{
  "generated_at": "2026-06-12T22:05:57.074Z",
  "system": {
    "id": "topolo-agent",
    "name": "Agent",
    "slug": "topolo-agent",
    "kind": "application",
    "summary": "Agent and automation workspace for threads, workflows, approvals, operator execution, and reusable source-backed person profiles for writing and speaking style.",
    "aliases": [],
    "lifecycle": "active",
    "last_verified": "2026-05-14",
    "owners": [
      "ai-platform"
    ],
    "repo_paths": [],
    "external_repo_paths": [
      "Apps/shared/TopoloAgent"
    ],
    "service_ids": [
      "srv_luiWkJLNbOMG"
    ],
    "visibility": "public",
    "api_contract": {
      "type": "curated",
      "source": "PlatformApplications/TopoloDocs/src/content/public/applications/agent.mdx",
      "notes": "Canonical Agent coverage now lives in the docs application. The backend worker now requires Topolo Auth validation for operator bearer tokens and no longer carries an Agent-local HS256/JWT secret verification path. Browser preboot, shared browser auth, backend Auth validation, widget output, seed validation, and downstream connector headers resolve concrete service ids from Auth service slugs such as `topolo-agent` at runtime instead of carrying concrete service ids in source, Worker vars, build commands, or browser assets. The production Worker `/login` entry renders the shared branded first-party login surface and submits email/password credentials to Auth through the shared client; OAuth and other brokered flows still use hosted Auth. The connector catalog uses the Developers-owned mobile app catalog connector for Android and iOS artifact metadata. Agent exposes `GET /api/widget` for TopoloOne live workspace with active-flow, pending-task, pending-approval, and run-today stats. Agent also exposes `POST /api/public/chat` for the public Lois website-chat assistant embedded by TopoloOne; that route owns persona selection, Turnstile-backed session clearance, source links, rate limiting, and action/deeplink metadata. Agent owns authenticated `/api/person-profiles` routes backed by `person_profiles`, `person_profile_sources`, and `person_profile_style_snapshots` so products can reuse source-backed writing style, speaking style, persona rules, usage policies, authorization evidence references, and Voice profile links without turning every profile into an executable agent. The browser workspace now includes a standalone Person Profiles surface for profile editing, source capture, style reads, and draft preview generation, and the backend exposes `POST /api/person-profiles/:id/preview` for authenticated source-backed previews. Person-profile access is restricted to the subject user and organization admins, not normal peer users. Cross-organization agent actions must enter through TopoloP2P and wait for the P2P policy decision before execution. Staging runs in the separate Topolo Staging Cloudflare account with staging Auth, Nexus, D1, R2, Queue, and Vectorize bindings, and browser/backend fallback URLs resolve to the staging custom domains before production."
    },
    "primary_hosts": [
      "https://agent.topolo.app",
      "https://agent.stg.topolo.us",
      "https://agent-api.stg.topolo.us",
      "https://topolo-agent-stg.topolo-staging.workers.dev"
    ],
    "doc_paths": [
      "applications/agent",
      "internal/apps/agent"
    ],
    "security_assurance": {
      "risk_tier": "high",
      "auth_boundary": "Topolo Auth service `/validate` access for operator bearer tokens with app-owned agent execution authorization.",
      "tenant_isolation": "organization_scoped",
      "external_inputs": [
        "browser",
        "api",
        "callback",
        "queue",
        "scheduled_task",
        "ai_agent_action"
      ],
      "sensitive_data": [
        "identity",
        "org_data",
        "customer_content",
        "telemetry"
      ],
      "last_security_review": "2026-04-30",
      "security_review_status": "reviewed",
      "pentest_status": "passed",
      "evidence_doc": "internal/apps/agent"
    },
    "data_privacy": {
      "classification": "restricted",
      "sensitive_data_classes": [
        "customer_content",
        "identity",
        "organization",
        "telemetry"
      ],
      "storage_locations": [
        "d1",
        "external_provider",
        "r2"
      ],
      "encryption_at_rest": "application_layer_required",
      "encryption_in_transit": "https_only",
      "key_management": "versioned_platform_key_required",
      "retention_policy": "partial",
      "deletion_export_status": "planned",
      "logging_redaction_status": "needs_review",
      "privacy_review_status": "reviewed",
      "enterprise_ready": false,
      "evidence_doc": "internal/apps/agent"
    },
    "dependencies": [
      "topolo-auth",
      "applications-packages",
      "topolo-developers",
      "topolo-p2p",
      "topolo-nexus",
      "topolo-voice"
    ],
    "bugfix_policy": {
      "tier": "autonomous",
      "preferred_agent": "either",
      "require_validator": false
    },
    "public_hub_url": "/systems/topolo-agent",
    "internal_hub_url": null,
    "application_api_url": "/reference/apps/topolo-agent",
    "generated_openapi_url": null,
    "machine_urls": {
      "system": "/machine/systems/topolo-agent.json",
      "application": "/machine/applications/topolo-agent.json"
    }
  },
  "docs": {
    "public": [
      {
        "id": "applications/agent",
        "title": "Topolo Agent",
        "summary": "Public overview of the Cloudflare-first agent and automation platform in the Topolo portfolio.",
        "audience": "public",
        "tags": [
          "agents",
          "automation",
          "workflows"
        ],
