@topolo/sdk 0.9.3 → 0.9.5

package/dist/index.js

@@ -132,7 +132,9 @@ var APPLICATIONS = {
         "domains": [
           "admin.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "admin.topolo.app"
+        ],
         "appId": null
       },
       {
@@ -180,7 +182,7 @@ var APPLICATIONS = {
     "appDir": "TopoloAuth",
     "name": "topolo-auth",
     "packageName": "topolo-auth",
-    "productionUrl": "https://auth.topolo.app/login",
+    "productionUrl": "https://auth.topolo.app",
     "services": [
       "auth"
     ],
@@ -216,7 +218,9 @@ var APPLICATIONS = {
         "domains": [
           "backup.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "backup.topolo.app"
+        ],
         "appId": "backup"
       }
     ]
@@ -268,9 +272,7 @@ var APPLICATIONS = {
         "domains": [
           "brand.topolo.app"
         ],
-        "routes": [
-          "brand.topolo.app"
-        ],
+        "routes": [],
         "appId": "brand"
       },
       {
@@ -322,7 +324,9 @@ var APPLICATIONS = {
         "domains": [
           "bytes.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "bytes.topolo.app"
+        ],
         "appId": "bytes"
       },
       {
@@ -352,7 +356,9 @@ var APPLICATIONS = {
         "domains": [
           "calendar.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "calendar.topolo.app"
+        ],
         "appId": "calendar"
       },
       {
@@ -382,9 +388,7 @@ var APPLICATIONS = {
         "domains": [
           "campaigns.topolo.app"
         ],
-        "routes": [
-          "campaigns.topolo.app"
-        ],
+        "routes": [],
         "appId": "campaigns"
       },
       {
@@ -474,7 +478,9 @@ var APPLICATIONS = {
         "domains": [
           "guest.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "guest.topolo.app"
+        ],
         "appId": null
       },
       {
@@ -484,7 +490,9 @@ var APPLICATIONS = {
         "domains": [
           "commerce.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "commerce.topolo.app"
+        ],
         "appId": "commerce"
       },
       {
@@ -494,7 +502,9 @@ var APPLICATIONS = {
         "domains": [
           "station-commerce.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "station-commerce.topolo.app"
+        ],
         "appId": null
       }
     ]
@@ -672,7 +682,9 @@ var APPLICATIONS = {
         "domains": [
           "docs.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "docs.topolo.app"
+        ],
         "appId": null
       },
       {
@@ -702,7 +714,9 @@ var APPLICATIONS = {
         "domains": [
           "feed-analytics-api.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "feed-analytics-api.topolo.app"
+        ],
         "appId": null
       },
       {
@@ -712,7 +726,9 @@ var APPLICATIONS = {
         "domains": [
           "feed-api.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "feed-api.topolo.app"
+        ],
         "appId": null
       },
       {
@@ -722,7 +738,9 @@ var APPLICATIONS = {
         "domains": [
           "feed.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "feed.topolo.app"
+        ],
         "appId": "feed"
       }
     ]
@@ -834,7 +852,9 @@ var APPLICATIONS = {
         "domains": [
           "home.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "home.topolo.app"
+        ],
         "appId": "home"
       },
       {
@@ -924,7 +944,9 @@ var APPLICATIONS = {
         "domains": [
           "learn.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "learn.topolo.app"
+        ],
         "appId": "learn"
       },
       {
@@ -1016,7 +1038,9 @@ var APPLICATIONS = {
         "domains": [
           "mdm.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "mdm.topolo.app"
+        ],
         "appId": "mdm"
       }
     ]
@@ -1038,7 +1062,9 @@ var APPLICATIONS = {
         "domains": [
           "messages.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "messages.topolo.app"
+        ],
         "appId": "messages"
