@topolo/sdk 0.9.10 → 0.10.0

package/dist/index.d.cts

@@ -427,8 +427,9 @@ declare class TopoloClient {
     }): Promise<T>;
     private executeResolvedAction;
     /**
-     * Bundled generated registry for tooling that audits platform packaging, not
-     * for deciding what the current credential may use.
+     * @deprecated Static fallback snapshot only. Use `searchServices()` (the
+     * live credential-scoped registry) for anything that decides behavior; this
+     * exists for offline packaging audits when the registry is unreachable.
      */
     listBundledServices(): TopoloServiceCatalogEntry[];
     /**
@@ -524,58 +525,20 @@ declare function actionContractCompleteness(
   action: ActionContractSource,
 ): Record<string, boolean>;
 
+/**
+ * Bootstrap seed URLs — the ONLY static service endpoints in the SDK.
+ *
+ * `auth` and `developers` must be reachable before the live registry can be
+ * consulted at all: developers serves the service catalog itself, so resolving
+ * it through the catalog would recurse, and auth issues the credentials the
+ * catalog is scoped by. Every other application resolves from the live
+ * credential-scoped registry (see application-directory.ts and
+ * TopoloClient.resolveRequestService). Never add entries here — a new app
+ * belongs in the live registry, not in compiled client code.
+ */
 declare const APP_API_URLS: {
-    readonly agent: "https://agent.topolo.app";
     readonly auth: "https://auth.topolo.app";
-    readonly backup: "https://backup.topolo.app";
-    readonly blog: "https://blog.topolo.app";
-    readonly books: "https://books.topolo.app";
-    readonly brand: "https://brand.topolo.app";
-    readonly bugfix: "https://bugfix.topolo.app";
-    readonly bytes: "https://bytes.topolo.app";
-    readonly calendar: "https://calendar.topolo.app";
-    readonly campaigns: "https://campaigns.topolo.app";
-    readonly capacity: "https://capacity.topolo.app";
-    readonly chat: "https://chat.topolo.app";
-    readonly commerce: "https://commerce.topolo.app";
-    readonly compose: "https://compose.topolo.app";
-    readonly consent: "https://consent.topolo.app";
-    readonly crm: "https://crm.topolo.app";
-    readonly design: "https://design.topolo.app";
     readonly developers: "https://developers.topolo.app";
-    readonly director: "https://director.topolo.app";
-    readonly feed: "https://feed.topolo.app";
-    readonly flow: "https://flow.topolo.app";
-    readonly forecast: "https://forecast.topolo.app";
-    readonly forms: "https://forms.topolo.app";
-    readonly home: "https://home.topolo.app";
-    readonly insights: "https://insights.topolo.app";
-    readonly inventory: "https://inventory.topolo.app";
-    readonly learn: "https://learn.topolo.app";
-    readonly localize: "https://localize.topolo.app";
-    readonly mail: "https://mail.topolo.app";
-    readonly mdm: "https://mdm.topolo.app";
-    readonly messages: "https://messages.topolo.app";
-    readonly nexus: "https://nexus.topolo.app";
-    readonly notify: "https://notify.topolo.app";
-    readonly observability_watch: "https://observability-watch.topolo.app";
-    readonly one: "https://www.topolo.app";
-    readonly p2p: "https://p2p.topolo.app";
-    readonly pay: "https://pay.topolo.app";
-    readonly people: "https://people.topolo.app";
-    readonly "quro.api": "https://api.ol0.me";
-    readonly "quro.redirect": "https://ol0.me";
-    readonly roadmapper: "https://roadmapper.topolo.app";
-    readonly sign: "https://sign.topolo.app";
-    readonly social_studio: "https://studio.topolo.app";
-    readonly socialize: "https://socialize.topolo.app";
-    readonly spaces: "https://spaces.topolo.app";
-    readonly status: "https://status.topolo.app";
-    readonly success: "https://success.topolo.app";
-    readonly support: "https://support.topolo.app";
-    readonly survey: "https://survey.topolo.app";
-    readonly voice: "https://voice.topolo.app";
-    readonly web: "https://web.topolo.app";
 };
 type AppApiId = keyof typeof APP_API_URLS;
 
@@ -1791,11 +1754,102 @@ declare const APPLICATIONS: {
         }];
     };
 };
-type ApplicationId = keyof typeof APPLICATIONS;
-type ApplicationCatalogEntry = (typeof APPLICATIONS)[ApplicationId];
-type ApplicationDeployTarget = ApplicationCatalogEntry['deployTargets'][number];
 
