Topolo Platform
Shared platform concepts spanning identity, API keys, service registration, deployment, and observability.
Documentation Map
What It Is
Shared platform concepts spanning identity, API keys, service registration, deployment, and observability.
Central authentication and SSO service for the Topolo platform.
Use Wrangler with the environment defined in [wrangler.toml](/Users/ashes/Projects/topolo/Applications/TopoloAuth/wrangler.toml). Secrets remain in Cloudflare, not in source control.
Architecture
Owners: platform
Source repos: Applications/TopoloAuth, Applications/TopoloOne, Websites/docs
Dependencies: topolo-auth, topolo-one
Repo shape
- Applications/TopoloAuth/ADMIN_FRONTEND_SESSIONS.md
- Applications/TopoloAuth/ADMIN_PLATFORM_PERMISSIONS_INTEGRATION.md
- Applications/TopoloAuth/ADMIN_SERVICE_API.md
- Applications/TopoloAuth/ADMIN_USER_MANAGEMENT_API.md
- Applications/TopoloAuth/AUTH_INTEGRATION_GUIDE.md
- Applications/TopoloAuth/AUTH_ROUTE_SMOKE_MATRIX.md
- Applications/TopoloAuth/COOKIE_MODE_MIGRATION.md
- Applications/TopoloAuth/FIRST_PARTY_AUTH_STANDARD.md
- Applications/TopoloAuth/FRONTEND_PERMISSIONS_INTEGRATION.md
- Applications/TopoloAuth/OAUTH_SETUP.md
- Applications/TopoloAuth/ORGANIZATION_SERVICES_API.md
- Applications/TopoloAuth/PASSKEY_INTEGRATION.md
- Applications/TopoloAuth/PERMISSION_MODEL.md
- Applications/TopoloAuth/PRODUCTION_DATABASE_SCHEMA.md
- Applications/TopoloAuth/README.md
- Applications/TopoloAuth/REFACTOR_DEMO.md
- Applications/TopoloAuth/REFACTOR_PLAN.md
- Applications/TopoloAuth/SECRETS_MIGRATION.md
- Applications/TopoloAuth/SERVICE_MANAGEMENT_API.md
- Applications/TopoloAuth/SSO_TOKEN_IMPLEMENTATION.md
Runtime Surfaces
Hosts:
https://docs.topolo.io Config: Applications/TopoloAuth/wrangler.toml
Main: src/index.js
Routes: auth-staging.topolo.app, auth.topolo.app
Config: Applications/TopoloOne/apps/ai-chat-rag/wrangler.toml
Main: dist/index.js
Routes: workers.dev or asset-only surface
Config: Applications/TopoloOne/apps/dashboard-worker/wrangler.toml
Main: dist/index.js
Routes: one.topolo.app/*
Config: Applications/TopoloOne/apps/marketing-site/wrangler.toml
Main: worker/index.js
Routes: workers.dev or asset-only surface
API Reference
Coverage: curated
Source: Websites/docs/src/content/public/platform
Source exists in repo: yes
Canonical platform behavior is documented directly in the docs monorepo.
This system currently relies on a curated or README-derived contract surface instead of a source-controlled OpenAPI spec.
Auth and Permissions
Depends on Topolo Auth: yes
Service IDs:
No Auth service ID mapped in docs yet.
API key scopes
No API key scopes were found in the checked-in Auth catalog for this system.
Service permissions
No role/permission catalog rows were found in the checked-in Auth permissions seed.