       },
       {
@@ -1072,11 +1098,13 @@ var APPLICATIONS = {
       {
         "name": "topolo-nexus-dashboard",
         "kind": "worker",
-        "apiUrl": null,
+        "apiUrl": "https://nexus.topolo.app",
         "domains": [
           "nexus.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "nexus.topolo.app"
+        ],
         "appId": null
       },
       {
@@ -1204,7 +1232,9 @@ var APPLICATIONS = {
         "domains": [
           "p2p.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "p2p.topolo.app"
+        ],
         "appId": "p2p"
       },
       {
@@ -1401,7 +1431,9 @@ var APPLICATIONS = {
         "domains": [
           "studio.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "studio.topolo.app"
+        ],
         "appId": "social_studio"
       },
       {
@@ -1439,7 +1471,9 @@ var APPLICATIONS = {
         "domains": [
           "socialize.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "socialize.topolo.app"
+        ],
         "appId": "socialize"
       },
       {
@@ -1449,7 +1483,9 @@ var APPLICATIONS = {
         "domains": [
           "socialize-api.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "socialize-api.topolo.app"
+        ],
         "appId": null
       },
       {
@@ -1509,7 +1545,9 @@ var APPLICATIONS = {
         "domains": [
           "status.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "status.topolo.app"
+        ],
         "appId": "status"
       }
     ]
@@ -1625,7 +1663,9 @@ var APPLICATIONS = {
         "domains": [
           "voice.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "voice.topolo.app"
+        ],
         "appId": "voice"
       },
       {
@@ -1676,7 +1716,9 @@ var APPLICATIONS = {
         "domains": [
           "web.topolo.app"
         ],
-        "routes": [],
+        "routes": [
+          "web.topolo.app"
+        ],
         "appId": "web"
       }
     ]
@@ -1755,7 +1797,7 @@ var APPLICATION_REQUIREMENTS = [
       "Use TopoloAppMetricCard, TopoloAppEmptyState, TopoloAppStatusBadge, TopoloAppGrid, and TopoloAppSection for repeated app body patterns",
       "Keep visual QA fixtures available through visualQa=1 or __devpreview=1 so screenshot checks do not depend on live API state",
       "Keep mobile and desktop shell behavior aligned with the platform UI kit",
-      "Constrain app-owned workspace wrappers with min-width: 0, width: auto, and viewport-aware max-width so shell padding cannot create page-level horizontal overflow"
+      "Constrain the app workspace-view layout wrappers with min-width: 0, width: auto, and viewport-aware max-width so shell padding cannot create page-level horizontal overflow"
     ]
   },
   {
@@ -3386,8 +3428,9 @@ async function digestTopoloActionCatalog(actions, appId) {
     return {
       actionId: action.actionId || `${appId}.${action.name}`,
       authorizationMode,
-      ...authorizationMode === "service" ? { allowedServices } : {},
+      allowedServices: authorizationMode === "service" || authorizationMode === "runtime" ? allowedServices : [],
       inputSchema: action.inputSchema,
+      agentContract: action.agentContract ?? {},
       method: action.method,
       outputSchema: action.outputSchema,
       path: action.path,
@@ -3402,6 +3445,285 @@ async function digestTopoloActionCatalog(actions, appId) {
   return [...new Uint8Array(digest)].map((value) => value.toString(16).padStart(2, "0")).join("");
 }
 
+// src/action-contract-enrichment.mjs
+var OPERATION_TOKENS = /* @__PURE__ */ new Set([
+  "add",
+  "archive",
+  "build",
+  "call",
+  "cancel",
+  "claim",
+  "complete",
+  "create",
+  "delete",
+  "disable",
+  "enable",
+  "execute",
+  "export",
+  "get",
+  "import",
+  "ingest",
+  "invite",
+  "list",
+  "move",
+  "preview",
+  "publish",
+  "read",
+  "refresh",
+  "remove",
+  "restore",
+  "retry",
+  "review",
+  "run",
+  "scaffold",
+  "search",
+  "send",
+  "set",
+  "submit",
+  "sync",
+  "transfer",
+  "unpublish",