-declare const APPLICATION_REQUIREMENTS_VERSION = "2026-06-07.1";
+/**
+ * Live application directory — resolve, enumerate, and identify platform
+ * applications from the credential-scoped live registry.
+ *
+ * The platform scales to millions of constantly-changing applications, so no
+ * compiled application map may gate behavior. The live registry
+ * (`searchServices` / `getService` on the Catalog service) is the source of
+ * truth. The bundled static snapshot (`applications-fallback.ts`) is consulted
+ * ONLY when the registry is unreachable (network failure, no credential), and
+ * as metadata enrichment for apps the registry already confirmed — it must
+ * never cause a registry-known application to be rejected.
+ */
+
+interface ApplicationDeployTarget {
+    name: string;
+    kind: string;
+    apiUrl: string | null;
+    domains: readonly string[];
+    routes: readonly string[];
+    appId: string | null;
+}
+interface ApplicationCatalogEntry {
+    id: string;
+    appDir: string;
+    name: string;
+    packageName: string | null;
+    productionUrl: string | null;
+    services: readonly string[];
+    deployTargets: readonly ApplicationDeployTarget[];
+}
+/**
+ * Application ids are open-ended — they come from the live registry, not a
+ * compiled union. Kept as a named alias for source compatibility.
+ */
+type ApplicationId = string;
+/**
+ * Derive the human-friendly application id from a live catalog entry: the
+ * canonical slug with the vendor prefix stripped (`topolo-notify` → `notify`).
+ * Falls back through name and appId (`app_topolo_notify` → `notify`). Never
+ * consults a static map, so newly registered applications get a friendly id
+ * without a client rebuild.
+ */
+declare function friendlyAppId(entry: {
+    appId: string;
+    slug?: string | null;
+    name?: string | null;
+}): string;
+/** Synthesize a catalog entry for an application known only to the live registry. */
+declare function applicationEntryFromCatalog(live: TopoloServiceCatalogEntry): ApplicationCatalogEntry;
+type ApplicationDirectorySource = 'live' | 'static_fallback';
+interface ApplicationDirectoryApplication {
+    id: string;
+    application: ApplicationCatalogEntry;
+    source: 'live' | 'static';
+    live: TopoloServiceCatalogEntry | null;
+}
+interface ApplicationDirectory {
+    source: ApplicationDirectorySource;
+    applications: ApplicationDirectoryApplication[];
+}
+/** The subset of TopoloClient the directory helpers need (test-injectable). */
+interface ApplicationDirectoryClient {
+    searchServices(options?: {
+        query?: string;
+        cursor?: string;
+        limit?: number;
+    }): Promise<{
+        services: TopoloServiceCatalogEntry[];
+        page: {
+            nextCursor: string | null;
+        };
+    }>;
+    getService(application: string): Promise<TopoloServiceCatalogEntry>;
+}
+/** Static snapshot as a directory — the registry-unreachable fallback. */
+declare function staticApplicationDirectory(): ApplicationDirectory;
+/**
+ * Enumerate every application the current credential can see in the live
+ * registry (walking the continuation cursor to exhaustion). Falls back to the
+ * bundled static snapshot only when the registry cannot be reached — pass
+ * `null` as the client to request the fallback explicitly (e.g. no credential
+ * configured).
+ */
+declare function listApplicationDirectory(client: ApplicationDirectoryClient | null): Promise<ApplicationDirectory>;
+declare function formatDirectoryApplicationIds(directory: ApplicationDirectory): string;
+/**
+ * Resolve one application by id, slug, or name against the live registry.
+ * Registry-known apps always resolve — the static snapshot can only enrich
+ * them, never reject them. When the registry is reachable and does not know
+ * the application, the error lists the live ids. When the registry is
+ * unreachable (or `client` is null), the static snapshot answers instead.
+ */
+declare function resolveApplicationDirectoryEntry(client: ApplicationDirectoryClient | null, application: string): Promise<ApplicationDirectoryApplication>;
+
+declare const APPLICATION_REQUIREMENTS_VERSION = "2026-08-11.1";
 type ApplicationRequirementScope = 'all' | 'browser' | 'api' | 'tooling' | 'agent_surface';
 interface ApplicationRequirement {
     id: string;
@@ -1848,8 +1902,8 @@ declare const APPLICATION_REQUIREMENTS: readonly [{
     readonly title: "Register the application in platform metadata";
     readonly summary: "Every app must have a stable application ID, CloudControl metadata for deployed surfaces, and package metadata where code is shipped.";
     readonly appliesTo: readonly ["all"];
-    readonly evidence: readonly ["topolo.cloudcontrol.json exists for every deployed app surface", "package.json names the package or app when the repo ships code", "The SDK application catalog exposes the app through topolo apps and MCP discovery"];
-    readonly implementation: readonly ["Add the app to the SDK application catalog generator before exposing it to agents", "Keep production URLs, Worker names, Pages projects, routes, domains, and bindings current in CloudControl metadata", "Do not leave a new Topolo* app directory without an explicit application ID"];
+    readonly evidence: readonly ["topolo.cloudcontrol.json exists for every deployed app surface", "package.json names the package or app when the repo ships code", "The live platform registry exposes the app through topolo apps and MCP discovery"];
+    readonly implementation: readonly ["Register the app in the live platform registry (Auth service catalog) before exposing it to agents", "Keep production URLs, Worker names, Pages projects, routes, domains, and bindings current in CloudControl metadata", "Do not leave a new Topolo* app directory without an explicit application ID"];
 }, {
     readonly id: "canonical-docs";
     readonly title: "Update canonical docs with the code change";
@@ -1877,7 +1931,7 @@ declare const APPLICATION_REQUIREMENTS: readonly [{
     readonly summary: "Callable app APIs need a stable app ID, app slug, permissions, role bundles, and API-key scopes before agents or users rely on them.";
     readonly appliesTo: readonly ["api"];
     readonly evidence: readonly ["Auth app catalog contains the app ID and slug", "Permissions, role bundles, and API-key scopes exist for the app", "SDK, CLI, and MCP app discovery include the callable production API", "CloudControl production HTTP targets classify agent reachability with sdk_app_id or agent_callable:false"];
-    readonly implementation: readonly ["Add production Worker api_url metadata and sdk_app_id for every agent-callable API target", "Mark browser, documentation, and runtime-only Worker targets with agent_callable:false", "Expose stable app IDs through generated DEFAULT_APP_URLS and live catalog discovery", "Keep typed SDK/CLI/MCP surfaces in sync when an API contract stabilizes"];
+    readonly implementation: readonly ["Add production Worker api_url metadata and sdk_app_id for every agent-callable API target", "Mark browser, documentation, and runtime-only Worker targets with agent_callable:false", "Expose stable app IDs through live catalog discovery", "Keep typed SDK/CLI/MCP surfaces in sync when an API contract stabilizes"];
 }, {
     readonly id: "organization-scoped-data";
     readonly title: "Keep application data organization-scoped";
@@ -1924,24 +1978,33 @@ declare const APPLICATION_REQUIREMENTS: readonly [{
 declare function applicationRequirementScopes(application: ApplicationCatalogEntry): ApplicationRequirementScope[];
 declare function requirementsForApplication(applicationOrId: ApplicationCatalogEntry | ApplicationId): ApplicationRequirement[];
 declare function auditApplicationRequirements(applicationOrId: ApplicationCatalogEntry | ApplicationId): ApplicationRequirementAudit;
+/**
+ * Build the full audit report for a set of already-resolved catalog entries.
+ * Live callers resolve entries through the application directory and pass them
+ * here; the id-based wrapper below serves only the static-fallback path.
+ */
+declare function auditApplicationEntries(applications: readonly ApplicationCatalogEntry[]): ApplicationRequirementsAuditReport;
 declare function auditAllApplicationRequirements(applicationIds?: readonly ApplicationId[]): ApplicationRequirementsAuditReport;
 
