresh a rejected access-token credential. When supplied, the client
      * retries one 401 response with the returned credential. Concurrent 401s
@@ -270,6 +276,8 @@ declare class TopoloClient {
     private readonly requireConfirmForWrites;
     private readonly timeoutMs;
     private readonly fetchImpl;
+    private readonly credentialProvider?;
+    private credentialLoadInFlight;
     private readonly refreshCredential?;
     private refreshInFlight;
     private readonly debug?;
@@ -293,6 +301,7 @@ declare class TopoloClient {
      * use and for the generic `topolo api` / MCP passthrough tool.
      */
     request<T = unknown>(opts: RequestOptions): Promise<T>;
+    private loadCurrentCredential;
     private refreshRejectedAccessToken;
     private resolveRequestService;
     private resolveLiveCallableService;
@@ -430,6 +439,7 @@ declare const APP_API_URLS: {
     readonly auth: "https://auth.topolo.app";
     readonly backup: "https://backup.topolo.app";
     readonly books: "https://books.topolo.app";
+    readonly brand: "https://brand.topolo.app";
     readonly bugfix: "https://bugfix.topolo.app";
     readonly bytes: "https://bytes.topolo.app";
     readonly calendar: "https://calendar.topolo.app";
@@ -579,6 +589,29 @@ declare const APPLICATIONS: {
             readonly appId: null;
         }];
     };
+    readonly brand: {
+        readonly id: "brand";
+        readonly appDir: "TopoloBrand";
+        readonly name: "topolo-brand";
+        readonly packageName: "@topolo/topolo-brand";
+        readonly productionUrl: "https://brand.topolo.app";
+        readonly services: readonly ["brand"];
+        readonly deployTargets: readonly [{
+            readonly name: "topolo-brand";
+            readonly kind: "worker";
+            readonly apiUrl: "https://brand.topolo.app";
+            readonly domains: readonly ["brand.topolo.app"];
+            readonly routes: readonly ["brand.topolo.app"];
+            readonly appId: "brand";
+        }, {
+            readonly name: "topolo-brand-api";
+            readonly kind: "worker";
+            readonly apiUrl: null;
+            readonly domains: readonly [];
+            readonly routes: readonly [];
+            readonly appId: null;
+        }];
+    };
     readonly bugfix: {
         readonly id: "bugfix";
         readonly appDir: "TopoloBugFix";

package/dist/index.d.ts

@@ -58,6 +58,12 @@ interface TopoloClientOptions {
     timeoutMs?: number;
     /** Injected fetch, for testing. Defaults to global fetch. */
     fetch?: typeof fetch;
+    /**
+     * Load the credential currently stored for this client before each request.
+     * Long-lived hosts use this to adopt context reauthentication and claim
+     * changes without waiting for the previous token to fail with a 401.
+     */
+    credentialProvider?: () => Promise<TopoloCredential | null>;
     /**
      * Refresh a rejected access-token credential. When supplied, the client
      * retries one 401 response with the returned credential. Concurrent 401s
@@ -270,6 +276,8 @@ declare class TopoloClient {
     private readonly requireConfirmForWrites;
     private readonly timeoutMs;
     private readonly fetchImpl;
+    private readonly credentialProvider?;
+    private credentialLoadInFlight;
     private readonly refreshCredential?;
     private refreshInFlight;
     private readonly debug?;
@@ -293,6 +301,7 @@ declare class TopoloClient {
      * use and for the generic `topolo api` / MCP passthrough tool.
      */
     request<T = unknown>(opts: RequestOptions): Promise<T>;
+    private loadCurrentCredential;
     private refreshRejectedAccessToken;
     private resolveRequestService;
     private resolveLiveCallableService;
@@ -430,6 +439,7 @@ declare const APP_API_URLS: {
     readonly auth: "https://auth.topolo.app";
     readonly backup: "https://backup.topolo.app";
     readonly books: "https://books.topolo.app";
+    readonly brand: "https://brand.topolo.app";
     readonly bugfix: "https://bugfix.topolo.app";
     readonly bytes: "https://bytes.topolo.app";
     readonly calendar: "https://calendar.topolo.app";
@@ -579,6 +589,29 @@ declare const APPLICATIONS: {
             readonly appId: null;
         }];
     };
+    readonly brand: {
+        readonly id: "brand";
+        readonly appDir: "TopoloBrand";
+        readonly name: "topolo-brand";
+        readonly packageName: "@topolo/topolo-brand";
+        readonly productionUrl: "https://brand.topolo.app";
+        readonly services: readonly ["brand"];
+        readonly deployTargets: readonly [{
+            readonly name: "topolo-brand";
+            readonly kind: "worker";
+            readonly apiUrl: "https://brand.topolo.app";
+            readonly domains: readonly ["brand.topolo.app"];
+            readonly routes: readonly ["brand.topolo.app"];
+            readonly appId: "brand";
+        }, {
+            readonly name: "topolo-brand-api";
+            readonly kind: "worker";
+            readonly apiUrl: null;
+            readonly domains: readonly [];
+            readonly routes: readonly [];
+            readonly appId: null;
+        }];
+    };
     readonly bugfix: {
         readonly id: "bugfix";
         readonly appDir: "TopoloBugFix";

