Topolo Platform
Shared platform concepts spanning multi-context identity, zero-to-many org and household memberships, entitlements, owner-scoped billing boundaries, API keys, service registration, deployment, and observability.
Documentation Map
What It Is
Shared platform concepts spanning multi-context identity, zero-to-many org and household memberships, entitlements, owner-scoped billing boundaries, API keys, service registration, deployment, and observability.
Canonical documentation for Topolo Auth lives in `PlatformApplications/TopoloDocs`.
Use this repository for implementation only. Local product and operational docs have been retired in favor of the docs application.
Architecture
Owners: platform
Source repos: PlatformApplications/TopoloAuth, PlatformApplications/TopoloOne, PlatformApplications/TopoloDocs, PlatformApplications/TopoloCloudControl, PlatformApplications/packages/topolo-ui-kit
Dependencies: topolo-auth, topolo-one
Repo shape
- PlatformApplications/TopoloAuth/README.md
- PlatformApplications/TopoloAuth/ROADMAP_HANDOFF_2026-03-31_topoloauth.md
- PlatformApplications/TopoloAuth/catalog/
- PlatformApplications/TopoloAuth/cloudcontrol-deployment-report-topolo-auth.json
- PlatformApplications/TopoloAuth/migration.config.ts
- PlatformApplications/TopoloAuth/package-lock.json
- PlatformApplications/TopoloAuth/package.json
- PlatformApplications/TopoloAuth/packages/
- PlatformApplications/TopoloAuth/schema-evolution-local.sql
- PlatformApplications/TopoloAuth/schema-evolution.sql
- PlatformApplications/TopoloAuth/schema-oauth.sql
- PlatformApplications/TopoloAuth/schema-update.sql
- PlatformApplications/TopoloAuth/schema.sql
- PlatformApplications/TopoloAuth/scripts/
- PlatformApplications/TopoloAuth/src/
- PlatformApplications/TopoloAuth/test/
- PlatformApplications/TopoloAuth/topolo.cloudcontrol.json
- PlatformApplications/TopoloAuth/wrangler.toml
- PlatformApplications/TopoloOne/AGENTS.md
- PlatformApplications/TopoloOne/README.md
Runtime Surfaces
Hosts:
https://docs.topolo.app Config: PlatformApplications/TopoloAuth/wrangler.toml
Main: src/index.js
Routes: auth.stg.topolo.us, auth.topolo.app
Config: PlatformApplications/TopoloOne/apps/ai-chat-rag/wrangler.toml
Main: dist/index.js
Routes: workers.dev or asset-only surface
Config: PlatformApplications/TopoloOne/apps/dashboard-web/wrangler.toml
Main: not declared
Routes: workers.dev or asset-only surface
Config: PlatformApplications/TopoloOne/apps/dashboard-worker/wrangler.toml
Main: dist/index.js
Routes: one.stg.topolo.us, one.topolo.app/*
Config: PlatformApplications/TopoloOne/apps/marketing-site/wrangler.toml
Main: worker/index.js
Routes: stg.topolo.us
API Reference
Coverage: curated
Source: PlatformApplications/TopoloDocs/src/content/public/platform
Source exists in repo: yes
Canonical platform behavior is documented directly in the docs monorepo, including the separation between Topolo identity, personal plus household context, organization membership, service entitlement, launcher eligibility, owner-scoped billing, and docs validation of Auth service catalog coverage.
This system currently relies on a curated or README-derived contract surface instead of a source-controlled OpenAPI spec.
Auth and Permissions
Depends on Topolo Auth: yes
Service IDs:
No Auth service ID mapped in docs yet.
API key scopes
No API key scopes were found in the checked-in Auth catalog for this system.
Service permissions
No role/permission catalog rows were found in the checked-in Auth permissions seed.
