@farming-labs/docs 0.2.103 → 0.2.105

package/dist/{markdown-sections-7OoA7ylx.mjs → markdown-sections-BKy4labo.mjs}

@@ -3,6 +3,61 @@ import { slug } from "github-slugger";
 import { parseEntities } from "parse-entities";
 import remarkGfm from "remark-gfm";
 
+//#region src/access.ts
+function isRecord$1(value) {
+	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function normalizeStrings(value) {
+	if (!Array.isArray(value)) return void 0;
+	const strings = Array.from(new Set(value.flatMap((item) => typeof item === "string" && item.trim() ? [item.trim()] : [])));
+	return strings.length > 0 ? strings : void 0;
+}
+function normalizeClaimValue(value) {
+	if (typeof value === "string") return value.trim() || void 0;
+	if (typeof value === "number" && Number.isFinite(value)) return value;
+	if (typeof value === "boolean") return value;
+	return normalizeStrings(value);
+}
+function normalizeDocsPageAccessPolicy(value) {
+	if (!isRecord$1(value)) return void 0;
+	const visibility = value.visibility === "public" || value.visibility === "authenticated" ? value.visibility : void 0;
+	const scopes = normalizeStrings(value.scopes);
+	const rawClaims = isRecord$1(value.claims) ? value.claims : void 0;
+	const claims = rawClaims ? Object.fromEntries(Object.entries(rawClaims).flatMap(([name, rawValue]) => {
+		const normalizedName = name.trim();
+		const normalizedValue = normalizeClaimValue(rawValue);
+		return normalizedName && normalizedValue !== void 0 ? [[normalizedName, normalizedValue]] : [];
+	})) : void 0;
+	const normalizedClaims = claims && Object.keys(claims).length > 0 ? claims : void 0;
+	if (!visibility && !scopes && !normalizedClaims) return void 0;
+	return {
+		...visibility ? { visibility } : {},
+		...scopes ? { scopes } : {},
+		...normalizedClaims ? { claims: normalizedClaims } : {}
+	};
+}
+function claimMatches(expected, actual) {
+	const expectedValues = Array.isArray(expected) ? expected : [expected];
+	const actualValues = Array.isArray(actual) ? actual : [actual];
+	return expectedValues.some((expectedValue) => actualValues.some((actualValue) => actualValue === expectedValue));
+}
+function isDocsPageAccessAllowed(policy, principal) {
+	if (!policy) return true;
+	if (!(policy.visibility !== "public" || Boolean(policy.scopes?.length) || Boolean(policy.claims && Object.keys(policy.claims).length > 0))) return true;
+	if (!principal) return false;
+	const scopes = new Set(principal.scopes ?? []);
+	if (policy.scopes?.some((scope) => !scopes.has(scope))) return false;
+	for (const [name, expected] of Object.entries(policy.claims ?? {})) if (!claimMatches(expected, principal.claims?.[name])) return false;
+	return true;
+}
+function isDocsAgentPageAccessible(page, principal) {
+	return isDocsPageAccessAllowed(page.agent?.access, principal);
+}
+function filterDocsPagesByAccess(pages, principal) {
+	return pages.filter((page) => isDocsAgentPageAccessible(page, principal));
+}
+
+//#endregion
 //#region src/agent-contract.ts
 const PAGE_AGENT_STRUCTURED_CONTRACT_FIELDS = [
 	"task",
@@ -16,9 +71,14 @@ const PAGE_AGENT_STRUCTURED_CONTRACT_FIELDS = [
 	"rollback",
 	"failureModes"
 ];
-const PAGE_AGENT_CONTRACT_FIELDS = ["tokenBudget", ...PAGE_AGENT_STRUCTURED_CONTRACT_FIELDS];
+const PAGE_AGENT_CONTRACT_FIELDS = [
+	"tokenBudget",
+	"access",
+	...PAGE_AGENT_STRUCTURED_CONTRACT_FIELDS
+];
 const PAGE_AGENT_CONTRACT_FIELD_SCHEMA = {
 	tokenBudget: "number",
+	access: "{visibility?,scopes?,claims?}",
 	task: "string",
 	outcome: "string",
 	appliesTo: {
@@ -50,6 +110,11 @@ const VERIFICATION_FIELDS = [
 	"expect"
 ];
 const FAILURE_MODE_FIELDS = ["symptom", "resolution"];
+const ACCESS_FIELDS = [
+	"visibility",
+	"scopes",
+	"claims"
+];
 const PAGE_AGENT_CONTRACT_START_MARKER = "<!-- farming-labs:agent-contract:start -->";