package/dist/index.js

@@ -68,6 +68,7 @@ var APP_API_URLS = {
   auth: "https://auth.topolo.app",
   backup: "https://backup.topolo.app",
   books: "https://books.topolo.app",
+  brand: "https://brand.topolo.app",
   bugfix: "https://bugfix.topolo.app",
   bytes: "https://bytes.topolo.app",
   calendar: "https://calendar.topolo.app",
@@ -250,6 +251,38 @@ var APPLICATIONS = {
       }
     ]
   },
+  "brand": {
+    "id": "brand",
+    "appDir": "TopoloBrand",
+    "name": "topolo-brand",
+    "packageName": "@topolo/topolo-brand",
+    "productionUrl": "https://brand.topolo.app",
+    "services": [
+      "brand"
+    ],
+    "deployTargets": [
+      {
+        "name": "topolo-brand",
+        "kind": "worker",
+        "apiUrl": "https://brand.topolo.app",
+        "domains": [
+          "brand.topolo.app"
+        ],
+        "routes": [
+          "brand.topolo.app"
+        ],
+        "appId": "brand"
+      },
+      {
+        "name": "topolo-brand-api",
+        "kind": "worker",
+        "apiUrl": null,
+        "domains": [],
+        "routes": [],
+        "appId": null
+      }
+    ]
+  },
   "bugfix": {
     "id": "bugfix",
     "appDir": "TopoloBugFix",
@@ -2372,6 +2405,8 @@ var TopoloClient = class _TopoloClient {
   requireConfirmForWrites;
   timeoutMs;
   fetchImpl;
+  credentialProvider;
+  credentialLoadInFlight = null;
   refreshCredential;
   refreshInFlight = null;
   debug;
@@ -2399,6 +2434,7 @@ var TopoloClient = class _TopoloClient {
     this.requireConfirmForWrites = options.requireConfirmForWrites !== false;
     this.timeoutMs = options.timeoutMs ?? 3e4;
     this.fetchImpl = options.fetch ?? fetch;
+    this.credentialProvider = options.credentialProvider;
     this.refreshCredential = options.refreshCredential;
     this.debug = options.debug;
   }
@@ -2421,6 +2457,7 @@ var TopoloClient = class _TopoloClient {
         `Mutating ${method} requests require { confirm: true }. This guardrail prevents agents from issuing writes without an explicit human-in-the-loop acknowledgement.`
       );
     }
+    await this.loadCurrentCredential();
     const resolvedService = opts.baseUrl ? { serviceKey: normalizeLookupKey(opts.service), baseUrl: requireHttpOrigin(opts.baseUrl) } : await this.resolveRequestService(opts.service);
     const baseUrl = resolvedService.baseUrl;
     const url = new URL(opts.path, baseUrl.endsWith("/") ? baseUrl : `${baseUrl}/`);
@@ -2532,6 +2569,19 @@ var TopoloClient = class _TopoloClient {
     });
     return parsed;
   }
+  async loadCurrentCredential() {
+    if (!this.credentialProvider) return;
+    this.credentialLoadInFlight ??= this.credentialProvider().then((credential) => {
+      if (!credential) {
+        throw new TopoloAuthError("The configured Topolo credential is no longer available.");
+      }
+      this.credential = credential;
+      return credential;
+    }).finally(() => {
+      this.credentialLoadInFlight = null;
+    });
+    await this.credentialLoadInFlight;
+  }
   async refreshRejectedAccessToken(attemptedAccessToken) {
     if (this.credential.kind === "access_token" && this.credential.accessToken !== attemptedAccessToken) {
       return this.credential;