 /**
- * App API registry — base URLs for callable Topolo platform APIs.
+ * Service URL resolution.
  *
- * Source of truth lives in each app's `topolo.cloudcontrol.json`. The
- * `APP_API_URLS` map is regenerated from those files via
- * `scripts/generate-services.mjs`; edit the JSON, not the generated file.
+ * The live credential-scoped registry is the source of truth for every
+ * callable application (see application-directory.ts and
+ * `TopoloClient.searchServices`). The only static URLs the SDK ships are the
+ * bootstrap seeds in `bootstrap-services.ts` (`auth` + `developers`) — the two
+ * endpoints that must be reachable before the registry can be consulted.
  *
- * Any entry can be overridden per-call via `TopoloClient` options, or globally
- * via env vars like `TOPOLO_APP_URL_MAIL` or `TOPOLO_APP_URL_WEB_API`
- * (dots in app API keys become underscores in env vars).
+ * Any URL can be overridden per-call via `TopoloClient` options, or globally
+ * via env vars like `TOPOLO_APP_URL_AUTH` (dots in service keys become
+ * underscores in env vars).
  *
  * IMPORTANT: The SDK NEVER accepts `orgId` as a parameter. Every request is
  * scoped to the organization embedded in the auth credential (JWT claim or
  * API-key binding). This is the load-bearing cross-org isolation guarantee.
  */
 
+/** Bootstrap seed URLs (auth + developers). Kept under the legacy name. */
 declare const DEFAULT_APP_URLS: Record<AppApiId, string>;
 interface ServiceCatalogUrlEntry {
     appId?: string | null;
@@ -1956,7 +2019,7 @@ declare function resolveCatalogServiceUrl(entry: ServiceCatalogUrlEntry, options
     serviceKey?: string;
     overrides?: Record<string, string> | Partial<Record<AppApiId, string>>;
 }): string | null;
-declare function resolveServiceUrl(service: AppApiId, overrides?: Partial<Record<AppApiId, string>>): string;
+declare function resolveServiceUrl(service: AppApiId, overrides?: Partial<Record<AppApiId, string>> | Record<string, string>): string;
 
 declare class TopoloSdkError extends Error {
     readonly code: string;
@@ -2546,4 +2609,4 @@ declare function createTopolo(options: TopoloClientOptions): {
 };
 type Topolo = ReturnType<typeof createTopolo>;
 