+  "update",
+  "upload",
+  "validate"
+]);
+var INVERSE_OPERATIONS = /* @__PURE__ */ new Map([
+  ["archive", "restore"],
+  ["create", "delete"],
+  ["disable", "enable"],
+  ["enable", "disable"],
+  ["publish", "unpublish"],
+  ["remove", "add"],
+  ["restore", "archive"],
+  ["unpublish", "publish"]
+]);
+function isRecord3(value) {
+  return Boolean(value && typeof value === "object" && !Array.isArray(value));
+}
+function nonEmptyStrings(value) {
+  return Array.isArray(value) && value.length > 0 && value.every((item) => typeof item === "string" && item.trim());
+}
+function slugify(value) {
+  return String(value || "").trim().replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+}
+function singularize(value) {
+  if (value.endsWith("ies") && value.length > 3) return `${value.slice(0, -3)}y`;
+  if (value.endsWith("sses")) return value.slice(0, -2);
+  if (value.endsWith("s") && !value.endsWith("ss")) return value.slice(0, -1);
+  return value || "resource";
+}
+function operationFor(action) {
+  const tokens = String(action.name || "").split(/[._:-]+/).filter(Boolean);
+  return [...tokens].reverse().find((token) => OPERATION_TOKENS.has(token)) || String(action.method || "GET").toLowerCase();
+}
+function resourceFor(action) {
+  const nameTokens = String(action.name || "").split(/[._:-]+/).filter(Boolean);
+  const named = nameTokens.find((token) => !OPERATION_TOKENS.has(token));
+  if (named) return singularize(slugify(named).replaceAll("-", "_"));
+  const pathToken = String(action.path || "").split("/").filter((token) => token && token !== "api" && !token.startsWith("{")).find((token) => !OPERATION_TOKENS.has(slugify(token)));
+  return singularize(slugify(pathToken || "resource").replaceAll("-", "_"));
+}
+function isConcreteOutputSchema(schema) {
+  if (!isRecord3(schema)) return false;
+  if (typeof schema.$ref === "string" && schema.$ref.trim()) return true;
+  if (schema.type === "array" && isRecord3(schema.items) && Object.keys(schema.items).length > 0) return true;
+  if (isRecord3(schema.properties) && Object.keys(schema.properties).length > 0) return true;
+  return ["oneOf", "anyOf", "allOf"].some((key) => Array.isArray(schema[key]) && schema[key].some(isConcreteOutputSchema));
+}
+function resourceSchema(resource) {
+  return {
+    type: "object",
+    title: `${resource.replaceAll("_", " ")} record`,
+    properties: {
+      id: {
+        type: "string",
+        description: `Stable identifier when the ${resource.replaceAll("_", " ")} exposes one.`
+      }
+    },
+    additionalProperties: true
+  };
+}
+function derivedOutputSchema(action) {
+  const resource = resourceFor(action);
+  const operation = operationFor(action);
+  const record = resourceSchema(resource);
+  const records = { type: "array", items: record };
+  const provenance = {
+    "x-topolo-contract-source": "derived-action-metadata",
+    "x-topolo-contract-precision": "structural"
+  };
+  if (operation === "list" || operation === "search") {
+    return {
+      title: `${action.title || action.name} response`,
+      description: `Collection response returned by ${action.name}. The service may return the collection directly or in an envelope.`,
+      oneOf: [
+        records,
+        {
+          type: "object",
+          properties: {
+            data: { oneOf: [records, { type: "object", additionalProperties: true }] },
+            items: records,
+            [resource.endsWith("s") ? resource : `${resource}s`]: records,
+            count: { type: "integer", minimum: 0 },
+            nextCursor: { type: ["string", "null"] }
+          },
+          additionalProperties: true
+        }
+      ],
+      ...provenance
+    };
+  }
+  if (operation === "get" || operation === "read") {
+    return {
+      title: `${action.title || action.name} response`,
+      description: `Resource response returned by ${action.name}. The service may return the resource directly or in an envelope.`,
