{
  "generated_at": "2026-06-12T22:05:57.082Z",
  "system": {
    "id": "topolo-developers",
    "name": "Topolo Developers",
    "slug": "topolo-developers",
    "kind": "application",
    "summary": "Standalone developer application with a public signup entrypoint, the Developers-owned Topolo app store read model, and the authenticated workspace-backed console where publishers manage apps, uploaded app icons, App Store taxonomy-backed section/category marketing metadata, launcher deep-link exposure, Android/iOS mobile artifacts, submissions, and build requests while internal operators review app submissions, set app visibility/status, manage developer commerce controls, configure app pricing, and track payout readiness from staff-only routes inside the same product.",
    "aliases": [],
    "lifecycle": "active",
    "last_verified": "2026-06-04",
    "owners": [
      "platform-experience"
    ],
    "repo_paths": [],
    "external_repo_paths": [
      "Apps/system/TopoloDevelopers"
    ],
    "service_ids": [
      "srv_NjDq9G9qyyjr"
    ],
    "visibility": "public",
    "api_contract": {
      "type": "curated",
      "source": "PlatformApplications/TopoloDevelopers/src/App.tsx",
      "notes": "Topolo Developers owns its own Worker + D1 backend for authenticated workspace summary, onboarding, app drafts, uploaded app icons, Android/iOS mobile artifact records, public /api/apps catalog output, Developers-owned /api/store/catalog, /api/store/search, /api/store/apps/:idOrSlug app store reads, and /api/store/assets/app-icons/:appId/:filename icon assets for TopoloOne and public store surfaces, app submissions, app action definitions for SDK/CLI/MCP agents, build requests, transfer codes, internal review workflows, app commerce controls, payout-account state, payout ledger events, P2P capability source records plus the public /api/p2p/capabilities/:id read-through endpoint, scaffold-provisioning routes for authenticated developer self-service with or without generated files, first-party Topolo scaffold registration into the Topolo-owned developer workspace with Auth handoff at scaffold time for Auth `admin` org platform operators and Topolo developer-workspace admins only, and per-app launcher quick-link authoring through the signed marketing editor. That D1 schema is now migration-managed from checked-in SQL in the Developers repo rather than being created on request. The app still exposes shared public landing and first-party embedded password-login surfaces at / and /login plus a dedicated public signup handoff at /signup, creates the org-backed developer workspace in Auth during signup, treats that workspace as the publisher boundary for many developer apps, and consumes Auth only for identity, central API-key surfaces, app-switcher entitlements, approved-app registration into the shared service catalog under the `topolo-developers` service slug, install/launch authorization, Auth-hosted end-user OAuth consent for registered third-party clients, and Auth-hosted credential-scoped action projection after app actions are published. Browser preboot, worker auth headers, widget output, public catalog enrichment, P2P sync headers, seed validation, and error attribution resolve concrete environment service ids from Auth service slugs at runtime instead of carrying concrete service ids in source or deployed browser assets. The legacy Developers browser consent route forwards to Auth and must not require developer workspace admission. Developer apps now also carry explicit ownerType, portfolio, audience, tenancy, surfaceModel, optional containerAppId, distribution metadata, launcher quick-link metadata, uploaded icon metadata, and marketplace lifecycle state so Topolo first-party platform/personal apps stay distinct from third-party business/personal apps, organization-internal apps stay private to the owning workspace, scaffolded first-party apps start as `developer_only`, operators can promote them through `early_access`, `production_ready`, and `active`, public catalog routes expose only `active` apps, and the Topolo-owned public store catalog is reconciled against Auth's first-party launcher-visible application set so TopoloOne /apps and the embedded app switcher expose the same suite rather than separate launch-week allowlists. App action authoring, visibility, and mutation resolve from workspace org membership plus per-app owner/editor/viewer membership metadata, owner-issued transfer codes with destination-workspace claim, built-in developer_app API-key resource bindings for approved apps, explicit review:read/review:write permissions for staff-only review routes and action publish handoff, explicit commerce:read/commerce:write permissions or Topolo super-admin access for staff-only commerce routes, the production Topolo Technology developer profile and first-party platform plus mobile app rows used to exercise the publisher workflow as Topolo, the Topolo Mobile records for the 22 retained Flutter apps under Apps/<domain>/Topolo<App> with finalized app.topolo.mobile.* identifiers and Android APK artifacts published to the shared topolo-apks R2 bucket through apk.topolo.app, cleanup for 8 retired one-off mobile app records, the completed demo-suite developer profile used for platform auth audits, and the repo-level CI gate recorded in CloudControl."