-export { ACTION_CATALOG_DIGEST_ALGORITHM, APPLICATIONS, APPLICATION_REQUIREMENTS, APPLICATION_REQUIREMENTS_VERSION, type ActionContractManifest, type ActionContractSource, type AgentIdentity, type AppApiId, type ApplicationCatalogEntry, type ApplicationDeployTarget, type ApplicationId, type ApplicationRequirement, type ApplicationRequirementAudit, type ApplicationRequirementFinding, type ApplicationRequirementMigrationItem, type ApplicationRequirementScope, type ApplicationRequirementScore, type ApplicationRequirementStatus, type ApplicationRequirementsAuditReport, type CredentialIntrospection, type CrmContactSummary, CrmModule, DEFAULT_APP_URLS, type DeviceAuthorizationResponse, IdentityModule, type ListContactsOptions, type ListContactsResult, type OAuthHelperOptions, type P2PActionDetail, type P2PActionRequestInput, type P2PActionRequestResult, type P2PActionRow, type P2PActionRun, type P2PCapability, type P2PConnection, type P2PHold, type P2PLedgerEntry, P2PModule, type P2PPolicy, type P2PPricingModel, type P2PSettlementBatch, type P2PSettlementGroup, type PublishCapabilityInput, type RequestOptions, type ServiceCatalogUrlEntry, TOPOLO_WIDGET_ENDPOINT, TOPOLO_WIDGET_REFRESH_INTERVAL_MS, type TokenResponse, type Topolo, type TopoloActionAgentContract, type TopoloActionCatalogEntry, type TopoloActionCatalogSummary, type TopoloActionDigestInput, type TopoloActionPlan, type TopoloActionUploadOptions, type TopoloActionValidationIssue, type TopoloActionValidationResult, type TopoloApiKeyResourceMetadata, TopoloAuthError, type TopoloBindableResource, type TopoloBindableResourceCatalog, type TopoloChartWidget, TopoloClient, type TopoloClientOptions, TopoloConfirmationRequiredError, type TopoloCredential, type TopoloDebugEvent, TopoloHttpError, type TopoloInlineBase64UploadContract, type TopoloNotificationsWidget, TopoloOAuth, TopoloPermissionError, type TopoloQuickActionsWidget, type TopoloRecentActivityWidget, TopoloSdkError, type TopoloServiceCatalogEntry, type TopoloStatsWidget, type TopoloWidget, type TopoloWidgetActionItem, type TopoloWidgetActivityItem, type TopoloWidgetApiResponse, type TopoloWidgetBase, type TopoloWidgetConfig, type TopoloWidgetDraft, type TopoloWidgetMetric, type TopoloWidgetNotificationItem, type TopoloWidgetResponseOptions, type TopoloWidgetSnapshotMetadata, type TopoloWidgetSnapshotMetric, type TopoloWidgetType, type TopoloWidgetValidationResult, type TopoloWorkspace, type TopoloWorkspaceListResult, type TopoloWorkspaceMutationResult, type TopoloWorkspacePolicy, WorkspacesModule, actionContractCompleteness, applicationRequirementScopes, auditAllApplicationRequirements, auditApplicationRequirements, createTopolo, createTopoloWidgetError, createTopoloWidgetResponse, defineTopoloChartWidget, defineTopoloNotificationsWidget, defineTopoloQuickActionsWidget, defineTopoloRecentActivityWidget, defineTopoloStatsWidget, digestTopoloActionCatalog, enrichActionContract, parseTopoloActionUploadContract, prepareTopoloActionBase64UploadInput, prepareTopoloActionUploadInput, requirementsForApplication, resolveCatalogServiceUrl, resolveServiceUrl, validateTopoloActionInput, validateTopoloWidgetResponse };
+export { ACTION_CATALOG_DIGEST_ALGORITHM, APPLICATIONS, APPLICATION_REQUIREMENTS, APPLICATION_REQUIREMENTS_VERSION, type ActionContractManifest, type ActionContractSource, type AgentIdentity, type AppApiId, type ApplicationCatalogEntry, type ApplicationDeployTarget, type ApplicationDirectory, type ApplicationDirectoryApplication, type ApplicationDirectoryClient, type ApplicationDirectorySource, type ApplicationId, type ApplicationRequirement, type ApplicationRequirementAudit, type ApplicationRequirementFinding, type ApplicationRequirementMigrationItem, type ApplicationRequirementScope, type ApplicationRequirementScore, type ApplicationRequirementStatus, type ApplicationRequirementsAuditReport, type CredentialIntrospection, type CrmContactSummary, CrmModule, DEFAULT_APP_URLS, type DeviceAuthorizationResponse, IdentityModule, type ListContactsOptions, type ListContactsResult, type OAuthHelperOptions, type P2PActionDetail, type P2PActionRequestInput, type P2PActionRequestResult, type P2PActionRow, type P2PActionRun, type P2PCapability, type P2PConnection, type P2PHold, type P2PLedgerEntry, P2PModule, type P2PPolicy, type P2PPricingModel, type P2PSettlementBatch, type P2PSettlementGroup, type PublishCapabilityInput, type RequestOptions, type ServiceCatalogUrlEntry, TOPOLO_WIDGET_ENDPOINT, TOPOLO_WIDGET_REFRESH_INTERVAL_MS, type TokenResponse, type Topolo, type TopoloActionAgentContract, type TopoloActionCatalogEntry, type TopoloActionCatalogSummary, type TopoloActionDigestInput, type TopoloActionPlan, type TopoloActionUploadOptions, type TopoloActionValidationIssue, type TopoloActionValidationResult, type TopoloApiKeyResourceMetadata, TopoloAuthError, type TopoloBindableResource, type TopoloBindableResourceCatalog, type TopoloChartWidget, TopoloClient, type TopoloClientOptions, TopoloConfirmationRequiredError, type TopoloCredential, type TopoloDebugEvent, TopoloHttpError, type TopoloInlineBase64UploadContract, type TopoloNotificationsWidget, TopoloOAuth, TopoloPermissionError, type TopoloQuickActionsWidget, type TopoloRecentActivityWidget, TopoloSdkError, type TopoloServiceCatalogEntry, type TopoloStatsWidget, type TopoloWidget, type TopoloWidgetActionItem, type TopoloWidgetActivityItem, type TopoloWidgetApiResponse, type TopoloWidgetBase, type TopoloWidgetConfig, type TopoloWidgetDraft, type TopoloWidgetMetric, type TopoloWidgetNotificationItem, type TopoloWidgetResponseOptions, type TopoloWidgetSnapshotMetadata, type TopoloWidgetSnapshotMetric, type TopoloWidgetType, type TopoloWidgetValidationResult, type TopoloWorkspace, type TopoloWorkspaceListResult, type TopoloWorkspaceMutationResult, type TopoloWorkspacePolicy, WorkspacesModule, actionContractCompleteness, applicationEntryFromCatalog, applicationRequirementScopes, auditAllApplicationRequirements, auditApplicationEntries, auditApplicationRequirements, createTopolo, createTopoloWidgetError, createTopoloWidgetResponse, defineTopoloChartWidget, defineTopoloNotificationsWidget, defineTopoloQuickActionsWidget, defineTopoloRecentActivityWidget, defineTopoloStatsWidget, digestTopoloActionCatalog, enrichActionContract, formatDirectoryApplicationIds, friendlyAppId, listApplicationDirectory, parseTopoloActionUploadContract, prepareTopoloActionBase64UploadInput, prepareTopoloActionUploadInput, requirementsForApplication, resolveApplicationDirectoryEntry, resolveCatalogServiceUrl, resolveServiceUrl, staticApplicationDirectory, validateTopoloActionInput, validateTopoloWidgetResponse };

package/dist/index.d.ts

@@ -427,8 +427,9 @@ declare class TopoloClient {
     }): Promise<T>;
     private executeResolvedAction;
     /**
-     * Bundled generated registry for tooling that audits platform packaging, not
-     * for deciding what the current credential may use.
+     * @deprecated Static fallback snapshot only. Use `searchServices()` (the
+     * live credential-scoped registry) for anything that decides behavior; this
+     * exists for offline packaging audits when the registry is unreachable.
      */
     listBundledServices(): TopoloServiceCatalogEntry[];
     /**
@@ -524,58 +525,20 @@ declare function actionContractCompleteness(
   action: ActionContractSource,
 ): Record<string, boolean>;
 