 const PAGE_AGENT_CONTRACT_END_MARKER = "<!-- farming-labs:agent-contract:end -->";
 function isRecord(value) {
@@ -163,6 +228,7 @@ function normalizeTokenBudget(value) {
 function normalizePageAgentFrontmatter(value) {
 	if (!isRecord(value)) return void 0;
 	const tokenBudget = normalizeTokenBudget(value.tokenBudget);
+	const access = "access" in value ? normalizeDocsPageAccessPolicy(value.access) ?? { visibility: "authenticated" } : void 0;
 	const task = normalizeString(value.task);
 	const outcome = normalizeString(value.outcome);
 	const appliesTo = normalizeAppliesTo(value.appliesTo);
@@ -175,6 +241,7 @@ function normalizePageAgentFrontmatter(value) {
 	const failureModes = normalizeFailureModes(value.failureModes);
 	const normalized = {
 		...tokenBudget !== void 0 ? { tokenBudget } : {},
+		...access ? { access } : {},
 		...task ? { task } : {},
 		...outcome ? { outcome } : {},
 		...appliesTo ? { appliesTo } : {},
@@ -258,6 +325,35 @@ function getPageAgentFrontmatterIssues(value) {
 		path: "agent.tokenBudget",
 		message: "must be a positive finite number"
 	});
+	if ("access" in value) if (!isRecord(value.access)) issues.push({
+		path: "agent.access",
+		message: "must be an object"
+	});
+	else {
+		addUnknownKeyIssues(issues, value.access, ACCESS_FIELDS, "agent.access");
+		if ("visibility" in value.access && value.access.visibility !== "public" && value.access.visibility !== "authenticated") issues.push({
+			path: "agent.access.visibility",
+			message: "must be \"public\" or \"authenticated\""
+		});
+		if ("scopes" in value.access && !normalizeStringList(value.access.scopes)) issues.push({
+			path: "agent.access.scopes",
+			message: "must be a non-empty string array"
+		});
+		if ("claims" in value.access) {
+			if (!isRecord(value.access.claims) || Object.keys(value.access.claims).length === 0) issues.push({
+				path: "agent.access.claims",
+				message: "must be a non-empty object"
+			});
+			else for (const [name, claim] of Object.entries(value.access.claims)) if (!name.trim() || normalizeDocsPageAccessPolicy({ claims: { [name]: claim } }) === void 0) issues.push({
+				path: `agent.access.claims.${name || "<empty>"}`,
+				message: "must be a string, number, boolean, or non-empty string array"
+			});
+		}
+		if (!normalizeDocsPageAccessPolicy(value.access)) issues.push({
+			path: "agent.access",
+			message: "must include a valid visibility, scope, or claim"
+		});
+	}
 	addStringIssue(issues, value, "task");
 	addStringIssue(issues, value, "outcome");
 	if ("appliesTo" in value) if (!isRecord(value.appliesTo)) issues.push({
@@ -415,6 +511,18 @@ function renderPageAgentFrontmatterYamlLines(value, indentation = 0) {
 	const child = `${indent}  `;
 	const lines = [`${indent}agent:`];
 	if (agent.tokenBudget !== void 0) lines.push(`${child}tokenBudget: ${agent.tokenBudget}`);
+	if (agent.access) {
+		lines.push(`${child}access:`);
+		const accessIndent = `${child}  `;
+		if (agent.access.visibility) lines.push(`${accessIndent}visibility: ${agent.access.visibility}`);
+		if (agent.access.scopes) renderYamlStringList(lines, accessIndent, "scopes", [...agent.access.scopes]);
+		if (agent.access.claims) {
+			lines.push(`${accessIndent}claims:`);
+			const claimsIndent = `${accessIndent}  `;
+			for (const [name, claim] of Object.entries(agent.access.claims).sort(([left], [right]) => left.localeCompare(right))) if (Array.isArray(claim)) renderYamlStringList(lines, claimsIndent, yamlString(name), [...claim]);
+			else lines.push(`${claimsIndent}${yamlString(name)}: ${typeof claim === "string" ? yamlString(claim) : claim}`);
+		}
+	}
 	if (agent.task) lines.push(`${child}task: ${yamlString(agent.task)}`);
 	if (agent.outcome) lines.push(`${child}outcome: ${yamlString(agent.outcome)}`);
 	if (agent.appliesTo) {
@@ -1489,4 +1597,4 @@ function findDocsMarkdownSection(markdown, requestedSection) {
 }
 