    },
    "primary_hosts": [
      "https://developers.topolo.app",
      "https://developers.stg.topolo.us"
    ],
    "doc_paths": [
      "applications/developers",
      "internal/apps/topolo-developers"
    ],
    "security_assurance": {
      "risk_tier": "critical",
      "auth_boundary": "Topolo Auth service access for developer workspaces, app registration, and API-key governance; first-party password login persists through the shared Auth client before returning into the Developers app.",
      "tenant_isolation": "organization_scoped",
      "external_inputs": [
        "browser",
        "api",
        "callback",
        "third_party_app"
      ],
      "sensitive_data": [
        "identity",
        "org_data",
        "provider_credentials",
        "customer_content",
        "telemetry"
      ],
      "last_security_review": "2026-04-30",
      "security_review_status": "reviewed",
      "pentest_status": "passed",
      "evidence_doc": "internal/apps/topolo-developers"
    },
    "data_privacy": {
      "classification": "secret",
      "sensitive_data_classes": [
        "customer_content",
        "identity",
        "organization",
        "provider_credentials",
        "telemetry"
      ],
      "storage_locations": [
        "d1",
        "external_provider",
        "r2"
      ],
      "encryption_at_rest": "application_layer_required",
      "encryption_in_transit": "https_only",
      "key_management": "versioned_platform_key_required",
      "retention_policy": "needs_policy",
      "deletion_export_status": "planned",
      "logging_redaction_status": "needs_review",
      "privacy_review_status": "reviewed",
      "enterprise_ready": false,
      "evidence_doc": "internal/apps/topolo-developers"
    },
    "dependencies": [
      "topolo-auth",
      "topolo-one",
      "topolo-p2p"
    ],
    "bugfix_policy": {
      "tier": "autonomous",
      "preferred_agent": "either",
      "require_validator": false
    },
    "public_hub_url": "/systems/topolo-developers",
    "internal_hub_url": null,
    "application_api_url": "/reference/apps/topolo-developers",
    "generated_openapi_url": null,
    "machine_urls": {
      "system": "/machine/systems/topolo-developers.json",
      "application": "/machine/applications/topolo-developers.json"
    }
  },
  "docs": {
    "public": [
      {
        "id": "applications/developers",
        "title": "Topolo Developers",
        "summary": "Public overview of the authenticated Topolo developer portal and its submission/request workflows.",
        "audience": "public",
        "tags": [
          "developers",
          "portal",
          "auth"
        ],
        "url": "/applications/developers",
        "last_verified": "2026-06-04"
      }
    ],
    "internal": [],
    "runbooks": []
  },
  "authority": {
    "owners": [
      "platform-experience"
    ],
    "repo_paths": [],
    "service_ids": [
      "srv_NjDq9G9qyyjr"
    ],
    "dependencies": [
      "topolo-auth",
      "topolo-one",
      "topolo-p2p"
    ],
    "aliases": []
  },
  "interfaces": {
    "contract_type": "curated",
    "contract_source": "PlatformApplications/TopoloDevelopers/src/App.tsx",
    "contract_source_exists": false,
    "openapi": null,
    "readme": null
  },
  "auth": {
    "depends_on_topolo_auth": true,
    "api_key_scopes": [
      {
        "id": "aks_topolo_developers_apps_read",
        "name": "apps.read",
        "description": "View workspace-owned developer apps",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_developers_apps_write",
        "name": "apps.write",
        "description": "Create and update workspace-owned developer apps",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_developers_commerce_read",
        "name": "commerce.read",
        "description": "View internal developer commerce controls",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_developers_commerce_write",
        "name": "commerce.write",
        "description": "Manage developer workspace commerce, marketplace, pricing, payout-account, and payout-ledger state",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_developers_credentials_read",
        "name": "credentials.read",
        "description": "View Auth-backed API keys and service access",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_developers_credentials_write",
        "name": "credentials.write",
        "description": "Create and revoke Auth-backed API keys and service access",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_developers_marketplace_read",
        "name": "marketplace.read",
        "description": "View internal marketplace operations and launch-readiness controls",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_developers_marketplace_write",
        "name": "marketplace.write",
        "description": "Manage internal marketplace operations, launch-readiness status, and featured catalogue placement",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_developers_oauth_clients_write",
        "name": "oauth_clients.write",
        "description": "Create and revoke OAuth clients tied to developer apps",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_developers_requests_read",
        "name": "requests.read",
        "description": "View developer build requests created by the current workspace",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_developers_requests_write",
        "name": "requests.write",
        "description": "Create and manage developer build requests for the current workspace",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_developers_review_read",
        "name": "review.read",
        "description": "View internal app-submission and build-request review queues",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_developers_review_write",
        "name": "review.write",
        "description": "Review app submissions and build requests from the internal staff queue",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_developers_settings_read",