+/**
+ * Bootstrap seed URLs — the ONLY static service endpoints in the SDK.
+ *
+ * `auth` and `developers` must be reachable before the live registry can be
+ * consulted at all: developers serves the service catalog itself, so resolving
+ * it through the catalog would recurse, and auth issues the credentials the
+ * catalog is scoped by. Every other application resolves from the live
+ * credential-scoped registry (see application-directory.ts and
+ * TopoloClient.resolveRequestService). Never add entries here — a new app
+ * belongs in the live registry, not in compiled client code.
+ */
 declare const APP_API_URLS: {
-    readonly agent: "https://agent.topolo.app";
     readonly auth: "https://auth.topolo.app";
-    readonly backup: "https://backup.topolo.app";
-    readonly blog: "https://blog.topolo.app";
-    readonly books: "https://books.topolo.app";
-    readonly brand: "https://brand.topolo.app";
-    readonly bugfix: "https://bugfix.topolo.app";
-    readonly bytes: "https://bytes.topolo.app";
-    readonly calendar: "https://calendar.topolo.app";
-    readonly campaigns: "https://campaigns.topolo.app";
-    readonly capacity: "https://capacity.topolo.app";
-    readonly chat: "https://chat.topolo.app";
-    readonly commerce: "https://commerce.topolo.app";
-    readonly compose: "https://compose.topolo.app";
-    readonly consent: "https://consent.topolo.app";
-    readonly crm: "https://crm.topolo.app";
-    readonly design: "https://design.topolo.app";
     readonly developers: "https://developers.topolo.app";
-    readonly director: "https://director.topolo.app";
-    readonly feed: "https://feed.topolo.app";
-    readonly flow: "https://flow.topolo.app";
-    readonly forecast: "https://forecast.topolo.app";
-    readonly forms: "https://forms.topolo.app";
-    readonly home: "https://home.topolo.app";
-    readonly insights: "https://insights.topolo.app";
-    readonly inventory: "https://inventory.topolo.app";
-    readonly learn: "https://learn.topolo.app";
-    readonly localize: "https://localize.topolo.app";
-    readonly mail: "https://mail.topolo.app";
-    readonly mdm: "https://mdm.topolo.app";
-    readonly messages: "https://messages.topolo.app";
-    readonly nexus: "https://nexus.topolo.app";
-    readonly notify: "https://notify.topolo.app";
-    readonly observability_watch: "https://observability-watch.topolo.app";
-    readonly one: "https://www.topolo.app";
-    readonly p2p: "https://p2p.topolo.app";
-    readonly pay: "https://pay.topolo.app";
-    readonly people: "https://people.topolo.app";
-    readonly "quro.api": "https://api.ol0.me";
-    readonly "quro.redirect": "https://ol0.me";
-    readonly roadmapper: "https://roadmapper.topolo.app";
-    readonly sign: "https://sign.topolo.app";
-    readonly social_studio: "https://studio.topolo.app";
-    readonly socialize: "https://socialize.topolo.app";
-    readonly spaces: "https://spaces.topolo.app";
-    readonly status: "https://status.topolo.app";
-    readonly success: "https://success.topolo.app";
-    readonly support: "https://support.topolo.app";
-    readonly survey: "https://survey.topolo.app";
-    readonly voice: "https://voice.topolo.app";
-    readonly web: "https://web.topolo.app";
 };
 type AppApiId = keyof typeof APP_API_URLS;
 
@@ -1791,11 +1754,102 @@ declare const APPLICATIONS: {
         }];
     };
 };
-type ApplicationId = keyof typeof APPLICATIONS;
-type ApplicationCatalogEntry = (typeof APPLICATIONS)[ApplicationId];
-type ApplicationDeployTarget = ApplicationCatalogEntry['deployTargets'][number];
 