+      oneOf: [
+        record,
+        {
+          type: "object",
+          properties: {
+            data: record,
+            [resource]: record
+          },
+          additionalProperties: true
+        }
+      ],
+      ...provenance
+    };
+  }
+  return {
+    type: "object",
+    title: `${action.title || action.name} response`,
+    description: `Operation result returned by ${action.name}.`,
+    properties: {
+      success: { type: "boolean" },
+      id: { type: "string" },
+      data: { oneOf: [record, { type: "object", additionalProperties: true }] },
+      result: { type: "object", additionalProperties: true },
+      message: { type: "string" }
+    },
+    additionalProperties: true,
+    ...provenance
+  };
+}
+function sampleForSchema(schema, depth = 0) {
+  if (!isRecord3(schema) || depth > 5) return null;
+  if (schema.const !== void 0) return schema.const;
+  if (Array.isArray(schema.enum) && schema.enum.length > 0) return schema.enum[0];
+  if (Array.isArray(schema.oneOf) && schema.oneOf.length > 0) return sampleForSchema(schema.oneOf[0], depth + 1);
+  if (Array.isArray(schema.anyOf) && schema.anyOf.length > 0) return sampleForSchema(schema.anyOf[0], depth + 1);
+  if (schema.type === "array") return [];
+  if (schema.type === "boolean") return false;
+  if (schema.type === "integer" || schema.type === "number") return schema.minimum ?? 0;
+  if (schema.type === "string") {
+    if (schema.format === "email") return "agent@example.com";
+    if (schema.format === "uri" || schema.format === "url") return "https://example.com";
+    return schema.minLength > 1 ? "example".padEnd(schema.minLength, "x") : "example";
+  }
+  if (schema.type === "null") return null;
+  if (schema.type === "object" || isRecord3(schema.properties)) {
+    const properties = isRecord3(schema.properties) ? schema.properties : {};
+    const required = new Set(Array.isArray(schema.required) ? schema.required : []);
+    const entries = Object.entries(properties).filter(([key]) => required.has(key)).map(([key, child]) => [key, sampleForSchema(child, depth + 1)]);
+    return Object.fromEntries(entries);
+  }
+  return null;
+}
+function actionPrefix(name, operation) {
+  const tokens = String(name || "").split(/[._:-]+/).filter(Boolean);
+  const index = tokens.lastIndexOf(operation);
+  if (index === -1) return tokens.join(".");
+  return tokens.filter((_, tokenIndex) => tokenIndex !== index).join(".");
+}
+function findInverseActionId(action, allActions, appId) {
+  const operation = operationFor(action);
+  if (operation === "update" || operation === "set" || operation === "move") {
+    return `${appId}.${action.name}`;
+  }
+  const inverse = INVERSE_OPERATIONS.get(operation);
+  if (!inverse) return null;
+  const prefix = actionPrefix(action.name, operation);
+  const match = allActions.find((candidate) => operationFor(candidate) === inverse && actionPrefix(candidate.name, inverse) === prefix);
+  return match ? `${appId}.${match.name}` : null;
+}
+function recoveryFor(action, allActions, appId) {
+  const readOnly = action.readOnly !== void 0 ? action.readOnly === true : action.method === "GET";
+  if (readOnly) {
+    return {
+      mode: "not_applicable",
+      instructions: "This action does not change service state."
+    };
+  }
+  const actionId = findInverseActionId(action, allActions, appId);
+  if (actionId) {
+    return {
+      mode: "compensating_action",
+      actionId,
+      requiresSnapshot: actionId === `${appId}.${action.name}`,
+      instructions: actionId === `${appId}.${action.name}` ? "Capture the current resource before the call, then invoke this action with the captured values to restore it." : `Invoke ${actionId} with the affected resource identifier after confirming the rollback.`
+    };
+  }
+  return {
+    mode: "irreversible",
+    instructions: "No safe automatic inverse is published. Confirm the change and retain any required export or snapshot before calling."