        "name": "settings.read",
        "description": "View developer workspace settings",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_developers_settings_write",
        "name": "settings.write",
        "description": "Manage developer workspace settings",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_developers_submissions_read",
        "name": "submissions.read",
        "description": "View public catalogue submission state and review notes",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_developers_submissions_write",
        "name": "submissions.write",
        "description": "Create and resubmit public catalogue submissions",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_developers_workspace_read",
        "name": "workspace.read",
        "description": "View developer workspace summary and onboarding state",
        "resourcePattern": null,
        "kind": "api_key_scope"
      },
      {
        "id": "aks_topolo_developers_workspace_write",
        "name": "workspace.write",
        "description": "Manage developer workspace onboarding and profile state",
        "resourcePattern": null,
        "kind": "api_key_scope"
      }
    ],
    "service_permissions": [
      {
        "id": "perm_topolo_developers_apps_read",
        "name": "apps:read",
        "description": "View workspace-owned developer apps",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_developers_apps_write",
        "name": "apps:write",
        "description": "Create and update workspace-owned developer apps",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_developers_commerce_read",
        "name": "commerce:read",
        "description": "View internal developer commerce controls",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_developers_commerce_write",
        "name": "commerce:write",
        "description": "Manage developer workspace commerce, marketplace, pricing, payout-account, and payout-ledger state",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_developers_credentials_read",
        "name": "credentials:read",
        "description": "View Auth-backed API keys and service access",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_developers_credentials_write",
        "name": "credentials:write",
        "description": "Create and revoke Auth-backed API keys and service access",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_developers_marketplace_read",
        "name": "marketplace:read",
        "description": "View internal marketplace operations and launch-readiness controls",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_developers_marketplace_write",
        "name": "marketplace:write",
        "description": "Manage internal marketplace operations, launch-readiness status, and featured catalogue placement",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_developers_oauth_clients_write",
        "name": "oauth_clients:write",
        "description": "Create and revoke OAuth clients tied to developer apps",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_developers_requests_read",
        "name": "requests:read",
        "description": "View developer build requests created by the current workspace",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_developers_requests_write",
        "name": "requests:write",
        "description": "Create and manage developer build requests for the current workspace",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_developers_review_read",
        "name": "review:read",
        "description": "View internal app-submission and build-request review queues",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_developers_review_write",
        "name": "review:write",
        "description": "Review app submissions and build requests from the internal staff queue",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_developers_settings_read",
        "name": "settings:read",
        "description": "View developer workspace settings",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_developers_settings_write",
        "name": "settings:write",
        "description": "Manage developer workspace settings",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_developers_submissions_read",
        "name": "submissions:read",
        "description": "View public catalogue submission state and review notes",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_developers_submissions_write",
        "name": "submissions:write",
        "description": "Create and resubmit public catalogue submissions",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_developers_workspace_read",
        "name": "workspace:read",
        "description": "View developer workspace summary and onboarding state",
        "resourcePattern": null,
        "kind": "permission"
      },
      {
        "id": "perm_topolo_developers_workspace_write",
        "name": "workspace:write",
        "description": "Manage developer workspace onboarding and profile state",
        "resourcePattern": null,
        "kind": "permission"
      }
    ]
  },
  "runtime": {
    "primary_hosts": [
      "https://developers.topolo.app",
      "https://developers.stg.topolo.us"
    ],
    "repo_entries": [],
    "wrangler_surfaces": [],
    "packages": []
  },
  "data": {
    "env_vars": [],
    "bindings": [],
    "queue_bindings": [],
    "storage_kinds": [],
    "workflow_signals": []
  },
  "deployment": {
    "commands": [],
    "routes": [],
    "environments": [],
    "assets_directories": [],
    "observability_enabled": false
  },
  "debugging": {
    "failure_modes": [
      "No wrangler.toml surface was discovered under the registered repo paths.",
      "The registered contract source is missing: PlatformApplications/TopoloDevelopers/src/App.tsx",
      "Neither OpenAPI nor README-derived interface detail was found."
    ],
    "entrypoints": [
      "PlatformApplications/TopoloDevelopers/src/App.tsx"
    ]
  }
}