-declare const APPLICATION_REQUIREMENTS_VERSION = "2026-06-07.1";
+/**
+ * Live application directory — resolve, enumerate, and identify platform
+ * applications from the credential-scoped live registry.
+ *
+ * The platform scales to millions of constantly-changing applications, so no
+ * compiled application map may gate behavior. The live registry
+ * (`searchServices` / `getService` on the Catalog service) is the source of
+ * truth. The bundled static snapshot (`applications-fallback.ts`) is consulted
+ * ONLY when the registry is unreachable (network failure, no credential), and
+ * as metadata enrichment for apps the registry already confirmed — it must
+ * never cause a registry-known application to be rejected.
+ */
+
+interface ApplicationDeployTarget {
+    name: string;
+    kind: string;
+    apiUrl: string | null;
+    domains: readonly string[];
+    routes: readonly string[];
+    appId: string | null;
+}
+interface ApplicationCatalogEntry {
+    id: string;
+    appDir: string;
+    name: string;
+    packageName: string | null;
+    productionUrl: string | null;
+    services: readonly string[];
+    deployTargets: readonly ApplicationDeployTarget[];
+}
+/**
+ * Application ids are open-ended — they come from the live registry, not a
+ * compiled union. Kept as a named alias for source compatibility.
+ */
+type ApplicationId = string;
+/**
+ * Derive the human-friendly application id from a live catalog entry: the
+ * canonical slug with the vendor prefix stripped (`topolo-notify` → `notify`).
+ * Falls back through name and appId (`app_topolo_notify` → `notify`). Never
+ * consults a static map, so newly registered applications get a friendly id
+ * without a client rebuild.
+ */
+declare function friendlyAppId(entry: {
+    appId: string;
+    slug?: string | null;
+    name?: string | null;
+}): string;
+/** Synthesize a catalog entry for an application known only to the live registry. */
+declare function applicationEntryFromCatalog(live: TopoloServiceCatalogEntry): ApplicationCatalogEntry;
+type ApplicationDirectorySource = 'live' | 'static_fallback';
+interface ApplicationDirectoryApplication {
+    id: string;
+    application: ApplicationCatalogEntry;
+    source: 'live' | 'static';
+    live: TopoloServiceCatalogEntry | null;
+}
+interface ApplicationDirectory {
+    source: ApplicationDirectorySource;
+    applications: ApplicationDirectoryApplication[];
+}
+/** The subset of TopoloClient the directory helpers need (test-injectable). */
+interface ApplicationDirectoryClient {
+    searchServices(options?: {
+        query?: string;
+        cursor?: string;
+        limit?: number;
+    }): Promise<{
+        services: TopoloServiceCatalogEntry[];
+        page: {
+            nextCursor: string | null;
+        };
+    }>;
+    getService(application: string): Promise<TopoloServiceCatalogEntry>;
+}
+/** Static snapshot as a directory — the registry-unreachable fallback. */
+declare function staticApplicationDirectory(): ApplicationDirectory;
+/**
+ * Enumerate every application the current credential can see in the live
+ * registry (walking the continuation cursor to exhaustion). Falls back to the
+ * bundled static snapshot only when the registry cannot be reached — pass
+ * `null` as the client to request the fallback explicitly (e.g. no credential
+ * configured).
+ */
+declare function listApplicationDirectory(client: ApplicationDirectoryClient | null): Promise<ApplicationDirectory>;
+declare function formatDirectoryApplicationIds(directory: ApplicationDirectory): string;
+/**
+ * Resolve one application by id, slug, or name against the live registry.
+ * Registry-known apps always resolve — the static snapshot can only enrich
+ * them, never reject them. When the registry is reachable and does not know
+ * the application, the error lists the live ids. When the registry is
+ * unreachable (or `client` is null), the static snapshot answers instead.
+ */
+declare function resolveApplicationDirectoryEntry(client: ApplicationDirectoryClient | null, application: string): Promise<ApplicationDirectoryApplication>;
+
+declare const APPLICATION_REQUIREMENTS_VERSION = "2026-08-11.1";
 type ApplicationRequirementScope = 'all' | 'browser' | 'api' | 'tooling' | 'agent_surface';
 interface ApplicationRequirement {
     id: string;
@@ -1848,8 +1902,8 @@ declare const APPLICATION_REQUIREMENTS: readonly [{
     readonly title: "Register the application in platform metadata";
     readonly summary: "Every app must have a stable application ID, CloudControl metadata for deployed surfaces, and package metadata where code is shipped.";
     readonly appliesTo: readonly ["all"];
-    readonly evidence: readonly ["topolo.cloudcontrol.json exists for every deployed app surface", "package.json names the package or app when the repo ships code", "The SDK application catalog exposes the app through topolo apps and MCP discovery"];
-    readonly implementation: readonly ["Add the app to the SDK application catalog generator before exposing it to agents", "Keep production URLs, Worker names, Pages projects, routes, domains, and bindings current in CloudControl metadata", "Do not leave a new Topolo* app directory without an explicit application ID"];
+    readonly evidence: readonly ["topolo.cloudcontrol.json exists for every deployed app surface", "package.json names the package or app when the repo ships code", "The live platform registry exposes the app through topolo apps and MCP discovery"];
+    readonly implementation: readonly ["Register the app in the live platform registry (Auth service catalog) before exposing it to agents", "Keep production URLs, Worker names, Pages projects, routes, domains, and bindings current in CloudControl metadata", "Do not leave a new Topolo* app directory without an explicit application ID"];
 }, {
     readonly id: "canonical-docs";
     readonly title: "Update canonical docs with the code change";
@@ -1877,7 +1931,7 @@ declare const APPLICATION_REQUIREMENTS: readonly [{
     readonly summary: "Callable app APIs need a stable app ID, app slug, permissions, role bundles, and API-key scopes before agents or users rely on them.";
     readonly appliesTo: readonly ["api"];
     readonly evidence: readonly ["Auth app catalog contains the app ID and slug", "Permissions, role bundles, and API-key scopes exist for the app", "SDK, CLI, and MCP app discovery include the callable production API", "CloudControl production HTTP targets classify agent reachability with sdk_app_id or agent_callable:false"];
-    readonly implementation: readonly ["Add production Worker api_url metadata and sdk_app_id for every agent-callable API target", "Mark browser, documentation, and runtime-only Worker targets with agent_callable:false", "Expose stable app IDs through generated DEFAULT_APP_URLS and live catalog discovery", "Keep typed SDK/CLI/MCP surfaces in sync when an API contract stabilizes"];
+    readonly implementation: readonly ["Add production Worker api_url metadata and sdk_app_id for every agent-callable API target", "Mark browser, documentation, and runtime-only Worker targets with agent_callable:false", "Expose stable app IDs through live catalog discovery", "Keep typed SDK/CLI/MCP surfaces in sync when an API contract stabilizes"];
 }, {
     readonly id: "organization-scoped-data";
     readonly title: "Keep application data organization-scoped";
@@ -1924,24 +1978,33 @@ declare const APPLICATION_REQUIREMENTS: readonly [{
 declare function applicationRequirementScopes(application: ApplicationCatalogEntry): ApplicationRequirementScope[];
 declare function requirementsForApplication(applicationOrId: ApplicationCatalogEntry | ApplicationId): ApplicationRequirement[];
 declare function auditApplicationRequirements(applicationOrId: ApplicationCatalogEntry | ApplicationId): ApplicationRequirementAudit;
+/**
+ * Build the full audit report for a set of already-resolved catalog entries.
+ * Live callers resolve entries through the application directory and pass them
+ * here; the id-based wrapper below serves only the static-fallback path.
+ */
+declare function auditApplicationEntries(applications: readonly ApplicationCatalogEntry[]): ApplicationRequirementsAuditReport;
 declare function auditAllApplicationRequirements(applicationIds?: readonly ApplicationId[]): ApplicationRequirementsAuditReport;
 