+  };
+}
+function defaultErrors(action) {
+  const errors = [
+    { status: 401, code: "authentication_required", recovery: "Authenticate again or provide a valid Topolo API key." },
+    { status: 403, code: "permission_denied", recovery: `Grant the credential permission ${action.permission || action.permissionName || "required by this action"} and the required resource binding.` },
+    { status: 422, code: "invalid_input", recovery: "Correct the payload using inputSchema, then validate before retrying." }
+  ];
+  if (action.method !== "GET") {
+    errors.push({ status: 409, code: "state_conflict", recovery: "Read the current resource state, reconcile the intended change, and retry only if still valid." });
+  }
+  return errors;
+}
+function enrichActionContract(manifest, action, allActions = manifest.actions || []) {
+  const appId = String(manifest.appId || manifest.app_id || "").trim();
+  const service = slugify(manifest.slug || appId.replace(/^app_/, "").replaceAll("_", "-") || manifest.name);
+  const outputSchema = isConcreteOutputSchema(action.outputSchema) ? structuredClone(action.outputSchema) : derivedOutputSchema(action);
+  const resource = resourceFor(action);
+  const readOnly = action.readOnly !== void 0 ? action.readOnly === true : action.method === "GET";
+  const existing = isRecord3(action.agentContract) ? structuredClone(action.agentContract) : {};
+  const recovery = isRecord3(existing.recovery) ? existing.recovery : recoveryFor(action, allActions, appId);
+  const rollbackActionId = typeof existing.rollbackActionId === "string" && existing.rollbackActionId.trim() ? existing.rollbackActionId.trim() : recovery.mode === "compensating_action" ? recovery.actionId : void 0;
+  const inputExample = sampleForSchema(action.inputSchema);
+  const examples = Array.isArray(existing.examples) && existing.examples.length > 0 ? existing.examples : [{ input: inputExample ?? {}, expected: `A response matching the published outputSchema for ${action.name}.` }];
+  const docsUrl = `https://docs.topolo.app/reference/actions/?service=${encodeURIComponent(service)}&action=${encodeURIComponent(action.name)}`;
+  const existingDocsUrl = typeof existing.docsUrl === "string" && existing.docsUrl.trim() ? existing.docsUrl.trim() : void 0;
+  return {
+    outputSchema,
+    agentContract: {
+      ...existing,
+      docsUrl,
+      ...existingDocsUrl && existingDocsUrl !== docsUrl ? { guideUrl: existingDocsUrl } : {},
+      resource: isRecord3(existing.resource) ? existing.resource : { kind: resource, idPath: readOnly && ["list", "search"].includes(operationFor(action)) ? "$.items[].id" : "$.id" },
+      effects: nonEmptyStrings(existing.effects) ? existing.effects : [readOnly ? `Reads ${resource.replaceAll("_", " ")} data without changing service state.` : action.destructive === true || action.method === "DELETE" ? `Permanently removes or invalidates ${resource.replaceAll("_", " ")} state.` : `Changes ${resource.replaceAll("_", " ")} state in the selected Topolo resource context.`],
+      errors: Array.isArray(existing.errors) && existing.errors.length > 0 ? existing.errors : defaultErrors(action),
+      verify: nonEmptyStrings(existing.verify) ? existing.verify : [`Validate the response against outputSchema and ${readOnly ? "confirm it belongs to the selected resource context" : "re-read the affected resource to confirm the intended state"}.`],
+      examples,
+      recovery,
+      ...rollbackActionId ? { rollbackActionId } : {},
+      contractSource: Object.hasOwn(outputSchema, "x-topolo-contract-source") ? "derived-action-metadata" : "application-declared"
+    }
+  };
+}
+function actionContractCompleteness(action) {
+  const contract = action?.agentContract;
+  return {
+    inputSchema: isRecord3(action?.inputSchema),
+    outputSchema: isConcreteOutputSchema(action?.outputSchema),
+    effects: nonEmptyStrings(contract?.effects),
+    errors: Array.isArray(contract?.errors) && contract.errors.length > 0,
+    docs: typeof contract?.docsUrl === "string" && contract.docsUrl.startsWith("https://"),
+    examples: Array.isArray(contract?.examples) && contract.examples.length > 0,