Data Ownership
Binding: DB
Target: 7b2ede91-717b-47c5-ae8a-4d2f195a4672
Environment: default
Source: PlatformApplications/TopoloAuth/wrangler.toml
Binding: DB
Target: 9f2c0e78-738a-41c0-95bf-9968ff369926
Environment: production
Source: PlatformApplications/TopoloAuth/wrangler.toml
Binding: CHAT_CACHE
Target: 5ee16c92ffe34626aacbe45b94e416fe
Environment: default
Source: PlatformApplications/TopoloOne/apps/ai-chat-rag/wrangler.toml
Binding: CHAT_CACHE
Target: 5ee16c92ffe34626aacbe45b94e416fe
Environment: preview
Source: PlatformApplications/TopoloOne/apps/ai-chat-rag/wrangler.toml
Binding: CHAT_CACHE
Target: 5ee16c92ffe34626aacbe45b94e416fe
Environment: production
Source: PlatformApplications/TopoloOne/apps/ai-chat-rag/wrangler.toml
Binding: ONECLICK_DB
Target: ace6619b-0dae-4248-870b-71561d9087e2
Environment: default
Source: PlatformApplications/TopoloOne/apps/dashboard-worker/wrangler.toml
Binding: ONECLICK_KV
Target: 53140b1879254915bfb46179f09d197b
Environment: default
Source: PlatformApplications/TopoloOne/apps/dashboard-worker/wrangler.toml
Binding: ONECLICK_DB
Target: ace6619b-0dae-4248-870b-71561d9087e2
Environment: preview
Source: PlatformApplications/TopoloOne/apps/dashboard-worker/wrangler.toml
Binding: ONECLICK_KV
Target: a4ed16d4573d45b8a05eefa54f18eb5f
Environment: preview
Source: PlatformApplications/TopoloOne/apps/dashboard-worker/wrangler.toml
Binding: ONECLICK_DB
Target: b068feb5-e36f-4b40-a980-2d43a82f4778
Environment: staging
Source: PlatformApplications/TopoloOne/apps/dashboard-worker/wrangler.toml
Binding: ONECLICK_KV
Target: 45c47c1f450b40fda41a7ce941e9e845
Environment: staging
Source: PlatformApplications/TopoloOne/apps/dashboard-worker/wrangler.toml
Binding: ONECLICK_DB
Target: ace6619b-0dae-4248-870b-71561d9087e2
Environment: production
Source: PlatformApplications/TopoloOne/apps/dashboard-worker/wrangler.toml
Binding: ONECLICK_KV
Target: a4ed16d4573d45b8a05eefa54f18eb5f
Environment: production
Source: PlatformApplications/TopoloOne/apps/dashboard-worker/wrangler.toml
Binding: WAITLIST_KV
Target: 97ef5229c1574541bb7d5dd6b437d5b6
Environment: default
Source: PlatformApplications/TopoloOne/apps/marketing-site/wrangler.toml
Binding: BOOKING_KV
Target: b45b9707d5984639b03f42e3f9e42fcb
Environment: default
Source: PlatformApplications/TopoloOne/apps/marketing-site/wrangler.toml
Binding: SUBS_KV
Target: 5cd7bce0ea88411d857169ea9ef46c2a
Environment: default
Source: PlatformApplications/TopoloOne/apps/marketing-site/wrangler.toml
Binding: ONECLICK_DB
Target: ace6619b-0dae-4248-870b-71561d9087e2
Environment: default
Source: PlatformApplications/TopoloOne/apps/marketing-site/wrangler.toml
Binding: WAITLIST_KV
Target: 2fed68e530b94c2c8ab1e74b998a8c73
Environment: staging
Source: PlatformApplications/TopoloOne/apps/marketing-site/wrangler.toml
Binding: BOOKING_KV
Target: dee1938ea8754510b9ede1bf1e8f4bf9
Environment: staging
Source: PlatformApplications/TopoloOne/apps/marketing-site/wrangler.toml
Binding: SUBS_KV
Target: d1bf35da79c64095a49296a9b7100931
Environment: staging
Source: PlatformApplications/TopoloOne/apps/marketing-site/wrangler.toml
Binding: ONECLICK_DB
Target: b068feb5-e36f-4b40-a980-2d43a82f4778
Environment: staging
Source: PlatformApplications/TopoloOne/apps/marketing-site/wrangler.toml
Queues / Cron / Workflows
Queue bindings:
No queue bindings were detected.