Data Ownership
Binding: DB
Target: 437aad6b-7e22-4a11-b048-3b1fa32e9b43
Environment: default
Source: Applications/TopoloAuth/wrangler.toml
Binding: DB
Target: 9f2c0e78-738a-41c0-95bf-9968ff369926
Environment: production
Source: Applications/TopoloAuth/wrangler.toml
Binding: CHAT_CACHE
Target: 5ee16c92ffe34626aacbe45b94e416fe
Environment: default
Source: Applications/TopoloOne/apps/ai-chat-rag/wrangler.toml
Binding: CHAT_CACHE
Target: 5ee16c92ffe34626aacbe45b94e416fe
Environment: preview
Source: Applications/TopoloOne/apps/ai-chat-rag/wrangler.toml
Binding: CHAT_CACHE
Target: 5ee16c92ffe34626aacbe45b94e416fe
Environment: production
Source: Applications/TopoloOne/apps/ai-chat-rag/wrangler.toml
Binding: ONECLICK_DB
Target: ace6619b-0dae-4248-870b-71561d9087e2
Environment: default
Source: Applications/TopoloOne/apps/dashboard-worker/wrangler.toml
Binding: ONECLICK_KV
Target: 53140b1879254915bfb46179f09d197b
Environment: default
Source: Applications/TopoloOne/apps/dashboard-worker/wrangler.toml
Binding: ONECLICK_DB
Target: ace6619b-0dae-4248-870b-71561d9087e2
Environment: preview
Source: Applications/TopoloOne/apps/dashboard-worker/wrangler.toml
Binding: ONECLICK_KV
Target: a4ed16d4573d45b8a05eefa54f18eb5f
Environment: preview
Source: Applications/TopoloOne/apps/dashboard-worker/wrangler.toml
Binding: ONECLICK_DB
Target: ace6619b-0dae-4248-870b-71561d9087e2
Environment: production
Source: Applications/TopoloOne/apps/dashboard-worker/wrangler.toml
Binding: ONECLICK_KV
Target: a4ed16d4573d45b8a05eefa54f18eb5f
Environment: production
Source: Applications/TopoloOne/apps/dashboard-worker/wrangler.toml
Binding: WAITLIST_KV
Target: 97ef5229c1574541bb7d5dd6b437d5b6
Environment: default
Source: Applications/TopoloOne/apps/marketing-site/wrangler.toml
Binding: BOOKING_KV
Target: b45b9707d5984639b03f42e3f9e42fcb
Environment: default
Source: Applications/TopoloOne/apps/marketing-site/wrangler.toml
Binding: SUBS_KV
Target: 5cd7bce0ea88411d857169ea9ef46c2a
Environment: default
Source: Applications/TopoloOne/apps/marketing-site/wrangler.toml
Binding: WAITLIST_KV
Target: YOUR_STAGING_WAITLIST_KV_PREVIEW_ID
Environment: staging
Source: Applications/TopoloOne/apps/marketing-site/wrangler.toml
Binding: BOOKING_KV
Target: YOUR_STAGING_BOOKING_KV_PREVIEW_ID
Environment: staging
Source: Applications/TopoloOne/apps/marketing-site/wrangler.toml
Binding: SUBS_KV
Target: YOUR_STAGING_SUBS_KV_PREVIEW_ID
Environment: staging
Source: Applications/TopoloOne/apps/marketing-site/wrangler.toml
Queues / Cron / Workflows
Queue bindings:
No queue bindings were detected.
Cron triggers
No cron triggers were detected.
Workflow signals
No explicit queue/workflow script or cron signal was discovered.
Environment Variables and Bindings
Environment variables:
ALLOWED_ORIGINS AUTH_ACCESS_TOKEN_TTL_SECONDS AUTH_ALLOW_REFRESH_TOKEN_IN_BODY AUTH_API_URL AUTH_CLIENT_COMPAT_ALLOWLIST AUTH_COOKIE_DOMAIN AUTH_COOKIE_MODE_DEFAULT AUTH_LEGACY_TOKEN_DELIVERY_ENABLED AUTH_REFRESH_COOKIE_NAME AUTH_REFRESH_SKIP_SESSION_CHECK AUTH_REFRESH_TOKEN_TTL_SECONDS AUTH_SESSION_TTL_SECONDS ENVIRONMENT GITHUB_CLIENT_ID LOG_LEVEL NEXT_PUBLIC_SIGNUP_MODE NEXT_PUBLIC_SITE_URL NODE_ENV SERVICE_NAME All wrangler bindings
-
DB(d1) -> 437aad6b-7e22-4a11-b048-3b1fa32e9b43 -
DB(d1) -> 9f2c0e78-738a-41c0-95bf-9968ff369926 [production] -
CHAT_CACHE(kv) -> 5ee16c92ffe34626aacbe45b94e416fe -