+    verification: nonEmptyStrings(contract?.verify),
+    recovery: isRecord3(contract?.recovery) && ["not_applicable", "compensating_action", "irreversible"].includes(contract.recovery.mode),
+    agentContract: isRecord3(contract) && isRecord3(contract.resource) && nonEmptyStrings(contract.effects) && Array.isArray(contract.errors) && contract.errors.length > 0
+  };
+}
+
 // src/modules/crm.ts
 var CrmModule = class {
   constructor(client) {
@@ -3803,7 +4125,7 @@ function createTopoloWidgetError(error) {
 }
 function validateTopoloWidgetResponse(response) {
   const errors = [];
-  if (!isRecord3(response)) {
+  if (!isRecord4(response)) {
     return { ok: false, errors: ["response must be an object"] };
   }
   if (typeof response.success !== "boolean") {
@@ -3822,7 +4144,7 @@ function validateTopoloWidgetResponse(response) {
   return { ok: errors.length === 0, errors };
 }
 function validateWidget(widget, path, errors) {
-  if (!isRecord3(widget)) {
+  if (!isRecord4(widget)) {
     errors.push(`${path} must be an object`);
     return;
   }
@@ -3849,7 +4171,7 @@ function validateWidget(widget, path, errors) {
     case "chart":
       validateNonEmptyString(widget.chartType, `${path}.chartType`, errors);
       validateNonEmptyString(widget.title, `${path}.title`, errors);
-      if (!isRecord3(widget.data)) {
+      if (!isRecord4(widget.data)) {
         errors.push(`${path}.data must be an object`);
       } else {
         validateArray2(widget.data.labels, `${path}.data.labels`, errors);
@@ -3865,7 +4187,7 @@ function validateSnapshotMetadata(snapshot, path, errors) {
     errors.push(`${path} must be an object`);
     return;
   }
-  if (!isRecord3(snapshot)) {
+  if (!isRecord4(snapshot)) {
     errors.push(`${path} must be an object`);
     return;
   }
@@ -3885,7 +4207,7 @@ function validateSnapshotMetadata(snapshot, path, errors) {
   }
   snapshot.availableMetrics.forEach((metric, index) => {
     const metricPath = `${path}.availableMetrics[${index}]`;
-    if (!isRecord3(metric)) {
+    if (!isRecord4(metric)) {
       errors.push(`${metricPath} must be an object`);
       return;
     }
@@ -3906,7 +4228,7 @@ function validateArray2(value, path, errors) {
     errors.push(`${path} must be an array`);
   }
 }
-function isRecord3(value) {
+function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function toIsoTimestamp(input) {
@@ -3943,6 +4265,7 @@ export {
   TopoloOAuth,
   TopoloPermissionError,
   TopoloSdkError,
+  actionContractCompleteness,
   applicationRequirementScopes,
   auditAllApplicationRequirements,
   auditApplicationRequirements,
@@ -3955,6 +4278,7 @@ export {
   defineTopoloRecentActivityWidget,
   defineTopoloStatsWidget,
   digestTopoloActionCatalog,
+  enrichActionContract,
   requirementsForApplication,
   resolveCatalogServiceUrl,
   resolveServiceUrl,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@topolo/sdk",
-  "version": "0.9.3",
-  "topoloPublishedVersion": "0.9.3",
+  "version": "0.9.5",
+  "topoloPublishedVersion": "0.9.5",
   "description": "Typed client SDK for the Topolo platform. Used by TopoloCli, TopoloMCP, and third-party agents.",
   "type": "module",
   "main": "./dist/index.js",
@@ -23,13 +23,16 @@
     "dist"
   ],
   "scripts": {
-    "check:generated": "git diff --exit-code -- src/services.generated.ts src/applications.generated.ts",
+    "generate:services": "node scripts/generate-services.mjs",
+    "check:generated": "node scripts/check-generated.mjs",
+    "prebuild": "node scripts/generate-services.mjs",
     "build": "tsup src/index.ts --format esm,cjs --dts --clean && tsup src/node/credential-store.ts --format esm,cjs --dts --out-dir dist/node",
     "dev": "tsup src/index.ts --format esm,cjs --dts --watch",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "node scripts/generate-services.mjs && tsc --noEmit",
     "test": "vitest run",
     "test:watch": "vitest",
-    "prepublishOnly": "npm run build",
+    "prepublishOnly": "npm run build && npm run verify:package",
+    "verify:package": "node ../../tooling/verify-npm-package.mjs .",
     "coverage": "vitest run --coverage"
   },
   "devDependencies": {