Cron triggers
0 3 * * *via PlatformApplications/TopoloAuth/wrangler.toml
Workflow signals
- cron 0 3 * * *
Environment Variables and Bindings
Environment variables:
ALLOWED_ORIGINS AUTH_ACCESS_TOKEN_TTL_SECONDS AUTH_ALLOW_REFRESH_TOKEN_IN_BODY AUTH_API_URL AUTH_CLIENT_COMPAT_ALLOWLIST AUTH_COOKIE_DOMAIN AUTH_COOKIE_MODE_DEFAULT AUTH_LEGACY_TOKEN_DELIVERY_ENABLED AUTH_MAGIC_LINK_ENABLED AUTH_MFA_CHALLENGE_TTL_SECONDS AUTH_REFRESH_COOKIE_NAME AUTH_REFRESH_SKIP_SESSION_CHECK AUTH_REFRESH_TOKEN_TTL_SECONDS AUTH_SESSION_TTL_SECONDS DASHBOARD_APP_ORIGIN ENVIRONMENT GITHUB_CLIENT_ID LOG_LEVEL NEXT_PUBLIC_AUTH_URL NEXT_PUBLIC_DEVELOPER_PORTAL_URL NEXT_PUBLIC_DOCS_URL NEXT_PUBLIC_ONE_URL NEXT_PUBLIC_SIGNUP_MODE NEXT_PUBLIC_SITE_URL NEXUS_GATEWAY_URL NODE_ENV SERVICE_NAME TOPOLO_NOTIFY_URL TOPOLO_ONE_BILLING_URL VITE_API_URL VITE_AUTH_URL VITE_P2P_API_URL VITE_STORE_API_BASE_URL VITE_TOPOLO_AUTH_URL All wrangler bindings
-
DB(d1) -> 7b2ede91-717b-47c5-ae8a-4d2f195a4672 -
DB(d1) -> 9f2c0e78-738a-41c0-95bf-9968ff369926 [production] -
CHAT_CACHE(kv) -> 5ee16c92ffe34626aacbe45b94e416fe -
CHAT_CACHE(kv) -> 5ee16c92ffe34626aacbe45b94e416fe [preview] -
CHAT_CACHE(kv) -> 5ee16c92ffe34626aacbe45b94e416fe [production] -
ONECLICK_DB(d1) -> ace6619b-0dae-4248-870b-71561d9087e2 -
ONECLICK_KV(kv) -> 53140b1879254915bfb46179f09d197b -
ONECLICK_DB(d1) -> ace6619b-0dae-4248-870b-71561d9087e2 [preview] -
ONECLICK_KV(kv) -> a4ed16d4573d45b8a05eefa54f18eb5f [preview] -
ONECLICK_DB(d1) -> b068feb5-e36f-4b40-a980-2d43a82f4778 [staging] -
ONECLICK_KV(kv) -> 45c47c1f450b40fda41a7ce941e9e845 [staging] -
ONECLICK_DB(d1) -> ace6619b-0dae-4248-870b-71561d9087e2 [production] -
ONECLICK_KV(kv) -> a4ed16d4573d45b8a05eefa54f18eb5f [production] -
WAITLIST_KV(kv) -> 97ef5229c1574541bb7d5dd6b437d5b6 -
BOOKING_KV(kv) -> b45b9707d5984639b03f42e3f9e42fcb -
SUBS_KV(kv) -> 5cd7bce0ea88411d857169ea9ef46c2a -
ONECLICK_DB(d1) -> ace6619b-0dae-4248-870b-71561d9087e2 -
WAITLIST_KV(kv) -> 2fed68e530b94c2c8ab1e74b998a8c73 [staging] -
BOOKING_KV(kv) -> dee1938ea8754510b9ede1bf1e8f4bf9 [staging] -
SUBS_KV(kv) -> d1bf35da79c64095a49296a9b7100931 [staging] -
ONECLICK_DB(d1) -> b068feb5-e36f-4b40-a980-2d43a82f4778 [staging]
Deployments
Deployment environments: production, preview, staging
Routes: auth.stg.topolo.us, auth.topolo.app, one.stg.topolo.us, one.topolo.app/*, stg.topolo.us
Observability enabled: yes
Wrangler surfaces
- PlatformApplications/TopoloAuth/wrangler.toml -> topolo-auth-staging
- PlatformApplications/TopoloOne/apps/ai-chat-rag/wrangler.toml -> ai-chat-rag (assets ./public) (build pnpm --filter @topolo/ai-chat-rag build)
- PlatformApplications/TopoloOne/apps/dashboard-web/wrangler.toml -> topoloone
- PlatformApplications/TopoloOne/apps/dashboard-worker/wrangler.toml -> topoloone-worker (assets ./public) (build pnpm run build)
- PlatformApplications/TopoloOne/apps/marketing-site/wrangler.toml -> topoloone-website (assets out)
Build and deploy commands
-
build— PlatformApplications/TopoloAuth/package.json :: wrangler deploy --dry-run --outdir .wrangler/build -
deploy— PlatformApplications/TopoloAuth/package.json :: wrangler deploy -
deploy:staging— PlatformApplications/TopoloAuth/package.json :: wrangler deploy -
deploy:production— PlatformApplications/TopoloAuth/package.json :: wrangler deploy --env production -