 /**
- * App API registry — base URLs for callable Topolo platform APIs.
+ * Service URL resolution.
  *
- * Source of truth lives in each app's `topolo.cloudcontrol.json`. The
- * `APP_API_URLS` map is regenerated from those files via
- * `scripts/generate-services.mjs`; edit the JSON, not the generated file.
+ * The live credential-scoped registry is the source of truth for every
+ * callable application (see application-directory.ts and
+ * `TopoloClient.searchServices`). The only static URLs the SDK ships are the
+ * bootstrap seeds in `bootstrap-services.ts` (`auth` + `developers`) — the two
+ * endpoints that must be reachable before the registry can be consulted.
  *
- * Any entry can be overridden per-call via `TopoloClient` options, or globally
- * via env vars like `TOPOLO_APP_URL_MAIL` or `TOPOLO_APP_URL_WEB_API`
- * (dots in app API keys become underscores in env vars).
+ * Any URL can be overridden per-call via `TopoloClient` options, or globally
+ * via env vars like `TOPOLO_APP_URL_AUTH` (dots in service keys become
+ * underscores in env vars).
  *
  * IMPORTANT: The SDK NEVER accepts `orgId` as a parameter. Every request is
  * scoped to the organization embedded in the auth credential (JWT claim or
  * API-key binding). This is the load-bearing cross-org isolation guarantee.
  */
 
+/** Bootstrap seed URLs (auth + developers). Kept under the legacy name. */
 declare const DEFAULT_APP_URLS: Record<AppApiId, string>;
 interface ServiceCatalogUrlEntry {
     appId?: string | null;
@@ -1956,7 +2019,7 @@ declare function resolveCatalogServiceUrl(entry: ServiceCatalogUrlEntry, options
     serviceKey?: string;
     overrides?: Record<string, string> | Partial<Record<AppApiId, string>>;
 }): string | null;
-declare function resolveServiceUrl(service: AppApiId, overrides?: Partial<Record<AppApiId, string>>): string;
+declare function resolveServiceUrl(service: AppApiId, overrides?: Partial<Record<AppApiId, string>> | Record<string, string>): string;
 
 declare class TopoloSdkError extends Error {
     readonly code: string;
@@ -2546,4 +2609,4 @@ declare function createTopolo(options: TopoloClientOptions): {
 };
 type Topolo = ReturnType<typeof createTopolo>;
 