 //#endregion
-export { upsertPageAgentContractMarkdown as S, hasStructuredPageAgentContract as _, findDocsGeneratedAgentContractRanges as a, renderPageAgentFrontmatterYamlLines as b, slugifyDocsMarkdownHeading as c, PAGE_AGENT_CONTRACT_END_MARKER as d, PAGE_AGENT_CONTRACT_FIELDS as f, getPageAgentFrontmatterIssues as g, PAGE_AGENT_STRUCTURED_CONTRACT_FIELDS as h, createDocsRenderedHeadingAnchorResolver as i, stripDocsGeneratedAgentContractMarkers as l, PAGE_AGENT_CONTRACT_START_MARKER as m, cleanDocsRenderedHeadingLabel as n, findDocsMarkdownSection as o, PAGE_AGENT_CONTRACT_FIELD_SCHEMA as p, createDocsMarkdownHeadingAnchorResolver as r, parseDocsMarkdownSections as s, applyDocsMarkdownHeadingAnchors as t, withDocsMarkdownRenderableHeadings as u, normalizePageAgentFrontmatter as v, stripGeneratedPageAgentContractMarkdown as x, renderPageAgentContractMarkdown as y };
+export { filterDocsPagesByAccess as C, normalizeDocsPageAccessPolicy as E, upsertPageAgentContractMarkdown as S, isDocsPageAccessAllowed as T, hasStructuredPageAgentContract as _, findDocsGeneratedAgentContractRanges as a, renderPageAgentFrontmatterYamlLines as b, slugifyDocsMarkdownHeading as c, PAGE_AGENT_CONTRACT_END_MARKER as d, PAGE_AGENT_CONTRACT_FIELDS as f, getPageAgentFrontmatterIssues as g, PAGE_AGENT_STRUCTURED_CONTRACT_FIELDS as h, createDocsRenderedHeadingAnchorResolver as i, stripDocsGeneratedAgentContractMarkers as l, PAGE_AGENT_CONTRACT_START_MARKER as m, cleanDocsRenderedHeadingLabel as n, findDocsMarkdownSection as o, PAGE_AGENT_CONTRACT_FIELD_SCHEMA as p, createDocsMarkdownHeadingAnchorResolver as r, parseDocsMarkdownSections as s, applyDocsMarkdownHeadingAnchors as t, withDocsMarkdownRenderableHeadings as u, normalizePageAgentFrontmatter as v, isDocsAgentPageAccessible as w, stripGeneratedPageAgentContractMarkdown as x, renderPageAgentContractMarkdown as y };