CHAT_CACHE(kv) -> 5ee16c92ffe34626aacbe45b94e416fe [preview] -
CHAT_CACHE(kv) -> 5ee16c92ffe34626aacbe45b94e416fe [production] -
ONECLICK_DB(d1) -> ace6619b-0dae-4248-870b-71561d9087e2 -
ONECLICK_KV(kv) -> 53140b1879254915bfb46179f09d197b -
ONECLICK_DB(d1) -> ace6619b-0dae-4248-870b-71561d9087e2 [preview] -
ONECLICK_KV(kv) -> a4ed16d4573d45b8a05eefa54f18eb5f [preview] -
ONECLICK_DB(d1) -> ace6619b-0dae-4248-870b-71561d9087e2 [production] -
ONECLICK_KV(kv) -> a4ed16d4573d45b8a05eefa54f18eb5f [production] -
WAITLIST_KV(kv) -> 97ef5229c1574541bb7d5dd6b437d5b6 -
BOOKING_KV(kv) -> b45b9707d5984639b03f42e3f9e42fcb -
SUBS_KV(kv) -> 5cd7bce0ea88411d857169ea9ef46c2a -
WAITLIST_KV(kv) -> YOUR_STAGING_WAITLIST_KV_PREVIEW_ID [staging] -
BOOKING_KV(kv) -> YOUR_STAGING_BOOKING_KV_PREVIEW_ID [staging] -
SUBS_KV(kv) -> YOUR_STAGING_SUBS_KV_PREVIEW_ID [staging]
Deployments
Deployment environments: production, preview, staging
Routes: auth-staging.topolo.app, auth.topolo.app, one.topolo.app/*
Observability enabled: yes
Wrangler surfaces
- Applications/TopoloAuth/wrangler.toml -> topolo-auth-staging
- Applications/TopoloOne/apps/ai-chat-rag/wrangler.toml -> ai-chat-rag (assets ./public) (build pnpm run build)
- Applications/TopoloOne/apps/dashboard-worker/wrangler.toml -> topoloone-worker (assets ./public) (build pnpm run build)
- Applications/TopoloOne/apps/marketing-site/wrangler.toml -> topoloone-website (assets out)
Build and deploy commands
-
deploy— Applications/TopoloAuth/package.json :: wrangler deploy -
build— Applications/TopoloOne/apps/ai-chat-rag/package.json :: esbuild src/index.ts --bundle --outfile=dist/index.js --format=esm --platform=browser --target=es2022 -
deploy— Applications/TopoloOne/apps/ai-chat-rag/package.json :: wrangler deploy -
build— Applications/TopoloOne/apps/dashboard-web/package.json :: tsc && vite build --mode production -
preview— Applications/TopoloOne/apps/dashboard-web/package.json :: vite preview -
build— Applications/TopoloOne/apps/dashboard-worker/package.json :: esbuild src/index.ts --bundle --outfile=dist/index.js --format=esm --platform=browser --target=es2022 -
deploy— Applications/TopoloOne/apps/dashboard-worker/package.json :: wrangler deploy -
build— Applications/TopoloOne/apps/marketing-site/package.json :: next build -
build:cf— Applications/TopoloOne/apps/marketing-site/package.json :: echo 'Using static export instead of next-on-pages' -
preview:cf— Applications/TopoloOne/apps/marketing-site/package.json :: wrangler pages dev .vercel/output/static
Failure Modes
- No Auth service ID is registered for this system.
Debugging Runbooks
Start with these entrypoints:
- Applications/TopoloAuth/wrangler.toml
- Applications/TopoloOne/apps/ai-chat-rag/wrangler.toml
- Applications/TopoloOne/apps/dashboard-worker/wrangler.toml
- Applications/TopoloOne/apps/marketing-site/wrangler.toml
- Websites/docs/src/content/public/platform
- Applications/TopoloAuth/README.md
- Applications/TopoloAuth/package.json
- Applications/TopoloOne/apps/ai-chat-rag/package.json
- Applications/TopoloOne/apps/dashboard-web/package.json
- Applications/TopoloOne/apps/dashboard-worker/package.json
- Applications/TopoloOne/apps/marketing-site/package.json
Change Log / Verification
Lifecycle: active
Last verified: 2026-03-29
Any code change to this system is expected to update the canonical docs in Websites/docs and refresh the verification date.