deploy:dry-run— PlatformApplications/TopoloAuth/package.json :: wrangler deploy --dry-run --outdir .wrangler/build -
build— PlatformApplications/TopoloAuth/packages/topolo-auth-client/package.json :: tsup src/index.ts --format esm,cjs --dts -
build— PlatformApplications/TopoloOne/apps/ai-chat-rag/package.json :: esbuild src/index.ts --bundle --outfile=dist/index.js --format=esm --platform=browser --target=es2022 -
deploy— PlatformApplications/TopoloOne/apps/ai-chat-rag/package.json :: wrangler deploy -
deploy:dry-run— PlatformApplications/TopoloOne/apps/ai-chat-rag/package.json :: wrangler deploy --dry-run --outdir .wrangler/build -
build— PlatformApplications/TopoloOne/apps/dashboard-web/package.json :: tsc && vite build --mode production -
build:staging— PlatformApplications/TopoloOne/apps/dashboard-web/package.json :: env VITE_PUBLIC_URL=https://topoloone-dashboard-staging.pages.dev VITE_API_URL=https://one.stg.topolo.us VITE_AUTH_URL=https://auth.stg.topolo.us VITE_TOPOLO_AUTH_URL=https://auth.stg.topolo.us VITE_STORE_API_BASE_URL=https://developers.stg.topolo.us/api/store VITE_P2P_API_URL=https://p2p.stg.topolo.us sh -c 'tsc && vite build --mode production' -
preview— PlatformApplications/TopoloOne/apps/dashboard-web/package.json :: vite preview -
deploy:check— PlatformApplications/TopoloOne/apps/dashboard-web/package.json :: node ../../scripts/check-deploy-fresh.mjs -
deploy— PlatformApplications/TopoloOne/apps/dashboard-web/package.json :: node ../../scripts/check-deploy-fresh.mjs && rm -f node_modules/.cache/wrangler/pages.json node_modules/.cache/wrangler/wrangler-account.json && rm -rf dist && pnpm run build && CLOUDFLARE_ACCOUNT_ID=49ef1ba682ad8cfd720c86699ae17521 wrangler pages deploy dist --project-name topoloone --branch main --commit-dirty=true -
deploy:staging— PlatformApplications/TopoloOne/apps/dashboard-web/package.json :: rm -f node_modules/.cache/wrangler/pages.json node_modules/.cache/wrangler/wrangler-account.json && rm -rf dist && pnpm run build:staging && CLOUDFLARE_ACCOUNT_ID=4f4e1c69a3830946f9fea7b1eb7531ac wrangler pages deploy dist --project-name topoloone-dashboard-staging --branch staging --commit-dirty=true -
build— PlatformApplications/TopoloOne/apps/dashboard-worker/package.json :: esbuild src/index.ts --bundle --outfile=dist/index.js --format=esm --platform=browser --target=es2022
Failure Modes
- No Auth service ID is registered for this system.
Debugging Runbooks
Start with these entrypoints:
- PlatformApplications/TopoloAuth/wrangler.toml
- PlatformApplications/TopoloOne/apps/ai-chat-rag/wrangler.toml
- PlatformApplications/TopoloOne/apps/dashboard-web/wrangler.toml
- PlatformApplications/TopoloOne/apps/dashboard-worker/wrangler.toml
- PlatformApplications/TopoloOne/apps/marketing-site/wrangler.toml
- PlatformApplications/TopoloDocs/src/content/public/platform
- PlatformApplications/TopoloAuth/README.md
- PlatformApplications/TopoloAuth/package.json
- PlatformApplications/TopoloAuth/packages/topolo-auth-client/package.json
- PlatformApplications/TopoloOne/apps/ai-chat-rag/package.json
- PlatformApplications/TopoloOne/apps/dashboard-web/package.json
- PlatformApplications/TopoloOne/apps/dashboard-worker/package.json
Change Log / Verification
Lifecycle: active
Last verified: 2026-04-29
Any code change to this system is expected to update the canonical docs in PlatformApplications/TopoloDocs and refresh the verification date.