package/dist/{mcp-CwgKlbIz.mjs → mcp-DsjWxF7g.mjs}

@@ -1,15 +1,16 @@
-import "./agent-CFqECAG0.mjs";
-import "./markdown-sections-7OoA7ylx.mjs";
-import { L as resolveDocsPublishedAgentSkill } from "./standards-discovery-Ckx0tN7B.mjs";
-import "./content-change-hydration-BsbBXAUi.mjs";
-import { a as resolveDocsMetadataBaseUrl } from "./metadata-D4v_R1t5.mjs";
-import "./sitemap-server-B0SiREN0.mjs";
-import { r as resolveConfiguredAgentSkills } from "./agent-skills-server-DFqQyO_V.mjs";
-import "./agent-evals-GpcaCbRb.mjs";
+import "./markdown-sections-BKy4labo.mjs";
+import "./agent-DCTGj6J7.mjs";
+import { L as resolveDocsPublishedAgentSkill } from "./standards-discovery-Bpz90VYq.mjs";
+import "./openapi-mcp-DQ3xptKo.mjs";
+import { a as resolveDocsMetadataBaseUrl } from "./metadata-7htr-Xj_.mjs";
+import "./sitemap-server-NeVu8W38.mjs";
+import { r as resolveConfiguredAgentSkills } from "./agent-skills-server-Ddbf15pY.mjs";
+import "./agent-evals-D-sPJfXz.mjs";
 import { createFilesystemDocsMcpSource, resolveDocsMcpConfig, runDocsMcpStdio } from "./mcp.mjs";
-import "./code-blocks-Bel6vDqI.mjs";
+import "./authoring-mcp-Be7quE5R.mjs";
+import "./code-blocks-D90CCJFs.mjs";
 import "./server.mjs";
-import { _ as resolveDocsContentDir, d as readNavTitle, g as resolveDocsConfigPath, i as hasTopLevelProperty, l as readBooleanProperty, n as extractObjectLiteral, o as loadDocsConfigModuleResult, p as readStringProperty, t as extractNestedObjectLiteral } from "./config-BaTmjDqD.mjs";
+import { _ as resolveDocsContentDir, d as readNavTitle, g as resolveDocsConfigPath, i as hasTopLevelProperty, l as readBooleanProperty, n as extractObjectLiteral, o as loadDocsConfigModuleResult, p as readStringProperty, t as extractNestedObjectLiteral } from "./config-DrZ3fXgf.mjs";
 import { existsSync, readFileSync } from "node:fs";
 import path from "node:path";
 import pc from "picocolors";

package/dist/mcp.d.mts

@@ -1,6 +1,6 @@
-import { F as DocsAgentContentChangesConfig, Nn as DocsSearchConfig, Pr as PageAgentFrontmatter, Qt as DocsMcpAuthenticate, W as DocsAgentEvaluationsConfig, Xt as DocsMcpAllowedOrigins, Zt as DocsMcpAuthPrincipal, dr as DocsTelemetryFramework, ft as DocsAnalyticsConfig, hn as DocsRetrievalSourceProvenance, kr as OrderingItem, or as DocsTelemetryConfig, tn as DocsMcpConfig, tr as DocsSearchSourcePage, un as DocsObservabilityConfig } from "./types-DLLefoU5.mjs";
-import { z as DocsPublishedAgentSkill } from "./standards-discovery-D1Ys4J3h.mjs";
-import { An as MIN_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET, Cn as DocsContentChangeHydrationBudget, Dn as DocsContentChangeHydrationTombstone, En as DocsContentChangeHydrationSection, Fn as DocsContentChangeFeed, On as HydrateDocsContentChangesOptions, Sn as DOCS_CONTENT_CHANGE_HYDRATION_FORMAT, Tn as DocsContentChangeHydrationResponse, it as DocsMarkdownSectionIndex, jn as hydrateDocsContentChanges, kn as MAX_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET, wn as DocsContentChangeHydrationContent, xn as DEFAULT_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET } from "./agent-lWTq6pgr.mjs";
+import { $t as DocsMcpAuthPrincipal, Er as FeedbackConfig, Hr as OrderingItem, K as DocsAgentEvaluationsConfig, Kn as DocsSearchConfig, L as DocsAgentContentChangesConfig, On as DocsRetrievalSourceProvenance, Qt as DocsMcpAllowedOrigins, Sn as DocsOpenApiMcpConfig, Xr as PageAgentFrontmatter, bn as DocsOkfTrustMetadataInput, en as DocsMcpAuthenticate, fn as DocsObservabilityConfig, gn as DocsOkfConfig, mr as DocsSearchSourcePage, mt as DocsAnalyticsConfig, rn as DocsMcpConfig, wr as DocsTelemetryFramework, yr as DocsTelemetryConfig } from "./types-QhYMnKvb.mjs";
+import { z as DocsPublishedAgentSkill } from "./standards-discovery-Xm84bS4M.mjs";
+import { a as DocsContentChangeHydrationResponse, c as HydrateDocsContentChangesOptions, d as hydrateDocsContentChanges, h as DocsContentChangeFeed, i as DocsContentChangeHydrationContent, l as MAX_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET, n as DOCS_CONTENT_CHANGE_HYDRATION_FORMAT, o as DocsContentChangeHydrationSection, r as DocsContentChangeHydrationBudget, s as DocsContentChangeHydrationTombstone, sn as DocsMarkdownSectionIndex, t as DEFAULT_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET, u as MIN_DOCS_CONTENT_CHANGE_HYDRATION_TOKEN_BUDGET } from "./content-change-hydration-CoYRs3pC.mjs";
 import { McpServer } from "@modelcontextprotocol/server";
 
