application public active Verified 2026-04-25

Topolo Forecast

Cash-flow and P&L forecasting product.

Documentation Map

What It Is

Cash-flow and P&L forecasting product.

Canonical documentation for Topolo Forecast lives in `PlatformApplications/TopoloDocs`.

Use this repository for implementation only. Local product and operational docs have been retired in favor of the docs application.

Architecture

Owners: finance-platform

Source repos: PlatformApplications/TopoloForecast

Dependencies: topolo-auth, topolo-one, applications-packages

Repo shape

PlatformApplications/TopoloForecast/README.md
PlatformApplications/TopoloForecast/apps/
PlatformApplications/TopoloForecast/commitlint.config.js
PlatformApplications/TopoloForecast/eslint.config.js
PlatformApplications/TopoloForecast/migration.config.ts
PlatformApplications/TopoloForecast/package.json
PlatformApplications/TopoloForecast/packages/
PlatformApplications/TopoloForecast/pnpm-lock.yaml
PlatformApplications/TopoloForecast/pnpm-workspace.yaml
PlatformApplications/TopoloForecast/prettier.config.js
PlatformApplications/TopoloForecast/topolo.cloudcontrol.json

Runtime Surfaces

Hosts:

https://forecast.topolo.app

forecast

Config: PlatformApplications/TopoloForecast/apps/forecast-web/wrangler.toml

Main: not declared

Routes: workers.dev or asset-only surface

forecast-worker-production

Config: PlatformApplications/TopoloForecast/apps/forecast-worker/wrangler.toml

Main: src/index.ts

Routes: workers.dev or asset-only surface

API Reference

Coverage: curated

Source: PlatformApplications/TopoloDocs/src/content/public/applications/forecast.mdx

Source exists in repo: yes

Canonical Forecast coverage now lives in the docs application. The browser callback delegates Auth SSO one-time sso_code redemption to the shared Topolo auth client and does not support direct bearer-token callback URLs or /sso?token= bridge routes. Embedded first-party password-login success is completed by Forecast with in-app navigation after shared Auth token persistence so the first authenticated workspace refresh is not aborted by a hard redirect. Forecast keeps same-tab sessionStorage access-token restore enabled by default after login and refresh so normal browser reloads do not appear logged out before cookie refresh completes. The authenticated Forecast web workspace renders through the shared `TopoloAppShell` so account, launcher, command, theme, sidebar-collapse, and BugFix chrome stay package-owned while finance workspace switching remains in additive account-menu actions. Auth home-path redirects to /dashboard are routed to the current-year dashboard in the browser, and Forecast static headers must not preload wildcard asset paths. Worker bearer-token authentication now requires Topolo Auth /validate and does not accept an app-local JWT secret.

App API page: /reference/apps/topolo-forecast

This system currently relies on a curated or README-derived contract surface instead of a source-controlled OpenAPI spec.

Auth and Permissions

Depends on Topolo Auth: yes

Service IDs:

srv_T0sKE7LIelMU

API key scopes

api_keys.write

Manage Forecast machine credentials

Resource pattern: none

dashboard.read

View financial dashboard

Resource pattern: none

forecasts.read

View cashflow forecasts

Resource pattern: none

forecasts.write

Create and edit forecasts

Resource pattern: none

reports.read

View financial reports

Resource pattern: none

settings.read

View account settings

Resource pattern: none

settings.write

Manage account configuration

Resource pattern: none

transactions.read

View financial transactions

Resource pattern: none

transactions.write

Record financial transactions

Resource pattern: none

Service permissions

api_keys:write, dashboard:read, forecasts:read, forecasts:write, reports:read, settings:read, settings:write, transactions:read, transactions:write