Get widget summary

Outcome

Get the TopoloOne widget summary for this service.

Before you start

• Verify the intended environment, signed-in credential, authorized organization and the action permission workspace:read.
• Discover and select an authorized canonical Engage workspace. Pass resourceType=workspace and resourceId separately from action input.

Discover the target

topolo whoami --json
topolo actions get app_topolo_engage.widget.get --json
topolo workspaces list topolo-engage --json

Set ENGAGE_WORKSPACE_ID to the identifier of the selected authorized workspace.

Input contract

This action accepts an empty input object ({}). Resource context is supplied separately when required.

Validate, plan and execute

Build payload.json from the current schema and discovered identifiers. The action description above defines its behavior, limits, side effects and declared errors.

: "${ENGAGE_WORKSPACE_ID:?Set ENGAGE_WORKSPACE_ID to your selected workspace identifier}"
topolo actions validate app_topolo_engage.widget.get --data @payload.json --json
topolo actions plan app_topolo_engage.widget.get --resource-type workspace --resource-id "$ENGAGE_WORKSPACE_ID" --data @payload.json --json

Execute the unchanged validated read.

: "${ENGAGE_WORKSPACE_ID:?Set ENGAGE_WORKSPACE_ID to your selected workspace identifier}"
topolo actions call app_topolo_engage.widget.get --resource-type workspace --resource-id "$ENGAGE_WORKSPACE_ID" --data @payload.json --json

For MCP, use topolo_get_action, topolo_validate_action, topolo_plan_action and topolo_call_action. Pass resource context separately where required; confirm:true is required for mutations.

Captured successful requests and responses

Captured HTTP 200 · generated worker routes > serves the widget and bootstrap only to authenticated callers

Action input

{}

Actual local response

{
  "success": true,
  "contractVersion": "3.0.0",
  "appId": "app_test",
  "serviceName": "Engage",
  "generatedAt": "2026-10-08T20:05:55.327Z",
  "widgets": [
    {
      "id": "app.overview",
      "version": "3.0.0",
      "type": "stats",
      "presentation": {
        "title": "Engage",
        "contexts": [
          "organization"
        ],
        "supportedSizes": [
          "compact",
          "medium"
        ],
        "defaultSize": "medium"
      },
      "resource": {
        "resourceType": "organization",
        "requiredPermissions": [
          "workspace:read"
        ]
      },
      "state": {
        "status": "empty",
        "observedAt": "2026-10-08T20:05:55.326Z",
        "message": "No product metrics have been configured."
      },
      "refresh": {
        "intervalSeconds": 60,
        "timeoutSeconds": 10,
        "maxAgeSeconds": 120,
        "staleWhileRevalidateSeconds": 120
      },
      "configuration": {
        "allowMultipleInstances": false,
        "fields": [],
        "defaults": {}
      },
      "drilldowns": [
        {
          "id": "open-app",
          "label": "Open app",
          "href": "/"
        }
      ],
      "controls": [],
      "metrics": [],
      "localization": {
        "locale": "en",
        "titleKey": "app.widget.title"
      },
      "accessibility": {
        "label": "Engage"
      },
      "contribution": {
        "summary": "Open the application to begin.",
        "identity": {
          "iconSource": "catalog"
        },
        "workspaceSelector": {
          "mode": "none",
          "resourceType": "organization",
          "label": "Organization",
          "supportsMultiple": false
        },
        "metricDefinitions": [
          {
            "key": "items",
            "label": "Items",
            "description": "Product records once configured by the application.",
            "unit": "count",
            "semantic": "gauge",
            "aggregation": "last"
          }
        ],
        "seriesDefinitions": [],
        "dimensions": [],
        "lifecycleStages": [],
        "events": [],
        "datasets": [
          {
            "id": "overview",
            "label": "Overview",
            "description": "Product overview awaiting application data.",
            "grain": "organization",
            "metricKeys": [
              "items"
            ],
            "seriesKeys": [],
            "dimensionKeys": [],
            "eventKeys": [],
            "actionIds": []
          }
        ],
        "compatibleVisualizations": [
          "number"
        ],
        "defaultVisualization": "number"
      },
      "appId": "app_test",
      "serviceName": "Engage",
      "lastUpdated": "2026-10-08T20:05:55.327Z"
    }
  ]
}

Source test: worker-routes.test.ts. Actual app handler with mocked runtime/Auth/identity; not real gateway authorization.

Effects and response meaning

• Get the TopoloOne widget summary for this service.

Verify the outcome

• Check the response against the declared output schema and the requested operation. For mutations, use the action-specific read described in the action description before any dependent operation.

Recover

For an uncertain result, inspect current retained state with a read action before retrying. Do not replay a mutation unless its contract explicitly guarantees idempotency.

Refused requests

Captured HTTP 401 · generated worker routes > serves the widget and bootstrap only to authenticated callers

Action input

{}

Actual local response

{
  "error": "unauthorized"
}

Source test: worker-routes.test.ts. Actual app handler with mocked runtime/Auth/identity; not real gateway authorization.

Error recovery

• HTTP 401 unauthorized: Read the refusal details and current action contract, correct the stated cause, then validate and plan again. Do not retry unchanged or infer success.

Related actions

Evidence and limits

• /api/widget

• worker-routes.test.ts

• Actual route handlers with SQLite repositories; synthetic identity/workspace grants and provider ports.

• Widget/bootstrap use actual app handler but mocked worker runtime and app identity.

• No gateway execution, live permissions, external delivery or deployed proof.

These are local route captures with synthetic identity and simulated dependencies. They do not prove live authorization, gateway execution, production state, or external delivery.