 //#region src/mcp.d.ts
@@ -15,6 +15,7 @@ interface DocsMcpPage {
   sourcePath?: string;
   lastmod?: string;
   lastModified?: string;
+  okf?: DocsOkfTrustMetadataInput;
   locale?: string;
   framework?: string;
   version?: string;
@@ -187,6 +188,8 @@ interface DocsMcpContextResult {
 }
 interface DocsMcpContextOptions {
   pages: readonly DocsMcpPage[];
+  /** Authenticated identity used to retain authorized pages during retrieval. */
+  principal?: DocsMcpAuthPrincipal;
   query: string;
   framework?: string;
   version?: string;
@@ -268,7 +271,9 @@ interface DocsMcpResolvedConfig {
     listDocs: boolean;
     listPages: boolean; /** Optional so manually constructed resolved configs from older releases remain assignable. */
     listPageSections?: boolean;
-    readPage: boolean;
+    readPage: boolean; /** Optional so manually constructed resolved configs from older releases remain assignable. */
+    readPages?: boolean; /** Optional so manually constructed resolved configs from older releases remain assignable. */
+    submitFeedback?: boolean;
     listTasks?: boolean;
     readTask?: boolean;
     searchDocs: boolean; /** Optional so manually constructed resolved configs from older releases remain assignable. */
@@ -278,7 +283,8 @@ interface DocsMcpResolvedConfig {
     getNavigation: boolean;
     getCodeExamples: boolean;
     getConfigSchema: boolean;
-    getContext: boolean;
+    getContext: boolean; /** Optional so manually constructed resolved configs from older releases remain assignable. */
+    getTrustMetadata?: boolean;
   };
   /** Resolved built-in prompt projection. Optional for legacy constructed values. */
   prompts?: DocsMcpResolvedPromptsConfig;
@@ -320,6 +326,15 @@ interface CreateDocsMcpServerOptions {
   contentChanges?: boolean | DocsAgentContentChangesConfig;
   /** Golden-task definitions available for explicit, expectation-blind prompt projection. */
   evaluations?: boolean | DocsAgentEvaluationsConfig;
+  /** OKF v0.2 trust metadata projected into page output and the trust tool. */
+  okf?: boolean | DocsOkfConfig;
+  /** Explicit deny-by-default OpenAPI operation projection. */
+  openapi?: {
+    config?: DocsOpenApiMcpConfig;
+    document: Record<string, unknown> | (() => Record<string, unknown> | Promise<Record<string, unknown>>);
+  };
+  /** Agent feedback schema and callback used by the opt-in `submit_feedback` tool. */
+  feedback?: boolean | FeedbackConfig;
   /** @internal Shared feed instance keeps HTTP and MCP snapshot history aligned. */
   contentChangeFeed?: DocsContentChangeFeed;
   /** @internal Check interval while at least one 2026 content subscription is open. */