package/dist/node/credential-store.cjs

@@ -84,6 +84,7 @@ var APP_API_URLS = {
   auth: "https://auth.topolo.app",
   backup: "https://backup.topolo.app",
   books: "https://books.topolo.app",
+  brand: "https://brand.topolo.app",
   bugfix: "https://bugfix.topolo.app",
   bytes: "https://bytes.topolo.app",
   calendar: "https://calendar.topolo.app",
@@ -393,9 +394,9 @@ async function refreshCredentialIfNeeded(environment = selectedEnvironment(), op
   const profile = profileForEnvironment(config, environment);
   const cred = profile.credential;
   if (!cred || cred.kind !== "access_token") return cred ?? null;
-  if (!cred.refreshToken || !cred.expiresAt || !profile.oauthClientId) return cred;
+  if (!cred.refreshToken || !profile.oauthClientId) return cred;
   const now = Math.floor(Date.now() / 1e3);
-  if (!options.force && cred.expiresAt - REFRESH_SKEW_SECONDS > now) return cred;
+  if (!options.force && cred.expiresAt && cred.expiresAt - REFRESH_SKEW_SECONDS > now) return cred;
   try {
     const oauth = new TopoloOAuth({
       serviceUrls: resolveServiceUrls(profile.serviceUrls, environment)
@@ -436,9 +437,9 @@ async function refreshContextCredentialIfNeeded(environment, key, options = {})
   const credential = context?.credential;
   if (!credential || credential.kind !== "access_token") return credential ?? null;
   const oauthClientId = context.oauthClientId ?? profile.oauthClientId;
-  if (!credential.refreshToken || !credential.expiresAt || !oauthClientId) return credential;
+  if (!credential.refreshToken || !oauthClientId) return credential;
   const now = Math.floor(Date.now() / 1e3);
-  if (!options.force && credential.expiresAt - REFRESH_SKEW_SECONDS > now) return credential;
+  if (!options.force && credential.expiresAt && credential.expiresAt - REFRESH_SKEW_SECONDS > now) return credential;
   try {
     const oauth = new TopoloOAuth({
       serviceUrls: resolveServiceUrls(profile.serviceUrls, environment)

package/dist/node/credential-store.js

@@ -40,6 +40,7 @@ var APP_API_URLS = {
   auth: "https://auth.topolo.app",
   backup: "https://backup.topolo.app",
   books: "https://books.topolo.app",
+  brand: "https://brand.topolo.app",
   bugfix: "https://bugfix.topolo.app",
   bytes: "https://bytes.topolo.app",
   calendar: "https://calendar.topolo.app",
@@ -349,9 +350,9 @@ async function refreshCredentialIfNeeded(environment = selectedEnvironment(), op
   const profile = profileForEnvironment(config, environment);
   const cred = profile.credential;
   if (!cred || cred.kind !== "access_token") return cred ?? null;
-  if (!cred.refreshToken || !cred.expiresAt || !profile.oauthClientId) return cred;
+  if (!cred.refreshToken || !profile.oauthClientId) return cred;
   const now = Math.floor(Date.now() / 1e3);
-  if (!options.force && cred.expiresAt - REFRESH_SKEW_SECONDS > now) return cred;
+  if (!options.force && cred.expiresAt && cred.expiresAt - REFRESH_SKEW_SECONDS > now) return cred;
   try {
     const oauth = new TopoloOAuth({
       serviceUrls: resolveServiceUrls(profile.serviceUrls, environment)
@@ -392,9 +393,9 @@ async function refreshContextCredentialIfNeeded(environment, key, options = {})
   const credential = context?.credential;
   if (!credential || credential.kind !== "access_token") return credential ?? null;
   const oauthClientId = context.oauthClientId ?? profile.oauthClientId;
-  if (!credential.refreshToken || !credential.expiresAt || !oauthClientId) return credential;
+  if (!credential.refreshToken || !oauthClientId) return credential;
   const now = Math.floor(Date.now() / 1e3);
-  if (!options.force && credential.expiresAt - REFRESH_SKEW_SECONDS > now) return credential;
+  if (!options.force && credential.expiresAt && credential.expiresAt - REFRESH_SKEW_SECONDS > now) return credential;
   try {
     const oauth = new TopoloOAuth({
       serviceUrls: resolveServiceUrls(profile.serviceUrls, environment)

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@topolo/sdk",
-  "version": "0.9.0",
-  "topoloPublishedVersion": "0.9.0",
+  "version": "0.9.2",
+  "topoloPublishedVersion": "0.9.2",
   "description": "Typed client SDK for the Topolo platform. Used by TopoloCli, TopoloMCP, and third-party agents.",
   "type": "module",
   "main": "./dist/index.js",