One

Execute and verify One actions

Discover the actual context and identifiers, validate and plan the unchanged input, authorize effects and inspect the action’s own verification and recovery. Synthetic response captures establish local handler behavior only.

Action guides

• Archive workspace: Archives the specifically authorized, empty canonical workspace through Auth and removes One’s local workspace mirrors.
• Export organization data: Reads One-owned organization records with authentication credentials redacted and the global catalog excluded.
• Erase organization data: Erases One-owned organization records and verifies remaining local KV entries; excludes Auth credentials and the global catalog.
• Get widget summary: Returns One’s canonical v3 dashboard widget contract and current application-access metrics.
• List launcher apps: Reads the caller’s Auth-backed launcher catalog.
• Get composed dashboard: Composes the organization’s entitled services, launcher preferences, users and store icons.
• List focused dashboards: Reads accessible dashboards in the credential's active ownership context without changing data.
• Get focused dashboard: Reads one accessible dashboard in the active ownership context without changing data.
• Create focused dashboard: Creates a named purpose-driven dashboard with an explicit time context, ordered app contributions, exact resource bindings, and saved analyses.
• Update focused dashboard: Changes a saved view's name, purpose, time context, contribution resources, analyses, sharing, or default state.
• Duplicate focused dashboard: Copies a visible dashboard and all saved-view semantics into a new view owned by the caller.
• Delete focused dashboard: Deletes an owned dashboard and promotes the most recent remaining one in the same owner's scope and visibility library as the default.
• Quote application cart: Calculates a proposed cart using Store prices without charging or creating a subscription.
• Create checkout: Reconciles or creates the cart’s Pay subscription and returns payment-intent information.
• Aggregate app widget contracts: Fetches complete contracts from selected authorized app services and may refresh One’s widget cache.
• Build widget metric snapshot: Builds and returns a current metric snapshot; this handler does not persist a versioned snapshot.
• Plan declared widget action: Resolves the current widget binding against the published target action and validates its input without executing it.
• Execute declared widget action: Executes the validated action bound to the current widget control after required confirmation.
• Create local application record: Creates an entry in One’s local applications D1 table; it does not register an Auth service or change organization entitlements.
• Update local application record: Updates the supplied fields on One’s local applications D1 entry.
• Delete local application record: Deletes One’s local applications D1 entry, subject to system-app protection.
• Push Subscriptions Create: Registers the caller’s browser push endpoint in local D1. An existing endpoint returns success without refreshing its stored keys.
• Push Subscriptions Delete: Deletes the caller’s stored push endpoint registration.
• Push Vapid Key Get: Returns the configured public Web Push VAPID key without requiring sign-in.
• Prepare app launch URL: Prepares an Auth SSO authorize URL without recording launch analytics or usage.
• Launch Create: Builds an Auth SSO authorize URL and attempts to record launch analytics and usage.
• Launch Secure Token Create: Mints a short-lived signed handoff token for the requested app and approved callback.
• Acknowledge legacy usage request: Authenticates the request and acknowledges the supplied application id. Its legacy trackLaunch helper does not persist a usage event.
• Admin Status Get: Returns operational status and the authenticated caller summary after administrative authorization.
• Admin Apps List: Reads application surfaces from Auth’s global service registry, not One’s local application table or the caller’s entitlement catalog.
• Admin Categories List: Reads One’s local application-category definitions after administrative authorization.

Evidence

Actual exported One Worker with local Miniflare D1/KV. Authentication, application discovery, checkout, billing and remote widget providers are controlled synthetic responses; outbound access is sealed. No live provider outcome is established.

Additional action guides

Connection management, public pricing/contact and protected signup flows have distinct effects and credentials. These examples are synthetic and unrun; the earlier fixture evidence above does not cover these additions.

• Disable a connected app: Disable an organization app connection and delete the Notify subscriptions it owns, or withdraw your own pending request, through Topolo Developers.
• Enable or request a connected app: Enable a declared app connection as an organization admin, or record a member request for admin approval, through Topolo Developers.
• List organization connected apps: List every declared app-to-app connection with the active organization’s live connection state, read from Topolo Developers as the signed-in user.
• Read connected app status: Read one consumer and provider connection in the active organization, with declared scopes, events, approval and Notify subscription health from Topolo Developers.
• Submit contact request: Store an ordinary contact request after Turnstile verification. Enterprise enquiries use the configured Topolo Forms collector.
• Read contact receipt: Read a stored contact receipt using its random reference. No message, identity or email delivery state is returned.
• Read public workspace pricing: Read the central monthly and annual workspace prices, published plan catalog, configured Enterprise form and usage rates. Planned plans are omitted.
• Start Essential signup checkout: Start one Essential checkout per person with the accepted usage rate card; checkout presents the current terms. First-party apps and agent access are included.
• Read Suite signup checkout: Read the sanitized checkout subscription using its protected session-bound handoff credential.
• Check signup email: Check whether the buyer email already has an account before signup.
• Complete Suite signup: Prepare the verified checkout organization, included apps and owner login, with idempotent billing ownership binding.
• Check signup workspace URL: Check the requested signup workspace slug before creating a checkout.

Change log

• 2026-10-20: Prepared links to the additional source-reviewed action guides above. Existing guide links and historical evidence are retained; this update does not recertify their current runtime behavior or assert complete application coverage.