        "url": "/applications/agent",
        "last_verified": "2026-05-13"
      }
    ],
    "internal": [],
    "runbooks": []
  },
  "authority": {
    "owners": [
      "ai-platform"
    ],
    "repo_paths": [],
    "service_ids": [
      "srv_luiWkJLNbOMG"
    ],
    "dependencies": [
      "topolo-auth",
      "applications-packages",
      "topolo-developers",
      "topolo-p2p",
      "topolo-nexus",
      "topolo-voice"
    ],
    "aliases": []
  },
  "interfaces": {
    "contract_type": "curated",
    "contract_source": "PlatformApplications/TopoloDocs/src/content/public/applications/agent.mdx",
    "contract_source_exists": false,
    "openapi": null,
    "readme": null
  },
  "auth": {
    "depends_on_topolo_auth": true,
    "api_key_scopes": [
      {
        "id": "aks_agent_agents_read",
        "name": "agents.read",
        "description": "View configured agents and their settings",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_agent_agents_write",
        "name": "agents.write",
        "description": "Create and update agent definitions",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_agent_approvals_write",
        "name": "approvals.write",
        "description": "Approve or reject gated Agent actions",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_agent_knowledge_read",
        "name": "knowledge.read",
        "description": "View agent knowledge sources and indexed documents",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_agent_knowledge_write",
        "name": "knowledge.write",
        "description": "Manage agent knowledge sources and indexed documents",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_agent_reports_read",
        "name": "reports.read",
        "description": "View reports, artifacts, and work feed output",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_agent_runs_invoke",
        "name": "runs.invoke",
        "description": "Invoke agent runs and inspect their output",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_agent_workflows_read",
        "name": "workflows.read",
        "description": "View workflow plans and runs",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_agent_workflows_write",
        "name": "workflows.write",
        "description": "Create and run workflow plans",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_agent_workspace_read",
        "name": "workspace.read",
        "description": "View the Agent operating workspace",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_agent_workspace_write",
        "name": "workspace.write",
        "description": "Update workspace state and org memory",
        "resourcePattern": null,
        "kind": "api_key_scope"
      }
    ],
    "service_permissions": [
      {
        "id": "perm_agent_agents_read",
        "name": "agents:read",
        "description": "View configured agents and their settings",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_agent_agents_write",
        "name": "agents:write",
        "description": "Create and update agent definitions",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_agent_approvals_write",
        "name": "approvals:write",
        "description": "Approve or reject gated Agent actions",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_agent_knowledge_read",
        "name": "knowledge:read",
        "description": "View agent knowledge sources and indexed documents",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_agent_knowledge_write",
        "name": "knowledge:write",
        "description": "Manage agent knowledge sources and indexed documents",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_agent_reports_read",
        "name": "reports:read",
        "description": "View reports, artifacts, and work feed output",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_agent_runs_invoke",
        "name": "runs:invoke",
        "description": "Invoke agent runs and inspect their output",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_agent_workflows_read",
        "name": "workflows:read",
        "description": "View workflow plans and runs",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_agent_workflows_write",
        "name": "workflows:write",
        "description": "Create and run workflow plans",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_agent_workspace_read",
        "name": "workspace:read",
        "description": "View the Agent operating workspace",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_agent_workspace_write",
        "name": "workspace:write",
        "description": "Update workspace state and org memory",
        "resourcePattern": null,
        "kind": "permission"
      }
    ]
  },
  "runtime": {
    "primary_hosts": [
      "https://agent.topolo.app",
      "https://agent.stg.topolo.us",
      "https://agent-api.stg.topolo.us",
      "https://topolo-agent-stg.topolo-staging.workers.dev"
    ],
    "repo_entries": [],
    "wrangler_surfaces": [],
    "packages": []
  },
  "data": {
    "env_vars": [],
    "bindings": [],
    "queue_bindings": [],
    "storage_kinds": [],
    "workflow_signals": []
  },
  "deployment": {
    "commands": [],
    "routes": [],
    "environments": [],
    "assets_directories": [],
    "observability_enabled": false
  },
  "debugging": {
    "failure_modes": [
      "No wrangler.toml surface was discovered under the registered repo paths.",
      "The registered contract source is missing: PlatformApplications/TopoloDocs/src/content/public/applications/agent.mdx",
      "Neither OpenAPI nor README-derived interface detail was found."
    ],
    "entrypoints": [
      "PlatformApplications/TopoloDocs/src/content/public/applications/agent.mdx"
    ]
  }
}