-export { ACTION_CATALOG_DIGEST_ALGORITHM, APPLICATIONS, APPLICATION_REQUIREMENTS, APPLICATION_REQUIREMENTS_VERSION, type ActionContractManifest, type ActionContractSource, type AgentIdentity, type AppApiId, type ApplicationCatalogEntry, type ApplicationDeployTarget, type ApplicationId, type ApplicationRequirement, type ApplicationRequirementAudit, type ApplicationRequirementFinding, type ApplicationRequirementMigrationItem, type ApplicationRequirementScope, type ApplicationRequirementScore, type ApplicationRequirementStatus, type ApplicationRequirementsAuditReport, type CredentialIntrospection, type CrmContactSummary, CrmModule, DEFAULT_APP_URLS, type DeviceAuthorizationResponse, IdentityModule, type ListContactsOptions, type ListContactsResult, type OAuthHelperOptions, type P2PActionDetail, type P2PActionRequestInput, type P2PActionRequestResult, type P2PActionRow, type P2PActionRun, type P2PCapability, type P2PConnection, type P2PHold, type P2PLedgerEntry, P2PModule, type P2PPolicy, type P2PPricingModel, type P2PSettlementBatch, type P2PSettlementGroup, type PublishCapabilityInput, type RequestOptions, type ServiceCatalogUrlEntry, TOPOLO_WIDGET_ENDPOINT, TOPOLO_WIDGET_REFRESH_INTERVAL_MS, type TokenResponse, type Topolo, type TopoloActionAgentContract, type TopoloActionCatalogEntry, type TopoloActionCatalogSummary, type TopoloActionDigestInput, type TopoloActionPlan, type TopoloActionUploadOptions, type TopoloActionValidationIssue, type TopoloActionValidationResult, type TopoloApiKeyResourceMetadata, TopoloAuthError, type TopoloBindableResource, type TopoloBindableResourceCatalog, type TopoloChartWidget, TopoloClient, type TopoloClientOptions, TopoloConfirmationRequiredError, type TopoloCredential, type TopoloDebugEvent, TopoloHttpError, type TopoloInlineBase64UploadContract, type TopoloNotificationsWidget, TopoloOAuth, TopoloPermissionError, type TopoloQuickActionsWidget, type TopoloRecentActivityWidget, TopoloSdkError, type TopoloServiceCatalogEntry, type TopoloStatsWidget, type TopoloWidget, type TopoloWidgetActionItem, type TopoloWidgetActivityItem, type TopoloWidgetApiResponse, type TopoloWidgetBase, type TopoloWidgetConfig, type TopoloWidgetDraft, type TopoloWidgetMetric, type TopoloWidgetNotificationItem, type TopoloWidgetResponseOptions, type TopoloWidgetSnapshotMetadata, type TopoloWidgetSnapshotMetric, type TopoloWidgetType, type TopoloWidgetValidationResult, type TopoloWorkspace, type TopoloWorkspaceListResult, type TopoloWorkspaceMutationResult, type TopoloWorkspacePolicy, WorkspacesModule, actionContractCompleteness, applicationRequirementScopes, auditAllApplicationRequirements, auditApplicationRequirements, createTopolo, createTopoloWidgetError, createTopoloWidgetResponse, defineTopoloChartWidget, defineTopoloNotificationsWidget, defineTopoloQuickActionsWidget, defineTopoloRecentActivityWidget, defineTopoloStatsWidget, digestTopoloActionCatalog, enrichActionContract, parseTopoloActionUploadContract, prepareTopoloActionBase64UploadInput, prepareTopoloActionUploadInput, requirementsForApplication, resolveCatalogServiceUrl, resolveServiceUrl, validateTopoloActionInput, validateTopoloWidgetResponse };
+export { ACTION_CATALOG_DIGEST_ALGORITHM, APPLICATIONS, APPLICATION_REQUIREMENTS, APPLICATION_REQUIREMENTS_VERSION, type ActionContractManifest, type ActionContractSource, type AgentIdentity, type AppApiId, type ApplicationCatalogEntry, type ApplicationDeployTarget, type ApplicationDirectory, type ApplicationDirectoryApplication, type ApplicationDirectoryClient, type ApplicationDirectorySource, type ApplicationId, type ApplicationRequirement, type ApplicationRequirementAudit, type ApplicationRequirementFinding, type ApplicationRequirementMigrationItem, type ApplicationRequirementScope, type ApplicationRequirementScore, type ApplicationRequirementStatus, type ApplicationRequirementsAuditReport, type CredentialIntrospection, type CrmContactSummary, CrmModule, DEFAULT_APP_URLS, type DeviceAuthorizationResponse, IdentityModule, type ListContactsOptions, type ListContactsResult, type OAuthHelperOptions, type P2PActionDetail, type P2PActionRequestInput, type P2PActionRequestResult, type P2PActionRow, type P2PActionRun, type P2PCapability, type P2PConnection, type P2PHold, type P2PLedgerEntry, P2PModule, type P2PPolicy, type P2PPricingModel, type P2PSettlementBatch, type P2PSettlementGroup, type PublishCapabilityInput, type RequestOptions, type ServiceCatalogUrlEntry, TOPOLO_WIDGET_ENDPOINT, TOPOLO_WIDGET_REFRESH_INTERVAL_MS, type TokenResponse, type Topolo, type TopoloActionAgentContract, type TopoloActionCatalogEntry, type TopoloActionCatalogSummary, type TopoloActionDigestInput, type TopoloActionPlan, type TopoloActionUploadOptions, type TopoloActionValidationIssue, type TopoloActionValidationResult, type TopoloApiKeyResourceMetadata, TopoloAuthError, type TopoloBindableResource, type TopoloBindableResourceCatalog, type TopoloChartWidget, TopoloClient, type TopoloClientOptions, TopoloConfirmationRequiredError, type TopoloCredential, type TopoloDebugEvent, TopoloHttpError, type TopoloInlineBase64UploadContract, type TopoloNotificationsWidget, TopoloOAuth, TopoloPermissionError, type TopoloQuickActionsWidget, type TopoloRecentActivityWidget, TopoloSdkError, type TopoloServiceCatalogEntry, type TopoloStatsWidget, type TopoloWidget, type TopoloWidgetActionItem, type TopoloWidgetActivityItem, type TopoloWidgetApiResponse, type TopoloWidgetBase, type TopoloWidgetConfig, type TopoloWidgetDraft, type TopoloWidgetMetric, type TopoloWidgetNotificationItem, type TopoloWidgetResponseOptions, type TopoloWidgetSnapshotMetadata, type TopoloWidgetSnapshotMetric, type TopoloWidgetType, type TopoloWidgetValidationResult, type TopoloWorkspace, type TopoloWorkspaceListResult, type TopoloWorkspaceMutationResult, type TopoloWorkspacePolicy, WorkspacesModule, actionContractCompleteness, applicationEntryFromCatalog, applicationRequirementScopes, auditAllApplicationRequirements, auditApplicationEntries, auditApplicationRequirements, createTopolo, createTopoloWidgetError, createTopoloWidgetResponse, defineTopoloChartWidget, defineTopoloNotificationsWidget, defineTopoloQuickActionsWidget, defineTopoloRecentActivityWidget, defineTopoloStatsWidget, digestTopoloActionCatalog, enrichActionContract, formatDirectoryApplicationIds, friendlyAppId, listApplicationDirectory, parseTopoloActionUploadContract, prepareTopoloActionBase64UploadInput, prepareTopoloActionUploadInput, requirementsForApplication, resolveApplicationDirectoryEntry, resolveCatalogServiceUrl, resolveServiceUrl, staticApplicationDirectory, validateTopoloActionInput, validateTopoloWidgetResponse };